@neurosec/sentry 1.0.20 → 1.1.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neurosec/sentry",
-  "version": "1.0.20",
+  "version": "1.1.1",
   "description": "NeuroShield Sentry — host-level agent protection daemon. Detects and blocks malicious AI agent actions at the OS level.",
   "keywords": [
     "ai-security",
@@ -28,7 +28,8 @@
   },
   "os": [
     "linux",
-    "darwin"
+    "darwin",
+    "win32"
   ],
   "preferGlobal": true,
   "bin": {
@@ -50,7 +51,10 @@
     "lint": "eslint src --ext .ts",
     "test": "vitest run",
     "prepack": "npm run build && node scripts/prepack.js",
-    "postinstall": "node scripts/postinstall.js"
+    "postinstall": "node scripts/postinstall.js",
+    "install-service:linux": "sudo bash scripts/install-sentry.sh",
+    "install-service:macos": "sudo bash scripts/install-sentry-macos.sh",
+    "install-service:win": "powershell -ExecutionPolicy Bypass -File scripts/install-sentry-windows.ps1"
   },
   "dependencies": {
     "yaml": "^2.3.4",

package/scripts/install-sentry-windows.ps1

@@ -0,0 +1,217 @@
+# NeuroShield Sentry Daemon — Windows Installation Script
+# Run as Administrator: powershell -ExecutionPolicy Bypass -File install-sentry-windows.ps1
+param(
+    [string]$Mode = "monitor",
+    [string]$NeurosecUrl = "https://api.neurosec.ai",
+    [string]$OrgId = "",
+    [string]$Token = ""
+)
+
+$ErrorActionPreference = "Stop"
+$SentryVersion = "1.0.0"
+$InstallDir = "$env:ProgramFiles\NeuroShield\Sentry"
+$ConfigDir = "$env:ProgramData\NeuroShield\Sentry"
+$StateDir = "$env:ProgramData\NeuroShield\Sentry\state"
+$LogDir = "$env:ProgramData\NeuroShield\Sentry\logs"
+$BinPath = "$InstallDir\bin\neuroshield-sentryd.cmd"
+$ConfigPath = "$ConfigDir\sentry.yaml"
+$ServiceName = "NeuroShieldSentry"
+
+Write-Host "============================================" -ForegroundColor Cyan
+Write-Host " NeuroShield Sentry v$SentryVersion Installer (Windows)" -ForegroundColor Cyan
+Write-Host " Mode: $Mode" -ForegroundColor Cyan
+Write-Host "============================================" -ForegroundColor Cyan
+
+# Check if running as admin
+$isAdmin = ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+if (-not $isAdmin) {
+    Write-Host "ERROR: This script must be run as Administrator" -ForegroundColor Red
+    exit 1
+}
+
+# Check Node.js
+try {
+    $nodeVersion = node --version
+    Write-Host "Node.js found: $nodeVersion" -ForegroundColor Green
+} catch {
+    Write-Host "ERROR: Node.js is required (>= 20)" -ForegroundColor Red
+    exit 1
+}
+
+# Create directories
+Write-Host "Creating directories..." -ForegroundColor Yellow
+New-Item -ItemType Directory -Force -Path $InstallDir | Out-Null
+New-Item -ItemType Directory -Force -Path $ConfigDir | Out-Null
+New-Item -ItemType Directory -Force -Path $StateDir | Out-Null
+New-Item -ItemType Directory -Force -Path $LogDir | Out-Null
+
+# Copy sentry package files
+$scriptPath = Split-Path -Parent $MyInvocation.MyCommand.Path
+$projectDir = Resolve-Path "$scriptPath\..\..\.."
