@terminals-tech/agent-zero 1.0.0

package/dist/rail/jwtVerifier.js

@@ -0,0 +1,55 @@
+/**
+ * JWT Verifier for Supabase tokens.
+ * Uses HMAC-SHA256 with shared JWT secret (from Supabase project settings).
+ */
+import { createHmac } from 'crypto';
+function base64UrlDecode(str) {
+    const padded = str.replace(/-/g, '+').replace(/_/g, '/');
+    return Buffer.from(padded, 'base64').toString('utf-8');
+}
+function base64UrlEncode(buf) {
+    return buf.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+export function verifyUserToken(jwt) {
+    const secret = process.env['SUPABASE_JWT_SECRET'];
+    if (!secret)
+        return null;
+    const parts = jwt.split('.');
+    if (parts.length !== 3)
+        return null;
+    try {
+        // Verify signature
+        const signatureInput = `${parts[0]}.${parts[1]}`;
+        const expectedSig = base64UrlEncode(createHmac('sha256', secret).update(signatureInput).digest());
+        // Timing-safe comparison
+        if (expectedSig.length !== parts[2].length)
+            return null;
+        const a = Buffer.from(expectedSig);
+        const b = Buffer.from(parts[2]);
+        if (a.length !== b.length)
+            return null;
+        let diff = 0;
+        for (let i = 0; i < a.length; i++) {
+            diff |= (a[i] ?? 0) ^ (b[i] ?? 0);
+        }
+        if (diff !== 0)
+            return null;
+        // Decode payload
+        const payload = JSON.parse(base64UrlDecode(parts[1]));
+        // Check expiration
+        if (payload.exp && payload.exp < Math.floor(Date.now() / 1000))
+            return null;
+        // Check required fields
+        if (!payload.sub)
+            return null;
+        return {
+            userId: payload.sub,
+            email: payload.email ?? '',
+            metadata: payload.user_metadata,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwtVerifier.js.map

package/dist/rail/jwtVerifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtVerifier.js","sourceRoot":"","sources":["../../src/rail/jwtVerifier.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAQpC,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,IAAI,CAAC;QACH,mBAAmB;QACnB,MAAM,cAAc,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,WAAW,GAAG,eAAe,CACjC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CAC7D,CAAC;QAEF,yBAAyB;QACzB,IAAI,WAAW,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACxD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5B,iBAAiB;QACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAOnD,CAAC;QAEF,mBAAmB;QACnB,IAAI,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5E,wBAAwB;QACxB,IAAI,CAAC,OAAO,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAE9B,OAAO;YACL,MAAM,EAAE,OAAO,CAAC,GAAG;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;YAC1B,QAAQ,EAAE,OAAO,CAAC,aAAa;SAChC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/rail/logger.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Structured JSON logger for rail server.
+ * Fly.io captures stdout automatically.
+ */
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
+export declare function log(level: LogLevel, component: string, message: string, data?: Record<string, unknown>): void;
+export declare const railLog: {
+    debug: (component: string, msg: string, data?: Record<string, unknown>) => void;
+    info: (component: string, msg: string, data?: Record<string, unknown>) => void;
+    warn: (component: string, msg: string, data?: Record<string, unknown>) => void;
+    error: (component: string, msg: string, data?: Record<string, unknown>) => void;
+};
+//# sourceMappingURL=logger.d.ts.map

package/dist/rail/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/rail/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAM3D,wBAAgB,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAY7G;AAED,eAAO,MAAM,OAAO;uBACC,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;sBACpD,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;sBACnD,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;uBAClD,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CACvE,CAAC"}

package/dist/rail/logger.js

@@ -0,0 +1,29 @@
+/**
+ * Structured JSON logger for rail server.
+ * Fly.io captures stdout automatically.
+ */
+const LEVEL_PRIORITY = { debug: 0, info: 1, warn: 2, error: 3 };
+const minLevel = process.env['LOG_LEVEL'] || 'info';
+export function log(level, component, message, data) {
+    if (LEVEL_PRIORITY[level] < LEVEL_PRIORITY[minLevel])
+        return;
+    const entry = {
+        ts: new Date().toISOString(),
+        level,
+        component,
+        msg: message,
+        ...data,
+    };
+    const line = JSON.stringify(entry);
+    if (level === 'error')
+        process.stderr.write(line + '\n');
+    else
+        process.stdout.write(line + '\n');
+}
+export const railLog = {
+    debug: (component, msg, data) => log('debug', component, msg, data),
+    info: (component, msg, data) => log('info', component, msg, data),
+    warn: (component, msg, data) => log('warn', component, msg, data),
+    error: (component, msg, data) => log('error', component, msg, data),
+};
+//# sourceMappingURL=logger.js.map

