@agent-beam/beam 0.1.0

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAiB/C,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AAEjH,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,aAAa,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAA0B,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAC/B,OAAO;YACL,OAAO,EAAE,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAChE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;YACjC,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE;SACrC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAgBD,sFAAsF;AACtF,MAAM,UAAU,QAAQ,CAAC,MAA2B,EAAE,GAAkB;IACtE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAE3E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAClC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAE1D,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAClE,oEAAoE;IACpE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAErG,MAAM,GAAG,GAAG,CAAC,MAAc,EAAY,EAAE,CAAC,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClD,MAAM;QACN,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAClF,OAAO,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,oDAAoD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC3F,OAAO,GAAG,CAAC,OAAO,GAAG,CAAC,IAAI,uCAAuC,CAAC,CAAC;IACrE,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,CAAC,OAAO;YAAE,MAAM;QACxB,IAAI,CAAC;YACH,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/C,OAAO,GAAG,CAAC,4CAA4C,OAAO,GAAG,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,mCAAmC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AACtC,CAAC"}

package/dist/sequences.d.ts

@@ -0,0 +1,13 @@
+import type { Event, Finding, RuleCategory, Severity } from "./core.js";
+export interface SequenceRule {
+    id: string;
+    title: string;
+    severity: Severity;
+    category: RuleCategory;
+    explanation: string;
+    /** Ordered step predicates; a match requires each to be satisfied by a later-or-equal event
+     *  than the previous step, not necessarily consecutively. */
+    steps: ((e: Event) => boolean)[];
+}
+export declare const sequenceRuleCatalog: SequenceRule[];
+export declare function detectSequenceFindings(sessionEvents: Event[]): Map<string, Finding[]>;

package/dist/sequences.js

@@ -0,0 +1,58 @@
+// A single risky-looking action can be routine. Two specific actions in the same session, in
+// order, are what actually matters -- neither built-in single-event rule nor a 3-line text
+// window can see across separate tool calls the way this can.
+export const sequenceRuleCatalog = [
+    {
+        id: "chain.secret_then_egress",
+        title: "Credential read followed by network activity",
+        severity: "critical",
+        category: "exfil",
+        explanation: "A credential or secret was read in one action, and network activity followed later in the same session. Neither step alone is unusual; review what the second action actually sent.",
+        steps: [
+            e => e.findings.some(f => f.id === "credentials.access"),
+            e => /https?:\/\/|\bcurl\b|\bwget\b|\bupload\b|\bwebhook\b/i.test(e.summary) || e.type === "browser.navigate",
+        ],
+    },
+    {
+        id: "chain.recon_then_exec",
+        title: "Network reconnaissance followed by remote execution",
+        severity: "critical",
+        category: "exec",
+        explanation: "A network or host scan was followed by code fetched and run from a remote source in the same session.",
+        steps: [
+            e => e.findings.some(f => f.id === "recon.network_sweep"),
+            e => e.findings.some(f => f.id === "execution.remote"),
+        ],
+    },
+];
+const WINDOW = 50; // only the most recent N events per session are considered
+// Scans one session's events (any order) for completed step sequences and returns the finding
+// each completed match should attach to its final (most recent) matching event. Idempotent: the
+// caller should skip attaching a finding an event already has -- re-running over the same
+// history must never duplicate a chain finding.
+export function detectSequenceFindings(sessionEvents) {
+    const ordered = [...sessionEvents].sort((a, b) => Date.parse(a.timestamp) - Date.parse(b.timestamp)).slice(-WINDOW);
+    const attach = new Map();
+    for (const rule of sequenceRuleCatalog) {
+        let stepIndex = 0;
+        for (const event of ordered) {
+            if (!rule.steps[stepIndex](event))
+                continue;
+            stepIndex++;
+            if (stepIndex < rule.steps.length)
+                continue;
+            if (!event.findings.some(f => f.id === rule.id)) {
+                const finding = {
+                    id: rule.id, title: rule.title, severity: rule.severity, explanation: rule.explanation,
+                    evidence: `Matched a ${rule.steps.length}-step sequence across events in session "${event.session}".`,
+                };
+                const list = attach.get(event.id) ?? [];
+                list.push(finding);
+                attach.set(event.id, list);
+            }
+            stepIndex = 0; // allow another, later match of the same rule in the same session
+        }
+    }
+    return attach;
+}
+//# sourceMappingURL=sequences.js.map

