@tracehound/core 1.2.0

package/dist/index.js

@@ -0,0 +1,112 @@
+/**
+ * @tracehound/core
+ *
+ * Security buffer system with immune system architecture.
+ */
+// ─────────────────────────────────────────────────────────────────────────────
+// Config
+// ─────────────────────────────────────────────────────────────────────────────
+export { DEFAULT_CONFIG, mergeWithDefaults } from './types/index.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Errors
+// ─────────────────────────────────────────────────────────────────────────────
+export { createError, Errors } from './types/index.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Result type guards
+// ─────────────────────────────────────────────────────────────────────────────
+export { isClean, isError, isIgnored, isQuarantined, isRateLimited } from './types/index.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Threat helpers
+// ─────────────────────────────────────────────────────────────────────────────
+export { createThreatInput } from './types/index.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Signature
+// ─────────────────────────────────────────────────────────────────────────────
+export { compareSignatures, generateSignature, validateSignature } from './types/index.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Audit Chain
+// ─────────────────────────────────────────────────────────────────────────────
+export { AuditChain, GENESIS_HASH } from './core/audit-chain.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Evidence
+// ─────────────────────────────────────────────────────────────────────────────
+export { Evidence } from './core/evidence.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Quarantine
+// ─────────────────────────────────────────────────────────────────────────────
+export { Quarantine } from './core/quarantine.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Rate Limiter
+// ─────────────────────────────────────────────────────────────────────────────
+export { createRateLimiter, RateLimiter } from './core/rate-limiter.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Evidence Factory
+// ─────────────────────────────────────────────────────────────────────────────
+export { createEvidenceFactory, EvidenceFactory } from './core/evidence-factory.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Agent
+// ─────────────────────────────────────────────────────────────────────────────
+export { Agent, createAgent } from './core/agent.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Hound Pool
+// ─────────────────────────────────────────────────────────────────────────────
+export { createHoundPool, createMockAdapter, HoundPool } from './core/hound-pool.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Scheduler
+// ─────────────────────────────────────────────────────────────────────────────
+export { createScheduler, Scheduler } from './core/scheduler.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Watcher
+// ─────────────────────────────────────────────────────────────────────────────
+export { createWatcher, Watcher } from './core/watcher.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Utils - Hashing
+// ─────────────────────────────────────────────────────────────────────────────
+export { hash, hashBuffer } from './utils/hash.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Utils - ID generation
+// ─────────────────────────────────────────────────────────────────────────────
+export { generateSecureId, isValidSecureId } from './utils/id.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Utils - Serialization
+// ─────────────────────────────────────────────────────────────────────────────
+export { serialize } from './utils/serialize.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Utils - Security
+// ─────────────────────────────────────────────────────────────────────────────
+export { AsyncGzipCodec, createAsyncColdPathCodec, createColdPathCodec, createHotPathCodec, decodeWithIntegrityAsync, encodeWithIntegrityAsync, GzipCodec, } from './utils/binary-codec.js';
+export { constantTimeBufferEqual, constantTimeEqual } from './utils/compare.js';
+export { encodePayload, estimatePayloadSize } from './utils/encode.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Cold Storage
+// ─────────────────────────────────────────────────────────────────────────────
+export { createMemoryColdStorage, MemoryColdStorage } from './core/cold-storage.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - S3 Cold Storage
+// ─────────────────────────────────────────────────────────────────────────────
+export { createS3ColdStorage, S3ColdStorage } from './core/s3-cold-storage.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Trust Boundary
+// ─────────────────────────────────────────────────────────────────────────────
+export { DEFAULT_TRUST_BOUNDARY, isClusterUntrusted, mergeTrustBoundary, shouldVerifyDetector, validateTrustBoundary, } from './core/trust-boundary.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Lane Queue
+// ─────────────────────────────────────────────────────────────────────────────
+export { createLaneQueue, DEFAULT_LANE_CONFIG, LaneQueue } from './core/lane-queue.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Fail-Safe
+// ─────────────────────────────────────────────────────────────────────────────
+export { createFailSafe, DEFAULT_FAIL_SAFE_CONFIG, FailSafe } from './core/fail-safe.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Tracehound Factory
+// ─────────────────────────────────────────────────────────────────────────────
+export { createTracehound } from './core/tracehound.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Notification Emitter
+// ─────────────────────────────────────────────────────────────────────────────
+export { createNotificationEmitter, NotificationEmitter } from './core/notification-emitter.js';
+// ─────────────────────────────────────────────────────────────────────────────
+// Core - Security State
+// ─────────────────────────────────────────────────────────────────────────────
+export { createSecurityState, SecurityState } from './core/security-state.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAkCH,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpE,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAEtD,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAE5F,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAE1F,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAEhE,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAE7C,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAGjD,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAA;AAGvE,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAOnF,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAGpD,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAUpF,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAShE,gFAAgF;AAChF,iBAAiB;AACjB,gFAAgF;AAEhF,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AAY1D,gFAAgF;AAChF,kBAAkB;AAClB,gFAAgF;AAEhF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AAElD,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAEjE,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAEhD,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,OAAO,EACL,cAAc,EACd,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,SAAS,GACV,MAAM,yBAAyB,CAAA;AAQhC,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAC/E,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAGtE,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAOnF,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAG9E,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,0BAA0B,CAAA;AAWjC,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAQtF,gFAAgF;AAChF,mBAAmB;AACnB,gFAAgF;AAEhF,OAAO,EAAE,cAAc,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAA;AAUxF,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAGvD,gFAAgF;AAChF,8BAA8B;AAC9B,gFAAgF;AAEhF,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAA;AAiB/F,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA"}

