@gsep/core 0.8.0 → 1.0.0

package/dist/security/TamperProofAuditLog.js

@@ -0,0 +1,214 @@
+import { createHmac, createCipheriv, createDecipheriv, randomBytes, randomUUID } from 'node:crypto';
+import { appendFile, readFile, mkdir, readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+const AUDIT_DIR = join(homedir(), '.genome', 'audit');
+const ROOT_HASH_KEY = 'audit-root-hash';
+const ALGORITHM = 'aes-256-gcm';
+const IV_BYTES = 12;
+export class TamperProofAuditLog {
+    alk;
+    keychain;
+    currentHash = '';
+    auditDir;
+    entryCount = 0;
+    initialized = false;
+    constructor(auditLogKey, keychain, auditDir) {
+        if (auditLogKey.length !== 32) {
+            throw new Error('[TamperProofAuditLog] ALK must be 32 bytes.');
+        }
+        this.alk = auditLogKey;
+        this.keychain = keychain;
+        this.auditDir = auditDir ?? AUDIT_DIR;
+    }
+    async initialize() {
+        if (this.initialized)
+            return;
+        await mkdir(this.auditDir, { recursive: true });
+        const rootHash = await this.keychain.get(ROOT_HASH_KEY);
+        this.currentHash = rootHash ?? this.computeHMAC('genesis');
+        if (!rootHash) {
+            await this.keychain.set(ROOT_HASH_KEY, this.currentHash);
+        }
+        this.entryCount = await this.countEntries();
+        this.initialized = true;
+        await this.append({
+            type: 'audit:initialized',
+            severity: 'info',
+            layer: 7,
+            decision: 'info',
+            actor: {},
+            resource: { type: 'audit-log', id: 'system' },
+        });
+    }
+    async appendFromEvent(event) {
+        await this.append({
+            type: event.type,
+            severity: event.severity,
+            layer: event.layer,
+            decision: event.decision,
+            actor: event.actor,
+            resource: event.resource,
+            evidence: event.evidence,
+        });
+    }
+    async append(entry) {
+        this.ensureInitialized();
+        const fullEntry = {
+            id: randomUUID(),
+            timestamp: new Date().toISOString(),
+            ...entry,
+            previousHash: this.currentHash,
+            hash: '',
+        };
+        fullEntry.hash = this.computeEntryHash(fullEntry);
+        this.currentHash = fullEntry.hash;
+        const encrypted = this.encryptEntry(fullEntry);
+        const filePath = this.todayFilePath();
+        await appendFile(filePath, encrypted.toString('base64') + '\n', { mode: 0o600 });
+        this.entryCount++;
+        if (this.entryCount % 50 === 0) {
+            await this.keychain.set(ROOT_HASH_KEY, this.currentHash);
+        }
+        return fullEntry;
+    }
+    async verify() {
+        this.ensureInitialized();
+        const entries = await this.readAllEntries();
+        const storedRootHash = await this.keychain.get(ROOT_HASH_KEY);
+        if (entries.length === 0) {
+            return { valid: true, totalEntries: 0, rootHashMatch: true };
+        }
+        let previousHash = this.computeHMAC('genesis');
+        for (let i = 0; i < entries.length; i++) {
+            const entry = entries[i];
+            if (entry.previousHash !== previousHash) {
+                return {
+                    valid: false,
+                    totalEntries: entries.length,
+                    brokenAt: i,
+                    brokenEntry: entry,
+                    rootHashMatch: false,
+                };
+            }
+            const expectedHash = this.computeEntryHash(entry);
+            if (entry.hash !== expectedHash) {
+                return {
+                    valid: false,
+                    totalEntries: entries.length,
+                    brokenAt: i,
+                    brokenEntry: entry,
+                    rootHashMatch: false,
+                };
+            }
+            previousHash = entry.hash;
+        }
