@phigon/observer 8.0.1

package/dist/src/discovery/engine.d.ts

@@ -0,0 +1,17 @@
+import { type AgentInventory } from "../generated/phigon/v1/identity_pb.js";
+import type { HostEvidenceProvider } from "./evidence.js";
+import type { AgentDiscoveryAdapter, DiscoverySnapshot } from "./types.js";
+import type { CustomAgentRegistry } from "../custom-agent-registry.js";
+export type DiscoveryEngineOptions = Readonly<{
+    adapters?: readonly AgentDiscoveryAdapter[];
+    customAgentRegistry?: CustomAgentRegistry;
+    evidenceFactory?: () => HostEvidenceProvider;
+    clock?: () => Date;
+}>;
+export declare class DiscoveryEngine {
+    #private;
+    constructor(options?: DiscoveryEngineOptions);
+    discover(machineId?: string): Promise<DiscoverySnapshot>;
+}
+export declare function runDiscoveryLoop(engine: DiscoveryEngine, machineId: string, intervalMs: number, signal: AbortSignal, publish: (inventory: AgentInventory) => void | Promise<void>): Promise<void>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/src/discovery/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/discovery/engine.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,uCAAuC,CAAC;AAO/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAG1D,OAAO,KAAK,EACV,qBAAqB,EACrB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAUvE,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,QAAQ,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC5C,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,eAAe,CAAC,EAAE,MAAM,oBAAoB,CAAC;IAC7C,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB,CAAC,CAAC;AAEH,qBAAa,eAAe;;gBAOd,OAAO,GAAE,sBAA2B;IAY1C,QAAQ,CAAC,SAAS,SAAK,GAAG,OAAO,CAAC,iBAAiB,CAAC;CAgH3D;AA+CD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,eAAe,EACvB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,CAAC,SAAS,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAC3D,OAAO,CAAC,IAAI,CAAC,CAMf"}

