teamcast 0.6.0

package/dist/components/policy-fragments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-fragments.js","sourceRoot":"","sources":["../../src/components/policy-fragments.ts"],"names":[],"mappings":"AAgBA,MAAM,gBAAgB,GAA6C;IACjE,eAAe,EAAE;QACf,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,kBAAkB,CAAC;SAC5B;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,OAAO,CAAC;SACjB;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,UAAU,CAAC;SACpB;KACF;IACD,iBAAiB,EAAE;QACjB,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,WAAW,CAAC;SACrB;KACF;IACD,WAAW,EAAE;QACX,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,cAAc,CAAC;SACxB;KACF;IACD,iBAAiB,EAAE;QACjB,WAAW,EAAE;YACX,KAAK,EAAE,CAAC,gBAAgB,CAAC;SAC1B;KACF;IACD,cAAc,EAAE;QACd,WAAW,EAAE;YACX,GAAG,EAAE,CAAC,UAAU,CAAC;SAClB;KACF;IACD,wBAAwB,EAAE;QACxB,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,mBAAmB,CAAC;SAC5B;KACF;IACD,wBAAwB,EAAE;QACxB,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB;KACF;IACD,mBAAmB,EAAE;QACnB,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,cAAc,CAAC;SACvB;KACF;IACD,gBAAgB,EAAE;QAChB,WAAW,EAAE;YACX,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB;KACF;IACD,iBAAiB,EAAE;QACjB,OAAO,EAAE;YACP,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,IAAI;SACpB;KACF;CACF,CAAC;AAEF,SAAS,WAAW,CAAI,IAAqB,EAAE,KAAsB;IACnE,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAkB,EAAE,KAAmB;IAC5D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,WAAW;YAChD,CAAC,CAAC;gBACE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC;gBACrE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC;gBAC/D,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC;gBAClE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,WAAW,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW;gBAC5E,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,IAAI,KAAK,CAAC,WAAW,EAAE,QAAQ;oBACjE,CAAC,CAAC;wBACE,KAAK,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC;wBACzF,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC;wBACnF,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC;qBACvF;oBACH,CAAC,CAAC,SAAS;aACd;YACH,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;YACpC,CAAC,CAAC;gBACE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO;gBACxD,aAAa,EAAE,KAAK,CAAC,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,aAAa;gBAC1E,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAC9F,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO;oBACtD,CAAC,CAAC;wBACE,gBAAgB,EAAE,WAAW,CAC3B,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,EACvC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CACzC;wBACD,iBAAiB,EACf,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,IAAI,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB;qBACxF;oBACH,CAAC,CAAC,SAAS;aACd;YACH,CAAC,CAAC,SAAS;QACb,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;YAC9B,CAAC,CAAC;gBACE,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC;gBACnF,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;gBACtF,YAAY,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC;aAC1F;YACH,CAAC,CAAC,SAAS;QACb,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;YACpC,CAAC,CAAC;gBACE,cAAc,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC;aACzF;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAyB,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAA2C,EAC3C,YAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAe,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,4BAA4B,YAAY,GAAG,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACtC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,OAAO,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC"}

package/dist/core/assertions.d.ts

@@ -0,0 +1,28 @@
+import type { AgentSkill } from './skills.js';
+import type { InstructionBlockKind } from './instructions.js';
+export type PolicyAssertion = {
+    rule: 'require_sandbox_with_execute';
+} | {
+    rule: 'forbid_skill_combination';
+    skills: AgentSkill[];
+} | {
+    rule: 'require_skill';
+    skill: AgentSkill;
+} | {
+    rule: 'deny_skill_for_role';
+    agent: string;
+    skill: AgentSkill;
+} | {
+    rule: 'max_agents';
+    count: number;
+} | {
+    rule: 'require_instruction_block';
+    kind: InstructionBlockKind;
+} | {
+    rule: 'require_delegation_chain';
+} | {
+    rule: 'no_unrestricted_execute';
+};
+export declare const ASSERTION_RULES: readonly ["require_sandbox_with_execute", "forbid_skill_combination", "require_skill", "deny_skill_for_role", "max_agents", "require_instruction_block", "require_delegation_chain", "no_unrestricted_execute"];
+export type AssertionRule = typeof ASSERTION_RULES[number];
+//# sourceMappingURL=assertions.d.ts.map