+        const lastHash = entries[entries.length - 1].hash;
+        const rootHashMatch = storedRootHash === lastHash || storedRootHash === this.currentHash;
+        return {
+            valid: true,
+            totalEntries: entries.length,
+            rootHashMatch,
+        };
+    }
+    async readEntries(date) {
+        const filePath = date ? this.filePathForDate(date) : this.todayFilePath();
+        return this.readEntriesFromFile(filePath);
+    }
+    getEntryCount() {
+        return this.entryCount;
+    }
+    async flush() {
+        if (this.currentHash) {
+            await this.keychain.set(ROOT_HASH_KEY, this.currentHash);
+        }
+    }
+    computeHMAC(data) {
+        return createHmac('sha256', this.alk).update(data).digest('hex');
+    }
+    computeEntryHash(entry) {
+        const payload = JSON.stringify({
+            id: entry.id,
+            timestamp: entry.timestamp,
+            type: entry.type,
+            severity: entry.severity,
+            layer: entry.layer,
+            decision: entry.decision,
+            actor: entry.actor,
+            resource: entry.resource,
+            evidence: entry.evidence,
+            previousHash: entry.previousHash,
+        });
+        return this.computeHMAC(payload);
+    }
+    encryptEntry(entry) {
+        const iv = randomBytes(IV_BYTES);
+        const plaintext = Buffer.from(JSON.stringify(entry), 'utf-8');
+        const cipher = createCipheriv(ALGORITHM, this.alk, iv);
+        const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+        const authTag = cipher.getAuthTag();
+        return Buffer.concat([iv, authTag, encrypted]);
+    }
+    decryptEntry(raw) {
+        const iv = raw.subarray(0, IV_BYTES);
+        const authTag = raw.subarray(IV_BYTES, IV_BYTES + 16);
+        const ciphertext = raw.subarray(IV_BYTES + 16);
+        const decipher = createDecipheriv(ALGORITHM, this.alk, iv);
+        decipher.setAuthTag(authTag);
+        const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+        return JSON.parse(decrypted.toString('utf-8'));
+    }
+    todayFilePath() {
+        const date = new Date().toISOString().slice(0, 10);
+        return join(this.auditDir, `${date}.jsonl.enc`);
+    }
+    filePathForDate(date) {
+        const dateStr = date.toISOString().slice(0, 10);
+        return join(this.auditDir, `${dateStr}.jsonl.enc`);
+    }
+    async readEntriesFromFile(filePath) {
+        try {
+            const content = await readFile(filePath, 'utf-8');
+            const lines = content.split('\n').filter(l => l.trim());
+            return lines.map(line => this.decryptEntry(Buffer.from(line, 'base64')));
+        }
+        catch {
+            return [];
+        }
+    }
+    async readAllEntries() {
+        try {
+            const files = await readdir(this.auditDir);
+            const logFiles = files.filter(f => f.endsWith('.jsonl.enc')).sort();
+            const allEntries = [];
+            for (const file of logFiles) {
+                const entries = await this.readEntriesFromFile(join(this.auditDir, file));
+                allEntries.push(...entries);
+            }
+            return allEntries;
+        }
+        catch {
+            return [];
+        }
+    }
+    async countEntries() {
+        try {
+            const files = await readdir(this.auditDir);
+            let count = 0;
+            for (const file of files.filter(f => f.endsWith('.jsonl.enc'))) {
+                const content = await readFile(join(this.auditDir, file), 'utf-8');
+                count += content.split('\n').filter(l => l.trim()).length;
+            }
+            return count;
+        }
+        catch {
+            return 0;
+        }
+    }
+    ensureInitialized() {
+        if (!this.initialized) {
+            throw new Error('[TamperProofAuditLog] Not initialized. Call initialize() first.');
+        }
+    }
+}
+//# sourceMappingURL=TamperProofAuditLog.js.map

