@phigon/observer 8.0.1

package/dist/src/discovery/system-evidence.js

@@ -0,0 +1,270 @@
+import { createHash } from "node:crypto";
+import { execFile } from "node:child_process";
+import { constants } from "node:fs";
+import { access, stat } from "node:fs/promises";
+import { homedir } from "node:os";
+import { basename, delimiter, join } from "node:path";
+import { promisify } from "node:util";
+import { observedProcessKey } from "./process-identity.js";
+const execFileAsync = promisify(execFile);
+const executableNamePattern = /^[a-zA-Z0-9._+-]{1,128}$/;
+const versionPattern = /\bv?\d+\.\d+(?:\.\d+)?(?:[-+][0-9A-Za-z.-]+)?\b/;
+export class SystemEvidenceProvider {
+    #platform;
+    #environment;
+    #processes;
+    constructor(platform = process.platform, environment = process.env) {
+        this.#platform = platform;
+        this.#environment = environment;
+    }
+    listProcesses() {
+        this.#processes ??= this.#readProcesses();
+        return this.#processes;
+    }
+    async inspectExecutable(candidates) {
+        for (const candidate of candidates) {
+            if (!executableNamePattern.test(candidate)) {
+                return {
+                    status: "unknown",
+                    notice: "Executable probe configuration was invalid.",
+                };
+            }
+        }
+        try {
+            for (const candidate of candidates) {
+                const executablePath = await this.#findExecutable(candidate);
+                if (executablePath === null)
+                    continue;
+                return {
+                    status: "ok",
+                    value: {
+                        executableName: normalizedExecutableName(candidate),
+                        executablePathDigest: digest(executablePath),
+                        version: await readVersion(executablePath),
+                    },
+                };
+            }
+            return { status: "ok", value: null };
+        }
+        catch (error) {
+            return probeFailure(error, "Executable inspection");
+        }
+    }
+    async inspectConfiguration(candidates) {
+        const found = [];
+        try {
+            for (const candidate of candidates) {
+                const expanded = expandHome(candidate);
+                try {
+                    await stat(expanded);
+                    found.push({ identifierDigest: digest(expanded) });
+                }
+                catch (error) {
+                    if (isNodeError(error) && error.code === "ENOENT")
+                        continue;
+                    throw error;
+                }
+            }
+            return { status: "ok", value: found };
+        }
+        catch (error) {
+            return probeFailure(error, "Configuration inspection");
+        }
+    }
+    async #readProcesses() {
+        try {
+            if (this.#platform === "win32") {
+                return {
+                    status: "ok",
+                    value: await readWindowsProcesses(),
+                };
+            }
+            const { stdout } = await execFileAsync("ps", ["-axo", "pid=,lstart=,comm="], {
+                timeout: 3_000,
+                maxBuffer: 1 << 20,
+                encoding: "utf8",
+                env: {
+                    ...this.#environment,
+                    LANG: "C",
+                    LC_ALL: "C",
+                },
+            });
+            const processes = [];
+            for (const line of stdout.split(/\r?\n/u)) {
+                const match = /^\s*(\d+)\s+(\S+\s+\S+\s+\d{1,2}\s+\d{2}:\d{2}:\d{2}\s+\d{4})\s+(.+?)\s*$/u.exec(line);
+                if (match === null)
+                    continue;
+                const processId = Number(match[1]);
+                const nativeStartIdentity = match[2];
+                const executablePath = match[3];
+                const startedAt = processStartDate(nativeStartIdentity);
+                if (nativeStartIdentity === undefined ||
+                    executablePath === undefined ||
+                    startedAt === undefined ||
+                    !Number.isSafeInteger(processId) ||
+                    processId < 1) {
+                    continue;
+                }
+                const executablePathDigest = digest(executablePath);
+                const processKey = observedProcessKey(this.#platform, processId, nativeStartIdentity, executablePathDigest);
+                if (processKey === undefined)
+                    continue;
+                processes.push({
+                    processKey,
+                    processId,
+                    startedAt,
+                    executableName: normalizedExecutableName(basename(executablePath)),
+                    executablePathDigest,
+                });
+            }
+            return { status: "ok", value: processes };
+        }
+        catch (error) {
+            return probeFailure(error, "Process inspection");
+        }
+    }
+    async #findExecutable(candidate) {
+        const environmentValue = (name) => this.#environment[name] ?? (this.#platform === "win32"
+            ? Object.entries(this.#environment).find(([key]) => key.toUpperCase() === name)?.[1]
+            : undefined);
+        const pathValue = environmentValue("PATH") ?? "";
+        const extensions = this.#platform === "win32"
+            ? (environmentValue("PATHEXT") ?? ".EXE;.CMD;.BAT")
