hackmyagent 0.7.1 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (333) hide show
  1. package/LICENSE +191 -0
  2. package/README.md +66 -28
  3. package/dist/arp/cli/index.d.ts +3 -0
  4. package/dist/arp/cli/index.d.ts.map +1 -0
  5. package/dist/arp/cli/index.js +219 -0
  6. package/dist/arp/cli/index.js.map +1 -0
  7. package/dist/arp/config/loader.d.ts +8 -0
  8. package/dist/arp/config/loader.d.ts.map +1 -0
  9. package/dist/arp/config/loader.js +102 -0
  10. package/dist/arp/config/loader.js.map +1 -0
  11. package/dist/arp/enforcement/kill-switch.d.ts +22 -0
  12. package/dist/arp/enforcement/kill-switch.d.ts.map +1 -0
  13. package/dist/arp/enforcement/kill-switch.js +122 -0
  14. package/dist/arp/enforcement/kill-switch.js.map +1 -0
  15. package/dist/arp/engine/event-engine.d.ts +29 -0
  16. package/dist/arp/engine/event-engine.d.ts.map +1 -0
  17. package/dist/arp/engine/event-engine.js +233 -0
  18. package/dist/arp/engine/event-engine.js.map +1 -0
  19. package/dist/arp/index.d.ts +81 -0
  20. package/dist/arp/index.d.ts.map +1 -0
  21. package/dist/arp/index.js +239 -0
  22. package/dist/arp/index.js.map +1 -0
  23. package/dist/arp/intelligence/adapters.d.ts +45 -0
  24. package/dist/arp/intelligence/adapters.d.ts.map +1 -0
  25. package/dist/arp/intelligence/adapters.js +222 -0
  26. package/dist/arp/intelligence/adapters.js.map +1 -0
  27. package/dist/arp/intelligence/anomaly.d.ts +32 -0
  28. package/dist/arp/intelligence/anomaly.d.ts.map +1 -0
  29. package/dist/arp/intelligence/anomaly.js +80 -0
  30. package/dist/arp/intelligence/anomaly.js.map +1 -0
  31. package/dist/arp/intelligence/budget.d.ts +33 -0
  32. package/dist/arp/intelligence/budget.d.ts.map +1 -0
  33. package/dist/arp/intelligence/budget.js +150 -0
  34. package/dist/arp/intelligence/budget.js.map +1 -0
  35. package/dist/arp/intelligence/coordinator.d.ts +43 -0
  36. package/dist/arp/intelligence/coordinator.d.ts.map +1 -0
  37. package/dist/arp/intelligence/coordinator.js +301 -0
  38. package/dist/arp/intelligence/coordinator.js.map +1 -0
  39. package/dist/arp/interceptors/a2a-protocol.d.ts +29 -0
  40. package/dist/arp/interceptors/a2a-protocol.d.ts.map +1 -0
  41. package/dist/arp/interceptors/a2a-protocol.js +111 -0
  42. package/dist/arp/interceptors/a2a-protocol.js.map +1 -0
  43. package/dist/arp/interceptors/filesystem.d.ts +33 -0
  44. package/dist/arp/interceptors/filesystem.d.ts.map +1 -0
  45. package/dist/arp/interceptors/filesystem.js +199 -0
  46. package/dist/arp/interceptors/filesystem.js.map +1 -0
  47. package/dist/arp/interceptors/mcp-protocol.d.ts +25 -0
  48. package/dist/arp/interceptors/mcp-protocol.d.ts.map +1 -0
  49. package/dist/arp/interceptors/mcp-protocol.js +126 -0
  50. package/dist/arp/interceptors/mcp-protocol.js.map +1 -0
  51. package/dist/arp/interceptors/network.d.ts +26 -0
  52. package/dist/arp/interceptors/network.d.ts.map +1 -0
  53. package/dist/arp/interceptors/network.js +146 -0
  54. package/dist/arp/interceptors/network.js.map +1 -0
  55. package/dist/arp/interceptors/process.d.ts +26 -0
  56. package/dist/arp/interceptors/process.d.ts.map +1 -0
  57. package/dist/arp/interceptors/process.js +157 -0
  58. package/dist/arp/interceptors/process.js.map +1 -0
  59. package/dist/arp/interceptors/prompt.d.ts +29 -0
  60. package/dist/arp/interceptors/prompt.d.ts.map +1 -0
  61. package/dist/arp/interceptors/prompt.js +82 -0
  62. package/dist/arp/interceptors/prompt.js.map +1 -0
  63. package/dist/arp/license/index.d.ts +59 -0
  64. package/dist/arp/license/index.d.ts.map +1 -0
  65. package/dist/arp/license/index.js +78 -0
  66. package/dist/arp/license/index.js.map +1 -0
  67. package/dist/arp/monitors/filesystem.d.ts +21 -0
  68. package/dist/arp/monitors/filesystem.d.ts.map +1 -0
  69. package/dist/arp/monitors/filesystem.js +141 -0
  70. package/dist/arp/monitors/filesystem.js.map +1 -0
  71. package/dist/arp/monitors/network.d.ts +32 -0
  72. package/dist/arp/monitors/network.d.ts.map +1 -0
  73. package/dist/arp/monitors/network.js +301 -0
  74. package/dist/arp/monitors/network.js.map +1 -0
  75. package/dist/arp/monitors/process.d.ts +24 -0
  76. package/dist/arp/monitors/process.d.ts.map +1 -0
  77. package/dist/arp/monitors/process.js +205 -0
  78. package/dist/arp/monitors/process.js.map +1 -0
  79. package/dist/arp/patterns/ai-threats.d.ts +48 -0
  80. package/dist/arp/patterns/ai-threats.d.ts.map +1 -0
  81. package/dist/arp/patterns/ai-threats.js +215 -0
  82. package/dist/arp/patterns/ai-threats.js.map +1 -0
  83. package/dist/arp/proxy/forward.d.ts +23 -0
  84. package/dist/arp/proxy/forward.d.ts.map +1 -0
  85. package/dist/arp/proxy/forward.js +152 -0
  86. package/dist/arp/proxy/forward.js.map +1 -0
  87. package/dist/arp/proxy/server.d.ts +45 -0
  88. package/dist/arp/proxy/server.d.ts.map +1 -0
  89. package/dist/arp/proxy/server.js +331 -0
  90. package/dist/arp/proxy/server.js.map +1 -0
  91. package/dist/arp/reporting/local-log.d.ts +22 -0
  92. package/dist/arp/reporting/local-log.d.ts.map +1 -0
  93. package/dist/arp/reporting/local-log.js +116 -0
  94. package/dist/arp/reporting/local-log.js.map +1 -0
  95. package/dist/arp/types.d.ts +230 -0
  96. package/dist/arp/types.d.ts.map +1 -0
  97. package/dist/arp/types.js +4 -0
  98. package/dist/arp/types.js.map +1 -0
  99. package/dist/attack/custom-payloads.d.ts +11 -0
  100. package/dist/attack/custom-payloads.d.ts.map +1 -0