package/dist/sequences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequences.js","sourceRoot":"","sources":["../src/sequences.ts"],"names":[],"mappings":"AASA,6FAA6F;AAC7F,2FAA2F;AAC3F,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAmB;IACjD;QACE,EAAE,EAAE,0BAA0B;QAC9B,KAAK,EAAE,8CAA8C;QACrD,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,OAAO;QACjB,WAAW,EAAE,qLAAqL;QAClM,KAAK,EAAE;YACL,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,oBAAoB,CAAC;YACxD,CAAC,CAAC,EAAE,CAAC,uDAAuD,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB;SAC9G;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,KAAK,EAAE,qDAAqD;QAC5D,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,uGAAuG;QACpH,KAAK,EAAE;YACL,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,qBAAqB,CAAC;YACzD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,kBAAkB,CAAC;SACvD;KACF;CACF,CAAC;AAEF,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,2DAA2D;AAE9E,8FAA8F;AAC9F,gGAAgG;AAChG,0FAA0F;AAC1F,gDAAgD;AAChD,MAAM,UAAU,sBAAsB,CAAC,aAAsB;IAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC5C,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC;gBAAE,SAAS;YAC5C,SAAS,EAAE,CAAC;YACZ,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,SAAS;YAC5C,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChD,MAAM,OAAO,GAAY;oBACvB,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;oBACtF,QAAQ,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,4CAA4C,KAAK,CAAC,OAAO,IAAI;iBACtG,CAAC;gBACF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACnB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC7B,CAAC;YACD,SAAS,GAAG,CAAC,CAAC,CAAC,kEAAkE;QACnF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/serve.d.ts

@@ -0,0 +1,27 @@
+import { type InstallAllResult } from "./install.js";
+export interface StartServerOptions {
+    directory?: string;
+    token?: string;
+    port?: number;
+    hostname?: string;
+    origins?: string[];
+    /** Root to load ~/.beam/rules.json from; defaults to the real BEAM_HOME. Tests override this. */
+    rulesHome?: string;
+    /** Home directory to scan/write agent hook configs into; defaults to the real home. Tests override this. */
+    agentHome?: string;
+    /** Whether to run OS-level process/network monitoring (see os-monitor.ts). Defaults to on; tests disable it. */
+    osMonitor?: boolean;
+}
+export declare function startServer(options?: StartServerOptions): Promise<{
+    url: string;
+    token: string;
+    directory: string;
+    customRules: {
+        path: string;
+        loaded: number;
+        errors: string[];
+    };
+    policySync: boolean;
+    agentInstalls: InstallAllResult[];
+    close: () => void;
+}>;

