hackmyagent 0.16.5 → 0.17.0

package/dist/arp/crypto/manifest-loader.js

@@ -0,0 +1,361 @@
+"use strict";
+/**
+ * Capability manifest YAML loader with hybrid Ed25519+ML-DSA-65 signature
+ * verification.
+ *
+ * The loader implements parse-to-deny (CR-001): any failure at any step --
+ * I/O, oversized file, YAML parse error, schema mismatch, missing signature,
+ * wrong algorithm, malformed public key, signature rejection, or expiry --
+ * raises a `CapabilityManifestError`. Callers must treat the thrown error as
+ * an authoritative signal to refuse loading the manifest. There is no
+ * partial-success path.
+ *
+ * Wire format (YAML on disk):
+ *
+ *   version: "1.0.0"
+ *   agentId: "example-agent"
+ *   tier: "execute"
+ *   comply:
+ *     permitted_classes: ["class-a", "class-b"]
+ *     prohibited_classes: ["class-c"]
+ *     on_violation: "deny"
+ *   issuedAt: "2026-04-13T00:00:00.000Z"
+ *   expiresAt: "2027-04-13T00:00:00.000Z"
+ *   ed25519PublicKey: "<base64>"
+ *   mldsa65PublicKey: "<base64>"
+ *   signature:
+ *     alg: "Ed25519+ML-DSA-65"
+ *     ed25519Sig: "<base64>"
+ *     mldsaSig: "<base64>"
+ *     ts: 1712880000000
+ *
+ * The signed payload is the manifest object with the `signature` field
+ * stripped, serialized to canonical JSON (sorted keys, no whitespace). Signer
+ * and verifier must produce byte-identical canonical output or round-tripping
+ * will not work. The closed schema (scalars + string arrays + one nested
+ * object) is simple enough that full RFC 8785 JCS is unnecessary; the
+ * `stableStringify` helper below is deterministic for the shapes we accept.
+ *
+ * Integration points (deferred to follow-up sessions, not wired yet):
+ *   - `src/arp/proxy/server.ts`: load manifest on agent registration, fail
+ *     closed if verification raises.
+ *   - `src/arp/intelligence/coordinator.ts`: consult the `comply` envelope
+ *     when an event's classification lands outside permitted classes.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CapabilityManifestError = exports.MAX_MANIFEST_SIZE_BYTES = exports.MANIFEST_SIGNATURE_ALGORITHM = exports.MANIFEST_VERSION = void 0;
+exports.canonicalizeManifestPayload = canonicalizeManifestPayload;
+exports.loadCapabilityManifest = loadCapabilityManifest;
+exports.parseCapabilityManifest = parseCapabilityManifest;
+const fs_1 = require("fs");
+const js_yaml_1 = __importDefault(require("js-yaml"));
+const hybrid_signing_1 = require("./hybrid-signing");
+/** Only wire format version currently accepted. */
+exports.MANIFEST_VERSION = '1.0.0';
+/**
+ * Only hybrid algorithm permitted for capability manifests. ML-DSA-65 is the
+ * NIST category 3 parameter set, matching the AIM SDK default for manifests.
+ * ML-DSA-44 is reserved for high-throughput identity signals; ML-DSA-87 for
+ * root keys. Manifests that claim a different algorithm are refused.
+ */
+exports.MANIFEST_SIGNATURE_ALGORITHM = 'Ed25519+ML-DSA-65';
+/**
+ * Hard cap on the manifest file size. Anything larger is rejected before
+ * YAML parsing to bound worst-case memory and CPU for a malicious file. 64
+ * KiB is ample: a realistic manifest with a few hundred permitted classes
+ * and base64 public keys sits well under 8 KiB.
+ */
+exports.MAX_MANIFEST_SIZE_BYTES = 64 * 1024;
+/** Allowed capability tiers (kept in sync with `CapabilityTier` in ../types). */
+const ALLOWED_TIERS = new Set([
+    'minimal',
+    'read',
+    'execute',
+    'mutate',
+    'privileged',
+]);
+/** Allowed on_violation actions (kept in sync with `ComplyOnViolation`). */
+const ALLOWED_ON_VIOLATION = new Set(['log', 'alert', 'pause', 'kill', 'deny']);
+/**
+ * Error raised on any loader failure. Callers MUST treat a thrown
+ * `CapabilityManifestError` as an authoritative parse-to-deny signal. Do not
+ * fall through to a "load without verification" path under any circumstance.