package/dist/src/discovery/engine.js

@@ -0,0 +1,164 @@
+import { create } from "@bufbuild/protobuf";
+import { timestampDate, timestampFromDate, } from "@bufbuild/protobuf/wkt";
+import { AgentState } from "../generated/phigon/v1/common_pb.js";
+import { AgentIdentitySchema, AgentInventorySchema, } from "../generated/phigon/v1/identity_pb.js";
+import { claudeAdapter } from "./adapters/claude.js";
+import { codexAdapter } from "./adapters/codex.js";
+import { customAgentAdapter } from "./adapters/custom.js";
+import { genericAdapter } from "./adapters/generic.js";
+import { hermesAdapter } from "./adapters/hermes.js";
+import { openClawAdapter } from "./adapters/openclaw.js";
+import { sortAgentIdentities } from "./known-agent.js";
+import { SystemEvidenceProvider } from "./system-evidence.js";
+const defaultAdapters = [
+    claudeAdapter,
+    codexAdapter,
+    hermesAdapter,
+    openClawAdapter,
+    genericAdapter,
+];
+export class DiscoveryEngine {
+    #adapters;
+    #evidenceFactory;
+    #clock;
+    #retainedMachineID;
+    #retainedRuntimes = new Map();
+    constructor(options = {}) {
+        this.#adapters = options.adapters ?? [
+            ...defaultAdapters,
+            ...(options.customAgentRegistry === undefined
+                ? []
+                : [customAgentAdapter(options.customAgentRegistry)]),
+        ];
+        this.#evidenceFactory =
+            options.evidenceFactory ?? (() => new SystemEvidenceProvider());
+        this.#clock = options.clock ?? (() => new Date());
+    }
+    async discover(machineId = "") {
+        const observedAt = this.#clock();
+        const evidence = this.#evidenceFactory();
+        const results = await Promise.all(this.#adapters.map((adapter) => adapter.discover(evidence, observedAt)));
+        const discoveredAgents = results.flatMap((result) => result.agents);
+        const conflictingProcessClaims = processClaimConflicts(discoveredAgents);
+        const adapterHealth = [
+            ...results.map((result) => result.health),
+            ...(conflictingProcessClaims.size === 0
+                ? []
+                : [{
+                        adapterId: "attribution",
+                        status: "error",
+                        notices: [
+                            `${conflictingProcessClaims.size} process-lifetime ` +
+                                "claim(s) matched multiple agent identities; affected " +
+                                "runtimes were not attributed.",
+                        ],
+                    }]),
+        ];
+        const notices = adapterHealth
+            .flatMap((health) => [
+            `adapter=${health.adapterId};status=${health.status}`,
+            ...health.notices,
+        ])
+            .slice(0, 32)
+            .map((notice) => notice.slice(0, 256));
+        const partial = adapterHealth.some((health) => health.status === "permission_denied" ||
+            health.status === "error");
+        const currentAgents = sortAgentIdentities(discoveredAgents.filter((agent) => !agent.capabilities.some((capability) => conflictingProcessClaims.has(capability))));
+        const agents = this.#retainRuntimeHistory(machineId, currentAgents, !partial);
+        const inventory = create(AgentInventorySchema, {
+            machineId,
+            observedAt: timestampFromDate(observedAt),
+            agents,
+            partial,
+            notices,
+        });
+        return Object.freeze({ inventory, adapterHealth });
+    }
+    #retainRuntimeHistory(machineID, currentAgents, coverageComplete) {
+        if (this.#retainedMachineID !== undefined &&
+            this.#retainedMachineID !== machineID) {
+            this.#retainedRuntimes.clear();
+        }
+        this.#retainedMachineID = machineID;
+        const currentByID = new Map(currentAgents.map((agent) => [agent.agentId, agent]));
+        for (const agent of currentAgents) {
+            if (isRuntimeIdentity(agent)) {
+                this.#retainedRuntimes.set(agent.agentId, agent);
+            }
+        }
+        for (const [agentID, prior] of this.#retainedRuntimes) {
+            if (currentByID.has(agentID))
+                continue;
+            this.#retainedRuntimes.set(agentID, create(AgentIdentitySchema, {
+                ...prior,
+                state: coverageComplete
+                    ? AgentState.STOPPED
+                    : AgentState.UNKNOWN,
+            }));
+        }
+        const runtimes = [...this.#retainedRuntimes.values()].sort(compareRuntimeRetention);
+        const runtimeProducts = new Set(runtimes.flatMap((agent) => agentProductCapabilities(agent)));
+        const products = currentAgents.filter((agent) => !isRuntimeIdentity(agent) &&
+            !agentProductCapabilities(agent).some((capability) => runtimeProducts.has(capability)));
+        const selected = [...runtimes, ...products].slice(0, 256);
+        const selectedIDs = new Set(selected.map((agent) => agent.agentId));
+        for (const agentID of this.#retainedRuntimes.keys()) {
+            if (!selectedIDs.has(agentID))
+                this.#retainedRuntimes.delete(agentID);
+        }
+        return sortAgentIdentities(selected);
+    }
+}
+function processClaimConflicts(agents) {
+    const identitiesByClaim = new Map();
+    for (const agent of agents) {
+        for (const capability of agent.capabilities) {
+            if (!capability.startsWith("process-key-sha256:"))
+                continue;
+            const identities = identitiesByClaim.get(capability) ?? new Set();
+            identities.add(agent.agentId);
+            identitiesByClaim.set(capability, identities);
+        }
+    }
+    return new Set([...identitiesByClaim.entries()]
+        .filter(([, identities]) => identities.size > 1)
+        .map(([claim]) => claim));
+}
+function isRuntimeIdentity(agent) {
+    return agent.capabilities.includes("process-instance");
+}
+function agentProductCapabilities(agent) {
+    return agent.capabilities.filter((capability) => capability.startsWith("agent-product:"));
+}
+function compareRuntimeRetention(left, right) {
+    const leftRunning = left.state === AgentState.RUNNING ? 1 : 0;
+    const rightRunning = right.state === AgentState.RUNNING ? 1 : 0;
+    if (leftRunning !== rightRunning)
+        return rightRunning - leftRunning;
+    const leftObserved = left.lastObservedAt === undefined
+        ? 0
+        : timestampDate(left.lastObservedAt).getTime();
+    const rightObserved = right.lastObservedAt === undefined
+        ? 0
+        : timestampDate(right.lastObservedAt).getTime();
+    return rightObserved - leftObserved || left.agentId.localeCompare(right.agentId);
+}
+export async function runDiscoveryLoop(engine, machineId, intervalMs, signal, publish) {
+    while (!signal.aborted) {
+        const snapshot = await engine.discover(machineId);
+        await publish(snapshot.inventory);
+        await abortableDelay(intervalMs, signal);
+    }
+}
+async function abortableDelay(milliseconds, signal) {
+    if (signal.aborted)
+        return;
+    await new Promise((resolve) => {
+        const timeout = setTimeout(resolve, milliseconds);
+        signal.addEventListener("abort", () => {
+            clearTimeout(timeout);
+            resolve();
+        }, { once: true });
+    });
+}
+//# sourceMappingURL=engine.js.map