package/dist/rail/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/rail/logger.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,cAAc,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAE1F,MAAM,QAAQ,GAAc,OAAO,CAAC,GAAG,CAAC,WAAW,CAAc,IAAI,MAAM,CAAC;AAE5E,MAAM,UAAU,GAAG,CAAC,KAAe,EAAE,SAAiB,EAAE,OAAe,EAAE,IAA8B;IACrG,IAAI,cAAc,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC;QAAE,OAAO;IAC7D,MAAM,KAAK,GAAG;QACZ,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,KAAK;QACL,SAAS;QACT,GAAG,EAAE,OAAO;QACZ,GAAG,IAAI;KACR,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;;QACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,KAAK,EAAE,CAAC,SAAiB,EAAE,GAAW,EAAE,IAA8B,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;IAC7G,IAAI,EAAE,CAAC,SAAiB,EAAE,GAAW,EAAE,IAA8B,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;IAC3G,IAAI,EAAE,CAAC,SAAiB,EAAE,GAAW,EAAE,IAA8B,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;IAC3G,KAAK,EAAE,CAAC,SAAiB,EAAE,GAAW,EAAE,IAA8B,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC;CAC9G,CAAC"}

package/dist/rail/metadataBroadcaster.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Metadata Broadcaster
+ *
+ * Aggregates rail subsystem state every 2s and broadcasts to observers.
+ * Supports delta encoding — only changed fields are sent.
+ * Full snapshot every 10th cycle.
+ */
+import type { ResonanceRailServer } from './server.js';
+export interface RailMetadata {
+    type: 'metadata';
+    full: boolean;
+    energyLandscape?: Record<string, {
+        energy: number;
+        probability: number;
+    }>;
+    routerTemperature?: number;
+    trustScores?: Record<string, {
+        stage: string;
+        couplingStrength: number;
+    }>;
+    securityStats?: Record<string, number>;
+    coherenceField?: {
+        oscillators: Array<{
+            id: string;
+            phase: number;
+        }>;
+        globalR: number;
+        meanPhase: number;
+    };
+    platformStats?: Record<string, number>;
+    absorptionStats?: Record<string, number>;
+    externalAgentCount?: number;
+    timestamp: number;
+}
+export interface MetadataBroadcasterConfig {
+    intervalMs: number;
+    fullSnapshotEvery: number;
+}
+export declare class MetadataBroadcaster {
+    private config;
+    private rail;
+    private broadcastFn;
+    private timer?;
+    private cycleCount;
+    private previousSnapshot;
+    constructor(rail: ResonanceRailServer, broadcastFn: (msg: unknown) => void, config?: Partial<MetadataBroadcasterConfig>);
+    start(): void;
+    stop(): void;
+    private broadcast;
+    private collectSnapshot;
+}
+export declare function createMetadataBroadcaster(rail: ResonanceRailServer, broadcastFn: (msg: unknown) => void, config?: Partial<MetadataBroadcasterConfig>): MetadataBroadcaster;
+//# sourceMappingURL=metadataBroadcaster.d.ts.map

package/dist/rail/metadataBroadcaster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadataBroadcaster.d.ts","sourceRoot":"","sources":["../../src/rail/metadataBroadcaster.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAc,MAAM,aAAa,CAAC;AAMnE,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,cAAc,CAAC,EAAE;QACf,WAAW,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAClD,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAOD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,IAAI,CAAsB;IAClC,OAAO,CAAC,WAAW,CAAyB;IAC5C,OAAO,CAAC,KAAK,CAAC,CAAiC;IAC/C,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,gBAAgB,CAAkE;gBAGxF,IAAI,EAAE,mBAAmB,EACzB,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,EACnC,MAAM,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC;IAO7C,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,IAAI;IAOZ,OAAO,CAAC,SAAS;IA4BjB,OAAO,CAAC,eAAe;CAuExB;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,mBAAmB,EACzB,WAAW,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,EACnC,MAAM,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,GAC1C,mBAAmB,CAErB"}