package/dist/security/TamperProofAuditLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"TamperProofAuditLog.js","sourceRoot":"","sources":["../../src/security/TamperProofAuditLog.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACpG,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAIlC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AACtD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,QAAQ,GAAG,EAAE,CAAC;AAwDpB,MAAM,OAAO,mBAAmB;IACpB,GAAG,CAAS;IACZ,QAAQ,CAAkB;IAC1B,WAAW,GAAW,EAAE,CAAC;IACzB,QAAQ,CAAS;IACjB,UAAU,GAAG,CAAC,CAAC;IACf,WAAW,GAAG,KAAK,CAAC;IAE5B,YAAY,WAAmB,EAAE,QAAyB,EAAE,QAAiB;QACzE,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,WAAW,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,SAAS,CAAC;IAC1C,CAAC;IAKD,KAAK,CAAC,UAAU;QACZ,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAGhD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,CAAC,WAAW,GAAG,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE3D,IAAI,CAAC,QAAQ,EAAE,CAAC;YAEZ,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;QAGD,IAAI,CAAC,UAAU,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE5C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAGxB,MAAM,IAAI,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC;YACR,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,EAAE;YACT,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE;SAChD,CAAC,CAAC;IACP,CAAC;IAKD,KAAK,CAAC,eAAe,CAAC,KAAoB;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SAC3B,CAAC,CAAC;IACP,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,KAAqE;QAC9E,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,SAAS,GAAe;YAC1B,EAAE,EAAE,UAAU,EAAE;YAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,KAAK;YACR,YAAY,EAAE,IAAI,CAAC,WAAW;YAC9B,IAAI,EAAE,EAAE;SACX,CAAC;QAGF,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAGlD,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC;QAGlC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAGjF,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,SAAS,CAAC;IACrB,CAAC;IAKD,KAAK,CAAC,MAAM;QACR,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAEzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAE9D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;QACjE,CAAC;QAED,IAAI,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAE/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YAGzB,IAAI,KAAK,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;gBACtC,OAAO;oBACH,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,OAAO,CAAC,MAAM;oBAC5B,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,KAAK;oBAClB,aAAa,EAAE,KAAK;iBACvB,CAAC;YACN,CAAC;YAGD,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC9B,OAAO;oBACH,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,OAAO,CAAC,MAAM;oBAC5B,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,KAAK;oBAClB,aAAa,EAAE,KAAK;iBACvB,CAAC;YACN,CAAC;YAED,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9B,CAAC;QAGD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAClD,MAAM,aAAa,GAAG,cAAc,KAAK,QAAQ,IAAI,cAAc,KAAK,IAAI,CAAC,WAAW,CAAC;QAEzF,OAAO;YACH,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,OAAO,CAAC,MAAM;YAC5B,aAAa;SAChB,CAAC;IACN,CAAC;IAKD,KAAK,CAAC,WAAW,CAAC,IAAW;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAKD,aAAa;QACT,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;IAKD,KAAK,CAAC,KAAK;QACP,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAIO,WAAW,CAAC,IAAY;QAC5B,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC;IAEO,gBAAgB,CAAC,KAAiB;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;YAC3B,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;SACnC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAEO,YAAY,CAAC,KAAiB;QAClC,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,YAAY,CAAC,GAAW;QAC5B,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,EAAE,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC3D,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,CAAC;IAEO,aAAa;QACjB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,YAAY,CAAC,CAAC;IACpD,CAAC;IAEO,eAAe,CAAC,IAAU;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,OAAO,YAAY,CAAC,CAAC;IACvD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QAC9C,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACxD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,cAAc;QACxB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACpE,MAAM,UAAU,GAAiB,EAAE,CAAC;YACpC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;gBAC1E,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,UAAU,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,CAAC;QACd,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY;QACtB,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;gBAC7D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;gBACnE,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAC9D,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,CAAC;QACb,CAAC;IACL,CAAC;IAEO,iBAAiB;QACrB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACvF,CAAC;IACL,CAAC;CACJ"}

