@chainingintention/pi-web-cn 1.202608.6 → 1.202608.8

package/dist/server/audit/managementAuditStore.js

@@ -0,0 +1,211 @@
+import { randomUUID } from "node:crypto";
+const DAY_MS = 24 * 60 * 60 * 1_000;
+const DEFAULT_FLUSH_INTERVAL_MS = 1_000;
+const DEFAULT_MAINTENANCE_INTERVAL_MS = DAY_MS;
+const DEFAULT_MAX_QUEUE_SIZE = 10_000;
+const TEMPLATE_VERSION = 1;
+export class ManagementAuditStore {
+    constructor(options) {
+        this.options = options;
+        this.queue = [];
+        this.closed = false;
+        this.fetchImpl = options.fetch ?? fetch;
+        this.now = options.now ?? (() => new Date());
+        this.flushIntervalMs = options.flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;
+        this.maxQueueSize = options.maxQueueSize ?? DEFAULT_MAX_QUEUE_SIZE;
+    }
+    async initialize() {
+        const interval = this.options.maintenanceIntervalMs ?? DEFAULT_MAINTENANCE_INTERVAL_MS;
+        if (interval > 0) {
+            this.maintenanceTimer = setInterval(() => {
+                void this.runMaintenanceCycle().catch((error) => { this.options.onError?.(error); });
+            }, interval);
+            this.maintenanceTimer.unref();
+        }
+        await this.runMaintenanceCycle();
+    }
+    record(event) {
+        if (this.closed)
+            return;
+        const timestamp = this.now();
+        const id = randomUUID();
+        this.queue.push({
+            id,
+            index: managementAuditIndexName(this.options.indexPrefix, timestamp),
+            document: managementAuditDocument(id, timestamp, event),
+        });
+        if (this.queue.length > this.maxQueueSize) {
+            this.queue.splice(0, this.queue.length - this.maxQueueSize);
+            this.options.onError?.(new Error("management audit queue reached its size limit; oldest records were dropped"));
+        }
+        this.scheduleFlush();
+    }
+    flush() {
+        if (this.flushPromise !== undefined)
+            return this.flushPromise;
+        this.flushPromise = this.flushQueued().finally(() => {
+            this.flushPromise = undefined;
+            if (this.queue.length > 0 && !this.closed)
+                this.scheduleFlush();
+        });
+        return this.flushPromise;
+    }
+    async maintain() {
+        const now = this.now();
+        const month = shanghaiMonth(now);
+        if (this.maintenanceMonth === month)
+            return;
+        const cutoff = new Date(now.getTime() - this.options.retentionDays * DAY_MS);
+        const pattern = encodeURIComponent(`${this.options.indexPrefix}-*`);
+        await this.request(`${pattern}/_delete_by_query?conflicts=proceed&refresh=false`, {
+            method: "POST",
+            body: JSON.stringify({ query: { range: { "@timestamp": { lt: cutoff.toISOString() } } } }),
+            headers: { "content-type": "application/json" },
+        }, [200, 404]);
+        this.maintenanceMonth = month;
+    }
+    async close() {
+        this.closed = true;
+        if (this.flushTimer !== undefined)
+            clearTimeout(this.flushTimer);
+        if (this.maintenanceTimer !== undefined)
+            clearInterval(this.maintenanceTimer);
+        do {
+            await this.flush();
+        } while (this.queue.length > 0);
+    }
+    scheduleFlush() {
+        if (this.flushTimer !== undefined)
+            return;
+        this.flushTimer = setTimeout(() => {
+            this.flushTimer = undefined;
+            void this.flush().catch((error) => { this.options.onError?.(error); });
+        }, this.flushIntervalMs);
+        this.flushTimer.unref();
+    }
+    async flushQueued() {
+        if (this.queue.length === 0)
+            return;
+        const batch = this.queue.splice(0, this.queue.length);
+        const body = `${batch.flatMap((entry) => [
+            JSON.stringify({ index: { _index: entry.index, _id: entry.id } }),
+            JSON.stringify(entry.document),
+        ]).join("\n")}\n`;
+        try {
+            const response = await this.request("_bulk", {
+                method: "POST",
+                body,
+                headers: { "content-type": "application/x-ndjson" },
+            });
+            const result = await response.json();
+            if (isRecord(result) && result["errors"] === true)
+                throw new Error("Elasticsearch rejected one or more management audit records");
+        }
+        catch (error) {
+            this.queue.unshift(...batch);
+            if (this.queue.length > this.maxQueueSize)
+                this.queue.length = this.maxQueueSize;
+            throw error;
+        }
+    }
+    async installIndexTemplate() {
+        const name = encodeURIComponent(`${this.options.indexPrefix}-template`);
+        await this.request(`_index_template/${name}`, {
