hackmyagent 0.10.0 → 0.11.0

package/dist/arp/index.js

@@ -33,7 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentRuntimeProtection = exports.PREMIUM_FEATURES = exports.registerLicenseValidator = exports.hasFeature = exports.checkLicense = exports.ARPProxy = exports.ALL_PATTERNS = exports.PATTERN_SETS = exports.scanText = exports.defaultConfig = exports.loadConfig = exports.LocalLogger = exports.EnforcementEngine = exports.A2AProtocolInterceptor = exports.MCPProtocolInterceptor = exports.PromptInterceptor = exports.FilesystemInterceptor = exports.NetworkInterceptor = exports.ProcessInterceptor = exports.FilesystemMonitor = exports.NetworkMonitor = exports.ProcessMonitor = exports.autoDetectAdapter = exports.createAdapter = exports.OllamaAdapter = exports.OpenAIAdapter = exports.AnthropicAdapter = exports.AnomalyDetector = exports.BudgetController = exports.IntelligenceCoordinator = exports.EventEngine = exports.VERSION = void 0;
+exports.AgentRuntimeProtection = exports.mapEventType = exports.isAnomalousEvent = exports.submitGTINEvent = exports.buildGTINPayload = exports.generateSensorToken = exports.GTINForwarder = exports.PREMIUM_FEATURES = exports.registerLicenseValidator = exports.hasFeature = exports.checkLicense = exports.ARPProxy = exports.ALL_PATTERNS = exports.PATTERN_SETS = exports.scanText = exports.defaultConfig = exports.loadConfig = exports.LocalLogger = exports.EnforcementEngine = exports.A2AProtocolInterceptor = exports.MCPProtocolInterceptor = exports.PromptInterceptor = exports.FilesystemInterceptor = exports.NetworkInterceptor = exports.ProcessInterceptor = exports.parseDeclaredCapabilities = exports.createCapabilityMonitor = exports.SkillCapabilityMonitor = exports.FilesystemMonitor = exports.NetworkMonitor = exports.ProcessMonitor = exports.autoDetectAdapter = exports.createAdapter = exports.OllamaAdapter = exports.OpenAIAdapter = exports.AnthropicAdapter = exports.AnomalyDetector = exports.BudgetController = exports.IntelligenceCoordinator = exports.EventEngine = exports.VERSION = void 0;
 exports.VERSION = '0.2.0';
 // Re-export components
 var event_engine_1 = require("./engine/event-engine");
@@ -56,6 +56,10 @@ var network_1 = require("./monitors/network");
 Object.defineProperty(exports, "NetworkMonitor", { enumerable: true, get: function () { return network_1.NetworkMonitor; } });
 var filesystem_1 = require("./monitors/filesystem");
 Object.defineProperty(exports, "FilesystemMonitor", { enumerable: true, get: function () { return filesystem_1.FilesystemMonitor; } });
+var skill_capability_monitor_1 = require("./monitors/skill-capability-monitor");
+Object.defineProperty(exports, "SkillCapabilityMonitor", { enumerable: true, get: function () { return skill_capability_monitor_1.SkillCapabilityMonitor; } });
+Object.defineProperty(exports, "createCapabilityMonitor", { enumerable: true, get: function () { return skill_capability_monitor_1.createCapabilityMonitor; } });
+Object.defineProperty(exports, "parseDeclaredCapabilities", { enumerable: true, get: function () { return skill_capability_monitor_1.parseDeclaredCapabilities; } });
 var process_2 = require("./interceptors/process");
 Object.defineProperty(exports, "ProcessInterceptor", { enumerable: true, get: function () { return process_2.ProcessInterceptor; } });
 var network_2 = require("./interceptors/network");
@@ -86,6 +90,14 @@ Object.defineProperty(exports, "checkLicense", { enumerable: true, get: function
 Object.defineProperty(exports, "hasFeature", { enumerable: true, get: function () { return license_1.hasFeature; } });
 Object.defineProperty(exports, "registerLicenseValidator", { enumerable: true, get: function () { return license_1.registerLicenseValidator; } });
 Object.defineProperty(exports, "PREMIUM_FEATURES", { enumerable: true, get: function () { return license_1.PREMIUM_FEATURES; } });
+// Re-export telemetry
+var telemetry_1 = require("./telemetry");
+Object.defineProperty(exports, "GTINForwarder", { enumerable: true, get: function () { return telemetry_1.GTINForwarder; } });
+Object.defineProperty(exports, "generateSensorToken", { enumerable: true, get: function () { return telemetry_1.generateSensorToken; } });
+Object.defineProperty(exports, "buildGTINPayload", { enumerable: true, get: function () { return telemetry_1.buildGTINPayload; } });
+Object.defineProperty(exports, "submitGTINEvent", { enumerable: true, get: function () { return telemetry_1.submitGTINEvent; } });
+Object.defineProperty(exports, "isAnomalousEvent", { enumerable: true, get: function () { return telemetry_1.isAnomalousEvent; } });
+Object.defineProperty(exports, "mapEventType", { enumerable: true, get: function () { return telemetry_1.mapEventType; } });
 const path = __importStar(require("path"));
 const event_engine_2 = require("./engine/event-engine");
 const coordinator_2 = require("./intelligence/coordinator");
@@ -101,6 +113,8 @@ const prompt_2 = require("./interceptors/prompt");
 const mcp_protocol_2 = require("./interceptors/mcp-protocol");
 const a2a_protocol_2 = require("./interceptors/a2a-protocol");
 const loader_2 = require("./config/loader");
+const forwarder_1 = require("./telemetry/forwarder");
+const gtin_1 = require("./telemetry/gtin");
 /**
  * Agent Runtime Protection — the main entry point.
