@cogenta/auth 0.3.0 → 0.5.0

package/dist/audit-integrity.js

@@ -0,0 +1,130 @@
+import { identifier, isCogentaError, sql } from '@cogenta/core';
+import { TABLES } from './tables.js';
+const DEFAULT_FULL_CHECK_INTERVAL_MS = 7 * 24 * 60 * 60 * 1000;
+function checkpointOf(row) {
+    if (row.checkpoint_id === null || row.checkpoint_at === null || row.checkpoint_hash === null) {
+        return null;
+    }
+    return { id: row.checkpoint_id, at: row.checkpoint_at, hash: row.checkpoint_hash };
+}
+function statusOf(row) {
+    if (row === null) {
+        return {
+            state: 'never-run',
+            checkpoint: null,
+            entriesChecked: 0,
+            lastCheckedAt: null,
+            lastMode: null,
+            lastFullCheckedAt: null,
+            brokenAt: null,
+            brokenEntryId: null,
+            brokenMessage: null,
+        };
+    }
+    return {
+        state: row.state,
+        checkpoint: checkpointOf(row),
+        entriesChecked: row.entries_checked === null ? 0 : Number(row.entries_checked),
+        lastCheckedAt: row.last_checked_at,
+        lastMode: row.last_mode,
+        lastFullCheckedAt: row.last_full_checked_at,
+        brokenAt: row.broken_at,
+        brokenEntryId: row.broken_entry_id,
+        brokenMessage: row.broken_message,
+    };
+}
+function entryIdOf(details) {
+    const value = details?.entryId;
+    return typeof value === 'string' ? value : null;
+}
+export function createAuditIntegrityStore(db, audit, options = {}) {
+    const table = identifier(TABLES.auditIntegrity, db.dialect);
+    const now = options.now ?? Date.now;
+    const fullCheckIntervalMs = options.fullCheckIntervalMs ?? DEFAULT_FULL_CHECK_INTERVAL_MS;
+    async function readRow() {
+        const result = await db.query(sql `select * from ${table} where id = ${'singleton'}`);
+        return result.rows[0] ?? null;
+    }
+    async function writeRow(row) {
+        await db.transaction(async (tx) => {
+            await tx.query(sql `delete from ${table} where id = ${'singleton'}`);
+            await tx.query(sql `
+        insert into ${table} (
+          id, state, checkpoint_id, checkpoint_at, checkpoint_hash, entries_checked,
+          last_checked_at, last_mode, last_full_checked_at, broken_at, broken_entry_id, broken_message
+        ) values (
+          ${'singleton'}, ${row.state}, ${row.checkpoint_id}, ${row.checkpoint_at}, ${row.checkpoint_hash},
+          ${row.entries_checked}, ${row.last_checked_at}, ${row.last_mode}, ${row.last_full_checked_at},
+          ${row.broken_at}, ${row.broken_entry_id}, ${row.broken_message}
+        )`);
+        });
+    }
+    function dueForFullCheck(row) {
+        if (row === null || row.last_full_checked_at === null)
+            return true;
+        return now() - Date.parse(row.last_full_checked_at) >= fullCheckIntervalMs;
+    }
+    return {
+        status: async () => statusOf(await readRow()),
+        check: async (checkOptions = {}) => {
+            const row = await readRow();
+            const nowIso = new Date(now()).toISOString();
+            // Once broken, a plain (unforced) tick only re-stamps that it looked —
+            // it does not retry, because nothing about retrying a full or
+            // incremental verify would change the outcome until a human has acted
+            // (typically `prune()`ing the bad prefix, or restoring from a backup).
+            if (row !== null && row.state === 'broken' && checkOptions.full !== true) {
+                const { id: _id, ...rest } = row;
+                const restamped = { ...rest, last_checked_at: nowIso };
+                await writeRow(restamped);
+                return { status: statusOf({ ...restamped, id: 'singleton' }), newlyBroken: false };
+            }
+            const wasBroken = row?.state === 'broken';
+            const forceFull = checkOptions.full === true || row === null || dueForFullCheck(row);
+            const mode = forceFull ? 'full' : 'incremental';
+            const since = forceFull
+                ? null
+                : checkpointOf(row ?? { checkpoint_id: null, checkpoint_at: null, checkpoint_hash: null });
+            try {
+                const result = await audit.verifyRange(since);
+                const checkpoint = result.checkpoint ?? since;
+                const nextRow = {
+                    state: 'ok',
+                    checkpoint_id: checkpoint?.id ?? null,
+                    checkpoint_at: checkpoint?.at ?? null,
+                    checkpoint_hash: checkpoint?.hash ?? null,
+                    entries_checked: String(result.entriesChecked),
+                    last_checked_at: nowIso,
+                    last_mode: mode,
+                    last_full_checked_at: mode === 'full' ? nowIso : (row?.last_full_checked_at ?? null),
+                    broken_at: null,
+                    broken_entry_id: null,
+                    broken_message: null,
+                };
+                await writeRow(nextRow);
+                return { status: statusOf({ ...nextRow, id: 'singleton' }), newlyBroken: false };
+            }
+            catch (error) {
+                if (!isCogentaError(error) || error.code !== 'AUDIT_CHAIN_BROKEN')
+                    throw error;
+                const nextRow = {
+                    state: 'broken',
+                    // Frozen at the last point known good — never advanced past a break.