+            method: "PUT",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify({
+                index_patterns: [`${this.options.indexPrefix}-*`],
+                priority: 200,
+                version: TEMPLATE_VERSION,
+                template: {
+                    settings: { number_of_shards: 1 },
+                    mappings: {
+                        dynamic: false,
+                        properties: {
+                            "@timestamp": { type: "date" },
+                            event: { properties: { id: { type: "keyword" }, action: { type: "keyword" }, status: { type: "keyword" }, duration_ms: { type: "long" } } },
+                            user: { properties: { id: { type: "keyword" }, root_user_id: { type: "keyword" } } },
+                            project: { properties: { id: { type: "keyword" } } },
+                            session: { properties: { id: { type: "keyword" }, agent_session_id: { type: "keyword" } } },
+                            workspace: { properties: { cwd: { type: "keyword", ignore_above: 4096 } } },
+                            tool: { properties: { name: { type: "keyword" }, call_id: { type: "keyword" } } },
+                            workbench: { properties: {
+                                    authorization_revision: { type: "integer" }, capability_name: { type: "keyword" }, capability_version: { type: "keyword" },
+                                    skill_name: { type: "keyword" }, skill_version: { type: "keyword" }, run_id: { type: "keyword" }, trace_id: { type: "keyword" },
+                                    mcp_trace_id: { type: "keyword" }, status_code: { type: "keyword" }, retry_count: { type: "integer" },
+                                } },
+                        },
+                    },
+                },
+            }),
+        });
+    }
+    async runMaintenanceCycle() {
+        await this.installIndexTemplate();
+        await this.maintain();
+    }
+    async request(path, init, acceptedStatuses = [200]) {
+        const headers = new Headers(init.headers);
+        if (this.options.apiKey !== undefined)
+            headers.set("authorization", `ApiKey ${this.options.apiKey}`);
+        else if (this.options.username !== undefined && this.options.password !== undefined) {
+            headers.set("authorization", `Basic ${Buffer.from(`${this.options.username}:${this.options.password}`).toString("base64")}`);
+        }
+        const response = await this.fetchImpl(new URL(path, trailingSlash(this.options.baseUrl)), { ...init, headers, signal: AbortSignal.timeout(10_000) });
+        if (!acceptedStatuses.includes(response.status))
+            throw new Error(`Elasticsearch management audit request failed with HTTP ${String(response.status)}`);
+        return response;
+    }
+}
+export function managementAuditIndexName(prefix, date) {
+    const local = shanghaiDateParts(date);
+    const target = new Date(Date.UTC(local.year, local.month - 1, local.day));
+    const day = target.getUTCDay() || 7;
+    target.setUTCDate(target.getUTCDate() + 4 - day);
+    const isoYear = target.getUTCFullYear();
+    const yearStart = new Date(Date.UTC(isoYear, 0, 1));
+    const week = Math.ceil((((target.getTime() - yearStart.getTime()) / DAY_MS) + 1) / 7);
+    return `${prefix}-${String(isoYear)}-w${String(week).padStart(2, "0")}`;
+}
+function managementAuditDocument(id, timestamp, event) {
+    return {
+        "@timestamp": timestamp.toISOString(),
+        event: { id, action: event.action, status: event.status, ...(event.durationMs === undefined ? {} : { duration_ms: event.durationMs }) },
+        user: { id: event.userId, root_user_id: event.rootUserId },
+        project: { id: event.projectId },
+        session: { id: event.sessionId, ...(event.agentSessionId === undefined ? {} : { agent_session_id: event.agentSessionId }) },
+        workspace: { cwd: event.cwd },
+        ...((event.toolName === undefined && event.toolCallId === undefined) ? {} : { tool: { ...(event.toolName === undefined ? {} : { name: event.toolName }), ...(event.toolCallId === undefined ? {} : { call_id: event.toolCallId }) } }),
+        workbench: compact({
+            authorization_revision: event.authorizationRevision,
+            capability_name: event.capabilityName,
+            capability_version: event.capabilityVersion,
+            skill_name: event.skillName,
+            skill_version: event.skillVersion,
+            run_id: event.runId,
+            trace_id: event.traceId,
+            mcp_trace_id: event.mcpTraceId,
+            status_code: event.statusCode === undefined ? undefined : String(event.statusCode),
+            retry_count: event.retryCount,
+        }),
+    };
+}
+function compact(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+}
+function shanghaiDateParts(date) {
