4runr-os 2.9.128 → 2.9.129

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "4runr-os",
-  "version": "2.9.128",
+  "version": "2.9.129",
   "type": "module",
-  "description": "4Runr AI Agent OS - Secure terminal interface for AI agents. v2.9.128: Gateway autostart timeout 20s → 65s + progress feedback. Prior: mk3-tui chrono fix, Portal activity log hints, Gateway shutdown order. ⚠️ Pre-MVP / Development Phase",
+  "description": "4Runr AI Agent OS - Secure terminal interface for AI agents. v2.9.129: CRITICAL FIX - Bundle @4runr/* packages so Gateway can start (was crashing on missing imports). Prior: 65s autostart timeout, Portal activity log, Gateway shutdown order. ⚠️ Pre-MVP / Development Phase",
   "main": "dist/index.js",
   "bin": {
     "4runr": "dist/index.js",
@@ -84,6 +84,9 @@
     "mk3-tui/bin/**/*",
     "mk3-tui/binaries/**/*",
     "apps/gateway/**/*",
+    "packages/shared/dist/**/*",
+    "packages/sentinel/dist/**/*",
+    "packages/shield/dist/**/*",
     "packages/middleware/idempotency/idempotency.js",
     "packages/adapters/redis/IdempotencyStore.js",
     "scripts/setup.js",

package/packages/sentinel/dist/adapters/audit.d.ts

@@ -0,0 +1,33 @@
+export interface AuditRecord {
+    id: string;
+    timestamp: number;
+    action: string;
+    runId: string;
+    reason?: string;
+    config: Record<string, any>;
+    metadata?: Record<string, any>;
+}
+export interface AuditAdapter {
+    logAudit(record: AuditRecord): Promise<void>;
+    logKill(runId: string, reason: string, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+    logPolicyViolation(runId: string, policy: string, threshold: any, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+}
+export declare class FileAuditAdapter implements AuditAdapter {
+    private logFile;
+    private fs;
+    constructor(logFile?: string);
+    logAudit(record: AuditRecord): Promise<void>;
+    logKill(runId: string, reason: string, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+    logPolicyViolation(runId: string, policy: string, threshold: any, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+    private formatLogEntry;
+    private generateId;
+}
+export declare class ConsoleAuditAdapter implements AuditAdapter {
+    logAudit(record: AuditRecord): Promise<void>;
+    logKill(runId: string, reason: string, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+    logPolicyViolation(runId: string, policy: string, threshold: any, config: Record<string, any>, metadata?: Record<string, any>): Promise<void>;
+    private generateId;
+}
+export declare function createAuditAdapter(): AuditAdapter;
+export declare const auditAdapter: AuditAdapter;
+//# sourceMappingURL=audit.d.ts.map

package/packages/sentinel/dist/adapters/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/adapters/audit.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/I;AAKD,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,EAAE,CAAM;gBAEJ,OAAO,GAAE,MAA6B;IAY5C,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5C,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAclH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBnJ,OAAO,CAAC,cAAc;IAOtB,OAAO,CAAC,UAAU;CAGnB;AAKD,qBAAa,mBAAoB,YAAW,YAAY;IAChD,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO5C,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAalH,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnJ,OAAO,CAAC,UAAU;CAGnB;AAKD,wBAAgB,kBAAkB,IAAI,YAAY,CAUjD;AAGD,eAAO,MAAM,YAAY,cAAuB,CAAC"}

