@mandible-ai/mandible 0.2.0

package/dist/src/patterns/bridge.d.ts

@@ -0,0 +1,32 @@
+import type { BridgeConfig } from '../core/types.js';
+export interface BridgeStats {
+    signalsBridged: number;
+    signalsFiltered: number;
+    errors: number;
+    lastBridgedAt?: number;
+}
+export interface SignalBridge {
+    /** Start the bridge — begins watching/polling the source */
+    start(): Promise<void>;
+    /** Stop the bridge gracefully */
+    stop(): Promise<void>;
+    /** Whether the bridge is currently running */
+    readonly running: boolean;
+    /** Bridge statistics */
+    readonly stats: BridgeStats;
+}
+/**
+ * Create a signal bridge between two environments.
+ *
+ * Usage:
+ *   const bridge = createBridge({
+ *     name: 'github-to-local',
+ *     identity: bridgeId,
+ *     source: githubEnv,
+ *     target: localEnv,
+ *     signalTypes: ['task:ready', 'review:*'],
+ *   });
+ *   await bridge.start();
+ */
+export declare function createBridge(config: BridgeConfig): SignalBridge;
+//# sourceMappingURL=bridge.d.ts.map

package/dist/src/patterns/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../../src/patterns/bridge.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAGV,YAAY,EAGb,MAAM,kBAAkB,CAAC;AAI1B,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,YAAY;IAC3B,4DAA4D;IAC5D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,iCAAiC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,wBAAwB;IACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CA0K/D"}

