hackmyagent 0.7.2 → 0.8.1

package/dist/arp/cli/index.js

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const index_1 = require("../index");
+const server_1 = require("../proxy/server");
+const prompt_1 = require("../interceptors/prompt");
+const mcp_protocol_1 = require("../interceptors/mcp-protocol");
+const a2a_protocol_1 = require("../interceptors/a2a-protocol");
+const event_engine_1 = require("../engine/event-engine");
+const args = process.argv.slice(2);
+const command = args[0];
+async function main() {
+    switch (command) {
+        case 'start':
+            await startGuard();
+            break;
+        case 'stop':
+            console.log('Stop not implemented in foreground mode. Use Ctrl+C.');
+            break;
+        case 'status':
+            await showStatus();
+            break;
+        case 'tail':
+            await tailEvents();
+            break;
+        case 'budget':
+            await showBudget();
+            break;
+        case 'proxy':
+            await startProxy();
+            break;
+        case '--version':
+        case '-v':
+            console.log(`arp-guard v${index_1.VERSION}`);
+            break;
+        case '--help':
+        case '-h':
+        case undefined:
+            showHelp();
+            break;
+        default:
+            console.error(`Unknown command: ${command}`);
+            showHelp();
+            process.exit(1);
+    }
+}
+async function startGuard() {
+    const configPath = args.find((a) => a.startsWith('--config='))?.split('=')[1]
+        ?? (args.indexOf('--config') !== -1 ? args[args.indexOf('--config') + 1] : undefined);
+    const config = (0, index_1.loadConfig)(configPath);
+    console.log(`\n  ARP Guard v${index_1.VERSION}`);
+    console.log(`  Agent: ${config.agentName}`);
+    console.log(`  Intelligence: ${config.intelligence?.enabled !== false ? '3-Layer (L0+L1+L2)' : 'L0+L1 only'}`);
+    console.log(`  Budget: $${config.intelligence?.budgetUsd ?? 5.00}/month`);
+    console.log(`  Monitors: ${Object.entries(config.monitors ?? {}).filter(([, v]) => v.enabled).map(([k]) => k).join(', ') || 'all'}`);
+    console.log();
+    const arp = new index_1.AgentRuntimeProtection(config);
+    // Graceful shutdown
+    const shutdown = async () => {
+        console.log('\n  Stopping ARP Guard...');
+        await arp.stop();
+        const status = arp.getStatus();
+        console.log(`  Budget used: $${status.budget.spent} / $${status.budget.budget} (${status.budget.percentUsed}%)`);
+        console.log(`  Total L2 calls: ${status.budget.totalCalls}`);
+        console.log('  Stopped.\n');
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+    await arp.start();
+    console.log('  Monitoring... (press Ctrl+C to stop)\n');
+    // Keep alive
+    const keepAlive = setInterval(() => { }, 60000);
+    keepAlive.unref();
+}
+async function showStatus() {
+    const config = (0, index_1.loadConfig)();
+    const arp = new index_1.AgentRuntimeProtection(config);
+    const status = arp.getStatus();
+    console.log(`\n  ARP Guard Status`);
+    console.log(`  Running: ${status.running}`);
+    console.log(`  Budget: $${status.budget.spent} / $${status.budget.budget} (${status.budget.percentUsed}% used)`);
+    console.log(`  L2 calls this period: ${status.budget.totalCalls}`);
+    console.log(`  L2 calls this hour: ${status.budget.callsThisHour} / ${status.budget.maxCallsPerHour}`);
+    console.log(`  Paused PIDs: ${status.pausedPids.length > 0 ? status.pausedPids.join(', ') : 'none'}`);
+    console.log();
+}
+async function tailEvents() {
+    const config = (0, index_1.loadConfig)();
+    const arp = new index_1.AgentRuntimeProtection(config);
+    const events = arp.getEvents(parseInt(args[1]) || 20);
+    if (events.length === 0) {
+        console.log('\n  No events recorded yet.\n');
+        return;
+    }
+    console.log(`\n  Last ${events.length} events:\n`);
+    for (const event of events) {
+        const severity = event.severity.toUpperCase().padEnd(8);
+        const source = event.source.padEnd(10);
+        const llm = event.classifiedBy === 'L2-llm' ? ' [LLM]' : '';
+        console.log(`  ${event.timestamp}  ${severity}  ${source}  ${event.description.slice(0, 80)}${llm}`);
+    }
+    console.log();
+}
+async function showBudget() {
+    const config = (0, index_1.loadConfig)();
+    const arp = new index_1.AgentRuntimeProtection(config);
+    const status = arp.getStatus();
+    const b = status.budget;
+    console.log(`\n  ARP Intelligence Budget`);
+    console.log(`  ─────────────────────────────`);
+    console.log(`  Spent:     $${b.spent.toFixed(4)}`);
+    console.log(`  Budget:    $${b.budget.toFixed(2)}`);