+                .split(";")
+                .filter(Boolean)
+            : [""];
+        for (const directory of pathValue.split(delimiter)) {
+            if (directory.length === 0)
+                continue;
+            for (const extension of extensions) {
+                const executablePath = join(directory, `${candidate}${extension}`);
+                try {
+                    await access(executablePath, this.#platform === "win32" ? constants.F_OK : constants.X_OK);
+                    return executablePath;
+                }
+                catch (error) {
+                    if (isNodeError(error) && error.code === "ENOENT")
+                        continue;
+                    if (isNodeError(error) && error.code === "EACCES")
+                        continue;
+                    throw error;
+                }
+            }
+        }
+        return null;
+    }
+}
+async function readWindowsProcesses() {
+    const script = [
+        "Get-CimInstance Win32_Process",
+        "Select-Object ProcessId,CreationDate,ExecutablePath,Name",
+        "ConvertTo-Json -Compress",
+    ].join(" | ");
+    const { stdout } = await execFileAsync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script], {
+        timeout: 15_000,
+        maxBuffer: 1 << 20,
+        encoding: "utf8",
+        windowsHide: true,
+    });
+    const parsed = JSON.parse(stdout);
+    const values = Array.isArray(parsed) ? parsed : [parsed];
+    const processes = [];
+    for (const value of values) {
+        if (typeof value !== "object" ||
+            value === null ||
+            !("ProcessId" in value) ||
+            typeof value.ProcessId !== "number" ||
+            !("Name" in value) ||
+            typeof value.Name !== "string" ||
+            !("CreationDate" in value) ||
+            typeof value.CreationDate !== "string") {
+            continue;
+        }
+        const rawPath = "ExecutablePath" in value &&
+            typeof value.ExecutablePath === "string"
+            ? value.ExecutablePath
+            : value.Name;
+        const startedAt = processStartDate(value.CreationDate);
+        const executablePathDigest = digest(rawPath);
+        const processKey = observedProcessKey("win32", value.ProcessId, value.CreationDate, executablePathDigest);
+        if (startedAt === undefined || processKey === undefined)
+            continue;
+        processes.push({
+            processKey,
+            processId: value.ProcessId,
+            startedAt,
+            executableName: normalizedExecutableName(value.Name),
+            executablePathDigest,
+        });
+    }
+    return processes;
+}
+async function readVersion(executablePath) {
+    try {
+        // npm exposes .cmd shims on Windows, which execFile cannot launch.
+        // Its sibling PowerShell shim accepts a literal file argument, avoiding
+        // shell interpolation of paths (including spaces and metacharacters).
+        const script = process.platform === "win32" && /\.(cmd|bat)$/iu.test(executablePath)
+            ? executablePath.replace(/\.(cmd|bat)$/iu, ".ps1")
+            : undefined;
+        if (script !== undefined)
+            await access(script, constants.F_OK);
+        const execution = execFileAsync(script === undefined ? executablePath : "powershell.exe", script === undefined ? ["--version"] : ["-NoProfile", "-NonInteractive", "-File", script, "--version"], {
+            timeout: 5_000,
+            maxBuffer: 4_096,
+            encoding: "utf8",
+            windowsHide: true,
+        });
+        // npm's PowerShell shims forward pipeline input before exiting. Version
+        // probes have no input; leaving this pipe open can make a healthy CLI
+        // wait until the timeout instead of returning its version.
+        execution.child.stdin?.end();
+        const { stdout, stderr } = await execution;
+        const match = versionPattern.exec(`${stdout}\n${stderr}`.slice(0, 4_096));
+        return match?.[0]?.slice(0, 64) ?? "";
+    }
+    catch {
+        return "";
+    }
+}
+function probeFailure(error, label) {
+    if (isNodeError(error) &&
+        (error.code === "EACCES" || error.code === "EPERM")) {
+        return {
+            status: "permission_denied",
+            notice: `${label} was denied by the operating system.`,
+        };
+    }
+    return {
+        status: "unknown",
+        notice: `${label} could not be completed.`,
+    };
+}
+function expandHome(value) {
+    if (value === "~")
+        return homedir();
+    if (value.startsWith("~/") || value.startsWith("~\\")) {
+        return join(homedir(), value.slice(2));
+    }
+    return value;
+}
+function normalizedExecutableName(value) {
+    return value.toLowerCase().replace(/\.exe$/u, "").slice(0, 128);
+}
+function processStartDate(value) {
+    if (value === undefined || value.trim().length === 0)
+        return undefined;
+    const dotNet = /^\/Date\((\d+)(?:[+-]\d{4})?\)\/$/u.exec(value);
+    const milliseconds = dotNet === null ? Date.parse(value) : Number(dotNet[1]);
+    if (!Number.isFinite(milliseconds))
+        return undefined;
+    const startedAt = new Date(milliseconds);
+    return Number.isNaN(startedAt.getTime()) ? undefined : startedAt;
+}
+function digest(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function isNodeError(error) {
+    return error instanceof Error && "code" in error;
+}
+//# sourceMappingURL=system-evidence.js.map