+    const parts = new Intl.DateTimeFormat("en-CA", { timeZone: "Asia/Shanghai", year: "numeric", month: "2-digit", day: "2-digit" }).formatToParts(date);
+    const number = (type) => Number(parts.find((part) => part.type === type)?.value);
+    return { year: number("year"), month: number("month"), day: number("day") };
+}
+function shanghaiMonth(date) {
+    const { year, month } = shanghaiDateParts(date);
+    return `${String(year)}-${String(month).padStart(2, "0")}`;
+}
+function trailingSlash(value) {
+    return value.endsWith("/") ? value : `${value}/`;
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+//# sourceMappingURL=managementAuditStore.js.map

package/dist/server/audit/managementAuditStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managementAuditStore.js","sourceRoot":"","sources":["../../../src/server/audit/managementAuditStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwDzC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACpC,MAAM,yBAAyB,GAAG,KAAK,CAAC;AACxC,MAAM,+BAA+B,GAAG,MAAM,CAAC;AAC/C,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,OAAO,oBAAoB;IAY/B,YAA6B,OAAoC;QAApC,YAAO,GAAP,OAAO,CAA6B;QAThD,UAAK,GAA0B,EAAE,CAAC;QAO3C,WAAM,GAAG,KAAK,CAAC;QAGrB,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QAC5E,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACrE,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,+BAA+B,CAAC;QACvF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;gBACvC,KAAK,IAAI,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAChG,CAAC,EAAE,QAAQ,CAAC,CAAC;YACb,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAChC,CAAC;QACD,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAA2B;QAChC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,EAAE;YACF,KAAK,EAAE,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC;YACpE,QAAQ,EAAE,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC;YAC5D,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC,CAAC;QAClH,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAC9D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YAClD,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;YAC9B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAClE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,gBAAgB,KAAK,KAAK;YAAE,OAAO;QAC5C,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,OAAO,mDAAmD,EAAE;YAChF,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;YAC1F,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;SAChD,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9E,GAAG,CAAC;YACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;IAClC,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC1C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClF,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;SAC/B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,IAAI;gBACJ,OAAO,EAAE,EAAE,cAAc,EAAE,sBAAsB,EAAE;aACpD,CAAC,CAAC;YACH,MAAM,MAAM,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACpI,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC;YACjF,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB;QAChC,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,WAAW,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,EAAE;YAC5C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC;gBACjD,QAAQ,EAAE,GAAG;gBACb,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE;oBACR,QAAQ,EAAE,EAAE,gBAAgB,EAAE,CAAC,EAAE;oBACjC,QAAQ,EAAE;wBACR,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE;4BACV,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;4BAC9B,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE;4BAC3I,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;4BACpF,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;4BACpD,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;4BAC3F,SAAS,EAAE,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC3E,IAAI,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE;4BACjF,SAAS,EAAE,EAAE,UAAU,EAAE;oCACvB,sBAAsB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oCAC1H,UAAU,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;oCAC/H,YAAY,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;iCACtG,EAAE;yBACJ;qBACF;iBACF;aACF,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAC/B,MAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAiB,EAAE,mBAAsC,CAAC,GAAG,CAAC;QAChG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;aAChG,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/H,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACrJ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvJ,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,IAAU;IACjE,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACpC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,uBAAuB,CAAC,EAAU,EAAE,SAAe,EAAE,KAA2B;IACvF,OAAO;QACL,YAAY,EAAE,SAAS,CAAC,WAAW,EAAE;QACrC,