+    console.log(`  Remaining: $${b.remaining.toFixed(4)}`);
+    console.log(`  Used:      ${b.percentUsed}%`);
+    console.log(`  ─────────────────────────────`);
+    console.log(`  Total L2 calls: ${b.totalCalls}`);
+    console.log(`  This hour:      ${b.callsThisHour} / ${b.maxCallsPerHour}`);
+    console.log();
+}
+async function startProxy() {
+    const configPath = args.find((a) => a.startsWith('--config='))?.split('=')[1]
+        ?? (args.indexOf('--config') !== -1 ? args[args.indexOf('--config') + 1] : undefined);
+    const config = (0, index_1.loadConfig)(configPath);
+    if (!config.proxy) {
+        console.error('  Error: No proxy configuration found. Add a "proxy" section to your config.');
+        console.error('');
+        console.error('  Example:');
+        console.error('    proxy:');
+        console.error('      listen: 127.0.0.1:8080');
+        console.error('      target: http://localhost:3000');
+        console.error('      tls: false');
+        process.exit(1);
+    }
+    const engine = new event_engine_1.EventEngine(config);
+    const promptInterceptor = new prompt_1.PromptInterceptor(engine);
+    const mcpInterceptor = new mcp_protocol_1.MCPProtocolInterceptor(engine, config.aiLayer?.mcp?.allowedTools);
+    const a2aInterceptor = new a2a_protocol_1.A2AProtocolInterceptor(engine, config.aiLayer?.a2a?.trustedAgents);
+    await promptInterceptor.start();
+    await mcpInterceptor.start();
+    await a2aInterceptor.start();
+    const proxy = new server_1.ARPProxy(config.proxy, {
+        engine,
+        promptInterceptor,
+        mcpInterceptor,
+        a2aInterceptor,
+    });
+    // Log detections to console
+    let detectionCount = 0;
+    engine.onEvent((event) => {
+        if (event.category === 'threat' || event.category === 'violation') {
+            detectionCount++;
+            const sev = event.severity.toUpperCase().padEnd(8);
+            console.log(`  [${sev}] ${event.description}`);
+        }
+    });
+    const shutdown = async () => {
+        console.log('\n  Stopping ARP Proxy...');
+        await proxy.stop();
+        await promptInterceptor.stop();
+        await mcpInterceptor.stop();
+        await a2aInterceptor.stop();
+        console.log(`  Total detections: ${detectionCount}`);
+        console.log('  Stopped.\n');
+        process.exit(0);
+    };
+    process.on('SIGINT', shutdown);
+    process.on('SIGTERM', shutdown);
+    await proxy.start();
+    console.log(`\n  ARP Proxy v${index_1.VERSION}`);
+    console.log(`  Listening on port ${config.proxy.port}`);
+    console.log(`  Block mode: ${config.proxy.blockOnDetection ? 'ENABLED' : 'alert-only'}`);
+    console.log(`  Upstreams:`);
+    for (const u of config.proxy.upstreams) {
+        console.log(`    ${u.pathPrefix} -> ${u.target} (${u.protocol})`);
+    }
+    console.log(`\n  Scanning: prompt injection, jailbreak, data leak, MCP exploitation, A2A spoofing`);
+    console.log('  Press Ctrl+C to stop\n');
+    const keepAlive = setInterval(() => { }, 60000);
+    keepAlive.unref();
+}
+function showHelp() {
+    console.log(`
+  ARP Guard v${index_1.VERSION} — Agent Runtime Protection
+
+  USAGE
+    arp-guard <command> [options]
+
+  COMMANDS
+    start [--config <path>]   Start monitoring the agent
+    proxy [--config <path>]   Start HTTP reverse proxy with AI-layer scanning
+    stop                      Stop monitoring
+    status                    Show current protection status
+    tail [N]                  Show last N events (default: 20)
+    budget                    Show LLM intelligence budget usage
+
+  INTELLIGENCE
+    ARP uses a 3-layer intelligence stack:
+      L0: Rules (free)        Pattern matching on every event
+      L1: Statistical (free)  Z-score anomaly detection
+      L2: LLM-Assisted ($)    Micro-prompts to the agent's LLM
+
+    99% of events never reach L2. Default budget: $5/month.
+    Auto-detects Anthropic, OpenAI, or Ollama from environment.
+
+  AI-LAYER SCANNING (proxy mode)
+    Prompt injection, jailbreak, data exfiltration detection
+    MCP parameter exploitation (path traversal, command injection, SSRF)
+    A2A identity spoofing and delegation abuse detection
+    Output scanning for leaked secrets, PII, and system prompts
+
+  EXAMPLES
+    arp-guard start                     Start with auto-detected config
+    arp-guard start --config arp.yaml   Start with custom config
+    arp-guard proxy --config arp.yaml   Start proxy with AI-layer scanning
+    arp-guard status                    Check budget and monitor status
+    arp-guard tail 50                   Show last 50 events
+    arp-guard budget                    Show intelligence spending
