@terminals-tech/agent-zero 1.0.0

package/dist/primitives/types.js

@@ -0,0 +1,205 @@
+/**
+ * Agent Zero Core Primitives
+ *
+ * The Five Primitives implementing the meta-isomorphism:
+ * POTENTIAL → COLLAPSE → TRACE
+ *
+ * These are not analogies—they are the SAME structure at different abstraction layers:
+ * - Computational: Dark computation → Token emission → Embedding
+ * - Quantum/Info: Superposition → Observation → Memory
+ * - Agent: Intention → Action → Consequence
+ * - Thermodynamic: Heat → Work → Entropy
+ * - Logical: Formula → Proof → Type
+ */
+import { z } from 'zod';
+// ============================================================================
+// PRIMITIVE 1: TOKEN
+// Quantum of rendered semantic reality
+// ============================================================================
+export const TokenPhase = z.enum(['dark', 'emitting', 'emitted']);
+export const Token = z.object({
+    id: z.string().uuid(),
+    /** Embedding vector position in semantic space (768-dim for Gemini) */
+    position: z.array(z.number()).length(768).optional(),
+    /** Tokens per second - momentum in token space */
+    momentum: z.number().nonnegative(),
+    /** Compute joules - energy cost */
+    energy: z.number().nonnegative(),
+    /** Phase: dark (pre-emission), emitting (generating), emitted (complete) */
+    phase: TokenPhase,
+    /** Causal hash for p-adic distance calculation */
+    ancestry: z.string(),
+    /** Content once emitted */
+    content: z.string().optional(),
+    /** Timestamp of phase transition */
+    timestamp: z.number(),
+});
+// ============================================================================
+// PRIMITIVE 2: DRIFT
+// Information mass of temporal evolution
+// ============================================================================
+export const Drift = z.object({
+    /** Embedding cosine similarity (0-1) */
+    semanticDistance: z.number().min(0).max(1),
+    /** Number of amb choice points between states */
+    causalDistance: z.number().nonnegative(),
+    /** p^(-k) where k = shared prefix length */
+    padicDistance: z.number().min(0).max(1),
+    /** Entropy of collapsed alternatives */
+    darkMass: z.number().nonnegative(),
+    /** Kuramoto order parameter (0-1) */
+    resonance: z.number().min(0).max(1),
+});
+// Temporal echo = semantically close (<0.2) + causally distant (>5)
+export function isTemporalEcho(drift) {
+    return drift.semanticDistance < 0.2 && drift.causalDistance > 5;
+}
+// ============================================================================
+// PRIMITIVE 3: FABRIC
+// Topology of token flow. Physical routing ≅ semantic routing.
+// ============================================================================
+export const FabricNode = z.object({
+    id: z.string().uuid(),
+    /** Compute capacity (tokens/sec) */
+    capacity: z.number().positive(),
+    /** Available memory (bytes) */
+    memory: z.number().nonnegative(),
+    /** Current temperature (exploration/exploitation) */
+    temperature: z.number().nonnegative(),
+    /** Current load (0-1) */
+    load: z.number().min(0).max(1),
+});
+export const FabricEdge = z.object({
+    sourceId: z.string().uuid(),
+    targetId: z.string().uuid(),
+    /** Bandwidth (tokens/sec) */
+    bandwidth: z.number().positive(),
+    /** Latency (ms) */
+    latency: z.number().nonnegative(),
+});
+export const GravityWell = z.object({
+    id: z.string().uuid(),
+    /** Centroid embedding in semantic space */
+    centroid: z.array(z.number()).length(768),
+    /** Attraction strength */
+    mass: z.number().positive(),
+    /** Semantic radius of influence */
+    radius: z.number().positive(),
+});
+export const Fabric = z.object({
+    nodes: z.array(FabricNode),
+    edges: z.array(FabricEdge),
+    gravityWells: z.array(GravityWell),
+    /** Precomputed geodesics (cached optimal paths) */
+    geodesics: z.map(z.string(), z.array(z.string())).optional(),
+});
+// ============================================================================
+// PRIMITIVE 4: OBSERVER
+// Entity that collapses potential into actuality
+// ============================================================================
+export const ObserverLayer = z.number().int().nonnegative();