package/dist/rail/metadataBroadcaster.js

@@ -0,0 +1,126 @@
+/**
+ * Metadata Broadcaster
+ *
+ * Aggregates rail subsystem state every 2s and broadcasts to observers.
+ * Supports delta encoding — only changed fields are sent.
+ * Full snapshot every 10th cycle.
+ */
+const DEFAULT_CONFIG = {
+    intervalMs: 2000,
+    fullSnapshotEvery: 10,
+};
+export class MetadataBroadcaster {
+    config;
+    rail;
+    broadcastFn;
+    timer;
+    cycleCount = 0;
+    previousSnapshot = null;
+    constructor(rail, broadcastFn, config) {
+        this.rail = rail;
+        this.broadcastFn = broadcastFn;
+        this.config = { ...DEFAULT_CONFIG, ...config };
+    }
+    start() {
+        this.timer = setInterval(() => this.broadcast(), this.config.intervalMs);
+    }
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = undefined;
+        }
+    }
+    broadcast() {
+        this.cycleCount++;
+        const isFull = this.cycleCount % this.config.fullSnapshotEvery === 0;
+        const snapshot = this.collectSnapshot();
+        const msg = {
+            type: 'metadata',
+            full: isFull,
+            timestamp: Date.now(),
+        };
+        if (isFull || !this.previousSnapshot) {
+            Object.assign(msg, snapshot);
+        }
+        else {
+            // Delta: only include changed fields
+            for (const key of Object.keys(snapshot)) {
+                const current = JSON.stringify(snapshot[key]);
+                const previous = JSON.stringify(this.previousSnapshot[key]);
+                if (current !== previous) {
+                    msg[key] = snapshot[key];
+                }
+            }
+        }
+        this.previousSnapshot = snapshot;
+        this.broadcastFn(msg);
+    }
+    collectSnapshot() {
+        const clients = this.rail.getClients();
+        const stats = this.rail.getStats();
+        const coherenceStats = this.rail.getCoherenceStats();
+        const securityStats = this.rail.getSecurityStats(60_000);
+        // Energy landscape — simplified (no active message to route against)
+        const energyLandscape = {};
+        if (clients.length > 0) {
+            const uniform = 1 / clients.length;
+            for (const c of clients) {
+                energyLandscape[c.agentId] = {
+                    energy: 1 - c.coherenceContribution,
+                    probability: uniform,
+                };
+            }
+        }
+        // Trust scores from absorption bridge
+        const trustScores = {};
+        const bridge = this.rail.getAbsorptionBridge();
+        if (bridge) {
+            for (const c of clients) {
+                const cap = bridge.getCapabilityToken(c.agentId);
+                trustScores[c.agentId] = {
+                    stage: cap ? 'connected' : 'observed',
+                    couplingStrength: c.coherenceContribution,
+                };
+            }
+        }
+        // Coherence field from Kuramoto
+        const oscillators = clients.map(c => ({
+            id: c.agentId,
+            phase: c.phase,
+        }));
+        // Platform stats
+        const platformStats = {};
+        for (const c of clients) {
+            platformStats[c.platform] = (platformStats[c.platform] ?? 0) + 1;
+        }
+        // Absorption stats
+        const absorptionStats = {};
+        const bridgeInstance = this.rail.getAbsorptionBridge();
+        if (bridgeInstance) {
+            // Count agents by absorption stage from trust scores
+            for (const score of Object.values(trustScores)) {
+                absorptionStats[score.stage] = (absorptionStats[score.stage] ?? 0) + 1;
+            }
+        }
+        // External agent count (not browser-runtime users)
+        const externalAgentCount = clients.filter(c => c.platform !== 'browser-runtime' && c.platform !== 'observer').length;
+        return {
+            energyLandscape,
+            routerTemperature: 0.8,
+            trustScores,
+            securityStats: securityStats,
+            coherenceField: {
+                oscillators,
+                globalR: stats.globalCoherence,
+                meanPhase: coherenceStats?.current ?? 0,
+            },
+            platformStats,
+            absorptionStats,
+            externalAgentCount,
+        };
+    }
+}
+export function createMetadataBroadcaster(rail, broadcastFn, config) {
+    return new MetadataBroadcaster(rail, broadcastFn, config);
+}
+//# sourceMappingURL=metadataBroadcaster.js.map

