@agentlensai/server 0.10.0 → 0.13.0

package/dist/lib/audit.js

@@ -0,0 +1,59 @@
+/**
+ * Audit Logger (SH-2)
+ *
+ * Fire-and-forget audit log writer. Never blocks the request,
+ * catches all errors to stderr.
+ */
+import { ulid } from 'ulid';
+import { auditLog } from '../db/schema.sqlite.js';
+import { lt } from 'drizzle-orm';
+/**
+ * Mask sensitive values — returns first 8 chars + "…" for strings > 8 chars.
+ */
+export function maskSensitive(value) {
+    if (value.length <= 8)
+        return value;
+    return value.slice(0, 8) + '…';
+}
+/**
+ * Create an audit logger that writes to the audit_log table.
+ * Writes are fire-and-forget — errors go to stderr.
+ */
+export function createAuditLogger(db) {
+    return {
+        log(entry) {
+            try {
+                const id = ulid();
+                const timestamp = new Date().toISOString();
+                db.insert(auditLog)
+                    .values({
+                    id,
+                    timestamp,
+                    tenantId: entry.tenantId,
+                    actorType: entry.actorType,
+                    actorId: entry.actorId,
+                    action: entry.action,
+                    resourceType: entry.resourceType ?? null,
+                    resourceId: entry.resourceId ?? null,
+                    details: JSON.stringify(entry.details ?? {}),
+                    ipAddress: entry.ipAddress ?? null,
+                    userAgent: entry.userAgent ?? null,
+                })
+                    .run();
+            }
+            catch (err) {
+                console.error('[AuditLogger] Failed to write audit log:', err);
+            }
+        },
+    };
+}
+/**
+ * Delete audit log entries older than the given number of days.
+ * Returns the number of rows deleted.
+ */
+export function cleanupAuditLogs(db, retentionDays) {
+    const cutoff = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000).toISOString();
+    const result = db.delete(auditLog).where(lt(auditLog.timestamp, cutoff)).run();
+    return result.changes;
+}
+//# sourceMappingURL=audit.js.map

package/dist/lib/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/lib/audit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAoBjC;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAY;IAC5C,OAAO;QACL,GAAG,CAAC,KAAiB;YACnB,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC;gBAClB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC3C,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;qBAChB,MAAM,CAAC;oBACN,EAAE;oBACF,SAAS;oBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;oBACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;oBACpC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;oBAC5C,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;oBAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;iBACnC,CAAC;qBACD,GAAG,EAAE,CAAC;YACX,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,GAAG,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,EAAY,EAAE,aAAqB;IAClE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxF,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IAC/E,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC"}

package/dist/lib/budget-engine.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Budget Engine — Cost Budget Enforcement (Feature 5 — Story 3)
+ *
+ * Subscribes to event_ingested on EventBus, evaluates applicable budgets
+ * on cost-relevant events, and executes breach actions via executeAction().
+ */
+import type { AgentLensEvent, IEventStore } from '@agentlensai/core';
+import type { SqliteDb } from '../db/index.js';
+import { CostBudgetStore } from '../db/cost-budget-store.js';
+export declare class BudgetEngine {
+    private store;
+    private eventStore;
+    private listener;
+    private started;
+    constructor(eventStore: IEventStore, db: SqliteDb);
+    start(): void;
+    stop(): void;
+    getStore(): CostBudgetStore;
+    evaluateEvent(event: AgentLensEvent): Promise<void>;
+    private evaluateBudget;
+    private computeCurrentSpend;
+    getPeriodStart(period: string): string;
+    private isBreachCooldownActive;
+    private executeBreach;
+}
+//# sourceMappingURL=budget-engine.d.ts.map

package/dist/lib/budget-engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-engine.d.ts","sourceRoot":"","sources":["../../src/lib/budget-engine.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAA+B,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAO7D,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,UAAU,CAAc;IAChC,OAAO,CAAC,QAAQ,CAA4C;IAC5D,OAAO,CAAC,OAAO,CAAS;gBAEZ,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ;IAKjD,KAAK,IAAI,IAAI;IAab,IAAI,IAAI,IAAI;IAQZ,QAAQ,IAAI,eAAe;IAIrB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;YAgB3C,cAAc;YAsCd,mBAAmB;IAgBjC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAyBtC,OAAO,CAAC,sBAAsB;YAgBhB,aAAa;CA6D5B"}