package/dist/security/index.d.ts

@@ -0,0 +1,27 @@
+export { SecurityEventBus, type SecurityEvent, type SecurityEventType } from './SecurityEventBus.js';
+export { type SecurityPresetName, type SecurityConfig, getSecurityPreset } from './SecurityPresets.js';
+export { GenomeSecurityBridge, type InboundResult, type OutboundResult, type ChannelTrustLevel } from './GenomeSecurityBridge.js';
+export { PIIRedactionEngine, type PIICategory, type PIIMatch, type RedactionResult } from './PIIRedactionEngine.js';
+export { DataClassifier, type DataClassification, type ClassificationResult } from './DataClassifier.js';
+export { LLMProxyLayer, type LLMAdapterLike, type ProxyStats } from './LLMProxyLayer.js';
+export { KeychainAdapter } from './KeychainAdapter.js';
+export { KeyHierarchy, type DerivedKeys } from './KeyHierarchy.js';
+export { EncryptedConfigStore } from './EncryptedConfigStore.js';
+export { SecretsMigrator } from './SecretsMigrator.js';
+export { SkillManifest, type SkillManifestData, type CapabilityType, type SkillPermissions } from './SkillManifest.js';
+export { SkillSigner, type SkillSignature, type KeyPair } from './SkillSigner.js';
+export { CapabilityBroker, type CapabilityGrant, type CapabilityCheckResult } from './CapabilityBroker.js';
+export { CommandExecutionGuard, type ExecRequest, type ExecResult, type ExecDecision } from './CommandExecutionGuard.js';
+export { FileSystemBoundary, type FSAccess, type FSCheckResult } from './FileSystemBoundary.js';
+export { OutboundAllowlist, type OutboundCheckResult } from './OutboundAllowlist.js';
+export { NetworkAuditLogger, type NetworkLogEntry, type TrafficSummary } from './NetworkAuditLogger.js';
+export { TamperProofAuditLog, type AuditEntry, type AuditEventType } from './TamperProofAuditLog.js';
+export { DataAccessTracker, type DataSource, type DataCategory, type DataAccessRecord, type DataAccessReport } from './DataAccessTracker.js';
+export { ComplianceExporter, type ReportFormat, type ReportType, type ExportResult } from './ComplianceExporter.js';
+export { RBACEngine, type RoleName, type Permission, type Role, type AccessCheckResult } from './RBACEngine.js';
+export { MFAProvider, type MFASetup, type MFAVerifyResult } from './MFAProvider.js';
+export { EnterprisePolicyEngine, type EnterprisePolicy, type RolePolicy, type AlertRule } from './EnterprisePolicyEngine.js';
+export { SecretRotationEngine, type RotationPolicy, type RotationResult, type RotationStatus } from './SecretRotationEngine.js';
+export { GDPREngine, type ConsentRecord, type ErasureReport, type DataPortabilityExport, type DPIAReport } from './GDPREngine.js';
+export { SOC2Controls, type SOC2Control, type SOC2Report, type ControlStatus } from './SOC2Controls.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGvG,OAAO,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAGlI,OAAO,EAAE,kBAAkB,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,yBAAyB,CAAC;AACpH,OAAO,EAAE,cAAc,EAAE,KAAK,kBAAkB,EAAE,KAAK,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGzF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACvH,OAAO,EAAE,WAAW,EAAE,KAAK,cAAc,EAAE,KAAK,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,KAAK,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAG3G,OAAO,EAAE,qBAAqB,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,4BAA4B,CAAC;AACzH,OAAO,EAAE,kBAAkB,EAAE,KAAK,QAAQ,EAAE,KAAK,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,iBAAiB,EAAE,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGxG,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC7I,OAAO,EAAE,kBAAkB,EAAE,KAAK,YAAY,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGpH,OAAO,EAAE,UAAU,EAAE,KAAK,QAAQ,EAAE,KAAK,UAAU,EAAE,KAAK,IAAI,EAAE,KAAK,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAChH,OAAO,EAAE,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChI,OAAO,EAAE,UAAU,EAAE,KAAK,aAAa,EAAE,KAAK,aAAa,EAAE,KAAK,qBAAqB,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/security/index.js

@@ -0,0 +1,27 @@
+export { SecurityEventBus } from './SecurityEventBus.js';
+export { getSecurityPreset } from './SecurityPresets.js';
+export { GenomeSecurityBridge } from './GenomeSecurityBridge.js';
+export { PIIRedactionEngine } from './PIIRedactionEngine.js';
+export { DataClassifier } from './DataClassifier.js';
+export { LLMProxyLayer } from './LLMProxyLayer.js';
+export { KeychainAdapter } from './KeychainAdapter.js';
+export { KeyHierarchy } from './KeyHierarchy.js';
+export { EncryptedConfigStore } from './EncryptedConfigStore.js';
+export { SecretsMigrator } from './SecretsMigrator.js';
+export { SkillManifest } from './SkillManifest.js';
+export { SkillSigner } from './SkillSigner.js';
+export { CapabilityBroker } from './CapabilityBroker.js';
+export { CommandExecutionGuard } from './CommandExecutionGuard.js';
+export { FileSystemBoundary } from './FileSystemBoundary.js';
+export { OutboundAllowlist } from './OutboundAllowlist.js';
+export { NetworkAuditLogger } from './NetworkAuditLogger.js';
+export { TamperProofAuditLog } from './TamperProofAuditLog.js';
+export { DataAccessTracker } from './DataAccessTracker.js';
+export { ComplianceExporter } from './ComplianceExporter.js';
+export { RBACEngine } from './RBACEngine.js';
+export { MFAProvider } from './MFAProvider.js';
+export { EnterprisePolicyEngine } from './EnterprisePolicyEngine.js';
+export { SecretRotationEngine } from './SecretRotationEngine.js';
+export { GDPREngine } from './GDPREngine.js';
+export { SOC2Controls } from './SOC2Controls.js';
+//# sourceMappingURL=index.js.map