package/packages/sentinel/dist/adapters/audit.js

@@ -0,0 +1,118 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditAdapter = exports.ConsoleAuditAdapter = exports.FileAuditAdapter = void 0;
+exports.createAuditAdapter = createAuditAdapter;
+class FileAuditAdapter {
+    constructor(logFile = 'sentinel_audit.log') {
+        this.logFile = logFile;
+        try {
+            this.fs = require('fs').promises;
+        }
+        catch (error) {
+            console.warn('File system not available, falling back to console audit');
+            this.fs = null;
+        }
+    }
+    async logAudit(record) {
+        const logEntry = this.formatLogEntry(record);
+        if (this.fs) {
+            try {
+                await this.fs.appendFile(this.logFile, logEntry + '\n');
+            }
+            catch (error) {
+                console.error('Failed to write to audit log:', error);
+                console.log('Audit entry:', logEntry);
+            }
+        }
+        else {
+            console.log('Audit entry:', logEntry);
+        }
+    }
+    async logKill(runId, reason, config, metadata) {
+        const record = {
+            id: this.generateId(),
+            timestamp: Date.now(),
+            action: 'kill',
+            runId,
+            reason,
+            config,
+            ...(metadata !== undefined && { metadata })
+        };
+        await this.logAudit(record);
+    }
+    async logPolicyViolation(runId, policy, threshold, config, metadata) {
+        const record = {
+            id: this.generateId(),
+            timestamp: Date.now(),
+            action: 'policy_violation',
+            runId,
+            reason: `Policy ${policy} exceeded threshold ${threshold}`,
+            config,
+            metadata: {
+                policy,
+                threshold,
+                ...metadata
+            }
+        };
+        await this.logAudit(record);
+    }
+    formatLogEntry(record) {
+        return JSON.stringify({
+            ...record,
+            timestamp: new Date(record.timestamp).toISOString()
+        });
+    }
+    generateId() {
+        return `audit_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+    }
+}
+exports.FileAuditAdapter = FileAuditAdapter;
+class ConsoleAuditAdapter {
+    async logAudit(record) {
+        console.log('🔒 Sentinel Audit:', {
+            ...record,
+            timestamp: new Date(record.timestamp).toISOString()
+        });
+    }
+    async logKill(runId, reason, config, metadata) {
+        const record = {
+            id: this.generateId(),
+            timestamp: Date.now(),
+            action: 'kill',
+            runId,
+            reason,
+            config,
+            ...(metadata !== undefined && { metadata })
+        };
+        await this.logAudit(record);
+    }
+    async logPolicyViolation(runId, policy, threshold, config, metadata) {
+        await this.logAudit({
+            id: this.generateId(),
+            timestamp: Date.now(),
+            action: 'policy_violation',
+            runId,
+            reason: `Policy ${policy} exceeded threshold ${threshold}`,
+            config,
+            metadata: {
+                policy,
+                threshold,
+                ...metadata
+            }
+        });
+    }
+    generateId() {
+        return `audit_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;
+    }
+}
+exports.ConsoleAuditAdapter = ConsoleAuditAdapter;
+function createAuditAdapter() {
+    const sink = process.env['SENTINEL_AUDIT_SINK'];
+    const file = process.env['SENTINEL_AUDIT_FILE'] || 'packages/sentinel/sentinel_audit.log';
+    if (sink === 'file') {
+        return new FileAuditAdapter(file);
+    }
+    return new ConsoleAuditAdapter();
+}
+exports.auditAdapter = createAuditAdapter();
+//# sourceMappingURL=audit.js.map

package/packages/sentinel/dist/adapters/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/adapters/audit.ts"],"names":[],"mappings":";;;AAmJA,gDAUC;AArID,MAAa,gBAAgB;IAI3B,YAAY,UAAkB,oBAAoB;QAChD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QAGvB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACzE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,MAAmB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAE7C,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC;gBACtD,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,MAA2B,EAAE,QAA8B;QACtG,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,KAAK;YACL,MAAM;YACN,MAAM;YACN,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,MAAc,EAAE,SAAc,EAAE,MAA2B,EAAE,QAA8B;QACjI,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,kBAAkB;YAC1B,KAAK;YACL,MAAM,EAAE,UAAU,MAAM,uBAAuB,SAAS,EAAE;YAC1D,MAAM;YACN,QAAQ,EAAE;gBACR,MAAM;gBACN,SAAS;gBACT,GAAG,QAAQ;aACZ;SACF,CAAC;QAEF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAEO,cAAc,CAAC,MAAmB;QACxC,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;IAEO,UAAU;QAChB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAzED,4CAyEC;AAKD,MAAa,mBAAmB;IAC9B,KAAK,CAAC,QAAQ,CAAC,MAAmB;QAChC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE;YAChC,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;SACpD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,MAA2B,EAAE,QAA8B;QACtG,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM;YACd,KAAK;YACL,MAAM;YACN,MAAM;YACN,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa,EAAE,MAAc,EAAE,SAAc,EAAE,MAA2B,EAAE,QAA8B;QACjI,MAAM,IAAI,CAAC,QAAQ,CAAC;YAClB,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,kBAAkB;YAC1B,KAAK;YACL,MAAM,EAAE,UAAU,MAAM,uBAAuB,SAAS,EAAE;YAC1D,MAAM;YACN,QAAQ,EAAE;gBACR,MAAM;gBACN,SAAS;gBACT,GAAG,QAAQ;aACZ;SACF,CAAC,CAAC;IACL,CAAC;IAEO,UAAU;QAChB,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAC1E,CAAC;CACF;AAxCD,kDAwCC;AAKD,SAAgB,kBAAkB;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,sCAAsC,CAAC;IAE1F,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAGD,OAAO,IAAI,mBAAmB,EAAE,CAAC;AACnC,CAAC;AAGY,QAAA,YAAY,GAAG,kBAAkB,EAAE,CAAC"}