+                    checkpoint_id: row?.checkpoint_id ?? null,
+                    checkpoint_at: row?.checkpoint_at ?? null,
+                    checkpoint_hash: row?.checkpoint_hash ?? null,
+                    entries_checked: row?.entries_checked ?? '0',
+                    last_checked_at: nowIso,
+                    last_mode: mode,
+                    last_full_checked_at: row?.last_full_checked_at ?? null,
+                    broken_at: nowIso,
+                    broken_entry_id: entryIdOf(error.details),
+                    broken_message: error.message,
+                };
+                await writeRow(nextRow);
+                return { status: statusOf({ ...nextRow, id: 'singleton' }), newlyBroken: !wasBroken };
+            }
+        },
+    };
+}
+//# sourceMappingURL=audit-integrity.js.map

package/dist/audit-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-integrity.js","sourceRoot":"","sources":["../src/audit-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuB,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AAEpF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AA+DpC,MAAM,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAiB9D,SAAS,YAAY,CACnB,GAA8E;IAE9E,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;QAC7F,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,EAAE,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE,GAAG,CAAC,eAAe,EAAE,CAAA;AACpF,CAAC;AAED,SAAS,QAAQ,CAAC,GAAwB;IACxC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO;YACL,KAAK,EAAE,WAAW;YAClB,UAAU,EAAE,IAAI;YAChB,cAAc,EAAE,CAAC;YACjB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,IAAI;YACd,iBAAiB,EAAE,IAAI;YACvB,QAAQ,EAAE,IAAI;YACd,aAAa,EAAE,IAAI;YACnB,aAAa,EAAE,IAAI;SACpB,CAAA;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,KAA4B;QACvC,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC;QAC7B,cAAc,EAAE,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC;QAC9E,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,QAAQ,EAAE,GAAG,CAAC,SAAsC;QACpD,iBAAiB,EAAE,GAAG,CAAC,oBAAoB;QAC3C,QAAQ,EAAE,GAAG,CAAC,SAAS;QACvB,aAAa,EAAE,GAAG,CAAC,eAAe;QAClC,aAAa,EAAE,GAAG,CAAC,cAAc;KAClC,CAAA;AACH,CAAC;AAED,SAAS,SAAS,CAAC,OAAsD;IACvE,MAAM,KAAK,GAAG,OAAO,EAAE,OAAO,CAAA;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,EAAkB,EAClB,KAAoC,EACpC,OAAO,GAA0B,EAAE;IAEnC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAC3D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,8BAA8B,CAAA;IAEzF,KAAK,UAAU,OAAO;QACpB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,iBAAiB,KAAK,eAAe,WAAW,EAAE,CACtD,CAAA;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;IAC/B,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,GAA6B;QACnD,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YAChC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,WAAW,EAAE,CAAC,CAAA;YACnE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;sBACF,KAAK;;;;YAIf,WAAW,KAAK,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,eAAe;YAC7F,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,oBAAoB;YAC1F,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,eAAe,KAAK,GAAG,CAAC,cAAc;UAC9D,CAAC,CAAA;QACP,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,SAAS,eAAe,CAAC,GAAwB;QAC/C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,oBAAoB,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAClE,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,mBAAmB,CAAA;IAC5E,CAAC;IAED,OAAO;QACL,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,OAAO,EAAE,CAAC;QAE7C,KAAK,EAAE,KAAK,EAAE,YAAY,GAAG,EAAE,EAAE,EAAE;YACjC,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,CAAA;YAC3B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;YAE5C,uEAAuE;YACvE,8DAA8D;YAC9D,sEAAsE;YACtE,uEAAuE;YACvE,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAA;gBAChC,MAAM,SAAS,GAA6B,EAAE,GAAG,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,CAAA;gBAChF,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;YACpF,CAAC;YAED,MAAM,SAAS,GAAG,GAAG,EAAE,KAAK,KAAK,QAAQ,CAAA;YACzC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI,IAAI,eAAe,CAAC,GAAG,CAAC,CAAA;YACpF,MAAM,IAAI,GAAuB,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAA;YACnE,MAAM,KAAK,GAAG,SAAS;gBACrB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAA;YAE5F,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAA;gBAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,KAAK,CAAA;gBAC7C,MAAM,OAAO,GAA6B;oBACxC,KAAK,EAAE,IAAI;oBACX,aAAa,EAAE,UAAU,EAAE,EAAE,IAAI,IAAI;oBACrC,aAAa,EAAE,UAAU,EAAE,EAAE,IAAI,IAAI;oBACrC,eAAe,EAAE,UAAU,EAAE,IAAI,IAAI,IAAI;oBACzC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC9C,eAAe,EAAE,MAAM;oBACvB,SAAS,EAAE,IAAI;oBACf,oBAAoB,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,oBAAoB,IAAI,IAAI,CAAC;oBACpF,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,IAAI;oBACrB,cAAc,EAAE,IAAI;iBACrB,CAAA;gBACD,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAA;YAClF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;oBAAE,MAAM,KAAK,CAAA;gBAE9E,MAAM,OAAO,GAA6B;oBACxC,KAAK,EAAE,QAAQ;oBACf,qEAAqE;oBACrE,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;oBACzC,aAAa,EAAE,GAAG,EAAE,aAAa,IAAI,IAAI;oBACzC,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,IAAI;oBAC7C,eAAe,EAAE,GAAG,EAAE,eAAe,IAAI,GAAG;oBAC5C,eAAe,EAAE,MAAM;oBACvB,SAAS,EAAE,IAAI;oBACf,oBAAoB,EAAE,GAAG,EAAE,oBAAoB,IAAI,IAAI;oBACvD,SAAS,EAAE,MAAM;oBACjB,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;oBACzC,cAAc,EAAE,KAAK,CAAC,OAAO;iBAC9B,CAAA;gBACD,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;gBACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,CAAA;YACvF,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/audit.d.ts

@@ -1,17 +1,93 @@
 import { type DatabaseHandle } from '@cogenta/core';
-import type { AuditEntry, RecordAuditInput } from './types.js';
+import type { AuditActorKind, AuditEntry, RecordAuditInput } from './types.js';
 export interface AuditFilter {
     readonly actorId?: string;
     readonly action?: string;
     readonly collection?: string;
+    /** Lower bound on `at`, inclusive. */
     readonly since?: string;
+    /** Upper bound on `at`, inclusive — the other half of task 2's date-range filter. */
+    readonly until?: string;
+    /** Task 4: narrows to one origin. See `classifyAuditActor`. */
+    readonly actorKind?: AuditActorKind;
     readonly limit?: number;
+    /**
+     * Cursor pagination (fiche 67 task 1): strictly older than this
+     * `(at, id)` position in the `order by at desc, id desc` listing — the
+     * exact position the previous page's last row sat at. Same shape as the
+     * chain-verification checkpoint (`AuditChainPoint`) on purpose, but this
+     * is a *listing* cursor, never confused with a verified chain position:
+     * an unknown or stale `before` (the row it named was pruned since) simply
+     * yields an earlier page, the same "not a security boundary" behaviour
+     * `users-router.ts`'s cursor already documents.
+     */
+    readonly before?: {
+        readonly at: string;
+        readonly id: string;
+    };
+}
+/**
+ * A point in the chain a caller has already verified up to — everything
+ * `verifyRange` needs to resume from it instead of the start.
+ */
+export interface AuditChainPoint {
+    readonly id: string;
+    readonly at: string;
+    readonly hash: string;
+}
+export interface AuditVerifyRangeResult {
+    /**
+     * The newest point now verified. `since` unchanged when nothing new was
+     * found; `null` only when the whole chain (or the whole range) is empty.
+     */
+    readonly checkpoint: AuditChainPoint | null;
+    readonly entriesChecked: number;
+}
+export interface AuditPruneResult {
+    readonly prunedCount: number;
+    /** The new genesis anchor — `null` only when nothing matched `olderThan`. */
+    readonly genesis: AuditChainPoint | null;
 }
 export interface AuditLog {
     record(input: RecordAuditInput): Promise<AuditEntry>;
     list(filter?: AuditFilter): Promise<readonly AuditEntry[]>;
-    /** Recomputes every hash and compares. Throws `AUDIT_CHAIN_BROKEN` naming the first mismatch. */
+    /** One entry by id, or `null` — the detail view's lookup (fiche 21 task 1). */
+    get(id: string): Promise<AuditEntry | null>;
+    /** Recomputes every hash and compares, from the oldest surviving entry. Throws `AUDIT_CHAIN_BROKEN` naming the first mismatch. */
     verify(): Promise<void>;
+    /**
+     * The bounded form `verify()` is built on: recomputes only entries at or
+     * after `since` (the whole surviving chain when `since` is `null`), after
+     * first confirming `since` itself still matches what is stored — an
+     * altered or vanished checkpoint is exactly as much a break as an altered
+     * row in the middle ever was, unless it vanished because of a recorded
+     * `prune()`, which is not tampering and must not be reported as some.