package/dist/security/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/security/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,gBAAgB,EAA8C,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAgD,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAGvG,OAAO,EAAE,oBAAoB,EAAmE,MAAM,2BAA2B,CAAC;AAGlI,OAAO,EAAE,kBAAkB,EAAyD,MAAM,yBAAyB,CAAC;AACpH,OAAO,EAAE,cAAc,EAAsD,MAAM,qBAAqB,CAAC;AACzG,OAAO,EAAE,aAAa,EAAwC,MAAM,oBAAoB,CAAC;AAGzF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAoB,MAAM,mBAAmB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,aAAa,EAAsE,MAAM,oBAAoB,CAAC;AACvH,OAAO,EAAE,WAAW,EAAqC,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAoD,MAAM,uBAAuB,CAAC;AAG3G,OAAO,EAAE,qBAAqB,EAAwD,MAAM,4BAA4B,CAAC;AACzH,OAAO,EAAE,kBAAkB,EAAqC,MAAM,yBAAyB,CAAC;AAGhG,OAAO,EAAE,iBAAiB,EAA4B,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAA6C,MAAM,yBAAyB,CAAC;AAGxG,OAAO,EAAE,mBAAmB,EAAwC,MAAM,0BAA0B,CAAC;AACrG,OAAO,EAAE,iBAAiB,EAAoF,MAAM,wBAAwB,CAAC;AAC7I,OAAO,EAAE,kBAAkB,EAAyD,MAAM,yBAAyB,CAAC;AAGpH,OAAO,EAAE,UAAU,EAAqE,MAAM,iBAAiB,CAAC;AAChH,OAAO,EAAE,WAAW,EAAuC,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAA0D,MAAM,6BAA6B,CAAC;AAC7H,OAAO,EAAE,oBAAoB,EAAiE,MAAM,2BAA2B,CAAC;AAChI,OAAO,EAAE,UAAU,EAAuF,MAAM,iBAAiB,CAAC;AAClI,OAAO,EAAE,YAAY,EAAyD,MAAM,mBAAmB,CAAC"}

package/dist/skills/ProactiveEngine.d.ts

@@ -0,0 +1,55 @@
+import type { LLMAdapter } from '../interfaces/LLMAdapter.js';
+import type { SkillRegistry } from './SkillRegistry.js';
+import type { SkillExecutor } from './SkillExecutor.js';
+export interface ProactiveTask {
+    id: string;
+    name: string;
+    instruction: string;
+    intervalMs: number | 'once';
+    allowedSkills?: string[];
+    notify: boolean;
+    priority: number;
+    active: boolean;
+}
+export interface ProactiveResult {
+    taskId: string;
+    taskName: string;
+    timestamp: Date;
+    findings: string;
+    actionTaken: string;
+    skillsUsed: string[];
+    shouldNotify: boolean;
+    importance: 'low' | 'medium' | 'high' | 'critical';
+}
+export interface ProactiveEngineConfig {
+    minIntervalMs?: number;
+    maxConcurrent?: number;
+    agentPurpose?: string;
+}
+export type NotificationHandler = (result: ProactiveResult) => void | Promise<void>;
+export declare class ProactiveEngine {
+    private llm;
+    private registry;
+    private executor;
+    private config;
+    private tasks;
+    private timers;
+    private results;
+    private notificationHandlers;
+    private running;
+    constructor(llm: LLMAdapter, registry: SkillRegistry, executor: SkillExecutor, config?: ProactiveEngineConfig);
+    addTask(task: Omit<ProactiveTask, 'active'>): void;
+    removeTask(id: string): void;
+    onNotification(handler: NotificationHandler): void;
+    start(): void;
+    stop(): void;
+    runTask(id: string): Promise<ProactiveResult | null>;
+    runAll(): Promise<ProactiveResult[]>;
+    getResults(limit?: number): ProactiveResult[];
+    getTasks(): ProactiveTask[];
+    isRunning(): boolean;
+    private executeTask;
+    private scheduleTask;
+    private stopTask;
+}
+//# sourceMappingURL=ProactiveEngine.d.ts.map

package/dist/skills/ProactiveEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProactiveEngine.d.ts","sourceRoot":"","sources":["../../src/skills/ProactiveEngine.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,UAAU,EAAW,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD,MAAM,WAAW,aAAa;IAE1B,EAAE,EAAE,MAAM,CAAC;IAGX,IAAI,EAAE,MAAM,CAAC;IAGb,WAAW,EAAE,MAAM,CAAC;IAGpB,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAG5B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IAGzB,MAAM,EAAE,OAAO,CAAC;IAGhB,QAAQ,EAAE,MAAM,CAAC;IAGjB,MAAM,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IAElC,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAIpF,qBAAa,eAAe;IASpB,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,QAAQ;IAVpB,OAAO,CAAC,MAAM,CAAkC;IAChD,OAAO,CAAC,KAAK,CAAyC;IACtD,OAAO,CAAC,MAAM,CAA0D;IACxE,OAAO,CAAC,OAAO,CAAyB;IACxC,OAAO,CAAC,oBAAoB,CAA6B;IACzD,OAAO,CAAC,OAAO,CAAS;gBAGZ,GAAG,EAAE,UAAU,EACf,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,aAAa,EAC/B,MAAM,GAAE,qBAA0B;IAYtC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,IAAI;IAOlD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAQ5B,cAAc,CAAC,OAAO,EAAE,mBAAmB,GAAG,IAAI;IAOlD,KAAK,IAAI,IAAI;IAcb,IAAI,IAAI,IAAI;IAUN,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAUpD,MAAM,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAgB1C,UAAU,CAAC,KAAK,GAAE,MAAW,GAAG,eAAe,EAAE;IAOjD,QAAQ,IAAI,aAAa,EAAE;IAO3B,SAAS,IAAI,OAAO;YAMN,WAAW;IAoHzB,OAAO,CAAC,YAAY;IAsBpB,OAAO,CAAC,QAAQ;CAOnB"}

