@amodalai/core 0.1.0

package/dist/src/audit/audit-logger.js

@@ -0,0 +1,137 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { MUTATOR_KINDS } from '@google/gemini-cli-core';
+import { ConsoleAuditOutput, FileAuditOutput, RemoteAuditOutput, } from './audit-outputs.js';
+import { redactSensitiveParams } from './audit-redact.js';
+/**
+ * Structured audit logger. Emits entries to configured outputs.
+ *
+ * Audit must never throw or crash the process — all errors are swallowed.
+ */
+export class AuditLogger {
+    outputs;
+    config;
+    context;
+    constructor(config, context) {
+        this.config = config;
+        this.context = context;
+        this.outputs = this.createOutputs(config);
+    }
+    /**
+     * Log a tool call event.
+     */
+    logToolCall(name, params, durationMs) {
+        this.emit({
+            event: 'tool_call',
+            tool: name,
+            params,
+            duration_ms: durationMs,
+        });
+    }
+    /**
+     * Log a write operation event (mutations: edit, delete, move, execute).
+     */
+    logWriteOp(name, params, durationMs) {
+        this.emit({
+            event: 'write_op',
+            tool: name,
+            params,
+            duration_ms: durationMs,
+        });
+    }
+    /**
+     * Log session start.
+     */
+    logSessionStart() {
+        this.emit({ event: 'session_start' });
+    }
+    /**
+     * Log session end.
+     */
+    logSessionEnd() {
+        this.emit({ event: 'session_end' });
+    }
+    /**
+     * Log a version bundle load.
+     */
+    logVersionLoad(version) {
+        this.emit({
+            event: 'version_load',
+            params: { version },
+        });
+    }
+    /**
+     * Log a knowledge base proposal event.
+     */
+    logKbProposal(scope, title, proposalId) {
+        this.emit({
+            event: 'kb_proposal',
+            params: { scope, title, proposal_id: proposalId },
+        });
+    }
+    /**
+     * Flush all outputs that support it.
+     */
+    async flush() {
+        const promises = this.outputs
+            .filter((o) => o.flush)
+            .map((o) => o.flush());
+        await Promise.allSettled(promises);
+    }
+    /**
+     * Check whether a tool kind represents a write/mutation operation.
+     */
+    static isWriteOperation(kind) {
+        return MUTATOR_KINDS.includes(kind);
+    }
+    emit(partial) {
+        if (!this.config.enabled) {
+            return;
+        }
+        try {
+            const entry = {
+                timestamp: new Date().toISOString(),
+                version: this.context.version,
+                session_id: this.context.sessionId,
+                user: this.context.user,
+                role: this.context.role,
+                source: this.context.source,
+                ...partial,
+            };
+            // Redact sensitive params if configured
+            if (this.config.redactParams && entry.params) {
+                entry.params = redactSensitiveParams(entry.params);
+            }
+            for (const output of this.outputs) {
+                try {
+                    output.write(entry);
+                }
+                catch {
+                    // Swallow — individual output failure must not affect others
+                }
+            }
+        }
+        catch {
+            // Swallow — audit must never crash the process
+        }
+    }
+    createOutputs(config) {
+        const outputs = [];
+        for (const type of config.outputs) {
+            if (type === 'console') {
+                outputs.push(new ConsoleAuditOutput());
+            }
+            else if (type === 'file' && config.filePath) {
+                outputs.push(new FileAuditOutput(config.filePath));
+            }
+            else if (type === 'remote' && config.remoteUrl) {
+                outputs.push(new RemoteAuditOutput(config.remoteUrl));
+            }
+        }
+        return outputs;
+    }
+}
+//# sourceMappingURL=audit-logger.js.map