+     */
+    verifyRange(since: AuditChainPoint | null): Promise<AuditVerifyRangeResult>;
+    /**
+     * Deletes every entry strictly older than `olderThan` (ISO-8601), for
+     * real — fiche 21 task 5's GDPR exit. Refuses (throwing
+     * `AUDIT_CHAIN_BROKEN`) if the segment about to be removed does not
+     * itself verify first: purging into an already-broken chain would erase
+     * the evidence of the break, not just old rows.
+     */
+    prune(olderThan: string): Promise<AuditPruneResult>;
 }
+/**
+ * Who or what an entry names, read from signals the log already carries —
+ * no schema change needed to answer "human or agent or key or system"
+ * (fiche 21 task 4, "vérifier ce que le modèle porte déjà avant d'ajouter un
+ * champ"):
+ *  - `actorId === null` → `'system'` (nobody was signed in — a migration, a
+ *    scheduled job).
+ *  - `actorId` starts with `apikey:` → `'api_key'`. `resolveActor`
+ *    (`packages/api/src/rest/auth-router.ts`) has prefixed every API-key
+ *    actor's id this way since L13 task 8; nothing else produces that shape.
+ *  - `action` starts with `agent.tool.` → `'agent'`. `withAudit`
+ *    (`packages/agents/src/audit/with-audit.ts`, L4 task 6) is the only
+ *    writer that names an action this way.
+ *  - anything else → `'human'`.
+ */
+export declare function classifyAuditActor(entry: Pick<AuditEntry, 'actorId' | 'action'>): AuditActorKind;
 export declare function createAuditLog(db: DatabaseHandle, now?: () => number): AuditLog;
 //# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAEzF,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AA0D9D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAA;IAC1D,iGAAiG;IACjG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACxB;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,QAAQ,CA2FzF"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAEzF,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAuF9E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,sCAAsC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAA;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;OASG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAC/D;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAAA;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;CACzC;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAA;IAC1D,+EAA+E;IAC/E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAA;IAC3C,kIAAkI;IAClI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB;;;;;;;OAOG;IACH,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IAC3E;;;;;;OAMG;IACH,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAA;CACpD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC,GAAG,cAAc,CAKhG;AA+BD,wBAAgB,cAAc,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,GAAE,MAAM,MAAiB,GAAG,QAAQ,CAsMzF"}

package/dist/audit.js

@@ -2,6 +2,7 @@ import { createHash } from 'node:crypto';
 import { CogentaError, identifier, newId, sql } from '@cogenta/core';
 import { TABLES } from './tables.js';
 function fromRow(row) {
+    const version = row.version;
     return {
         id: row.id,
         at: row.at,
@@ -11,10 +12,18 @@ function fromRow(row) {
         collection: row.collection_name,
         entryId: row.entry_id,
         diff: row.diff === null ? null : JSON.parse(row.diff),
+        version: version === undefined || version === null ? null : Number(version),
         hash: row.hash,
         previousHash: row.previous_hash,
     };
 }
+/**
+ * Deliberately reads only the fields this format has hashed since the very
+ * first entry any site has ever recorded: `id`, `at`, `actor_id`,
+ * `actor_roles`, `action`, `collection_name`, `entry_id`, `diff`, chained to
+ * `previousHash`. Adding a field here changes what every already-recorded
+ * hash means — do not, without a migration plan for every existing chain.
+ */
 function computeHash(previousHash, fields) {
     const canonical = JSON.stringify([
         previousHash,
@@ -29,19 +38,132 @@ function computeHash(previousHash, fields) {
     ]);
     return createHash('sha256').update(canonical).digest('hex');
 }
+/**
+ * Who or what an entry names, read from signals the log already carries —
+ * no schema change needed to answer "human or agent or key or system"
+ * (fiche 21 task 4, "vérifier ce que le modèle porte déjà avant d'ajouter un
+ * champ"):
+ *  - `actorId === null` → `'system'` (nobody was signed in — a migration, a
+ *    scheduled job).
+ *  - `actorId` starts with `apikey:` → `'api_key'`. `resolveActor`
+ *    (`packages/api/src/rest/auth-router.ts`) has prefixed every API-key
+ *    actor's id this way since L13 task 8; nothing else produces that shape.
+ *  - `action` starts with `agent.tool.` → `'agent'`. `withAudit`
+ *    (`packages/agents/src/audit/with-audit.ts`, L4 task 6) is the only
+ *    writer that names an action this way.
+ *  - anything else → `'human'`.
+ */
+export function classifyAuditActor(entry) {
+    if (entry.actorId === null)
+        return 'system';
+    if (entry.actorId.startsWith('apikey:'))
+        return 'api_key';
+    if (entry.action.startsWith('agent.tool.'))