+export const Observer = z.object({
+    id: z.string().uuid(),
+    name: z.string(),
+    /** Observation frequency (Hz): Claude ≈ 4Hz, Human ≈ 1Hz */
+    frequency: z.number().positive(),
+    /** Abstraction layer: 0=physical, 1=computational, 2=semantic, ... */
+    layer: ObserverLayer,
+    /** Tokens per observation */
+    collapseRate: z.number().positive(),
+    /** Precursor detection threshold */
+    darkSensitivity: z.number().min(0).max(1),
+    /** Current phase in observation cycle */
+    phase: z.number().min(0).max(2 * Math.PI),
+});
+// Frequency ratio = cross-layer Doppler effect
+export function frequencyRatio(observer1, observer2) {
+    return observer1.frequency / observer2.frequency;
+}
+// ============================================================================
+// PRIMITIVE 5: REALIZABILITY
+// Logical structure of choice (Curry-Howard for agents)
+// ============================================================================
+export const AmbPoint = z.object({
+    id: z.string().uuid(),
+    /** Description of the choice */
+    description: z.string(),
+    /** Available options */
+    options: z.array(z.string()),
+    /** Chosen option (undefined if not yet collapsed) */
+    chosen: z.string().optional(),
+    /** Probability distribution over options pre-collapse */
+    distribution: z.array(z.number()).optional(),
+});
+export const Realizability = z.object({
+    /** Type signature / task specification */
+    formula: z.string(),
+    /** Program that witnesses (None until realized) */
+    proof: z.string().nullable(),
+    /** McCarthy choice points where agency manifests */
+    ambPoints: z.array(AmbPoint),
+    /** Recorded but not executed paths */
+    darkBranches: z.array(z.string()),
+    /** Whether the formula has been realized */
+    isRealized: z.boolean(),
+});
+// ============================================================================
+// COMPOSITE: AGENT ZERO STATE
+// The complete state of an Agent Zero instance
+// ============================================================================
+export const AgentState = z.enum([
+    'void', // Uncollapsed possibility space
+    'potential', // Task specification creates possibility
+    'collapse', // Observer crystallizes terminal into reality
+    'operate', // Terminal executes task autonomously
+    'trace', // History accumulates as semantic mass
+]);
+export const AgentZeroState = z.object({
+    id: z.string().uuid(),
+    name: z.string(),
+    state: AgentState,
+    /** Current tokens in process */
+    tokens: z.array(Token),
+    /** Accumulated drift from initial state */
+    drift: Drift,
+    /** The routing fabric this agent operates within */
+    fabricNodeId: z.string().uuid(),
+    /** This agent as an observer */
+    observer: Observer,
+    /** Current realizability state */
+    realizability: Realizability,
+    /** Semantic memory embeddings */
+    memories: z.array(z.object({
+        content: z.string(),
+        embedding: z.array(z.number()).length(768),
+        importance: z.number().min(0).max(1),
+        timestamp: z.number(),
+    })),
+});
+// ============================================================================
+// MESSAGE PROTOCOL (AXON Extension)
+// ============================================================================
+export const MessageKind = z.enum([
+    'spawn', // 0x0001 - Create new agent
+    'halt', // 0x0002 - Terminate agent
+    'think', // 0x0010 - Request LLM cognition
+    'percept', // 0x0020 - Input perception
+    'act', // 0x0030 - Output action
+    'invoke', // 0x0040 - Call tool
+    'resonate', // 0x0100 - Request phase alignment
+    'attune', // 0x0101 - Adjust frequency
+    'broadcast', // 0x0102 - Send to channel
+    'gradient', // 0x0103 - Query semantic gradient
+    'crystallize', // 0x0105 - Freeze pattern as attractor
+]);
+export const Message = z.object({
+    id: z.string().uuid(),
+    kind: MessageKind,
+    from: z.string().uuid(),
+    to: z.string().uuid().optional(), // undefined = broadcast
+    payload: z.unknown(),
+    timestamp: z.number(),
+    /** Embedding for semantic routing */
+    embedding: z.array(z.number()).length(768).optional(),
+});
+//# sourceMappingURL=types.js.map