package/dist/core/assertions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertions.d.ts","sourceRoot":"","sources":["../../src/core/assertions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,8BAA8B,CAAA;CAAE,GACxC;IAAE,IAAI,EAAE,0BAA0B,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC5C;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,2BAA2B,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,GACjE;IAAE,IAAI,EAAE,0BAA0B,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,yBAAyB,CAAA;CAAE,CAAC;AAExC,eAAO,MAAM,eAAe,iNASlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC"}

package/dist/core/assertions.js

@@ -0,0 +1,11 @@
+export const ASSERTION_RULES = [
+    'require_sandbox_with_execute',
+    'forbid_skill_combination',
+    'require_skill',
+    'deny_skill_for_role',
+    'max_agents',
+    'require_instruction_block',
+    'require_delegation_chain',
+    'no_unrestricted_execute',
+];
+//# sourceMappingURL=assertions.js.map

package/dist/core/assertions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertions.js","sourceRoot":"","sources":["../../src/core/assertions.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,8BAA8B;IAC9B,0BAA0B;IAC1B,eAAe;IACf,qBAAqB;IACrB,YAAY;IACZ,2BAA2B;IAC3B,0BAA0B;IAC1B,yBAAyB;CACjB,CAAC"}

package/dist/core/guards.d.ts

@@ -0,0 +1,11 @@
+import type { CoreTeam } from './types.js';
+/**
+ * Type guard: checks whether the given value is a normalized CoreTeam
+ * (as opposed to a raw TeamCastManifest from YAML).
+ *
+ * The distinguishing feature of CoreTeam is that each agent entry carries
+ * a `runtime` block, which is only present after full normalization and
+ * preset resolution.  Raw manifests loaded from YAML never have this field.
+ */
+export declare function isCoreTeam(value: unknown): value is CoreTeam;
+//# sourceMappingURL=guards.d.ts.map

package/dist/core/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/core/guards.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,QAAQ,CAO5D"}

package/dist/core/guards.js

@@ -0,0 +1,20 @@
+/**
+ * Type guard: checks whether the given value is a normalized CoreTeam
+ * (as opposed to a raw TeamCastManifest from YAML).
+ *
+ * The distinguishing feature of CoreTeam is that each agent entry carries
+ * a `runtime` block, which is only present after full normalization and
+ * preset resolution.  Raw manifests loaded from YAML never have this field.
+ */
+export function isCoreTeam(value) {
+    if (value === null || typeof value !== 'object')
+        return false;
+    const obj = value;
+    if (!obj.agents || typeof obj.agents !== 'object')
+        return false;
+    const firstAgent = Object.values(obj.agents)[0];
+    if (!firstAgent || typeof firstAgent !== 'object')
+        return false;
+    return 'runtime' in firstAgent;
+}
+//# sourceMappingURL=guards.js.map

package/dist/core/guards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.js","sourceRoot":"","sources":["../../src/core/guards.ts"],"names":[],"mappings":"AAEA;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,SAAS,IAAK,UAAsC,CAAC;AAC9D,CAAC"}

package/dist/core/index.d.ts

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './skills.js';
+export * from './instructions.js';
+export * from './assertions.js';
+export * from './guards.js';
+export * from './permissions.js';
+export * from './skill-resolver.js';
+export { evaluatePolicyAssertions } from './policy-evaluator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/core/index.js

@@ -0,0 +1,9 @@
+export * from './types.js';
+export * from './skills.js';
+export * from './instructions.js';
+export * from './assertions.js';
+export * from './guards.js';
+export * from './permissions.js';
+export * from './skill-resolver.js';
+export { evaluatePolicyAssertions } from './policy-evaluator.js';
+//# sourceMappingURL=index.js.map

package/dist/core/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/core/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/core/instructions.d.ts