+        return 'agent';
+    return 'human';
+}
+function actorKindCondition(kind) {
+    switch (kind) {
+        case 'system':
+            return sql `actor_id is null`;
+        case 'api_key':
+            return sql `actor_id like ${'apikey:%'}`;
+        case 'agent':
+            return sql `action like ${'agent.tool.%'}`;
+        case 'human':
+            return sql `(actor_id is not null and actor_id not like ${'apikey:%'} and action not like ${'agent.tool.%'})`;
+    }
+}
+function chainBroken(entryId, reason) {
+    return reason === 'discontinuous'
+        ? new CogentaError({
+            code: 'AUDIT_CHAIN_BROKEN',
+            message: `Audit entry ${entryId} does not chain from the entry before it.`,
+            hint: 'The audit log has been edited or reordered outside of record(). Treat every entry from this point on as untrusted.',
+            details: { entryId },
+        })
+        : new CogentaError({
+            code: 'AUDIT_CHAIN_BROKEN',
+            message: `Audit entry ${entryId} has been modified since it was recorded.`,
+            hint: 'Its stored hash no longer matches its content. Treat every entry from this point on as untrusted.',
+            details: { entryId },
+        });
+}
 export function createAuditLog(db, now = Date.now) {
     const table = identifier(TABLES.auditLog, db.dialect);
+    const genesisTable = identifier(TABLES.auditGenesis, db.dialect);
     // Serialises appends within this process. Two concurrent writers computing
     // "the current last hash" from a read that has not committed yet would
     // both chain to the same previous hash and fork the chain — a database
     // transaction alone does not stop that on every dialect's default isolation
     // level, so the invariant is enforced here, once, rather than trusted to
-    // whichever caller remembers to lock.
+    // whichever caller remembers to lock. `prune()` joins the same queue: a
+    // purge running concurrently with an append is exactly the same class of
+    // race, just over a delete instead of an insert.
     let appendQueue = Promise.resolve();
     async function lastHash() {
         const result = await db.query(sql `select hash from ${table} order by at desc, id desc limit ${1}`);
         return result.rows[0]?.hash ?? null;
     }
+    async function currentGenesis() {
+        const result = await db.query(sql `select entry_id, entry_at, entry_hash from ${genesisTable} where id = ${'singleton'}`);
+        const row = result.rows[0];
+        return row === undefined ? null : { id: row.entry_id, at: row.entry_at, hash: row.entry_hash };
+    }
+    /** `rows` must already be in `(at, id)` ascending order. */
+    function verifyRows(rows, expectedPreviousStart) {
+        let expectedPrevious = expectedPreviousStart;
+        let last = null;
+        for (const row of rows) {
+            if (row.previous_hash !== expectedPrevious)
+                throw chainBroken(row.id, 'discontinuous');
+            const { hash, version: _version, ...rest } = row;
+            if (computeHash(row.previous_hash, rest) !== hash)
+                throw chainBroken(row.id, 'edited');
+            expectedPrevious = hash;
+            last = { id: row.id, at: row.at, hash: row.hash };
+        }
+        return last;
+    }
+    async function verifyRangeImpl(since) {
+        const genesis = await currentGenesis();
+        if (since === null) {
+            const rows = await db.query(sql `select * from ${table} order by at asc, id asc`);
+            const last = verifyRows(rows.rows, genesis?.hash ?? null);
+            return { checkpoint: last, entriesChecked: rows.rows.length };
+        }
+        const found = await db.query(sql `select * from ${table} where id = ${since.id}`);
+        const checkpointRow = found.rows[0];
+        if (checkpointRow === undefined) {
+            // Missing is only innocent when it is exactly what a recorded prune()
+            // would leave behind: `since` at or before the current genesis. Newer
+            // than the genesis (or no genesis at all) and still missing means
+            // something else deleted it — tampering, not retention.
+            const explainedByPrune = genesis !== null &&
+                (since.at < genesis.at || (since.at === genesis.at && since.id <= genesis.id));
+            if (!explainedByPrune)
+                throw chainBroken(since.id, 'discontinuous');
+            // Resume as if starting fresh from the genesis: everything between the
+            // old checkpoint and the genesis is gone by design, and the caller's
+            // next checkpoint should be the genesis or later.
+            const rows = await db.query(sql `select * from ${table} order by at asc, id asc`);
+            const last = verifyRows(rows.rows, genesis?.hash ?? null);
+            return { checkpoint: last ?? genesis, entriesChecked: rows.rows.length };
+        }
+        if (checkpointRow.hash !== since.hash)
+            throw chainBroken(since.id, 'edited');
+        // Defence in depth: the checkpoint row's own stored hash must still
+        // match its own content, not only match what the caller remembered.