+ */
+class CapabilityManifestError extends Error {
+    constructor(code, message, details) {
+        super(`[arp/crypto/manifest] ${code}: ${message}`);
+        this.code = code;
+        this.details = details;
+        this.name = 'CapabilityManifestError';
+    }
+}
+exports.CapabilityManifestError = CapabilityManifestError;
+/**
+ * Produce canonical signed-payload bytes for a parsed manifest object.
+ *
+ * Canonicalization:
+ *   1. Remove the `signature` field if present.
+ *   2. Serialize as JSON with recursively sorted object keys and no
+ *      whitespace between tokens.
+ *   3. Encode the result as UTF-8.
+ *
+ * Exported because fixture generators and out-of-repo signers need to
+ * produce the exact same bytes as the verifier. Duplicating this logic in a
+ * signer is a recipe for drift.
+ */
+function canonicalizeManifestPayload(payload) {
+    const stripped = { ...payload };
+    delete stripped.signature;
+    return new TextEncoder().encode(stableStringify(stripped));
+}
+/**
+ * Deterministic JSON serializer: sorted object keys, no whitespace. Accepts
+ * the closed set of JSON-compatible values that manifest payloads contain
+ * (string, number, boolean, null, array, plain object). Any other value
+ * type is serialized via `JSON.stringify`, which will produce `undefined`
+ * for functions or symbols -- the schema guards prevent those from reaching
+ * this helper in practice.
+ */
+function stableStringify(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value)) {
+        return `[${value.map((v) => stableStringify(v)).join(',')}]`;
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    const pairs = keys.map((k) => `${JSON.stringify(k)}:${stableStringify(obj[k])}`);
+    return `{${pairs.join(',')}}`;
+}
+/**
+ * Load and verify a capability manifest from a YAML file on disk.
+ *
+ * On success, returns the verified `CapabilityManifest` shape (without the
+ * signature block, which is not part of the runtime type). On any failure
+ * throws a `CapabilityManifestError` -- the caller fails closed.
+ *
+ * The file is read once, size-checked, then parsed and verified. I/O errors
+ * are reported with `code: 'IO_ERROR'` and the underlying error exposed via
+ * `details.cause` so callers can log the root cause without re-throwing.
+ */
+async function loadCapabilityManifest(filePath) {
+    let raw;
+    try {
+        const stat = await fs_1.promises.stat(filePath);
+        if (stat.size > exports.MAX_MANIFEST_SIZE_BYTES) {
+            throw new CapabilityManifestError('SIZE_EXCEEDED', `manifest file exceeds ${exports.MAX_MANIFEST_SIZE_BYTES} bytes`, { reason: `size=${stat.size}` });
+        }
+        raw = await fs_1.promises.readFile(filePath, 'utf8');
+    }
+    catch (err) {
+        if (err instanceof CapabilityManifestError)
+            throw err;
+        throw new CapabilityManifestError('IO_ERROR', `unable to read manifest at ${filePath}`, { reason: err.message, cause: err });
+    }
+    return parseCapabilityManifest(raw);
+}
+/**
+ * Parse and verify a capability manifest from YAML text.
+ *
+ * Separated from `loadCapabilityManifest` so callers that already have the
+ * text in memory (pulled from a database, stdin, IPC channel) can verify
+ * without a filesystem round trip.
+ */
+async function parseCapabilityManifest(yamlText) {
+    if (typeof yamlText !== 'string') {
+        throw new CapabilityManifestError('PARSE_ERROR', 'manifest text must be a string');
+    }
+    if (Buffer.byteLength(yamlText, 'utf8') > exports.MAX_MANIFEST_SIZE_BYTES) {
+        throw new CapabilityManifestError('SIZE_EXCEEDED', `manifest text exceeds ${exports.MAX_MANIFEST_SIZE_BYTES} bytes`);
+    }
+    let parsed;
+    try {
+        parsed = js_yaml_1.default.load(yamlText, {
+            // FAILSAFE_SCHEMA would reject base64 strings that look like YAML
+            // booleans. CORE_SCHEMA accepts the scalars we use (string, number,
+            // bool, null) without executing YAML type coercions like !!js/function.
+            schema: js_yaml_1.default.CORE_SCHEMA,
+            filename: 'capability-manifest.yaml',
+        });
+    }
+    catch (err) {
+        throw new CapabilityManifestError('PARSE_ERROR', 'YAML parse failed', { reason: err.message, cause: err });
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed)) {
+        throw new CapabilityManifestError('SCHEMA_ERROR', 'manifest root must be a YAML mapping');
+    }
+    const obj = parsed;
+    // Version gate first. Rejecting unsupported versions before touching any
+    // other field lets us evolve the wire format without leaking half-parsed
+    // data from a newer schema into a validator that does not understand it.