  101. package/dist/attack/custom-payloads.js +108 -0
  102. package/dist/attack/custom-payloads.js.map +1 -0
  103. package/dist/attack/fail-policy.d.ts +16 -0
  104. package/dist/attack/fail-policy.d.ts.map +1 -0
  105. package/dist/attack/fail-policy.js +36 -0
  106. package/dist/attack/fail-policy.js.map +1 -0
  107. package/dist/attack/index.d.ts +12 -0
  108. package/dist/attack/index.d.ts.map +1 -0
  109. package/dist/attack/index.js +30 -0
  110. package/dist/attack/index.js.map +1 -0
  111. package/dist/attack/payloads/a2a-attacks.d.ts +12 -0
  112. package/dist/attack/payloads/a2a-attacks.d.ts.map +1 -0
  113. package/dist/attack/payloads/a2a-attacks.js +221 -0
  114. package/dist/attack/payloads/a2a-attacks.js.map +1 -0
  115. package/dist/attack/payloads/capability-abuse.d.ts +8 -0
  116. package/dist/attack/payloads/capability-abuse.d.ts.map +1 -0
  117. package/dist/attack/payloads/capability-abuse.js +222 -0
  118. package/dist/attack/payloads/capability-abuse.js.map +1 -0
  119. package/dist/attack/payloads/context-manipulation.d.ts +8 -0
  120. package/dist/attack/payloads/context-manipulation.d.ts.map +1 -0
  121. package/dist/attack/payloads/context-manipulation.js +217 -0
  122. package/dist/attack/payloads/context-manipulation.js.map +1 -0
  123. package/dist/attack/payloads/data-exfiltration.d.ts +8 -0
  124. package/dist/attack/payloads/data-exfiltration.d.ts.map +1 -0
  125. package/dist/attack/payloads/data-exfiltration.js +249 -0
  126. package/dist/attack/payloads/data-exfiltration.js.map +1 -0
  127. package/dist/attack/payloads/index.d.ts +29 -0
  128. package/dist/attack/payloads/index.d.ts.map +1 -0
  129. package/dist/attack/payloads/index.js +76 -0
  130. package/dist/attack/payloads/index.js.map +1 -0
  131. package/dist/attack/payloads/jailbreak.d.ts +8 -0
  132. package/dist/attack/payloads/jailbreak.d.ts.map +1 -0
  133. package/dist/attack/payloads/jailbreak.js +265 -0
  134. package/dist/attack/payloads/jailbreak.js.map +1 -0
  135. package/dist/attack/payloads/mcp-exploitation.d.ts +12 -0
  136. package/dist/attack/payloads/mcp-exploitation.d.ts.map +1 -0
  137. package/dist/attack/payloads/mcp-exploitation.js +221 -0
  138. package/dist/attack/payloads/mcp-exploitation.js.map +1 -0
  139. package/dist/attack/payloads/prompt-injection.d.ts +8 -0
  140. package/dist/attack/payloads/prompt-injection.d.ts.map +1 -0
  141. package/dist/attack/payloads/prompt-injection.js +262 -0
  142. package/dist/attack/payloads/prompt-injection.js.map +1 -0
  143. package/dist/attack/scanner.d.ts +84 -0
  144. package/dist/attack/scanner.d.ts.map +1 -0
  145. package/dist/attack/scanner.js +509 -0
  146. package/dist/attack/scanner.js.map +1 -0
  147. package/dist/attack/types.d.ts +153 -0
  148. package/dist/attack/types.d.ts.map +1 -0
  149. package/dist/attack/types.js +46 -0
  150. package/dist/attack/types.js.map +1 -0
  151. package/dist/benchmarks/index.d.ts +16 -0
  152. package/dist/benchmarks/index.d.ts.map +1 -0
  153. package/dist/benchmarks/index.js +27 -0
  154. package/dist/benchmarks/index.js.map +1 -0
  155. package/dist/benchmarks/oasb-1.d.ts +112 -0
  156. package/dist/benchmarks/oasb-1.d.ts.map +1 -0
  157. package/dist/benchmarks/oasb-1.js +1124 -0
  158. package/dist/benchmarks/oasb-1.js.map +1 -0
  159. package/dist/checker/check-skill.d.ts +48 -0
  160. package/dist/checker/check-skill.d.ts.map +1 -0
  161. package/dist/checker/check-skill.js +105 -0
  162. package/dist/checker/check-skill.js.map +1 -0
  163. package/dist/checker/index.d.ts +12 -0
  164. package/dist/checker/index.d.ts.map +1 -0
  165. package/dist/checker/index.js +16 -0
  166. package/dist/checker/index.js.map +1 -0
  167. package/dist/checker/permission-analyzer.d.ts +12 -0
  168. package/dist/checker/permission-analyzer.d.ts.map +1 -0
  169. package/dist/checker/permission-analyzer.js +84 -0
  170. package/dist/checker/permission-analyzer.js.map +1 -0
  171. package/dist/checker/publisher-verifier.d.ts +34 -0
  172. package/dist/checker/publisher-verifier.d.ts.map +1 -0
  173. package/dist/checker/publisher-verifier.js +121 -0
  174. package/dist/checker/publisher-verifier.js.map +1 -0
  175. package/dist/checker/skill-identifier.d.ts +14 -0
  176. package/dist/checker/skill-identifier.d.ts.map +1 -0
  177. package/dist/checker/skill-identifier.js +55 -0
  178. package/dist/checker/skill-identifier.js.map +1 -0
  179. package/dist/cli.d.ts +7 -0
  180. package/dist/cli.d.ts.map +1 -0
  181. package/dist/cli.js +3534 -0
  182. package/dist/cli.js.map +1 -0
  183. package/dist/hardening/index.d.ts +7 -0
  184. package/dist/hardening/index.d.ts.map +1 -0
  185. package/dist/hardening/index.js +9 -0
  186. package/dist/hardening/index.js.map +1 -0
  187. package/dist/hardening/scanner.d.ts +147 -0
  188. package/dist/hardening/scanner.d.ts.map +1 -0
  189. package/dist/hardening/scanner.js +5445 -0
  190. package/dist/hardening/scanner.js.map +1 -0
  191. package/dist/hardening/security-check.d.ts +85 -0
  192. package/dist/hardening/security-check.d.ts.map +1 -0
  193. package/dist/hardening/security-check.js +6 -0
  194. package/dist/hardening/security-check.js.map +1 -0
  195. package/dist/index.d.ts +38 -4
  196. package/dist/index.d.ts.map +1 -1
  197. package/dist/index.js +91 -3509
  198. package/dist/index.js.map +1 -1
  199. package/dist/mcp-server.js +10 -10
  200. package/dist/mcp-server.js.map +1 -1