@@ -0,0 +1,10 @@
+export type InstructionBlockKind = 'behavior' | 'workflow' | 'safety' | 'style' | 'delegation';
+export interface InstructionBlock {
+    kind: InstructionBlockKind;
+    title?: string;
+    content: string;
+}
+export declare const INSTRUCTION_BLOCK_KINDS: InstructionBlockKind[];
+export declare function normalizeInstructionBlocks(blocks: InstructionBlock[] | undefined): InstructionBlock[];
+export declare function renderInstructionBlocks(blocks: InstructionBlock[] | undefined): string | undefined;
+//# sourceMappingURL=instructions.d.ts.map

package/dist/core/instructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.d.ts","sourceRoot":"","sources":["../../src/core/instructions.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,UAAU,GACV,UAAU,GACV,QAAQ,GACR,OAAO,GACP,YAAY,CAAC;AAEjB,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,uBAAuB,EAAE,oBAAoB,EAMzD,CAAC;AAEF,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,GAAG,gBAAgB,EAAE,CAUrG;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAclG"}

package/dist/core/instructions.js

@@ -0,0 +1,33 @@
+export const INSTRUCTION_BLOCK_KINDS = [
+    'behavior',
+    'workflow',
+    'safety',
+    'style',
+    'delegation',
+];
+export function normalizeInstructionBlocks(blocks) {
+    if (!blocks?.length)
+        return [];
+    return blocks
+        .map((block) => ({
+        kind: block.kind,
+        title: block.title?.trim() || undefined,
+        content: block.content.trim(),
+    }))
+        .filter((block) => block.content.length > 0);
+}
+export function renderInstructionBlocks(blocks) {
+    const normalized = normalizeInstructionBlocks(blocks);
+    if (normalized.length === 0)
+        return undefined;
+    return normalized
+        .map((block) => {
+        if (!block.title) {
+            return block.content;
+        }
+        return `## ${block.title}\n\n${block.content}`;
+    })
+        .join('\n\n')
+        .trim();
+}
+//# sourceMappingURL=instructions.js.map

package/dist/core/instructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instructions.js","sourceRoot":"","sources":["../../src/core/instructions.ts"],"names":[],"mappings":"AAaA,MAAM,CAAC,MAAM,uBAAuB,GAA2B;IAC7D,UAAU;IACV,UAAU;IACV,QAAQ;IACR,OAAO;IACP,YAAY;CACb,CAAC;AAEF,MAAM,UAAU,0BAA0B,CAAC,MAAsC;IAC/E,IAAI,CAAC,MAAM,EAAE,MAAM;QAAE,OAAO,EAAE,CAAC;IAE/B,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACf,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAS;QACvC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;KAC9B,CAAC,CAAC;SACF,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAsC;IAC5E,MAAM,UAAU,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9C,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QAED,OAAO,MAAM,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IACjD,CAAC,CAAC;SACD,IAAI,CAAC,MAAM,CAAC;SACZ,IAAI,EAAE,CAAC;AACZ,CAAC"}

package/dist/core/permissions.d.ts

@@ -0,0 +1,10 @@
+import type { AbstractPermission } from './types.js';
+export declare const ABSTRACT_PERMISSIONS: AbstractPermission[];
+type PermissionBucket = 'allow' | 'ask' | 'deny';
+export declare function isAbstractPermission(value: string): value is AbstractPermission;
+export declare function normalizePermissionTokens(tokens: string[] | undefined, bucket: PermissionBucket): {
+    abstract: AbstractPermission[] | undefined;
+    raw: string[] | undefined;
+};
+export {};
+//# sourceMappingURL=permissions.d.ts.map

package/dist/core/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../src/core/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,oBAAoB,EAAE,kBAAkB,EAYpD,CAAC;AAEF,KAAK,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AA8BjD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,kBAAkB,CAE/E;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,EAC5B,MAAM,EAAE,gBAAgB,GACvB;IAAE,QAAQ,EAAE,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;CAAE,CA2B3E"}