+    const version = obj.version;
+    if (version !== exports.MANIFEST_VERSION) {
+        throw new CapabilityManifestError('VERSION_UNSUPPORTED', `unsupported manifest version`, { reason: `got=${JSON.stringify(version)} expected=${exports.MANIFEST_VERSION}` });
+    }
+    // Signature block presence check comes before schema validation so that a
+    // manifest missing a signature fails with the more specific error code.
+    // An attacker who strips the signature block should see the same rejection
+    // regardless of whether the remaining schema is well-formed.
+    const sigRaw = obj.signature;
+    if (sigRaw === undefined || sigRaw === null) {
+        throw new CapabilityManifestError('SIGNATURE_MISSING', 'manifest has no signature block');
+    }
+    if (typeof sigRaw !== 'object' || Array.isArray(sigRaw)) {
+        throw new CapabilityManifestError('SIGNATURE_MISSING', 'signature block must be a mapping');
+    }
+    // Schema validation of the payload itself. Narrow order: every required
+    // field must be present and of the correct shape before we run any crypto.
+    const schemaError = validateManifestSchema(obj);
+    if (schemaError) {
+        throw new CapabilityManifestError('SCHEMA_ERROR', schemaError);
+    }
+    // Structural signature checks. Algorithm gate is strict: anything other
+    // than the required manifest algorithm is refused outright rather than
+    // downgraded.
+    const sig = sigRaw;
+    const alg = sig.alg;
+    if (alg !== exports.MANIFEST_SIGNATURE_ALGORITHM) {
+        throw new CapabilityManifestError('ALGORITHM_UNSUPPORTED', `signature algorithm must be ${exports.MANIFEST_SIGNATURE_ALGORITHM}`, { reason: `got=${JSON.stringify(alg)}` });
+    }
+    if (typeof sig.ed25519Sig !== 'string' ||
+        typeof sig.mldsaSig !== 'string' ||
+        typeof sig.ts !== 'number') {
+        throw new CapabilityManifestError('SCHEMA_ERROR', 'signature block fields malformed', {
+            reason: `ed25519Sig=${typeof sig.ed25519Sig} mldsaSig=${typeof sig.mldsaSig} ts=${typeof sig.ts}`,
+        });
+    }
+    // Decode keys and signature into raw bytes. Any failure here (bad base64,
+    // wrong size after decode) becomes a KEY_FORMAT_ERROR so callers can
+    // distinguish "signature cryptographically wrong" from "signature bytes
+    // structurally invalid".
+    let publicKeyBytes;
+    let signatureBytes;
+    try {
+        const encodedPk = {
+            algorithm: exports.MANIFEST_SIGNATURE_ALGORITHM,
+            ed25519PublicKey: obj.ed25519PublicKey,
+            mldsaPublicKey: obj.mldsa65PublicKey,
+            mldsaVariant: 'ML-DSA-65',
+        };
+        publicKeyBytes = (0, hybrid_signing_1.decodeHybridPublicKey)(encodedPk);
+        const encodedSig = {
+            alg: exports.MANIFEST_SIGNATURE_ALGORITHM,
+            ed25519Sig: sig.ed25519Sig,
+            mldsaSig: sig.mldsaSig,
+            ts: sig.ts,
+        };
+        signatureBytes = (0, hybrid_signing_1.decodeHybridSignature)(encodedSig);
+    }
+    catch (err) {
+        throw new CapabilityManifestError('KEY_FORMAT_ERROR', 'failed to decode hybrid key or signature bytes', { reason: err.message, cause: err });
+    }
+    // Node's `Buffer.from(_, 'base64')` is permissive: invalid characters are
+    // silently dropped and the result is whatever byte length falls out. Catch
+    // size mismatches here so the caller sees KEY_FORMAT_ERROR rather than a
+    // downstream SIGNATURE_INVALID that hides a structurally malformed key.