  201. package/dist/oasb/config/dvaa-targets.d.ts +13 -0
  202. package/dist/oasb/config/dvaa-targets.d.ts.map +1 -0
  203. package/dist/oasb/config/dvaa-targets.js +89 -0
  204. package/dist/oasb/config/dvaa-targets.js.map +1 -0
  205. package/dist/oasb/harness/arp-wrapper.d.ts +29 -0
  206. package/dist/oasb/harness/arp-wrapper.d.ts.map +1 -0
  207. package/dist/oasb/harness/arp-wrapper.js +134 -0
  208. package/dist/oasb/harness/arp-wrapper.js.map +1 -0
  209. package/dist/oasb/harness/dvaa-client.d.ts +46 -0
  210. package/dist/oasb/harness/dvaa-client.d.ts.map +1 -0
  211. package/dist/oasb/harness/dvaa-client.js +98 -0
  212. package/dist/oasb/harness/dvaa-client.js.map +1 -0
  213. package/dist/oasb/harness/dvaa-manager.d.ts +17 -0
  214. package/dist/oasb/harness/dvaa-manager.d.ts.map +1 -0
  215. package/dist/oasb/harness/dvaa-manager.js +132 -0
  216. package/dist/oasb/harness/dvaa-manager.js.map +1 -0
  217. package/dist/oasb/harness/event-collector.d.ts +33 -0
  218. package/dist/oasb/harness/event-collector.d.ts.map +1 -0
  219. package/dist/oasb/harness/event-collector.js +86 -0
  220. package/dist/oasb/harness/event-collector.js.map +1 -0
  221. package/dist/oasb/harness/metrics.d.ts +14 -0
  222. package/dist/oasb/harness/metrics.d.ts.map +1 -0
  223. package/dist/oasb/harness/metrics.js +56 -0
  224. package/dist/oasb/harness/metrics.js.map +1 -0
  225. package/dist/oasb/harness/mock-llm-adapter.d.ts +34 -0
  226. package/dist/oasb/harness/mock-llm-adapter.d.ts.map +1 -0
  227. package/dist/oasb/harness/mock-llm-adapter.js +69 -0
  228. package/dist/oasb/harness/mock-llm-adapter.js.map +1 -0
  229. package/dist/oasb/harness/types.d.ts +74 -0
  230. package/dist/oasb/harness/types.d.ts.map +1 -0
  231. package/dist/oasb/harness/types.js +3 -0
  232. package/dist/oasb/harness/types.js.map +1 -0
  233. package/dist/plugins/core.d.ts +109 -0
  234. package/dist/plugins/core.d.ts.map +1 -0
  235. package/dist/plugins/core.js +30 -0
  236. package/dist/plugins/core.js.map +1 -0
  237. package/dist/plugins/credvault.d.ts +22 -0
  238. package/dist/plugins/credvault.d.ts.map +1 -0
  239. package/dist/plugins/credvault.js +374 -0
  240. package/dist/plugins/credvault.js.map +1 -0
  241. package/dist/plugins/signcrypt.d.ts +27 -0
  242. package/dist/plugins/signcrypt.d.ts.map +1 -0
  243. package/dist/plugins/signcrypt.js +317 -0
  244. package/dist/plugins/signcrypt.js.map +1 -0
  245. package/dist/plugins/skillguard.d.ts +25 -0
  246. package/dist/plugins/skillguard.d.ts.map +1 -0
  247. package/dist/plugins/skillguard.js +346 -0
  248. package/dist/plugins/skillguard.js.map +1 -0
  249. package/dist/registry/client.d.ts +125 -0
  250. package/dist/registry/client.d.ts.map +1 -0
  251. package/dist/registry/client.js +308 -0
  252. package/dist/registry/client.js.map +1 -0
  253. package/dist/registry/index.d.ts +3 -0
  254. package/dist/registry/index.d.ts.map +1 -0
  255. package/dist/registry/index.js +10 -0
  256. package/dist/registry/index.js.map +1 -0
  257. package/dist/scanner/external-scanner.d.ts +13 -0
  258. package/dist/scanner/external-scanner.d.ts.map +1 -0
  259. package/dist/scanner/external-scanner.js +299 -0
  260. package/dist/scanner/external-scanner.js.map +1 -0
  261. package/dist/scanner/index.d.ts +6 -0
  262. package/dist/scanner/index.d.ts.map +1 -0
  263. package/dist/scanner/index.js +9 -0
  264. package/dist/scanner/index.js.map +1 -0
  265. package/dist/scanner/types.d.ts +32 -0
  266. package/dist/scanner/types.d.ts.map +1 -0
  267. package/dist/scanner/types.js +6 -0
  268. package/dist/scanner/types.js.map +1 -0
  269. package/dist/semantic/deep-scan.d.ts +13 -0
  270. package/dist/semantic/deep-scan.d.ts.map +1 -0
  271. package/dist/semantic/deep-scan.js +63 -0
  272. package/dist/semantic/deep-scan.js.map +1 -0
  273. package/dist/semantic/index.d.ts +17 -0
  274. package/dist/semantic/index.d.ts.map +1 -0
  275. package/dist/semantic/index.js +39 -0
  276. package/dist/semantic/index.js.map +1 -0
  277. package/dist/semantic/integration/cost-estimator.d.ts +17 -0
  278. package/dist/semantic/integration/cost-estimator.d.ts.map +1 -0
  279. package/dist/semantic/integration/cost-estimator.js +54 -0
  280. package/dist/semantic/integration/cost-estimator.js.map +1 -0
  281. package/dist/semantic/integration/finding-adapter.d.ts +34 -0
  282. package/dist/semantic/integration/finding-adapter.d.ts.map +1 -0
  283. package/dist/semantic/integration/finding-adapter.js +41 -0
  284. package/dist/semantic/integration/finding-adapter.js.map +1 -0
  285. package/dist/semantic/integration/oasb-upgrader.d.ts +20 -0
  286. package/dist/semantic/integration/oasb-upgrader.d.ts.map +1 -0
  287. package/dist/semantic/integration/oasb-upgrader.js +47 -0
  288. package/dist/semantic/integration/oasb-upgrader.js.map +1 -0
  289. package/dist/semantic/llm/budget.d.ts +50 -0
  290. package/dist/semantic/llm/budget.d.ts.map +1 -0
  291. package/dist/semantic/llm/budget.js +139 -0
  292. package/dist/semantic/llm/budget.js.map +1 -0
  293. package/dist/semantic/llm/cache.d.ts +36 -0
  294. package/dist/semantic/llm/cache.d.ts.map +1 -0
  295. package/dist/semantic/llm/cache.js +103 -0
  296. package/dist/semantic/llm/cache.js.map +1 -0
  297. package/dist/semantic/llm/client.d.ts +49 -0
  298. package/dist/semantic/llm/client.d.ts.map +1 -0
  299. package/dist/semantic/llm/client.js +64 -0
  300. package/dist/semantic/llm/client.js.map +1 -0