package/dist/src/discovery/system-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-evidence.js","sourceRoot":"","sources":["../../../src/discovery/system-evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC1C,MAAM,qBAAqB,GAAG,0BAA0B,CAAC;AACzD,MAAM,cAAc,GAClB,iDAAiD,CAAC;AAEpD,MAAM,OAAO,sBAAsB;IACxB,SAAS,CAAkB;IAC3B,YAAY,CAAoB;IACzC,UAAU,CAEI;IAEd,YACE,WAA4B,OAAO,CAAC,QAAQ,EAC5C,cAAiC,OAAO,CAAC,GAAG;QAE5C,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;QAC1B,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;IAClC,CAAC;IAED,aAAa;QACX,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,iBAAiB,CACrB,UAA6B;QAE7B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,OAAO;oBACL,MAAM,EAAE,SAAS;oBACjB,MAAM,EAAE,6CAA6C;iBACtD,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;gBAC7D,IAAI,cAAc,KAAK,IAAI;oBAAE,SAAS;gBACtC,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE;wBACL,cAAc,EAAE,wBAAwB,CAAC,SAAS,CAAC;wBACnD,oBAAoB,EAAE,MAAM,CAAC,cAAc,CAAC;wBAC5C,OAAO,EAAE,MAAM,WAAW,CAAC,cAAc,CAAC;qBAC3C;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,KAAK,EAAE,uBAAuB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,UAA6B;QAE7B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACrB,KAAK,CAAC,IAAI,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBAC5D,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc;QAGlB,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBAC/B,OAAO;oBACL,MAAM,EAAE,IAAI;oBACZ,KAAK,EAAE,MAAM,oBAAoB,EAAE;iBACpC,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,IAAI,EACJ,CAAC,MAAM,EAAE,oBAAoB,CAAC,EAC9B;gBACE,OAAO,EAAE,KAAK;gBACd,SAAS,EAAE,CAAC,IAAI,EAAE;gBAClB,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE;oBACH,GAAG,IAAI,CAAC,YAAY;oBACpB,IAAI,EAAE,GAAG;oBACT,MAAM,EAAE,GAAG;iBACZ;aACF,CACF,CAAC;YACF,MAAM,SAAS,GAAsB,EAAE,CAAC;YACxC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1C,MAAM,KAAK,GACT,4EAA4E,CAAC,IAAI,CAC/E,IAAI,CACL,CAAC;gBACJ,IAAI,KAAK,KAAK,IAAI;oBAAE,SAAS;gBAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnC,MAAM,mBAAmB,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACrC,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChC,MAAM,SAAS,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;gBACxD,IACE,mBAAmB,KAAK,SAAS;oBACjC,cAAc,KAAK,SAAS;oBAC5B,SAAS,KAAK,SAAS;oBACvB,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;oBAChC,SAAS,GAAG,CAAC,EACb,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,kBAAkB,CACnC,IAAI,CAAC,SAAS,EACd,SAAS,EACT,mBAAmB,EACnB,oBAAoB,CACrB,CAAC;gBACF,IAAI,UAAU,KAAK,SAAS;oBAAE,SAAS;gBACvC,SAAS,CAAC,IAAI,CAAC;oBACb,UAAU;oBACV,SAAS;oBACT,SAAS;oBACT,cAAc,EAAE,wBAAwB,CACtC,QAAQ,CAAC,cAAc,CAAC,CACzB;oBACD,oBAAoB;iBACrB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,YAAY,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CACpE,IAAI,CAAC,SAAS,KAAK,OAAO;YACxB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACpF,CAAC,CAAC,SAAS,CACd,CAAC;QACF,MAAM,SAAS,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,UAAU,GACd,IAAI,CAAC,SAAS,KAAK,OAAO;YACxB,CAAC,CAAC,CAAC,gBAAgB,CAAC,SAAS,CAAC,IAAI,gBAAgB,CAAC;iBAC9C,KAAK,CAAC,GAAG,CAAC;iBACV,MAAM,CAAC,OAAO,CAAC;YACpB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACX,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YACrC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,SAAS,GAAG,SAAS,EAAE,CAAC,CAAC;gBACnE,IAAI,CAAC;oBACH,MAAM,MAAM,CACV,cAAc,EACd,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAC7D,CAAC;oBACF,OAAO,cAAc,CAAC;gBACxB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBAC5D,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,SAAS;oBAC5D,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,KAAK,UAAU,oBAAoB;IACjC,MAAM,MAAM,GAAG;QACb,+BAA+B;QAC/B,0DAA0D;QAC1D,0BAA0B;KAC3B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACd,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CACpC,gBAAgB,EAChB,CAAC,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC,EACrD;QACE,OAAO,EAAE,MAAM;QACf,SAAS,EAAE,CAAC,IAAI,EAAE;QAClB,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,IAAI;KAClB,CACF,CAAC;IACF,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IACE,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,KAAK,IAAI;YACd,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC;YACvB,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,CAAC,CAAC,cAAc,IAAI,KAAK,CAAC;YAC1B,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,EACtC,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GACX,gBAAgB,IAAI,KAAK;YACzB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;YACtC,CAAC,CAAC,KAAK,CAAC,cAAc;YACtB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QACjB,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvD,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CACnC,OAAO,EACP,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,YAAY,EAClB,oBAAoB,CACrB,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;YAAE,SAAS;QAClE,SAAS,CAAC,IAAI,CAAC;YACb,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS;YACT,cAAc,EAAE,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC;YACpD,oBAAoB;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,cAAsB;IAC/C,IAAI,CAAC;QACH,mEAAmE;QACnE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC;YAClF,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC;YAClD,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,aAAa,CAC7B,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,gBAAgB,EACxD,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EACtG;YACE,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;YAChB,QAAQ,EAAE,MAAM;YAChB,WAAW,EAAE,IAAI;SAClB,CACF,CAAC;QACF,wEAAwE;QACxE,sEAAsE;QACtE,2DAA2D;QAC3D,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1E,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,KAAc,EACd,KAAa;IAEb,IACE,WAAW,CAAC,KAAK,CAAC;QAClB,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,EACnD,CAAC;QACD,OAAO;YACL,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,GAAG,KAAK,sCAAsC;SACvD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,GAAG,KAAK,0BAA0B;KAC3C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/src/discovery/types.d.ts