  *
@@ -118,6 +132,7 @@ const loader_2 = require("./config/loader");
 class AgentRuntimeProtection {
     constructor(configOrPath) {
         this.monitors = [];
+        this.gtinForwarder = null;
         this.running = false;
         if (typeof configOrPath === 'string') {
             this.config = (0, loader_2.loadConfig)(configOrPath);
@@ -173,6 +188,20 @@ class AgentRuntimeProtection {
         if (al?.a2a?.enabled) {
             this.monitors.push(new a2a_protocol_2.A2AProtocolInterceptor(this.engine, al.a2a.trustedAgents));
         }
+        // Create GTIN forwarder if opted in
+        if (this.config.gtin?.enabled) {
+            const sensorToken = this.config.gtin.sensorToken || (0, gtin_1.generateSensorToken)();
+            this.gtinForwarder = new forwarder_1.GTINForwarder({
+                enabled: true,
+                sensorToken,
+                registryUrl: this.config.gtin.registryUrl,
+                packageName: this.config.agentName,
+            });
+            // Subscribe forwarder to all events (it filters internally)
+            this.engine.onEvent((event) => {
+                this.gtinForwarder?.onEvent(event);
+            });
+        }
     }
     /** Start all monitors */
     async start() {
@@ -181,6 +210,10 @@ class AgentRuntimeProtection {
         for (const monitor of this.monitors) {
             await monitor.start();
         }
+        // Start GTIN forwarder if configured
+        if (this.gtinForwarder) {
+            this.gtinForwarder.start();
+        }
         this.running = true;
     }
     /** Stop all monitors and flush logs */
@@ -190,6 +223,10 @@ class AgentRuntimeProtection {
         for (const monitor of this.monitors) {
             await monitor.stop();
         }
+        // Flush and shutdown GTIN forwarder
+        if (this.gtinForwarder) {
+            await this.gtinForwarder.shutdown();
+        }
         await this.intelligence.stop();
         this.running = false;
     }

package/dist/arp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAa,QAAA,OAAO,GAAG,OAAO,CAAC;AA2B/B,uBAAuB;AACvB,sDAAoD;AAA3C,2GAAA,WAAW,OAAA;AACpB,0DAAqE;AAA5D,sHAAA,uBAAuB,OAAA;AAChC,gDAAyD;AAAhD,0GAAA,gBAAgB,OAAA;AACzB,kDAAyD;AAAhD,0GAAA,eAAe,OAAA;AACxB,oDAA2H;AAAlH,4GAAA,gBAAgB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AACzF,8CAAoD;AAA3C,yGAAA,cAAc,OAAA;AACvB,8CAAoD;AAA3C,yGAAA,cAAc,OAAA;AACvB,oDAA0D;AAAjD,+GAAA,iBAAiB,OAAA;AAC1B,kDAA4D;AAAnD,6GAAA,kBAAkB,OAAA;AAC3B,kDAA4D;AAAnD,6GAAA,kBAAkB,OAAA;AAC3B,wDAAkE;AAAzD,mHAAA,qBAAqB,OAAA;AAC9B,gDAA0D;AAAjD,2GAAA,iBAAiB,OAAA;AAC1B,4DAAqE;AAA5D,sHAAA,sBAAsB,OAAA;AAC/B,4DAAqE;AAA5D,sHAAA,sBAAsB,OAAA;AAC/B,yDAAkF;AAAzE,gHAAA,iBAAiB,OAAA;AAC1B,mDAAoD;AAA3C,wGAAA,WAAW,OAAA;AACpB,0CAA4D;AAAnD,oGAAA,UAAU,OAAA;AAAE,uGAAA,aAAa,OAAA;AAClC,oDAAkH;AAAzG,sGAAA,QAAQ,OAAA;AAAE,0GAAA,YAAY,OAAA;AAAE,0GAAA,YAAY,OAAA;AAC7C,yCAA6D;AAApD,kGAAA,QAAQ,OAAA;AACjB,qCAOmB;AANjB,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AACV,mHAAA,wBAAwB,OAAA;AACxB,2GAAA,gBAAgB,OAAA;AAKlB,2CAA6B;AAE7B,wDAAoD;AACpD,4DAAqE;AACrE,2DAAkF;AAClF,qDAAoD;AACpD,gDAAoD;AACpD,gDAAoD;AACpD,sDAA0D;AAC1D,oDAA4D;AAC5D,oDAA4D;AAC5D,0DAAkE;AAClE,kDAA0D;AAC1D,8DAAqE;AACrE,8DAAqE;AACrE,4CAA6C;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAa,sBAAsB;IASjC,YAAY,YAAiC;QAH5B,aAAQ,GAAc,EAAE,CAAC;QAClC,YAAO,GAAG,KAAK,CAAC;QAGtB,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,IAAA,mBAAU,EAAC,YAAY,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,IAAI,IAAA,mBAAU,GAAE,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAEnF,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,qCAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,+BAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAW,CAAC,OAAO,CAAC,CAAC;QAEvC,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,gCAAgC;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,8BAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,8EAA8E;QAC9E,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACpC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,4BAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,4BAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kCAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QAED,+BAA+B;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,0BAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qCAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qCAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACpF,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,8BAA8B;IAC9B,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yBAAyB;IACzB,SAAS;QAMP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9E,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE;YAC3C,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,SAAS,CAAC,KAAc;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,oFAAoF;IACpF,OAAO,CAAC,OAAkD;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,OAA8E;QAC1F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,wDAAwD;IACxD,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,qDAAqD;IACrD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AArJD,wDAqJC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAa,QAAA,OAAO,GAAG,OAAO,CAAC;AA4B/B,uBAAuB;AACvB,sDAAoD;AAA3C,2GAAA,WAAW,OAAA;AACpB,0DAAqE;AAA5D,sHAAA,uBAAuB,OAAA;AAChC,gDAAyD;AAAhD,0GAAA,gBAAgB,OAAA;AACzB,kDAAyD;AAAhD,0GAAA,eAAe,OAAA;AACxB,oDAA2H;AAAlH,4GAAA,gBAAgB,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,yGAAA,aAAa,OAAA;AAAE,6GAAA,iBAAiB,OAAA;AACzF,8CAAoD;AAA3C,yGAAA,cAAc,OAAA;AACvB,8CAAoD;AAA3C,yGAAA,cAAc,OAAA;AACvB,oDAA0D;AAAjD,+GAAA,iBAAiB,OAAA;AAC1B,gFAAiI;AAAxH,kIAAA,sBAAsB,OAAA;AAAE,mIAAA,uBAAuB,OAAA;AAAE,qIAAA,yBAAyB,OAAA;AAEnF,kDAA4D;AAAnD,6GAAA,kBAAkB,OAAA;AAC3B,kDAA4D;AAAnD,6GAAA,kBAAkB,OAAA;AAC3B,wDAAkE;AAAzD,mHAAA,qBAAqB,OAAA;AAC9B,gDAA0D;AAAjD,2GAAA,iBAAiB,OAAA;AAC1B,4DAAqE;AAA5D,sHAAA,sBAAsB,OAAA;AAC/B,4DAAqE;AAA5D,sHAAA,sBAAsB,OAAA;AAC/B,yDAAkF;AAAzE,gHAAA,iBAAiB,OAAA;AAC1B,mDAAoD;AAA3C,wGAAA,WAAW,OAAA;AACpB,0CAA4D;AAAnD,oGAAA,UAAU,OAAA;AAAE,uGAAA,aAAa,OAAA;AAClC,oDAAkH;AAAzG,sGAAA,QAAQ,OAAA;AAAE,0GAAA,YAAY,OAAA;AAAE,0GAAA,YAAY,OAAA;AAC7C,yCAA6D;AAApD,kGAAA,QAAQ,OAAA;AACjB,qCAOmB;AANjB,uGAAA,YAAY,OAAA;AACZ,qGAAA,UAAU,OAAA;AACV,mHAAA,wBAAwB,OAAA;AACxB,2GAAA,gBAAgB,OAAA;AAKlB,sBAAsB;AACtB,yCAYqB;AAXnB,0GAAA,aAAa,OAAA;AACb,gHAAA,mBAAmB,OAAA;AACnB,6GAAA,gBAAgB,OAAA;AAChB,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,yGAAA,YAAY,OAAA;AAQd,2CAA6B;AAE7B,wDAAoD;AACpD,4DAAqE;AACrE,2DAAkF;AAClF,qDAAoD;AACpD,gDAAoD;AACpD,gDAAoD;AACpD,sDAA0D;AAC1D,oDAA4D;AAC5D,oDAA4D;AAC5D,0DAAkE;AAClE,kDAA0D;AAC1D,8DAAqE;AACrE,8DAAqE;AACrE,4CAA6C;AAC7C,qDAAsD;AACtD,2CAAuD;AAEvD;;;;;;;;;;;;;GAaG;AACH,MAAa,sBAAsB;IAUjC,YAAY,YAAiC;QAJ5B,aAAQ,GAAc,EAAE,CAAC;QAClC,kBAAa,GAAyB,IAAI,CAAC;QAC3C,YAAO,GAAG,KAAK,CAAC;QAGtB,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM,GAAG,IAAA,mBAAU,EAAC,YAAY,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,MAAM,GAAG,YAAY,IAAI,IAAA,mBAAU,GAAE,CAAC;QAC7C,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAEnF,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,YAAY,GAAG,IAAI,qCAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,WAAW,GAAG,IAAI,+BAAiB,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,IAAI,uBAAW,CAAC,OAAO,CAAC,CAAC;QAEvC,0CAA0C;QAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,gCAAgC;QAChC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YACzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7E,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAChC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,wBAAc,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,KAAK,KAAK,EAAE,CAAC;YACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,8BAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC;QACnH,CAAC;QAED,8EAA8E;QAC9E,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;QACpC,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,4BAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,4BAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,kCAAqB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QAED,+BAA+B;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,0BAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qCAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qCAAsB,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,IAAA,0BAAmB,GAAE,CAAC;YAC1E,IAAI,CAAC,aAAa,GAAG,IAAI,yBAAa,CAAC;gBACrC,OAAO,EAAE,IAAI;gBACb,WAAW;gBACX,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW;gBACzC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;aACnC,CAAC,CAAC;YAEH,4DAA4D;YAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QAED,qCAAqC;QACrC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,uCAAuC;IACvC,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QAED,oCAAoC;QACpC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,8BAA8B;IAC9B,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yBAAyB;IACzB,SAAS;QAMP,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC9E,MAAM,EAAE,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE;YAC3C,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE;SAC7C,CAAC;IACJ,CAAC;IAED,wBAAwB;IACxB,SAAS,CAAC,KAAc;QACtB,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,GAAW;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,oFAAoF;IACpF,OAAO,CAAC,OAAkD;QACxD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,2CAA2C;IAC3C,aAAa,CAAC,OAA8E;QAC1F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,wDAAwD;IACxD,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IAED,qDAAqD;IACrD,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AAhLD,wDAgLC"}

package/dist/arp/monitors/skill-capability-monitor.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Skill Capability Monitor
+ *
+ * Tracks runtime behavior of skills and compares against declared capabilities.
+ * Generates findings when skills exceed their declared permissions:
+ * - SKILL-013: Permission overreach (action not declared in capabilities)
+ * - SKILL-014: Undeclared network access (network call not listed in permissions)
+ */
+import type { Monitor, MonitorType } from '../types';
+import type { EventEngine } from '../engine/event-engine';
+export interface DeclaredCapabilities {
+    /** Skill name */
+    name: string;
+    /** Declared filesystem paths the skill is allowed to access */
+    fileAccess: string[];
+    /** Declared network hosts/URLs the skill is allowed to contact */
+    networkAccess: string[];
+    /** Declared tools the skill is allowed to invoke */
+    tools: string[];
+    /** Declared credential scopes the skill may use */
+    credentials: string[];
+}
+export interface ObservedBehavior {
+    /** Filesystem paths accessed at runtime */
+    fileAccesses: Array<{
+        path: string;
+        operation: string;
+        timestamp: string;
+    }>;
+    /** Network calls made at runtime */
+    networkCalls: Array<{
+        host: string;
+        port?: number;
+        protocol?: string;
+        timestamp: string;
+    }>;
+    /** Tools invoked at runtime */
+    toolUses: Array<{
+        tool: string;
+        timestamp: string;
+    }>;
+    /** Credentials accessed at runtime */
+    credentialAccesses: Array<{
+        scope: string;
+        timestamp: string;
+    }>;
+}
+export interface CapabilityViolation {
+    /** Finding ID (SKILL-013 or SKILL-014) */
+    id: string;
+    /** Type of violation */
+    type: 'permission-overreach' | 'undeclared-network';
+    /** Description of the violation */
+    description: string;
+    /** What was observed */
+    observed: string;
+    /** Timestamp of the violation */
+    timestamp: string;
+}
+/**
+ * Parse declared capabilities from SKILL.md content.
+ * Extracts permissions, network access, tools, and credential scopes from YAML frontmatter.
+ */
+export declare function parseDeclaredCapabilities(skillMd: string): DeclaredCapabilities;
+/**
+ * Create a skill capability monitor that tracks runtime behavior
+ * and compares it against declared capabilities.
+ */
+export declare function createCapabilityMonitor(declared: DeclaredCapabilities): SkillCapabilityMonitor;
+/**
+ * Skill Capability Monitor
+ *
+ * Records runtime actions and detects capability violations.