package/dist/src/patterns/bridge.js

@@ -0,0 +1,163 @@
+// ============================================================
+// SignalBridge — Colony Pattern for Cross-Environment Bridging
+// ============================================================
+// A bridge monitors one environment and mirrors matching signals
+// to another, attesting each transfer with its own identity.
+//
+// Biological analogy: scout ants that carry pheromone markers
+// between foraging trails, creating connections between colonies.
+// ============================================================
+import { prepareForBridge } from '../core/attestation.js';
+/**
+ * Create a signal bridge between two environments.
+ *
+ * Usage:
+ *   const bridge = createBridge({
+ *     name: 'github-to-local',
+ *     identity: bridgeId,
+ *     source: githubEnv,
+ *     target: localEnv,
+ *     signalTypes: ['task:ready', 'review:*'],
+ *   });
+ *   await bridge.start();
+ */
+export function createBridge(config) {
+    let running = false;
+    let forwardSub;
+    let reverseSub;
+    let forwardPoll;
+    let reversePoll;
+    // Track which signals we've already bridged (prevent loops)
+    const bridgedIds = new Set();
+    const MAX_TRACKED = 10_000;
+    const stats = {
+        signalsBridged: 0,
+        signalsFiltered: 0,
+        errors: 0,
+    };
+    function trackBridged(id) {
+        bridgedIds.add(id);
+        // Prevent unbounded memory growth
+        if (bridgedIds.size > MAX_TRACKED) {
+            const iter = bridgedIds.values();
+            for (let i = 0; i < MAX_TRACKED / 2; i++) {
+                bridgedIds.delete(iter.next().value);
+            }
+        }
+    }
+    function buildQuery() {
+        return {
+            type: config.signalTypes,
+            unclaimed: false, // bridge all signals, not just unclaimed
+        };
+    }
+    async function bridgeSignal(signal, from, to, fromName, toName) {
+        // Skip if we already bridged this signal (prevents loops in bidirectional)
+        if (bridgedIds.has(signal.id))
+            return;
+        // Skip signals that originated from the target (prevent echo)
+        if (signal.meta.sourceEnvironment === toName)
+            return;
+        try {
+            // Apply optional transform
+            let transformedSignal = signal;
+            if (config.transform) {
+                transformedSignal = config.transform(signal);
+                if (!transformedSignal) {
+                    stats.signalsFiltered++;
+                    return;
+                }
+            }
+            // Add attestation and bridge metadata
+            const bridgedSignal = await prepareForBridge(transformedSignal, fromName, toName, config.identity);
+            // Deposit in target environment
+            await to.deposit({
+                type: bridgedSignal.type,
+                payload: bridgedSignal.payload,
+                meta: {
+                    ...bridgedSignal.meta,
+                    // Reset mutable state for the new environment
+                    concentration: 1.0,
+                    claimed_by: undefined,
+                    claimed_at: undefined,
+                    claim_lease: undefined,
+                },
+            });
+            trackBridged(signal.id);
+            stats.signalsBridged++;
+            stats.lastBridgedAt = Date.now();
+        }
+        catch (err) {
+            stats.errors++;
+            console.error(`[bridge:${config.name}] Error bridging signal ${signal.id}: ${err.message}`);
+        }
+    }
+    function setupWatch(from, to, fromName, toName) {
+        return from.watch(buildQuery(), (signal) => {
+            bridgeSignal(signal, from, to, fromName, toName);
+        });
+    }
+    function setupPoll(from, to, fromName, toName) {
+        const interval = config.pollInterval ?? 5_000;
+        return setInterval(async () => {
+            try {
+                const signals = await from.observe(buildQuery());
+                for (const signal of signals) {
+                    await bridgeSignal(signal, from, to, fromName, toName);
+                }
+            }
+            catch (err) {
+                stats.errors++;
+                console.error(`[bridge:${config.name}] Poll error: ${err.message}`);
+            }
+        }, interval);
+    }
+    return {
+        async start() {
+            if (running)
+                return;
+            running = true;
+            const sourceName = config.source.name;
+            const targetName = config.target.name;
+            // Forward direction: source → target
+            try {
+                forwardSub = setupWatch(config.source, config.target, sourceName, targetName);
+            }
+            catch {
+                // Watch not supported, fall back to polling