package/packages/sentinel/dist/adapters/cancel-adapter.d.ts

@@ -0,0 +1,20 @@
+export interface CancelResult {
+    success: boolean;
+    reason?: string;
+    timestamp: number;
+}
+export interface CancelAdapter {
+    cancelRun(runId: string, reason: string): Promise<CancelResult>;
+}
+export declare class DefaultCancelAdapter implements CancelAdapter {
+    private cancelledRuns;
+    private gatewayUrl;
+    constructor();
+    cancelRun(runId: string, reason: string): Promise<CancelResult>;
+    isCancelled(runId: string): boolean;
+    getCancelledRuns(): string[];
+    clearCancelledRuns(): void;
+}
+export declare function createCancelAdapter(): CancelAdapter;
+export declare const cancelAdapter: CancelAdapter;
+//# sourceMappingURL=cancel-adapter.d.ts.map

package/packages/sentinel/dist/adapters/cancel-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-adapter.d.ts","sourceRoot":"","sources":["../../src/adapters/cancel-adapter.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CACjE;AAKD,qBAAa,oBAAqB,YAAW,aAAa;IACxD,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,UAAU,CAAS;;IASrB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAqErE,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAOnC,gBAAgB,IAAI,MAAM,EAAE;IAO5B,kBAAkB,IAAI,IAAI;CAG3B;AAKD,wBAAgB,mBAAmB,IAAI,aAAa,CAEnD;AAGD,eAAO,MAAM,aAAa,eAAwB,CAAC"}

package/packages/sentinel/dist/adapters/cancel-adapter.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cancelAdapter = exports.DefaultCancelAdapter = void 0;
+exports.createCancelAdapter = createCancelAdapter;
+class DefaultCancelAdapter {
+    constructor() {
+        this.cancelledRuns = new Set();
+        this.gatewayUrl = process.env['GATEWAY_URL'] ||
+            process.env['GATEWAY_BASE_URL'] ||
+            'http://localhost:3001';
+    }
+    async cancelRun(runId, reason) {
+        console.log(`🛑 CancelAdapter: Cancelling run ${runId} - Reason: ${reason}`);
+        if (this.cancelledRuns.has(runId)) {
+            return {
+                success: false,
+                reason: 'Run already cancelled',
+                timestamp: Date.now()
+            };
+        }
+        this.cancelledRuns.add(runId);
+        try {
+            const cancelUrl = `${this.gatewayUrl}/api/runs/${runId}/cancel`;
+            const response = await fetch(cancelUrl, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify({ reason }),
+            });
+            if (!response.ok) {
+                const errorText = await response.text();
+                console.error(`❌ CancelAdapter: Failed to cancel run ${runId}: ${response.status} - ${errorText}`);
+                this.cancelledRuns.delete(runId);
+                return {
+                    success: false,
+                    reason: `Gateway returned ${response.status}: ${errorText}`,
+                    timestamp: Date.now()
+                };
+            }
+            const result = await response.json().catch(() => ({}));
+            console.log(`✅ CancelAdapter: Run ${runId} cancelled successfully`);
+            return {
+                success: true,
+                reason: result?.message || 'Cancellation requested',
+                timestamp: Date.now()
+            };
+        }
+        catch (error) {
+            this.cancelledRuns.delete(runId);
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            console.error(`❌ CancelAdapter: Error cancelling run ${runId}:`, errorMessage);
+            return {
+                success: false,
+                reason: `Cancel request failed: ${errorMessage}`,
+                timestamp: Date.now()
+            };
+        }
+    }
+    isCancelled(runId) {
+        return this.cancelledRuns.has(runId);
+    }
+    getCancelledRuns() {
+        return Array.from(this.cancelledRuns);
+    }
+    clearCancelledRuns() {
+        this.cancelledRuns.clear();
+    }
+}
+exports.DefaultCancelAdapter = DefaultCancelAdapter;
+function createCancelAdapter() {
+    return new DefaultCancelAdapter();
+}
+exports.cancelAdapter = createCancelAdapter();
+//# sourceMappingURL=cancel-adapter.js.map

package/packages/sentinel/dist/adapters/cancel-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cancel-adapter.js","sourceRoot":"","sources":["../../src/adapters/cancel-adapter.ts"],"names":[],"mappings":";;;AAwHA,kDAEC;AAxGD,MAAa,oBAAoB;IAI/B;QAHQ,kBAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QAKxC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAC/B,uBAAuB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAAc;QAC3C,OAAO,CAAC,GAAG,CAAC,oCAAoC,KAAK,cAAc,MAAM,EAAE,CAAC,CAAC;QAG7E,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB;gBAC/B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QAGD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC;YAEH,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,UAAU,aAAa,KAAK,SAAS,CAAC;YAGhE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBACtC,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;aACjC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACxC,OAAO,CAAC,KAAK,CAAC,yCAAyC,KAAK,KAAK,QAAQ,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAC;gBAGnG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAEjC,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,MAAM,EAAE,oBAAoB,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;oBAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC;YACJ,CAAC;YAED,MAAM,MAAM,GAAQ,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAE5D,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,yBAAyB,CAAC,CAAC;YAEpE,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,wBAAwB;gBACnD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjC,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5E,OAAO,CAAC,KAAK,CAAC,yCAAyC,KAAK,GAAG,EAAE,YAAY,CAAC,CAAC;YAE/E,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,0BAA0B,YAAY,EAAE;gBAChD,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IAKD,WAAW,CAAC,KAAa;QACvB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAKD,gBAAgB;QACd,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACxC,CAAC;IAKD,kBAAkB;QAChB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAjGD,oDAiGC;AAKD,SAAgB,mBAAmB;IACjC,OAAO,IAAI,oBAAoB,EAAE,CAAC;AACpC,CAAC;AAGY,QAAA,aAAa,GAAG,mBAAmB,EAAE,CAAC"}