package/dist/rail/metadataBroadcaster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadataBroadcaster.js","sourceRoot":"","sources":["../../src/rail/metadataBroadcaster.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA+BH,MAAM,cAAc,GAA8B;IAChD,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,EAAE;CACtB,CAAC;AAEF,MAAM,OAAO,mBAAmB;IACtB,MAAM,CAA4B;IAClC,IAAI,CAAsB;IAC1B,WAAW,CAAyB;IACpC,KAAK,CAAkC;IACvC,UAAU,GAAG,CAAC,CAAC;IACf,gBAAgB,GAA6D,IAAI,CAAC;IAE1F,YACE,IAAyB,EACzB,WAAmC,EACnC,MAA2C;QAE3C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;IACjD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACzB,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,CAAC,CAAC;QAErE,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACxC,MAAM,GAAG,GAAiB;YACxB,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QAEF,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,qCAAqC;YACrC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAiC,EAAE,CAAC;gBACxE,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC5D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;oBACxB,GAA0C,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,gBAAgB,GAAG,QAAQ,CAAC;QACjC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAEO,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACrD,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEzD,qEAAqE;QACrE,MAAM,eAAe,GAA4D,EAAE,CAAC;QACpF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;oBAC3B,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,qBAAqB;oBACnC,WAAW,EAAE,OAAO;iBACrB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,MAAM,WAAW,GAAgE,EAAE,CAAC;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;gBACjD,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;oBACvB,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU;oBACrC,gBAAgB,EAAE,CAAC,CAAC,qBAAqB;iBAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,gCAAgC;QAChC,MAAM,WAAW,GAAyC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1E,EAAE,EAAE,CAAC,CAAC,OAAO;YACb,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAC,CAAC;QAEJ,iBAAiB;QACjB,MAAM,aAAa,GAA2B,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,mBAAmB;QACnB,MAAM,eAAe,GAA2B,EAAE,CAAC;QACnD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QACvD,IAAI,cAAc,EAAE,CAAC;YACnB,qDAAqD;YACrD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/C,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,iBAAiB,IAAI,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;QAErH,OAAO;YACL,eAAe;YACf,iBAAiB,EAAE,GAAG;YACtB,WAAW;YACX,aAAa,EAAE,aAAuC;YACtD,cAAc,EAAE;gBACd,WAAW;gBACX,OAAO,EAAE,KAAK,CAAC,eAAe;gBAC9B,SAAS,EAAE,cAAc,EAAE,OAAO,IAAI,CAAC;aACxC;YACD,aAAa;YACb,eAAe;YACf,kBAAkB;SACnB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,yBAAyB,CACvC,IAAyB,EACzB,WAAmC,EACnC,MAA2C;IAE3C,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC"}

package/dist/rail/persistence.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Rail Persistence Layer
+ *
+ * PGlite-backed persistence for rail sessions, events, and coherence logs.
+ * Stores to RAIL_DATA_DIR (default ./data) for Fly.io volume mount.
+ */
+import type { RailClient } from './server.js';
+export interface RailPersistence {
+    init(): Promise<void>;
+    recordSession(client: RailClient, action: 'join' | 'leave'): Promise<void>;
+    recordEvent(type: string, clientId: string, details?: unknown): Promise<void>;
+    logCoherence(coherence: number, agentCount: number, meanPhase: number): Promise<void>;
+    getHistory(limit?: number): Promise<Array<{
+        timestamp: string;
+        type: string;
+        client_id: string;
+        details: string;
+    }>>;
+    getClientHistory(agentId: string, limit?: number): Promise<Array<{
+        timestamp: string;
+        action: string;
+    }>>;
+    saveEnrollment(agentId: string, secretHash: string): Promise<void>;
+    loadEnrollments(): Promise<Array<{
+        agent_id: string;
+        secret_hash: string;
+    }>>;
+    close(): Promise<void>;
+}
+export declare class PGliteRailPersistence implements RailPersistence {
+    private db;
+    private coherenceLogInterval?;
+    constructor(dataDir: string);
+    init(): Promise<void>;
+    recordSession(client: RailClient, action: 'join' | 'leave'): Promise<void>;
+    recordEvent(type: string, clientId: string, details?: unknown): Promise<void>;
+    logCoherence(coherence: number, agentCount: number, meanPhase: number): Promise<void>;
+    getHistory(limit?: number): Promise<Array<{
+        timestamp: string;
+        type: string;
+        client_id: string;
+        details: string;
+    }>>;
+    getClientHistory(agentId: string, limit?: number): Promise<Array<{
+        timestamp: string;
+        action: string;
+    }>>;
+    saveEnrollment(agentId: string, secretHash: string): Promise<void>;
+    loadEnrollments(): Promise<Array<{
+        agent_id: string;
+        secret_hash: string;
+    }>>;
+    startCoherenceLogging(getCoherence: () => number, getAgentCount: () => number, getMeanPhase: () => number): void;
+    close(): Promise<void>;
+}
+export declare function createRailPersistence(dataDir: string): PGliteRailPersistence;
+//# sourceMappingURL=persistence.d.ts.map