package/dist/src/audit/audit-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-logger.js","sourceRoot":"","sources":["../../../src/audit/audit-logger.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAa,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAOnE,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAE1D;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACL,OAAO,CAAgB;IACvB,MAAM,CAAc;IACpB,OAAO,CAAe;IAEvC,YAAY,MAAmB,EAAE,OAAqB;QACpD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,WAAW,CACT,IAAY,EACZ,MAAgC,EAChC,UAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,WAAW;YAClB,IAAI,EAAE,IAAI;YACV,MAAM;YACN,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,UAAU,CACR,IAAY,EACZ,MAAgC,EAChC,UAAmB;QAEnB,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,IAAI;YACV,MAAM;YACN,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,eAAe;QACb,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,OAAe;QAC5B,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,cAAc;YACrB,MAAM,EAAE,EAAE,OAAO,EAAE;SACpB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAAa,EAAE,KAAa,EAAE,UAAmB;QAC7D,IAAI,CAAC,IAAI,CAAC;YACR,KAAK,EAAE,aAAa;YACpB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE;SAClD,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO;aAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,EAAE,CAAC,CAAC;QAC1B,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,gBAAgB,CAAC,IAAU;QAChC,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAEO,IAAI,CACV,OAA8F;QAE9F,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAe;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO;gBAC7B,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBAClC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACvB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;gBACvB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,GAAG,OAAO;aACX,CAAC;YAEF,wCAAwC;YACxC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7C,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,IAAI,CAAC;oBACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;gBAAC,MAAM,CAAC;oBACP,6DAA6D;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;IAEO,aAAa,CAAC,MAAmB;QACvC,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,OAAO,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;YACzC,CAAC;iBAAM,IAAI,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrD,CAAC;iBAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACjD,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/src/audit/audit-outputs.d.ts

@@ -0,0 +1,34 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { AuditEntry, AuditOutput } from './audit-types.js';
+/**
+ * Writes audit entries as JSON lines to stderr.
+ * Non-blocking — uses process.stderr.write.
+ */
+export declare class ConsoleAuditOutput implements AuditOutput {
+    write(entry: AuditEntry): void;
+}
+/**
+ * Appends audit entries as JSON lines to a file.
+ * Fire-and-forget — errors are swallowed.
+ */
+export declare class FileAuditOutput implements AuditOutput {
+    private readonly filePath;
+    constructor(filePath: string);
+    write(entry: AuditEntry): void;
+}
+/**
+ * Buffers audit entries and POSTs them to a remote URL in batches.
+ * Auto-flushes at 100 items. Errors are swallowed.
+ */
+export declare class RemoteAuditOutput implements AuditOutput {
+    private readonly url;
+    private buffer;
+    private readonly maxBufferSize;
+    constructor(url: string);
+    write(entry: AuditEntry): void;
+    flush(): Promise<void>;
+}

package/dist/src/audit/audit-outputs.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import * as fs from 'node:fs';
+/**
+ * Writes audit entries as JSON lines to stderr.
+ * Non-blocking — uses process.stderr.write.
+ */
+export class ConsoleAuditOutput {
+    write(entry) {
+        try {
+            process.stderr.write(JSON.stringify(entry) + '\n');
+        }
+        catch {
+            // Swallow — audit must never crash the process
+        }
+    }
+}
+/**
+ * Appends audit entries as JSON lines to a file.
+ * Fire-and-forget — errors are swallowed.
+ */
+export class FileAuditOutput {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    write(entry) {
+        // Fire-and-forget append
+        fs.promises.appendFile(this.filePath, JSON.stringify(entry) + '\n').catch(() => {
+            // Swallow — audit must never crash the process
+        });
+    }
+}
+/**
+ * Buffers audit entries and POSTs them to a remote URL in batches.
+ * Auto-flushes at 100 items. Errors are swallowed.
+ */
+export class RemoteAuditOutput {
+    url;
+    buffer = [];
+    maxBufferSize = 100;
+    constructor(url) {
+        this.url = url;
+    }
+    write(entry) {
+        this.buffer.push(entry);
+        if (this.buffer.length >= this.maxBufferSize) {
+            // Fire-and-forget flush
+            void this.flush();
+        }
+    }
+    async flush() {
+        if (this.buffer.length === 0) {
+            return;
+        }
+        const batch = this.buffer;
+        this.buffer = [];
+        try {
+            await fetch(this.url, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify(batch),
+            });
+        }
+        catch {
+            // Swallow — audit must never crash the process
+        }
+    }
+}
+//# sourceMappingURL=audit-outputs.js.map