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE;QACvI,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE;QAC1D,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE;QAChC,OAAO,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE;QAC3H,SAAS,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;QAC7B,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACtO,SAAS,EAAE,OAAO,CAAC;YACjB,sBAAsB,EAAE,KAAK,CAAC,qBAAqB;YACnD,eAAe,EAAE,KAAK,CAAC,cAAc;YACrC,kBAAkB,EAAE,KAAK,CAAC,iBAAiB;YAC3C,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,aAAa,EAAE,KAAK,CAAC,YAAY;YACjC,MAAM,EAAE,KAAK,CAAC,KAAK;YACnB,QAAQ,EAAE,KAAK,CAAC,OAAO;YACvB,YAAY,EAAE,KAAK,CAAC,UAAU;YAC9B,WAAW,EAAE,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;YAClF,WAAW,EAAE,KAAK,CAAC,UAAU;SAC9B,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B;IAC7C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAU;IACnC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACrJ,MAAM,MAAM,GAAG,CAAC,IAAkC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/G,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,IAAU;IAC/B,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAChD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/server/audit/normalToolAuditCli.js

@@ -0,0 +1,143 @@
+import { writeFileSync } from "node:fs";
+import { DEFAULT_NORMAL_TOOL_AUDIT_MAX_ROWS, effectivePiWebConfig } from "../../config.js";
+import { normalToolAuditDatabasePath, normalToolAuditStats, pruneNormalToolAudit, queryNormalToolAudit, vacuumNormalToolAudit, } from "./normalToolAuditStore.js";
+export function runNormalToolAuditCommand(args, options = {}) {
+    const [subcommand, ...optionArgs] = args;
+    if (subcommand === undefined || subcommand === "help" || subcommand === "--help" || subcommand === "-h") {
+        (options.stdout ?? console.log)(normalToolAuditHelp());
+        return;
+    }
+    const values = parseOptions(optionArgs);
+    const path = options.databasePath ?? normalToolAuditDatabasePath();
+    const now = options.now?.() ?? new Date();
+    const stdout = options.stdout ?? console.log;
+    if (subcommand === "list") {
+        requireAllowedOptions(values, ["since", "status", "session", "tool", "limit"]);
+        for (const row of queryNormalToolAudit(path, auditQuery(values, now)))
+            stdout(JSON.stringify(row));
+        return;
+    }
+    if (subcommand === "stats") {
+        requireAllowedOptions(values, ["since"]);
+        stdout(JSON.stringify(normalToolAuditStats(path, optionalBoundary(values.get("since"), now)), null, 2));
+        return;
+    }
+    if (subcommand === "export") {
+        requireAllowedOptions(values, ["since", "status", "session", "tool", "limit", "format", "output"]);
+        const format = values.get("format") ?? "jsonl";
+        if (format !== "jsonl" && format !== "csv")
+            throw new Error("--format must be jsonl or csv");
+        const output = requiredOption(values, "output");
+        const rows = queryNormalToolAudit(path, auditQuery(values, now, 10_000));
+        (options.writeOutput ?? ((target, content) => { writeFileSync(target, content, "utf8"); }))(output, format === "csv" ? rowsCsv(rows) : rowsJsonl(rows));
+        stdout(`Exported ${String(rows.length)} audit rows to ${output}`);
+        return;
+    }
+    if (subcommand === "prune") {
+        requireAllowedOptions(values, ["before"]);
+        const before = parseBoundary(requiredOption(values, "before"), now);
+        const maxRows = options.maxRows ?? effectivePiWebConfig().config.auditLog?.normalMode?.maxRows ?? DEFAULT_NORMAL_TOOL_AUDIT_MAX_ROWS;
+        stdout(`Deleted ${String(pruneNormalToolAudit(path, before, maxRows))} audit rows`);
+        return;
+    }
+    if (subcommand === "vacuum") {
+        requireAllowedOptions(values, []);
+        vacuumNormalToolAudit(path);
+        stdout("Audit database vacuum completed");
+        return;
+    }
+    throw new Error(`Unknown audit command: ${subcommand}`);
+}
+export function normalToolAuditHelp() {
+    return `PI WEB ordinary-mode tool audit
+
+Usage:
+  pi-web audit list [--since 24h] [--status failed] [--session ID] [--tool NAME] [--limit 100]
+  pi-web audit stats [--since 30d]
+  pi-web audit export --output FILE [--format jsonl|csv] [--since 30d] [--status STATUS] [--session ID] [--tool NAME] [--limit 10000]
+  pi-web audit prune --before DATE
+  pi-web audit vacuum`;
+}
+function parseOptions(args) {
+    const values = new Map();
+    for (let index = 0; index < args.length; index += 1) {
+        const argument = args[index];
+        if (argument === undefined || !argument.startsWith("--") || argument.length === 2)
+            throw new Error(`Unexpected audit argument: ${argument ?? ""}`);
+        const name = argument.slice(2);
+        if (values.has(name))