package/dist/lib/budget-engine.js

@@ -0,0 +1,201 @@
+/**
+ * Budget Engine — Cost Budget Enforcement (Feature 5 — Story 3)
+ *
+ * Subscribes to event_ingested on EventBus, evaluates applicable budgets
+ * on cost-relevant events, and executes breach actions via executeAction().
+ */
+import { CostBudgetStore } from '../db/cost-budget-store.js';
+import { executeAction } from './guardrails/actions.js';
+import { eventBus } from './event-bus.js';
+import { createLogger } from './logger.js';
+const log = createLogger('BudgetEngine');
+export class BudgetEngine {
+    store;
+    eventStore;
+    listener = null;
+    started = false;
+    constructor(eventStore, db) {
+        this.eventStore = eventStore;
+        this.store = new CostBudgetStore(db);
+    }
+    start() {
+        if (this.started)
+            return;
+        this.listener = (busEvent) => {
+            if (busEvent.type === 'event_ingested') {
+                this.evaluateEvent(busEvent.event).catch((err) => {
+                    log.error('budget evaluation error', { error: err instanceof Error ? err.message : String(err) });
+                });
+            }
+        };
+        eventBus.on('event_ingested', this.listener);
+        this.started = true;
+    }
+    stop() {
+        if (this.listener) {
+            eventBus.off('event_ingested', this.listener);
+            this.listener = null;
+        }
+        this.started = false;
+    }
+    getStore() {
+        return this.store;
+    }
+    async evaluateEvent(event) {
+        // Only evaluate cost-relevant events
+        if (event.eventType !== 'llm_response' && event.eventType !== 'cost_tracked')
+            return;
+        const budgets = this.store.listEnabledBudgets(event.tenantId, event.agentId);
+        if (budgets.length === 0)
+            return;
+        for (const budget of budgets) {
+            try {
+                await this.evaluateBudget(budget, event);
+            }
+            catch (err) {
+                log.error(`budget ${budget.id} error`, { error: err instanceof Error ? err.message : String(err) });
+            }
+        }
+    }
+    async evaluateBudget(budget, event) {
+        // For agent-scoped budgets, check that agentId matches
+        if (budget.scope === 'agent' && budget.agentId !== event.agentId)
+            return;
+        const periodStart = this.getPeriodStart(budget.period);
+        const currentSpend = await this.computeCurrentSpend(budget, event);
+        // Update state
+        const existingState = this.store.getState(budget.tenantId, budget.id);
+        const newState = {
+            budgetId: budget.id,
+            tenantId: budget.tenantId,
+            breachCount: existingState?.breachCount ?? 0,
+            lastBreachAt: existingState?.lastBreachAt,
+            currentSpend,
+            periodStart,
+        };
+        if (currentSpend < budget.limitUsd) {
+            this.store.upsertState(newState);
+            return;
+        }
+        // Budget breached — check cooldown
+        if (this.isBreachCooldownActive(budget, existingState)) {
+            this.store.upsertState(newState);
+            return;
+        }
+        // Execute breach action
+        await this.executeBreach(budget, currentSpend, event);
+        // Update state with breach
+        newState.lastBreachAt = new Date().toISOString();
+        newState.breachCount = (existingState?.breachCount ?? 0) + 1;
+        this.store.upsertState(newState);
+    }
+    async computeCurrentSpend(budget, event) {
+        if (budget.scope === 'session' && budget.period === 'session') {
+            // Session scope: get session's totalCostUsd
+            const session = await this.eventStore.getSession(event.sessionId);
+            return session?.totalCostUsd ?? 0;
+        }
+        // Agent scope: sum across sessions in period window
+        const from = this.getPeriodStart(budget.period);
+        return this.eventStore.sumSessionCost({
+            agentId: budget.agentId,
+            from,
+            tenantId: budget.tenantId,
+        });
+    }
+    getPeriodStart(period) {
+        const now = new Date();
+        switch (period) {
+            case 'session':
+                return now.toISOString(); // Not meaningful for session scope
+            case 'daily': {
+                const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+                return d.toISOString();
+            }
+            case 'weekly': {
+                // Monday of current week UTC
+                const day = now.getUTCDay();
+                const diff = day === 0 ? 6 : day - 1; // Monday = 0 offset
+                const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate() - diff));
+                return d.toISOString();
+            }
+            case 'monthly': {
+                const d = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1));
+                return d.toISOString();
+            }
+            default:
+                return now.toISOString();
+        }
+    }
+    isBreachCooldownActive(budget, state) {
+        if (!state?.lastBreachAt)
+            return false;
+        const periodStart = this.getPeriodStart(budget.period);
+        // For session scope, no cooldown between sessions (each session is independent)
+        if (budget.period === 'session') {
+            // cooldown is per-session — but we don't track per-session state here
+            // so we allow one breach per evaluation
+            return true; // Already breached in this session check cycle
+        }
+        // For period-based budgets: if lastBreachAt is within the current period, skip
+        return state.lastBreachAt >= periodStart;
+    }
+    async executeBreach(budget, currentSpend, event) {
+        const message = `Budget breached: $${currentSpend.toFixed(4)} >= $${budget.limitUsd} (${budget.scope}/${budget.period})`;
+        if (budget.onBreach === 'alert') {
+            // Emit alert on EventBus
+            eventBus.emit({
+                type: 'alert_triggered',
+                rule: {
+                    id: budget.id,
+                    name: `budget:${budget.scope}:${budget.period}`,
+                    enabled: true,
+                    condition: 'cost_exceeds',
+                    threshold: budget.limitUsd,
+                    windowMinutes: 0,
+                    scope: budget.agentId ? { agentId: budget.agentId } : {},
+                    notifyChannels: [],
+                    createdAt: budget.createdAt,
+                    updatedAt: budget.updatedAt,
+                    tenantId: budget.tenantId,
+                },
+                history: {
+                    id: `cb_${Date.now()}`,
+                    ruleId: budget.id,
+                    triggeredAt: new Date().toISOString(),
+                    currentValue: currentSpend,
+                    threshold: budget.limitUsd,
+                    message,
+                    tenantId: budget.tenantId,
+                },
+                timestamp: new Date().toISOString(),
+            });
+            return;
+        }
+        // For pause_agent / downgrade_model, use executeAction with synthetic guardrail rule
+        const syntheticRule = {
+            id: budget.id,
+            tenantId: budget.tenantId,
+            name: `budget:${budget.scope}:${budget.period}`,
+            enabled: true,
+            conditionType: 'cost_limit',
+            conditionConfig: { maxCostUsd: budget.limitUsd },
+            actionType: budget.onBreach,
+            actionConfig: budget.onBreach === 'downgrade_model'
+                ? { targetModel: budget.downgradeTargetModel }
+                : {},
+            cooldownMinutes: 0,
+            dryRun: false,
+            createdAt: budget.createdAt,
+            updatedAt: budget.updatedAt,
+        };
+        const conditionResult = {
+            triggered: true,
+            currentValue: currentSpend,
+            threshold: budget.limitUsd,
+            message,
+        };
+        await executeAction(syntheticRule, conditionResult, event.agentId);
+    }
+}
+//# sourceMappingURL=budget-engine.js.map