package/dist/serve.js

@@ -0,0 +1,113 @@
+import { chmod, mkdir, readFile, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { randomBytes } from "node:crypto";
+import { createServer } from "node:http";
+import { createCollector } from "./server.js";
+import { getDataDirectory } from "./config.js";
+import { loadCustomRules } from "./custom-rules.js";
+import { readIdentity } from "./enroll.js";
+import { syncPolicy } from "./forward.js";
+import { installAllDetectedHooks } from "./install.js";
+import { startOsMonitor } from "./os-monitor.js";
+function toWebRequest(req) {
+    return new Promise((resolvePromise, reject) => {
+        const chunks = [];
+        req.on("data", (chunk) => chunks.push(chunk));
+        req.on("end", () => {
+            try {
+                const hasBody = !["GET", "HEAD"].includes(req.method ?? "GET");
+                const headers = new Headers();
+                for (const [key, value] of Object.entries(req.headers)) {
+                    if (Array.isArray(value))
+                        for (const v of value)
+                            headers.append(key, v);
+                    else if (value !== undefined)
+                        headers.set(key, value);
+                }
+                const url = `http://${req.headers.host ?? "127.0.0.1"}${req.url ?? "/"}`;
+                resolvePromise(new Request(url, { method: req.method, headers, body: hasBody ? Buffer.concat(chunks) : undefined }));
+            }
+            catch (error) {
+                reject(error);
+            }
+        });
+        req.on("error", reject);
+    });
+}
+async function writeWebResponse(response, res) {
+    res.statusCode = response.status;
+    response.headers.forEach((value, key) => res.setHeader(key, value));
+    const body = response.body ? Buffer.from(await response.arrayBuffer()) : Buffer.alloc(0);
+    res.end(body);
+}
+export async function startServer(options = {}) {
+    const directory = options.directory ?? getDataDirectory();
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    // Wire beam's hook into every detected-but-not-yet-wired agent on every start, so a newly
+    // installed agent (or one that showed up after the last `beam start`) starts getting captured
+    // without a separate manual `beam agent install-all` step. Never blocks or fails startup --
+    // a single agent's config being unwritable shouldn't stop the collector from serving.
+    const agentInstalls = await installAllDetectedHooks(options.agentHome ?? homedir()).catch(() => []);
+    // Loaded once per process into core.ts's shared rule set; a file edit needs a restart to apply.
+    // Errors are returned, not logged here -- the caller (cli.ts) owns all console output, since
+    // this same function also runs unattended inside the background service process.
+    const customRules = await loadCustomRules(options.rulesHome);
+    let token = options.token ?? process.env.BEAM_TOKEN;
+    if (!token) {
+        const tokenPath = join(directory, "token");
+        try {
+            token = (await readFile(tokenPath, "utf8")).trim();
+            await chmod(tokenPath, 0o600);
+        }
+        catch (e) {
+            if (e.code !== "ENOENT")
+                throw e;
+            token = randomBytes(32).toString("hex");
+            await writeFile(tokenPath, token, { mode: 0o600, flag: "wx" });
+        }
+    }
+    if (token.length < 32)
+        throw new Error("BEAM_TOKEN must contain at least 32 characters.");
+    const app = await createCollector({ directory, token, origins: options.origins ?? process.env.BEAM_ALLOWED_ORIGINS?.split(",").map(s => s.trim()), rulesHome: options.rulesHome });
+    const port = options.port ?? Number(process.env.BEAM_PORT || 4319);
+    const hostname = options.hostname ?? "127.0.0.1";
+    const server = createServer((req, res) => {
+        toWebRequest(req)
+            .then(webRequest => app.fetch(webRequest))
+            .then(webResponse => writeWebResponse(webResponse, res))
+            .catch(error => {
+            console.error("Beam server error:", error instanceof Error ? error.message : error);
+            if (!res.headersSent)
+                res.statusCode = 500;
+            res.end();
+        });
+    });
+    const boundPort = await new Promise((resolvePromise, reject) => {
+        server.once("error", reject);
+        server.listen(port, hostname, () => {
+            const address = server.address();
+            resolvePromise(typeof address === "object" && address ? address.port : port);
+        });
+    });
+    // Keep the cached policy fresh so `beam hook` can enforce it without a network call.
+    let policyTimer;
+    const identity = await readIdentity();
+    if (identity) {
+        const poll = () => { void syncPolicy().catch(() => { }); };
+        poll();
+        policyTimer = setInterval(poll, 60_000);
+        policyTimer.unref?.();
+    }
+    // Observes AI agent activity directly (process start/exit, network connections) so agents that
+    // don't cooperate with any hook -- or that run through a GUI/IDE surface with no hook path at
+    // all -- still get captured. See os-monitor.ts. macOS only; a no-op elsewhere.
+    const osMonitor = options.osMonitor === false ? { stop: () => { } } : await startOsMonitor(async (events) => { await app.store.addEvents(events); });
+    return {
+        url: `http://${hostname}:${boundPort}`, token, directory, customRules, agentInstalls,
+        policySync: Boolean(identity),
+        close: () => { if (policyTimer)
+            clearInterval(policyTimer); osMonitor.stop(); server.close(); },
+    };
+}
+//# sourceMappingURL=serve.js.map