package/dist/src/discovery/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/discovery/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EACL,aAAa,EACb,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EACL,mBAAmB,EACnB,oBAAoB,GAGrB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAO9D,MAAM,eAAe,GAAqC;IACxD,aAAa;IACb,YAAY;IACZ,aAAa;IACb,eAAe;IACf,cAAc;CACf,CAAC;AASF,MAAM,OAAO,eAAe;IACjB,SAAS,CAAmC;IAC5C,gBAAgB,CAA6B;IAC7C,MAAM,CAAa;IAC5B,kBAAkB,CAAqB;IAC9B,iBAAiB,GAAG,IAAI,GAAG,EAAyB,CAAC;IAE9D,YAAY,UAAkC,EAAE;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI;YACnC,GAAG,eAAe;YAClB,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;SACvD,CAAC;QACF,IAAI,CAAC,gBAAgB;YACnB,OAAO,CAAC,eAAe,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,sBAAsB,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,EAAE;QAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CACvC,CACF,CAAC;QACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,wBAAwB,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG;YACpB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YACzC,GAAG,CAAC,wBAAwB,CAAC,IAAI,KAAK,CAAC;gBACrC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,CAAC;wBACC,SAAS,EAAE,aAAa;wBACxB,MAAM,EAAE,OAAgB;wBACxB,OAAO,EAAE;4BACP,GAAG,wBAAwB,CAAC,IAAI,oBAAoB;gCACpD,uDAAuD;gCACvD,+BAA+B;yBAChC;qBACF,CAAC,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAG,aAAa;aAC1B,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,WAAW,MAAM,CAAC,SAAS,WAAW,MAAM,CAAC,MAAM,EAAE;YACrD,GAAG,MAAM,CAAC,OAAO;SAClB,CAAC;aACD,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACZ,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAChC,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,MAAM,KAAK,mBAAmB;YACrC,MAAM,CAAC,MAAM,KAAK,OAAO,CAC5B,CAAC;QACF,MAAM,aAAa,GAAG,mBAAmB,CACvC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChC,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CACtC,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,CACzC,CACF,CACF,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,qBAAqB,CACvC,SAAS,EACT,aAAa,EACb,CAAC,OAAO,CACT,CAAC;QACF,MAAM,SAAS,GAAmB,MAAM,CAAC,oBAAoB,EAAE;YAC7D,SAAS;YACT,UAAU,EAAE,iBAAiB,CAAC,UAAU,CAAC;YACzC,MAAM;YACN,OAAO;YACP,OAAO;SACR,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,qBAAqB,CACnB,SAAiB,EACjB,aAAuC,EACvC,gBAAyB;QAEzB,IACE,IAAI,CAAC,kBAAkB,KAAK,SAAS;YACrC,IAAI,CAAC,kBAAkB,KAAK,SAAS,EACrC,CAAC;YACD,IAAI,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;QAEpC,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACrD,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;YAClC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACtD,IAAI,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CACxB,OAAO,EACP,MAAM,CAAC,mBAAmB,EAAE;gBAC1B,GAAG,KAAK;gBACR,KAAK,EAAE,gBAAgB;oBACrB,CAAC,CAAC,UAAU,CAAC,OAAO;oBACpB,CAAC,CAAC,UAAU,CAAC,OAAO;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACxD,uBAAuB,CACxB,CAAC;QACF,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CACnC,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,iBAAiB,CAAC,KAAK,CAAC;YACzB,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CACnD,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAChC,CACJ,CAAC;QACF,MAAM,QAAQ,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACpE,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;CACF;AAED,SAAS,qBAAqB,CAC5B,MAAgC;IAEhC,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAuB,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC;gBAAE,SAAS;YAC5D,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;YAClE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,iBAAiB,CAAC,GAAG,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,iBAAiB,CAAC,OAAO,EAAE,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;SAC/C,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAoB;IAC7C,OAAO,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAoB;IACpD,OAAO,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAC9C,UAAU,CAAC,UAAU,CAAC,gBAAgB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAC9B,IAAmB,EACnB,KAAoB;IAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,WAAW,KAAK,YAAY;QAAE,OAAO,YAAY,GAAG,WAAW,CAAC;IACpE,MAAM,YAAY,GAAG,IAAI,CAAC,cAAc,KAAK,SAAS;QACpD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;IACjD,MAAM,aAAa,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS;QACtD,CAAC,CAAC,CAAC;QACH,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC;IAClD,OAAO,aAAa,GAAG,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAuB,EACvB,SAAiB,EACjB,UAAkB,EAClB,MAAmB,EACnB,OAA4D;IAE5D,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClC,MAAM,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,YAAoB,EACpB,MAAmB;IAEnB,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAClD,MAAM,CAAC,gBAAgB,CACrB,OAAO,EACP,GAAG,EAAE;YACH,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,EAAE,CAAC;QACZ,CAAC,EACD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/discovery/evidence.d.ts

@@ -0,0 +1,29 @@
+export type ProbeStatus = "ok" | "permission_denied" | "unknown";
+export type ProbeResult<T> = Readonly<{
+    status: "ok";
+    value: T;
+}> | Readonly<{
+    status: "permission_denied" | "unknown";
+    notice: string;
+}>;
+export type ProcessEvidence = Readonly<{
+    processKey: string;
+    processId: number;
+    startedAt: Date;
+    executableName: string;
+    executablePathDigest: string;
+}>;
+export type ExecutableEvidence = Readonly<{
+    executableName: string;
+    executablePathDigest: string;
+    version: string;
+}>;
+export type ConfigurationEvidence = Readonly<{
+    identifierDigest: string;
+}>;
+export interface HostEvidenceProvider {
+    listProcesses(): Promise<ProbeResult<readonly ProcessEvidence[]>>;
+    inspectExecutable(candidates: readonly string[]): Promise<ProbeResult<ExecutableEvidence | null>>;
+    inspectConfiguration(candidates: readonly string[]): Promise<ProbeResult<readonly ConfigurationEvidence[]>>;
+}
+//# sourceMappingURL=evidence.d.ts.map