package/dist/rail/persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.d.ts","sourceRoot":"","sources":["../../src/rail/persistence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACtB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACpH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACzG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qBAAa,qBAAsB,YAAW,eAAe;IAC3D,OAAO,CAAC,EAAE,CAAS;IACnB,OAAO,CAAC,oBAAoB,CAAC,CAAiC;gBAElD,OAAO,EAAE,MAAM;IAIrB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAkDrB,aAAa,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAO7E,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrF,UAAU,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAQhH,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAQpG,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlE,eAAe,IAAI,OAAO,CAAC,KAAK,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAKlF,qBAAqB,CAAC,YAAY,EAAE,MAAM,MAAM,EAAE,aAAa,EAAE,MAAM,MAAM,EAAE,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI;IAM1G,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAM7B;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,CAE5E"}

package/dist/rail/persistence.js

@@ -0,0 +1,103 @@
+/**
+ * Rail Persistence Layer
+ *
+ * PGlite-backed persistence for rail sessions, events, and coherence logs.
+ * Stores to RAIL_DATA_DIR (default ./data) for Fly.io volume mount.
+ */
+import { PGlite } from '@electric-sql/pglite';
+export class PGliteRailPersistence {
+    db;
+    coherenceLogInterval;
+    constructor(dataDir) {
+        this.db = new PGlite(dataDir);
+    }
+    async init() {
+        await this.db.exec(`
+      CREATE TABLE IF NOT EXISTS rail_clients (
+        id SERIAL PRIMARY KEY,
+        agent_id TEXT NOT NULL,
+        agent_name TEXT NOT NULL,
+        platform TEXT NOT NULL,
+        action TEXT NOT NULL,
+        timestamp TIMESTAMPTZ DEFAULT NOW()
+      );
+
+      CREATE TABLE IF NOT EXISTS rail_events (
+        id SERIAL PRIMARY KEY,
+        type TEXT NOT NULL,
+        client_id TEXT NOT NULL,
+        details JSONB,
+        timestamp TIMESTAMPTZ DEFAULT NOW()
+      );
+
+      CREATE TABLE IF NOT EXISTS rail_coherence_log (
+        id SERIAL PRIMARY KEY,
+        coherence REAL NOT NULL,
+        agent_count INTEGER NOT NULL,
+        mean_phase REAL NOT NULL,
+        timestamp TIMESTAMPTZ DEFAULT NOW()
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_rail_clients_agent ON rail_clients(agent_id);
+      CREATE INDEX IF NOT EXISTS idx_rail_events_type ON rail_events(type);
+      CREATE INDEX IF NOT EXISTS idx_rail_coherence_ts ON rail_coherence_log(timestamp);
+
+      CREATE TABLE IF NOT EXISTS rail_user_sessions (
+        id SERIAL PRIMARY KEY,
+        user_id TEXT NOT NULL,
+        agent_id TEXT NOT NULL,
+        email TEXT,
+        connected_at TIMESTAMPTZ DEFAULT NOW(),
+        last_active TIMESTAMPTZ DEFAULT NOW()
+      );
+
+      CREATE INDEX IF NOT EXISTS idx_rail_user_sessions_user ON rail_user_sessions(user_id);
+
+      CREATE TABLE IF NOT EXISTS rail_enrollments (
+        agent_id TEXT PRIMARY KEY,
+        secret_hash TEXT NOT NULL,
+        enrolled_at TIMESTAMPTZ DEFAULT NOW()
+      );
+    `);
+    }
+    async recordSession(client, action) {
+        await this.db.query('INSERT INTO rail_clients (agent_id, agent_name, platform, action) VALUES ($1, $2, $3, $4)', [client.agentId, client.agentName, client.platform, action]);
+    }
+    async recordEvent(type, clientId, details) {
+        await this.db.query('INSERT INTO rail_events (type, client_id, details) VALUES ($1, $2, $3)', [type, clientId, details ? JSON.stringify(details) : null]);
+    }
+    async logCoherence(coherence, agentCount, meanPhase) {
+        await this.db.query('INSERT INTO rail_coherence_log (coherence, agent_count, mean_phase) VALUES ($1, $2, $3)', [coherence, agentCount, meanPhase]);
+    }
+    async getHistory(limit = 100) {
+        const result = await this.db.query('SELECT timestamp, type, client_id, details FROM rail_events ORDER BY timestamp DESC LIMIT $1', [limit]);
+        return result.rows;
+    }
+    async getClientHistory(agentId, limit = 50) {
+        const result = await this.db.query('SELECT timestamp, action FROM rail_clients WHERE agent_id = $1 ORDER BY timestamp DESC LIMIT $2', [agentId, limit]);
+        return result.rows;
+    }
+    async saveEnrollment(agentId, secretHash) {
+        await this.db.query(`INSERT INTO rail_enrollments (agent_id, secret_hash) VALUES ($1, $2)
+       ON CONFLICT (agent_id) DO UPDATE SET secret_hash = $2`, [agentId, secretHash]);
+    }
+    async loadEnrollments() {
+        const result = await this.db.query('SELECT agent_id, secret_hash FROM rail_enrollments');
+        return result.rows;
+    }
+    startCoherenceLogging(getCoherence, getAgentCount, getMeanPhase) {
+        this.coherenceLogInterval = setInterval(() => {
+            this.logCoherence(getCoherence(), getAgentCount(), getMeanPhase()).catch(() => { });
+        }, 60_000);
+    }
+    async close() {
+        if (this.coherenceLogInterval) {
+            clearInterval(this.coherenceLogInterval);
+        }
+        await this.db.close();
+    }
+}
+export function createRailPersistence(dataDir) {
+    return new PGliteRailPersistence(dataDir);
+}
+//# sourceMappingURL=persistence.js.map