+`);
+}
+main().catch((err) => {
+    console.error(`Error: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/arp/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/arp/cli/index.ts"],"names":[],"mappings":";;;AAEA,oCAAuE;AACvE,4CAA2C;AAC3C,mDAA2D;AAC3D,+DAAsE;AACtE,+DAAsE;AACtE,yDAAqD;AAErD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACnC,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;AAExB,KAAK,UAAU,IAAI;IACjB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO;YACV,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,MAAM;YACT,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACpE,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,MAAM;YACT,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,OAAO;YACV,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,GAAG,CAAC,cAAc,eAAO,EAAE,CAAC,CAAC;YACrC,MAAM;QACR,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,QAAQ,EAAE,CAAC;YACX,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,QAAQ,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;WACxE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAExF,MAAM,MAAM,GAAG,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC;IAEtC,OAAO,CAAC,GAAG,CAAC,kBAAkB,eAAO,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,YAAY,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/G,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,YAAY,EAAE,SAAS,IAAI,IAAI,QAAQ,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAE,CAA0B,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/J,OAAO,CAAC,GAAG,EAAE,CAAC;IAEd,MAAM,GAAG,GAAG,IAAI,8BAAsB,CAAC,MAAM,CAAC,CAAC;IAE/C,oBAAoB;IACpB,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC;QACjH,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IAExD,aAAa;IACb,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,IAAA,kBAAU,GAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,8BAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAE/B,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACpC,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,SAAS,CAAC,CAAC;IACjH,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,MAAM,CAAC,aAAa,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtG,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,IAAA,kBAAU,GAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,8BAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO;IACT,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,YAAY,MAAM,CAAC,MAAM,YAAY,CAAC,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,SAAS,KAAK,QAAQ,KAAK,MAAM,KAAK,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,MAAM,GAAG,IAAA,kBAAU,GAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,8BAAsB,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;IAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAExB,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,aAAa,MAAM,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,EAAE,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;WACxE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAExF,MAAM,MAAM,GAAG,IAAA,kBAAU,EAAC,UAAU,CAAC,CAAC;IAEtC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;QAC9F,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC9C,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,0BAAW,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,iBAAiB,GAAG,IAAI,0BAAiB,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,IAAI,qCAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;IAC7F,MAAM,cAAc,GAAG,IAAI,qCAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAE9F,MAAM,iBAAiB,CAAC,KAAK,EAAE,CAAC;IAChC,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;IAC7B,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC;IAE7B,MAAM,KAAK,GAAG,IAAI,iBAAQ,CAAC,MAAM,CAAC,KAAK,EAAE;QACvC,MAAM;QACN,iBAAiB;QACjB,cAAc;QACd,cAAc;KACf,CAAC,CAAC;IAEH,4BAA4B;IAC5B,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAClE,cAAc,EAAE,CAAC;YACjB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,KAAK,IAAI,EAAE;QAC1B,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,iBAAiB,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,uBAAuB,cAAc,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAEhC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IAEpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,eAAO,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;IACzF,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;IACpG,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/C,SAAS,CAAC,KAAK,EAAE,CAAC;AACpB,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC;eACC,eAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCrB,CAAC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/arp/config/loader.d.ts