package/packages/sentinel/dist/adapters/telemetry.d.ts

@@ -0,0 +1,25 @@
+export interface TelemetryEvent {
+    type: string;
+    runId: string;
+    reason?: string;
+    timestamp: number;
+    metadata?: Record<string, any>;
+}
+export interface TelemetryAdapter {
+    logEvent(event: TelemetryEvent): void;
+    logKill(runId: string, reason: string, metadata?: Record<string, any>): void;
+    logPolicyViolation(runId: string, policy: string, threshold: any, metadata?: Record<string, any>): void;
+}
+export declare class NoOpTelemetryAdapter implements TelemetryAdapter {
+    logEvent(event: TelemetryEvent): void;
+    logKill(runId: string, reason: string, metadata?: Record<string, any>): void;
+    logPolicyViolation(runId: string, policy: string, threshold: any, metadata?: Record<string, any>): void;
+}
+export declare class ConsoleTelemetryAdapter implements TelemetryAdapter {
+    logEvent(event: TelemetryEvent): void;
+    logKill(runId: string, reason: string, metadata?: Record<string, any>): void;
+    logPolicyViolation(runId: string, policy: string, threshold: any, metadata?: Record<string, any>): void;
+}
+export declare function createTelemetryAdapter(): TelemetryAdapter;
+export declare const telemetryAdapter: TelemetryAdapter;
+//# sourceMappingURL=telemetry.d.ts.map

package/packages/sentinel/dist/adapters/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/adapters/telemetry.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC7E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;CACzG;AAKD,qBAAa,oBAAqB,YAAW,gBAAgB;IAC3D,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAIrC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAI5E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;CAGxG;AAKD,qBAAa,uBAAwB,YAAW,gBAAgB;IAC9D,QAAQ,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAQrC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;IAQ5E,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,IAAI;CAQxG;AAKD,wBAAgB,sBAAsB,IAAI,gBAAgB,CAQzD;AAGD,eAAO,MAAM,gBAAgB,kBAA2B,CAAC"}

package/packages/sentinel/dist/adapters/telemetry.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.telemetryAdapter = exports.ConsoleTelemetryAdapter = exports.NoOpTelemetryAdapter = void 0;
+exports.createTelemetryAdapter = createTelemetryAdapter;
+class NoOpTelemetryAdapter {
+    logEvent(event) {
+    }
+    logKill(runId, reason, metadata) {
+    }
+    logPolicyViolation(runId, policy, threshold, metadata) {
+    }
+}
+exports.NoOpTelemetryAdapter = NoOpTelemetryAdapter;
+class ConsoleTelemetryAdapter {
+    logEvent(event) {
+        console.log(`📊 Sentinel Telemetry: ${event.type}`, {
+            runId: event.runId,
+            timestamp: new Date(event.timestamp).toISOString(),
+            ...event.metadata
+        });
+    }
+    logKill(runId, reason, metadata) {
+        console.log(`🛑 Sentinel Kill: ${runId}`, {
+            reason,
+            timestamp: new Date().toISOString(),
+            ...metadata
+        });
+    }
+    logPolicyViolation(runId, policy, threshold, metadata) {
+        console.log(`⚠️ Sentinel Policy Violation: ${runId}`, {
+            policy,
+            threshold,
+            timestamp: new Date().toISOString(),
+            ...metadata
+        });
+    }
+}
+exports.ConsoleTelemetryAdapter = ConsoleTelemetryAdapter;
+function createTelemetryAdapter() {
+    if (process.env['NODE_ENV'] === 'development' || process.env['NODE_ENV'] === 'test') {
+        return new ConsoleTelemetryAdapter();
+    }
+    return new NoOpTelemetryAdapter();
+}
+exports.telemetryAdapter = createTelemetryAdapter();
+//# sourceMappingURL=telemetry.js.map