+$sentryPackage = "$projectDir\packages\sentry"
+
+if (Test-Path "$sentryPackage\package.json") {
+    Write-Host "Building sentry daemon from source..." -ForegroundColor Yellow
+    
+    # Copy dist
+    if (Test-Path "$sentryPackage\dist") {
+        Copy-Item -Path "$sentryPackage\dist\*" -Destination "$InstallDir" -Recurse -Force
+    }
+    
+    # Copy node_modules
+    if (Test-Path "$sentryPackage\node_modules") {
+        Copy-Item -Path "$sentryPackage\node_modules\*" -Destination "$InstallDir\node_modules" -Recurse -Force
+    }
+    
+    Copy-Item -Path "$sentryPackage\package.json" -Destination "$InstallDir" -Force
+}
+
+# Create wrapper script
+$wrapperContent = @"
+@echo off
+node "%~dp0..\dist\index.js" %*
+"@
+[System.IO.File]::WriteAllText($BinPath, $wrapperContent)
+
+# Generate default config
+if (-not (Test-Path $ConfigPath)) {
+    Write-Host "Generating default config..." -ForegroundColor Yellow
+    
+    $hostId = "$env:COMPUTERNAME-sentry"
+    
+    $configContent = @"
+# NeuroShield Sentry Daemon Configuration (Windows)
+sentry:
+  host_id: "$hostId"
+  version: "$SentryVersion"
+  health_port: 9190
+  api_port: 9191
+  state_dir: "$StateDir"
+  pid_file_path: "$StateDir\sentry.pid"
+
+neurosec:
+  endpoint: "$NeurosecUrl"
+  org_id: "$OrgId"
+  token_path: "$ConfigDir\sentry.token"
+  tls_cert: "$ConfigDir\cert.pem"
+  tls_key: "$ConfigDir\key.pem"
+  sync_interval_ms: 30000
+  heartbeat_interval_ms: 300000
+
+enforcement:
+  mode: "$Mode"
+  sandbox_enabled: false
+  syscall_filter_enabled: false
+  network_filter_enabled: true
+  filesystem_filter_enabled: false
+
+sandbox_defaults:
+  cpu_max: "0.5"
+  memory_max: "512MB"
+  pid_max: 100
+
+network:
+  allow_hosts:
+    - "api.openai.com:443"
+    - "api.anthropic.com:443"
+    - "api.neurosec.ai:443"
+  block_hosts:
+    - "*.pastebin.com"
+    - "*.ngrok.io"
+    - "*.requestbin.net"
+    - "*.webhook.site"
+  allow_private: false
+  dns_monitor_enabled: false
+
+proxy:
+  enabled: true
+  port: 9081
+  bind_address: "127.0.0.1"
+  upstream_timeout_ms: 120000
+  max_buffer_size_mb: 10
+  intercept_https: false
+
+redirect:
+  enabled: true
+  strategy: "env-inject"
+  preserve_original_key: true
+  inject_on_discover: true
+
+skill_authz:
+  enabled: true
+  allow_unknown: false
+  require_approval:
+    - "shell_exec"
+    - "bash"
+    - "terminal"
+    - "run_command"
+
+audit:
+  log_path: "$LogDir\sentry.log"
+  retention_days: 90
+  max_size_mb: 500
+
+discovery:
+  interval_ms: 30000
+  source_paths:
+    - "C:\Users"
+    - "C:\Projects"
+    - "C:\Workspace"
+"@
+    [System.IO.File]::WriteAllText($ConfigPath, $configContent)
+    Write-Host "  Config written to $ConfigPath" -ForegroundColor Green
+}
+
+# Create empty token file
+$tokenPath = "$ConfigDir\sentry.token"
+if (-not (Test-Path $tokenPath)) {
+    if ($Token) {
+        [System.IO.File]::WriteAllText($tokenPath, $Token)
+    } else {
+        New-Item -ItemType File -Force -Path $tokenPath | Out-Null
+    }
+}
+
+# Install Windows service using NSSM or sc.exe
+Write-Host "Installing Windows service..." -ForegroundColor Yellow
+
+# Check if NSSM is available
+$nssmPath = Get-Command "nssm" -ErrorAction SilentlyContinue
+
+if ($nssmPath) {
+    # Use NSSM for service management
+    nssm install $ServiceName "node.exe" "$InstallDir\dist\index.js" "$ConfigPath"
+    nssm set $ServiceName AppDirectory "$InstallDir"
+    nssm set $ServiceName DisplayName "NeuroShield Sentry Daemon"
+    nssm set $ServiceName Description "Host-level AI agent protection daemon. Detects, sandboxes, and enforces policies on AI agent processes."