package/dist/lib/budget-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-engine.js","sourceRoot":"","sources":["../../src/lib/budget-engine.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,QAAQ,EAAiB,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,cAAc,CAAC,CAAC;AAEzC,MAAM,OAAO,YAAY;IACf,KAAK,CAAkB;IACvB,UAAU,CAAc;IACxB,QAAQ,GAAuC,IAAI,CAAC;IACpD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,UAAuB,EAAE,EAAY;QAC/C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,QAAQ,GAAG,CAAC,QAAkB,EAAE,EAAE;YACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBACvC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBAC/C,GAAG,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpG,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QACF,QAAQ,CAAC,EAAE,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,IAAI;QACF,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,QAAQ,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAqB;QACvC,qCAAqC;QACrC,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc;YAAE,OAAO;QAErF,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,UAAU,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,MAAkB,EAAE,KAAqB;QACpE,uDAAuD;QACvD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,OAAO;QAEzE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAEnE,eAAe;QACf,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,QAAQ,GAAoB;YAChC,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,aAAa,EAAE,WAAW,IAAI,CAAC;YAC5C,YAAY,EAAE,aAAa,EAAE,YAAY;YACzC,YAAY;YACZ,WAAW;SACZ,CAAC;QAEF,IAAI,YAAY,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,mCAAmC;QACnC,IAAI,IAAI,CAAC,sBAAsB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,wBAAwB;QACxB,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;QAEtD,2BAA2B;QAC3B,QAAQ,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,QAAQ,CAAC,WAAW,GAAG,CAAC,aAAa,EAAE,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,MAAkB,EAAE,KAAqB;QACzE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,4CAA4C;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAClE,OAAO,OAAO,EAAE,YAAY,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,oDAAoD;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,OAAQ;YACxB,IAAI;YACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,mCAAmC;YAC/D,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBACxF,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzB,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,6BAA6B;gBAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,oBAAoB;gBAC1D,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC/F,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzB,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBACzE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACzB,CAAC;YACD;gBACE,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,sBAAsB,CAAC,MAAkB,EAAE,KAA6B;QAC9E,IAAI,CAAC,KAAK,EAAE,YAAY;YAAE,OAAO,KAAK,CAAC;QAEvC,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEvD,gFAAgF;QAChF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,sEAAsE;YACtE,wCAAwC;YACxC,OAAO,IAAI,CAAC,CAAC,+CAA+C;QAC9D,CAAC;QAED,+EAA+E;QAC/E,OAAO,KAAK,CAAC,YAAY,IAAI,WAAW,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,MAAkB,EAAE,YAAoB,EAAE,KAAqB;QACzF,MAAM,OAAO,GAAG,qBAAqB,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAEzH,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,yBAAyB;YACzB,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,iBAAiB;gBACvB,IAAI,EAAE;oBACJ,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;oBAC/C,OAAO,EAAE,IAAI;oBACb,SAAS,EAAE,cAAuB;oBAClC,SAAS,EAAE,MAAM,CAAC,QAAQ;oBAC1B,aAAa,EAAE,CAAC;oBAChB,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE;oBACxD,cAAc,EAAE,EAAE;oBAClB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;gBACD,OAAO,EAAE;oBACP,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,EAAE;oBACtB,MAAM,EAAE,MAAM,CAAC,EAAE;oBACjB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACrC,YAAY,EAAE,YAAY;oBAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ;oBAC1B,OAAO;oBACP,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;gBACD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,MAAM,aAAa,GAAG;YACpB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,UAAU,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;YAC/C,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,YAAqB;YACpC,eAAe,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE;YAChD,UAAU,EAAE,MAAM,CAAC,QAA6C;YAChE,YAAY,EAAE,MAAM,CAAC,QAAQ,KAAK,iBAAiB;gBACjD,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,oBAAoB,EAAE;gBAC9C,CAAC,CAAC,EAAE;YACN,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC;QAEF,MAAM,eAAe,GAAG;YACtB,SAAS,EAAE,IAAI;YACf,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,MAAM,CAAC,QAAQ;YAC1B,OAAO;SACR,CAAC;QAEF,MAAM,aAAa,CAAC,aAAa,EAAE,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;CACF"}