package/dist/types/audit.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Audit chain types for evidence integrity.
+ */
+import type { EvacuateRecord, NeutralizationRecord } from './evidence.js';
+/**
+ * Audit record in the hash chain.
+ */
+export interface AuditRecord {
+    /** Unique record ID */
+    id: string;
+    /** Record type */
+    type: 'neutralization' | 'evacuation';
+    /** Threat signature */
+    signature: string;
+    /** Timestamp of action */
+    timestamp: number;
+    /** Hash of this record */
+    hash: string;
+    /** Hash of previous record (chain link) */
+    previousHash: string;
+}
+/**
+ * Cryptographic hash chain for audit integrity.
+ */
+export interface IAuditChain {
+    /** Hash of last record (or genesis) */
+    readonly lastHash: string;
+    /** Number of records in chain */
+    readonly length: number;
+    /**
+     * Append a record to the chain.
+     * Computes hash and links to previous.
+     */
+    append(record: NeutralizationRecord | EvacuateRecord): void;
+    /**
+     * Verify chain integrity.
+     * Returns true if chain is unbroken and untampered.
+     */
+    verify(): boolean;
+    /**
+     * Export all records (defensive copy).
+     */
+    export(): AuditRecord[];
+}
+//# sourceMappingURL=audit.d.ts.map

package/dist/types/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAEzE;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uBAAuB;IACvB,EAAE,EAAE,MAAM,CAAA;IACV,kBAAkB;IAClB,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAA;IACrC,uBAAuB;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,0BAA0B;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,0BAA0B;IAC1B,IAAI,EAAE,MAAM,CAAA;IACZ,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,uCAAuC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,iCAAiC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IAEvB;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,GAAG,IAAI,CAAA;IAE3D;;;OAGG;IACH,MAAM,IAAI,OAAO,CAAA;IAEjB;;OAEG;IACH,MAAM,IAAI,WAAW,EAAE,CAAA;CACxB"}

package/dist/types/audit.js

@@ -0,0 +1,5 @@
+/**
+ * Audit chain types for evidence integrity.
+ */
+export {};
+//# sourceMappingURL=audit.js.map

package/dist/types/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/types/audit.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/types/common.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Common types used across Tracehound.
+ */
+/** JSON primitive types */
+export type JsonPrimitive = string | number | boolean | null;
+/** JSON-serializable type for deterministic hashing */
+export type JsonSerializable = JsonPrimitive | JsonSerializable[] | {
+    [key: string]: JsonSerializable;
+};
+/** Threat severity levels */
+export type Severity = 'low' | 'medium' | 'high' | 'critical';
+//# sourceMappingURL=common.d.ts.map