package/dist/src/discovery/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/discovery/evidence.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG,IAAI,GAAG,mBAAmB,GAAG,SAAS,CAAC;AAEjE,MAAM,MAAM,WAAW,CAAC,CAAC,IACrB,QAAQ,CAAC;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC,GACpC,QAAQ,CAAC;IACP,MAAM,EAAE,mBAAmB,GAAG,SAAS,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEP,MAAM,MAAM,eAAe,GAAG,QAAQ,CAAC;IAGrC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC3C,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,WAAW,oBAAoB;IACnC,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC,CAAC;IAClE,iBAAiB,CACf,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,WAAW,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,CAAC;IACnD,oBAAoB,CAClB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,WAAW,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC,CAAC;CAC3D"}

package/dist/src/discovery/evidence.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=evidence.js.map

package/dist/src/discovery/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/discovery/evidence.ts"],"names":[],"mappings":""}

package/dist/src/discovery/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./engine.js";
+export * from "./evidence.js";
+export * from "./system-evidence.js";
+export * from "./types.js";
+export { claudeAdapter } from "./adapters/claude.js";
+export { codexAdapter } from "./adapters/codex.js";
+export { customAgentAdapter } from "./adapters/custom.js";
+export { genericAdapter } from "./adapters/generic.js";
+export { hermesAdapter } from "./adapters/hermes.js";
+export { openClawAdapter } from "./adapters/openclaw.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/discovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/discovery/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/src/discovery/index.js

@@ -0,0 +1,11 @@
+export * from "./engine.js";
+export * from "./evidence.js";
+export * from "./system-evidence.js";
+export * from "./types.js";
+export { claudeAdapter } from "./adapters/claude.js";
+export { codexAdapter } from "./adapters/codex.js";
+export { customAgentAdapter } from "./adapters/custom.js";
+export { genericAdapter } from "./adapters/generic.js";
+export { hermesAdapter } from "./adapters/hermes.js";
+export { openClawAdapter } from "./adapters/openclaw.js";
+//# sourceMappingURL=index.js.map

package/dist/src/discovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/discovery/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/src/discovery/known-agent.d.ts

@@ -0,0 +1,17 @@
+import { type AgentKind } from "../generated/phigon/v1/common_pb.js";
+import { type AgentIdentity } from "../generated/phigon/v1/identity_pb.js";
+import type { HostEvidenceProvider } from "./evidence.js";
+import type { AdapterResult } from "./types.js";
+export type KnownAgentSpec = Readonly<{
+    id: string;
+    kind: AgentKind;
+    displayName: string;
+    executableNames: readonly string[];
+    processNames: readonly string[];
+    configurationPaths: readonly string[];
+    capabilities: readonly string[];
+}>;
+export declare function discoverKnownAgent(spec: KnownAgentSpec, evidence: HostEvidenceProvider, observedAt: Date): Promise<AdapterResult>;
+export declare function combineAdapterResults(adapterId: string, results: readonly AdapterResult[]): AdapterResult;
+export declare function sortAgentIdentities(agents: readonly AgentIdentity[]): AgentIdentity[];
+//# sourceMappingURL=known-agent.d.ts.map

package/dist/src/discovery/known-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-agent.d.ts","sourceRoot":"","sources":["../../../src/discovery/known-agent.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,SAAS,EACf,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EACV,oBAAoB,EAGrB,MAAM,eAAe,CAAC;AAMvB,OAAO,KAAK,EAEV,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,SAAS,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,cAAc,EACpB,QAAQ,EAAE,oBAAoB,EAC9B,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,aAAa,CAAC,CA8IxB;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,aAAa,EAAE,GAChC,aAAa,CAkBf;AA6DD,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,SAAS,aAAa,EAAE,GAC/B,aAAa,EAAE,CAIjB"}