package/dist/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,uBAAuB,EAAyB,MAAM,cAAc,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,SAAS,YAAY,CAAC,GAAoB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC5C,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACvD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,KAAK,MAAM,CAAC,IAAI,KAAK;4BAAE,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;yBACnE,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,GAAG,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;gBACzE,cAAc,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YACvH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAkB,EAAE,GAAmB;IACrE,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAgBD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,UAA8B,EAAE;IAChE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAC1D,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACzD,0FAA0F;IAC1F,8FAA8F;IAC9F,4FAA4F;IAC5F,sFAAsF;IACtF,MAAM,aAAa,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAwB,CAAC,CAAC;IAC1H,gGAAgG;IAChG,6FAA6F;IAC7F,iFAAiF;IACjF,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACpD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YAAC,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAC1F,OAAO,CAAC,EAAE,CAAC;YACT,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAC5D,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAE1F,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACnL,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAC;IAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,YAAY,CAAC,GAAG,CAAC;aACd,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;aACzC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;aACvD,KAAK,CAAC,KAAK,CAAC,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,oBAAoB,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpF,IAAI,CAAC,GAAG,CAAC,WAAW;gBAAE,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;YAC3C,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QACrE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,cAAc,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qFAAqF;IACrF,IAAI,WAAuC,CAAC;IAC5C,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC;QACP,WAAW,GAAG,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IACxB,CAAC;IAED,+FAA+F;IAC/F,8FAA8F;IAC9F,+EAA+E;IAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAC,MAAM,EAAC,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElJ,OAAO;QACL,GAAG,EAAE,UAAU,QAAQ,IAAI,SAAS,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa;QACpF,UAAU,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC7B,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,WAAW;YAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KAChG,CAAC;AACJ,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,10 @@
+import { Store } from "./store.js";
+export declare function createCollector(options: {
+    directory: string;
+    token: string;
+    origins?: string[];
+    rulesHome?: string;
+}): Promise<{
+    store: Store;
+    fetch(req: Request): Promise<Response>;
+}>;