package/packages/sentinel/dist/adapters/telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/adapters/telemetry.ts"],"names":[],"mappings":";;;AAqEA,wDAQC;AAvDD,MAAa,oBAAoB;IAC/B,QAAQ,CAAC,KAAqB;IAE9B,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,QAA8B;IAErE,CAAC;IAED,kBAAkB,CAAC,KAAa,EAAE,MAAc,EAAE,SAAc,EAAE,QAA8B;IAEhG,CAAC;CACF;AAZD,oDAYC;AAKD,MAAa,uBAAuB;IAClC,QAAQ,CAAC,KAAqB;QAC5B,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,CAAC,IAAI,EAAE,EAAE;YAClD,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YAClD,GAAG,KAAK,CAAC,QAAQ;SAClB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,MAAc,EAAE,QAA8B;QACnE,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,EAAE,EAAE;YACxC,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC;IAED,kBAAkB,CAAC,KAAa,EAAE,MAAc,EAAE,SAAc,EAAE,QAA8B;QAC9F,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,EAAE,EAAE;YACpD,MAAM;YACN,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC;CACF;AAzBD,0DAyBC;AAKD,SAAgB,sBAAsB;IAGpC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;QACpF,OAAO,IAAI,uBAAuB,EAAE,CAAC;IACvC,CAAC;IAED,OAAO,IAAI,oBAAoB,EAAE,CAAC;AACpC,CAAC;AAGY,QAAA,gBAAgB,GAAG,sBAAsB,EAAE,CAAC"}

package/packages/sentinel/dist/config.d.ts

@@ -0,0 +1,6 @@
+import { SentinelConfig } from './types';
+export declare const sentinelConfig: Readonly<SentinelConfig>;
+export declare function getConfigString(): string;
+export declare function isSentinelEnabled(): boolean;
+export declare function getConfigValue<K extends keyof SentinelConfig>(key: K): SentinelConfig[K];
+//# sourceMappingURL=config.d.ts.map

package/packages/sentinel/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AA0CzC,eAAO,MAAM,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAyB,CAAC;AAK9E,wBAAgB,eAAe,IAAI,MAAM,CAQxC;AAKD,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAKD,wBAAgB,cAAc,CAAC,CAAC,SAAS,MAAM,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAExF"}

package/packages/sentinel/dist/config.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sentinelConfig = void 0;
+exports.getConfigString = getConfigString;
+exports.isSentinelEnabled = isSentinelEnabled;
+exports.getConfigValue = getConfigValue;
+const config = {
+    enabled: process.env['SENTINEL_ENABLED'] === 'true',
+    runMaxDurationMs: parseInt(process.env['RUN_MAX_DURATION_MS'] || '120000', 10),
+    runMaxTokens: parseInt(process.env['RUN_MAX_TOKENS'] || '16000', 10),
+    runIdleMs: parseInt(process.env['SENTINEL_IDLE_MS'] || process.env['RUN_IDLE_MS'] || '30000', 10),
+    loopWindow: parseInt(process.env['SENTINEL_LOOP_WINDOW'] || '15', 10),
+    loopMax: parseInt(process.env['SENTINEL_LOOP_MAX'] || '5', 10),
+    runMaxCost: parseFloat(process.env['RUN_MAX_COST'] || process.env['SENTINEL_MAX_COST'] || '1.00'),
+    auditSink: (process.env['SENTINEL_AUDIT_SINK'] === 'file' ? 'file' : 'console'),
+    auditFile: process.env['SENTINEL_AUDIT_FILE'] || 'packages/sentinel/sentinel_audit.log'
+};
+if (config.runMaxDurationMs <= 0) {
+    throw new Error('RUN_MAX_DURATION_MS must be positive');
+}
+if (config.runMaxTokens <= 0) {
+    throw new Error('RUN_MAX_TOKENS must be positive');
+}
+if (config.runIdleMs <= 0) {
+    throw new Error('RUN_IDLE_MS must be positive');
+}
+if (config.loopWindow <= 0) {
+    throw new Error('SENTINEL_LOOP_WINDOW must be positive');
+}
+if (config.loopMax <= 0) {
+    throw new Error('SENTINEL_LOOP_MAX must be positive');
+}
+if (config.loopMax > config.loopWindow) {
+    throw new Error('SENTINEL_LOOP_MAX cannot exceed SENTINEL_LOOP_WINDOW');
+}
+exports.sentinelConfig = Object.freeze(config);
+function getConfigString() {
+    return `Sentinel Config:
+  Enabled: ${exports.sentinelConfig.enabled}
+  Max Duration: ${exports.sentinelConfig.runMaxDurationMs}ms
+  Max Tokens: ${exports.sentinelConfig.runMaxTokens}
+  Idle Timeout: ${exports.sentinelConfig.runIdleMs}ms
+  Loop Window: ${exports.sentinelConfig.loopWindow}
+  Loop Max: ${exports.sentinelConfig.loopMax}`;
+}
+function isSentinelEnabled() {
+    return exports.sentinelConfig.enabled;
+}
+function getConfigValue(key) {
+    return exports.sentinelConfig[key];
+}
+//# sourceMappingURL=config.js.map