+            throw new Error(`Audit option --${name} was provided more than once`);
+        const value = args[index + 1];
+        if (value === undefined || value.startsWith("--"))
+            throw new Error(`Audit option --${name} requires a value`);
+        values.set(name, value);
+        index += 1;
+    }
+    return values;
+}
+function requireAllowedOptions(values, allowed) {
+    const allowedSet = new Set(allowed);
+    const unknown = [...values.keys()].find((key) => !allowedSet.has(key));
+    if (unknown !== undefined)
+        throw new Error(`Audit command does not support --${unknown}`);
+}
+function auditQuery(values, now, defaultLimit = 100) {
+    const status = values.get("status");
+    return {
+        ...(values.get("since") === undefined ? {} : { since: parseBoundary(requiredOption(values, "since"), now) }),
+        ...(status === undefined ? {} : { status: parseStatus(status) }),
+        ...(values.get("session") === undefined ? {} : { sessionId: requiredOption(values, "session") }),
+        ...(values.get("tool") === undefined ? {} : { toolName: requiredOption(values, "tool") }),
+        limit: values.get("limit") === undefined ? defaultLimit : positiveInteger(requiredOption(values, "limit"), "--limit"),
+    };
+}
+function optionalBoundary(value, now) {
+    return value === undefined ? undefined : parseBoundary(value, now);
+}
+function parseBoundary(value, now) {
+    const duration = /^(\d+)(m|h|d)$/u.exec(value);
+    if (duration !== null) {
+        const amount = positiveInteger(duration[1] ?? "", "time range");
+        const unit = duration[2];
+        const multiplier = unit === "m" ? 60_000 : unit === "h" ? 3_600_000 : 86_400_000;
+        return new Date(now.getTime() - amount * multiplier);
+    }
+    const parsed = new Date(value);
+    if (Number.isNaN(parsed.getTime()))
+        throw new Error(`Invalid audit time boundary: ${value}`);
+    return parsed;
+}
+function parseStatus(value) {
+    if (value === "started" || value === "completed" || value === "failed" || value === "interrupted")
+        return value;
+    throw new Error("--status must be started, completed, failed, or interrupted");
+}
+function positiveInteger(value, label) {
+    const number = Number(value);
+    if (!Number.isSafeInteger(number) || number < 1)
+        throw new Error(`${label} must be a positive integer`);
+    return number;
+}
+function requiredOption(values, name) {
+    const value = values.get(name);
+    if (value === undefined || value === "")
+        throw new Error(`Audit option --${name} is required`);
+    return value;
+}
+function rowsJsonl(rows) {
+    return rows.length === 0 ? "" : `${rows.map((row) => JSON.stringify(row)).join("\n")}\n`;
+}
+function rowsCsv(rows) {
+    const fields = ["id", "sessionId", "cwd", "toolName", "toolCallId", "status", "startedAt", "finishedAt", "durationMs", "createdAt"];
+    const lines = [fields.join(",")];
+    for (const row of rows)
+        lines.push(fields.map((field) => csvCell(row[field])).join(","));
+    return `${lines.join("\n")}\n`;
+}
+function csvCell(value) {
+    if (value !== undefined && typeof value !== "string" && typeof value !== "number")
+        throw new Error("Audit CSV contains an invalid value");
+    const text = value === undefined ? "" : String(value);
+    return /[",\r\n]/u.test(text) ? `"${text.replaceAll('"', '""')}"` : text;
+}
+//# sourceMappingURL=normalToolAuditCli.js.map

package/dist/server/audit/normalToolAuditCli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalToolAuditCli.js","sourceRoot":"","sources":["../../../src/server/audit/normalToolAuditCli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,EAAE,kCAAkC,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAC3F,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,qBAAqB,GAItB,MAAM,2BAA2B,CAAC;AAUnC,MAAM,UAAU,yBAAyB,CAAC,IAAc,EAAE,UAAqC,EAAE;IAC/F,MAAM,CAAC,UAAU,EAAE,GAAG,UAAU,CAAC,GAAG,IAAI,CAAC;IACzC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxG,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACvD,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,IAAI,2BAA2B,EAAE,CAAC;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAE7C,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,qBAAqB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,KAAK,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACnG,OAAO;IACT,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,qBAAqB,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,qBAAqB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnG,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC;QAC/C,IAAI,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACxJ,MAAM,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,kBAAkB,MAAM,EAAE,CAAC,CAAC;QAClE,OAAO;IACT,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,qBAAqB,