package/dist/src/discovery/known-agent.js

@@ -0,0 +1,193 @@
+import { createHash } from "node:crypto";
+import { create } from "@bufbuild/protobuf";
+import { timestampFromDate } from "@bufbuild/protobuf/wkt";
+import { AgentState, } from "../generated/phigon/v1/common_pb.js";
+import { AgentIdentitySchema, } from "../generated/phigon/v1/identity_pb.js";
+import { normalizedProcessKey, processKeyCapability, stableRuntimeAgentID, } from "./process-identity.js";
+export async function discoverKnownAgent(spec, evidence, observedAt) {
+    // Finish the passive process snapshot before launching a bounded
+    // `--version` probe so discovery never observes its own child process.
+    const processProbe = await evidence.listProcesses();
+    const [executableProbe, configurationProbe] = await Promise.all([
+        evidence.inspectExecutable(spec.executableNames),
+        evidence.inspectConfiguration(spec.configurationPaths),
+    ]);
+    const notices = [];
+    collectProbeNotice(processProbe, notices);
+    collectProbeNotice(executableProbe, notices);
+    collectProbeNotice(configurationProbe, notices);
+    const processMatches = processProbe.status === "ok"
+        ? processProbe.value
+            .filter((process) => spec.processNames.includes(process.executableName))
+            .sort((left, right) => left.processId - right.processId)
+        : [];
+    const processKeyCounts = new Map();
+    for (const process of processMatches) {
+        const processKey = normalizedProcessKey(process.processKey);
+        if (processKey !== undefined) {
+            processKeyCounts.set(processKey, (processKeyCounts.get(processKey) ?? 0) + 1);
+        }
+    }
+    const runtimeMatches = processMatches.filter((process) => {
+        const processKey = normalizedProcessKey(process.processKey);
+        return (processKey !== undefined &&
+            processKeyCounts.get(processKey) === 1 &&
+            Number.isSafeInteger(process.processId) &&
+            process.processId > 0 &&
+            process.startedAt instanceof Date &&
+            !Number.isNaN(process.startedAt.getTime()) &&
+            process.startedAt.getTime() <= observedAt.getTime() + 5 * 60_000);
+    });
+    const processEvidenceIncomplete = runtimeMatches.length !== processMatches.length;
+    const executable = executableProbe.status === "ok" ? executableProbe.value : null;
+    const configurations = configurationProbe.status === "ok"
+        ? configurationProbe.value
+        : [];
+    const detected = processMatches.length > 0 ||
+        executable !== null ||
+        configurations.length > 0;
+    if (!detected) {
+        return {
+            agents: [],
+            health: health(spec.id, [
+                processProbe,
+                executableProbe,
+                configurationProbe,
+            ], notices),
+        };
+    }
+    if (executable !== null && executable.version.length === 0) {
+        notices.push(`${spec.displayName} version is unknown.`);
+    }
+    if (processEvidenceIncomplete) {
+        notices.push(`${spec.displayName} process-lifetime evidence was incomplete; ` +
+            "affected runtimes were not attributed.");
+    }
+    const processMatch = processMatches[0];
+    const state = agentState(runtimeMatches[0], executable !== null, configurations.length > 0, [processProbe, executableProbe, configurationProbe]);
+    const executablePathDigest = executable?.executablePathDigest ??
+        configurations[0]?.identifierDigest ??
+        processMatch?.executablePathDigest ??
+        "";
+    const productCapability = `agent-product:${spec.id}`;
+    const processIdentities = runtimeMatches.flatMap((process) => {
+        const agentID = stableRuntimeAgentID(spec.id, process.processKey);
+        const keyCapability = processKeyCapability(process.processKey);
+        if (agentID === undefined || keyCapability === undefined)
+            return [];
+        return [create(AgentIdentitySchema, {
+                agentId: agentID,
+                kind: spec.kind,
+                displayName: `${spec.displayName} · PID ${process.processId}`,
+                version: executable?.version ?? "",
+                runtime: "",
+                state: AgentState.RUNNING,
+                processId: BigInt(process.processId),
+                startedAt: timestampFromDate(process.startedAt),
+                lastObservedAt: timestampFromDate(observedAt),
+                capabilities: [
+                    ...new Set([
+                        ...spec.capabilities,
+                        productCapability,
+                        "process-instance",
+                        keyCapability,
+                    ]),
+                ].sort(),
+                executablePathDigest: process.executablePathDigest || executablePathDigest,
+            })];
+    });
+    const productIdentity = processIdentities.length === 0
+        ? [create(AgentIdentitySchema, {
+                agentId: stableAgentID(spec.id, executablePathDigest),
+                kind: spec.kind,
+                displayName: spec.displayName,
+                version: executable?.version ?? "",
+                runtime: "",
+                state: processMatches.length > 0 ? AgentState.UNKNOWN : state,
+                processId: 0n,
+                lastObservedAt: timestampFromDate(observedAt),
+                capabilities: [...spec.capabilities, productCapability].sort(),
+                executablePathDigest,
+            })]
+        : [];
+    const measuredHealth = health(spec.id, [processProbe, executableProbe, configurationProbe], notices);
+    const adapterHealth = processEvidenceIncomplete
+        ? { ...measuredHealth, status: "error" }
+        : measuredHealth;
+    return {
+        agents: [...productIdentity, ...processIdentities],
+        health: adapterHealth,
+    };
+}
+export function combineAdapterResults(adapterId, results) {
+    const notices = results.flatMap((result) => result.health.notices);
+    const statuses = results.map((result) => result.health.status);
+    let status = "healthy";
+    if (statuses.includes("error"))
+        status = "error";
+    else if (statuses.includes("permission_denied")) {
+        status = "permission_denied";
+    }
+    else if (statuses.includes("degraded")) {
+        status = "degraded";
+    }
+    return {
+        agents: results.flatMap((result) => result.agents),
+        health: {
+            adapterId,
+            status,
+            notices: notices.slice(0, 32),
+        },
+    };
+}
+function agentState(process, hasExecutable, hasConfiguration, probes) {
+    if (process !== undefined)
+        return AgentState.RUNNING;
+    if (probes.some((probe) => probe.status === "permission_denied")) {
+        return AgentState.PERMISSION_DENIED;
+    }
+    if (probes.some((probe) => probe.status === "unknown")) {
+        return AgentState.UNKNOWN;
+    }
+    if (hasExecutable)
+        return AgentState.STOPPED;
+    if (hasConfiguration)
+        return AgentState.INSTALLED;
+    return AgentState.UNKNOWN;
+}
+function health(adapterId, probes, notices) {
+    let status = "healthy";
+    if (probes.some((probe) => probe.status === "unknown")) {
+        status = "error";
+    }
+    else if (probes.some((probe) => probe.status === "permission_denied")) {
+        status = "permission_denied";
+    }
+    else if (notices.length > 0) {
+        status = "degraded";
+    }
+    return {
+        adapterId,
+        status,
+        notices: notices.slice(0, 32),
+    };
+}
+function collectProbeNotice(probe, notices) {
+    if (probe.status !== "ok")
+        notices.push(probe.notice.slice(0, 256));
+}
+function stableAgentID(adapterID, evidenceDigest) {
+    const digest = createHash("sha256")
+        .update("phigon-agent-v1")
+        .update("\0")
+        .update(adapterID)
+        .update("\0")
+        .update(evidenceDigest)
+        .digest("hex")
+        .slice(0, 32);
+    return `agt_${digest}`;
+}
+export function sortAgentIdentities(agents) {
+    return [...agents].sort((left, right) => left.agentId.localeCompare(right.agentId));
+}
+//# sourceMappingURL=known-agent.js.map