+                forwardPoll = setupPoll(config.source, config.target, sourceName, targetName);
+            }
+            // Reverse direction (if bidirectional): target → source
+            if (config.bidirectional) {
+                try {
+                    reverseSub = setupWatch(config.target, config.source, targetName, sourceName);
+                }
+                catch {
+                    reversePoll = setupPoll(config.target, config.source, targetName, sourceName);
+                }
+            }
+        },
+        async stop() {
+            if (!running)
+                return;
+            running = false;
+            forwardSub?.unsubscribe();
+            reverseSub?.unsubscribe();
+            if (forwardPoll)
+                clearInterval(forwardPoll);
+            if (reversePoll)
+                clearInterval(reversePoll);
+            forwardSub = undefined;
+            reverseSub = undefined;
+            forwardPoll = undefined;
+            reversePoll = undefined;
+        },
+        get running() {
+            return running;
+        },
+        get stats() {
+            return { ...stats };
+        },
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/dist/src/patterns/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../src/patterns/bridge.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,+DAA+D;AAC/D,+DAA+D;AAC/D,iEAAiE;AACjE,6DAA6D;AAC7D,EAAE;AACF,8DAA8D;AAC9D,kEAAkE;AAClE,+DAA+D;AAS/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAwB1D;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,UAAoC,CAAC;IACzC,IAAI,UAAoC,CAAC;IACzC,IAAI,WAAuD,CAAC;IAC5D,IAAI,WAAuD,CAAC;IAE5D,4DAA4D;IAC5D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,MAAM,KAAK,GAAgB;QACzB,cAAc,EAAE,CAAC;QACjB,eAAe,EAAE,CAAC;QAClB,MAAM,EAAE,CAAC;KACV,CAAC;IAEF,SAAS,YAAY,CAAC,EAAU;QAC9B,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnB,kCAAkC;QAClC,IAAI,UAAU,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC;YACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,UAAU;QACjB,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,WAAW;YACxB,SAAS,EAAE,KAAK,EAAE,yCAAyC;SAC5D,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,YAAY,CACzB,MAAc,EACd,IAAiB,EACjB,EAAe,EACf,QAAgB,EAChB,MAAc;QAEd,2EAA2E;QAC3E,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO;QAEtC,8DAA8D;QAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,KAAK,MAAM;YAAE,OAAO;QAErD,IAAI,CAAC;YACH,2BAA2B;YAC3B,IAAI,iBAAiB,GAAkB,MAAM,CAAC;YAC9C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,iBAAiB,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,CAAC,iBAAiB,EAAE,CAAC;oBACvB,KAAK,CAAC,eAAe,EAAE,CAAC;oBACxB,OAAO;gBACT,CAAC;YACH,CAAC;YAED,sCAAsC;YACtC,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAC1C,iBAAiB,EACjB,QAAQ,EACR,MAAM,EACN,MAAM,CAAC,QAAQ,CAChB,CAAC;YAEF,gCAAgC;YAChC,MAAM,EAAE,CAAC,OAAO,CAAC;gBACf,IAAI,EAAE,aAAa,CAAC,IAAI;gBACxB,OAAO,EAAE,aAAa,CAAC,OAAO;gBAC9B,IAAI,EAAE;oBACJ,GAAG,aAAa,CAAC,IAAI;oBACrB,8CAA8C;oBAC9C,aAAa,EAAE,GAAG;oBAClB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,WAAW,EAAE,SAAS;iBACvB;aACF,CAAC,CAAC;YAEH,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACxB,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,2BAA2B,MAAM,CAAC,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,SAAS,UAAU,CACjB,IAAiB,EACjB,EAAe,EACf,QAAgB,EAChB,MAAc;QAEd,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE;YACzC,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC,CAAC,CAAC;IACL,CAAC;IAED,SAAS,SAAS,CAChB,IAAiB,EACjB,EAAe,EACf,QAAgB,EAChB,MAAc;QAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;QAC9C,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;oBAC7B,MAAM,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,WAAW,MAAM,CAAC,IAAI,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,CAAC;QACH,CAAC,EAAE,QAAQ,CAAC,CAAC;IACf,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YAEf,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAEtC,qCAAqC;YACrC,IAAI,CAAC;gBACH,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAChF,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;gBAC5C,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;YAChF,CAAC;YAED,wDAAwD;YACxD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;gBAChF,CAAC;gBAAC,MAAM,CAAC;oBACP,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;gBAChF,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,GAAG,KAAK,CAAC;YAEhB,UAAU,EAAE,WAAW,EAAE,CAAC;YAC1B,UAAU,EAAE,WAAW,EAAE,CAAC;YAC1B,IAAI,WAAW;gBAAE,aAAa,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,WAAW;gBAAE,aAAa,CAAC,WAAW,CAAC,CAAC;YAE5C,UAAU,GAAG,SAAS,CAAC;YACvB,UAAU,GAAG,SAAS,CAAC;YACvB,WAAW,GAAG,SAAS,CAAC;YACxB,WAAW,GAAG,SAAS,CAAC;QAC1B,CAAC;QAED,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,KAAK;YACP,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/patterns/index.d.ts