@@ -0,0 +1,21 @@
+import type { AgentIdentity, AgentInventory } from "../generated/phigon/v1/identity_pb.js";
+import type { HostEvidenceProvider } from "./evidence.js";
+export type AdapterHealthStatus = "healthy" | "degraded" | "permission_denied" | "error";
+export type AdapterHealth = Readonly<{
+    adapterId: string;
+    status: AdapterHealthStatus;
+    notices: readonly string[];
+}>;
+export type AdapterResult = Readonly<{
+    agents: readonly AgentIdentity[];
+    health: AdapterHealth;
+}>;
+export interface AgentDiscoveryAdapter {
+    readonly id: string;
+    discover(evidence: HostEvidenceProvider, observedAt: Date): Promise<AdapterResult>;
+}
+export type DiscoverySnapshot = Readonly<{
+    inventory: AgentInventory;
+    adapterHealth: readonly AdapterHealth[];
+}>;
+//# sourceMappingURL=types.d.ts.map

package/dist/src/discovery/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/discovery/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACf,MAAM,uCAAuC,CAAC;AAC/C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAE1D,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,UAAU,GACV,mBAAmB,GACnB,OAAO,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;IACnC,MAAM,EAAE,SAAS,aAAa,EAAE,CAAC;IACjC,MAAM,EAAE,aAAa,CAAC;CACvB,CAAC,CAAC;AAEH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CACN,QAAQ,EAAE,oBAAoB,EAC9B,UAAU,EAAE,IAAI,GACf,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3B;AAED,MAAM,MAAM,iBAAiB,GAAG,QAAQ,CAAC;IACvC,SAAS,EAAE,cAAc,CAAC;IAC1B,aAAa,EAAE,SAAS,aAAa,EAAE,CAAC;CACzC,CAAC,CAAC"}

package/dist/src/discovery/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/discovery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/discovery/types.ts"],"names":[],"mappings":""}

package/dist/src/event-queue.d.ts

@@ -0,0 +1,32 @@
+export type QueueMetrics = Readonly<{
+    capacity: number;
+    depth: number;
+    utilization: number;
+    dropped: number;
+    coalesced: number;
+    acknowledged: bigint;
+    oldestSequence?: bigint;
+    latestSequence?: bigint;
+}>;
+export type QueuedEvent<T> = Readonly<{
+    value: T;
+    sequence: bigint;
+    coalesceKey?: string;
+}>;
+export declare class BoundedEventQueue<T> {
+    #private;
+    constructor(capacity?: number);
+    enqueue(value: T, sequence: bigint, coalesceKey?: string): void;
+    canEnqueue(coalesceKey?: string): boolean;
+    acknowledge(throughSequence: bigint): void;
+    discard(sequence: bigint): boolean;
+    reconcileAcknowledged(throughSequence: bigint): void;
+    pending(): readonly T[];
+    entries(): readonly QueuedEvent<T>[];
+    replacePending(replace: (value: T) => T): void;
+    protected replaceState(source: BoundedEventQueue<T>): void;
+    latestSequence(): bigint | undefined;
+    pendingAfter(sequence: bigint, limit?: number): readonly T[];
+    metrics(): QueueMetrics;
+}
+//# sourceMappingURL=event-queue.d.ts.map

package/dist/src/event-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.d.ts","sourceRoot":"","sources":["../../src/event-queue.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG,QAAQ,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,MAAM,WAAW,CAAC,CAAC,IAAI,QAAQ,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC;IACT,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC,CAAC;AAEH,qBAAa,iBAAiB,CAAC,CAAC;;gBAOlB,QAAQ,SAAO;IAO3B,OAAO,CACL,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI;IA0BP,UAAU,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAQzC,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAQ1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUlC,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAUpD,OAAO,IAAI,SAAS,CAAC,EAAE;IAIvB,OAAO,IAAI,SAAS,WAAW,CAAC,CAAC,CAAC,EAAE;IAIpC,cAAc,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,IAAI;IAO9C,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC,GAAG,IAAI;IAU1D,cAAc,IAAI,MAAM,GAAG,SAAS;IAUpC,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,KAAK,SAAiB,GACrB,SAAS,CAAC,EAAE;IAUf,OAAO,IAAI,YAAY;CA4BxB"}