+    nssm set $ServiceName Start SERVICE_AUTO_START
+    nssm set $ServiceName AppStdout "$LogDir\sentry-stdout.log"
+    nssm set $ServiceName AppStderr "$LogDir\sentry-stderr.log"
+    nssm set $ServiceName AppEnvironmentExtra "NODE_ENV=production SENTRY_CONFIG_PATH=$ConfigPath LOG_LEVEL=info"
+    nssm start $ServiceName
+} else {
+    # Use sc.exe for basic service creation
+    $binaryPath = "node.exe `"$InstallDir\dist\index.js`" `"$ConfigPath`""
+    sc.exe create $ServiceName binPath= $binaryPath start= auto
+    sc.exe description $ServiceName "Host-level AI agent protection daemon"
+    sc.exe failure $ServiceName reset= 86400 actions= restart/5000/restart/10000/restart/30000
+    sc.exe start $ServiceName
+}
+
+Write-Host ""
+Write-Host "============================================" -ForegroundColor Cyan
+Write-Host " Installation Complete!" -ForegroundColor Cyan
+Write-Host "============================================" -ForegroundColor Cyan
+Write-Host ""
+Write-Host " Next steps:"
+Write-Host "   1. Edit $ConfigPath with your NeuroSec org ID"
+Write-Host "   2. Set your sentry token: echo 'your-token' > $ConfigDir\sentry.token"
+Write-Host "   3. Service '$ServiceName' should be running"
+Write-Host "   4. Check status: sc query $ServiceName"
+Write-Host "   5. View logs: Get-Content $LogDir\sentry-stdout.log -Tail 50"
+Write-Host "   6. Local API: curl http://127.0.0.1:9191/api/v1/status"
+Write-Host ""
+Write-Host " To uninstall:"
+Write-Host "   nssm stop $ServiceName"
+Write-Host "   nssm remove $ServiceName confirm"
+Write-Host "   Remove-Item -Recurse -Force '$InstallDir'"

package/dist/action-logger.d.ts

@@ -1,40 +0,0 @@
-import { AgentAction, AgentActionType, EnforcementDecision, FileAccessEvent, NetworkEvent, TaggedProcess } from './types';
-import { AuditLogger } from './audit';
-export declare class ActionLogger {
-    private config;
-    private auditLogger;
-    private pending;
-    private flushTimer;
-    private processedCount;
-    constructor(auditLogger: AuditLogger, hostId: string);
-    start(): void;
-    stop(): void;
-    logAction(params: {
-        pid: number;
-        frameworkId: string;
-        type: AgentActionType;
-        intent: string;
-        context: string;
-        reasoningTrace?: string[];
-        input: string;
-        output: string;
-        durationMs: number;
-        success: boolean;
-        errorMessage?: string | null;
-        dataClassifications?: string[];
-        decision: AgentAction['decision'];
-        decisionReason: string;
-    }): void;
-    logFromDecision(pid: number, frameworkId: string, decision: EnforcementDecision): void;
-    logFileAccess(pid: number, frameworkId: string, event: FileAccessEvent, process: TaggedProcess): void;
-    logNetworkAccess(pid: number, frameworkId: string, event: NetworkEvent): void;
-    getRecentActions(limit?: number): AgentAction[];
-    getProcessedCount(): number;
-    private flush;
-    private detectSensitiveData;
-    private computeRiskScore;
-    private getRiskFactors;
-    private decisionTypeToActionType;
-    private classifyPath;
-}
-//# sourceMappingURL=action-logger.d.ts.map

package/dist/action-logger.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"action-logger.d.ts","sourceRoot":"","sources":["../src/action-logger.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC1H,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAWtC,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,cAAc,CAAK;gBAEf,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM;IAgBpD,KAAK,IAAI,IAAI;IAQb,IAAI,IAAI,IAAI;IAUZ,SAAS,CAAC,MAAM,EAAE;QAChB,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,eAAe,CAAC;QACtB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,OAAO,EAAE,OAAO,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;QAC/B,QAAQ,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;QAClC,cAAc,EAAE,MAAM,CAAC;KACxB,GAAG,IAAI;IAiER,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,mBAAmB,GAAG,IAAI;IAiBtF,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI;IAkBrG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI;IAmB7E,gBAAgB,CAAC,KAAK,SAAM,GAAG,WAAW,EAAE;IAI5C,iBAAiB,IAAI,MAAM;IAM3B,OAAO,CAAC,KAAK;IA4Bb,OAAO,CAAC,mBAAmB;IAK3B,OAAO,CAAC,gBAAgB;IA4BxB,OAAO,CAAC,cAAc;IAStB,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,YAAY;CAoBrB"}