@@ -0,0 +1,5 @@
+export { createBridge } from './bridge.js';
+export type { SignalBridge, BridgeStats } from './bridge.js';
+export { createSentinel } from './sentinel.js';
+export type { Sentinel, SentinelConfig, SentinelEvaluation, SentinelStats } from './sentinel.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/src/patterns/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/patterns/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC"}

package/dist/src/patterns/index.js

@@ -0,0 +1,3 @@
+export { createBridge } from './bridge.js';
+export { createSentinel } from './sentinel.js';
+//# sourceMappingURL=index.js.map

package/dist/src/patterns/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/patterns/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC"}

package/dist/src/patterns/sentinel.d.ts

@@ -0,0 +1,69 @@
+import type { Signal, Environment, TrustPolicy, TrustLevel } from '../core/types.js';
+export interface SentinelConfig {
+    /** Name for this sentinel instance */
+    name: string;
+    /** The environment to monitor */
+    environment: Environment;
+    /** Trust policy to evaluate signals against */
+    policy: TrustPolicy;
+    /** Which signal types to monitor (glob patterns). Default: all. */
+    watchTypes?: string[];
+    /** Callback when a signal is evaluated */
+    onEvaluated?: (signal: Signal, result: SentinelEvaluation) => void;
+    /** Callback when a signal is flagged (trust below policy minimum) */
+    onFlagged?: (signal: Signal, result: SentinelEvaluation) => void;
+    /**
+     * Whether to deposit sentinel report signals into the environment.
+     * These signals allow other colonies to react to trust events.
+     * Default: true
+     */
+    depositReports?: boolean;
+    /** How often to poll for new signals (ms). Default: 3000 */
+    pollInterval?: number;
+}
+export interface SentinelEvaluation {
+    signalId: string;
+    signalType: string;
+    trustLevel: TrustLevel;
+    meetsPolicy: boolean;
+    reason: string;
+    evaluatedAt: number;
+}
+export interface SentinelStats {
+    signalsEvaluated: number;
+    signalsFlagged: number;
+    byTrustLevel: Record<TrustLevel, number>;
+    lastEvaluatedAt?: number;
+}
+export interface Sentinel {
+    /** Start monitoring */
+    start(): Promise<void>;
+    /** Stop monitoring */
+    stop(): Promise<void>;
+    /** Whether the sentinel is running */
+    readonly running: boolean;
+    /** Monitoring statistics */
+    readonly stats: SentinelStats;
+    /** Get recent evaluations */
+    readonly recentEvaluations: SentinelEvaluation[];
+}
+/**
+ * Create a sentinel that monitors an environment for signal trust.
+ *
+ * Usage:
+ *   const sentinel = createSentinel({
+ *     name: 'local-guardian',
+ *     environment: localEnv,
+ *     policy: {
+ *       name: 'strict',
+ *       defaultTrust: 'unverified',
+ *       minimumTrust: 'attested',
+ *       trustedColonies: [shaperKey, criticKey],
+ *       trustedBridges: [githubBridgeKey],
+ *       quarantineRejected: true,
+ *     },
+ *   });
+ *   await sentinel.start();
+ */
+export declare function createSentinel(config: SentinelConfig): Sentinel;
+//# sourceMappingURL=sentinel.d.ts.map

package/dist/src/patterns/sentinel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.d.ts","sourceRoot":"","sources":["../../../src/patterns/sentinel.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EACV,MAAM,EACN,WAAW,EACX,WAAW,EACX,UAAU,EAGX,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,cAAc;IAC7B,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,EAAE,WAAW,CAAC;IAEzB,+CAA+C;IAC/C,MAAM,EAAE,WAAW,CAAC;IAEpB,mEAAmE;IACnE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB,0CAA0C;IAC1C,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAEnE,qEAAqE;IACrE,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAEjE;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,UAAU,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACzC,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ;IACvB,uBAAuB;IACvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB,sBAAsB;IACtB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtB,sCAAsC;IACtC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,4BAA4B;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAE9B,6BAA6B;IAC7B,QAAQ,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,CAAC;CAClD;AAcD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,GAAG,QAAQ,CAyJ/D"}