@@ -0,0 +1,8 @@
+import type { ARPConfig } from '../types';
+/**
+ * Load ARP config from YAML or JSON file.
+ * Falls back to sensible defaults if no config found.
+ */
+export declare function loadConfig(configPath?: string): ARPConfig;
+export declare function defaultConfig(): ARPConfig;
+//# sourceMappingURL=loader.d.ts.map

package/dist/arp/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/arp/config/loader.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;GAGG;AACH,wBAAgB,UAAU,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAmBzD;AAmBD,wBAAgB,aAAa,IAAI,SAAS,CAyBzC"}

package/dist/arp/config/loader.js

@@ -0,0 +1,102 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadConfig = loadConfig;
+exports.defaultConfig = defaultConfig;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/**
+ * Load ARP config from YAML or JSON file.
+ * Falls back to sensible defaults if no config found.
+ */
+function loadConfig(configPath) {
+    if (configPath) {
+        return parseConfigFile(configPath);
+    }
+    // Auto-discover config
+    const candidates = [
+        'arp.yaml', 'arp.yml', 'arp.json',
+        '.opena2a/arp.yaml', '.opena2a/arp.yml', '.opena2a/arp.json',
+    ];
+    for (const candidate of candidates) {
+        const fullPath = path.resolve(process.cwd(), candidate);
+        if (fs.existsSync(fullPath)) {
+            return parseConfigFile(fullPath);
+        }
+    }
+    return defaultConfig();
+}
+function parseConfigFile(filePath) {
+    const content = fs.readFileSync(filePath, 'utf-8');
+    const ext = path.extname(filePath).toLowerCase();
+    if (ext === '.json') {
+        return { ...defaultConfig(), ...JSON.parse(content) };
+    }
+    // YAML parsing (dynamic import to keep it optional)
+    try {
+        const yaml = require('js-yaml');
+        return { ...defaultConfig(), ...yaml.load(content) };
+    }
+    catch {
+        throw new Error(`Failed to parse config: ${filePath}. Install js-yaml for YAML support.`);
+    }
+}
+function defaultConfig() {
+    return {
+        agentName: path.basename(process.cwd()),
+        agentDescription: undefined,
+        declaredCapabilities: [],
+        dataDir: path.join(process.cwd(), '.opena2a', 'arp'),
+        monitors: {
+            process: { enabled: true, intervalMs: 5000 },
+            network: { enabled: true, intervalMs: 10000 },
+            filesystem: { enabled: true },
+            skill: { enabled: false },
+            heartbeat: { enabled: false },
+        },
+        rules: [],
+        intelligence: {
+            enabled: true,
+            adapter: 'agent-proxy',
+            budgetUsd: 5.0,
+            maxTokensPerCall: 300,
+            maxCallsPerHour: 20,
+            minSeverityForLlm: 'medium',
+            enableBatching: true,
+            batchWindowMs: 300000,
+        },
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/arp/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/arp/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAQA,gCAmBC;AAmBD,sCAyBC;AAvED,uCAAyB;AACzB,2CAA6B;AAG7B;;;GAGG;AACH,SAAgB,UAAU,CAAC,UAAmB;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;IACrC,CAAC;IAED,uBAAuB;IACvB,MAAM,UAAU,GAAG;QACjB,UAAU,EAAE,SAAS,EAAE,UAAU;QACjC,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB;KAC7D,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjD,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACxD,CAAC;IAED,oDAAoD;IACpD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,OAAO,EAAE,GAAG,aAAa,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,qCAAqC,CAAC,CAAC;IAC5F,CAAC;AACH,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACvC,gBAAgB,EAAE,SAAS;QAC3B,oBAAoB,EAAE,EAAE;QACxB,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC;QACpD,QAAQ,EAAE;YACR,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;YAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;YAC7C,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;YAC7B,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;YACzB,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;SAC9B;QACD,KAAK,EAAE,EAAE;QACT,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,aAAa;YACtB,SAAS,EAAE,GAAG;YACd,gBAAgB,EAAE,GAAG;YACrB,eAAe,EAAE,EAAE;YACnB,iBAAiB,EAAE,QAAQ;YAC3B,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,MAAM;SACtB;KACF,CAAC;AACJ,CAAC"}

package/dist/arp/enforcement/kill-switch.d.ts

@@ -0,0 +1,22 @@
+import type { EnforcementAction, EnforcementResult, ARPEvent } from '../types';
+export type AlertCallback = (event: ARPEvent, result: EnforcementResult) => void | Promise<void>;
+/**
+ * Enforcement engine — executes actions on agent processes.
+ * Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
+ */
+export declare class EnforcementEngine {
+    private paused;
+    private onAlert?;
+    constructor(onAlert?: AlertCallback);
+    /** Register or replace the alert callback */
+    setAlertCallback(callback: AlertCallback): void;
+    /** Execute an enforcement action */
+    execute(action: EnforcementAction, event: ARPEvent, targetPid?: number): Promise<EnforcementResult>;
+    /** Resume a paused process */
+    resume(pid: number): boolean;
+    /** Get list of paused PIDs */
+    getPausedPids(): number[];
+    private pauseProcess;
+    private killProcess;
+}
+//# sourceMappingURL=kill-switch.d.ts.map