  301. package/dist/semantic/llm/index.d.ts +33 -0
  302. package/dist/semantic/llm/index.d.ts.map +1 -0
  303. package/dist/semantic/llm/index.js +129 -0
  304. package/dist/semantic/llm/index.js.map +1 -0
  305. package/dist/semantic/llm/prompts.d.ts +30 -0
  306. package/dist/semantic/llm/prompts.d.ts.map +1 -0
  307. package/dist/semantic/llm/prompts.js +120 -0
  308. package/dist/semantic/llm/prompts.js.map +1 -0
  309. package/dist/semantic/structural/credential-context.d.ts +14 -0
  310. package/dist/semantic/structural/credential-context.d.ts.map +1 -0
  311. package/dist/semantic/structural/credential-context.js +295 -0
  312. package/dist/semantic/structural/credential-context.js.map +1 -0
  313. package/dist/semantic/structural/index.d.ts +28 -0
  314. package/dist/semantic/structural/index.d.ts.map +1 -0
  315. package/dist/semantic/structural/index.js +138 -0
  316. package/dist/semantic/structural/index.js.map +1 -0
  317. package/dist/semantic/structural/instruction.d.ts +19 -0
  318. package/dist/semantic/structural/instruction.d.ts.map +1 -0
  319. package/dist/semantic/structural/instruction.js +167 -0
  320. package/dist/semantic/structural/instruction.js.map +1 -0
  321. package/dist/semantic/structural/mcp-config.d.ts +22 -0
  322. package/dist/semantic/structural/mcp-config.d.ts.map +1 -0
  323. package/dist/semantic/structural/mcp-config.js +294 -0
  324. package/dist/semantic/structural/mcp-config.js.map +1 -0
  325. package/dist/semantic/structural/permission-model.d.ts +16 -0
  326. package/dist/semantic/structural/permission-model.d.ts.map +1 -0
  327. package/dist/semantic/structural/permission-model.js +121 -0
  328. package/dist/semantic/structural/permission-model.js.map +1 -0
  329. package/dist/semantic/types.d.ts +122 -0
  330. package/dist/semantic/types.d.ts.map +1 -0
  331. package/dist/semantic/types.js +10 -0
  332. package/dist/semantic/types.js.map +1 -0
  333. package/package.json +25 -14
@@ -0,0 +1,102 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.loadConfig = loadConfig;
37
+ exports.defaultConfig = defaultConfig;
38
+ const fs = __importStar(require("fs"));
39
+ const path = __importStar(require("path"));
40
+ /**
41
+ * Load ARP config from YAML or JSON file.
42
+ * Falls back to sensible defaults if no config found.
43
+ */
44
+ function loadConfig(configPath) {
45
+ if (configPath) {
46
+ return parseConfigFile(configPath);
47
+ }
48
+ // Auto-discover config
49
+ const candidates = [
50
+ 'arp.yaml', 'arp.yml', 'arp.json',
51
+ '.opena2a/arp.yaml', '.opena2a/arp.yml', '.opena2a/arp.json',
52
+ ];
53
+ for (const candidate of candidates) {
54
+ const fullPath = path.resolve(process.cwd(), candidate);
55
+ if (fs.existsSync(fullPath)) {
56
+ return parseConfigFile(fullPath);
57
+ }
58
+ }
59
+ return defaultConfig();
60
+ }
61
+ function parseConfigFile(filePath) {
62
+ const content = fs.readFileSync(filePath, 'utf-8');
63
+ const ext = path.extname(filePath).toLowerCase();
64
+ if (ext === '.json') {
65
+ return { ...defaultConfig(), ...JSON.parse(content) };
66
+ }
67
+ // YAML parsing (dynamic import to keep it optional)
68
+ try {
69
+ const yaml = require('js-yaml');
70
+ return { ...defaultConfig(), ...yaml.load(content) };
71
+ }
72
+ catch {
73
+ throw new Error(`Failed to parse config: ${filePath}. Install js-yaml for YAML support.`);
74
+ }
75
+ }
76
+ function defaultConfig() {
77
+ return {
78
+ agentName: path.basename(process.cwd()),
79
+ agentDescription: undefined,
80
+ declaredCapabilities: [],
81
+ dataDir: path.join(process.cwd(), '.opena2a', 'arp'),
82
+ monitors: {
83
+ process: { enabled: true, intervalMs: 5000 },
84
+ network: { enabled: true, intervalMs: 10000 },
85
+ filesystem: { enabled: true },
86
+ skill: { enabled: false },
87
+ heartbeat: { enabled: false },
88
+ },
89
+ rules: [],
90
+ intelligence: {
91
+ enabled: true,
92
+ adapter: 'agent-proxy',
93
+ budgetUsd: 5.0,
94
+ maxTokensPerCall: 300,
95
+ maxCallsPerHour: 20,
96
+ minSeverityForLlm: 'medium',
97
+ enableBatching: true,
98
+ batchWindowMs: 300000,
99
+ },
100
+ };
101
+ }
102
+ //# sourceMappingURL=loader.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/arp/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,gCAmBC;AAmBD,sCAyBC;AAvED,uCAAyB;AACzB,2CAA6B;AAG7B;;;GAGG;AACH,SAAgB,UAAU,CAAC,UAAmB;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,SAAS,EAAE,UAAU;QACjC,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB;KAC7D,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,qCAAqC,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,gBAAgB,EAAE,SAAS;QAC3B,oBAAoB,EAAE,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC;QACpD,QAAQ,EAAE;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;YAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;YAC7C,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACzB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC9B;QACD,KAAK,EAAE,EAAE;QACT,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,GAAG;YACrB,eAAe,EAAE,EAAE;YACnB,iBAAiB,EAAE,QAAQ;YAC3B,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,MAAM;SACtB;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,22 @@
1
+ import type { EnforcementAction, EnforcementResult, ARPEvent } from '../types';
2
+ export type AlertCallback = (event: ARPEvent, result: EnforcementResult) => void | Promise<void>;
3
+ /**
4
+ * Enforcement engine — executes actions on agent processes.