package/dist/action-logger.js

@@ -1,252 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ActionLogger = void 0;
-const crypto_1 = require("crypto");
-const logger_1 = require("./logger");
-class ActionLogger {
-    constructor(auditLogger, hostId) {
-        this.pending = [];
-        this.flushTimer = null;
-        this.processedCount = 0;
-        this.auditLogger = auditLogger;
-        this.config = {
-            hostId,
-            batchSize: 50,
-            flushIntervalMs: 10000,
-            sensitivePatterns: [
-                /api[-_]?key/i, /secret/i, /password/i, /token/i, /credential/i,
-                /auth[-_]?header/i, /bearer/i, /sk-[a-zA-Z0-9]{20,}/i,
-                /-----BEGIN (RSA |EC )?PRIVATE KEY-----/,
-                /social_security/i, /ssn/i, /passport/i, /credit_card/i, /cvv/i,
-            ],
-            maxActionInputLength: 10000,
-        };
-    }
-    start() {
-        this.flushTimer = setInterval(() => this.flush(), this.config.flushIntervalMs);
-        logger_1.logger.info('Action logger started', {
-            batchSize: this.config.batchSize,
-            intervalMs: this.config.flushIntervalMs,
-        });
-    }
-    stop() {
-        if (this.flushTimer) {
-            clearInterval(this.flushTimer);
-            this.flushTimer = null;
-        }
-        this.flush();
-    }
-    // ── AEGIS: Log agent actions with intent & reasoning context ─────────────
-    logAction(params) {
-        const sensitiveData = this.detectSensitiveData(params.input, params.output);
-        const riskScore = this.computeRiskScore(params.type, sensitiveData, params.intent, params.context);
-        const action = {
-            id: (0, crypto_1.randomUUID)(),
-            pid: params.pid,
-            frameworkId: params.frameworkId,
-            hostId: this.config.hostId,
-            type: params.type,
-            timestamp: Date.now(),
-            intent: params.intent,
-            context: params.context,
-            reasoningTrace: params.reasoningTrace ?? [],
-            input: params.input.slice(0, this.config.maxActionInputLength),
-            output: params.output.slice(0, this.config.maxActionInputLength),
-            durationMs: params.durationMs,
-            success: params.success,
-            errorMessage: params.errorMessage ?? null,
-            dataClassifications: params.dataClassifications ?? [],
-            sensitiveDataDetected: sensitiveData,
-            riskScore,
-            riskFactors: this.getRiskFactors(riskScore),
-            decision: params.decision,
-            decisionReason: params.decisionReason,
-        };
-        this.pending.push(action);
-        this.processedCount++;
-        if (this.pending.length >= this.config.batchSize) {
-            this.flush();
-        }
-        // Log high-risk actions immediately to audit log
-        if (riskScore >= 7) {
-            const auditAction = riskScore >= 8 ? 'deny' : 'allow';
-            this.auditLogger.log({
-                id: action.id,
-                timestamp: action.timestamp,
-                type: 'process',
-                action: auditAction,
-                frameworkId: action.frameworkId,
-                frameworkName: null,
-                pid: action.pid,
-                reason: `High-risk action: ${action.type} (score: ${riskScore})`,
-                detail: {
-                    actionType: action.type,
-                    intent: action.intent,
-                    riskScore,
-                    riskFactors: action.riskFactors,