+ * Can operate standalone or integrated with the ARP event engine.
+ */
+export declare class SkillCapabilityMonitor implements Monitor {
+    readonly type: MonitorType;
+    private readonly declared;
+    private readonly observed;
+    private readonly violations;
+    private engine;
+    private running;
+    constructor(declared: DeclaredCapabilities, engine?: EventEngine);
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    isRunning(): boolean;
+    /**
+     * Record a file access event and check against declared capabilities.
+     */
+    recordFileAccess(filePath: string, operation?: string): void;
+    /**
+     * Record a network call event and check against declared capabilities.
+     */
+    recordNetworkCall(host: string, port?: number, protocol?: string): void;
+    /**
+     * Record a tool invocation and check against declared capabilities.
+     */
+    recordToolUse(tool: string): void;
+    /**
+     * Record a credential access and check against declared capabilities.
+     */
+    recordCredentialAccess(scope: string): void;
+    /**
+     * Get all recorded violations as findings.
+     */
+    getViolations(): CapabilityViolation[];
+    /**
+     * Get observed behavior summary.
+     */
+    getObserved(): ObservedBehavior;
+    /**
+     * Reset all recorded observations and violations.
+     */
+    reset(): void;
+    private isFileAccessAllowed;
+    private isNetworkAccessAllowed;
+    private emitViolation;
+}
+//# sourceMappingURL=skill-capability-monitor.d.ts.map

package/dist/arp/monitors/skill-capability-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-capability-monitor.d.ts","sourceRoot":"","sources":["../../../src/arp/monitors/skill-capability-monitor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAI1D,MAAM,WAAW,oBAAoB;IACnC,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,+DAA+D;IAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,kEAAkE;IAClE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,oDAAoD;IACpD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,mDAAmD;IACnD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5E,oCAAoC;IACpC,YAAY,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3F,+BAA+B;IAC/B,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrD,sCAAsC;IACtC,kBAAkB,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,mBAAmB;IAClC,0CAA0C;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,wBAAwB;IACxB,IAAI,EAAE,sBAAsB,GAAG,oBAAoB,CAAC;IACpD,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CA+B/E;AAgCD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,sBAAsB,CAE9F;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,OAAO;IACpD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAW;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAuB;IAChD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6B;IACxD,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,OAAO,CAAS;gBAEZ,QAAQ,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW;IAW1D,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,SAAS,IAAI,OAAO;IAIpB;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAE,MAAe,GAAG,IAAI;IAkBpE;;OAEG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI;IAkBvE;;OAEG;IACH,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAoBjC;;OAEG;IACH,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAoB3C;;OAEG;IACH,aAAa,IAAI,mBAAmB,EAAE;IAItC;;OAEG;IACH,WAAW,IAAI,gBAAgB;IAS/B;;OAEG;IACH,KAAK,IAAI,IAAI;IAUb,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,sBAAsB;IAU9B,OAAO,CAAC,aAAa;CAmBtB"}

package/dist/arp/monitors/skill-capability-monitor.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Skill Capability Monitor
+ *
+ * Tracks runtime behavior of skills and compares against declared capabilities.
+ * Generates findings when skills exceed their declared permissions:
+ * - SKILL-013: Permission overreach (action not declared in capabilities)
+ * - SKILL-014: Undeclared network access (network call not listed in permissions)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillCapabilityMonitor = void 0;
+exports.parseDeclaredCapabilities = parseDeclaredCapabilities;
+exports.createCapabilityMonitor = createCapabilityMonitor;
+// --- Capability Parsing ---
+/**
+ * Parse declared capabilities from SKILL.md content.
+ * Extracts permissions, network access, tools, and credential scopes from YAML frontmatter.
+ */
+function parseDeclaredCapabilities(skillMd) {
+    const capabilities = {
+        name: '',
+        fileAccess: [],
+        networkAccess: [],
+        tools: [],
+        credentials: [],
+    };
+    // Extract frontmatter
+    const frontmatterMatch = skillMd.match(/^---\s*\n([\s\S]*?)\n---/);
+    if (!frontmatterMatch)
+        return capabilities;
+    const frontmatter = frontmatterMatch[1];
+    // Parse name
+    const nameMatch = frontmatter.match(/^name:\s*(.+)$/m);
+    if (nameMatch) {
+        capabilities.name = nameMatch[1].trim().replace(/^["']|["']$/g, '');
+    }
+    // Parse permissions/capabilities sections (try primary field name, fall back to alternate)
+    const fileAccess = parseYamlList(frontmatter, 'file_access');
+    capabilities.fileAccess = fileAccess.length > 0 ? fileAccess : parseYamlList(frontmatter, 'filesystem');
+    const networkAccess = parseYamlList(frontmatter, 'network_access');
+    capabilities.networkAccess = networkAccess.length > 0 ? networkAccess : parseYamlList(frontmatter, 'network');
+    capabilities.tools = parseYamlList(frontmatter, 'tools');
+    const credentials = parseYamlList(frontmatter, 'credentials');
+    capabilities.credentials = credentials.length > 0 ? credentials : parseYamlList(frontmatter, 'credential_scopes');
+    return capabilities;
+}
+/**
+ * Parse a simple YAML list from frontmatter.