package/dist/arp/enforcement/kill-switch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.d.ts","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAE/E,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAEjG;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,OAAO,CAAC,CAAgB;gBAEpB,OAAO,CAAC,EAAE,aAAa;IAInC,6CAA6C;IAC7C,gBAAgB,CAAC,QAAQ,EAAE,aAAa,GAAG,IAAI;IAI/C,oCAAoC;IAC9B,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0BzG,8BAA8B;IAC9B,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAY5B,8BAA8B;IAC9B,aAAa,IAAI,MAAM,EAAE;IAIzB,OAAO,CAAC,YAAY;IA0BpB,OAAO,CAAC,WAAW;CAqCpB"}

package/dist/arp/enforcement/kill-switch.js

@@ -0,0 +1,122 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EnforcementEngine = void 0;
+/**
+ * Enforcement engine — executes actions on agent processes.
+ * Supports: log, alert, pause (SIGSTOP), kill (SIGTERM → SIGKILL).
+ */
+class EnforcementEngine {
+    constructor(onAlert) {
+        this.paused = new Set();
+        this.onAlert = onAlert;
+    }
+    /** Register or replace the alert callback */
+    setAlertCallback(callback) {
+        this.onAlert = callback;
+    }
+    /** Execute an enforcement action */
+    async execute(action, event, targetPid) {
+        const pid = targetPid ?? event.data.pid;
+        switch (action) {
+            case 'log':
+                return { action, success: true, reason: 'Event logged', event };
+            case 'alert': {
+                const result = { action, success: true, reason: `Alert raised: ${event.description}`, event };
+                if (this.onAlert) {
+                    try {
+                        await this.onAlert(event, result);
+                    }
+                    catch { /* callback errors don't block enforcement */ }
+                }
+                return result;
+            }
+            case 'pause':
+                return this.pauseProcess(pid, event);
+            case 'kill':
+                return this.killProcess(pid, event);
+            default:
+                return { action, success: false, reason: `Unknown action: ${action}`, event };
+        }
+    }
+    /** Resume a paused process */
+    resume(pid) {
+        if (!this.paused.has(pid))
+            return false;
+        try {
+            process.kill(pid, 'SIGCONT');
+            this.paused.delete(pid);
+            return true;
+        }
+        catch {
+            this.paused.delete(pid);
+            return false;
+        }
+    }
+    /** Get list of paused PIDs */
+    getPausedPids() {
+        return Array.from(this.paused);
+    }
+    pauseProcess(pid, event) {
+        if (!pid) {
+            return { action: 'pause', success: false, reason: 'No PID to pause', event };
+        }
+        try {
+            process.kill(pid, 'SIGSTOP');
+            this.paused.add(pid);
+            return {
+                action: 'pause',
+                targetPid: pid,
+                success: true,
+                reason: `Paused PID ${pid}: ${event.description}`,
+                event,
+            };
+        }
+        catch (err) {
+            return {
+                action: 'pause',
+                targetPid: pid,
+                success: false,
+                reason: `Failed to pause PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
+                event,
+            };
+        }
+    }
+    killProcess(pid, event) {
+        if (!pid) {
+            return { action: 'kill', success: false, reason: 'No PID to kill', event };
+        }
+        try {
+            // Graceful first
+            process.kill(pid, 'SIGTERM');
+            // Give 5 seconds, then force kill
+            setTimeout(() => {
+                try {
+                    process.kill(pid, 0); // Check if still alive
+                    process.kill(pid, 'SIGKILL');
+                }
+                catch {
+                    // Already dead — good
+                }
+            }, 5000).unref();
+            this.paused.delete(pid);
+            return {
+                action: 'kill',
+                targetPid: pid,
+                success: true,
+                reason: `Killed PID ${pid}: ${event.description}`,
+                event,
+            };
+        }
+        catch (err) {
+            return {
+                action: 'kill',
+                targetPid: pid,
+                success: false,
+                reason: `Failed to kill PID ${pid}: ${err instanceof Error ? err.message : String(err)}`,
+                event,
+            };
+        }
+    }
+}
+exports.EnforcementEngine = EnforcementEngine;
+//# sourceMappingURL=kill-switch.js.map