package/dist/core/permissions.js

@@ -0,0 +1,67 @@
+export const ABSTRACT_PERMISSIONS = [
+    'project.commands',
+    'tests',
+    'git.read',
+    'git.write',
+    'package.exec',
+    'security.audit',
+    'git.push',
+    'destructive-shell',
+    'downloads',
+    'dynamic-exec',
+    'env.write',
+];
+const LEGACY_PERMISSION_RULE_MAP = {
+    allow: {
+        'Bash(npm run *)': 'project.commands',
+        'Bash(npm run)': 'project.commands',
+        'Bash(npm test *)': 'tests',
+        'Bash(npm test)': 'tests',
+        'Bash(git status)': 'git.read',
+        'Bash(git diff *)': 'git.read',
+        'Bash(git add *)': 'git.write',
+        'Bash(git commit *)': 'git.write',
+        'Bash(npx *)': 'package.exec',
+        'Bash(npm audit)': 'security.audit',
+    },
+    ask: {
+        'Bash(git push *)': 'git.push',
+    },
+    deny: {
+        'Bash(rm -rf *)': 'destructive-shell',
+        'Bash(git push --force *)': 'destructive-shell',
+        'Bash(curl *)': 'downloads',
+        'Bash(wget *)': 'downloads',
+        'Bash(eval *)': 'dynamic-exec',
+        'Bash(exec *)': 'dynamic-exec',
+        'Write(.env*)': 'env.write',
+        'Edit(.env*)': 'env.write',
+    },
+};
+export function isAbstractPermission(value) {
+    return ABSTRACT_PERMISSIONS.includes(value);
+}
+export function normalizePermissionTokens(tokens, bucket) {
+    if (!tokens?.length) {
+        return { abstract: undefined, raw: undefined };
+    }
+    const abstract = new Set();
+    const raw = new Set();
+    for (const token of tokens) {
+        if (isAbstractPermission(token)) {
+            abstract.add(token);
+            continue;
+        }
+        const mapped = LEGACY_PERMISSION_RULE_MAP[bucket][token];
+        if (mapped) {
+            abstract.add(mapped);
+            continue;
+        }
+        raw.add(token);
+    }
+    return {
+        abstract: abstract.size > 0 ? [...abstract] : undefined,
+        raw: raw.size > 0 ? [...raw] : undefined,
+    };
+}
+//# sourceMappingURL=permissions.js.map

package/dist/core/permissions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../../src/core/permissions.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD,kBAAkB;IAClB,OAAO;IACP,UAAU;IACV,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,UAAU;IACV,mBAAmB;IACnB,WAAW;IACX,cAAc;IACd,WAAW;CACZ,CAAC;AAIF,MAAM,0BAA0B,GAAiE;IAC/F,KAAK,EAAE;QACL,iBAAiB,EAAE,kBAAkB;QACrC,eAAe,EAAE,kBAAkB;QACnC,kBAAkB,EAAE,OAAO;QAC3B,gBAAgB,EAAE,OAAO;QACzB,kBAAkB,EAAE,UAAU;QAC9B,kBAAkB,EAAE,UAAU;QAC9B,iBAAiB,EAAE,WAAW;QAC9B,oBAAoB,EAAE,WAAW;QACjC,aAAa,EAAE,cAAc;QAC7B,iBAAiB,EAAE,gBAAgB;KACpC;IACD,GAAG,EAAE;QACH,kBAAkB,EAAE,UAAU;KAC/B;IACD,IAAI,EAAE;QACJ,gBAAgB,EAAE,mBAAmB;QACrC,0BAA0B,EAAE,mBAAmB;QAC/C,cAAc,EAAE,WAAW;QAC3B,cAAc,EAAE,WAAW;QAC3B,cAAc,EAAE,cAAc;QAC9B,cAAc,EAAE,cAAc;QAC9B,cAAc,EAAE,WAAW;QAC3B,aAAa,EAAE,WAAW;KAC3B;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,OAAO,oBAAoB,CAAC,QAAQ,CAAC,KAA2B,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA4B,EAC5B,MAAwB;IAExB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACjD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAE9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,MAAM,EAAE,CAAC;YACX,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACvD,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;KACzC,CAAC;AACJ,CAAC"}

package/dist/core/policy-evaluator.d.ts

@@ -0,0 +1,5 @@
+import type { CoreTeam } from './types.js';
+import type { ValidationResult } from '../validator/types.js';
+import { type SkillToolMap } from './skill-resolver.js';
+export declare function evaluatePolicyAssertions(team: CoreTeam, skillMap: SkillToolMap): ValidationResult[];
+//# sourceMappingURL=policy-evaluator.d.ts.map