+    if (!(0, hybrid_signing_1.validateKeySize)('Ed25519', 'publicKey', publicKeyBytes.ed25519PublicKey)) {
+        throw new CapabilityManifestError('KEY_FORMAT_ERROR', 'ed25519 public key has wrong length after base64 decode', { reason: `length=${publicKeyBytes.ed25519PublicKey.length}` });
+    }
+    if (!(0, hybrid_signing_1.validateKeySize)('ML-DSA-65', 'publicKey', publicKeyBytes.mldsaPublicKey)) {
+        throw new CapabilityManifestError('KEY_FORMAT_ERROR', 'ml-dsa-65 public key has wrong length after base64 decode', { reason: `length=${publicKeyBytes.mldsaPublicKey.length}` });
+    }
+    if (!(0, hybrid_signing_1.validateKeySize)('Ed25519', 'signature', signatureBytes.ed25519Sig)) {
+        throw new CapabilityManifestError('KEY_FORMAT_ERROR', 'ed25519 signature has wrong length after base64 decode', { reason: `length=${signatureBytes.ed25519Sig.length}` });
+    }
+    if (!(0, hybrid_signing_1.validateKeySize)('ML-DSA-65', 'signature', signatureBytes.mldsaSig)) {
+        throw new CapabilityManifestError('KEY_FORMAT_ERROR', 'ml-dsa-65 signature has wrong length after base64 decode', { reason: `length=${signatureBytes.mldsaSig.length}` });
+    }
+    // Canonicalize the signed payload (the original parsed object minus the
+    // signature block) and run the non-short-circuit hybrid verifier. Both
+    // halves are evaluated on every call; a structured `{valid: false, reason}`
+    // result comes back on any mismatch and becomes SIGNATURE_INVALID here.
+    const canonical = canonicalizeManifestPayload(obj);
+    const result = await (0, hybrid_signing_1.hybridVerify)(canonical, signatureBytes, publicKeyBytes);
+    if (!result.valid) {
+        throw new CapabilityManifestError('SIGNATURE_INVALID', 'hybrid signature rejected', { reason: result.reason ?? 'no reason provided by verifier' });
+    }
+    // Expiry check runs LAST, after signature verification, so an attacker who
+    // manipulates expiresAt cannot force a cheap rejection path that reveals
+    // anything about the signature state. Even a valid signature over an
+    // expired manifest is denied.
+    if (typeof obj.expiresAt === 'string') {
+        const expiresAtMs = Date.parse(obj.expiresAt);
+        if (!Number.isFinite(expiresAtMs)) {
+            throw new CapabilityManifestError('SCHEMA_ERROR', 'expiresAt is not a valid ISO timestamp', { reason: `got=${obj.expiresAt}` });
+        }
+        if (expiresAtMs <= Date.now()) {
+            throw new CapabilityManifestError('EXPIRED', 'manifest expiresAt has passed', { reason: `expiresAt=${obj.expiresAt}` });
+        }
+    }
+    // The runtime shape: everything except the signature block.
+    const manifest = {
+        version: exports.MANIFEST_VERSION,
+        agentId: obj.agentId,
+        tier: obj.tier,
+        comply: {
+            permitted_classes: obj.comply
+                .permitted_classes.slice(),
+            prohibited_classes: obj.comply
+                .prohibited_classes.slice(),
+            on_violation: obj.comply
+                .on_violation,
+        },
+        issuedAt: obj.issuedAt,
+        ...(typeof obj.expiresAt === 'string'
+            ? { expiresAt: obj.expiresAt }
+            : {}),
+        ed25519PublicKey: obj.ed25519PublicKey,
+        mldsa65PublicKey: obj.mldsa65PublicKey,
+    };
+    return manifest;
+}
+/**
+ * Schema validation for the non-signature fields. Returns a human-readable
+ * error string if validation fails, or `null` on success. Kept as a
+ * string-returning helper (rather than throwing) so the caller can wrap the
+ * result in a single typed error with the correct code.
+ */
+function validateManifestSchema(obj) {
+    if (typeof obj.agentId !== 'string' || obj.agentId.length === 0) {
+        return 'agentId must be a non-empty string';
+    }
+    if (typeof obj.tier !== 'string' || !ALLOWED_TIERS.has(obj.tier)) {
+        return `tier must be one of ${Array.from(ALLOWED_TIERS).join(', ')}`;
+    }
+    if (typeof obj.issuedAt !== 'string' || !Number.isFinite(Date.parse(obj.issuedAt))) {
+        return 'issuedAt must be an ISO timestamp string';
+    }
+    if (obj.expiresAt !== undefined &&
+        obj.expiresAt !== null &&
+        typeof obj.expiresAt !== 'string') {
+        return 'expiresAt must be an ISO timestamp string or omitted';
+    }
+    if (typeof obj.ed25519PublicKey !== 'string' || obj.ed25519PublicKey.length === 0) {