package/dist/src/patterns/sentinel.js

@@ -0,0 +1,184 @@
+// ============================================================
+// Sentinel — Colony Pattern for Trust Monitoring
+// ============================================================
+// A sentinel colony watches for signals in an environment and
+// evaluates their provenance against a trust policy. Untrusted
+// signals can be quarantined, tagged, or reported.
+//
+// Phase 1: Advisory only — flags signals, doesn't enforce.
+// Phase 2: Enforcement — integrates with environment deposit hooks.
+//
+// Biological analogy: guard ants that inspect returning foragers
+// and reject those carrying foreign colony scents.
+// ============================================================
+import { verifySignal } from '../core/attestation.js';
+/** The trust level ordering for comparison */
+const TRUST_ORDERING = {
+    verified: 3,
+    attested: 2,
+    unverified: 1,
+    rejected: 0,
+};
+function meetsTrustMinimum(level, minimum) {
+    return TRUST_ORDERING[level] >= TRUST_ORDERING[minimum];
+}
+/**
+ * Create a sentinel that monitors an environment for signal trust.
+ *
+ * Usage:
+ *   const sentinel = createSentinel({
+ *     name: 'local-guardian',
+ *     environment: localEnv,
+ *     policy: {
+ *       name: 'strict',
+ *       defaultTrust: 'unverified',
+ *       minimumTrust: 'attested',
+ *       trustedColonies: [shaperKey, criticKey],
+ *       trustedBridges: [githubBridgeKey],
+ *       quarantineRejected: true,
+ *     },
+ *   });
+ *   await sentinel.start();
+ */
+export function createSentinel(config) {
+    let running = false;
+    let watchSub;
+    let pollTimer;
+    const evaluatedIds = new Set();
+    const MAX_TRACKED = 10_000;
+    const MAX_RECENT = 100;
+    const recentEvaluations = [];
+    const stats = {
+        signalsEvaluated: 0,
+        signalsFlagged: 0,
+        byTrustLevel: { verified: 0, attested: 0, unverified: 0, rejected: 0 },
+    };
+    function buildQuery() {
+        return {
+            type: config.watchTypes ?? ['*'],
+        };
+    }
+    async function evaluateSignal(signal) {
+        // Skip already evaluated
+        if (evaluatedIds.has(signal.id))
+            return;
+        evaluatedIds.add(signal.id);
+        // Prevent unbounded growth
+        if (evaluatedIds.size > MAX_TRACKED) {
+            const iter = evaluatedIds.values();
+            for (let i = 0; i < MAX_TRACKED / 2; i++) {
+                evaluatedIds.delete(iter.next().value);
+            }
+        }
+        // Run verification
+        const result = await verifySignal(signal, config.policy);
+        const meetsPolicy = meetsTrustMinimum(result.trustLevel, config.policy.minimumTrust);
+        const evaluation = {
+            signalId: signal.id,
+            signalType: signal.type,
+            trustLevel: result.trustLevel,
+            meetsPolicy,
+            reason: result.reason,
+            evaluatedAt: Date.now(),
+        };
+        // Track stats
+        stats.signalsEvaluated++;
+        stats.byTrustLevel[result.trustLevel]++;
+        stats.lastEvaluatedAt = evaluation.evaluatedAt;
+        // Store recent
+        recentEvaluations.push(evaluation);
+        if (recentEvaluations.length > MAX_RECENT) {
+            recentEvaluations.shift();
+        }
+        // Callbacks
+        config.onEvaluated?.(signal, evaluation);
+        if (!meetsPolicy) {
+            stats.signalsFlagged++;
+            config.onFlagged?.(signal, evaluation);
+            // Deposit sentinel report signal if configured
+            if (config.depositReports !== false) {
+                try {
+                    await config.environment.deposit({
+                        type: 'sentinel:flagged',
+                        payload: {
+                            signalId: signal.id,
+                            signalType: signal.type,
+                            trustLevel: result.trustLevel,
+                            reason: result.reason,
+                            meetsPolicy: false,
+                            sourceEnvironment: signal.meta.sourceEnvironment,
+                            attestationCount: signal.meta.attestations?.length ?? 0,
+                        },
+                        meta: {
+                            deposited_by: `sentinel:${config.name}`,
+                            tags: ['sentinel', 'trust', result.trustLevel],
+                            caused_by: [signal.id],
+                            ttl: 300_000, // sentinel reports expire after 5 minutes
+                        },
+                    });
+                }
+                catch (err) {
+                    console.error(`[sentinel:${config.name}] Error depositing report: ${err.message}`);
+                }
+            }
+        }
+    }
+    return {
+        async start() {
+            if (running)
+                return;
+            running = true;
+            const query = buildQuery();
+            // Try watch first, fall back to polling
+            try {
+                watchSub = config.environment.watch(query, (signal) => {
+                    evaluateSignal(signal);
+                });
+            }
+            catch {
+                const interval = config.pollInterval ?? 3_000;
+                pollTimer = setInterval(async () => {
+                    try {
+                        const signals = await config.environment.observe(query);
+                        for (const signal of signals) {
+                            await evaluateSignal(signal);
+                        }
+                    }
+                    catch (err) {
+                        console.error(`[sentinel:${config.name}] Poll error: ${err.message}`);
+                    }
+                }, interval);
+            }
+            // Evaluate existing signals on start
+            try {
+                const existing = await config.environment.observe(query);
+                for (const signal of existing) {
+                    await evaluateSignal(signal);
+                }
+            }
+            catch (err) {
+                console.error(`[sentinel:${config.name}] Initial scan error: ${err.message}`);
+            }
+        },
+        async stop() {
+            if (!running)
+                return;
+            running = false;
+            watchSub?.unsubscribe();
+            if (pollTimer)
+                clearInterval(pollTimer);
+            watchSub = undefined;
+            pollTimer = undefined;
+        },
+        get running() {
+            return running;
+        },
+        get stats() {
+            return { ...stats, byTrustLevel: { ...stats.byTrustLevel } };
+        },
+        get recentEvaluations() {
+            return [...recentEvaluations];
+        },
+    };
+}
+//# sourceMappingURL=sentinel.js.map