package/dist/src/event-queue.js

@@ -0,0 +1,125 @@
+export class BoundedEventQueue {
+    #capacity;
+    #events = [];
+    #dropped = 0;
+    #coalesced = 0;
+    #acknowledged = 0n;
+    constructor(capacity = 2048) {
+        if (!Number.isSafeInteger(capacity) || capacity < 1) {
+            throw new Error("Event queue capacity must be a positive integer.");
+        }
+        this.#capacity = capacity;
+    }
+    enqueue(value, sequence, coalesceKey) {
+        if (sequence <= this.#acknowledged)
+            return;
+        if (coalesceKey !== undefined) {
+            const index = this.#events.findIndex((event) => event.coalesceKey === coalesceKey);
+            if (index >= 0) {
+                this.#events[index] = { value, sequence, coalesceKey };
+                this.#events.sort((left, right) => left.sequence < right.sequence ? -1 : 1);
+                this.#coalesced++;
+                return;
+            }
+        }
+        if (this.#events.length >= this.#capacity) {
+            this.#events.shift();
+            this.#dropped++;
+        }
+        this.#events.push({
+            value,
+            sequence,
+            ...(coalesceKey === undefined ? {} : { coalesceKey }),
+        });
+    }
+    canEnqueue(coalesceKey) {
+        return (this.#events.length < this.#capacity ||
+            (coalesceKey !== undefined &&
+                this.#events.some((event) => event.coalesceKey === coalesceKey)));
+    }
+    acknowledge(throughSequence) {
+        if (throughSequence <= this.#acknowledged)
+            return;
+        this.#acknowledged = throughSequence;
+        this.#events = this.#events.filter((event) => event.sequence > throughSequence);
+    }
+    discard(sequence) {
+        const index = this.#events.findIndex((event) => event.sequence === sequence);
+        if (index < 0)
+            return false;
+        this.#events.splice(index, 1);
+        this.#dropped++;
+        return true;
+    }
+    reconcileAcknowledged(throughSequence) {
+        if (throughSequence < 0n) {
+            throw new Error("Acknowledged sequence must not be negative.");
+        }
+        this.#acknowledged = throughSequence;
+        this.#events = this.#events.filter((event) => event.sequence > throughSequence);
+    }
+    pending() {
+        return this.#events.map((event) => event.value);
+    }
+    entries() {
+        return this.#events.map((event) => Object.freeze({ ...event }));
+    }
+    replacePending(replace) {
+        this.#events = this.#events.map((event) => ({
+            ...event,
+            value: replace(event.value),
+        }));
+    }
+    replaceState(source) {
+        if (source.#capacity !== this.#capacity) {
+            throw new Error("Event queue replacement capacity does not match.");
+        }
+        this.#events = source.#events.map((event) => ({ ...event }));
+        this.#dropped = source.#dropped;
+        this.#coalesced = source.#coalesced;
+        this.#acknowledged = source.#acknowledged;
+    }
+    latestSequence() {
+        let latest;
+        for (const event of this.#events) {
+            if (latest === undefined || event.sequence > latest) {
+                latest = event.sequence;
+            }
+        }
+        return latest;
+    }
+    pendingAfter(sequence, limit = this.#capacity) {
+        if (!Number.isSafeInteger(limit) || limit < 1) {
+            return [];
+        }
+        return this.#events
+            .filter((event) => event.sequence > sequence)
+            .slice(0, limit)
+            .map((event) => event.value);
+    }
+    metrics() {
+        let oldestSequence;
+        let latestSequence;
+        for (const event of this.#events) {
+            if (oldestSequence === undefined ||
+                event.sequence < oldestSequence) {
+                oldestSequence = event.sequence;
+            }
+            if (latestSequence === undefined ||
+                event.sequence > latestSequence) {
+                latestSequence = event.sequence;
+            }
+        }
+        return Object.freeze({
+            capacity: this.#capacity,
+            depth: this.#events.length,
+            utilization: this.#events.length / this.#capacity,
+            dropped: this.#dropped,
+            coalesced: this.#coalesced,
+            acknowledged: this.#acknowledged,
+            ...(oldestSequence === undefined ? {} : { oldestSequence }),
+            ...(latestSequence === undefined ? {} : { latestSequence }),
+        });
+    }
+}
+//# sourceMappingURL=event-queue.js.map