package/packages/sentinel/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;AA+CA,0CAQC;AAKD,8CAEC;AAKD,wCAEC;AA/DD,MAAM,MAAM,GAAiG;IAC3G,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,MAAM;IACnD,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,QAAQ,EAAE,EAAE,CAAC;IAC9E,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC;IAEpE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC;IACjG,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACrE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC;IAE9D,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,MAAM,CAAC;IAEjG,SAAS,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,sCAAsC;CACxF,CAAC;AAGF,IAAI,MAAM,CAAC,gBAAgB,IAAI,CAAC,EAAE,CAAC;IACjC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;AAC1D,CAAC;AACD,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;IAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC;AACD,IAAI,MAAM,CAAC,SAAS,IAAI,CAAC,EAAE,CAAC;IAC1B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AAClD,CAAC;AACD,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,EAAE,CAAC;IAC3B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;AAC3D,CAAC;AACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;IACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;AACxD,CAAC;AACD,IAAI,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACvC,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC;AAGY,QAAA,cAAc,GAA6B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAK9E,SAAgB,eAAe;IAC7B,OAAO;aACI,sBAAc,CAAC,OAAO;kBACjB,sBAAc,CAAC,gBAAgB;gBACjC,sBAAc,CAAC,YAAY;kBACzB,sBAAc,CAAC,SAAS;iBACzB,sBAAc,CAAC,UAAU;cAC5B,sBAAc,CAAC,OAAO,EAAE,CAAC;AACvC,CAAC;AAKD,SAAgB,iBAAiB;IAC/B,OAAO,sBAAc,CAAC,OAAO,CAAC;AAChC,CAAC;AAKD,SAAgB,cAAc,CAAiC,GAAM;IACnE,OAAO,sBAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/packages/sentinel/dist/index.d.ts

@@ -0,0 +1,12 @@
+export { Sentinel } from './sentinel';
+export type { RunEvent, EventStream, RunState, SentinelConfig } from './types';
+export { EventBuffer } from './internal/event-buffer';
+export { sentinelConfig } from './config';
+export { cancelAdapter, CancelAdapter } from './adapters/cancel-adapter';
+export { telemetryAdapter, TelemetryAdapter } from './adapters/telemetry';
+export { auditAdapter, AuditAdapter } from './adapters/audit';
+export { policyManager, PolicyManager, Policy, PolicyViolation } from './policies';
+export { TimeoutPolicy, IdlePolicy, TokenCapPolicy, LoopDetectionPolicy } from './policies';
+export { policyTemplates, getPolicyTemplate, listPolicyTemplates, applyPolicyTemplate, recommendTemplate, type PolicyTemplate } from './policy-templates';
+export { predictViolations, getMostLikelyViolation, type ViolationPrediction } from './predictive';
+//# sourceMappingURL=index.d.ts.map

package/packages/sentinel/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAC5F,OAAO,EACL,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,mBAAmB,EACzB,MAAM,cAAc,CAAC"}