package/dist/src/audit/audit-outputs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-outputs.js","sourceRoot":"","sources":["../../../src/audit/audit-outputs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IAC7B,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,QAAgB;QAAhB,aAAQ,GAAR,QAAQ,CAAQ;IAAG,CAAC;IAEjD,KAAK,CAAC,KAAiB;QACrB,yBAAyB;QACzB,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CACvE,GAAG,EAAE;YACH,+CAA+C;QACjD,CAAC,CACF,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAIC;IAHrB,MAAM,GAAiB,EAAE,CAAC;IACjB,aAAa,GAAG,GAAG,CAAC;IAErC,YAA6B,GAAW;QAAX,QAAG,GAAH,GAAG,CAAQ;IAAG,CAAC;IAE5C,KAAK,CAAC,KAAiB;QACrB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC7C,wBAAwB;YACxB,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,+CAA+C;QACjD,CAAC;IACH,CAAC;CACF"}

package/dist/src/audit/audit-redact.d.ts

@@ -0,0 +1,14 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Checks whether a single key name matches any sensitive pattern.
+ */
+export declare function isSensitiveKey(key: string): boolean;
+/**
+ * Deep-clones a params object and replaces values of sensitive keys
+ * with "[REDACTED]". Returns a new object — the original is not mutated.
+ */
+export declare function redactSensitiveParams(params: Record<string, unknown>): Record<string, unknown>;

package/dist/src/audit/audit-redact.js

@@ -0,0 +1,55 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Patterns that match sensitive parameter key names.
+ * Case-insensitive matching is applied when checking.
+ */
+const SENSITIVE_PATTERNS = [
+    /api[_-]?key/i,
+    /secret/i,
+    /password/i,
+    /token/i,
+    /\bauth\b/i,
+    /credential/i,
+    /bearer/i,
+    /authorization/i,
+];
+const REDACTED = '[REDACTED]';
+/**
+ * Checks whether a single key name matches any sensitive pattern.
+ */
+export function isSensitiveKey(key) {
+    return SENSITIVE_PATTERNS.some((pattern) => pattern.test(key));
+}
+/**
+ * Deep-clones a params object and replaces values of sensitive keys
+ * with "[REDACTED]". Returns a new object — the original is not mutated.
+ */
+export function redactSensitiveParams(params) {
+    return redactObject(params);
+}
+function redactObject(obj) {
+    const result = {};
+    for (const [key, value] of Object.entries(obj)) {
+        if (isSensitiveKey(key)) {
+            result[key] = REDACTED;
+        }
+        else if (isPlainObject(value)) {
+            result[key] = redactObject(value);
+        }
+        else if (Array.isArray(value)) {
+            result[key] = value.map((item) => isPlainObject(item) ? redactObject(item) : item);
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return result;
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=audit-redact.js.map

package/dist/src/audit/audit-redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-redact.js","sourceRoot":"","sources":["../../../src/audit/audit-redact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AACH,MAAM,kBAAkB,GAAa;IACnC,cAAc;IACd,SAAS;IACT,WAAW;IACX,QAAQ;IACR,WAAW;IACX,aAAa;IACb,SAAS;IACT,gBAAgB;CACjB,CAAC;AAEF,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+B;IAE/B,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,YAAY,CACnB,GAA4B;IAE5B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QACzB,CAAC;aAAM,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/B,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAChD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/src/audit/audit-types.d.ts