package/dist/skills/ProactiveEngine.js

@@ -0,0 +1,201 @@
+export class ProactiveEngine {
+    llm;
+    registry;
+    executor;
+    config;
+    tasks = new Map();
+    timers = new Map();
+    results = [];
+    notificationHandlers = [];
+    running = false;
+    constructor(llm, registry, executor, config = {}) {
+        this.llm = llm;
+        this.registry = registry;
+        this.executor = executor;
+        this.config = {
+            minIntervalMs: config.minIntervalMs ?? 60000,
+            maxConcurrent: config.maxConcurrent ?? 2,
+            agentPurpose: config.agentPurpose ?? 'AI assistant',
+        };
+    }
+    addTask(task) {
+        this.tasks.set(task.id, { ...task, active: true });
+    }
+    removeTask(id) {
+        this.stopTask(id);
+        this.tasks.delete(id);
+    }
+    onNotification(handler) {
+        this.notificationHandlers.push(handler);
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        for (const [id, task] of this.tasks) {
+            if (task.active) {
+                this.scheduleTask(id, task);
+            }
+        }
+    }
+    stop() {
+        this.running = false;
+        for (const [id] of this.timers) {
+            this.stopTask(id);
+        }
+    }
+    async runTask(id) {
+        const task = this.tasks.get(id);
+        if (!task)
+            return null;
+        return this.executeTask(task);
+    }
+    async runAll() {
+        const activeTasks = Array.from(this.tasks.values())
+            .filter(t => t.active)
+            .sort((a, b) => b.priority - a.priority);
+        const results = [];
+        for (const task of activeTasks) {
+            const result = await this.executeTask(task);
+            results.push(result);
+        }
+        return results;
+    }
+    getResults(limit = 50) {
+        return this.results.slice(-limit);
+    }
+    getTasks() {
+        return Array.from(this.tasks.values());
+    }
+    isRunning() {
+        return this.running;
+    }
+    async executeTask(task) {
+        const availableSkills = task.allowedSkills
+            ? this.registry.list().filter(s => task.allowedSkills.includes(s.name))
+            : this.registry.list();
+        const skillDescriptions = availableSkills.length > 0
+            ? availableSkills.map(s => `- ${s.name}: ${s.description}`).join('\n')
+            : 'No skills available.';
+        const messages = [
+            {
+                role: 'system',
+                content: `You are a proactive AI agent. Your purpose: ${this.config.agentPurpose}.
+
+You are running a background task autonomously — no user is talking to you right now.
+Your job is to execute the task, analyze the results, and report findings.
+
+Available skills you can use:
+${skillDescriptions}
+
+To use a skill, include a <tool_call> block:
+<tool_call>
+{"name": "skill_name", "arguments": {"param": "value"}}
+</tool_call>
+
+After analyzing, respond with a JSON summary:
+{"findings": "what you found", "actionTaken": "what you did", "skillsUsed": ["skill1"], "importance": "low|medium|high|critical"}`,
+            },
+            {
+                role: 'user',
+                content: `Execute this proactive task:\n\n**${task.name}**\n${task.instruction}`,
+            },
+        ];
+        try {
+            const response = await this.llm.chat(messages);
+            const content = response.content;
+            const toolCallPattern = /<tool_call>\s*([\s\S]*?)\s*<\/tool_call>/g;
+            const skillsUsed = [];
+            let match;
+            while ((match = toolCallPattern.exec(content)) !== null) {
+                try {
+                    const parsed = JSON.parse(match[1].trim());
+                    if (parsed.name && this.registry.has(parsed.name)) {
+                        await this.executor.execute(parsed.name, parsed.arguments ?? {});
+                        skillsUsed.push(parsed.name);
+                    }
+                }
+                catch { }
+            }
+            const jsonMatch = content.match(/\{[\s\S]*"findings"[\s\S]*\}/);
+            let findings = 'Task completed';
+            let actionTaken = 'Analyzed';
+            let importance = 'low';
+            if (jsonMatch) {
+                try {
+                    const summary = JSON.parse(jsonMatch[0]);
+                    findings = summary.findings ?? findings;
+                    actionTaken = summary.actionTaken ?? actionTaken;
+                    importance = summary.importance ?? importance;
+                    if (Array.isArray(summary.skillsUsed)) {
+                        skillsUsed.push(...summary.skillsUsed.filter((s) => !skillsUsed.includes(s)));
+                    }
+                }
+                catch { }
+            }
+            const result = {
+                taskId: task.id,
+                taskName: task.name,
+                timestamp: new Date(),
+                findings,
+                actionTaken,
+                skillsUsed,
+                shouldNotify: task.notify && importance !== 'low',
+                importance,
+            };
+            this.results.push(result);
+            if (this.results.length > 200) {
+                this.results = this.results.slice(-200);
+            }
+            if (result.shouldNotify) {
+                for (const handler of this.notificationHandlers) {
+                    try {
+                        await handler(result);
+                    }
+                    catch { }
+                }
+            }
+            return result;
+        }
+        catch (err) {
+            const result = {
+                taskId: task.id,
+                taskName: task.name,
+                timestamp: new Date(),
+                findings: `Task failed: ${err instanceof Error ? err.message : String(err)}`,
+                actionTaken: 'None — execution error',
+                skillsUsed: [],
+                shouldNotify: false,
+                importance: 'low',
+            };
+            this.results.push(result);
+            return result;
+        }
+    }
+    scheduleTask(id, task) {
+        if (task.intervalMs === 'once') {
+            setTimeout(async () => {
+                await this.executeTask(task);
+                task.active = false;
+            }, 0);
+            return;
+        }
+        const interval = Math.max(task.intervalMs, this.config.minIntervalMs);
+        const timer = setInterval(async () => {
+            if (!this.running || !task.active) {
+                this.stopTask(id);
+                return;
+            }
+            await this.executeTask(task);
+        }, interval);
+        this.timers.set(id, timer);
+    }
+    stopTask(id) {
+        const timer = this.timers.get(id);
+        if (timer) {
+            clearInterval(timer);
+            this.timers.delete(id);
+        }
+    }
+}
+//# sourceMappingURL=ProactiveEngine.js.map