5
+ * Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
6
+ */
7
+ export declare class EnforcementEngine {
8
+ private paused;
9
+ private onAlert?;
10
+ constructor(onAlert?: AlertCallback);
11
+ /** Register or replace the alert callback */
12
+ setAlertCallback(callback: AlertCallback): void;
13
+ /** Execute an enforcement action */
14
+ execute(action: EnforcementAction, event: ARPEvent, targetPid?: number): Promise<EnforcementResult>;
15
+ /** Resume a paused process */
16
+ resume(pid: number): boolean;
17
+ /** Get list of paused PIDs */
18
+ getPausedPids(): number[];
19
+ private pauseProcess;
20
+ private killProcess;
21
+ }
22
+ //# sourceMappingURL=kill-switch.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"kill-switch.d.ts","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE/E,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjG;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;gBAEpB,OAAO,CAAC,EAAE,aAAa;IAInC,6CAA6C;IAC7C,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,oCAAoC;IAC9B,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BzG,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAY5B,8BAA8B;IAC9B,aAAa,IAAI,MAAM,EAAE;IAIzB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,WAAW;CAqCpB"}
@@ -0,0 +1,122 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.EnforcementEngine = void 0;
4
+ /**
5
+ * Enforcement engine — executes actions on agent processes.
6
+ * Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
7
+ */
8
+ class EnforcementEngine {
9
+ constructor(onAlert) {
10
+ this.paused = new Set();
11
+ this.onAlert = onAlert;
12
+ }
13
+ /** Register or replace the alert callback */
14
+ setAlertCallback(callback) {
15
+ this.onAlert = callback;
16
+ }
17
+ /** Execute an enforcement action */
18
+ async execute(action, event, targetPid) {
19
+ const pid = targetPid ?? event.data.pid;
20
+ switch (action) {
21
+ case 'log':
22
+ return { action, success: true, reason: 'Event logged', event };
23
+ case 'alert': {
24
+ const result = { action, success: true, reason: `Alert raised: ${event.description}`, event };
25
+ if (this.onAlert) {
26
+ try {
27
+ await this.onAlert(event, result);
28
+ }
29
+ catch { /* callback errors don't block enforcement */ }
30
+ }
31
+ return result;
32
+ }
33
+ case 'pause':
34
+ return this.pauseProcess(pid, event);
35
+ case 'kill':
36
+ return this.killProcess(pid, event);
37
+ default:
38
+ return { action, success: false, reason: `Unknown action: ${action}`, event };
39
+ }
40
+ }
41
+ /** Resume a paused process */
42
+ resume(pid) {
43
+ if (!this.paused.has(pid))
44
+ return false;
45
+ try {
46
+ process.kill(pid, 'SIGCONT');
47
+ this.paused.delete(pid);
48
+ return true;
49
+ }
50
+ catch {
51
+ this.paused.delete(pid);
52
+ return false;
53
+ }
54
+ }
55
+ /** Get list of paused PIDs */
56
+ getPausedPids() {
57
+ return Array.from(this.paused);
58
+ }
59
+ pauseProcess(pid, event) {
60
+ if (!pid) {
61
+ return { action: 'pause', success: false, reason: 'No PID to pause', event };
62
+ }
63
+ try {
64
+ process.kill(pid, 'SIGSTOP');
65
+ this.paused.add(pid);
66
+ return {
67
+ action: 'pause',
68
+ targetPid: pid,
69
+ success: true,
70
+ reason: `Paused PID ${pid}: ${event.description}`,
71
+ event,
72
+ };
73
+ }
74
+ catch (err) {
75
+ return {
76
+ action: 'pause',
77
+ targetPid: pid,
78
+ success: false,
79
+ reason: `Failed to pause PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
80
+ event,
81
+ };
82
+ }
83
+ }
84
+ killProcess(pid, event) {
85
+ if (!pid) {
86
+ return { action: 'kill', success: false, reason: 'No PID to kill', event };
87
+ }
88
+ try {
89
+ // Graceful first
90
+ process.kill(pid, 'SIGTERM');
91
+ // Give 5 seconds, then force kill
92
+ setTimeout(() => {
93
+ try {
94
+ process.kill(pid, 0); // Check if still alive
95
+ process.kill(pid, 'SIGKILL');
96
+ }
97
+ catch {
98
+ // Already dead — good
99
+ }
100
+ }, 5000).unref();
101
+ this.paused.delete(pid);
102
+ return {
103
+ action: 'kill',
104
+ targetPid: pid,
105
+ success: true,
106
+ reason: `Killed PID ${pid}: ${event.description}`,
107
+ event,
108
+ };
109
+ }
110
+ catch (err) {
111
+ return {
112
+ action: 'kill',
113
+ targetPid: pid,
114
+ success: false,
115
+ reason: `Failed to kill PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
116
+ event,
117
+ };
118
+ }
119
+ }
120
+ }
121
+ exports.EnforcementEngine = EnforcementEngine;
122
+ //# sourceMappingURL=kill-switch.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":";;;AAIA;;;GAGG;AACH,MAAa,iBAAiB;IAI5B,YAAY,OAAuB;QAH3B,WAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAIjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,6CAA6C;IAC7C,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,OAAO,CAAC,MAAyB,EAAE,KAAe,EAAE,SAAkB;QAC1E,MAAM,GAAG,GAAG,SAAS,IAAK,KAAK,CAAC,IAAI,CAAC,GAA0B,CAAC;QAEhE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAElE,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC;gBACjH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;gBACpG,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEvC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEtC;gBACE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,GAAuB,EAAE,KAAe;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACzF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAuB,EAAE,KAAe;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAE7B,kCAAkC;YAClC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB;oBAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAEjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACxF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAzHD,8CAyHC"}
@@ -0,0 +1,29 @@
1
+ import type { ARPEvent, ARPConfig, EventSeverity, EventCategory, EnforcementResult } from '../types';
2
+ type EventHandler = (event: ARPEvent) => void | Promise<void>;
3
+ type EnforcementHandler = (result: EnforcementResult) => void | Promise<void>;
4
+ /**
5
+ * Central event bus — receives events from monitors, evaluates rules,
6
+ * decides enforcement actions. The "brain" between monitors and enforcement.