package/dist/lib/compliance-export.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Streaming Compliance Export (Feature 9 — EU AI Act)
+ *
+ * Transform streams for CSV export and chunked JSON writer.
+ * Handles 100K+ events without OOM via batched reading + Transform streams.
+ */
+import { Transform, type TransformCallback } from 'node:stream';
+import type { EventRepository } from '../db/repositories/event-repository.js';
+export type RawEventRow = {
+    id: string;
+    timestamp: string;
+    sessionId: string;
+    agentId: string;
+    eventType: string;
+    severity: string;
+    payload: string;
+    metadata: string;
+    prevHash: string | null;
+    hash: string;
+};
+export declare class CsvEventTransform extends Transform {
+    private headerSent;
+    constructor();
+    _transform(row: RawEventRow, _encoding: string, callback: TransformCallback): void;
+}
+/**
+ * Stream all events for a tenant+range as CSV into a writable stream.
+ * Uses batched reads to avoid loading everything into memory.
+ */
+export declare function streamEventsAsCsv(repo: EventRepository, tenantId: string, from: string, to: string, writable: NodeJS.WritableStream): Promise<number>;
+/**
+ * Stream all events for a tenant+range as JSON.
+ * Returns a complete JSON object with metadata.
+ */
+export declare function streamEventsAsJson(repo: EventRepository, tenantId: string, from: string, to: string, writable: NodeJS.WritableStream): Promise<number>;
+/**
+ * Collect all events for a tenant+range as an array (for JSON response).
+ * For smaller datasets that fit in memory.
+ */
+export declare function collectAllEvents(repo: EventRepository, tenantId: string, from: string, to: string): RawEventRow[];
+//# sourceMappingURL=compliance-export.d.ts.map