package/dist/types/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,2BAA2B;AAC3B,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAA;AAE5D,uDAAuD;AACvD,MAAM,MAAM,gBAAgB,GACxB,aAAa,GACb,gBAAgB,EAAE,GAClB;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAAA;CAAE,CAAA;AAEvC,6BAA6B;AAC7B,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAA"}

package/dist/types/common.js

@@ -0,0 +1,5 @@
+/**
+ * Common types used across Tracehound.
+ */
+export {};
+//# sourceMappingURL=common.js.map

package/dist/types/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/types/common.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/types/config.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Tracehound configuration types and defaults.
+ */
+/** Rate limiter configuration */
+export interface RateLimitConfig {
+    /** Time window in milliseconds */
+    windowMs: number;
+    /** Max requests per window */
+    maxRequests: number;
+    /** Block duration after limit exceeded */
+    blockDurationMs: number;
+}
+/** Quarantine storage configuration */
+export interface QuarantineConfig {
+    /** Maximum number of quarantined items */
+    maxCount: number;
+    /** Maximum bytes in quarantine */
+    maxBytes: number;
+    /** Eviction strategy */
+    evictionPolicy: 'lru' | 'priority';
+}
+/** Hound pool configuration */
+export interface HoundConfig {
+    /** Minimum dormant hounds */
+    minimumDormant: number;
+    /** Maximum active hounds */
+    maxActive: number;
+    /** Max operations before rotation */
+    maxLifeTimeCycle: number;
+    /** Processing timeout in milliseconds */
+    maxProcessingTime: number;
+    /** Delay before replenishing pool */
+    replenishDelay: number;
+}
+/** Scheduler configuration */
+export interface SchedulerConfig {
+    /** Base rotation interval */
+    rotationInterval: number;
+    /** Maximum jitter for timing attack prevention */
+    jitterMax: number;
+    /** Skip rotation if busy */
+    skipIfBusy: boolean;
+}
+/** Alert configuration */
+export interface AlertConfig {
+    /** Maximum alerts per window */
+    maxAlertsPerWindow: number;
+    /** Alert window in milliseconds */
+    windowMs: number;
+    /** Alerts before escalation */
+    escalationThreshold: number;
+}
+/** Cold storage configuration */
+export interface ColdStorageConfig {
+    /** Storage type */
+    type: 'url';
+    /** Storage endpoint */
+    endpoint: string;
+}
+/** Audit configuration */
+export interface AuditConfig {
+    /** Enable hash chain integrity */
+    chainEnabled: boolean;
+    /** Cold storage for evidence */
+    coldStorage?: ColdStorageConfig | undefined;
+}
+/** Runtime configuration */
+export interface RuntimeConfig {
+    /** Enforce runtime flags (--disable-proto) */
+    strictRuntimeFlags: boolean;
+}
+/** Complete Tracehound configuration */
+export interface TracehoundConfig {
+    /** Maximum payload size in bytes */
+    maxPayloadSize: number;
+    /** Rate limiting settings */
+    rateLimit: RateLimitConfig;
+    /** Quarantine settings */
+    quarantine: QuarantineConfig;
+    /** Hound pool settings */
+    hound: HoundConfig;
+    /** Scheduler settings */
+    scheduler: SchedulerConfig;
+    /** Alert settings */
+    alerts: AlertConfig;
+    /** Audit settings */
+    audit: AuditConfig;
+    /** Runtime settings */
+    runtime: RuntimeConfig;
+}
+/** Default configuration values */
+export declare const DEFAULT_CONFIG: TracehoundConfig;
+/**
+ * Merge partial config with defaults.
+ * Deep merges nested config objects.
+ */
+export declare function mergeWithDefaults(partial: Partial<TracehoundConfig>): TracehoundConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,iCAAiC;AACjC,MAAM,WAAW,eAAe;IAC9B,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAA;IACnB,0CAA0C;IAC1C,eAAe,EAAE,MAAM,CAAA;CACxB;AAED,uCAAuC;AACvC,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,QAAQ,EAAE,MAAM,CAAA;IAChB,kCAAkC;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,wBAAwB;IACxB,cAAc,EAAE,KAAK,GAAG,UAAU,CAAA;CACnC;AAED,+BAA+B;AAC/B,MAAM,WAAW,WAAW;IAC1B,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAA;IACtB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,qCAAqC;IACrC,gBAAgB,EAAE,MAAM,CAAA;IACxB,yCAAyC;IACzC,iBAAiB,EAAE,MAAM,CAAA;IACzB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,6BAA6B;IAC7B,gBAAgB,EAAE,MAAM,CAAA;IACxB,kDAAkD;IAClD,SAAS,EAAE,MAAM,CAAA;IACjB,4BAA4B;IAC5B,UAAU,EAAE,OAAO,CAAA;CACpB;AAED,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,+BAA+B;IAC/B,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,iCAAiC;AACjC,MAAM,WAAW,iBAAiB;IAChC,mBAAmB;IACnB,IAAI,EAAE,KAAK,CAAA;IACX,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,0BAA0B;AAC1B,MAAM,WAAW,WAAW;IAC1B,kCAAkC;IAClC,YAAY,EAAE,OAAO,CAAA;IACrB,gCAAgC;IAChC,WAAW,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAA;CAC5C;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,8CAA8C;IAC9C,kBAAkB,EAAE,OAAO,CAAA;CAC5B;AAED,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,oCAAoC;IACpC,cAAc,EAAE,MAAM,CAAA;IACtB,6BAA6B;IAC7B,SAAS,EAAE,eAAe,CAAA;IAC1B,0BAA0B;IAC1B,UAAU,EAAE,gBAAgB,CAAA;IAC5B,0BAA0B;IAC1B,KAAK,EAAE,WAAW,CAAA;IAClB,yBAAyB;IACzB,SAAS,EAAE,eAAe,CAAA;IAC1B,qBAAqB;IACrB,MAAM,EAAE,WAAW,CAAA;IACnB,qBAAqB;IACrB,KAAK,EAAE,WAAW,CAAA;IAClB,uBAAuB;IACvB,OAAO,EAAE,aAAa,CAAA;CACvB;AAED,mCAAmC;AACnC,eAAO,MAAM,cAAc,EAAE,gBAmC5B,CAAA;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,gBAAgB,CAYtF"}