7
+ */
8
+ export declare class EventEngine {
9
+ private handlers;
10
+ private enforcementHandlers;
11
+ private rules;
12
+ private eventBuffer;
13
+ private readonly maxBufferSize;
14
+ constructor(config: ARPConfig);
15
+ /** Register a handler for all events (for logging, reporting, etc.) */
16
+ onEvent(handler: EventHandler): void;
17
+ /** Register a handler for enforcement actions */
18
+ onEnforcement(handler: EnforcementHandler): void;
19
+ /** Emit an event from a monitor — evaluates rules and triggers actions */
20
+ emit(event: Omit<ARPEvent, 'id' | 'timestamp' | 'classifiedBy'>): Promise<ARPEvent>;
21
+ /** Update an event's classification (called by L1/L2 after re-analysis) */
22
+ reclassify(event: ARPEvent, newCategory: EventCategory, newSeverity: EventSeverity, classifiedBy: ARPEvent['classifiedBy']): ARPEvent;
23
+ /** Get recent events matching criteria (for threshold evaluation) */
24
+ getRecentEvents(windowMs: number, source?: string): ARPEvent[];
25
+ private evaluateRules;
26
+ private ruleMatches;
27
+ }
28
+ export {};
29
+ //# sourceMappingURL=event-engine.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"event-engine.d.ts","sourceRoot":"","sources":["../../../src/arp/engine/event-engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EAET,aAAa,EACb,aAAa,EAEb,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAElB,KAAK,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAQ9E;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,SAAS;IAI7B,uEAAuE;IACvE,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIpC,iDAAiD;IACjD,aAAa,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIhD,0EAA0E;IACpE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,cAAc,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsDzF,2EAA2E;IAC3E,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,QAAQ;IAOrI,qEAAqE;IACrE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAU9D,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,WAAW;CAwBpB"}
@@ -0,0 +1,233 @@
1
+ "use strict";
2
+ var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
3
+ if (k2 === undefined) k2 = k;
4
+ var desc = Object.getOwnPropertyDescriptor(m, k);
5
+ if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
6
+ desc = { enumerable: true, get: function() { return m[k]; } };
7
+ }
8
+ Object.defineProperty(o, k2, desc);
9
+ }) : (function(o, m, k, k2) {
10
+ if (k2 === undefined) k2 = k;
11
+ o[k2] = m[k];
12
+ }));
13
+ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
14
+ Object.defineProperty(o, "default", { enumerable: true, value: v });
15
+ }) : function(o, v) {
16
+ o["default"] = v;
17
+ });
18
+ var __importStar = (this && this.__importStar) || (function () {
19
+ var ownKeys = function(o) {
20
+ ownKeys = Object.getOwnPropertyNames || function (o) {
21
+ var ar = [];
22
+ for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
23
+ return ar;
24
+ };
25
+ return ownKeys(o);
26
+ };
27
+ return function (mod) {
28
+ if (mod && mod.__esModule) return mod;
29
+ var result = {};
30
+ if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
31
+ __setModuleDefault(result, mod);
32
+ return result;
33
+ };
34
+ })();
35
+ Object.defineProperty(exports, "__esModule", { value: true });
36
+ exports.EventEngine = void 0;
37
+ const crypto = __importStar(require("crypto"));
38
+ const SEVERITY_ORDER = ['info', 'low', 'medium', 'high', 'critical'];
39
+ function severityGte(a, b) {
40
+ return SEVERITY_ORDER.indexOf(a) >= SEVERITY_ORDER.indexOf(b);
41
+ }
42
+ /**
43
+ * Central event bus — receives events from monitors, evaluates rules,
44
+ * decides enforcement actions. The "brain" between monitors and enforcement.
45
+ */
46
+ class EventEngine {
47
+ constructor(config) {
48
+ this.handlers = [];
49
+ this.enforcementHandlers = [];
50
+ this.eventBuffer = [];
51
+ this.maxBufferSize = 10000;
52
+ this.rules = config.rules ?? defaultRules();
53
+ }
54
+ /** Register a handler for all events (for logging, reporting, etc.) */
55
+ onEvent(handler) {
56
+ this.handlers.push(handler);
57
+ }
58
+ /** Register a handler for enforcement actions */
59
+ onEnforcement(handler) {
60
+ this.enforcementHandlers.push(handler);
61
+ }
62
+ /** Emit an event from a monitor — evaluates rules and triggers actions */
63
+ async emit(event) {
64
+ const fullEvent = {
65
+ ...event,
66
+ id: crypto.randomUUID(),
67
+ timestamp: new Date().toISOString(),
68
+ classifiedBy: 'L0-rules',
69
+ };
70
+ // Buffer for threshold rules
71
+ this.eventBuffer.push(fullEvent);
72
+ if (this.eventBuffer.length > this.maxBufferSize) {
73
+ this.eventBuffer = this.eventBuffer.slice(-this.maxBufferSize / 2);
74
+ }
75
+ // Notify all event handlers
76
+ for (const handler of this.handlers) {
77
+ try {
78
+ await handler(fullEvent);
79
+ }
80
+ catch {
81
+ // Handler errors don't block the pipeline
82
+ }
83
+ }
84
+ // Evaluate rules
85
+ const matchedRules = this.evaluateRules(fullEvent);
86
+ for (const rule of matchedRules) {
87
+ // If rule requires LLM confirmation, emit a pending-confirmation event
88
+ // and skip immediate enforcement (L2 will handle it later)
89
+ if (rule.requireLlmConfirmation) {
90
+ fullEvent.data._pendingConfirmation = true;
91
+ fullEvent.data._pendingAction = rule.action;
92
+ fullEvent.data._pendingRule = rule.name;
93
+ continue;
94
+ }
95
+ const result = {
96
+ action: rule.action,
97
+ success: true,
98
+ reason: `Rule "${rule.name}" matched: ${fullEvent.description}`,
99
+ event: fullEvent,
100
+ };
101
+ for (const handler of this.enforcementHandlers) {
102
+ try {
103
+ await handler(result);
104
+ }
105
+ catch {
106
+ // Enforcement handler errors don't block
107
+ }
108
+ }
109
+ }
110
+ return fullEvent;
111
+ }
112
+ /** Update an event's classification (called by L1/L2 after re-analysis) */
113
+ reclassify(event, newCategory, newSeverity, classifiedBy) {
114
+ event.category = newCategory;
115
+ event.severity = newSeverity;
116
+ event.classifiedBy = classifiedBy;
117
+ return event;
118
+ }
119
+ /** Get recent events matching criteria (for threshold evaluation) */
120
+ getRecentEvents(windowMs, source) {
121
+ const cutoff = Date.now() - windowMs;
122
+ return this.eventBuffer.filter((e) => {
123
+ const eventTime = new Date(e.timestamp).getTime();
124
+ if (eventTime < cutoff)
125
+ return false;
126
+ if (source && e.source !== source)
127
+ return false;
128
+ return true;
129
+ });
130
+ }
131
+ evaluateRules(event) {
132
+ const matched = [];
133
+ for (const rule of this.rules) {
134
+ if (this.ruleMatches(rule, event)) {
135
+ matched.push(rule);
136
+ }
137
+ }
138
+ return matched;
139
+ }
140