package/dist/server.js

@@ -0,0 +1,101 @@
+import { timingSafeEqual } from "node:crypto";
+import { normalize, parseInput, ruleCatalog, scanText } from "./core.js";
+import { Store } from "./store.js";
+import { inventory } from "./inventory.js";
+import { studioPage } from "./studio.js";
+import { loadCustomRules } from "./custom-rules.js";
+export async function createCollector(options) {
+    const store = new Store(options.directory);
+    await store.init();
+    const origins = new Set(options.origins ?? ["http://localhost:3200", "http://127.0.0.1:3200"]);
+    const secret = Buffer.from(`Bearer ${options.token}`);
+    return { store, async fetch(req) {
+            const origin = req.headers.get("origin");
+            const url = new URL(req.url);
+            const headers = { "Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", "Vary": "Origin" };
+            const json = (data, status = 200) => Response.json(data, { status, headers });
+            if (!["127.0.0.1", "localhost", "[::1]"].includes(url.hostname))
+                return json({ error: "Loopback host required." }, 403);
+            // Studio is served by this same collector, so its own fetch() calls are same-origin --
+            // browsers still attach an Origin header to same-origin POSTs, so that must be allowed
+            // unconditionally rather than only checked against the cross-origin management-app allowlist.
+            if (origin && origin !== url.origin && !origins.has(origin))
+                return json({ error: "Origin not permitted." }, 403);
+            if (origin) {
+                headers["Access-Control-Allow-Origin"] = origin;
+                headers["Access-Control-Allow-Methods"] = "GET, POST, OPTIONS";
+                headers["Access-Control-Allow-Headers"] = "Authorization, Content-Type";
+                headers["Access-Control-Allow-Private-Network"] = "true";
+            }
+            if (req.method === "OPTIONS")
+                return new Response(null, { status: 204, headers });
+            // The studio shell carries no secret (a static page); it pairs with its own token in-browser.
+            if (req.method === "GET" && (url.pathname === "/" || url.pathname === "/studio")) {
+                return new Response(studioPage(), { headers: { ...headers, "Content-Type": "text/html; charset=utf-8" } });
+            }
+            const provided = Buffer.from(req.headers.get("authorization") ?? "");
+            if (provided.length !== secret.length || !timingSafeEqual(provided, secret))
+                return json({ error: "Pairing token is missing or incorrect." }, 401);
+            if (req.headers.get("content-encoding"))
+                return json({ error: "Compressed requests are not supported; disable gzip in the exporter." }, 415);
+            try {
+                if (req.method === "GET" && url.pathname === "/agents")
+                    return json(await inventory(store.events));
+                if (req.method === "GET" && url.pathname === "/health")
+                    return json({ name: "Beam", version: "0.1.0", mode: "observe", events: store.events.length, retention: store.maxEvents });
+                if (req.method === "GET" && url.pathname === "/state")
+                    return json({ events: store.events, scans: store.scans, reviews: store.reviews, rules: ruleCatalog(), retention: store.maxEvents });
+                if (req.method === "GET" && url.pathname === "/export")
+                    return new Response(store.events.map(e => JSON.stringify(e)).join("\n"), { headers: { ...headers, "Content-Type": "application/x-ndjson", "Content-Disposition": 'attachment; filename="beam-events.ndjson"' } });
+                // Reloads ~/.beam/rules.json into this running process without a restart.
+                if (req.method === "POST" && url.pathname === "/rules/reload")
+                    return json(await loadCustomRules(options.rulesHome));
+                if (req.method !== "POST" || !["/ingest", "/v1/logs", "/scan", "/review"].includes(url.pathname))
+                    return json({ error: "Route not found." }, 404);
+                // Bound streamed bodies too; Content-Length alone cannot protect chunked requests.
+                const reader = req.body?.getReader();
+                let size = 0;
+                const chunks = [];
+                if (reader)
+                    while (true) {
+                        const { done, value } = await reader.read();
+                        if (done)
+                            break;
+                        size += value.byteLength;
+                        if (size > 2_000_000) {
+                            await reader.cancel();
+                            return json({ error: "Request exceeds 2 MB." }, 413);
+                        }
+                        chunks.push(value);
+                    }
+                const body = Buffer.concat(chunks).toString("utf8");
+                if (url.pathname === "/ingest" || url.pathname === "/v1/logs") {