@@ -0,0 +1,122 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { z } from 'zod';
+/**
+ * Types of audit events the system can emit.
+ */
+export declare const AuditEventTypeSchema: z.ZodEnum<["tool_call", "session_start", "session_end", "write_op", "version_load", "kb_proposal"]>;
+export type AuditEventType = z.infer<typeof AuditEventTypeSchema>;
+/**
+ * Audit source: interactive session or a named automation.
+ */
+export declare const AuditSourceSchema: z.ZodEffects<z.ZodString, string, string>;
+export type AuditSource = z.infer<typeof AuditSourceSchema>;
+/**
+ * A single audit log entry.
+ */
+export declare const AuditEntrySchema: z.ZodObject<{
+    /** ISO 8601 timestamp */
+    timestamp: z.ZodString;
+    /** Active version bundle (defaults to "local") */
+    version: z.ZodString;
+    /** Session identifier */
+    session_id: z.ZodString;
+    /** User identifier */
+    user: z.ZodString;
+    /** Active role name */
+    role: z.ZodString;
+    /** Type of event */
+    event: z.ZodEnum<["tool_call", "session_start", "session_end", "write_op", "version_load", "kb_proposal"]>;
+    /** Tool name (for tool_call and write_op events) */
+    tool: z.ZodOptional<z.ZodString>;
+    /** Tool parameters (may be redacted) */
+    params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    /** Duration in milliseconds */
+    duration_ms: z.ZodOptional<z.ZodNumber>;
+    /** Source of the event */
+    source: z.ZodEffects<z.ZodString, string, string>;
+}, "strip", z.ZodTypeAny, {
+    timestamp: string;
+    version: string;
+    session_id: string;
+    user: string;
+    role: string;
+    event: "tool_call" | "session_start" | "session_end" | "write_op" | "version_load" | "kb_proposal";
+    source: string;
+    params?: Record<string, unknown> | undefined;
+    tool?: string | undefined;
+    duration_ms?: number | undefined;
+}, {
+    timestamp: string;
+    version: string;
+    session_id: string;
+    user: string;
+    role: string;
+    event: "tool_call" | "session_start" | "session_end" | "write_op" | "version_load" | "kb_proposal";
+    source: string;
+    params?: Record<string, unknown> | undefined;
+    tool?: string | undefined;
+    duration_ms?: number | undefined;
+}>;
+export type AuditEntry = z.infer<typeof AuditEntrySchema>;
+/**
+ * Interface for audit output sinks.
+ */
+export interface AuditOutput {
+    /** Write a single audit entry to this output. */
+    write(entry: AuditEntry): void;
+    /** Flush any buffered entries. Optional for sync outputs. */
+    flush?(): Promise<void>;
+}
+/**
+ * Configuration for the audit logging system.
+ */
+export declare const AuditConfigSchema: z.ZodObject<{
+    /** Whether audit logging is enabled */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Output sinks to write to */
+    outputs: z.ZodDefault<z.ZodArray<z.ZodEnum<["console", "file", "remote"]>, "many">>;
+    /** File path for file output */
+    filePath: z.ZodOptional<z.ZodString>;
+    /** Remote URL for remote output */
+    remoteUrl: z.ZodOptional<z.ZodString>;
+    /** Whether to redact sensitive params (default true) */
+    redactParams: z.ZodDefault<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    enabled: boolean;
+    outputs: ("console" | "file" | "remote")[];
+    redactParams: boolean;
+    filePath?: string | undefined;
+    remoteUrl?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    outputs?: ("console" | "file" | "remote")[] | undefined;
+    filePath?: string | undefined;
+    remoteUrl?: string | undefined;
+    redactParams?: boolean | undefined;
+}>;
+export type AuditConfig = z.infer<typeof AuditConfigSchema>;
+/**
+ * Context for creating audit entries — set once at logger creation.
+ */
+export interface AuditContext {
+    version: string;
+    sessionId: string;
+    user: string;
+    role: string;
+    source: string;
+}
+/**
+ * An immutable audit entry with hash chain for tamper detection.
+ */
+export interface ImmutableAuditEntry extends AuditEntry {
+    /** Monotonically increasing sequence number within the session */
+    sequence: number;
+    /** SHA-256 hash of the previous entry (empty string for first) */
+    previousHash: string;
+    /** SHA-256 hash of this entry (including previousHash) */
+    entryHash: string;
+}