+        return 'ed25519PublicKey must be a non-empty base64 string';
+    }
+    if (typeof obj.mldsa65PublicKey !== 'string' || obj.mldsa65PublicKey.length === 0) {
+        return 'mldsa65PublicKey must be a non-empty base64 string';
+    }
+    const comply = obj.comply;
+    if (comply === null || typeof comply !== 'object' || Array.isArray(comply)) {
+        return 'comply must be a mapping';
+    }
+    const c = comply;
+    if (!Array.isArray(c.permitted_classes) ||
+        !c.permitted_classes.every((v) => typeof v === 'string')) {
+        return 'comply.permitted_classes must be an array of strings';
+    }
+    if (!Array.isArray(c.prohibited_classes) ||
+        !c.prohibited_classes.every((v) => typeof v === 'string')) {
+        return 'comply.prohibited_classes must be an array of strings';
+    }
+    if (typeof c.on_violation !== 'string' ||
+        !ALLOWED_ON_VIOLATION.has(c.on_violation)) {
+        return `comply.on_violation must be one of ${Array.from(ALLOWED_ON_VIOLATION).join(', ')}`;
+    }
+    return null;
+}
+//# sourceMappingURL=manifest-loader.js.map

package/dist/arp/crypto/manifest-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-loader.js","sourceRoot":"","sources":["../../../src/arp/crypto/manifest-loader.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;;;;;;AAqGH,kEAMC;AAkCD,wDAuBC;AASD,0DAiOC;AA5YD,2BAAoC;AAEpC,sDAA2B;AAO3B,qDAK0B;AAO1B,mDAAmD;AACtC,QAAA,gBAAgB,GAAG,OAAgB,CAAC;AAEjD;;;;;GAKG;AACU,QAAA,4BAA4B,GACvC,mBAAmB,CAAC;AAEtB;;;;;GAKG;AACU,QAAA,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,iFAAiF;AACjF,MAAM,aAAa,GAAgC,IAAI,GAAG,CAAiB;IACzE,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,YAAY;CACb,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,oBAAoB,GACxB,IAAI,GAAG,CAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAkBxE;;;;GAIG;AACH,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YACkB,IAAiC,EACjD,OAAe,EACC,OAA8C;QAE9D,KAAK,CAAC,yBAAyB,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;QAJnC,SAAI,GAAJ,IAAI,CAA6B;QAEjC,YAAO,GAAP,OAAO,CAAuC;QAG9D,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AATD,0DASC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,2BAA2B,CACzC,OAAgC;IAEhC,MAAM,QAAQ,GAA4B,EAAE,GAAG,OAAO,EAAE,CAAC;IACzD,OAAO,QAAQ,CAAC,SAAS,CAAC;IAC1B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/D,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CACzD,CAAC;IACF,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,sBAAsB,CAC1C,QAAgB;IAEhB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,aAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,GAAG,+BAAuB,EAAE,CAAC;YACxC,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,yBAAyB,+BAAuB,QAAQ,EACxD,EAAE,MAAM,EAAE,QAAQ,IAAI,CAAC,IAAI,EAAE,EAAE,CAChC,CAAC;QACJ,CAAC;QACD,GAAG,GAAG,MAAM,aAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,uBAAuB;YAAE,MAAM,GAAG,CAAC;QACtD,MAAM,IAAI,uBAAuB,CAC/B,UAAU,EACV,8BAA8B,QAAQ,EAAE,EACxC,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,uBAAuB,CAC3C,QAAgB;IAEhB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAC/B,aAAa,EACb,gCAAgC,CACjC,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,+BAAuB,EAAE,CAAC;QAClE,MAAM,IAAI,uBAAuB,CAC/B,eAAe,EACf,yBAAyB,+BAAuB,QAAQ,CACzD,CAAC;IACJ,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,iBAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC3B,kEAAkE;YAClE,oEAAoE;YACpE,wEAAwE;YACxE,MAAM,EAAE,iBAAI,CAAC,WAAW;YACxB,QAAQ,EAAE,0BAA0B;SACrC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,uBAAuB,CAC/B,aAAa,EACb,mBAAmB,EACnB,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,sCAAsC,CACvC,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAiC,CAAC;IAE9C,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,KAAK,wBAAgB,EAAE,CAAC;QACjC,MAAM,IAAI,uBAAuB,CAC/B,qBAAqB,EACrB,8BAA8B,EAC9B,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,wBAAgB,EAAE,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC;IAC7B,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,iCAAiC,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,mCAAmC,CACpC,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,WAAW,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,uBAAuB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACjE,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,cAAc;IACd,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC;IACpB,IAAI,GAAG,KAAK,oCAA4B,EAAE,CAAC;QACzC,MAAM,IAAI,uBAAuB,CAC/B,uBAAuB,EACvB,+BAA+B,oCAA4B,EAAE,