package/dist/lib/compliance-export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-export.d.ts","sourceRoot":"","sources":["../../src/lib/compliance-export.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAkB9E,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AASF,qBAAa,iBAAkB,SAAQ,SAAS;IAC9C,OAAO,CAAC,UAAU,CAAS;;IAM3B,UAAU,CAAC,GAAG,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,GAAG,IAAI;CAoBnF;AAID;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,CAAC,cAAc,GAC9B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,EACV,QAAQ,EAAE,MAAM,CAAC,cAAc,GAC9B,OAAO,CAAC,MAAM,CAAC,CA6BjB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,eAAe,EACrB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,EAAE,EAAE,MAAM,GACT,WAAW,EAAE,CAaf"}

package/dist/lib/compliance-export.js

@@ -0,0 +1,124 @@
+/**
+ * Streaming Compliance Export (Feature 9 — EU AI Act)
+ *
+ * Transform streams for CSV export and chunked JSON writer.
+ * Handles 100K+ events without OOM via batched reading + Transform streams.
+ */
+import { Transform } from 'node:stream';
+const BATCH_SIZE = 5000;
+const UTF8_BOM = '\uFEFF';
+// ─── CSV Escaping (RFC 4180) ────────────────────────────────
+function escapeCsvField(value) {
+    if (value == null)
+        return '';
+    const str = String(value);
+    if (str.includes('"') || str.includes(',') || str.includes('\n') || str.includes('\r')) {
+        return '"' + str.replace(/"/g, '""') + '"';
+    }
+    return str;
+}
+const EVENT_CSV_HEADERS = [
+    'id', 'timestamp', 'session_id', 'agent_id', 'event_type',
+    'severity', 'payload', 'metadata', 'prev_hash', 'hash',
+];
+// ─── CSV Transform Stream ───────────────────────────────────
+export class CsvEventTransform extends Transform {
+    headerSent = false;
+    constructor() {
+        super({ objectMode: true });
+    }
+    _transform(row, _encoding, callback) {
+        if (!this.headerSent) {
+            this.push(UTF8_BOM + EVENT_CSV_HEADERS.join(',') + '\n');
+            this.headerSent = true;
+        }
+        const line = [
+            escapeCsvField(row.id),
+            escapeCsvField(row.timestamp),
+            escapeCsvField(row.sessionId),
+            escapeCsvField(row.agentId),
+            escapeCsvField(row.eventType),
+            escapeCsvField(row.severity),
+            escapeCsvField(row.payload),
+            escapeCsvField(row.metadata),
+            escapeCsvField(row.prevHash),
+            escapeCsvField(row.hash),
+        ].join(',');
+        this.push(line + '\n');
+        callback();
+    }
+}
+// ─── Streaming Helpers ──────────────────────────────────────
+/**
+ * Stream all events for a tenant+range as CSV into a writable stream.
+ * Uses batched reads to avoid loading everything into memory.
+ */
+export async function streamEventsAsCsv(repo, tenantId, from, to, writable) {
+    const transform = new CsvEventTransform();
+    transform.pipe(writable);
+    let offset = 0;
+    let totalEvents = 0;
+    while (true) {
+        const batch = repo.getEventsBatchByTenantAndRange(tenantId, from, to, offset, BATCH_SIZE);
+        if (batch.length === 0)
+            break;
+        for (const row of batch) {
+            transform.write(row);
+        }
+        totalEvents += batch.length;
+        offset += batch.length;
+        if (batch.length < BATCH_SIZE)
+            break;
+    }
+    transform.end();
+    return totalEvents;
+}
+/**
+ * Stream all events for a tenant+range as JSON.
+ * Returns a complete JSON object with metadata.
+ */
+export async function streamEventsAsJson(repo, tenantId, from, to, writable) {
+    let offset = 0;
+    let totalEvents = 0;
+    let first = true;
+    writable.write('{"exportedAt":"' + new Date().toISOString() + '",');
+    writable.write('"range":{"from":"' + from + '","to":"' + to + '"},');
+    writable.write('"events":[');
+    while (true) {
+        const batch = repo.getEventsBatchByTenantAndRange(tenantId, from, to, offset, BATCH_SIZE);
+        if (batch.length === 0)
+            break;
+        for (const row of batch) {
+            if (!first)
+                writable.write(',');
+            first = false;
+            writable.write(JSON.stringify(row));
+        }
+        totalEvents += batch.length;
+        offset += batch.length;
+        if (batch.length < BATCH_SIZE)
+            break;
+    }
+    writable.write('],');
+    writable.write('"totalEvents":' + totalEvents + '}');
+    return totalEvents;
+}
+/**
+ * Collect all events for a tenant+range as an array (for JSON response).
+ * For smaller datasets that fit in memory.
+ */
+export function collectAllEvents(repo, tenantId, from, to) {
+    const allEvents = [];
+    let offset = 0;
+    while (true) {
+        const batch = repo.getEventsBatchByTenantAndRange(tenantId, from, to, offset, BATCH_SIZE);
+        if (batch.length === 0)
+            break;
+        allEvents.push(...batch);
+        offset += batch.length;
+        if (batch.length < BATCH_SIZE)
+            break;
+    }
+    return allEvents;
+}
+//# sourceMappingURL=compliance-export.js.map