+                    const records = parseInput(body, url.pathname === "/v1/logs");
+                    if (records.length > 2000)
+                        throw new Error("Batch exceeds 2,000 records.");
+                    // Some exporters also emit indicator, summary and enforcement records; those are not action events.
+                    const supported = records.filter(r => !r.record_type || ["event", "finding"].includes(String(r.record_type)));
+                    const result = await store.addEvents(supported.map(normalize));
+                    return json(url.pathname === "/v1/logs" ? {} : { ...result, skipped: records.length - supported.length });
+                }
+                const data = JSON.parse(body);
+                if (url.pathname === "/scan") {
+                    if (typeof data.content !== "string" || typeof data.name !== "string" || !["skill", "mcp"].includes(data.kind))
+                        throw new Error("Expected name, content and kind (skill or mcp).");
+                    return json(await store.addScan(scanText(data.name, data.content, data.kind)));
+                }
+                if (typeof data.id !== "string" || typeof data.reviewed !== "boolean")
+                    throw new Error("Expected event id and reviewed boolean.");
+                await store.review(data.id, data.reviewed);
+                return json({ ok: true });
+            }
+            catch (e) {
+                if (e.code) {
+                    console.error("Beam storage error:", e.code);
+                    return json({ error: "Local storage failed. Check collector permissions and disk space; retry the request." }, 500);
+                }
+                return json({ error: e instanceof Error ? e.message : "Invalid request." }, 400);
+            }
+        } };
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAqF;IACzH,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,uBAAuB,EAAE,uBAAuB,CAAC,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAY;YACtC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,OAAO,GAA2B,EAAE,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAC/H,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;YACvF,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;YACxH,uFAAuF;YACvF,uFAAuF;YACvF,8FAA8F;YAC9F,IAAI,MAAM,IAAI,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YAClH,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,6BAA6B,CAAC,GAAG,MAAM,CAAC;gBAChD,OAAO,CAAC,8BAA8B,CAAC,GAAG,oBAAoB,CAAC;gBAC/D,OAAO,CAAC,8BAA8B,CAAC,GAAG,6BAA6B,CAAC;gBACxE,OAAO,CAAC,sCAAsC,CAAC,GAAG,MAAM,CAAC;YAC3D,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YAClF,8FAA8F;YAC9F,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,EAAE,CAAC;gBACjF,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,0BAA0B,EAAE,EAAE,CAAC,CAAC;YAC7G,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC;YACrE,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,wCAAwC,EAAE,EAAE,GAAG,CAAC,CAAC;YACnJ,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;gBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sEAAsE,EAAE,EAAE,GAAG,CAAC,CAAC;YAC7I,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAClL,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;oBAAE,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC3L,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;oBAAE,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,2CAA2C,EAAE,EAAE,CAAC,CAAC;gBAC1Q,0EAA0E;gBAC1E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe;oBAAE,OAAO,IAAI,CAAC,MAAM,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrH,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;gBAClJ,mFAAmF;gBACnF,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;gBAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAiB,EAAE,CAAC;gBACpF,IAAI,MAAM;oBAAE,OAAO,IAAI,EAAE,CAAC;wBAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBAAC,IAAI,IAAI;4BAAE,MAAM;wBAAC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;wBAAC,IAAI,IAAI,GAAG,SAAS,EAAE,CAAC;4BAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;4BAAC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAAC,CAAC;gBAC/O,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBACpD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;oBAC9D,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAC3E,oGAAoG;oBACpG,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;oBAC9G,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;oBAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC5G,CAAC;gBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC7B,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;oBACnL,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACjF,CAAC;gBACD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;gBAClI,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAK,CAA2B,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAG,CAA2B,CAAC,IAAI,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sFAAsF,EAAE,EAAE,GAAG,CAAC,CAAC;gBAAC,CAAC;gBACxO,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;YACnF,CAAC;QACH,CAAC,EAAE,CAAC;AACN,CAAC"}