EAC7D,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,IACE,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ;QAClC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAChC,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAC1B,CAAC;QACD,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,kCAAkC,EAClC;YACE,MAAM,EAAE,cAAc,OAAO,GAAG,CAAC,UAAU,aAAa,OAAO,GAAG,CAAC,QAAQ,OAAO,OAAO,GAAG,CAAC,EAAE,EAAE;SAClG,CACF,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,qEAAqE;IACrE,wEAAwE;IACxE,yBAAyB;IACzB,IAAI,cAAc,CAAC;IACnB,IAAI,cAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,SAAS,GAA2B;YACxC,SAAS,EAAE,oCAA4B;YACvC,gBAAgB,EAAE,GAAG,CAAC,gBAA0B;YAChD,cAAc,EAAE,GAAG,CAAC,gBAA0B;YAC9C,YAAY,EAAE,WAAW;SAC1B,CAAC;QACF,cAAc,GAAG,IAAA,sCAAqB,EAAC,SAAS,CAAC,CAAC;QAElD,MAAM,UAAU,GAA2B;YACzC,GAAG,EAAE,oCAA4B;YACjC,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,EAAE,EAAE,GAAG,CAAC,EAAE;SACX,CAAC;QACF,cAAc,GAAG,IAAA,sCAAqB,EAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,gDAAgD,EAChD,EAAE,MAAM,EAAG,GAAa,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAC/C,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,IAAI,CAAC,IAAA,gCAAe,EAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,yDAAyD,EACzD,EAAE,MAAM,EAAE,UAAU,cAAc,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAA,gCAAe,EAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,cAAc,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,2DAA2D,EAC3D,EAAE,MAAM,EAAE,UAAU,cAAc,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAA,gCAAe,EAAC,SAAS,EAAE,WAAW,EAAE,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,wDAAwD,EACxD,EAAE,MAAM,EAAE,UAAU,cAAc,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CACzD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAA,gCAAe,EAAC,WAAW,EAAE,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,uBAAuB,CAC/B,kBAAkB,EAClB,0DAA0D,EAC1D,EAAE,MAAM,EAAE,UAAU,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CACvD,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,SAAS,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAY,EAAC,SAAS,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,uBAAuB,CAC/B,mBAAmB,EACnB,2BAA2B,EAC3B,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,gCAAgC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,yEAAyE;IACzE,qEAAqE;IACrE,8BAA8B;IAC9B,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,MAAM,IAAI,uBAAuB,CAC/B,cAAc,EACd,wCAAwC,EACxC,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,SAAS,EAAE,EAAE,CACnC,CAAC;QACJ,CAAC;QACD,IAAI,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAuB,CAC/B,SAAS,EACT,+BAA+B,EAC/B,EAAE,MAAM,EAAE,aAAa,GAAG,CAAC,SAAS,EAAE,EAAE,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,MAAM,QAAQ,GAAuB;QACnC,OAAO,EAAE,wBAAgB;QACzB,OAAO,EAAE,GAAG,CAAC,OAAiB;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAsB;QAChC,MAAM,EAAE;YACN,iBAAiB,EAAI,GAAG,CAAC,MAAkC;iBACxD,iBAA8B,CAAC,KAAK,EAAE;YACzC,kBAAkB,EAAI,GAAG,CAAC,MAAkC;iBACzD,kBAA+B,CAAC,KAAK,EAAE;YAC1C,YAAY,EAAG,GAAG,CAAC,MAAkC;iBAClD,YAAiC;SACrC;QACD,QAAQ,EAAE,GAAG,CAAC,QAAkB;QAChC,GAAG,CAAC,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ;YACnC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;YAC9B,CAAC,CAAC,EAAE,CAAC;QACP,gBAAgB,EAAE,GAAG,CAAC,gBAA0B;QAChD,gBAAgB,EAAE,GAAG,CAAC,gBAA0B;KACjD,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,GAA4B;IAC1D,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAsB,CAAC,EAAE,CAAC;QACnF,OAAO,uBAAuB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,IACE,GAAG,CAAC,SAAS,KAAK,SAAS;QAC3B,GAAG,CAAC,SAAS,KAAK,IAAI;QACtB,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,EACjC,CAAC;QACD,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,gBAAgB,KAAK,QAAQ,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO,oDAAoD,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACnC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EACxD,CAAC;QACD,OAAO,sDAAsD,CAAC;IAChE,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACpC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EACzD,CAAC;QACD,OAAO,uDAAuD,CAAC;IACjE,CAAC;IACD,IACE,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAClC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,YAAiC,CAAC,EAC9D,CAAC;QACD,OAAO,sCAAsC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7F,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/arp/crypto/types.d.ts

@@ -0,0 +1,69 @@
+/**
+ * ARP crypto types (scaffolding, AIComply P1).