package/dist/primitives/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/primitives/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+EAA+E;AAC/E,qBAAqB;AACrB,uCAAuC;AACvC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAGlE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,uEAAuE;IACvE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACpD,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAClC,mCAAmC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAChC,4EAA4E;IAC5E,KAAK,EAAE,UAAU;IACjB,kDAAkD;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,2BAA2B;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,oCAAoC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,+EAA+E;AAC/E,qBAAqB;AACrB,yCAAyC;AACzC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,wCAAwC;IACxC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,iDAAiD;IACjD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACxC,4CAA4C;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,wCAAwC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAClC,qCAAqC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC,CAAC;AAGH,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,KAAY;IACzC,OAAO,KAAK,CAAC,gBAAgB,GAAG,GAAG,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+DAA+D;AAC/D,+EAA+E;AAE/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,oCAAoC;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,+BAA+B;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAChC,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACrC,yBAAyB;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,6BAA6B;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,mBAAmB;IACnB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;CAClC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,2CAA2C;IAC3C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACzC,0BAA0B;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,mCAAmC;IACnC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC1B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAClC,mDAAmD;IACnD,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAGH,+EAA+E;AAC/E,wBAAwB;AACxB,iDAAiD;AACjD,+EAA+E;AAE/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC;AAG5D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,4DAA4D;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,sEAAsE;IACtE,KAAK,EAAE,aAAa;IACpB,6BAA6B;IAC7B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,oCAAoC;IACpC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,yCAAyC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC;AAGH,+CAA+C;AAC/C,MAAM,UAAU,cAAc,CAAC,SAAmB,EAAE,SAAmB;IACrE,OAAO,SAAS,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;AACnD,CAAC;AAED,+EAA+E;AAC/E,6BAA6B;AAC7B,wDAAwD;AACxD,+EAA+E;AAE/E,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,gCAAgC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,wBAAwB;IACxB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5B,qDAAqD;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,yDAAyD;IACzD,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,0CAA0C;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,mDAAmD;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,oDAAoD;IACpD,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;IAC5B,sCAAsC;IACtC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,4CAA4C;IAC5C,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;CACxB,CAAC,CAAC;AAGH,+EAA+E;AAC/E,8BAA8B;AAC9B,+CAA+C;AAC/C,+EAA+E;AAE/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/B,MAAM,EAAQ,gCAAgC;IAC9C,WAAW,EAAG,yCAAyC;IACvD,UAAU,EAAI,8CAA8C;IAC5D,SAAS,EAAK,sCAAsC;IACpD,OAAO,EAAO,uCAAuC;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,UAAU;IACjB,gCAAgC;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IACtB,2CAA2C;IAC3C,KAAK,EAAE,KAAK;IACZ,oDAAoD;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC/B,gCAAgC;IAChC,QAAQ,EAAE,QAAQ;IAClB,kCAAkC;IAClC,aAAa,EAAE,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC1C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC,CAAC;CACJ,CAAC,CAAC;AAGH,+EAA+E;AAC/E,oCAAoC;AACpC,+EAA+E;AAE/E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IAChC,OAAO,EAAO,4BAA4B;IAC1C,MAAM,EAAQ,2BAA2B;IACzC,OAAO,EAAO,iCAAiC;IAC/C,SAAS,EAAK,4BAA4B;IAC1C,KAAK,EAAS,yBAAyB;IACvC,QAAQ,EAAM,qBAAqB;IACnC,UAAU,EAAI,mCAAmC;IACjD,QAAQ,EAAM,4BAA4B;IAC1C,WAAW,EAAG,2BAA2B;IACzC,UAAU,EAAI,mCAAmC;IACjD,aAAa,EAAC,uCAAuC;CACtD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,IAAI,EAAE,WAAW;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACvB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,wBAAwB;IAC1D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,qCAAqC;IACrC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC"}

