feat: add governed chat agent selection

packages/casan-control-panel/backend/src/chat/chat.controller.ts

@@ -21,4 +21,9 @@ export class ChatController {
   actions(@Headers() headers: Record<string, string | string[] | undefined>) {
     return ok(this.svc.listActions(actorFromHeaders(headers)));
   }
+
+  @Get('agents')
+  agents(@Headers() headers: Record<string, string | string[] | undefined>) {
+    return ok(this.svc.listAgents(actorFromHeaders(headers)));
+  }
 }

packages/casan-control-panel/backend/src/chat/chat.service.ts

@@ -7,6 +7,9 @@ import type { SettingsActor } from '../settings/settings.service.js';
 export interface ChatAskInput {
   message: string;
   chatId?: string;
+  agentId?: string;
+  skillId?: string;
+  delegationLevel?: number;
 }
 
 interface CommandResult {
@@ -18,6 +21,7 @@ interface CommandResult {
 const HARNESS_BIN = join(APP_ROOT, 'packages', 'casan-harness', 'scripts', 'bash');
 const CHAT_CLI = join(HARNESS_BIN, 'chat-turn.py');
 const OPERATOR_CLI = join(HARNESS_BIN, 'chat-operator.py');
+const AGENT_CLI = join(HARNESS_BIN, 'chat-agent-resolver.py');
 const RBAC_CLI = join(HARNESS_BIN, 'rbac-check.py');
 
 function runPython(script: string, args: string[]): CommandResult {
@@ -55,17 +59,25 @@ export class ChatService {
     }
     this.requireRead(actor);
 
-    const res = runPython(CHAT_CLI, [
+    const args = [
       'ask',
       '--message',
       input.message,
       '--actor',
       actor.actor,
+      '--role',
+      actor.role,
+      '--project',
+      actor.project,
       '--chat-id',
       input.chatId || 'chat-default',
       '--tenant',
       actor.tenant,
-    ]);
+    ];
+    if (input.agentId) args.push('--agent', input.agentId);
+    if (input.skillId) args.push('--skill', input.skillId);
+    if (input.delegationLevel !== undefined) args.push('--delegation-level', String(input.delegationLevel));
+    const res = runPython(CHAT_CLI, args);
     const parsed = parseJson<Record<string, any>>(res.stdout);
     if (parsed) {
       return { ...parsed, actor, audit_verify: this.verifyAudit() };
@@ -89,6 +101,14 @@ export class ChatService {
     throw new InternalServerErrorException(res.stderr || res.stdout || 'CHAT_OPERATOR_ACTIONS_FAILED');
   }
 
+  listAgents(actor: SettingsActor) {
+    this.requireRead(actor);
+    const res = runPython(AGENT_CLI, ['list-agents', '--role', actor.role]);
+    const parsed = parseJson<Record<string, any>>(res.stdout);
+    if (parsed) return parsed;
+    throw new InternalServerErrorException(res.stderr || res.stdout || 'CHAT_AGENTS_FAILED');
+  }
+
   private requireRead(actor: SettingsActor) {
     const res = runPython(RBAC_CLI, [
       'check',