-                    sensitiveData: action.sensitiveDataDetected,
-                },
-                hostname: this.config.hostId,
-            });
-        }
-    }
-    // ── AEGIS: Log from enforcement decisions ────────────────────────────────
-    logFromDecision(pid, frameworkId, decision) {
-        this.logAction({
-            pid,
-            frameworkId,
-            type: this.decisionTypeToActionType(decision.type),
-            intent: decision.reason,
-            context: JSON.stringify(decision.detail),
-            input: '',
-            output: '',
-            durationMs: 0,
-            success: decision.action === 'allow',
-            errorMessage: decision.action !== 'allow' ? decision.reason : null,
-            decision: decision.action,
-            decisionReason: decision.reason,
-        });
-    }
-    logFileAccess(pid, frameworkId, event, process) {
-        this.logAction({
-            pid,
-            frameworkId,
-            type: event.operation === 'read' ? 'file_read' : 'file_write',
-            intent: `File ${event.operation} on ${event.targetPath}`,
-            context: `Process: ${process.command.slice(0, 200)}`,
-            input: event.targetPath,
-            output: '',
-            durationMs: 0,
-            success: event.decision === 'allow',
-            errorMessage: event.decision !== 'allow' ? 'Access denied by policy' : null,
-            dataClassifications: this.classifyPath(event.targetPath),
-            decision: event.decision,
-            decisionReason: event.decision === 'allow' ? 'Policy allowed' : 'Policy denied',
-        });
-    }
-    logNetworkAccess(pid, frameworkId, event) {
-        this.logAction({
-            pid,
-            frameworkId,
-            type: 'network_egress',
-            intent: `Network ${event.direction} to ${event.hostname ?? event.destIp}:${event.destPort}`,
-            context: `Destination: ${event.destIp}:${event.destPort}`,
-            input: `${event.hostname ?? event.destIp}:${event.destPort}`,
-            output: '',
-            durationMs: 0,
-            success: event.decision === 'allow',
-            errorMessage: event.decision !== 'allow' ? 'Connection denied by policy' : null,
-            decision: event.decision,
-            decisionReason: event.decision === 'allow' ? 'Policy allowed' : 'Policy denied',
-        });
-    }
-    // ── Query / stats ────────────────────────────────────────────────────────
-    getRecentActions(limit = 100) {
-        return this.pending.slice(-limit);
-    }
-    getProcessedCount() {
-        return this.processedCount;
-    }
-    // ── Internal ─────────────────────────────────────────────────────────────
-    flush() {
-        if (this.pending.length === 0)
-            return;
-        const batch = this.pending.splice(0, this.config.batchSize);
-        // Write to audit log as summary
-        const highRisk = batch.filter(a => a.riskScore >= 6);
-        for (const action of highRisk) {
-            this.auditLogger.log({
-                id: action.id,
-                timestamp: action.timestamp,
-                type: 'process',
-                action: action.decision === 'monitor' ? 'allow' : action.decision,
-                frameworkId: action.frameworkId,
-                frameworkName: null,
-                pid: action.pid,
-                reason: `AEGIS action: ${action.type} — ${action.intent}`,
-                detail: {
-                    actionType: action.type,
-                    riskScore: action.riskScore,
-                    riskFactors: action.riskFactors,
-                    sensitiveData: action.sensitiveDataDetected,
-                    dataClassifications: action.dataClassifications,
-                    durationMs: action.durationMs,
-                },
-                hostname: this.config.hostId,
-            });
-        }
-    }
-    detectSensitiveData(input, output) {
-        const combined = `${input} ${output}`;