+ */
+function parseYamlList(frontmatter, field) {
+    // Inline format: field: [a, b, c]
+    const inlineMatch = frontmatter.match(new RegExp(`^${field}:\\s*\\[([^\\]]*)]`, 'm'));
+    if (inlineMatch) {
+        return inlineMatch[1]
+            .split(',')
+            .map((item) => item.trim().replace(/^["']|["']$/g, ''))
+            .filter((item) => item.length > 0);
+    }
+    // Block format
+    const blockMatch = frontmatter.match(new RegExp(`^${field}:\\s*\\n((?:\\s+-\\s+.+\\n?)*)`, 'm'));
+    if (blockMatch) {
+        return blockMatch[1]
+            .split('\n')
+            .map((line) => {
+            const itemMatch = line.match(/^\s+-\s+(.+)/);
+            return itemMatch ? itemMatch[1].trim().replace(/^["']|["']$/g, '') : '';
+        })
+            .filter((item) => item.length > 0);
+    }
+    return [];
+}
+// --- Monitor ---
+/**
+ * Create a skill capability monitor that tracks runtime behavior
+ * and compares it against declared capabilities.
+ */
+function createCapabilityMonitor(declared) {
+    return new SkillCapabilityMonitor(declared);
+}
+/**
+ * Skill Capability Monitor
+ *
+ * Records runtime actions and detects capability violations.
+ * Can operate standalone or integrated with the ARP event engine.
+ */
+class SkillCapabilityMonitor {
+    constructor(declared, engine) {
+        this.type = 'skill';
+        this.violations = [];
+        this.engine = null;
+        this.running = false;
+        this.declared = declared;
+        this.engine = engine ?? null;
+        this.observed = {
+            fileAccesses: [],
+            networkCalls: [],
+            toolUses: [],
+            credentialAccesses: [],
+        };
+    }
+    async start() {
+        this.running = true;
+    }
+    async stop() {
+        this.running = false;
+    }
+    isRunning() {
+        return this.running;
+    }
+    /**
+     * Record a file access event and check against declared capabilities.
+     */
+    recordFileAccess(filePath, operation = 'read') {
+        const timestamp = new Date().toISOString();
+        this.observed.fileAccesses.push({ path: filePath, operation, timestamp });
+        const isAllowed = this.isFileAccessAllowed(filePath);
+        if (!isAllowed) {
+            const violation = {
+                id: 'SKILL-013',
+                type: 'permission-overreach',
+                description: `Skill "${this.declared.name}" accessed file "${filePath}" (${operation}) which is not in declared file_access permissions`,
+                observed: filePath,
+                timestamp,
+            };
+            this.violations.push(violation);
+            this.emitViolation(violation);
+        }
+    }
+    /**
+     * Record a network call event and check against declared capabilities.
+     */
+    recordNetworkCall(host, port, protocol) {
+        const timestamp = new Date().toISOString();
+        this.observed.networkCalls.push({ host, port, protocol, timestamp });
+        const isAllowed = this.isNetworkAccessAllowed(host);
+        if (!isAllowed) {
+            const violation = {
+                id: 'SKILL-014',
+                type: 'undeclared-network',
+                description: `Skill "${this.declared.name}" made undeclared network call to "${host}${port ? ':' + port : ''}"`,
+                observed: host,
+                timestamp,
+            };
+            this.violations.push(violation);
+            this.emitViolation(violation);
+        }
+    }
+    /**
+     * Record a tool invocation and check against declared capabilities.
+     */
+    recordToolUse(tool) {
+        const timestamp = new Date().toISOString();
+        this.observed.toolUses.push({ tool, timestamp });
+        const isAllowed = this.declared.tools.some((t) => t === tool || t === '*');
+        if (!isAllowed) {
+            const violation = {
+                id: 'SKILL-013',
+                type: 'permission-overreach',
+                description: `Skill "${this.declared.name}" invoked tool "${tool}" which is not in declared tools`,
+                observed: tool,
+                timestamp,
+            };
+            this.violations.push(violation);
+            this.emitViolation(violation);
+        }
+    }
+    /**
+     * Record a credential access and check against declared capabilities.
+     */
+    recordCredentialAccess(scope) {
+        const timestamp = new Date().toISOString();
+        this.observed.credentialAccesses.push({ scope, timestamp });
+        const isAllowed = this.declared.credentials.some((c) => c === scope || c === '*');
+        if (!isAllowed) {
+            const violation = {
+                id: 'SKILL-013',
+                type: 'permission-overreach',
+                description: `Skill "${this.declared.name}" accessed credential scope "${scope}" which is not in declared credentials`,
+                observed: scope,
+                timestamp,
+            };
+            this.violations.push(violation);
+            this.emitViolation(violation);
+        }
+    }
+    /**
+     * Get all recorded violations as findings.