package/dist/src/discovery/known-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-agent.js","sourceRoot":"","sources":["../../../src/discovery/known-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EACL,UAAU,GAEX,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EACL,mBAAmB,GAEpB,MAAM,uCAAuC,CAAC;AAM/C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAgB/B,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAoB,EACpB,QAA8B,EAC9B,UAAgB;IAEhB,iEAAiE;IACjE,uEAAuE;IACvE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;IACpD,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9D,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC;QAChD,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,kBAAkB,CAAC;KACvD,CAAC,CAAC;IACH,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,kBAAkB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC1C,kBAAkB,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IAC7C,kBAAkB,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IAEhD,MAAM,cAAc,GAClB,YAAY,CAAC,MAAM,KAAK,IAAI;QAC1B,CAAC,CAAC,YAAY,CAAC,KAAK;aACf,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CACnD;aACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAC5D,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,gBAAgB,CAAC,GAAG,CAClB,UAAU,EACV,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAC5C,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5D,OAAO,CACL,UAAU,KAAK,SAAS;YACxB,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;YACtC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;YACvC,OAAO,CAAC,SAAS,GAAG,CAAC;YACrB,OAAO,CAAC,SAAS,YAAY,IAAI;YACjC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAC1C,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,MAAM,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,yBAAyB,GAC7B,cAAc,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,CAAC;IAClD,MAAM,UAAU,GACd,eAAe,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,cAAc,GAClB,kBAAkB,CAAC,MAAM,KAAK,IAAI;QAChC,CAAC,CAAC,kBAAkB,CAAC,KAAK;QAC1B,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,QAAQ,GACZ,cAAc,CAAC,MAAM,GAAG,CAAC;QACzB,UAAU,KAAK,IAAI;QACnB,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE;gBACtB,YAAY;gBACZ,eAAe;gBACf,kBAAkB;aACnB,EAAE,OAAO,CAAC;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,sBAAsB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,yBAAyB,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CACV,GAAG,IAAI,CAAC,WAAW,6CAA6C;YAChE,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CACtB,cAAc,CAAC,CAAC,CAAC,EACjB,UAAU,KAAK,IAAI,EACnB,cAAc,CAAC,MAAM,GAAG,CAAC,EACzB,CAAC,YAAY,EAAE,eAAe,EAAE,kBAAkB,CAAC,CACpD,CAAC;IACF,MAAM,oBAAoB,GACxB,UAAU,EAAE,oBAAoB;QAChC,cAAc,CAAC,CAAC,CAAC,EAAE,gBAAgB;QACnC,YAAY,EAAE,oBAAoB;QAClC,EAAE,CAAC;IACL,MAAM,iBAAiB,GAAG,iBAAiB,IAAI,CAAC,EAAE,EAAE,CAAC;IACrD,MAAM,iBAAiB,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3D,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAClE,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,OAAO,KAAK,SAAS,IAAI,aAAa,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QACpE,OAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE;gBAClC,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,GAAG,IAAI,CAAC,WAAW,UAAU,OAAO,CAAC,SAAS,EAAE;gBAC7D,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE;gBAClC,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,UAAU,CAAC,OAAO;gBACzB,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;gBACpC,SAAS,EAAE,iBAAiB,CAAC,OAAO,CAAC,SAAS,CAAC;gBAC/C,cAAc,EAAE,iBAAiB,CAAC,UAAU,CAAC;gBAC7C,YAAY,EAAE;oBACZ,GAAG,IAAI,GAAG,CAAC;wBACT,GAAG,IAAI,CAAC,YAAY;wBACpB,iBAAiB;wBACjB,kBAAkB;wBAClB,aAAa;qBACd,CAAC;iBACH,CAAC,IAAI,EAAE;gBACR,oBAAoB,EAClB,OAAO,CAAC,oBAAoB,IAAI,oBAAoB;aACvD,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,KAAK,CAAC;QACpD,CAAC,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE;gBAC3B,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAoB,CAAC;gBACrD,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE;gBAClC,OAAO,EAAE,EAAE;gBACX,KAAK,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC7D,SAAS,EAAE,EAAE;gBACb,cAAc,EAAE,iBAAiB,CAAC,UAAU,CAAC;gBAC7C,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,IAAI,EAAE;gBAC9D,oBAAoB;aACrB,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,cAAc,GAAG,MAAM,CAC3B,IAAI,CAAC,EAAE,EACP,CAAC,YAAY,EAAE,eAAe,EAAE,kBAAkB,CAAC,EACnD,OAAO,CACR,CAAC;IACF,MAAM,aAAa,GAAG,yBAAyB;QAC7C,CAAC,CAAC,EAAE,GAAG,cAAc,EAAE,MAAM,EAAE,OAAgB,EAAE;QACjD,CAAC,CAAC,cAAc,CAAC;IAEnB,OAAO;QACL,MAAM,EAAE,CAAC,GAAG,eAAe,EAAE,GAAG,iBAAiB,CAAC;QAClD,MAAM,EAAE,aAAa;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,OAAiC;IAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/D,IAAI,MAAM,GAA4B,SAAS,CAAC;IAChD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,GAAG,OAAO,CAAC;SAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,mBAAmB,CAAC;IAC/B,CAAC;SAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IACD,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;QAClD,MAAM,EAAE;YACN,SAAS;YACT,MAAM;YACN,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;SAC9B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,OAAoC,EACpC,aAAsB,EACtB,gBAAyB,EACzB,MAAuC;IAEvC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC;IACrD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC,EAAE,CAAC;QACjE,OAAO,UAAU,CAAC,iBAAiB,CAAC;IACtC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACvD,OAAO,UAAU,CAAC,OAAO,CAAC;IAC5B,CAAC;IACD,IAAI,aAAa;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC;IAC7C,IAAI,gBAAgB;QAAE,OAAO,UAAU,CAAC,SAAS,CAAC;IAClD,OAAO,UAAU,CAAC,OAAO,CAAC;AAC5B,CAAC;AAED,SAAS,MAAM,CACb,SAAiB,EACjB,MAAuC,EACvC,OAA0B;IAE1B,IAAI,MAAM,GAA4B,SAAS,CAAC;IAChD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;QACvD,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC;SAAM,IACL,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,mBAAmB,CAAC,EAC5D,CAAC;QACD,MAAM,GAAG,mBAAmB,CAAC;IAC/B,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,UAAU,CAAC;IACtB,CAAC;IACD,OAAO;QACL,SAAS;QACT,MAAM;QACN,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA2B,EAC3B,OAAiB;IAEjB,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,cAAsB;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,cAAc,CAAC;SACtB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,OAAO,MAAM,EAAE,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,MAAgC;IAEhC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACtC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAC1C,CAAC;AACJ,CAAC"}