package/dist/core/policy-evaluator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-evaluator.d.ts","sourceRoot":"","sources":["../../src/core/policy-evaluator.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAa,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAI9D,OAAO,EAA+B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAErF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,GAAG,gBAAgB,EAAE,CASnG"}

package/dist/core/policy-evaluator.js

@@ -0,0 +1,161 @@
+import { agentHasSkill, expandSkills } from './skill-resolver.js';
+export function evaluatePolicyAssertions(team, skillMap) {
+    const assertions = team.policies?.assertions ?? [];
+    const results = [];
+    for (const assertion of assertions) {
+        results.push(...evaluateOne(assertion, team, skillMap));
+    }
+    return results;
+}
+function evaluateOne(assertion, team, skillMap) {
+    switch (assertion.rule) {
+        case 'require_sandbox_with_execute':
+            return checkRequireSandboxWithExecute(team, skillMap);
+        case 'forbid_skill_combination':
+            return checkForbidSkillCombination(assertion.skills, team, skillMap);
+        case 'require_skill':
+            return checkRequireSkill(assertion.skill, team, skillMap);
+        case 'deny_skill_for_role':
+            return checkDenySkillForRole(assertion.agent, assertion.skill, team, skillMap);
+        case 'max_agents':
+            return checkMaxAgents(assertion.count, team);
+        case 'require_instruction_block':
+            return checkRequireInstructionBlock(assertion.kind, team);
+        case 'require_delegation_chain':
+            return checkRequireDelegationChain(team, skillMap);
+        case 'no_unrestricted_execute':
+            return checkNoUnrestrictedExecute(team, skillMap);
+    }
+}
+function checkRequireSandboxWithExecute(team, skillMap) {
+    const results = [];
+    for (const agent of Object.values(team.agents)) {
+        if (agentHasSkill(agent.runtime.tools ?? [], 'execute', skillMap)) {
+            if (team.policies?.sandbox?.enabled !== true) {
+                results.push({
+                    severity: 'error',
+                    category: 'policy',
+                    message: `Agent "${agent.id}" uses Bash but sandbox is not enabled (require_sandbox_with_execute).`,
+                    agent: agent.id,
+                });
+            }
+        }
+    }
+    return results;
+}
+function checkForbidSkillCombination(skills, team, skillMap) {
+    const results = [];
+    const expandedPerSkill = skills.map((skill) => expandSkills([skill], skillMap));
+    for (const agent of Object.values(team.agents)) {
+        const agentTools = agent.runtime.tools ?? [];
+        const hasAll = expandedPerSkill.every((toolsForSkill) => toolsForSkill.some((tool) => agentTools.includes(tool)));
+        if (hasAll) {
+            results.push({
+                severity: 'error',
+                category: 'policy',
+                message: `Agent "${agent.id}" has forbidden skill combination: [${skills.join(', ')}].`,
+                agent: agent.id,
+            });
+        }
+    }
+    return results;
+}
+function checkRequireSkill(skill, team, skillMap) {
+    const results = [];
+    const requiredTools = expandSkills([skill], skillMap);
+    for (const agent of Object.values(team.agents)) {
+        const agentTools = agent.runtime.tools ?? [];
+        const hasAny = requiredTools.some((tool) => agentTools.includes(tool));
+        if (!hasAny) {
+            results.push({
+                severity: 'error',
+                category: 'policy',
+                message: `Agent "${agent.id}" is missing required skill "${skill}" (require_skill).`,
+                agent: agent.id,
+            });
+        }
+    }
+    return results;
+}
+function checkDenySkillForRole(agentName, skill, team, skillMap) {
+    const results = [];
+    const agent = team.agents[agentName];
+    if (!agent)
+        return results;
+    const deniedTools = expandSkills([skill], skillMap);
+    const agentTools = agent.runtime.tools ?? [];
+    const hasForbidden = deniedTools.some((tool) => agentTools.includes(tool));
+    if (hasForbidden) {
+        results.push({
+            severity: 'error',
+            category: 'policy',
+            message: `Agent "${agentName}" has denied skill "${skill}" (deny_skill_for_role).`,
+            agent: agentName,
+        });
+    }
+    return results;
+}
+function checkMaxAgents(count, team) {
+    const agentCount = Object.keys(team.agents).length;
+    if (agentCount > count) {
+        return [
+            {
+                severity: 'error',
+                category: 'policy',
+                message: `Team has ${agentCount} agents but max_agents is ${count}.`,
+            },
+        ];
+    }
+    return [];
+}
+function checkRequireInstructionBlock(kind, team) {
+    const results = [];
+    for (const agent of Object.values(team.agents)) {
+        const hasBlock = agent.instructions.some((block) => block.kind === kind);
+        if (!hasBlock) {
+            results.push({
+                severity: 'error',
+                category: 'policy',
+                message: `Agent "${agent.id}" is missing required instruction block of kind "${kind}" (require_instruction_block).`,
+                agent: agent.id,
+            });
+        }
+    }
+    return results;
+}
+function checkRequireDelegationChain(team, skillMap) {
+    const results = [];
+    for (const agent of Object.values(team.agents)) {
+        if (agentHasSkill(agent.runtime.tools ?? [], 'delegate', skillMap)) {
+            const hasHandoffs = (agent.metadata?.handoffs?.length ?? 0) > 0;
+            if (!hasHandoffs) {
+                results.push({
+                    severity: 'warning',
+                    category: 'policy',
+                    message: `Agent "${agent.id}" has delegation capability (Agent tool) but no handoffs defined (require_delegation_chain).`,
+                    agent: agent.id,
+                });
+            }
+        }
+    }
+    return results;
+}
+function checkNoUnrestrictedExecute(team, skillMap) {
+    const results = [];
+    const sandboxEnabled = team.policies?.sandbox?.enabled === true;
+    for (const agent of Object.values(team.agents)) {
+        if (agentHasSkill(agent.runtime.tools ?? [], 'execute', skillMap)) {
+            const hasDisallowedTools = (agent.runtime.disallowedTools?.length ?? 0) > 0;
+            if (!sandboxEnabled && !hasDisallowedTools) {
+                results.push({
+                    severity: 'error',
+                    category: 'policy',
+                    message: `Agent "${agent.id}" has unrestricted execute (Bash) without sandbox or disallowed tools (no_unrestricted_execute).`,
+                    agent: agent.id,
+                });
+            }
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=policy-evaluator.js.map