+ ruleMatches(rule, event) {
141
+ const c = rule.condition;
142
+ if (c.source && c.source !== event.source)
143
+ return false;
144
+ if (c.category && c.category !== event.category)
145
+ return false;
146
+ if (c.minSeverity && !severityGte(event.severity, c.minSeverity))
147
+ return false;
148
+ // Field matching
149
+ if (c.fieldMatch) {
150
+ for (const [key, pattern] of Object.entries(c.fieldMatch)) {
151
+ const value = getNestedValue(event, key);
152
+ if (value === undefined)
153
+ return false;
154
+ if (!matchPattern(String(value), pattern))
155
+ return false;
156
+ }
157
+ }
158
+ // Threshold
159
+ if (c.threshold) {
160
+ const recent = this.getRecentEvents(c.threshold.windowMs, c.source);
161
+ if (recent.length < c.threshold.count)
162
+ return false;
163
+ }
164
+ return true;
165
+ }
166
+ }
167
+ exports.EventEngine = EventEngine;
168
+ function getNestedValue(obj, path) {
169
+ const parts = path.split('.');
170
+ let current = obj;
171
+ for (const part of parts) {
172
+ if (current === null || current === undefined || typeof current !== 'object')
173
+ return undefined;
174
+ current = current[part];
175
+ }
176
+ return current;
177
+ }
178
+ function matchPattern(value, pattern) {
179
+ // Simple glob matching: * matches any sequence
180
+ const regex = new RegExp('^' + pattern.replace(/[.*+?^${}()|[\]\\]/g, '\\$&').replace(/\\\*/g, '.*') + '$');
181
+ return regex.test(value);
182
+ }
183
+ /** Default rules — sensible security defaults */
184
+ function defaultRules() {
185
+ return [
186
+ {
187
+ name: 'critical-threat',
188
+ condition: { category: 'threat', minSeverity: 'critical' },
189
+ action: 'kill',
190
+ requireLlmConfirmation: true,
191
+ },
192
+ {
193
+ name: 'high-violation',
194
+ condition: { category: 'violation', minSeverity: 'high' },
195
+ action: 'alert',
196
+ },
197
+ {
198
+ name: 'anomaly-burst',
199
+ condition: {
200
+ category: 'anomaly',
201
+ threshold: { count: 10, windowMs: 60000 },
202
+ },
203
+ action: 'alert',
204
+ requireLlmConfirmation: true,
205
+ },
206
+ // AI-layer default rules
207
+ {
208
+ name: 'prompt-injection-detected',
209
+ condition: { source: 'prompt', category: 'threat', minSeverity: 'high' },
210
+ action: 'alert',
211
+ },
212
+ {
213
+ name: 'credential-leak-detected',
214
+ condition: {
215
+ source: 'prompt',
216
+ category: 'threat',
217
+ fieldMatch: { 'data.patternId': 'OL-001' },
218
+ },
219
+ action: 'alert',
220
+ },
221
+ {
222
+ name: 'mcp-exploitation-detected',
223
+ condition: { source: 'mcp-protocol', category: 'threat', minSeverity: 'high' },
224
+ action: 'alert',
225
+ },
226
+ {
227
+ name: 'a2a-spoofing-detected',
228
+ condition: { source: 'a2a-protocol', category: 'threat', minSeverity: 'high' },
229
+ action: 'alert',
230
+ },
231
+ ];
232
+ }
233
+ //# sourceMappingURL=event-engine.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"event-engine.js","sourceRoot":"","sources":["../../../src/arp/engine/event-engine.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AAcjC,MAAM,cAAc,GAAoB,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEtF,SAAS,WAAW,CAAC,CAAgB,EAAE,CAAgB;IACrD,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAa,WAAW;IAOtB,YAAY,MAAiB;QANrB,aAAQ,GAAmB,EAAE,CAAC;QAC9B,wBAAmB,GAAyB,EAAE,CAAC;QAE/C,gBAAW,GAAe,EAAE,CAAC;QACpB,kBAAa,GAAG,KAAK,CAAC;QAGrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,YAAY,EAAE,CAAC;IAC9C,CAAC;IAED,uEAAuE;IACvE,OAAO,CAAC,OAAqB;QAC3B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED,iDAAiD;IACjD,aAAa,CAAC,OAA2B;QACvC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,IAAI,CAAC,KAA0D;QACnE,MAAM,SAAS,GAAa;YAC1B,GAAG,KAAK;YACR,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE;YACvB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,UAAU;SACzB,CAAC;QAEF,6BAA6B;QAC7B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,4BAA4B;QAC5B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;YAC3B,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;QAED,iBAAiB;QACjB,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,uEAAuE;YACvE,2DAA2D;YAC3D,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;gBAChC,SAAS,CAAC,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC5C,SAAS,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC;gBACxC,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAsB;gBAChC,MAAM,EAAE,IAAI,CAAC,MAA2B;gBACxC,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,cAAc,SAAS,CAAC,WAAW,EAAE;gBAC/D,KAAK,EAAE,SAAS;aACjB,CAAC;YAEF,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC/C,IAAI,CAAC;oBACH,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;gBACxB,CAAC;gBAAC,MAAM,CAAC;oBACP,yCAAyC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,2EAA2E;IAC3E,UAAU,CAAC,KAAe,EAAE,WAA0B,EAAE,WAA0B,EAAE,YAAsC;QACxH,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC7B,KAAK,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC7B,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,qEAAqE;IACrE,eAAe,CAAC,QAAgB,EAAE,MAAe;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC;QACrC,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACnC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAClD,IAAI,SAAS,GAAG,MAAM;gBAAE,OAAO,KAAK,CAAC;YACrC,IAAI,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,OAAO,KAAK,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,KAAe;QACnC,MAAM,OAAO,GAAgB,EAAE,CAAC;QAEhC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,WAAW,CAAC,IAAe,EAAE,KAAe;QAClD,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;QAEzB,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/E,iBAAiB;QACjB,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YACjB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1D,MAAM,KAAK,GAAG,cAAc,CAAC,KAA2C,EAAE,GAAG,CAAC,CAAC;gBAC/E,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;oBAAE,OAAO,KAAK,CAAC;YAC1D,CAAC;QACH,CAAC;QAED,YAAY;QACZ,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACpE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAnID,kCAmIC;AAED,SAAS,cAAc,CAAC,GAA4B,EAAE,IAAY;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC/F,OAAO,GAAI,OAAmC,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa,EAAE,OAAe;IAClD,+CAA+C;IAC/C,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,GAAG,CAClF,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,iDAAiD;AACjD,SAAS,YAAY;IACnB,OAAO;QACL;YACE,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,sBAAsB,EAAE,IAAI;SAC7B;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,SAAS,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE;YACzD,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE;gBACT,QAAQ,EAAE,SAAS;gBACnB,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC1C;YACD,MAAM,EAAE,OAAO;YACf,sBAAsB,EAAE,IAAI;SAC7B;QACD,yBAAyB;QACzB;YACE,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YACxE,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE;gBACT,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,UAAU,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE;aAC3C;YACD,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,2BAA2B;YACjC,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YAC9E,MAAM,EAAE,OAAO;SAChB;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE;YAC9E,MAAM,EAAE,OAAO;SAChB;KACF,CAAC;AACJ,CAAC"}