+        const { hash, version: _version, ...rest } = checkpointRow;
+        if (computeHash(checkpointRow.previous_hash, rest) !== hash) {
+            throw chainBroken(since.id, 'edited');
+        }
+        const rows = await db.query(sql `select * from ${table}
+          where (at > ${since.at}) or (at = ${since.at} and id > ${since.id})
+          order by at asc, id asc`);
+        const last = verifyRows(rows.rows, since.hash);
+        return { checkpoint: last ?? since, entriesChecked: rows.rows.length };
+    }
     return {
         record: (input) => {
             const task = appendQueue.then(async () => {
@@ -58,11 +180,12 @@ export function createAuditLog(db, now = Date.now) {
                     previous_hash: previousHash,
                 };
                 const hash = computeHash(previousHash, base);
+                const version = input.version === undefined ? null : String(input.version);
                 await db.query(sql `
-          insert into ${table} (id, at, actor_id, actor_roles, action, collection_name, entry_id, diff, hash, previous_hash)
+          insert into ${table} (id, at, actor_id, actor_roles, action, collection_name, entry_id, diff, hash, previous_hash, version)
           values (${base.id}, ${base.at}, ${base.actor_id}, ${base.actor_roles}, ${base.action},
-                  ${base.collection_name}, ${base.entry_id}, ${base.diff}, ${hash}, ${base.previous_hash})`);
-                return fromRow({ ...base, hash });
+                  ${base.collection_name}, ${base.entry_id}, ${base.diff}, ${hash}, ${base.previous_hash}, ${version})`);
+                return fromRow({ ...base, hash, version });
             });
             // The queue must advance even if this append fails, or every append
             // after a failure would wait on a promise that never resolves.
@@ -79,34 +202,55 @@ export function createAuditLog(db, now = Date.now) {
                 conditions.push(sql `collection_name = ${filter.collection}`);
             if (filter.since !== undefined)
                 conditions.push(sql `at >= ${filter.since}`);
+            if (filter.until !== undefined)
+                conditions.push(sql `at <= ${filter.until}`);
+            if (filter.actorKind !== undefined)
+                conditions.push(actorKindCondition(filter.actorKind));
+            if (filter.before !== undefined) {
+                conditions.push(sql `(at < ${filter.before.at} or (at = ${filter.before.at} and id < ${filter.before.id}))`);
+            }
             const where = conditions.reduce((left, right) => sql `${left} and ${right}`);
             const result = await db.query(sql `
         select * from ${table} where ${where} order by at desc, id desc limit ${filter.limit ?? 200}`);
             return result.rows.map(fromRow);
         },
+        get: async (id) => {
+            const result = await db.query(sql `select * from ${table} where id = ${id}`);
+            const row = result.rows[0];
+            return row === undefined ? null : fromRow(row);
+        },
         verify: async () => {
-            const result = await db.query(sql `select * from ${table} order by at asc, id asc`);
-            let expectedPrevious = null;
-            for (const row of result.rows) {
-                if (row.previous_hash !== expectedPrevious) {
-                    throw new CogentaError({
-                        code: 'AUDIT_CHAIN_BROKEN',
-                        message: `Audit entry ${row.id} does not chain from the entry before it.`,
-                        hint: 'The audit log has been edited or reordered outside of record(). Treat every entry from this point on as untrusted.',
-                        details: { entryId: row.id },
-                    });
+            await verifyRangeImpl(null);
+        },
+        verifyRange: (since) => verifyRangeImpl(since),
+        prune: (olderThan) => {
+            const task = appendQueue.then(async () => {
+                const candidates = await db.query(sql `select * from ${table} where at < ${olderThan} order by at asc, id asc`);
+                if (candidates.rows.length === 0) {
+                    return { prunedCount: 0, genesis: await currentGenesis() };
                 }
-                const { hash, ...rest } = row;
-                if (computeHash(row.previous_hash, rest) !== hash) {
-                    throw new CogentaError({
-                        code: 'AUDIT_CHAIN_BROKEN',
-                        message: `Audit entry ${row.id} has been modified since it was recorded.`,
-                        hint: 'Its stored hash no longer matches its content. Treat every entry from this point on as untrusted.',
-                        details: { entryId: row.id },
-                    });
+                const genesis = await currentGenesis();
+                // Throws `AUDIT_CHAIN_BROKEN` when the segment about to be removed
+                // is already discontinuous or edited — refusing to purge over
+                // evidence of tampering, rather than quietly making it unrecoverable.
+                const anchor = verifyRows(candidates.rows, genesis?.hash ?? null);
+                if (anchor === null) {
+                    // Unreachable: `candidates.rows.length > 0` guarantees `verifyRows`
+                    // returns the last row it processed. Narrows the type for below.