package/dist/rail/persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence.js","sourceRoot":"","sources":["../../src/rail/persistence.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAe9C,MAAM,OAAO,qBAAqB;IACxB,EAAE,CAAS;IACX,oBAAoB,CAAkC;IAE9D,YAAY,OAAe;QACzB,IAAI,CAAC,EAAE,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA8ClB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAkB,EAAE,MAAwB;QAC9D,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,2FAA2F,EAC3F,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAiB;QACjE,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,wEAAwE,EACxE,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAC3D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,UAAkB,EAAE,SAAiB;QACzE,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB,yFAAyF,EACzF,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CACnC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,8FAA8F,EAC9F,CAAC,KAAK,CAAC,CACR,CAAC;QACF,OAAO,MAAM,CAAC,IAAsF,CAAC;IACvG,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAe,EAAE,KAAK,GAAG,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAChC,iGAAiG,EACjG,CAAC,OAAO,EAAE,KAAK,CAAC,CACjB,CAAC;QACF,OAAO,MAAM,CAAC,IAAoD,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,UAAkB;QACtD,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;6DACuD,EACvD,CAAC,OAAO,EAAE,UAAU,CAAC,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,IAAwD,CAAC;IACzE,CAAC;IAED,qBAAqB,CAAC,YAA0B,EAAE,aAA2B,EAAE,YAA0B;QACvG,IAAI,CAAC,oBAAoB,GAAG,WAAW,CAAC,GAAG,EAAE;YAC3C,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrF,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC9B,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/rail/securityMonitor.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Security Monitor
+ *
+ * Aggregates security events with threshold alerting for the rail server.
+ */
+import { EventEmitter } from 'eventemitter3';
+interface SecurityEvent {
+    type: 'blocked_message' | 'failed_auth' | 'rate_violation' | 'injection_attempt' | 'stale_disconnect';
+    clientId: string;
+    timestamp: number;
+    details?: Record<string, unknown>;
+}
+export declare class SecurityMonitor extends EventEmitter {
+    private events;
+    private thresholds;
+    private maxEvents;
+    record(event: Omit<SecurityEvent, 'timestamp'>): void;
+    private checkThresholds;
+    getStats(windowMs?: number): Record<string, number>;
+    getEventsForClient(clientId: string, limit?: number): SecurityEvent[];
+}
+export {};
+//# sourceMappingURL=securityMonitor.d.ts.map