package/dist/src/audit/audit-types.js

@@ -0,0 +1,64 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import { z } from 'zod';
+/**
+ * Types of audit events the system can emit.
+ */
+export const AuditEventTypeSchema = z.enum([
+    'tool_call',
+    'session_start',
+    'session_end',
+    'write_op',
+    'version_load',
+    'kb_proposal',
+]);
+/**
+ * Audit source: interactive session or a named automation.
+ */
+export const AuditSourceSchema = z
+    .string()
+    .refine((val) => val === 'interactive' || val.startsWith('automation:') || val.startsWith('heartbeat:'), { message: 'Source must be "interactive" or "automation:<name>"' });
+/**
+ * A single audit log entry.
+ */
+export const AuditEntrySchema = z.object({
+    /** ISO 8601 timestamp */
+    timestamp: z.string(),
+    /** Active version bundle (defaults to "local") */
+    version: z.string(),
+    /** Session identifier */
+    session_id: z.string(),
+    /** User identifier */
+    user: z.string(),
+    /** Active role name */
+    role: z.string(),
+    /** Type of event */
+    event: AuditEventTypeSchema,
+    /** Tool name (for tool_call and write_op events) */
+    tool: z.string().optional(),
+    /** Tool parameters (may be redacted) */
+    params: z.record(z.unknown()).optional(),
+    /** Duration in milliseconds */
+    duration_ms: z.number().optional(),
+    /** Source of the event */
+    source: AuditSourceSchema,
+});
+/**
+ * Configuration for the audit logging system.
+ */
+export const AuditConfigSchema = z.object({
+    /** Whether audit logging is enabled */
+    enabled: z.boolean().default(true),
+    /** Output sinks to write to */
+    outputs: z.array(z.enum(['console', 'file', 'remote'])).default(['console']),
+    /** File path for file output */
+    filePath: z.string().optional(),
+    /** Remote URL for remote output */
+    remoteUrl: z.string().url().optional(),
+    /** Whether to redact sensitive params (default true) */
+    redactParams: z.boolean().default(true),
+});
+//# sourceMappingURL=audit-types.js.map

package/dist/src/audit/audit-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-types.js","sourceRoot":"","sources":["../../../src/audit/audit-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,WAAW;IACX,eAAe;IACf,aAAa;IACb,UAAU;IACV,cAAc;IACd,aAAa;CACd,CAAC,CAAC;AAIH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,MAAM,CACL,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,aAAa,IAAI,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,EAC/F,EAAE,OAAO,EAAE,qDAAqD,EAAE,CACnE,CAAC;AAIJ;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,yBAAyB;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,kDAAkD;IAClD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,yBAAyB;IACzB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,sBAAsB;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,uBAAuB;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,oBAAoB;IACpB,KAAK,EAAE,oBAAoB;IAC3B,oDAAoD;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,wCAAwC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,+BAA+B;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,0BAA0B;IAC1B,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC;AAcH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,uCAAuC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,+BAA+B;IAC/B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5E,gCAAgC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,mCAAmC;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,wDAAwD;IACxD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACxC,CAAC,CAAC"}

package/dist/src/audit/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+export { AuditEventTypeSchema, AuditSourceSchema, AuditEntrySchema, AuditConfigSchema, } from './audit-types.js';
+export type { AuditEventType, AuditSource, AuditEntry, AuditOutput, AuditConfig, AuditContext, } from './audit-types.js';
+export { AuditLogger } from './audit-logger.js';
+export { redactSensitiveParams, isSensitiveKey } from './audit-redact.js';
+export { ConsoleAuditOutput, FileAuditOutput, RemoteAuditOutput, } from './audit-outputs.js';