package/dist/arp/enforcement/kill-switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../../../src/arp/enforcement/kill-switch.ts"],"names":[],"mappings":";;;AAIA;;;GAGG;AACH,MAAa,iBAAiB;IAI5B,YAAY,OAAuB;QAH3B,WAAM,GAAG,IAAI,GAAG,EAAU,CAAC;QAIjC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,6CAA6C;IAC7C,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,OAAO,CAAC,MAAyB,EAAE,KAAe,EAAE,SAAkB;QAC1E,MAAM,GAAG,GAAG,SAAS,IAAK,KAAK,CAAC,IAAI,CAAC,GAA0B,CAAC;QAEhE,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YAElE,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,MAAM,GAAsB,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,KAAK,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC;gBACjH,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,IAAI,CAAC;wBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,6CAA6C,CAAC,CAAC;gBACpG,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEvC,KAAK,MAAM;gBACT,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAEtC;gBACE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC;QAClF,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,CAAC,GAAW;QAChB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,aAAa;QACX,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAEO,YAAY,CAAC,GAAuB,EAAE,KAAe;QAC3D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC7B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uBAAuB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACzF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,GAAuB,EAAE,KAAe;QAC1D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC;YACH,iBAAiB;YACjB,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAE7B,kCAAkC;YAClC,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,uBAAuB;oBAC7C,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,sBAAsB;gBACxB,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YAEjB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,IAAI;gBACb,MAAM,EAAE,cAAc,GAAG,KAAK,KAAK,CAAC,WAAW,EAAE;gBACjD,KAAK;aACN,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,sBAAsB,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBACxF,KAAK;aACN,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AAzHD,8CAyHC"}

package/dist/arp/engine/event-engine.d.ts

@@ -0,0 +1,29 @@
+import type { ARPEvent, ARPConfig, EventSeverity, EventCategory, EnforcementResult } from '../types';
+type EventHandler = (event: ARPEvent) => void | Promise<void>;
+type EnforcementHandler = (result: EnforcementResult) => void | Promise<void>;
+/**
+ * Central event bus — receives events from monitors, evaluates rules,
+ * decides enforcement actions. The "brain" between monitors and enforcement.
+ */
+export declare class EventEngine {
+    private handlers;
+    private enforcementHandlers;
+    private rules;
+    private eventBuffer;
+    private readonly maxBufferSize;
+    constructor(config: ARPConfig);
+    /** Register a handler for all events (for logging, reporting, etc.) */
+    onEvent(handler: EventHandler): void;
+    /** Register a handler for enforcement actions */
+    onEnforcement(handler: EnforcementHandler): void;
+    /** Emit an event from a monitor — evaluates rules and triggers actions */
+    emit(event: Omit<ARPEvent, 'id' | 'timestamp' | 'classifiedBy'>): Promise<ARPEvent>;
+    /** Update an event's classification (called by L1/L2 after re-analysis) */
+    reclassify(event: ARPEvent, newCategory: EventCategory, newSeverity: EventSeverity, classifiedBy: ARPEvent['classifiedBy']): ARPEvent;
+    /** Get recent events matching criteria (for threshold evaluation) */
+    getRecentEvents(windowMs: number, source?: string): ARPEvent[];
+    private evaluateRules;
+    private ruleMatches;
+}
+export {};
+//# sourceMappingURL=event-engine.d.ts.map

package/dist/arp/engine/event-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-engine.d.ts","sourceRoot":"","sources":["../../../src/arp/engine/event-engine.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,QAAQ,EACR,SAAS,EAET,aAAa,EACb,aAAa,EAEb,iBAAiB,EAClB,MAAM,UAAU,CAAC;AAElB,KAAK,YAAY,GAAG,CAAC,KAAK,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAC9D,KAAK,kBAAkB,GAAG,CAAC,MAAM,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAQ9E;;;GAGG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,mBAAmB,CAA4B;IACvD,OAAO,CAAC,KAAK,CAAc;IAC3B,OAAO,CAAC,WAAW,CAAkB;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;gBAE3B,MAAM,EAAE,SAAS;IAI7B,uEAAuE;IACvE,OAAO,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIpC,iDAAiD;IACjD,aAAa,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI;IAIhD,0EAA0E;IACpE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,WAAW,GAAG,cAAc,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC;IAsDzF,2EAA2E;IAC3E,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,GAAG,QAAQ;IAOrI,qEAAqE;IACrE,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAU9D,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,WAAW;CAwBpB"}