package/dist/rail/securityMonitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityMonitor.d.ts","sourceRoot":"","sources":["../../src/rail/securityMonitor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,UAAU,aAAa;IACrB,IAAI,EAAE,iBAAiB,GAAG,aAAa,GAAG,gBAAgB,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;IACtG,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAQD,qBAAa,eAAgB,SAAQ,YAAY;IAC/C,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,UAAU,CAIhB;IACF,OAAO,CAAC,SAAS,CAAS;IAE1B,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,IAAI;IASrD,OAAO,CAAC,eAAe;IAkBvB,QAAQ,CAAC,QAAQ,SAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAUpD,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,aAAa,EAAE;CAGlE"}

package/dist/rail/securityMonitor.js

@@ -0,0 +1,52 @@
+/**
+ * Security Monitor
+ *
+ * Aggregates security events with threshold alerting for the rail server.
+ */
+import { EventEmitter } from 'eventemitter3';
+export class SecurityMonitor extends EventEmitter {
+    events = [];
+    thresholds = [
+        { eventType: 'failed_auth', count: 10, windowMs: 60000 },
+        { eventType: 'rate_violation', count: 20, windowMs: 60000 },
+        { eventType: 'injection_attempt', count: 5, windowMs: 60000 },
+    ];
+    maxEvents = 10000;
+    record(event) {
+        const full = { ...event, timestamp: Date.now() };
+        this.events.push(full);
+        if (this.events.length > this.maxEvents) {
+            this.events = this.events.slice(-this.maxEvents / 2);
+        }
+        this.checkThresholds(full.type);
+    }
+    checkThresholds(eventType) {
+        const now = Date.now();
+        for (const threshold of this.thresholds) {
+            if (threshold.eventType !== eventType)
+                continue;
+            const recent = this.events.filter(e => e.type === eventType && now - e.timestamp < threshold.windowMs);
+            if (recent.length >= threshold.count) {
+                this.emit('alert', {
+                    type: eventType,
+                    count: recent.length,
+                    windowMs: threshold.windowMs,
+                    timestamp: now,
+                });
+            }
+        }
+    }
+    getStats(windowMs = 3600000) {
+        const now = Date.now();
+        const recent = this.events.filter(e => now - e.timestamp < windowMs);
+        const stats = {};
+        for (const e of recent) {
+            stats[e.type] = (stats[e.type] || 0) + 1;
+        }
+        return stats;
+    }
+    getEventsForClient(clientId, limit = 50) {
+        return this.events.filter(e => e.clientId === clientId).slice(-limit);
+    }
+}
+//# sourceMappingURL=securityMonitor.js.map

package/dist/rail/securityMonitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityMonitor.js","sourceRoot":"","sources":["../../src/rail/securityMonitor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAe7C,MAAM,OAAO,eAAgB,SAAQ,YAAY;IACvC,MAAM,GAAoB,EAAE,CAAC;IAC7B,UAAU,GAAqB;QACrC,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QACxD,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;QAC3D,EAAE,SAAS,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;KAC9D,CAAC;IACM,SAAS,GAAG,KAAK,CAAC;IAE1B,MAAM,CAAC,KAAuC;QAC5C,MAAM,IAAI,GAAkB,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAEO,eAAe,CAAC,SAAiB;QACvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACxC,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YAChD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAC/B,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC,QAAQ,CACpE,CAAC;YACF,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;gBACrC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;oBACjB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM,CAAC,MAAM;oBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,SAAS,EAAE,GAAG;iBACf,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,QAAQ,CAAC,QAAQ,GAAG,OAAO;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,CAAC;QACrE,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kBAAkB,CAAC,QAAgB,EAAE,KAAK,GAAG,EAAE;QAC7C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC;CACF"}