package/dist/skills/ProactiveEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProactiveEngine.js","sourceRoot":"","sources":["../../src/skills/ProactiveEngine.ts"],"names":[],"mappings":"AAgFA,MAAM,OAAO,eAAe;IASZ;IACA;IACA;IAVJ,MAAM,CAAkC;IACxC,KAAK,GAA+B,IAAI,GAAG,EAAE,CAAC;IAC9C,MAAM,GAAgD,IAAI,GAAG,EAAE,CAAC;IAChE,OAAO,GAAsB,EAAE,CAAC;IAChC,oBAAoB,GAA0B,EAAE,CAAC;IACjD,OAAO,GAAG,KAAK,CAAC;IAExB,YACY,GAAe,EACf,QAAuB,EACvB,QAAuB,EAC/B,SAAgC,EAAE;QAH1B,QAAG,GAAH,GAAG,CAAY;QACf,aAAQ,GAAR,QAAQ,CAAe;QACvB,aAAQ,GAAR,QAAQ,CAAe;QAG/B,IAAI,CAAC,MAAM,GAAG;YACV,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,KAAK;YAC5C,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,CAAC;YACxC,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,cAAc;SACtD,CAAC;IACN,CAAC;IAKD,OAAO,CAAC,IAAmC;QACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAKD,UAAU,CAAC,EAAU;QACjB,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAKD,cAAc,CAAC,OAA4B;QACvC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5C,CAAC;IAKD,KAAK;QACD,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACd,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC;QACL,CAAC;IACL,CAAC;IAKD,IAAI;QACA,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,KAAK,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC7B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAKD,KAAK,CAAC,OAAO,CAAC,EAAU;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAKD,KAAK,CAAC,MAAM;QACR,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;aAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;aACrB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QAE7C,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,OAAO,CAAC;IACnB,CAAC;IAKD,UAAU,CAAC,QAAgB,EAAE;QACzB,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IAKD,QAAQ;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IAC3C,CAAC;IAKD,SAAS;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACxB,CAAC;IAIO,KAAK,CAAC,WAAW,CAAC,IAAmB;QACzC,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa;YACtC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,aAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAE3B,MAAM,iBAAiB,GAAG,eAAe,CAAC,MAAM,GAAG,CAAC;YAChD,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACtE,CAAC,CAAC,sBAAsB,CAAC;QAE7B,MAAM,QAAQ,GAAc;YACxB;gBACI,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,+CAA+C,IAAI,CAAC,MAAM,CAAC,YAAY;;;;;;EAM9F,iBAAiB;;;;;;;;kIAQ+G;aACrH;YACD;gBACI,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,qCAAqC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,WAAW,EAAE;aACnF;SACJ,CAAC;QAEF,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;YAGjC,MAAM,eAAe,GAAG,2CAA2C,CAAC;YACpE,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,IAAI,KAAK,CAAC;YAEV,OAAO,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtD,IAAI,CAAC;oBACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;oBAC3C,IAAI,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;wBAChD,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;wBACjE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBACjC,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC,CAAsB,CAAC;YACpC,CAAC;YAGD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChE,IAAI,QAAQ,GAAG,gBAAgB,CAAC;YAChC,IAAI,WAAW,GAAG,UAAU,CAAC;YAC7B,IAAI,UAAU,GAAkC,KAAK,CAAC;YAEtD,IAAI,SAAS,EAAE,CAAC;gBACZ,IAAI,CAAC;oBACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC;oBACxC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,WAAW,CAAC;oBACjD,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC;oBAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;wBACpC,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC1F,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC,CAAoB,CAAC;YAClC,CAAC;YAED,MAAM,MAAM,GAAoB;gBAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ;gBACR,WAAW;gBACX,UAAU;gBACV,YAAY,EAAE,IAAI,CAAC,MAAM,IAAI,UAAU,KAAK,KAAK;gBACjD,UAAU;aACb,CAAC;YAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,CAAC;YAGD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBACtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC9C,IAAI,CAAC;wBACD,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC,CAAiD,CAAC;gBAC/D,CAAC;YACL,CAAC;YAED,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,MAAM,MAAM,GAAoB;gBAC5B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,QAAQ,EAAE,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBAC5E,WAAW,EAAE,wBAAwB;gBACrC,UAAU,EAAE,EAAE;gBACd,YAAY,EAAE,KAAK;gBACnB,UAAU,EAAE,KAAK;aACpB,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO,MAAM,CAAC;QAClB,CAAC;IACL,CAAC;IAIO,YAAY,CAAC,EAAU,EAAE,IAAmB;QAChD,IAAI,IAAI,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAE7B,UAAU,CAAC,KAAK,IAAI,EAAE;gBAClB,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACxB,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,OAAO;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAClB,OAAO;YACX,CAAC;YACD,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEb,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC;IAEO,QAAQ,CAAC,EAAU;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACR,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;IACL,CAAC;CACJ"}