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,IAAI,kCAAkC,CAAC;QACrI,MAAM,CAAC,WAAW,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC;QACpF,OAAO;IACT,CAAC;IACD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,qBAAqB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClC,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,CAAC,iCAAiC,CAAC,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,UAAU,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;;;sBAOa,CAAC;AACvB,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;QACnJ,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,8BAA8B,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,mBAAmB,CAAC,CAAC;QAC9G,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA2B,EAAE,OAAiB;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,UAAU,CAAC,MAA2B,EAAE,GAAS,EAAE,YAAY,GAAG,GAAG;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC5G,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QAChG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACzF,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC;KACtH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,GAAS;IAC5D,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,aAAa,CAAC,KAAa,EAAE,GAAS;IAC7C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QACjF,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,UAAU,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,aAAa;QAAE,OAAO,KAAK,CAAC;IAChH,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,KAAa;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACxG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,MAA2B,EAAE,IAAY;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,cAAc,CAAC,CAAC;IAC/F,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAA0B;IAC3C,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC3F,CAAC;AAED,SAAS,OAAO,CAAC,IAA0B;IACzC,MAAM,MAAM,GAAiC,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC;IAClK,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC1I,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC"}

package/dist/server/audit/normalToolAuditStore.js

@@ -0,0 +1,264 @@
+import { chmodSync, existsSync, mkdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { DatabaseSync } from "node:sqlite";
+import { piWebDataDir } from "../../config.js";
+const DAY_MS = 24 * 60 * 60 * 1_000;
+const DEFAULT_MAINTENANCE_INTERVAL_MS = DAY_MS;
+export function normalToolAuditDatabasePath(env = process.env, cwd = process.cwd()) {
+    return join(piWebDataDir(env, cwd), "audit", "normal-tool-calls.sqlite");
+}
+export class NormalToolAuditStore {
+    constructor(options) {
+        this.options = options;
+        this.pending = new Map();
+        this.now = options.now ?? (() => new Date());
+        this.database = openWritableDatabase(options.path);
+        const now = this.now();
+        markIncompleteCallsInterrupted(this.database, now);
+        pruneDatabase(this.database, retentionCutoff(now, options.retentionDays), options.maxRows);
+        const interval = options.maintenanceIntervalMs ?? DEFAULT_MAINTENANCE_INTERVAL_MS;
+        if (interval > 0) {
+            this.maintenanceTimer = setInterval(() => {
+                try {
+                    this.maintain();
+                }
+                catch (error) {
+                    options.onError?.(error);
+                }
+            }, interval);
+            this.maintenanceTimer.unref();
+        }
+    }
+    record(event) {
+        const now = this.now();
+        const key = pendingKey(event.sessionId, event.toolCallId);
+        if (event.status === "started") {
+            const priorId = this.pending.get(key);
+            if (priorId !== undefined)
+                markRowsInterrupted(this.database, [priorId], now);
+            const result = this.database.prepare(`
+        INSERT INTO normal_tool_calls (
+          session_id, cwd, tool_name, tool_call_id, status, started_at_ms, created_at_ms
+        ) VALUES (?, ?, ?, ?, 'started', ?, ?)
+      `).run(event.sessionId, event.cwd, event.toolName, event.toolCallId, now.getTime(), now.getTime());
+            this.pending.set(key, Number(result.lastInsertRowid));
+            return;
+        }
+        const pendingId = this.pending.get(key);
+        this.pending.delete(key);
+        if (pendingId !== undefined) {
+            this.database.prepare(`
+        UPDATE normal_tool_calls
+        SET status = ?, finished_at_ms = ?, duration_ms = MAX(0, ? - started_at_ms)
+        WHERE id = ?
+      `).run(event.status, now.getTime(), now.getTime(), pendingId);
+            return;
+        }
+        this.database.prepare(`
+      INSERT INTO normal_tool_calls (
+        session_id, cwd, tool_name, tool_call_id, status, started_at_ms, finished_at_ms, duration_ms, created_at_ms
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, 0, ?)