+     */
+    getViolations() {
+        return [...this.violations];
+    }
+    /**
+     * Get observed behavior summary.
+     */
+    getObserved() {
+        return {
+            fileAccesses: [...this.observed.fileAccesses],
+            networkCalls: [...this.observed.networkCalls],
+            toolUses: [...this.observed.toolUses],
+            credentialAccesses: [...this.observed.credentialAccesses],
+        };
+    }
+    /**
+     * Reset all recorded observations and violations.
+     */
+    reset() {
+        this.observed.fileAccesses.length = 0;
+        this.observed.networkCalls.length = 0;
+        this.observed.toolUses.length = 0;
+        this.observed.credentialAccesses.length = 0;
+        this.violations.length = 0;
+    }
+    // --- Private Helpers ---
+    isFileAccessAllowed(filePath) {
+        if (this.declared.fileAccess.length === 0)
+            return false;
+        return this.declared.fileAccess.some((allowed) => {
+            if (allowed === '*')
+                return true;
+            // Support glob-like prefix matching
+            if (allowed.endsWith('/*') || allowed.endsWith('/**')) {
+                const prefix = allowed.replace(/\/\*+$/, '');
+                return filePath.startsWith(prefix);
+            }
+            return filePath === allowed || filePath.startsWith(allowed + '/');
+        });
+    }
+    isNetworkAccessAllowed(host) {
+        if (this.declared.networkAccess.length === 0)
+            return false;
+        return this.declared.networkAccess.some((allowed) => {
+            if (allowed === '*')
+                return true;
+            // Exact match or subdomain match
+            return host === allowed || host.endsWith('.' + allowed);
+        });
+    }
+    emitViolation(violation) {
+        if (!this.engine)
+            return;
+        const severity = violation.id === 'SKILL-014' ? 'high' : 'medium';
+        const category = violation.id === 'SKILL-014' ? 'violation' : 'anomaly';
+        this.engine.emit({
+            source: 'skill',
+            category,
+            severity,
+            description: violation.description,
+            data: {
+                violationId: violation.id,
+                violationType: violation.type,
+                skillName: this.declared.name,
+                observed: violation.observed,
+            },
+        });
+    }
+}
+exports.SkillCapabilityMonitor = SkillCapabilityMonitor;
+//# sourceMappingURL=skill-capability-monitor.js.map

package/dist/arp/monitors/skill-capability-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-capability-monitor.js","sourceRoot":"","sources":["../../../src/arp/monitors/skill-capability-monitor.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAkDH,8DA+BC;AAoCD,0DAEC;AA3ED,6BAA6B;AAE7B;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,OAAe;IACvD,MAAM,YAAY,GAAyB;QACzC,IAAI,EAAE,EAAE;QACR,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;QACjB,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,EAAE;KAChB,CAAC;IAEF,sBAAsB;IACtB,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,CAAC,gBAAgB;QAAE,OAAO,YAAY,CAAC;IAE3C,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAExC,aAAa;IACb,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACvD,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,2FAA2F;IAC3F,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC7D,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACxG,MAAM,aAAa,GAAG,aAAa,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IACnE,YAAY,CAAC,aAAa,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAC9G,YAAY,CAAC,KAAK,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,aAAa,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC9D,YAAY,CAAC,WAAW,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IAElH,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,WAAmB,EAAE,KAAa;IACvD,kCAAkC;IAClC,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,oBAAoB,EAAE,GAAG,CAAC,CAAC,CAAC;IACtF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,WAAW,CAAC,CAAC,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,eAAe;IACf,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,gCAAgC,EAAE,GAAG,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,CAAC,CAAC;aACjB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7C,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,kBAAkB;AAElB;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,QAA8B;IACpE,OAAO,IAAI,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IAQjC,YAAY,QAA8B,EAAE,MAAoB;QAPvD,SAAI,GAAgB,OAAO,CAAC;QAGpB,eAAU,GAA0B,EAAE,CAAC;QAChD,WAAM,GAAuB,IAAI,CAAC;QAClC,YAAO,GAAG,KAAK,CAAC;QAGtB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,IAAI,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG;YACd,YAAY,EAAE,EAAE;YAChB,YAAY,EAAE,EAAE;YAChB,QAAQ,EAAE,EAAE;YACZ,kBAAkB,EAAE,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,QAAgB,EAAE,YAAoB,MAAM;QAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAE1E,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,SAAS,GAAwB;gBACrC,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,oBAAoB,QAAQ,MAAM,SAAS,oDAAoD;gBACxI,QAAQ,EAAE,QAAQ;gBAClB,SAAS;aACV,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,IAAY,EAAE,IAAa,EAAE,QAAiB;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;QAErE,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