package/dist/lib/compliance-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-export.js","sourceRoot":"","sources":["../../src/lib/compliance-export.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAGhE,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAE1B,+DAA+D;AAE/D,SAAS,cAAc,CAAC,KAAgC;IACtD,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1B,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAiBD,MAAM,iBAAiB,GAAG;IACxB,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY;IACzD,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM;CACvD,CAAC;AAEF,+DAA+D;AAE/D,MAAM,OAAO,iBAAkB,SAAQ,SAAS;IACtC,UAAU,GAAG,KAAK,CAAC;IAE3B;QACE,KAAK,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,UAAU,CAAC,GAAgB,EAAE,SAAiB,EAAE,QAA2B;QACzE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG;YACX,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC5B,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC5B,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC5B,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;SACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QACvB,QAAQ,EAAE,CAAC;IACb,CAAC;CACF;AAED,+DAA+D;AAE/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAqB,EACrB,QAAgB,EAChB,IAAY,EACZ,EAAU,EACV,QAA+B;IAE/B,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAC1C,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAEzB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAE9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAED,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QAEvB,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM;IACvC,CAAC;IAED,SAAS,CAAC,GAAG,EAAE,CAAC;IAChB,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAqB,EACrB,QAAgB,EAChB,IAAY,EACZ,EAAU,EACV,QAA+B;IAE/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,IAAI,CAAC;IAEjB,QAAQ,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAAC;IACpE,QAAQ,CAAC,KAAK,CAAC,mBAAmB,GAAG,IAAI,GAAG,UAAU,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;IACrE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAE7B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAE9B,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK;gBAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,KAAK,GAAG,KAAK,CAAC;YACd,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,CAAC;QAED,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QAEvB,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM;IACvC,CAAC;IAED,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,gBAAgB,GAAG,WAAW,GAAG,GAAG,CAAC,CAAC;IAErD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,IAAqB,EACrB,QAAgB,EAChB,IAAY,EACZ,EAAU;IAEV,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,8BAA8B,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAC1F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC9B,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;QACvB,IAAI,KAAK,CAAC,MAAM,GAAG,UAAU;YAAE,MAAM;IACvC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/lib/compliance-report.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Compliance Report Builder (Feature 9 — EU AI Act)
+ *
+ * Orchestrates data queries to assemble a complete compliance report.
+ * Signs the assembled report with HMAC-SHA256.
+ */
+import type { EventRepository } from '../db/repositories/event-repository.js';
+import type { AnalyticsRepository } from '../db/repositories/analytics-repository.js';
+import type { GuardrailStore } from '../db/guardrail-store.js';
+import { type VerificationReport } from './audit-verify.js';
+export declare const COMPLIANCE_REPORT_VERSION = 1;
+export interface IncidentEntry {
+    eventId: string;
+    timestamp: string;
+    sessionId: string;
+    agentId: string;
+    eventType: string;
+    severity: string;
+    summary: string;
+}
+export interface ComplianceReport {
+    version: typeof COMPLIANCE_REPORT_VERSION;
+    generatedAt: string;
+    tenantId: string;
+    range: {
+        from: string;
+        to: string;
+    };
+    systemInfo: {
+        productName: string;
+        productVersion: string;
+        hashAlgorithm: string;
+        hashChainVersion: number;
+        signingAlgorithm: string;
+    };
+    chainVerification: VerificationReport;
+    humanOversight: {
+        approvalRequests: {
+            total: number;
+            granted: number;
+            denied: number;
+            expired: number;
+            averageResponseTimeMs: number | null;
+        };
+        guardrailTriggers: {
+            total: number;
+            byConditionType: Record<string, number>;
+            byActionType: Record<string, number>;
+        };
+    };
+    incidents: {
+        totalErrors: number;
+        totalCritical: number;
+        alertsTriggered: number;
+        alertsResolved: number;
+        items: IncidentEntry[];
+    };
+    costUsage: {
+        totalSessions: number;
+        uniqueAgents: number;
+        totalLlmCalls: number;
+        totalToolCalls: number;
+        totalCostUsd: number;
+        costByAgent: Record<string, number>;
+    };
+    retention: {
+        configuredRetentionDays: number;
+        minimumRetentionDays: number;
+        earliestEventTimestamp: string | null;
+        latestEventTimestamp: string | null;
+        chainIntact: boolean;
+        dataGapDetected: boolean;
+    };
+    signature: string | null;
+}
+export declare class ComplianceReportBuilder {
+    private eventRepo;
+    private analyticsRepo;
+    private guardrailStore;
+    private signingKey?;
+    private configuredRetentionDays;
+    private minimumRetentionDays;
+    private maxIncidentItems;
+    constructor(eventRepo: EventRepository, analyticsRepo: AnalyticsRepository, guardrailStore: GuardrailStore, signingKey?: string | undefined, configuredRetentionDays?: number, minimumRetentionDays?: number, maxIncidentItems?: number);
+    build(tenantId: string, from: string, to: string): Promise<ComplianceReport>;
+}
+//# sourceMappingURL=compliance-report.d.ts.map