package/packages/sentinel/dist/index.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getMostLikelyViolation = exports.predictViolations = exports.recommendTemplate = exports.applyPolicyTemplate = exports.listPolicyTemplates = exports.getPolicyTemplate = exports.policyTemplates = exports.LoopDetectionPolicy = exports.TokenCapPolicy = exports.IdlePolicy = exports.TimeoutPolicy = exports.PolicyManager = exports.policyManager = exports.auditAdapter = exports.telemetryAdapter = exports.cancelAdapter = exports.sentinelConfig = exports.EventBuffer = exports.Sentinel = void 0;
+var sentinel_1 = require("./sentinel");
+Object.defineProperty(exports, "Sentinel", { enumerable: true, get: function () { return sentinel_1.Sentinel; } });
+var event_buffer_1 = require("./internal/event-buffer");
+Object.defineProperty(exports, "EventBuffer", { enumerable: true, get: function () { return event_buffer_1.EventBuffer; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "sentinelConfig", { enumerable: true, get: function () { return config_1.sentinelConfig; } });
+var cancel_adapter_1 = require("./adapters/cancel-adapter");
+Object.defineProperty(exports, "cancelAdapter", { enumerable: true, get: function () { return cancel_adapter_1.cancelAdapter; } });
+var telemetry_1 = require("./adapters/telemetry");
+Object.defineProperty(exports, "telemetryAdapter", { enumerable: true, get: function () { return telemetry_1.telemetryAdapter; } });
+var audit_1 = require("./adapters/audit");
+Object.defineProperty(exports, "auditAdapter", { enumerable: true, get: function () { return audit_1.auditAdapter; } });
+var policies_1 = require("./policies");
+Object.defineProperty(exports, "policyManager", { enumerable: true, get: function () { return policies_1.policyManager; } });
+Object.defineProperty(exports, "PolicyManager", { enumerable: true, get: function () { return policies_1.PolicyManager; } });
+var policies_2 = require("./policies");
+Object.defineProperty(exports, "TimeoutPolicy", { enumerable: true, get: function () { return policies_2.TimeoutPolicy; } });
+Object.defineProperty(exports, "IdlePolicy", { enumerable: true, get: function () { return policies_2.IdlePolicy; } });
+Object.defineProperty(exports, "TokenCapPolicy", { enumerable: true, get: function () { return policies_2.TokenCapPolicy; } });
+Object.defineProperty(exports, "LoopDetectionPolicy", { enumerable: true, get: function () { return policies_2.LoopDetectionPolicy; } });
+var policy_templates_1 = require("./policy-templates");
+Object.defineProperty(exports, "policyTemplates", { enumerable: true, get: function () { return policy_templates_1.policyTemplates; } });
+Object.defineProperty(exports, "getPolicyTemplate", { enumerable: true, get: function () { return policy_templates_1.getPolicyTemplate; } });
+Object.defineProperty(exports, "listPolicyTemplates", { enumerable: true, get: function () { return policy_templates_1.listPolicyTemplates; } });
+Object.defineProperty(exports, "applyPolicyTemplate", { enumerable: true, get: function () { return policy_templates_1.applyPolicyTemplate; } });
+Object.defineProperty(exports, "recommendTemplate", { enumerable: true, get: function () { return policy_templates_1.recommendTemplate; } });
+var predictive_1 = require("./predictive");
+Object.defineProperty(exports, "predictViolations", { enumerable: true, get: function () { return predictive_1.predictViolations; } });
+Object.defineProperty(exports, "getMostLikelyViolation", { enumerable: true, get: function () { return predictive_1.getMostLikelyViolation; } });
+//# sourceMappingURL=index.js.map

package/packages/sentinel/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AAEjB,wDAAsD;AAA7C,2GAAA,WAAW,OAAA;AACpB,mCAA0C;AAAjC,wGAAA,cAAc,OAAA;AACvB,4DAAyE;AAAhE,+GAAA,aAAa,OAAA;AACtB,kDAA0E;AAAjE,6GAAA,gBAAgB,OAAA;AACzB,0CAA8D;AAArD,qGAAA,YAAY,OAAA;AACrB,uCAAmF;AAA1E,yGAAA,aAAa,OAAA;AAAE,yGAAA,aAAa,OAAA;AACrC,uCAA4F;AAAnF,yGAAA,aAAa,OAAA;AAAE,sGAAA,UAAU,OAAA;AAAE,0GAAA,cAAc,OAAA;AAAE,+GAAA,mBAAmB,OAAA;AACvE,uDAO4B;AAN1B,mHAAA,eAAe,OAAA;AACf,qHAAA,iBAAiB,OAAA;AACjB,uHAAA,mBAAmB,OAAA;AACnB,uHAAA,mBAAmB,OAAA;AACnB,qHAAA,iBAAiB,OAAA;AAGnB,2CAIsB;AAHpB,+GAAA,iBAAiB,OAAA;AACjB,oHAAA,sBAAsB,OAAA"}

package/packages/sentinel/dist/internal/event-buffer.d.ts

@@ -0,0 +1,13 @@
+import { RunEvent, RunState } from '../types';
+export declare class EventBuffer {
+    private static readonly MAX_EVENTS_PER_RUN;
+    private runStates;
+    processEvent(event: RunEvent): void;
+    getRunState(runId: string): RunState | undefined;
+    getActiveRuns(): RunState[];
+    markKilled(runId: string, reason: string): void;
+    cleanup(): void;
+    getRecentEvents(runId: string, count?: number): RunEvent[];
+    getTokenEventsInWindow(runId: string, windowMs: number): RunEvent[];
+}
+//# sourceMappingURL=event-buffer.d.ts.map

package/packages/sentinel/dist/internal/event-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-buffer.d.ts","sourceRoot":"","sources":["../../src/internal/event-buffer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE9C,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAO;IACjD,OAAO,CAAC,SAAS,CAA+B;IAKzC,YAAY,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAuDnC,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAOhD,aAAa,IAAI,QAAQ,EAAE;IAQ3B,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAW/C,OAAO,IAAI,IAAI;IAiBf,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,QAAQ,EAAE;IAU9D,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,QAAQ,EAAE;CAW3E"}