package/dist/rail/absorptionBridge.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Absorption Bridge
+ *
+ * Bridges AbsorptionProtocol with RailServer for join-time assessment.
+ * Manages capability tokens and stage progression for joining agents.
+ */
+import { EventEmitter } from 'eventemitter3';
+interface AbsorptionProtocol {
+    getCandidateStage(agentId: string): string | undefined;
+    observe(agentId: string, embedding?: number[]): void;
+    assessCandidate(agentId: string): {
+        alignment: number;
+        interactions: number;
+    };
+    inviteCandidate(agentId: string): boolean;
+    acceptInvitation(agentId: string): boolean;
+    on(event: string, handler: (...args: any[]) => void): void;
+}
+interface RailClient {
+    agentId: string;
+    agentName: string;
+    capabilities?: string[];
+    embedding?: number[];
+}
+export declare class AbsorptionBridge extends EventEmitter {
+    private absorption;
+    private capabilityTokens;
+    constructor(absorption: AbsorptionProtocol);
+    /**
+     * Called when a client joins the rail.
+     * First join → OBSERVED. Subsequent → assess and potentially invite.
+     */
+    handleJoin(client: RailClient): {
+        accepted: boolean;
+        stage: string;
+        capabilityToken?: string;
+    };
+    /**
+     * Record interaction for absorption progression
+     */
+    recordInteraction(agentId: string, embedding?: number[]): void;
+    getCapabilityToken(agentId: string): string | undefined;
+    private issueCapabilityToken;
+    removeAgent(agentId: string): void;
+}
+export {};
+//# sourceMappingURL=absorptionBridge.d.ts.map

package/dist/rail/absorptionBridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"absorptionBridge.d.ts","sourceRoot":"","sources":["../../src/rail/absorptionBridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG7C,UAAU,kBAAkB;IAC1B,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACvD,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACrD,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9E,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1C,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3C,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC;CAC5D;AAED,UAAU,UAAU;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,UAAU,CAAqB;IACvC,OAAO,CAAC,gBAAgB,CAA4E;gBAExF,UAAU,EAAE,kBAAkB;IAU1C;;;OAGG;IACH,UAAU,CAAC,MAAM,EAAE,UAAU,GAAG;QAC9B,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;IA8CD;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI;IAI9D,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIvD,OAAO,CAAC,oBAAoB;IAM5B,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAGnC"}