package/dist/src/patterns/sentinel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentinel.js","sourceRoot":"","sources":["../../../src/patterns/sentinel.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iDAAiD;AACjD,+DAA+D;AAC/D,8DAA8D;AAC9D,+DAA+D;AAC/D,mDAAmD;AACnD,EAAE;AACF,2DAA2D;AAC3D,oEAAoE;AACpE,EAAE;AACF,iEAAiE;AACjE,mDAAmD;AACnD,+DAA+D;AAU/D,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAiEtD,8CAA8C;AAC9C,MAAM,cAAc,GAA+B;IACjD,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,UAAU,EAAE,CAAC;IACb,QAAQ,EAAE,CAAC;CACZ,CAAC;AAEF,SAAS,iBAAiB,CAAC,KAAiB,EAAE,OAAmB;IAC/D,OAAO,cAAc,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,cAAc,CAAC,MAAsB;IACnD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,QAAkC,CAAC;IACvC,IAAI,SAAqD,CAAC;IAE1D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,CAAC;IAC3B,MAAM,UAAU,GAAG,GAAG,CAAC;IACvB,MAAM,iBAAiB,GAAyB,EAAE,CAAC;IAEnD,MAAM,KAAK,GAAkB;QAC3B,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC;QACjB,YAAY,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE;KACvE,CAAC;IAEF,SAAS,UAAU;QACjB,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,cAAc,CAAC,MAAc;QAC1C,yBAAyB;QACzB,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAAE,OAAO;QACxC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAE5B,2BAA2B;QAC3B,IAAI,YAAY,CAAC,IAAI,GAAG,WAAW,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;YACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAErF,MAAM,UAAU,GAAuB;YACrC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,UAAU,EAAE,MAAM,CAAC,IAAI;YACvB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,WAAW;YACX,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,cAAc;QACd,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACzB,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,eAAe,GAAG,UAAU,CAAC,WAAW,CAAC;QAE/C,eAAe;QACf,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,iBAAiB,CAAC,MAAM,GAAG,UAAU,EAAE,CAAC;YAC1C,iBAAiB,CAAC,KAAK,EAAE,CAAC;QAC5B,CAAC;QAED,YAAY;QACZ,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAEzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,cAAc,EAAE,CAAC;YACvB,MAAM,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YAEvC,+CAA+C;YAC/C,IAAI,MAAM,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;wBAC/B,IAAI,EAAE,kBAAkB;wBACxB,OAAO,EAAE;4BACP,QAAQ,EAAE,MAAM,CAAC,EAAE;4BACnB,UAAU,EAAE,MAAM,CAAC,IAAI;4BACvB,UAAU,EAAE,MAAM,CAAC,UAAU;4BAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;4BACrB,WAAW,EAAE,KAAK;4BAClB,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB;4BAChD,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC;yBAC7B;wBAC5B,IAAI,EAAE;4BACJ,YAAY,EAAE,YAAY,MAAM,CAAC,IAAI,EAAE;4BACvC,IAAI,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC;4BAC9C,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;4BACtB,GAAG,EAAE,OAAO,EAAE,0CAA0C;yBACzD;qBACF,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAClB,OAAO,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,8BAA8B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrF,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK;YACT,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YAEf,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;YAE3B,wCAAwC;YACxC,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;oBACpD,cAAc,CAAC,MAAM,CAAC,CAAC;gBACzB,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;gBAC9C,SAAS,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;oBACjC,IAAI,CAAC;wBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;wBACxD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;4BAC7B,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;wBAC/B,CAAC;oBACH,CAAC;oBAAC,OAAO,GAAQ,EAAE,CAAC;wBAClB,OAAO,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,iBAAiB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBACxE,CAAC;gBACH,CAAC,EAAE,QAAQ,CAAC,CAAC;YACf,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACzD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC9B,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,aAAa,MAAM,CAAC,IAAI,yBAAyB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,KAAK,CAAC,IAAI;YACR,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,OAAO,GAAG,KAAK,CAAC;YAEhB,QAAQ,EAAE,WAAW,EAAE,CAAC;YACxB,IAAI,SAAS;gBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;YACxC,QAAQ,GAAG,SAAS,CAAC;YACrB,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC;QAED,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,KAAK;YACP,OAAO,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;QAC/D,CAAC;QAED,IAAI,iBAAiB;YACnB,OAAO,CAAC,GAAG,iBAAiB,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/src/providers/agent.d.ts