package/dist/lib/compliance-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-report.d.ts","sourceRoot":"","sources":["../../src/lib/compliance-report.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAC9E,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4CAA4C,CAAC;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAmB,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI7E,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAE3C,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,yBAAyB,CAAC;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAEpC,UAAU,EAAE;QACV,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,aAAa,EAAE,MAAM,CAAC;QACtB,gBAAgB,EAAE,MAAM,CAAC;QACzB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IAEF,iBAAiB,EAAE,kBAAkB,CAAC;IAEtC,cAAc,EAAE;QACd,gBAAgB,EAAE;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,OAAO,EAAE,MAAM,CAAC;YAChB,MAAM,EAAE,MAAM,CAAC;YACf,OAAO,EAAE,MAAM,CAAC;YAChB,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;SACtC,CAAC;QACF,iBAAiB,EAAE;YACjB,KAAK,EAAE,MAAM,CAAC;YACd,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACtC,CAAC;KACH,CAAC;IAEF,SAAS,EAAE;QACT,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,cAAc,EAAE,MAAM,CAAC;QACvB,KAAK,EAAE,aAAa,EAAE,CAAC;KACxB,CAAC;IAEF,SAAS,EAAE;QACT,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;KACrC,CAAC;IAEF,SAAS,EAAE;QACT,uBAAuB,EAAE,MAAM,CAAC;QAChC,oBAAoB,EAAE,MAAM,CAAC;QAC7B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;QACtC,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,WAAW,EAAE,OAAO,CAAC;QACrB,eAAe,EAAE,OAAO,CAAC;KAC1B,CAAC;IAEF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAID,qBAAa,uBAAuB;IAEhC,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,aAAa;IACrB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,UAAU,CAAC;IACnB,OAAO,CAAC,uBAAuB;IAC/B,OAAO,CAAC,oBAAoB;IAC5B,OAAO,CAAC,gBAAgB;gBANhB,SAAS,EAAE,eAAe,EAC1B,aAAa,EAAE,mBAAmB,EAClC,cAAc,EAAE,cAAc,EAC9B,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,uBAAuB,GAAE,MAAW,EACpC,oBAAoB,GAAE,MAAY,EAClC,gBAAgB,GAAE,MAAa;IAGnC,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAgInF"}