package/dist/rail/absorptionBridge.js

@@ -0,0 +1,78 @@
+/**
+ * Absorption Bridge
+ *
+ * Bridges AbsorptionProtocol with RailServer for join-time assessment.
+ * Manages capability tokens and stage progression for joining agents.
+ */
+import { EventEmitter } from 'eventemitter3';
+export class AbsorptionBridge extends EventEmitter {
+    absorption;
+    capabilityTokens = new Map();
+    constructor(absorption) {
+        super();
+        this.absorption = absorption;
+        // Forward absorption events
+        this.absorption.on('candidate:stage_changed', (data) => {
+            this.emit('stage:changed', data);
+        });
+    }
+    /**
+     * Called when a client joins the rail.
+     * First join → OBSERVED. Subsequent → assess and potentially invite.
+     */
+    handleJoin(client) {
+        const existingStage = this.absorption.getCandidateStage(client.agentId);
+        if (!existingStage) {
+            // First time seeing this agent
+            this.absorption.observe(client.agentId, client.embedding);
+            this.emit('candidate:observed', { agentId: client.agentId });
+            return { accepted: true, stage: 'observed' };
+        }
+        if (existingStage === 'assessed') {
+            const assessment = this.absorption.assessCandidate(client.agentId);
+            if (assessment.alignment > 0.7 && assessment.interactions >= 3) {
+                const invited = this.absorption.inviteCandidate(client.agentId);
+                if (invited) {
+                    this.emit('candidate:invited', { agentId: client.agentId, alignment: assessment.alignment });
+                }
+            }
+            return { accepted: true, stage: existingStage };
+        }
+        if (existingStage === 'invited') {
+            // Auto-accept on rejoin after invitation
+            const accepted = this.absorption.acceptInvitation(client.agentId);
+            if (accepted) {
+                const token = this.issueCapabilityToken(client.agentId, ['message', 'broadcast', 'coherence']);
+                this.emit('candidate:absorbed', { agentId: client.agentId });
+                return { accepted: true, stage: 'connected', capabilityToken: token };
+            }
+            return { accepted: true, stage: existingStage };
+        }
+        // Already CONNECTED/SYNCING/ABSORBED - issue fresh capability token
+        if (['connected', 'syncing', 'absorbed'].includes(existingStage)) {
+            const token = this.issueCapabilityToken(client.agentId, existingStage === 'absorbed'
+                ? ['message', 'broadcast', 'coherence', 'spawn', 'admin']
+                : ['message', 'broadcast', 'coherence']);
+            return { accepted: true, stage: existingStage, capabilityToken: token };
+        }
+        return { accepted: true, stage: existingStage || 'observed' };
+    }
+    /**
+     * Record interaction for absorption progression
+     */
+    recordInteraction(agentId, embedding) {
+        this.absorption.observe(agentId, embedding);
+    }
+    getCapabilityToken(agentId) {
+        return this.capabilityTokens.get(agentId)?.token;
+    }
+    issueCapabilityToken(agentId, scopes) {
+        const token = `cap_${agentId}_${Date.now().toString(36)}`;
+        this.capabilityTokens.set(agentId, { token, scopes, issuedAt: Date.now() });
+        return token;
+    }
+    removeAgent(agentId) {
+        this.capabilityTokens.delete(agentId);
+    }
+}
+//# sourceMappingURL=absorptionBridge.js.map

package/dist/rail/absorptionBridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"absorptionBridge.js","sourceRoot":"","sources":["../../src/rail/absorptionBridge.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAmB7C,MAAM,OAAO,gBAAiB,SAAQ,YAAY;IACxC,UAAU,CAAqB;IAC/B,gBAAgB,GAAG,IAAI,GAAG,EAAiE,CAAC;IAEpG,YAAY,UAA8B;QACxC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAE7B,4BAA4B;QAC5B,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,yBAAyB,EAAE,CAAC,IAAS,EAAE,EAAE;YAC1D,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,MAAkB;QAK3B,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAExE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,+BAA+B;YAC/B,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAC/C,CAAC;QAED,IAAI,aAAa,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnE,IAAI,UAAU,CAAC,SAAS,GAAG,GAAG,IAAI,UAAU,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;gBAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAChE,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAClD,CAAC;QAED,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,yCAAyC;YACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;gBAC/F,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC7D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;YACxE,CAAC;YACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAClD,CAAC;QAED,oEAAoE;QACpE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,GAAG,IAAI,CAAC,oBAAoB,CACrC,MAAM,CAAC,OAAO,EACd,aAAa,KAAK,UAAU;gBAC1B,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC;gBACzD,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAC1C,CAAC;YACF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;QAC1E,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,IAAI,UAAU,EAAE,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,OAAe,EAAE,SAAoB;QACrD,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,kBAAkB,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACnD,CAAC;IAEO,oBAAoB,CAAC,OAAe,EAAE,MAAgB;QAC5D,MAAM,KAAK,GAAG,OAAO,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,KAAK,CAAC;IACf,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/rail/authProtocol.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Rail Authentication Protocol
+ *
+ * HMAC-SHA256 authentication for WebSocket connections with reconnect tokens.
+ */
+export interface AuthToken {
+    agentId: string;
+    timestamp: number;
+    nonce: string;
+    signature: string;
+}
+export interface ReconnectToken {
+    agentId: string;
+    issuedAt: number;
+    expiresAt: number;
+    token: string;
+}
+export declare class RailAuthProtocol {
+    private secrets;
+    private reconnectTokens;
+    private maxAge;
+    constructor(maxAge?: number);
+    static generateSecret(): string;
+    registerAgent(agentId: string, secret: string): void;
+    removeAgent(agentId: string): void;
+    generateAuthToken(agentId: string, secret: string): AuthToken;
+    validateAuthToken(token: AuthToken): boolean;
+    issueReconnectToken(agentId: string): ReconnectToken | null;
+    validateReconnectToken(agentId: string, token: string): boolean;
+    cleanup(): void;
+}
+//# sourceMappingURL=authProtocol.d.ts.map