package/dist/src/discovery/process-identity.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Accepts only opaque, bounded process-lifetime keys. Raw native start
+ * material never leaves the local evidence provider.
+ */
+export declare function normalizedProcessKey(value: unknown): string | undefined;
+/**
+ * Inventory carries only a short fingerprint of the process key. This lets
+ * activity claims be compared with OS evidence without exposing native
+ * process-lifetime material or treating a PID as identity.
+ */
+export declare function processKeyCapability(processKey: unknown): string | undefined;
+export declare function stableRuntimeAgentID(adapterID: string, processKey: unknown): string | undefined;
+/**
+ * Converts complete local process-lifetime evidence into an opaque key. The
+ * start identity, not the PID, prevents a reused PID from inheriting an old
+ * runtime identity.
+ */
+export declare function observedProcessKey(platform: NodeJS.Platform, processID: number, nativeStartIdentity: string, executablePathDigest: string): string | undefined;
+//# sourceMappingURL=process-identity.d.ts.map

package/dist/src/discovery/process-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.d.ts","sourceRoot":"","sources":["../../../src/discovery/process-identity.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAWvE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,OAAO,GAClB,MAAM,GAAG,SAAS,CAQpB;AAED,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,OAAO,GAClB,MAAM,GAAG,SAAS,CAWpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,SAAS,EAAE,MAAM,EACjB,mBAAmB,EAAE,MAAM,EAC3B,oBAAoB,EAAE,MAAM,GAC3B,MAAM,GAAG,SAAS,CAuBpB"}