package/packages/sentinel/dist/internal/event-buffer.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EventBuffer = void 0;
+class EventBuffer {
+    constructor() {
+        this.runStates = new Map();
+    }
+    processEvent(event) {
+        const runId = event.runId;
+        let runState = this.runStates.get(runId);
+        if (!runState) {
+            runState = {
+                runId,
+                createdAt: Date.now(),
+                tokenCount: 0,
+                status: 'created',
+                events: []
+            };
+            this.runStates.set(runId, runState);
+        }
+        runState.events.push(event);
+        if (runState.events.length > EventBuffer.MAX_EVENTS_PER_RUN) {
+            runState.events.shift();
+        }
+        switch (event.type) {
+            case 'created':
+                runState.createdAt = event.at;
+                break;
+            case 'started':
+                runState.startedAt = event.at;
+                runState.status = 'running';
+                break;
+            case 'token':
+                runState.lastTokenAt = event.at;
+                runState.tokenCount += event.tokens;
+                if (event.cost !== undefined) {
+                    runState.cost = (runState.cost || 0) + event.cost;
+                }
+                break;
+            case 'finish':
+                runState.status = 'finished';
+                break;
+            case 'error':
+                runState.status = 'finished';
+                break;
+        }
+    }
+    getRunState(runId) {
+        return this.runStates.get(runId);
+    }
+    getActiveRuns() {
+        return Array.from(this.runStates.values())
+            .filter(run => run.status === 'created' || run.status === 'running');
+    }
+    markKilled(runId, reason) {
+        const runState = this.runStates.get(runId);
+        if (runState) {
+            runState.status = 'killed';
+            runState.killReason = reason;
+        }
+    }
+    cleanup() {
+        const now = Date.now();
+        const maxAge = 60 * 60 * 1000;
+        for (const [runId, runState] of this.runStates.entries()) {
+            if (runState.status === 'finished' || runState.status === 'killed') {
+                const age = now - Math.max(runState.createdAt, runState.startedAt || 0);
+                if (age > maxAge) {
+                    this.runStates.delete(runId);
+                }
+            }
+        }
+    }
+    getRecentEvents(runId, count = 10) {
+        const runState = this.runStates.get(runId);
+        if (!runState)
+            return [];
+        return runState.events.slice(-count);
+    }
+    getTokenEventsInWindow(runId, windowMs) {
+        const runState = this.runStates.get(runId);
+        if (!runState)
+            return [];
+        const now = Date.now();
+        const cutoff = now - windowMs;
+        return runState.events
+            .filter(event => event.type === 'token' && event.at >= cutoff)
+            .slice(-10);
+    }
+}
+exports.EventBuffer = EventBuffer;
+EventBuffer.MAX_EVENTS_PER_RUN = 100;
+//# sourceMappingURL=event-buffer.js.map

package/packages/sentinel/dist/internal/event-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-buffer.js","sourceRoot":"","sources":["../../src/internal/event-buffer.ts"],"names":[],"mappings":";;;AAEA,MAAa,WAAW;IAAxB;QAEU,cAAS,GAAG,IAAI,GAAG,EAAoB,CAAC;IA4HlD,CAAC;IAvHQ,YAAY,CAAC,KAAe;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAEzC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,GAAG;gBACT,KAAK;gBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,UAAU,EAAE,CAAC;gBACb,MAAM,EAAE,SAAS;gBACjB,MAAM,EAAE,EAAE;aACX,CAAC;YACF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAGD,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,CAAC,kBAAkB,EAAE,CAAC;YAC5D,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QAID,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,SAAS;gBACZ,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM;YAER,KAAK,SAAS;gBACZ,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,EAAE,CAAC;gBAC9B,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;gBAC5B,MAAM;YAER,KAAK,OAAO;gBACV,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC,EAAE,CAAC;gBAChC,QAAQ,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;gBAEpC,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;gBACpD,CAAC;gBACD,MAAM;YAER,KAAK,QAAQ;gBACX,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;gBAC7B,MAAM;YAER,KAAK,OAAO;gBACV,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;gBAC7B,MAAM;QACV,CAAC;IACH,CAAC;IAKM,WAAW,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAKM,aAAa;QAClB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;aACvC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACzE,CAAC;IAKM,UAAU,CAAC,KAAa,EAAE,MAAc;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;QAC/B,CAAC;IACH,CAAC;IAKM,OAAO;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAE9B,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACnE,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;gBACxE,IAAI,GAAG,GAAG,MAAM,EAAE,CAAC;oBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAKM,eAAe,CAAC,KAAa,EAAE,QAAgB,EAAE;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAKM,sBAAsB,CAAC,KAAa,EAAE,QAAgB;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,CAAC;QAEzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC;QAE9B,OAAO,QAAQ,CAAC,MAAM;aACnB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC;aAC7D,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;;AA7HH,kCA8HC;AA7HyB,8BAAkB,GAAG,GAAG,AAAN,CAAO"}