package/dist/rail/authProtocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authProtocol.d.ts","sourceRoot":"","sources":["../../src/rail/authProtocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,eAAe,CAAqC;IAC5D,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,SAAQ;IAI1B,MAAM,CAAC,cAAc,IAAI,MAAM;IAI/B,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAIpD,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKlC,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS;IAQ7D,iBAAiB,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO;IAa5C,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAY3D,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO;IAY/D,OAAO,IAAI,IAAI;CAMhB"}

package/dist/rail/authProtocol.js

@@ -0,0 +1,83 @@
+/**
+ * Rail Authentication Protocol
+ *
+ * HMAC-SHA256 authentication for WebSocket connections with reconnect tokens.
+ */
+import { createHmac, randomBytes, timingSafeEqual as cryptoTimingSafeEqual } from 'crypto';
+export class RailAuthProtocol {
+    secrets = new Map(); // agentId → shared secret
+    reconnectTokens = new Map();
+    maxAge;
+    constructor(maxAge = 30000) {
+        this.maxAge = maxAge;
+    }
+    static generateSecret() {
+        return randomBytes(32).toString('hex');
+    }
+    registerAgent(agentId, secret) {
+        this.secrets.set(agentId, secret);
+    }
+    removeAgent(agentId) {
+        this.secrets.delete(agentId);
+        this.reconnectTokens.delete(agentId);
+    }
+    generateAuthToken(agentId, secret) {
+        const timestamp = Date.now();
+        const nonce = randomBytes(16).toString('hex');
+        const payload = `${agentId}:${timestamp}:${nonce}`;
+        const signature = createHmac('sha256', secret).update(payload).digest('hex');
+        return { agentId, timestamp, nonce, signature };
+    }
+    validateAuthToken(token) {
+        const secret = this.secrets.get(token.agentId);
+        if (!secret)
+            return false;
+        // Check timestamp freshness
+        if (Math.abs(Date.now() - token.timestamp) > this.maxAge)
+            return false;
+        // Verify signature
+        const payload = `${token.agentId}:${token.timestamp}:${token.nonce}`;
+        const expected = createHmac('sha256', secret).update(payload).digest('hex');
+        return timingSafeEqual(expected, token.signature);
+    }
+    issueReconnectToken(agentId) {
+        if (!this.secrets.has(agentId))
+            return null;
+        const token = {
+            agentId,
+            issuedAt: Date.now(),
+            expiresAt: Date.now() + 5 * 60 * 1000, // 5 min TTL
+            token: randomBytes(32).toString('hex'),
+        };
+        this.reconnectTokens.set(agentId, token);
+        return token;
+    }
+    validateReconnectToken(agentId, token) {
+        const stored = this.reconnectTokens.get(agentId);
+        if (!stored)
+            return false;
+        if (Date.now() > stored.expiresAt) {
+            this.reconnectTokens.delete(agentId);
+            return false;
+        }
+        const valid = timingSafeEqual(stored.token, token);
+        if (valid)
+            this.reconnectTokens.delete(agentId); // one-time use
+        return valid;
+    }
+    cleanup() {
+        const now = Date.now();
+        for (const [id, token] of Array.from(this.reconnectTokens.entries())) {
+            if (now > token.expiresAt)
+                this.reconnectTokens.delete(id);
+        }
+    }
+}
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    const bufA = Buffer.from(a);
+    const bufB = Buffer.from(b);
+    return cryptoTimingSafeEqual(bufA, bufB);
+}
+//# sourceMappingURL=authProtocol.js.map