package/dist/types/config.js

@@ -0,0 +1,58 @@
+/**
+ * Tracehound configuration types and defaults.
+ */
+/** Default configuration values */
+export const DEFAULT_CONFIG = {
+    maxPayloadSize: 1_000_000,
+    rateLimit: {
+        windowMs: 60_000,
+        maxRequests: 100,
+        blockDurationMs: 300_000,
+    },
+    quarantine: {
+        maxCount: 10_000,
+        maxBytes: 100_000_000,
+        evictionPolicy: 'priority',
+    },
+    hound: {
+        minimumDormant: 2,
+        maxActive: 4,
+        maxLifeTimeCycle: 1000,
+        maxProcessingTime: 5_000,
+        replenishDelay: 100,
+    },
+    scheduler: {
+        rotationInterval: 60_000,
+        jitterMax: 10_000,
+        skipIfBusy: true,
+    },
+    alerts: {
+        maxAlertsPerWindow: 10,
+        windowMs: 60_000,
+        escalationThreshold: 5,
+    },
+    audit: {
+        chainEnabled: true,
+    },
+    runtime: {
+        strictRuntimeFlags: true,
+    },
+};
+/**
+ * Merge partial config with defaults.
+ * Deep merges nested config objects.
+ */
+export function mergeWithDefaults(partial) {
+    return {
+        ...DEFAULT_CONFIG,
+        ...partial,
+        rateLimit: { ...DEFAULT_CONFIG.rateLimit, ...partial.rateLimit },
+        quarantine: { ...DEFAULT_CONFIG.quarantine, ...partial.quarantine },
+        hound: { ...DEFAULT_CONFIG.hound, ...partial.hound },
+        scheduler: { ...DEFAULT_CONFIG.scheduler, ...partial.scheduler },
+        alerts: { ...DEFAULT_CONFIG.alerts, ...partial.alerts },
+        audit: { ...DEFAULT_CONFIG.audit, ...partial.audit },
+        runtime: { ...DEFAULT_CONFIG.runtime, ...partial.runtime },
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAkGH,mCAAmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAqB;IAC9C,cAAc,EAAE,SAAS;IACzB,SAAS,EAAE;QACT,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,GAAG;QAChB,eAAe,EAAE,OAAO;KACzB;IACD,UAAU,EAAE;QACV,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,cAAc,EAAE,UAAU;KAC3B;IACD,KAAK,EAAE;QACL,cAAc,EAAE,CAAC;QACjB,SAAS,EAAE,CAAC;QACZ,gBAAgB,EAAE,IAAI;QACtB,iBAAiB,EAAE,KAAK;QACxB,cAAc,EAAE,GAAG;KACpB;IACD,SAAS,EAAE;QACT,gBAAgB,EAAE,MAAM;QACxB,SAAS,EAAE,MAAM;QACjB,UAAU,EAAE,IAAI;KACjB;IACD,MAAM,EAAE;QACN,kBAAkB,EAAE,EAAE;QACtB,QAAQ,EAAE,MAAM;QAChB,mBAAmB,EAAE,CAAC;KACvB;IACD,KAAK,EAAE;QACL,YAAY,EAAE,IAAI;KACnB;IACD,OAAO,EAAE;QACP,kBAAkB,EAAE,IAAI;KACzB;CACF,CAAA;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAkC;IAClE,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,OAAO;QACV,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QAChE,UAAU,EAAE,EAAE,GAAG,cAAc,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,EAAE;QACnE,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QACpD,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QAChE,MAAM,EAAE,EAAE,GAAG,cAAc,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE;QACvD,KAAK,EAAE,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE;QACpD,OAAO,EAAE,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;KAC3D,CAAA;AACH,CAAC"}