package/dist/core/policy-evaluator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-evaluator.js","sourceRoot":"","sources":["../../src/core/policy-evaluator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAC;AAErF,MAAM,UAAU,wBAAwB,CAAC,IAAc,EAAE,QAAsB;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC;IACnD,MAAM,OAAO,GAAuB,EAAE,CAAC;IAEvC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,SAA0B,EAAE,IAAc,EAAE,QAAsB;IACrF,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,8BAA8B;YACjC,OAAO,8BAA8B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACxD,KAAK,0BAA0B;YAC7B,OAAO,2BAA2B,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvE,KAAK,eAAe;YAClB,OAAO,iBAAiB,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5D,KAAK,qBAAqB;YACxB,OAAO,qBAAqB,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjF,KAAK,YAAY;YACf,OAAO,cAAc,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/C,KAAK,2BAA2B;YAC9B,OAAO,4BAA4B,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5D,KAAK,0BAA0B;YAC7B,OAAO,2BAA2B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrD,KAAK,yBAAyB;YAC5B,OAAO,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED,SAAS,8BAA8B,CAAC,IAAc,EAAE,QAAsB;IAC5E,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;gBAC7C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,wEAAwE;oBACnG,KAAK,EAAE,KAAK,CAAC,EAAE;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,MAAoB,EAAE,IAAc,EAAE,QAAsB;IAC/F,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAEhF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,EAAE,CACtD,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CACxD,CAAC;QACF,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,uCAAuC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBACvF,KAAK,EAAE,KAAK,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB,EAAE,IAAc,EAAE,QAAsB;IAClF,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,aAAa,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEtD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,gCAAgC,KAAK,oBAAoB;gBACpF,KAAK,EAAE,KAAK,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,KAAiB,EAAE,IAAc,EAAE,QAAsB;IACzG,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,KAAK,GAA0B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC;IAE3B,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,QAAQ;YAClB,OAAO,EAAE,UAAU,SAAS,uBAAuB,KAAK,0BAA0B;YAClF,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,IAAc;IACnD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,YAAY,UAAU,6BAA6B,KAAK,GAAG;aACrE;SACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,4BAA4B,CAAC,IAA0B,EAAE,IAAc;IAC9E,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,oDAAoD,IAAI,gCAAgC;gBACnH,KAAK,EAAE,KAAK,CAAC,EAAE;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B,CAAC,IAAc,EAAE,QAAsB;IACzE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAChE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,8FAA8F;oBACzH,KAAK,EAAE,KAAK,CAAC,EAAE;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAc,EAAE,QAAsB;IACxE,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,cAAc,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;IAEhE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YAClE,MAAM,kBAAkB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5E,IAAI,CAAC,cAAc,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAC3C,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,QAAQ,EAAE,QAAQ;oBAClB,OAAO,EAAE,UAAU,KAAK,CAAC,EAAE,kGAAkG;oBAC7H,KAAK,EAAE,KAAK,CAAC,EAAE;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/core/skill-resolver.d.ts