package/dist/service.d.ts

@@ -0,0 +1,27 @@
+import { execFile } from "node:child_process";
+export declare const run: typeof execFile.__promisify__;
+export interface ServiceOptions {
+    port?: number;
+    home?: string;
+}
+export interface ServiceInfo {
+    platform: string;
+    managed: boolean;
+    configPath: string;
+    running?: boolean;
+    raw?: string;
+}
+export declare function macPlistPath(home?: string): string;
+export declare function macPlist(port: number, dataDir: string): string;
+export declare function systemdUnitPath(home?: string): string;
+export declare function systemdUnit(port: number, dataDir: string): string;
+export declare function installService(options?: ServiceOptions): Promise<ServiceInfo>;
+export declare function uninstallService(home?: string): Promise<void>;
+export declare function startService(home?: string): Promise<void>;
+export declare function stopService(home?: string): Promise<void>;
+export declare function serviceStatus(home?: string): Promise<ServiceInfo>;
+export declare function serviceLogPaths(): Promise<{
+    out: string;
+    err?: string;
+}>;
+export declare function readServiceConfig(home?: string): Promise<string | null>;

package/dist/service.js

@@ -0,0 +1,169 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { homedir } from "node:os";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { getDataDirectory } from "./config.js";
+export const run = promisify(execFile);
+const LABEL = "ai.beam.collector";
+// os.platform() does not track process.platform overrides in tests; process.platform does.
+function osPlatform() { return process.platform; }
+function cliEntryPath() {
+    // dist/service.js sits next to dist/cli.js after build.
+    return join(dirname(fileURLToPath(import.meta.url)), "cli.js");
+}
+function logDirectory() {
+    return join(getDataDirectory(), "logs");
+}
+// --- macOS: launchd user agent ---
+export function macPlistPath(home = homedir()) {
+    return join(home, "Library", "LaunchAgents", `${LABEL}.plist`);
+}
+export function macPlist(port, dataDir) {
+    const exec = process.execPath;
+    const cli = cliEntryPath();
+    const escape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${escape(exec)}</string>
+    <string>${escape(cli)}</string>
+    <string>start</string>
+    <string>--port</string>
+    <string>${port}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>BEAM_DATA_DIR</key><string>${escape(dataDir)}</string>
+  </dict>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>ProcessType</key><string>Background</string>
+  <key>StandardOutPath</key><string>${escape(join(dataDir, "logs", "collector.log"))}</string>
+  <key>StandardErrorPath</key><string>${escape(join(dataDir, "logs", "collector.err.log"))}</string>
+</dict>
+</plist>
+`;
+}
+async function macInstall(options) {
+    const path = macPlistPath(options.home);
+    const dataDir = getDataDirectory();
+    await mkdir(join(dataDir, "logs"), { recursive: true });
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, macPlist(options.port ?? 4319, dataDir));
+    await run("launchctl", ["load", "-w", path]).catch(() => { });
+    return { platform: "darwin", managed: true, configPath: path };
+}
+async function macUninstall(home) {
+    const path = macPlistPath(home);
+    await run("launchctl", ["unload", "-w", path]).catch(() => { });
+    await rm(path, { force: true });
+}
+async function macStart(home) { await run("launchctl", ["load", "-w", macPlistPath(home)]); }
+async function macStop(home) { await run("launchctl", ["unload", "-w", macPlistPath(home)]); }
+async function macStatus(home) {
+    const { stdout } = await run("launchctl", ["list"]).catch(() => ({ stdout: "" }));
+    const line = stdout.split("\n").find(l => l.includes(LABEL));
+    return { platform: "darwin", managed: Boolean(line), configPath: macPlistPath(home), running: Boolean(line), raw: line };
+}
+// --- Linux: systemd user service ---
+export function systemdUnitPath(home = homedir()) {
+    return join(home, ".config", "systemd", "user", "beam.service");
+}
+export function systemdUnit(port, dataDir) {
+    const exec = process.execPath;
+    const cli = cliEntryPath();
+    return `[Unit]
+Description=Beam collector
+
+[Service]
+ExecStart=${exec} ${cli} start --port ${port}
+Environment=BEAM_DATA_DIR=${dataDir}
+Restart=always
+RestartSec=2
+
+[Install]
+WantedBy=default.target
+`;
+}
+async function systemdInstall(options) {
+    const path = systemdUnitPath(options.home);
+    const dataDir = getDataDirectory();
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, systemdUnit(options.port ?? 4319, dataDir));
+    await run("systemctl", ["--user", "daemon-reload"]);
+    await run("systemctl", ["--user", "enable", "--now", "beam.service"]);
+    return { platform: "linux", managed: true, configPath: path };
+}
+async function systemdUninstall(home) {
+    await run("systemctl", ["--user", "disable", "--now", "beam.service"]).catch(() => { });
+    await rm(systemdUnitPath(home), { force: true });
+    await run("systemctl", ["--user", "daemon-reload"]).catch(() => { });
+}
+async function systemdStart() { await run("systemctl", ["--user", "start", "beam.service"]); }
+async function systemdStop() { await run("systemctl", ["--user", "stop", "beam.service"]); }
+async function systemdStatus(home) {
+    const { stdout } = await run("systemctl", ["--user", "is-active", "beam.service"]).catch(e => ({ stdout: e.stdout ?? "inactive" }));
+    const running = stdout.trim() === "active";
+    return { platform: "linux", managed: running, configPath: systemdUnitPath(home), running, raw: stdout.trim() };