package/dist/types/errors.d.ts

@@ -0,0 +1,118 @@
+/**
+ * Tracehound error handling.
+ *
+ * Error codes are organized by domain:
+ * - CONFIG_*     : Configuration validation errors
+ * - SCENT_*      : Scent/payload validation errors
+ * - AGENT_*      : Agent processing errors
+ * - QUARANTINE_* : Quarantine operations
+ * - EVIDENCE_*   : Evidence lifecycle
+ * - CODEC_*      : Encoding/decoding errors
+ * - COLD_*       : Cold storage errors
+ * - PROCESS_*    : Hound process errors
+ * - RATE_*       : Rate limiting
+ * - RUNTIME_*    : Runtime environment
+ */
+export type ErrorState = 'config' | 'scent' | 'agent' | 'quarantine' | 'evidence' | 'codec' | 'cold_storage' | 'process' | 'ratelimit' | 'runtime' | 'scheduler';
+/** Tracehound error interface */
+export interface TracehoundError {
+    /** Component/domain that generated the error */
+    state: ErrorState;
+    /** Error code (DOMAIN_SPECIFIC_ERROR format) */
+    code: string;
+    /** Human-readable message */
+    message: string;
+    /** Additional context for debugging */
+    context?: unknown;
+    /** Can the operation be retried */
+    recoverable: boolean;
+}
+/**
+ * Create a TracehoundError.
+ */
+export declare function createError(state: ErrorState, code: string, message: string, options?: {
+    context?: unknown;
+    recoverable?: boolean;
+}): TracehoundError;
+export declare const Errors: {
+    readonly invalidConfigQuarantine: (issue: string) => TracehoundError;
+    readonly invalidConfigRateLimit: (issue: string) => TracehoundError;
+    readonly invalidConfigAgent: (issue: string) => TracehoundError;
+    readonly invalidConfigScheduler: (issue: string) => TracehoundError;
+    readonly scentPayloadInvalid: (reason: string) => TracehoundError;
+    readonly scentSourceMissing: () => TracehoundError;
+    readonly scentIdInvalid: (id: string) => TracehoundError;
+    readonly payloadTooLarge: (size: number, limit: number) => TracehoundError;
+    readonly serializationFailed: (reason: string) => TracehoundError;
+    readonly interceptFailed: (reason: string) => TracehoundError;
+    readonly quarantineFull: (count: number, maxCount: number) => TracehoundError;
+    readonly quarantineEvictFailed: (reason: string) => TracehoundError;
+    readonly evidenceAlreadyDisposed: (signature: string) => TracehoundError;
+    readonly evidenceTransferFailed: (signature: string) => TracehoundError;
+    readonly evidenceEmpty: () => TracehoundError;
+    readonly evidenceInvalidBytes: () => TracehoundError;
+    readonly evidenceHashMismatch: (expected: string, actual: string) => TracehoundError;
+    readonly codecEncodeFailed: (reason: string) => TracehoundError;
+    readonly codecDecodeFailed: (reason: string) => TracehoundError;
+    readonly codecIntegrityFailed: () => TracehoundError;
+    readonly coldStorageWriteFailed: (id: string, reason: string) => TracehoundError;
+    readonly coldStorageReadFailed: (id: string, reason: string) => TracehoundError;
+    readonly coldStorageNotFound: (id: string) => TracehoundError;
+    readonly coldStorageUnavailable: () => TracehoundError;
+    readonly processSpawnFailed: (reason: string) => TracehoundError;
+    readonly processTimeout: (houndId: string, elapsed: number) => TracehoundError;