package/dist/src/audit/index.js

@@ -0,0 +1,10 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+export { AuditEventTypeSchema, AuditSourceSchema, AuditEntrySchema, AuditConfigSchema, } from './audit-types.js';
+export { AuditLogger } from './audit-logger.js';
+export { redactSensitiveParams, isSensitiveKey } from './audit-redact.js';
+export { ConsoleAuditOutput, FileAuditOutput, RemoteAuditOutput, } from './audit-outputs.js';
+//# sourceMappingURL=index.js.map

package/dist/src/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAS1B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAC"}

package/dist/src/eval/eval-cost.d.ts

@@ -0,0 +1,33 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+import type { EvalCostInfo } from './eval-types.js';
+/**
+ * Pricing per million tokens (in microdollars) for known models.
+ * Prices are approximate and should be updated as providers change pricing.
+ */
+export declare const MODEL_PRICING: Record<string, {
+    inputPerMToken: number;
+    outputPerMToken: number;
+}>;
+/**
+ * Look up pricing for a model, falling back to default for unknown models.
+ */
+export declare function getModelPricing(model: string): {
+    inputPerMToken: number;
+    outputPerMToken: number;
+};
+/**
+ * Compute cost info from token counts and model identity.
+ */
+export declare function computeEvalCost(inputTokens: number, outputTokens: number, model: string): EvalCostInfo;
+/**
+ * Aggregate multiple per-case costs into a total.
+ */
+export declare function aggregateRunCost(perCaseCosts: EvalCostInfo[]): EvalCostInfo;
+/**
+ * Format microdollars as a human-readable dollar string.
+ */
+export declare function formatCostMicros(micros: number): string;

package/dist/src/eval/eval-cost.js

@@ -0,0 +1,73 @@
+/**
+ * @license
+ * Copyright 2026 Amodal Labs, Inc.
+ * SPDX-License-Identifier: MIT
+ */
+/**
+ * Pricing per million tokens (in microdollars) for known models.
+ * Prices are approximate and should be updated as providers change pricing.
+ */
+export const MODEL_PRICING = {
+    // Anthropic
+    'claude-opus-4-20250514': { inputPerMToken: 15_000_000, outputPerMToken: 75_000_000 },
+    'claude-sonnet-4-20250514': { inputPerMToken: 3_000_000, outputPerMToken: 15_000_000 },
+    'claude-sonnet-4-6-20250626': { inputPerMToken: 3_000_000, outputPerMToken: 15_000_000 },
+    'claude-haiku-3-5-20241022': { inputPerMToken: 800_000, outputPerMToken: 4_000_000 },
+    'claude-haiku-4-5-20251001': { inputPerMToken: 800_000, outputPerMToken: 4_000_000 },
+    // OpenAI
+    'gpt-4o': { inputPerMToken: 2_500_000, outputPerMToken: 10_000_000 },
+    'gpt-4o-mini': { inputPerMToken: 150_000, outputPerMToken: 600_000 },
+    'gpt-4.1': { inputPerMToken: 2_000_000, outputPerMToken: 8_000_000 },
+    'gpt-4.1-mini': { inputPerMToken: 400_000, outputPerMToken: 1_600_000 },
+    'gpt-4.1-nano': { inputPerMToken: 100_000, outputPerMToken: 400_000 },
+    // Google
+    'gemini-2.5-pro': { inputPerMToken: 1_250_000, outputPerMToken: 10_000_000 },
+    'gemini-2.5-flash': { inputPerMToken: 150_000, outputPerMToken: 600_000 },
+    'gemini-2.0-flash': { inputPerMToken: 100_000, outputPerMToken: 400_000 },
+};
+// Default pricing for unknown models (conservative estimate)
+const DEFAULT_PRICING = { inputPerMToken: 3_000_000, outputPerMToken: 15_000_000 };
+/**
+ * Look up pricing for a model, falling back to default for unknown models.
+ */
+export function getModelPricing(model) {
+    return MODEL_PRICING[model] ?? DEFAULT_PRICING;
+}
+/**
+ * Compute cost info from token counts and model identity.
+ */
+export function computeEvalCost(inputTokens, outputTokens, model) {
+    const pricing = getModelPricing(model);
+    const totalTokens = inputTokens + outputTokens;
+    const estimatedCostMicros = Math.round((inputTokens * pricing.inputPerMToken + outputTokens * pricing.outputPerMToken) / 1_000_000);
+    return { inputTokens, outputTokens, totalTokens, estimatedCostMicros };
+}
+/**
+ * Aggregate multiple per-case costs into a total.
+ */
+export function aggregateRunCost(perCaseCosts) {
+    const result = {
+        inputTokens: 0,
+        outputTokens: 0,
+        totalTokens: 0,
+        estimatedCostMicros: 0,
+    };
+    for (const cost of perCaseCosts) {
+        result.inputTokens += cost.inputTokens;
+        result.outputTokens += cost.outputTokens;
+        result.totalTokens += cost.totalTokens;
+        result.estimatedCostMicros += cost.estimatedCostMicros;
+    }
+    return result;
+}
+/**
+ * Format microdollars as a human-readable dollar string.
+ */
+export function formatCostMicros(micros) {
+    const dollars = micros / 1_000_000;
+    if (dollars < 0.01) {
+        return `$${dollars.toFixed(4)}`;
+    }
+    return `$${dollars.toFixed(2)}`;
+}
+//# sourceMappingURL=eval-cost.js.map