package/dist/src/event-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-queue.js","sourceRoot":"","sources":["../../src/event-queue.ts"],"names":[],"mappings":"AAiBA,MAAM,OAAO,iBAAiB;IACnB,SAAS,CAAS;IAC3B,OAAO,GAA0B,EAAE,CAAC;IACpC,QAAQ,GAAG,CAAC,CAAC;IACb,UAAU,GAAG,CAAC,CAAC;IACf,aAAa,GAAG,EAAE,CAAC;IAEnB,YAAY,QAAQ,GAAG,IAAI;QACzB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAED,OAAO,CACL,KAAQ,EACR,QAAgB,EAChB,WAAoB;QAEpB,IAAI,QAAQ,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAC3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAC7C,CAAC;YACF,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAChC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACxC,CAAC;gBACF,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,OAAO;YACT,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChB,KAAK;YACL,QAAQ;YACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,WAAoB;QAC7B,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YACpC,CAAC,WAAW,KAAK,SAAS;gBACxB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,WAAW,CAAC,CAAC,CACnE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,eAAuB;QACjC,IAAI,eAAe,IAAI,IAAI,CAAC,aAAa;YAAE,OAAO;QAClD,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,eAAe,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,QAAgB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CACvC,CAAC;QACF,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB,CAAC,eAAuB;QAC3C,IAAI,eAAe,GAAG,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,eAAe,CAC5C,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,cAAc,CAAC,OAAwB;QACrC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1C,GAAG,KAAK;YACR,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;SAC5B,CAAC,CAAC,CAAC;IACN,CAAC;IAES,YAAY,CAAC,MAA4B;QACjD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,cAAc;QACZ,IAAI,MAA0B,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,GAAG,MAAM,EAAE,CAAC;gBACpD,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,YAAY,CACV,QAAgB,EAChB,KAAK,GAAG,IAAI,CAAC,SAAS;QAEtB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,IAAI,CAAC,OAAO;aAChB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;aAC5C,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED,OAAO;QACL,IAAI,cAAkC,CAAC;QACvC,IAAI,cAAkC,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IACE,cAAc,KAAK,SAAS;gBAC5B,KAAK,CAAC,QAAQ,GAAG,cAAc,EAC/B,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,CAAC;YACD,IACE,cAAc,KAAK,SAAS;gBAC5B,KAAK,CAAC,QAAQ,GAAG,cAAc,EAC/B,CAAC;gBACD,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,IAAI,CAAC,SAAS;YACxB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC1B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;YACjD,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;YAC3D,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/event-spool.d.ts

@@ -0,0 +1,19 @@
+import { type EventEnvelope } from "./generated/phigon/v1/telemetry_pb.js";
+import { BoundedEventQueue } from "./event-queue.js";
+/**
+ * An encrypted append-only delivery spool. The in-memory queue remains the hot
+ * path, while this log makes unacknowledged events recoverable after an
+ * observer restart without writing prompt or tool content as plaintext.
+ */
+export declare class FileBackedEventQueue extends BoundedEventQueue<EventEnvelope> {
+    #private;
+    constructor(dataDirectory: string, capacity?: number);
+    restore(tenantID: string, machineID: string, credential: string): void;
+    enqueue(value: EventEnvelope, sequence: bigint, coalesceKey?: string): void;
+    acknowledge(throughSequence: bigint): void;
+    discard(sequence: bigint): boolean;
+    reconcileAcknowledged(throughSequence: bigint): void;
+    replacePending(replace: (value: EventEnvelope) => EventEnvelope): void;
+}
+export declare function clearEventSpool(dataDirectory: string): void;
+//# sourceMappingURL=event-spool.d.ts.map

package/dist/src/event-spool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-spool.d.ts","sourceRoot":"","sources":["../../src/event-spool.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAoCrD;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,iBAAiB,CAAC,aAAa,CAAC;;gBAO5D,aAAa,EAAE,MAAM,EAAE,QAAQ,SAAO;IAMlD,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAgD7D,OAAO,CACd,KAAK,EAAE,aAAa,EACpB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,IAAI;IAeE,WAAW,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAO1C,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAUlC,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAMpD,cAAc,CACrB,OAAO,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,aAAa,GAC/C,IAAI;CA+KR;AAED,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAkB3D"}