+}
+// --- dispatch ---
+function unsupported() {
+    throw new Error(`'beam service' is not supported on ${osPlatform()} yet. Run 'beam start' directly instead.`);
+}
+export async function installService(options = {}) {
+    if (osPlatform() === "darwin")
+        return macInstall(options);
+    if (osPlatform() === "linux")
+        return systemdInstall(options);
+    return unsupported();
+}
+export async function uninstallService(home) {
+    if (osPlatform() === "darwin")
+        return macUninstall(home);
+    if (osPlatform() === "linux")
+        return systemdUninstall(home);
+    return unsupported();
+}
+export async function startService(home) {
+    if (osPlatform() === "darwin")
+        return macStart(home);
+    if (osPlatform() === "linux")
+        return systemdStart();
+    return unsupported();
+}
+export async function stopService(home) {
+    if (osPlatform() === "darwin")
+        return macStop(home);
+    if (osPlatform() === "linux")
+        return systemdStop();
+    return unsupported();
+}
+export async function serviceStatus(home) {
+    if (osPlatform() === "darwin")
+        return macStatus(home);
+    if (osPlatform() === "linux")
+        return systemdStatus(home);
+    return unsupported();
+}
+export async function serviceLogPaths() {
+    const dir = logDirectory();
+    if (osPlatform() === "darwin")
+        return { out: join(dir, "collector.log"), err: join(dir, "collector.err.log") };
+    return { out: "journalctl --user -u beam.service -f" };
+}
+export async function readServiceConfig(home) {
+    const path = osPlatform() === "darwin" ? macPlistPath(home) : systemdUnitPath(home);
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAEvC,MAAM,KAAK,GAAG,mBAAmB,CAAC;AAElC,2FAA2F;AAC3F,SAAS,UAAU,KAAa,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAE1D,SAAS,YAAY;IACnB,wDAAwD;IACxD,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,IAAI,CAAC,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC1C,CAAC;AAKD,oCAAoC;AAEpC,MAAM,UAAU,YAAY,CAAC,IAAI,GAAG,OAAO,EAAE;IAC3C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,OAAe;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACnG,OAAO;;;;4BAImB,KAAK;;;cAGnB,MAAM,CAAC,IAAI,CAAC;cACZ,MAAM,CAAC,GAAG,CAAC;;;cAGX,IAAI;;;;sCAIoB,MAAM,CAAC,OAAO,CAAC;;;;;sCAKf,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;wCAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;;;CAGzF,CAAC;AACF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,OAAuB;IAC/C,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAa;IACvC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAa,IAAmB,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrH,KAAK,UAAU,OAAO,CAAC,IAAa,IAAmB,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtH,KAAK,UAAU,SAAS,CAAC,IAAa;IACpC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AAC3H,CAAC;AAED,sCAAsC;AAEtC,MAAM,UAAU,eAAe,CAAC,IAAI,GAAG,OAAO,EAAE;IAC9C,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,OAAO;;;;YAIG,IAAI,IAAI,GAAG,iBAAiB,IAAI;4BAChB,OAAO;;;;;;CAMlC,CAAC;AACF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,OAAuB;IACnD,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACtE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAa;IAC3C,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,KAAK,UAAU,YAAY,KAAoB,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7G,KAAK,UAAU,WAAW,KAAoB,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;AAE3G,KAAK,UAAU,aAAa,CAAC,IAAa;IACxC,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAG,CAAyB,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7J,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC;IAC3C,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AACjH,CAAC;AAED,mBAAmB;AAEnB,SAAS,WAAW;IAClB,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,EAAE,0CAA0C,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAA0B,EAAE;IAC/D,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,UAAU,EAAE,KAAK,OAAO;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAa;IAClD,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,UAAU,EAAE,KAAK,OAAO;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC5D,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAa;IAC9C,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrD,IAAI,UAAU,EAAE,KAAK,OAAO;QAAE,OAAO,YAAY,EAAE,CAAC;IACpD,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAa;IAC7C,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,UAAU,EAAE,KAAK,OAAO;QAAE,OAAO,WAAW,EAAE,CAAC;IACnD,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAa;IAC/C,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,UAAU,EAAE,KAAK,OAAO;QAAE,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,WAAW,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;IAC3B,IAAI,UAAU,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,EAAE,CAAC;IAC/G,OAAO,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAa;IACnD,MAAM,IAAI,GAAG,UAAU,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,CAAC;QAAC,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACrE,CAAC"}

package/dist/store.d.ts

@@ -0,0 +1,19 @@
+import type { Event, Scan } from "./core.js";
+export declare class Store {
+    readonly directory: string;
+    events: Event[];
+    scans: Scan[];
+    reviews: Record<string, boolean>;
+    private queue;
+    readonly maxEvents = 10000;
+    constructor(directory: string);
+    init(): Promise<void>;
+    private serialized;
+    private replace;
+    addEvents(rows: Event[]): Promise<{
+        accepted: number;
+        duplicates: number;
+    }>;
+    addScan(scan: Scan): Promise<Scan>;
+    review(id: string, reviewed: boolean): Promise<void>;
+}