@@ -0,0 +1,8 @@
+import type { AgentSkill } from './skills.js';
+/** A skill-to-tool mapping provided by a renderer */
+export type SkillToolMap = Record<AgentSkill, string[]>;
+/** Expand abstract skills to platform tools using the provided mapping */
+export declare function expandSkills(skills: AgentSkill[], mapping: SkillToolMap): string[];
+/** Check if an agent (by its resolved tools) has a specific skill */
+export declare function agentHasSkill(agentTools: string[], skill: AgentSkill, mapping: SkillToolMap): boolean;
+//# sourceMappingURL=skill-resolver.d.ts.map

package/dist/core/skill-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolver.d.ts","sourceRoot":"","sources":["../../src/core/skill-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;AAExD,0EAA0E;AAC1E,wBAAgB,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,YAAY,GAAG,MAAM,EAAE,CAOlF;AAED,qEAAqE;AACrE,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CAGrG"}

package/dist/core/skill-resolver.js

@@ -0,0 +1,17 @@
+/** Expand abstract skills to platform tools using the provided mapping */
+export function expandSkills(skills, mapping) {
+    const toolSet = new Set();
+    for (const skill of skills) {
+        const tools = mapping[skill];
+        if (tools)
+            for (const tool of tools)
+                toolSet.add(tool);
+    }
+    return [...toolSet];
+}
+/** Check if an agent (by its resolved tools) has a specific skill */
+export function agentHasSkill(agentTools, skill, mapping) {
+    const requiredTools = mapping[skill];
+    return requiredTools.length > 0 && requiredTools.some((t) => agentTools.includes(t));
+}
+//# sourceMappingURL=skill-resolver.js.map

package/dist/core/skill-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-resolver.js","sourceRoot":"","sources":["../../src/core/skill-resolver.ts"],"names":[],"mappings":"AAKA,0EAA0E;AAC1E,MAAM,UAAU,YAAY,CAAC,MAAoB,EAAE,OAAqB;IACtE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,KAAK;YAAE,KAAK,MAAM,IAAI,IAAI,KAAK;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;AACtB,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,aAAa,CAAC,UAAoB,EAAE,KAAiB,EAAE,OAAqB;IAC1F,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC"}

package/dist/core/skills.d.ts

@@ -0,0 +1,4 @@
+export declare const AGENT_SKILLS: readonly ["read_files", "write_files", "execute", "search", "web", "delegate", "interact", "notebook"];
+export type AgentSkill = typeof AGENT_SKILLS[number];
+export declare function isAgentSkill(value: string): value is AgentSkill;
+//# sourceMappingURL=skills.d.ts.map

package/dist/core/skills.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.d.ts","sourceRoot":"","sources":["../../src/core/skills.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,YAAY,wGASf,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAErD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D"}

package/dist/core/skills.js

@@ -0,0 +1,14 @@
+export const AGENT_SKILLS = [
+    'read_files',
+    'write_files',
+    'execute',
+    'search',
+    'web',
+    'delegate',
+    'interact',
+    'notebook',
+];
+export function isAgentSkill(value) {
+    return AGENT_SKILLS.includes(value);
+}
+//# sourceMappingURL=skills.js.map