package/dist/src/eval/eval-cost.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eval-cost.js","sourceRoot":"","sources":["../../../src/eval/eval-cost.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAsE;IAC9F,YAAY;IACZ,wBAAwB,EAAE,EAAC,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU,EAAC;IACnF,0BAA0B,EAAE,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAC;IACpF,4BAA4B,EAAE,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAC;IACtF,2BAA2B,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAC;IAClF,2BAA2B,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAC;IAClF,SAAS;IACT,QAAQ,EAAE,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAC;IAClE,aAAa,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAC;IAClE,SAAS,EAAE,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAC;IAClE,cAAc,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,SAAS,EAAC;IACrE,cAAc,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAC;IACnE,SAAS;IACT,gBAAgB,EAAE,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAC;IAC1E,kBAAkB,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAC;IACvE,kBAAkB,EAAE,EAAC,cAAc,EAAE,OAAO,EAAE,eAAe,EAAE,OAAO,EAAC;CACxE,CAAC;AAEF,6DAA6D;AAC7D,MAAM,eAAe,GAAG,EAAC,cAAc,EAAE,SAAS,EAAE,eAAe,EAAE,UAAU,EAAC,CAAC;AAEjF;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,eAAe,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAC7B,WAAmB,EACnB,YAAoB,EACpB,KAAa;IAEb,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,WAAW,GAAG,YAAY,CAAC;IAC/C,MAAM,mBAAmB,GAAG,IAAI,CAAC,KAAK,CACpC,CAAC,WAAW,GAAG,OAAO,CAAC,cAAc,GAAG,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,GAAG,SAAS,CAC5F,CAAC;IAEF,OAAO,EAAC,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAC,CAAC;AACvE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAA4B;IAC3D,MAAM,MAAM,GAAiB;QAC3B,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,CAAC;QACf,WAAW,EAAE,CAAC;QACd,mBAAmB,EAAE,CAAC;KACvB,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QACvC,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC;QACzC,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC;QACvC,MAAM,CAAC,mBAAmB,IAAI,IAAI,CAAC,mBAAmB,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;IACnC,IAAI,OAAO,GAAG,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC"}