@@ -0,0 +1,23 @@
+import type { AgentProviderConfig, ActionHandler, BedrockConfig } from './types.js';
+/**
+ * Creates an action handler powered by the Claude Agent SDK.
+ *
+ * The SDK must be installed separately:
+ *   npm install @anthropic-ai/claude-agent-sdk
+ *
+ * The handler:
+ * 1. Builds a prompt from the signal
+ * 2. Spawns a Claude agent session via the SDK's query() AsyncGenerator
+ * 3. Consumes all messages, calling onMessage for observability
+ * 4. Extracts the final result (text, cost, duration, usage)
+ * 5. Maps the agent's output to signal deposits
+ * 6. Optionally withdraws the triggering signal
+ */
+export declare function withAgent<T = Record<string, unknown>>(config: AgentProviderConfig<T>): ActionHandler<T>;
+/**
+ * Builds env vars for routing the Claude Agent SDK through AWS Bedrock.
+ * Exported for testing.
+ */
+export declare function buildBedrockEnv(config: BedrockConfig): Record<string, string>;
+export declare function buildDefaultSystemPrompt(colonyName: string): string;
+//# sourceMappingURL=agent.d.ts.map

package/dist/src/providers/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/providers/agent.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,mBAAmB,EAAe,aAAa,EAAiB,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACnD,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAC7B,aAAa,CAAC,CAAC,CAAC,CA6FlB;AAuDD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuB7E;AAED,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAOnE"}