+                    throw chainBroken('unknown', 'discontinuous');
                 }
-                expectedPrevious = hash;
-            }
+                await db.transaction(async (tx) => {
+                    await tx.query(sql `delete from ${table} where at < ${olderThan}`);
+                    await tx.query(sql `delete from ${genesisTable} where id = ${'singleton'}`);
+                    await tx.query(sql `
+            insert into ${genesisTable} (id, entry_id, entry_at, entry_hash, pruned_count, pruned_at)
+            values (${'singleton'}, ${anchor.id}, ${anchor.at}, ${anchor.hash},
+                    ${String(candidates.rows.length)}, ${new Date(now()).toISOString()})`);
+                });
+                return { prunedCount: candidates.rows.length, genesis: anchor };
+            });
+            appendQueue = task.catch(() => undefined);
+            return task;
         },
     };
 }

package/dist/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AA6BpC,SAAS,OAAO,CAAC,GAAa;IAC5B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAsB;QAC5D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,eAAe;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAA6B;QAClF,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,aAAa;KAChC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,YAA2B,EAAE,MAA8B;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,YAAY;QACZ,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAiBD,MAAM,UAAU,cAAc,CAAC,EAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAErD,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,sCAAsC;IACtC,IAAI,WAAW,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAErD,KAAK,UAAU,QAAQ;QACrB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,oBAAoB,KAAK,oCAAoC,CAAC,EAAE,CACpE,CAAA;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;IACrC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAAyB,EAAE;gBAC5D,MAAM,YAAY,GAAG,MAAM,QAAQ,EAAE,CAAA;gBACrC,MAAM,IAAI,GAAG;oBACX,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC;oBACd,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;oBACjC,QAAQ,EAAE,KAAK,CAAC,OAAO;oBACvB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC7C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,eAAe,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;oBACzC,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;oBAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClE,aAAa,EAAE,YAAY;iBAC5B,CAAA;gBACD,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;gBAE5C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;wBACF,KAAK;oBACT,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM;oBAC1E,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC,aAAa,GAAG,CAAC,CAAA;gBAEpG,OAAO,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACnC,CAAC,CAAC,CAAA;YAEF,oEAAoE;YACpE,+DAA+D;YAC/D,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE;YAC1B,MAAM,UAAU,GAAG,CAAC,GAAG,CAAA,OAAO,CAAC,CAAA;YAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YACpF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAChF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBACjC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;YAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAE3E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAA;YAC3E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA;wBACzB,KAAK,UAAU,KAAK,oCAAoC,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAA;YAChG,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC5F,IAAI,gBAAgB,GAAkB,IAAI,CAAA;YAE1C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC9B,IAAI,GAAG,CAAC,aAAa,KAAK,gBAAgB,EAAE,CAAC;oBAC3C,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,eAAe,GAAG,CAAC,EAAE,2CAA2C;wBACzE,IAAI,EAAE,oHAAoH;wBAC1H,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE;qBAC7B,CAAC,CAAA;gBACJ,CAAC;gBAED,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAA;gBAC7B,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBAClD,MAAM,IAAI,YAAY,CAAC;wBACrB,IAAI,EAAE,oBAAoB;wBAC1B,OAAO,EAAE,eAAe,GAAG,CAAC,EAAE,2CAA2C;wBACzE,IAAI,EAAE,mGAAmG;wBACzG,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE;qBAC7B,CAAC,CAAA;gBACJ,CAAC;gBAED,gBAAgB,GAAG,IAAI,CAAA;YACzB,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAAuB,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,eAAe,CAAA;AACzF,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AA8CpC,SAAS,OAAO,CAAC,GAAa;IAC5B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC3B,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAsB;QAC5D,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,eAAe;QAC/B,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,IAAI,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAA6B;QAClF,OAAO,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3E,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,aAAa;KAChC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAClB,YAA2B,EAC3B,MAA0C;IAE1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,YAAY;QACZ,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,EAAE;QACT,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,eAAe;QACtB,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,IAAI;KACZ,CAAC,CAAA;IACF,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AA6ED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAA6C;IAC9E,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAA;IAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACzD,IAAI,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,OAAO,CAAA;IAC1D,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAoB;IAC9C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,GAAG,CAAA,kBAAkB,CAAA;QAC9B,KAAK,SAAS;YACZ,OAAO,GAAG,CAAA,iBAAiB,UAAU,EAAE,CAAA;QACzC,KAAK,OAAO;YACV,OAAO,GAAG,CAAA,eAAe,cAAc,EAAE,CAAA;QAC3C,KAAK,OAAO;YACV,OAAO,GAAG,CAAA,+CAA+C,UAAU,wBAAwB,cAAc,GAAG,CAAA;IAChH