+    readonly processCrashed: (houndId: string, exitCode: number) => TracehoundError;
+    readonly processPoolExhausted: (action: string) => TracehoundError;
+    readonly rateLimited: (source: string, retryAfter: number) => TracehoundError;
+    readonly rateSourceBlocked: (source: string, until: number) => TracehoundError;
+    readonly runtimeFlagMissing: (flag: string) => TracehoundError;
+    readonly runtimeIntrinsicsNotFrozen: () => TracehoundError;
+    readonly schedulerTaskFailed: (taskId: string, reason: string) => TracehoundError;
+    readonly schedulerAlreadyRunning: () => TracehoundError;
+    /** @deprecated Use processTimeout */
+    readonly houndTimeout: (houndId: string, elapsed: number) => TracehoundError;
+    /** @deprecated Use evidenceHashMismatch */
+    readonly hashMismatch: (expected: string, actual: string) => TracehoundError;
+    /** @deprecated Use evidenceInvalidBytes */
+    readonly invalidBytesType: () => TracehoundError;
+    /** @deprecated Use evidenceEmpty */
+    readonly emptyEvidence: () => TracehoundError;
+};
+export declare const ErrorCodes: {
+    readonly CONFIG_QUARANTINE_INVALID: "CONFIG_QUARANTINE_INVALID";
+    readonly CONFIG_RATELIMIT_INVALID: "CONFIG_RATELIMIT_INVALID";
+    readonly CONFIG_AGENT_INVALID: "CONFIG_AGENT_INVALID";
+    readonly CONFIG_SCHEDULER_INVALID: "CONFIG_SCHEDULER_INVALID";
+    readonly SCENT_PAYLOAD_INVALID: "SCENT_PAYLOAD_INVALID";
+    readonly SCENT_SOURCE_MISSING: "SCENT_SOURCE_MISSING";
+    readonly SCENT_ID_INVALID: "SCENT_ID_INVALID";
+    readonly AGENT_PAYLOAD_TOO_LARGE: "AGENT_PAYLOAD_TOO_LARGE";
+    readonly AGENT_SERIALIZATION_FAILED: "AGENT_SERIALIZATION_FAILED";
+    readonly AGENT_INTERCEPT_FAILED: "AGENT_INTERCEPT_FAILED";
+    readonly QUARANTINE_FULL: "QUARANTINE_FULL";
+    readonly QUARANTINE_EVICT_FAILED: "QUARANTINE_EVICT_FAILED";
+    readonly EVIDENCE_DISPOSED: "EVIDENCE_DISPOSED";
+    readonly EVIDENCE_TRANSFER_FAILED: "EVIDENCE_TRANSFER_FAILED";
+    readonly EVIDENCE_EMPTY: "EVIDENCE_EMPTY";
+    readonly EVIDENCE_INVALID_BYTES: "EVIDENCE_INVALID_BYTES";
+    readonly EVIDENCE_HASH_MISMATCH: "EVIDENCE_HASH_MISMATCH";
+    readonly CODEC_ENCODE_FAILED: "CODEC_ENCODE_FAILED";
+    readonly CODEC_DECODE_FAILED: "CODEC_DECODE_FAILED";
+    readonly CODEC_INTEGRITY_FAILED: "CODEC_INTEGRITY_FAILED";
+    readonly COLD_WRITE_FAILED: "COLD_WRITE_FAILED";
+    readonly COLD_READ_FAILED: "COLD_READ_FAILED";
+    readonly COLD_NOT_FOUND: "COLD_NOT_FOUND";
+    readonly COLD_UNAVAILABLE: "COLD_UNAVAILABLE";
+    readonly PROCESS_SPAWN_FAILED: "PROCESS_SPAWN_FAILED";
+    readonly PROCESS_TIMEOUT: "PROCESS_TIMEOUT";
+    readonly PROCESS_CRASHED: "PROCESS_CRASHED";
+    readonly PROCESS_POOL_EXHAUSTED: "PROCESS_POOL_EXHAUSTED";
+    readonly RATE_LIMITED: "RATE_LIMITED";
+    readonly RATE_SOURCE_BLOCKED: "RATE_SOURCE_BLOCKED";
+    readonly RUNTIME_FLAG_MISSING: "RUNTIME_FLAG_MISSING";
+    readonly RUNTIME_INTRINSICS_NOT_FROZEN: "RUNTIME_INTRINSICS_NOT_FROZEN";
+    readonly SCHEDULER_TASK_FAILED: "SCHEDULER_TASK_FAILED";
+    readonly SCHEDULER_ALREADY_RUNNING: "SCHEDULER_ALREADY_RUNNING";
+};
+export type ErrorCode = (typeof ErrorCodes)[keyof typeof ErrorCodes];
+//# sourceMappingURL=errors.d.ts.map