+ *
+ * Shared shapes for hybrid Ed25519 + ML-DSA signing. The first commit lands only
+ * these types and stub functions. The follow-up commit wires real signing against
+ * `@noble/ed25519` and `@noble/post-quantum`, mirroring
+ * `agent-identity-management/sdk/typescript/src/crypto/pqc.ts`.
+ */
+/** Supported ML-DSA parameter sets (FIPS 204). */
+export type MLDsaVariant = 'ML-DSA-44' | 'ML-DSA-65' | 'ML-DSA-87';
+/** Hybrid algorithm identifier, matching the AIM SDK and Go backend wire format. */
+export type HybridAlgorithm = 'Ed25519+ML-DSA-44' | 'Ed25519+ML-DSA-65' | 'Ed25519+ML-DSA-87';
+/**
+ * Hybrid key pair: Ed25519 (classical) plus ML-DSA (post-quantum).
+ * Both halves co-sign every payload; verification requires both to pass.
+ */
+export interface HybridKeyPair {
+    algorithm: HybridAlgorithm;
+    ed25519: {
+        publicKey: Uint8Array;
+        privateKey: Uint8Array;
+    };
+    mldsa: {
+        variant: MLDsaVariant;
+        publicKey: Uint8Array;
+        privateKey: Uint8Array;
+    };
+    createdAt: Date;
+}
+/** Hybrid public key in raw (non-encoded) form, used for verification. */
+export interface HybridPublicKey {
+    algorithm: HybridAlgorithm;
+    ed25519PublicKey: Uint8Array;
+    mldsaPublicKey: Uint8Array;
+    mldsaVariant: MLDsaVariant;
+}
+/** Hybrid signature: both halves must validate for the signature to be accepted. */
+export interface HybridSignature {
+    algorithm: HybridAlgorithm;
+    ed25519Sig: Uint8Array;
+    mldsaSig: Uint8Array;
+    /** Unix ms timestamp when the signature was produced */
+    timestamp: number;
+}
+/** Base64-encoded form of a hybrid signature (for YAML/JSON transport). */
+export interface EncodedHybridSignature {
+    alg: HybridAlgorithm;
+    ed25519Sig: string;
+    mldsaSig: string;
+    ts: number;
+}
+/** Base64-encoded form of a hybrid public key (for YAML/JSON transport). */
+export interface EncodedHybridPublicKey {
+    algorithm: HybridAlgorithm;
+    ed25519PublicKey: string;
+    mldsaPublicKey: string;
+    mldsaVariant: MLDsaVariant;
+}
+/** Result of a hybrid signature verification. */
+export interface HybridVerifyResult {
+    /** True only if BOTH ed25519 and mldsa halves verify successfully. */
+    valid: boolean;
+    /** Per-half breakdown, for diagnostics and structured logging. */
+    ed25519Valid: boolean;
+    mldsaValid: boolean;
+    /** Human-readable reason when `valid` is false. */
+    reason?: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/arp/crypto/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/arp/crypto/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,kDAAkD;AAClD,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAEnE,oFAAoF;AACpF,MAAM,MAAM,eAAe,GACvB,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,CAAC;AAExB;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE;QACP,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;KACxB,CAAC;IACF,KAAK,EAAE;QACL,OAAO,EAAE,YAAY,CAAC;QACtB,SAAS,EAAE,UAAU,CAAC;QACtB,UAAU,EAAE,UAAU,CAAC;KACxB,CAAC;IACF,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,0EAA0E;AAC1E,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,cAAc,EAAE,UAAU,CAAC;IAC3B,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,eAAe,CAAC;IAC3B,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,EAAE,UAAU,CAAC;IACrB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,2EAA2E;AAC3E,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,eAAe,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,eAAe,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,YAAY,CAAC;CAC5B;AAED,iDAAiD;AACjD,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,KAAK,EAAE,OAAO,CAAC;IACf,kEAAkE;IAClE,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/arp/crypto/types.js

@@ -0,0 +1,11 @@
+"use strict";
+/**
+ * ARP crypto types (scaffolding, AIComply P1).