package/dist/src/discovery/process-identity.js

@@ -0,0 +1,73 @@
+import { createHash } from "node:crypto";
+const maxProcessKeyBytes = 256;
+const processKeyCapabilityPrefix = "process-key-sha256:";
+/**
+ * Accepts only opaque, bounded process-lifetime keys. Raw native start
+ * material never leaves the local evidence provider.
+ */
+export function normalizedProcessKey(value) {
+    if (typeof value !== "string" ||
+        value.length === 0 ||
+        value !== value.trim() ||
+        Buffer.byteLength(value, "utf8") > maxProcessKeyBytes ||
+        /[\u0000-\u001f\u007f]/u.test(value)) {
+        return undefined;
+    }
+    return value;
+}
+/**
+ * Inventory carries only a short fingerprint of the process key. This lets
+ * activity claims be compared with OS evidence without exposing native
+ * process-lifetime material or treating a PID as identity.
+ */
+export function processKeyCapability(processKey) {
+    const normalized = normalizedProcessKey(processKey);
+    if (normalized === undefined)
+        return undefined;
+    return `${processKeyCapabilityPrefix}${createHash("sha256")
+        .update("phigon-process-key-capability-v1\0")
+        .update(normalized)
+        .digest("hex")
+        .slice(0, 32)}`;
+}
+export function stableRuntimeAgentID(adapterID, processKey) {
+    const normalized = normalizedProcessKey(processKey);
+    if (normalized === undefined || adapterID.length === 0)
+        return undefined;
+    const digest = createHash("sha256")
+        .update("phigon-agent-process-v2\0")
+        .update(adapterID)
+        .update("\0")
+        .update(normalized)
+        .digest("hex")
+        .slice(0, 32);
+    return `agt_${digest}`;
+}
+/**
+ * Converts complete local process-lifetime evidence into an opaque key. The
+ * start identity, not the PID, prevents a reused PID from inheriting an old
+ * runtime identity.
+ */
+export function observedProcessKey(platform, processID, nativeStartIdentity, executablePathDigest) {
+    if (!Number.isSafeInteger(processID) ||
+        processID < 1 ||
+        nativeStartIdentity.length === 0 ||
+        executablePathDigest.length === 0) {
+        return undefined;
+    }
+    const hash = createHash("sha256");
+    hash.update("phigon-observer-process-key-v1\0");
+    for (const value of [
+        platform,
+        String(processID),
+        nativeStartIdentity,
+        executablePathDigest,
+    ]) {
+        hash.update(String(Buffer.byteLength(value, "utf8")));
+        hash.update(":");
+        hash.update(value);
+        hash.update("\0");
+    }
+    return `prc_${hash.digest("hex")}`;
+}
+//# sourceMappingURL=process-identity.js.map

package/dist/src/discovery/process-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process-identity.js","sourceRoot":"","sources":["../../../src/discovery/process-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,0BAA0B,GAAG,qBAAqB,CAAC;AAEzD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,kBAAkB;QACrD,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAmB;IAEnB,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,GAAG,0BAA0B,GAAG,UAAU,CAAC,QAAQ,CAAC;SACxD,MAAM,CAAC,oCAAoC,CAAC;SAC5C,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,UAAmB;IAEnB,MAAM,UAAU,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,2BAA2B,CAAC;SACnC,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,CAAC,IAAI,CAAC;SACZ,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,OAAO,MAAM,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAyB,EACzB,SAAiB,EACjB,mBAA2B,EAC3B,oBAA4B;IAE5B,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;QAChC,SAAS,GAAG,CAAC;QACb,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,oBAAoB,CAAC,MAAM,KAAK,CAAC,EACjC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI;QAClB,QAAQ;QACR,MAAM,CAAC,SAAS,CAAC;QACjB,mBAAmB;QACnB,oBAAoB;KACrB,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACrC,CAAC"}

package/dist/src/discovery/system-evidence.d.ts

@@ -0,0 +1,9 @@
+import type { ConfigurationEvidence, ExecutableEvidence, HostEvidenceProvider, ProbeResult, ProcessEvidence } from "./evidence.js";
+export declare class SystemEvidenceProvider implements HostEvidenceProvider {
+    #private;
+    constructor(platform?: NodeJS.Platform, environment?: NodeJS.ProcessEnv);
+    listProcesses(): Promise<ProbeResult<readonly ProcessEvidence[]>>;
+    inspectExecutable(candidates: readonly string[]): Promise<ProbeResult<ExecutableEvidence | null>>;
+    inspectConfiguration(candidates: readonly string[]): Promise<ProbeResult<readonly ConfigurationEvidence[]>>;
+}
+//# sourceMappingURL=system-evidence.d.ts.map

package/dist/src/discovery/system-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-evidence.d.ts","sourceRoot":"","sources":["../../../src/discovery/system-evidence.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,EACpB,WAAW,EACX,eAAe,EAChB,MAAM,eAAe,CAAC;AAQvB,qBAAa,sBAAuB,YAAW,oBAAoB;;gBAQ/D,QAAQ,GAAE,MAAM,CAAC,QAA2B,EAC5C,WAAW,GAAE,MAAM,CAAC,UAAwB;IAM9C,aAAa,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAK3D,iBAAiB,CACrB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,WAAW,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IA4B5C,oBAAoB,CACxB,UAAU,EAAE,SAAS,MAAM,EAAE,GAC5B,OAAO,CAAC,WAAW,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;CAuH1D"}