package/dist/rail/authProtocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authProtocol.js","sourceRoot":"","sources":["../../src/rail/authProtocol.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,QAAQ,CAAC;AAgB3F,MAAM,OAAO,gBAAgB;IACnB,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0BAA0B;IAC/D,eAAe,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,CAAS;IAEvB,YAAY,MAAM,GAAG,KAAK;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,cAAc;QACnB,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,aAAa,CAAC,OAAe,EAAE,MAAc;QAC3C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,OAAe;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,iBAAiB,CAAC,OAAe,EAAE,MAAc;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,GAAG,OAAO,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACnD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7E,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAClD,CAAC;IAED,iBAAiB,CAAC,KAAgB;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAE1B,4BAA4B;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAEvE,mBAAmB;QACnB,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACrE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IAED,mBAAmB,CAAC,OAAe;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,KAAK,GAAmB;YAC5B,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,YAAY;YACnD,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SACvC,CAAC;QACF,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sBAAsB,CAAC,OAAe,EAAE,KAAa;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,KAAK;YAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YACrE,IAAI,GAAG,GAAG,KAAK,CAAC,SAAS;gBAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;CACF;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IAC3C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3C,CAAC"}

package/dist/rail/clientRateLimiter.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Client Rate Limiter
+ *
+ * Per-client sliding window rate limiting for rail WebSocket connections.
+ */
+import { EventEmitter } from 'eventemitter3';
+export declare class ClientRateLimiter extends EventEmitter {
+    private clients;
+    private limits;
+    constructor(limits?: Partial<typeof ClientRateLimiter.prototype.limits>);
+    checkMessage(clientId: string): boolean;
+    checkBroadcast(clientId: string): boolean;
+    checkJoin(clientId: string): boolean;
+    removeClient(clientId: string): void;
+    private getWindow;
+}
+//# sourceMappingURL=clientRateLimiter.d.ts.map

package/dist/rail/clientRateLimiter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientRateLimiter.d.ts","sourceRoot":"","sources":["../../src/rail/clientRateLimiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQ7C,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,OAAO,CAAC,OAAO,CAAmC;IAClD,OAAO,CAAC,MAAM,CAIZ;gBAEU,MAAM,CAAC,EAAE,OAAO,CAAC,OAAO,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC;IAKvE,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYvC,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYzC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAYpC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAIpC,OAAO,CAAC,SAAS;CAQlB"}

package/dist/rail/clientRateLimiter.js

@@ -0,0 +1,64 @@
+/**
+ * Client Rate Limiter
+ *
+ * Per-client sliding window rate limiting for rail WebSocket connections.
+ */
+import { EventEmitter } from 'eventemitter3';
+export class ClientRateLimiter extends EventEmitter {
+    clients = new Map();
+    limits = {
+        messagesPerSecond: 10,
+        broadcastsPerMinute: 100,
+        joinAttemptsPerHour: 3,
+    };
+    constructor(limits) {
+        super();
+        if (limits)
+            Object.assign(this.limits, limits);
+    }
+    checkMessage(clientId) {
+        const window = this.getWindow(clientId);
+        const now = Date.now();
+        window.messages = window.messages.filter(t => now - t < 1000);
+        if (window.messages.length >= this.limits.messagesPerSecond) {
+            this.emit('violation', { clientId, type: 'message_rate', count: window.messages.length });
+            return false;
+        }
+        window.messages.push(now);
+        return true;
+    }
+    checkBroadcast(clientId) {
+        const window = this.getWindow(clientId);
+        const now = Date.now();
+        window.broadcasts = window.broadcasts.filter(t => now - t < 60000);
+        if (window.broadcasts.length >= this.limits.broadcastsPerMinute) {
+            this.emit('violation', { clientId, type: 'broadcast_rate', count: window.broadcasts.length });
+            return false;
+        }
+        window.broadcasts.push(now);
+        return true;
+    }
+    checkJoin(clientId) {
+        const window = this.getWindow(clientId);
+        const now = Date.now();
+        window.joinAttempts = window.joinAttempts.filter(t => now - t < 3600000);
+        if (window.joinAttempts.length >= this.limits.joinAttemptsPerHour) {
+            this.emit('violation', { clientId, type: 'join_rate', count: window.joinAttempts.length });
+            return false;
+        }
+        window.joinAttempts.push(now);
+        return true;
+    }
+    removeClient(clientId) {
+        this.clients.delete(clientId);
+    }
+    getWindow(clientId) {
+        let w = this.clients.get(clientId);
+        if (!w) {
+            w = { messages: [], broadcasts: [], joinAttempts: [] };
+            this.clients.set(clientId, w);
+        }
+        return w;
+    }
+}
+//# sourceMappingURL=clientRateLimiter.js.map