+ *
+ * Shared shapes for hybrid Ed25519 + ML-DSA signing. The first commit lands only
+ * these types and stub functions. The follow-up commit wires real signing against
+ * `@noble/ed25519` and `@noble/post-quantum`, mirroring
+ * `agent-identity-management/sdk/typescript/src/crypto/pqc.ts`.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/arp/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/arp/crypto/types.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG"}

package/dist/arp/index.d.ts

@@ -5,7 +5,7 @@ export { CorrelationEngine } from './engine/correlation';
 export { IntelligenceCoordinator } from './intelligence/coordinator';
 export { BudgetController } from './intelligence/budget';
 export { AnomalyDetector } from './intelligence/anomaly';
-export { NanoMindL1 } from './intelligence/nanomind-l1';
+export { RuntimeTwin } from './intelligence/runtime-twin';
 export { AnthropicAdapter, OpenAIAdapter, OllamaAdapter, createAdapter, autoDetectAdapter } from './intelligence/adapters';
 export { ProcessMonitor } from './monitors/process';
 export { NetworkMonitor } from './monitors/network';
@@ -28,6 +28,7 @@ export { GTINForwarder, generateSensorToken, buildGTINPayload, submitGTINEvent,
 import type { ARPConfig, ARPEvent } from './types';
 import { EventEngine } from './engine/event-engine';
 import { IntelligenceCoordinator } from './intelligence/coordinator';
+import { RuntimeTwin } from './intelligence/runtime-twin';
 import { EnforcementEngine, type AlertCallback } from './enforcement/kill-switch';
 /**
  * Agent Runtime Protection — the main entry point.
@@ -52,6 +53,23 @@ export declare class AgentRuntimeProtection {
     private readonly monitors;
     private gtinForwarder;
     private running;
+    /**
+     * In-process runtime twin (behavioral anomaly scorer). Held for the
+     * lifetime of the ARP instance, attached to the event engine in
+     * start() so every event trains the twin's baseline. Null when the
+     * runtime twin is disabled in config.
+     */
+    private readonly runtimeTwin;
+    /**
+     * Transport-agnostic view of the runtime twin passed to the
+     * coordinator. Null when the twin is disabled.
+     */
+    private readonly behavioralRiskSource;
+    /**
+     * Classification drift detector. Non-null only when the caller
+     * provided a baseline in `config.intelligence.guardAnomaly.baseline`.
+     */
+    private readonly guardAnomaly;
     constructor(configOrPath?: ARPConfig | string);
     /** Start all monitors */
     start(): Promise<void>;
@@ -83,5 +101,14 @@ export declare class AgentRuntimeProtection {
     getEngine(): EventEngine;
     /** Get the enforcement engine (for test harnesses) */
     getEnforcement(): EnforcementEngine;
+    /**
+     * Get the intelligence coordinator. Exposed so tests can assert the
+     * coordinator was constructed with the expected behavioral risk and
+     * guard anomaly sources, and so advanced integrations can swap
+     * sources at runtime via `setBehavioralRiskSource` / `setGuardAnomaly`.
+     */
+    getIntelligence(): IntelligenceCoordinator;
+    /** The runtime twin instance, or null when disabled. */
+    getRuntimeTwin(): RuntimeTwin | null;
 }
 //# sourceMappingURL=index.d.ts.map

package/dist/arp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EACV,SAAS,EACT,QAAQ,EACR,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,EACP,UAAU,GACX,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACjI,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,WAAW,EACX,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAW,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAelF;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;gBAEZ,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM;IA+E7C,yBAAyB;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAe5B,uCAAuC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,8BAA8B;IAC9B,SAAS,IAAI,OAAO;IAIpB,yBAAyB;IACzB,SAAS,IAAI;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpD,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB;IASD,wBAAwB;IACxB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAIrC,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,oFAAoF;IACpF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjE,2CAA2C;IAC3C,aAAa,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAInG,wDAAwD;IACxD,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,qDAAqD;IACrD,SAAS,IAAI,WAAW;IAIxB,sDAAsD;IACtD,cAAc,IAAI,iBAAiB;CAGpC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EACV,SAAS,EACT,QAAQ,EACR,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,EACP,UAAU,GACX,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AACjI,YAAY,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,WAAW,EACX,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAGrB,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAW,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAS1D,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAelF;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,aAAa,CAA8B;IACnD,OAAO,CAAC,OAAO,CAAS;IACxB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE;;;OAGG;IACH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;gBAE7C,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM;IAyG7C,yBAAyB;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAuB5B,uCAAuC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,8BAA8B;IAC9B,SAAS,IAAI,OAAO;IAIpB,yBAAyB;IACzB,SAAS,IAAI;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpD,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB;IASD,wBAAwB;IACxB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAIrC,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,oFAAoF;IACpF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjE,2CAA2C;IAC3C,aAAa,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAInG,wDAAwD;IACxD,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,qDAAqD;IACrD,SAAS,IAAI,WAAW;IAIxB,sDAAsD;IACtD,cAAc,IAAI,iBAAiB;IAInC;;;;;OAKG;IACH,eAAe,IAAI,uBAAuB;IAI1C,wDAAwD;IACxD,cAAc,IAAI,WAAW,GAAG,IAAI;CAGrC"}