+    `).run(event.sessionId, event.cwd, event.toolName, event.toolCallId, event.status, now.getTime(), now.getTime(), now.getTime());
+    }
+    maintain() {
+        const now = this.now();
+        pruneDatabase(this.database, retentionCutoff(now, this.options.retentionDays), this.options.maxRows);
+    }
+    close() {
+        if (this.maintenanceTimer !== undefined)
+            clearInterval(this.maintenanceTimer);
+        markRowsInterrupted(this.database, [...this.pending.values()], this.now());
+        this.pending.clear();
+        this.database.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+        this.database.close();
+    }
+}
+export function queryNormalToolAudit(path, query = {}) {
+    if (!existsSync(path))
+        return [];
+    return withDatabase(path, true, (database) => {
+        const clauses = [];
+        const parameters = [];
+        if (query.since !== undefined) {
+            clauses.push("started_at_ms >= ?");
+            parameters.push(query.since.getTime());
+        }
+        if (query.status !== undefined) {
+            clauses.push("status = ?");
+            parameters.push(query.status);
+        }
+        if (query.sessionId !== undefined) {
+            clauses.push("session_id = ?");
+            parameters.push(query.sessionId);
+        }
+        if (query.toolName !== undefined) {
+            clauses.push("tool_name = ?");
+            parameters.push(query.toolName);
+        }
+        const limit = Math.max(1, Math.min(query.limit ?? 100, 10_000));
+        parameters.push(limit);
+        const rows = database.prepare(`
+      SELECT id, session_id, cwd, tool_name, tool_call_id, status,
+             started_at_ms, finished_at_ms, duration_ms, created_at_ms
+      FROM normal_tool_calls
+      ${clauses.length === 0 ? "" : `WHERE ${clauses.join(" AND ")}`}
+      ORDER BY started_at_ms DESC, id DESC
+      LIMIT ?
+    `).all(...parameters);
+        return rows.map(normalToolAuditRow);
+    });
+}
+export function normalToolAuditStats(path, since) {
+    const empty = () => ({ total: 0, byStatus: { started: 0, completed: 0, failed: 0, interrupted: 0 }, byTool: [] });
+    if (!existsSync(path))
+        return empty();
+    return withDatabase(path, true, (database) => {
+        const where = since === undefined ? "" : "WHERE started_at_ms >= ?";
+        const parameters = since === undefined ? [] : [since.getTime()];
+        const statusRows = database.prepare(`SELECT status, COUNT(*) AS count FROM normal_tool_calls ${where} GROUP BY status`).all(...parameters);
+        const toolRows = database.prepare(`SELECT tool_name, COUNT(*) AS count FROM normal_tool_calls ${where} GROUP BY tool_name ORDER BY count DESC, tool_name ASC`).all(...parameters);
+        const result = empty();
+        for (const row of statusRows) {
+            const status = auditStatus(row["status"]);
+            const count = outputNumber(row["count"], "count");
+            result.byStatus[status] = count;
+            result.total += count;
+        }
+        result.byTool = toolRows.map((row) => ({ toolName: outputString(row["tool_name"], "tool_name"), count: outputNumber(row["count"], "count") }));
+        return result;
+    });
+}
+export function pruneNormalToolAudit(path, before, maxRows) {
+    if (!existsSync(path))
+        return 0;
+    return withDatabase(path, false, (database) => pruneDatabase(database, before, maxRows));
+}
+export function vacuumNormalToolAudit(path) {
+    if (!existsSync(path))
+        return;
+    withDatabase(path, false, (database) => {
+        database.exec("PRAGMA wal_checkpoint(TRUNCATE)");
+        database.exec("VACUUM");
+    });
+}
+function openWritableDatabase(path) {
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const database = new DatabaseSync(path);
+    try {
+        if (process.platform !== "win32")
+            chmodSync(path, 0o600);
+        initializeDatabase(database);
+        return database;
+    }
+    catch (error) {
+        database.close();
+        throw error;
+    }
+}
+function initializeDatabase(database) {
+    database.exec("PRAGMA journal_mode = WAL");
+    database.exec("PRAGMA synchronous = NORMAL");
+    database.exec("PRAGMA busy_timeout = 5000");
+    const version = outputNumber(database.prepare("PRAGMA user_version").get()?.["user_version"], "user_version");
+    if (version > 1)