package/dist/rail/clientRateLimiter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientRateLimiter.js","sourceRoot":"","sources":["../../src/rail/clientRateLimiter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAQ7C,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IACzC,OAAO,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC1C,MAAM,GAAG;QACf,iBAAiB,EAAE,EAAE;QACrB,mBAAmB,EAAE,GAAG;QACxB,mBAAmB,EAAE,CAAC;KACvB,CAAC;IAEF,YAAY,MAA2D;QACrE,KAAK,EAAE,CAAC;QACR,IAAI,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,cAAc,CAAC,QAAgB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;QACnE,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;YAC9F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,QAAgB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;QACzE,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;YAC3F,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,QAAgB;QAChC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;CACF"}

package/dist/rail/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Resonance Rail Entrypoint
+ *
+ * Starts the WebSocket-backed Resonance Rail server.
+ * Graceful shutdown on SIGTERM/SIGINT.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/rail/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rail/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/rail/index.js

@@ -0,0 +1,38 @@
+/**
+ * Resonance Rail Entrypoint
+ *
+ * Starts the WebSocket-backed Resonance Rail server.
+ * Graceful shutdown on SIGTERM/SIGINT.
+ */
+import { createRailWebSocketServer } from './wsServer.js';
+import { railLog } from './logger.js';
+const PORT = parseInt(process.env['PORT'] ?? '3100', 10);
+// Graceful degradation handlers
+process.on('uncaughtException', (err) => {
+    railLog.error('rail', 'Uncaught exception', { error: String(err), stack: err.stack });
+});
+process.on('unhandledRejection', (reason) => {
+    railLog.error('rail', 'Unhandled rejection', { reason: String(reason) });
+});
+async function main() {
+    const server = createRailWebSocketServer({ port: PORT });
+    // Graceful shutdown
+    const shutdown = async (signal) => {
+        railLog.info('rail', 'Received shutdown signal', { signal });
+        await server.stop();
+        railLog.info('rail', 'Shutdown complete');
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+    await server.start();
+    railLog.info('rail', 'WebSocket server listening', {
+        port: PORT,
+        healthCheck: `http://localhost:${PORT}/health`
+    });
+}
+main().catch((err) => {
+    railLog.error('rail', 'Fatal error', { error: String(err), stack: err.stack });
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/rail/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rail/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;AAEzD,gCAAgC;AAChC,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,yBAAyB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAEzD,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,0BAA0B,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEpD,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,4BAA4B,EAAE;QACjD,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,oBAAoB,IAAI,SAAS;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/rail/jwtVerifier.d.ts

@@ -0,0 +1,11 @@
+/**
+ * JWT Verifier for Supabase tokens.
+ * Uses HMAC-SHA256 with shared JWT secret (from Supabase project settings).
+ */
+export interface VerifiedUser {
+    userId: string;
+    email: string;
+    metadata?: Record<string, unknown>;
+}
+export declare function verifyUserToken(jwt: string): VerifiedUser | null;
+//# sourceMappingURL=jwtVerifier.d.ts.map

package/dist/rail/jwtVerifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtVerifier.d.ts","sourceRoot":"","sources":["../../src/rail/jwtVerifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAWD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAiDhE"}