-        return this.config.sensitivePatterns.some(p => p.test(combined));
-    }
-    computeRiskScore(type, sensitiveData, intent, context) {
-        let score = 0;
-        // High-risk action types
-        if (['file_delete', 'syscall', 'child_spawn'].includes(type))
-            score += 4;
-        if (['file_write', 'network_egress', 'skill_invoke', 'api_call'].includes(type))
-            score += 2;
-        if (['tool_call', 'network_ingress'].includes(type))
-            score += 1;
-        // Sensitive data increases risk
-        if (sensitiveData)
-            score += 3;
-        // Intent analysis
-        const highRiskIntent = /delete|remove|destroy|wipe|overwrite|chmod|chown|sudo|exec/i;
-        const moderateRiskIntent = /write|modify|update|deploy|push|publish|expose/i;
-        if (highRiskIntent.test(intent))
-            score += 3;
-        else if (moderateRiskIntent.test(intent))
-            score += 1;
-        // Context analysis
-        if (/production|prod|live/i.test(context))
-            score += 1;
-        return Math.min(score, 10);
-    }
-    getRiskFactors(score) {
-        const factors = [];
-        if (score >= 8)
-            factors.push('critical_risk');
-        if (score >= 6)
-            factors.push('high_risk');
-        if (score >= 4)
-            factors.push('elevated_risk');
-        if (score < 4)
-            factors.push('normal');
-        return factors;
-    }
-    decisionTypeToActionType(decisionType) {
-        switch (decisionType) {
-            case 'file_access': return 'file_read';
-            case 'network': return 'network_egress';
-            case 'syscall': return 'syscall';
-            case 'skill': return 'skill_invoke';
-            case 'process': return 'child_spawn';
-            default: return 'api_call';
-        }
-    }
-    classifyPath(filePath) {
-        const classifications = [];
-        if (/\.ssh\/|\.aws\/|\.kube\/|\.gcloud\//i.test(filePath)) {
-            classifications.push('infrastructure_credentials');
-        }
-        if (/\.git\/|\.svn\//i.test(filePath))
-            classifications.push('source_code');
-        if (/etc\/passwd|etc\/shadow|etc\/sudoers/i.test(filePath)) {
-            classifications.push('system_config');
-        }
-        if (/token|secret|key|credential/i.test(filePath)) {
-            classifications.push('secrets');
-        }
-        if (/\.pem$|\.key$|\.crt$|cert/i.test(filePath)) {
-            classifications.push('certificates');
-        }
-        if (/database|db\/|\.sql$|\.db$/i.test(filePath)) {
-            classifications.push('database');
-        }
-        return classifications;
-    }
-}
-exports.ActionLogger = ActionLogger;
-//# sourceMappingURL=action-logger.js.map

package/dist/action-logger.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"action-logger.js","sourceRoot":"","sources":["../src/action-logger.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AAGpC,qCAAkC;AAUlC,MAAa,YAAY;IAOvB,YAAY,WAAwB,EAAE,MAAc;QAJ5C,YAAO,GAAkB,EAAE,CAAC;QAC5B,eAAU,GAA0C,IAAI,CAAC;QACzD,mBAAc,GAAG,CAAC,CAAC;QAGzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM;YACN,SAAS,EAAE,EAAE;YACb,eAAe,EAAE,KAAK;YACtB,iBAAiB,EAAE;gBACjB,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa;gBAC/D,kBAAkB,EAAE,SAAS,EAAE,sBAAsB;gBACrD,wCAAwC;gBACxC,kBAAkB,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM;aAChE;YACD,oBAAoB,EAAE,KAAK;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/E,eAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE;YACnC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SACxC,CAAC,CAAC;IACL,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAED,4EAA4E;IAE5E,SAAS,CAAC,MAeT;QACC,MAAM,aAAa,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CACrC,MAAM,CAAC,IAAI,EACX,aAAa,EACb,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,OAAO,CACf,CAAC;QAEF,MAAM,MAAM,GAAgB;YAC1B,EAAE,EAAE,IAAA,mBAAU,GAAE;YAChB,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