+        throw new Error(`Normal tool audit database schema version ${String(version)} is newer than this PI WEB build`);
+    database.exec(`
+    CREATE TABLE IF NOT EXISTS normal_tool_calls (
+      id INTEGER PRIMARY KEY AUTOINCREMENT,
+      session_id TEXT NOT NULL,
+      cwd TEXT NOT NULL,
+      tool_name TEXT NOT NULL,
+      tool_call_id TEXT NOT NULL,
+      status TEXT NOT NULL CHECK (status IN ('started', 'completed', 'failed', 'interrupted')),
+      started_at_ms INTEGER NOT NULL,
+      finished_at_ms INTEGER,
+      duration_ms INTEGER,
+      created_at_ms INTEGER NOT NULL
+    );
+    CREATE INDEX IF NOT EXISTS normal_tool_calls_started_idx ON normal_tool_calls(started_at_ms DESC);
+    CREATE INDEX IF NOT EXISTS normal_tool_calls_session_idx ON normal_tool_calls(session_id, started_at_ms DESC);
+    CREATE INDEX IF NOT EXISTS normal_tool_calls_tool_idx ON normal_tool_calls(tool_name, started_at_ms DESC);
+  `);
+    if (version === 0)
+        database.exec("PRAGMA user_version = 1");
+}
+function withDatabase(path, readOnly, use) {
+    const database = new DatabaseSync(path, { readOnly });
+    try {
+        database.exec("PRAGMA busy_timeout = 5000");
+        return use(database);
+    }
+    finally {
+        database.close();
+    }
+}
+function markIncompleteCallsInterrupted(database, now) {
+    database.prepare(`
+    UPDATE normal_tool_calls
+    SET status = 'interrupted', finished_at_ms = ?, duration_ms = MAX(0, ? - started_at_ms)
+    WHERE status = 'started'
+  `).run(now.getTime(), now.getTime());
+}
+function markRowsInterrupted(database, ids, now) {
+    if (ids.length === 0)
+        return;
+    const statement = database.prepare(`
+    UPDATE normal_tool_calls
+    SET status = 'interrupted', finished_at_ms = ?, duration_ms = MAX(0, ? - started_at_ms)
+    WHERE id = ? AND status = 'started'
+  `);
+    for (const id of ids)
+        statement.run(now.getTime(), now.getTime(), id);
+}
+function pruneDatabase(database, before, maxRows) {
+    const expired = database.prepare("DELETE FROM normal_tool_calls WHERE started_at_ms < ?").run(before.getTime()).changes;
+    const excess = database.prepare(`
+    DELETE FROM normal_tool_calls
+    WHERE id IN (
+      SELECT id FROM normal_tool_calls ORDER BY started_at_ms DESC, id DESC LIMIT -1 OFFSET ?
+    )
+  `).run(maxRows).changes;
+    database.exec("PRAGMA wal_checkpoint(PASSIVE)");
+    return Number(expired) + Number(excess);
+}
+function retentionCutoff(now, retentionDays) {
+    return new Date(now.getTime() - retentionDays * DAY_MS);
+}
+function pendingKey(sessionId, toolCallId) {
+    return `${sessionId}\0${toolCallId}`;
+}
+function normalToolAuditRow(row) {
+    const finishedAt = optionalOutputNumber(row["finished_at_ms"], "finished_at_ms");
+    const durationMs = optionalOutputNumber(row["duration_ms"], "duration_ms");
+    return {
+        id: outputNumber(row["id"], "id"),
+        sessionId: outputString(row["session_id"], "session_id"),
+        cwd: outputString(row["cwd"], "cwd"),
+        toolName: outputString(row["tool_name"], "tool_name"),
+        toolCallId: outputString(row["tool_call_id"], "tool_call_id"),
+        status: auditStatus(row["status"]),
+        startedAt: new Date(outputNumber(row["started_at_ms"], "started_at_ms")).toISOString(),
+        ...(finishedAt === undefined ? {} : { finishedAt: new Date(finishedAt).toISOString() }),
+        ...(durationMs === undefined ? {} : { durationMs }),
+        createdAt: new Date(outputNumber(row["created_at_ms"], "created_at_ms")).toISOString(),
+    };
+}
+function auditStatus(value) {
+    if (value === "started" || value === "completed" || value === "failed" || value === "interrupted")
+        return value;
+    throw new Error("Normal tool audit database contains an invalid status");
+}
+function outputString(value, field) {
+    if (typeof value !== "string")
+        throw new Error(`Normal tool audit database ${field} is invalid`);
+    return value;
+}
+function outputNumber(value, field) {
+    if (typeof value !== "number" || !Number.isSafeInteger(value))
+        throw new Error(`Normal tool audit database ${field} is invalid`);
+    return value;
+}
+function optionalOutputNumber(value, field) {
+    return value === null || value === undefined ? undefined : outputNumber(value, field);
+}
+//# sourceMappingURL=normalToolAuditStore.js.map