package/dist/core/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../src/core/skills.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,YAAY;IACZ,aAAa;IACb,SAAS;IACT,QAAQ;IACR,KAAK;IACL,UAAU;IACV,UAAU;IACV,UAAU;CACF,CAAC;AAIX,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAQ,YAAkC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,117 @@
+import type { InstructionBlock } from './instructions.js';
+import type { PolicyAssertion } from './assertions.js';
+export type ModelAlias = 'sonnet' | 'haiku' | 'opus' | 'inherit' | string;
+export type PermissionMode = 'default' | 'acceptEdits' | 'bypassPermissions' | 'plan' | 'dontAsk';
+export type AbstractPermission = 'project.commands' | 'tests' | 'git.read' | 'git.write' | 'package.exec' | 'security.audit' | 'git.push' | 'destructive-shell' | 'downloads' | 'dynamic-exec' | 'env.write';
+export interface McpServerConfig {
+    type?: string;
+    command?: string;
+    args?: string[];
+    env?: Record<string, string>;
+    url?: string;
+    headers?: Record<string, string>;
+    [key: string]: unknown;
+}
+export interface HookEntry {
+    matcher: string;
+    command: string;
+}
+export interface AgentRuntime {
+    /** Effective model identifier after preset and default resolution. */
+    model?: ModelAlias;
+    /**
+     * Allowed tools. Uses string[] to keep the core platform-agnostic.
+     * The Claude renderer layer casts these to CanonicalTool as needed.
+     */
+    tools?: string[];
+    /**
+     * Disallowed tools. Uses string[] to keep the core platform-agnostic.
+     */
+    disallowedTools?: string[];
+    /**
+     * Skill documentation references (free-form strings, e.g. 'test-first').
+     * These are distinct from AgentSkill abstract capability values, which appear
+     * in the tools[] array and get expanded to CanonicalTool[] during normalization.
+     * Named skillDocs to disambiguate from AgentSkill abstract capabilities.
+     */
+    skillDocs?: string[];
+    maxTurns?: number;
+    mcpServers?: McpServerConfig[];
+    permissionMode?: PermissionMode;
+    background?: boolean;
+}
+export interface AgentMetadata {
+    handoffs?: string[];
+    role?: string;
+    template?: string;
+}
+export interface CoreAgent {
+    id: string;
+    description: string;
+    runtime: AgentRuntime;
+    instructions: InstructionBlock[];
+    metadata?: AgentMetadata;
+}
+export interface PermissionsConfig {
+    allow?: AbstractPermission[];
+    ask?: AbstractPermission[];
+    deny?: AbstractPermission[];
+    defaultMode?: 'default' | 'acceptEdits';
+    rawRules?: {
+        allow?: string[];
+        ask?: string[];
+        deny?: string[];
+    };
+}
+export interface SandboxConfig {
+    enabled?: boolean;
+    autoAllowBash?: boolean;
+    excludedCommands?: string[];
+    network?: {
+        allowUnixSockets?: string[];
+        allowLocalBinding?: boolean;
+    };
+}
+export interface TeamPolicies {
+    permissions?: PermissionsConfig;
+    sandbox?: SandboxConfig;
+    hooks?: {
+        preToolUse?: HookEntry[];
+        postToolUse?: HookEntry[];
+        notification?: HookEntry[];
+    };
+    network?: {
+        allowedDomains?: string[];
+    };
+    assertions?: PolicyAssertion[];
+}
+export interface TeamSettings {
+    defaultModel?: ModelAlias;
+    generateDocs?: boolean;
+    generateLocalSettings?: boolean;
+}
+export interface PresetMetadata {
+    author?: string;
+    tags?: string[];
+    minVersion?: string;
+}
+export interface ProjectConfig {
+    name: string;
+    preset?: string;
+    description?: string;
+}
+/**
+ * A fully-normalized team manifest used internally after all
+ * legacy-format coercion, default application, and preset resolution.
+ * Agents carry a `runtime` block, which distinguishes this type from
+ * the raw `TeamCastManifest` loaded directly from YAML.
+ */
+export interface CoreTeam {
+    version: '1' | '2';
+    project: ProjectConfig;
+    agents: Record<string, CoreAgent>;
+    policies?: TeamPolicies;
+    settings?: TeamSettings;
+    presetMeta?: PresetMetadata;
+}
+//# sourceMappingURL=types.d.ts.map