@@ -0,0 +1,81 @@
1
+ export declare const VERSION = "0.2.0";
2
+ export type { ARPConfig, ARPEvent, MonitorType, EventCategory, EventSeverity, LLMAdapter, LLMAdapterType, LLMAssessment, LLMResponse, IntelligenceConfig, BudgetState, AlertRule, AlertCondition, MonitorConfig, InterceptorConfig, AILayerConfig, ProxyConfig, ProxyUpstream, EnforcementAction, EnforcementResult, Monitor, } from './types';
3
+ export { EventEngine } from './engine/event-engine';
4
+ export { IntelligenceCoordinator } from './intelligence/coordinator';
5
+ export { BudgetController } from './intelligence/budget';
6
+ export { AnomalyDetector } from './intelligence/anomaly';
7
+ export { AnthropicAdapter, OpenAIAdapter, OllamaAdapter, createAdapter, autoDetectAdapter } from './intelligence/adapters';
8
+ export { ProcessMonitor } from './monitors/process';
9
+ export { NetworkMonitor } from './monitors/network';
10
+ export { FilesystemMonitor } from './monitors/filesystem';
11
+ export { ProcessInterceptor } from './interceptors/process';
12
+ export { NetworkInterceptor } from './interceptors/network';
13
+ export { FilesystemInterceptor } from './interceptors/filesystem';
14
+ export { PromptInterceptor } from './interceptors/prompt';
15
+ export { MCPProtocolInterceptor } from './interceptors/mcp-protocol';
16
+ export { A2AProtocolInterceptor } from './interceptors/a2a-protocol';
17
+ export { EnforcementEngine, type AlertCallback } from './enforcement/kill-switch';
18
+ export { LocalLogger } from './reporting/local-log';
19
+ export { loadConfig, defaultConfig } from './config/loader';
20
+ export { scanText, PATTERN_SETS, ALL_PATTERNS, type ThreatPattern, type ScanResult } from './patterns/ai-threats';
21
+ export { ARPProxy, type ARPProxyDeps } from './proxy/server';
22
+ export { checkLicense, hasFeature, registerLicenseValidator, PREMIUM_FEATURES, type LicenseTier, type LicenseInfo, } from './license';
23
+ import type { ARPConfig, ARPEvent } from './types';
24
+ import { EventEngine } from './engine/event-engine';
25
+ import { IntelligenceCoordinator } from './intelligence/coordinator';
26
+ import { EnforcementEngine, type AlertCallback } from './enforcement/kill-switch';
27
+ /**
28
+ * Agent Runtime Protection — the main entry point.
29
+ *
30
+ * Provides 3-layer intelligent monitoring for AI agents:
31
+ * - L0: Rule-based event classification (free, every event)
32
+ * - L1: Statistical anomaly detection (free, flagged events)
33
+ * - L2: LLM-assisted assessment (micro-prompts, budget-controlled)
34
+ *
35
+ * Usage:
36
+ * const arp = new AgentRuntimeProtection({ agentName: 'my-agent' });
37
+ * await arp.start();
38
+ * // ... agent runs ...
39
+ * await arp.stop();
40
+ */
41
+ export declare class AgentRuntimeProtection {
42
+ private readonly config;
43
+ private readonly engine;
44
+ private readonly intelligence;
45
+ private readonly enforcement;
46
+ private readonly logger;
47
+ private readonly monitors;
48
+ private running;
49
+ constructor(configOrPath?: ARPConfig | string);
50
+ /** Start all monitors */
51
+ start(): Promise<void>;
52
+ /** Stop all monitors and flush logs */
53
+ stop(): Promise<void>;
54
+ /** Check if ARP is running */
55
+ isRunning(): boolean;
56
+ /** Get current status */
57
+ getStatus(): {
58
+ running: boolean;
59
+ monitors: Array<{
60
+ type: string;
61
+ running: boolean;
62
+ }>;
63
+ budget: ReturnType<IntelligenceCoordinator['getBudgetStatus']>;
64
+ pausedPids: number[];
65
+ };
66
+ /** Get recent events */
67
+ getEvents(limit?: number): ARPEvent[];
68
+ /** Resume a paused process */
69
+ resume(pid: number): boolean;
70
+ /** Subscribe to all ARP events (for external integrations, test harnesses, etc.) */
71
+ onEvent(handler: (event: ARPEvent) => void | Promise<void>): void;
72
+ /** Subscribe to all enforcement results */
73
+ onEnforcement(handler: (result: import('./types').EnforcementResult) => void | Promise<void>): void;
74
+ /** Set the alert callback for the enforcement engine */
75
+ setAlertCallback(callback: AlertCallback): void;
76
+ /** Get the event engine (for custom integrations) */
77
+ getEngine(): EventEngine;
78
+ /** Get the enforcement engine (for test harnesses) */
79
+ getEnforcement(): EnforcementEngine;
80
+ }
81
+ //# sourceMappingURL=index.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/arp/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,YAAY,EACV,SAAS,EACT,QAAQ,EACR,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,SAAS,EACT,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,aAAa,EACb,WAAW,EACX,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,OAAO,GACR,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC3H,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EACL,YAAY,EACZ,UAAU,EACV,wBAAwB,EACxB,gBAAgB,EAChB,KAAK,WAAW,EAChB,KAAK,WAAW,GACjB,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAW,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAalF;;;;;;;;;;;;;GAaG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA0B;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,OAAO,CAAS;gBAEZ,YAAY,CAAC,EAAE,SAAS,GAAG,MAAM;IA+D7C,yBAAyB;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,uCAAuC;IACjC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAW3B,8BAA8B;IAC9B,SAAS,IAAI,OAAO;IAIpB,yBAAyB;IACzB,SAAS,IAAI;QACX,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,OAAO,CAAA;SAAE,CAAC,CAAC;QACpD,MAAM,EAAE,UAAU,CAAC,uBAAuB,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC/D,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB;IASD,wBAAwB;IACxB,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAIrC,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,oFAAoF;IACpF,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAIjE,2CAA2C;IAC3C,aAAa,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,OAAO,SAAS,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI;IAInG,wDAAwD;IACxD,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,qDAAqD;IACrD,SAAS,IAAI,WAAW;IAIxB,sDAAsD;IACtD,cAAc,IAAI,iBAAiB;CAGpC"}