package/dist/skills/SkillExecutor.d.ts

@@ -0,0 +1,21 @@
+import type { SkillRegistry, SkillCallResult } from './SkillRegistry.js';
+export interface SkillExecutorConfig {
+    timeoutMs?: number;
+    maxRetries?: number;
+}
+export declare class SkillExecutor {
+    private registry;
+    private config;
+    private mcpClients;
+    constructor(registry: SkillRegistry, config?: SkillExecutorConfig);
+    execute(skillName: string, params: Record<string, unknown>): Promise<SkillCallResult>;
+    connectMCP(uri: string): Promise<Array<{
+        name: string;
+        description: string;
+        inputSchema: Record<string, unknown>;
+    }>>;
+    disconnect(): Promise<void>;
+    private executeMCP;
+    private executeWithTimeout;
+}
+//# sourceMappingURL=SkillExecutor.d.ts.map

package/dist/skills/SkillExecutor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkillExecutor.d.ts","sourceRoot":"","sources":["../../src/skills/SkillExecutor.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAIzE,MAAM,WAAW,mBAAmB;IAEhC,SAAS,CAAC,EAAE,MAAM,CAAC;IAGnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,aAAa;IAKlB,OAAO,CAAC,QAAQ;IAJpB,OAAO,CAAC,MAAM,CAAgC;IAC9C,OAAO,CAAC,UAAU,CAAkC;gBAGxC,QAAQ,EAAE,aAAa,EAC/B,MAAM,GAAE,mBAAwB;IAW9B,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC;IA2DrF,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAoCpH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAWnB,UAAU;YAqCV,kBAAkB;CAQnC"}