package/dist/types/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/types/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,MAAM,UAAU,GAClB,QAAQ,GACR,OAAO,GACP,OAAO,GACP,YAAY,GACZ,UAAU,GACV,OAAO,GACP,cAAc,GACd,SAAS,GACT,WAAW,GACX,SAAS,GACT,WAAW,CAAA;AAMf,iCAAiC;AACjC,MAAM,WAAW,eAAe;IAC9B,gDAAgD;IAChD,KAAK,EAAE,UAAU,CAAA;IACjB,gDAAgD;IAChD,IAAI,EAAE,MAAM,CAAA;IACZ,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,uCAAuC;IACvC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,mCAAmC;IACnC,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;GAEG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD,eAAe,CAQjB;AAMD,eAAO,MAAM,MAAM;8CAKgB,MAAM;6CAMP,MAAM;yCAMV,MAAM;6CAMF,MAAM;2CAUR,MAAM;;kCAWf,MAAM;qCAUH,MAAM,SAAS,MAAM;2CAMf,MAAM;uCAMV,MAAM;qCAUR,MAAM,YAAY,MAAM;6CAMhB,MAAM;kDAUD,MAAM;iDAMP,MAAM;;;8CAqBT,MAAM,UAAU,MAAM;yCAe3B,MAAM;yCAMN,MAAM;;0CAeL,MAAM,UAAU,MAAM;yCAMvB,MAAM,UAAU,MAAM;uCAMxB,MAAM;;0CAeH,MAAM;uCAMT,MAAM,WAAW,MAAM;uCAMvB,MAAM,YAAY,MAAM;4CAMnB,MAAM;mCAUf,MAAM,cAAc,MAAM;yCAMpB,MAAM,SAAS,MAAM;wCAUtB,MAAM;;2CAeH,MAAM,UAAU,MAAM;;IAepD,qCAAqC;qCACb,MAAM,WAAW,MAAM;IAM/C,2CAA2C;sCAClB,MAAM,UAAU,MAAM;IAW/C,2CAA2C;;IAM3C,oCAAoC;;CAK5B,CAAA;AAMV,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwDb,CAAA;AAEV,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA"}