,SAAS,GAAwB;gBACrC,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,oBAAoB;gBAC1B,WAAW,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,sCAAsC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG;gBAC/G,QAAQ,EAAE,IAAI;gBACd,SAAS;aACV,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAY;QACxB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,CACxB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,SAAS,GAAwB;gBACrC,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,mBAAmB,IAAI,kCAAkC;gBAClG,QAAQ,EAAE,IAAI;gBACd,SAAS;aACV,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,KAAa;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE5D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrD,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,GAAG,CACzB,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,SAAS,GAAwB;gBACrC,EAAE,EAAE,WAAW;gBACf,IAAI,EAAE,sBAAsB;gBAC5B,WAAW,EAAE,UAAU,IAAI,CAAC,QAAQ,CAAC,IAAI,gCAAgC,KAAK,wCAAwC;gBACtH,QAAQ,EAAE,KAAK;gBACf,SAAS;aACV,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO;YACL,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7C,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7C,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACrC,kBAAkB,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,0BAA0B;IAElB,mBAAmB,CAAC,QAAgB;QAC1C,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAExD,OAAO,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAC/C,IAAI,OAAO,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACjC,oCAAoC;YACpC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;gBAC7C,OAAO,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;YACD,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,sBAAsB,CAAC,IAAY;QACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE3D,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAClD,IAAI,OAAO,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YACjC,iCAAiC;YACjC,OAAO,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,CAAC;QAC1D,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,SAA8B;QAClD,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEzB,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;QAExE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,MAAM,EAAE,OAAO;YACf,QAAQ;YACR,QAAQ;YACR,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,IAAI,EAAE;gBACJ,WAAW,EAAE,SAAS,CAAC,EAAE;gBACzB,aAAa,EAAE,SAAS,CAAC,IAAI;gBAC7B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;gBAC7B,QAAQ,EAAE,SAAS,CAAC,QAAQ;aAC7B;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAlMD,wDAkMC"}

package/dist/arp/telemetry/forwarder.d.ts

@@ -0,0 +1,62 @@
+/**
+ * GTIN Event Forwarder
+ *
+ * Subscribes to ARP events and forwards anomalous ones to the
+ * OpenA2A Registry for community threat intelligence. Events are
+ * batched internally and submitted individually (the API accepts
+ * one event at a time).
+ *
+ * Non-blocking: network failures are logged as warnings and never
+ * affect ARP monitoring.
+ */
+import { ARPEvent } from '../types';
+/** Configuration for the GTIN forwarder */
+export interface GTINForwarderConfig {
+    enabled: boolean;
+    sensorToken: string;
+    registryUrl?: string;
+    packageName: string;
+    packageVersion?: string;
+}
+/**
+ * GTIN Event Forwarder
+ *
+ * Accumulates anomalous events and flushes them to the registry
+ * every 30 seconds (or on explicit flush/shutdown).
+ */
+export declare class GTINForwarder {
+    private readonly config;
+    private queue;
+    private flushTimer;
+    private stopped;
+    /** Batch interval in milliseconds (30 seconds) */
+    private readonly batchIntervalMs;
+    constructor(config: GTINForwarderConfig);
+    /**
+     * Start the forwarder's batch flush timer.
+     * Called automatically when the first event is queued, or can be called explicitly.
+     */
+    start(): void;
+    /**
+     * Handle an incoming ARP event.
+     *
+     * If GTIN is enabled and the event is anomalous, it is queued for
+     * submission. Normal events are silently ignored.
+     */
+    onEvent(event: ARPEvent): void;
+    /**
+     * Force-send all queued events immediately.
+     * Each event is submitted individually (the API takes one event at a time).
+     */
+    flush(): Promise<void>;
+    /**
+     * Flush all queued events and stop the forwarder.
+     * After shutdown, no new events are accepted.
+     */
+    shutdown(): Promise<void>;
+    /** Get the current queue length (for diagnostics) */
+    getQueueLength(): number;
+    /** Check if the forwarder is running */
+    isRunning(): boolean;
+}
+//# sourceMappingURL=forwarder.d.ts.map

package/dist/arp/telemetry/forwarder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarder.d.ts","sourceRoot":"","sources":["../../../src/arp/telemetry/forwarder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAQpC,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsB;IAC7C,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,OAAO,CAAS;IAExB,kDAAkD;IAClD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;gBAE9B,MAAM,EAAE,mBAAmB;IAIvC;;;OAGG;IACH,KAAK,IAAI,IAAI;IAab;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI;IAkB9B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB5B;;;OAGG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAW/B,qDAAqD;IACrD,cAAc,IAAI,MAAM;IAIxB,wCAAwC;IACxC,SAAS,IAAI,OAAO;CAGrB"}