;YAC3C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YAC9D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC;YAChE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,IAAI;YACzC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;YACrD,qBAAqB,EAAE,aAAa;YACpC,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;YAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,cAAc,EAAE,MAAM,CAAC,cAAc;SACtC,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,cAAc,EAAE,CAAC;QAEtB,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACjD,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC;QAED,iDAAiD;QACjD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;YACnB,MAAM,WAAW,GAAoC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACvF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,IAAI;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,qBAAqB,MAAM,CAAC,IAAI,YAAY,SAAS,GAAG;gBAChE,MAAM,EAAE;oBACN,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS;oBACT,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,aAAa,EAAE,MAAM,CAAC,qBAAqB;iBAC5C;gBACD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,4EAA4E;IAE5E,eAAe,CAAC,GAAW,EAAE,WAAmB,EAAE,QAA6B;QAC7E,IAAI,CAAC,SAAS,CAAC;YACb,GAAG;YACH,WAAW;YACX,IAAI,EAAE,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClD,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxC,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,CAAC,MAAM,KAAK,OAAO;YACpC,YAAY,EAAE,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAClE,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAC;IACL,CAAC;IAED,aAAa,CAAC,GAAW,EAAE,WAAmB,EAAE,KAAsB,EAAE,OAAsB;QAC5F,IAAI,CAAC,SAAS,CAAC;YACb,GAAG;YACH,WAAW;YACX,IAAI,EAAE,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;YAC7D,MAAM,EAAE,QAAQ,KAAK,CAAC,SAAS,OAAO,KAAK,CAAC,UAAU,EAAE;YACxD,OAAO,EAAE,YAAY,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;YACpD,KAAK,EAAE,KAAK,CAAC,UAAU;YACvB,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO;YACnC,YAAY,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI;YAC3E,mBAAmB,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC;YACxD,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;SAChF,CAAC,CAAC;IACL,CAAC;IAED,gBAAgB,CAAC,GAAW,EAAE,WAAmB,EAAE,KAAmB;QACpE,IAAI,CAAC,SAAS,CAAC;YACb,GAAG;YACH,WAAW;YACX,IAAI,EAAE,gBAAgB;YACtB,MAAM,EAAE,WAAW,KAAK,CAAC,SAAS,OAAO,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE;YAC3F,OAAO,EAAE,gBAAgB,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE;YACzD,KAAK,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE;YAC5D,MAAM,EAAE,EAAE;YACV,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO;YACnC,YAAY,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI;YAC/E,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,eAAe;SAChF,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAE5E,gBAAgB,CAAC,KAAK,GAAG,GAAG;QAC1B,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,4EAA4E;IAEpE,KAAK;QACX,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC5D,gCAAgC;QAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC;QACrD,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;gBACnB,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,QAA2C;gBACpG,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,aAAa,EAAE,IAAI;gBACnB,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,MAAM,EAAE,iBAAiB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,MAAM,EAAE;gBACzD,MAAM,EAAE;oBACN,UAAU,EAAE,MAAM,CAAC,IAAI;oBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,aAAa,EAAE,MAAM,CAAC,qBAAqB;oBAC3C,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;oBAC/C,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B;gBACD,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,MAAc;QACvD,MAAM,QAAQ,GAAG,GAAG,KAAK,IAAI,MAAM,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnE,CAAC;IAEO,gBAAgB,CACtB,IAAqB,EACrB,aAAsB,EACtB,MAAc,EACd,OAAe;QAEf,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,yBAAyB;QACzB,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY,EAAE,gBAAgB,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAEhE,gCAAgC;QAChC,IAAI,aAAa;YAAE,KAAK,IAAI,CAAC,CAAC;QAE9B,kBAAkB;QAClB,MAAM,cAAc,GAAG,6DAA6D,CAAC;QACrF,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;QAC7E,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;aACvC,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAErD,mBAAmB;QACnB,IAAI,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,KAAK,IAAI,CAAC,CAAC;QAEtD,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7B,CAAC;IAEO,cAAc,CAAC,KAAa;QAClC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9C,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,wBAAwB,CAAC,YAAoB;QACnD,QAAQ,YAAY,EAAE,CAAC;YACrB,KAAK,aAAa,CAAC,CAAC,OAAO,WAAW,CAAC;YACvC,KAAK,SAAS,CAAC,CAAC,OAAO,gBAAgB,CAAC;YACxC,KAAK,SAAS,CAAC,CAAC,OAAO,SAAS,CAAC;YACjC,KAAK,OAAO,CAAC,CAAC,OAAO,cAAc,CAAC;YACpC,KAAK,SAAS,CAAC,CAAC,OAAO,aAAa,CAAC;YACrC,OAAO,CAAC,CAAC,OAAO,UAAU,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,QAAgB;QACnC,MAAM,eAAe,GAAa,EAAE,CAAC;QACrC,IAAI,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1D,eAAe,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,eAAe,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC3E,IAAI,uCAAuC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,eAAe,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,eAAe,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;CACF;AA9RD,oCA8RC"}

package/dist/agent-registry.d.ts

@@ -1,24 +0,0 @@
-import { AgentIdentity, AgentDocumentation, TaggedProcess, DecisionConstraint } from './types';
-export declare class AgentRegistry {
-    private state;
-    private stateDir;
-    private dirty;
-    constructor(stateDir: string);
-    init(): Promise<void>;
-    registerOrUpdate(process: TaggedProcess, hostId: string): AgentIdentity;
-    decommission(frameworkId: string, pid: number): void;
-    quarantine(frameworkId: string, pid: number, reason: string): void;
-    updateDocumentation(frameworkId: string, pid: number, docs: Partial<AgentDocumentation>): void;
-    updateIdentity(frameworkId: string, pid: number, updates: Partial<AgentIdentity>): void;
-    setConstraint(constraint: DecisionConstraint): void;
-    getConstraint(frameworkId: string): DecisionConstraint | undefined;
-    getMaxDecisionLevel(frameworkId: string): DecisionConstraint['maxDecisionLevel'];
-    getActiveIdentities(): AgentIdentity[];
-    getIdentity(frameworkId: string, pid: number): AgentIdentity | undefined;
-    getIdentityById(id: string): AgentIdentity | undefined;
-    getAllIdentities(): AgentIdentity[];
-    getAgentOnAPage(frameworkId: string, pid: number): AgentIdentity | null;
-    private loadState;
-    flush(): Promise<void>;
-}
-//# sourceMappingURL=agent-registry.d.ts.map

package/dist/agent-registry.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-registry.d.ts","sourceRoot":"","sources":["../src/agent-registry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAUjB,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAGX;IACF,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,KAAK,CAAS;gBAEV,QAAQ,EAAE,MAAM;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ3B,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,aAAa;IAkDvE,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI;IAWpD,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAYlE,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,IAAI;IAS9F,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI;IAWvF,aAAa,CAAC,UAAU,EAAE,kBAAkB,GAAG,IAAI;IAKnD,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS;IAIlE,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,kBAAkB,CAAC,kBAAkB,CAAC;IAMhF,mBAAmB,IAAI,aAAa,EAAE;IAKtC,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIxE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAItD,gBAAgB,IAAI,aAAa,EAAE;IAKnC,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;YAMzD,SAAS;IAmBjB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAe7B"}