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,MAAkC;IACtE,OAAO,MAAM,KAAK,eAAe;QAC/B,CAAC,CAAC,IAAI,YAAY,CAAC;YACf,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,eAAe,OAAO,2CAA2C;YAC1E,IAAI,EAAE,oHAAoH;YAC1H,OAAO,EAAE,EAAE,OAAO,EAAE;SACrB,CAAC;QACJ,CAAC,CAAC,IAAI,YAAY,CAAC;YACf,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,eAAe,OAAO,2CAA2C;YAC1E,IAAI,EAAE,mGAAmG;YACzG,OAAO,EAAE,EAAE,OAAO,EAAE;SACrB,CAAC,CAAA;AACR,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAkB,EAAE,GAAG,GAAiB,IAAI,CAAC,GAAG;IAC7E,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IACrD,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC,OAAO,CAAC,CAAA;IAEhE,2EAA2E;IAC3E,uEAAuE;IACvE,uEAAuE;IACvE,4EAA4E;IAC5E,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,iDAAiD;IACjD,IAAI,WAAW,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAA;IAErD,KAAK,UAAU,QAAQ;QACrB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,oBAAoB,KAAK,oCAAoC,CAAC,EAAE,CACpE,CAAA;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAA;IACrC,CAAC;IAED,KAAK,UAAU,cAAc;QAC3B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAC3B,GAAG,CAAA,8CAA8C,YAAY,eAAe,WAAW,EAAE,CAC1F,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,CAAA;IAChG,CAAC;IAED,4DAA4D;IAC5D,SAAS,UAAU,CACjB,IAAyB,EACzB,qBAAoC;QAEpC,IAAI,gBAAgB,GAAG,qBAAqB,CAAA;QAC5C,IAAI,IAAI,GAA2B,IAAI,CAAA;QAEvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,CAAC,aAAa,KAAK,gBAAgB;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAEtF,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAA;YAChD,IAAI,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI;gBAAE,MAAM,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;YAEtF,gBAAgB,GAAG,IAAI,CAAA;YACvB,IAAI,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAA;QACnD,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,KAAK,UAAU,eAAe,CAAC,KAA6B;QAC1D,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;QAEtC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC1F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAA;YACzD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,eAAe,KAAK,CAAC,EAAE,EAAE,CAAC,CAAA;QAC1F,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QAEnC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,sEAAsE;YACtE,sEAAsE;YACtE,kEAAkE;YAClE,wDAAwD;YACxD,MAAM,gBAAgB,GACpB,OAAO,KAAK,IAAI;gBAChB,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAChF,IAAI,CAAC,gBAAgB;gBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;YAEnE,uEAAuE;YACvE,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,0BAA0B,CAAC,CAAA;YAC1F,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAA;YACzD,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;QAC1E,CAAC;QAED,IAAI,aAAa,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC5E,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,aAAa,CAAA;QAC1D,IAAI,WAAW,CAAC,aAAa,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YAC5D,MAAM,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QACvC,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CACzB,GAAG,CAAA,iBAAiB,KAAK;wBACP,KAAK,CAAC,EAAE,cAAc,KAAK,CAAC,EAAE,aAAa,KAAK,CAAC,EAAE;kCACzC,CAC7B,CAAA;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;QAC9C,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;IACxE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YAChB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAAyB,EAAE;gBAC5D,MAAM,YAAY,GAAG,MAAM,QAAQ,EAAE,CAAA;gBACrC,MAAM,IAAI,GAAG;oBACX,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC;oBACd,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;oBACjC,QAAQ,EAAE,KAAK,CAAC,OAAO;oBACvB,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC7C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,eAAe,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI;oBACzC,QAAQ,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI;oBAC/B,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;oBAClE,aAAa,EAAE,YAAY;iBAC5B,CAAA;gBACD,MAAM,IAAI,GAAG,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAA;gBAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBAE1E,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;wBACF,KAAK;oBACT,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,MAAM;oBAC1E,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,KAAK,IAAI,CAAC,aAAa,KAAK,OAAO,GAAG,CAAC,CAAA;gBAEhH,OAAO,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;YAC5C,CAAC,CAAC,CAAA;YAEF,oEAAoE;YACpE,+DAA+D;YAC/D,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE;YAC1B,MAAM,UAAU,GAAG,CAAC,GAAG,CAAA,OAAO,CAAC,CAAA;YAC/B,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,cAAc,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;YACpF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;YAChF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;gBACjC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,qBAAqB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;YAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAA,SAAS,MAAM,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;gBAAE,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAA;YACzF,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,UAAU,CAAC,IAAI,CACb,GAAG,CAAA,SAAS,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,CAC3F,CAAA;YACH,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,CAAA,GAAG,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAA;YAC3E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA;wBACzB,KAAK,UAAU,KAAK,oCAAoC,MAAM,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAA;YAChG,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACjC,CAAC;QAED,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAChB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAW,GAAG,CAAA,iBAAiB,KAAK,eAAe,EAAE,EAAE,CAAC,CAAA;YACrF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YAC1B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAChD,CAAC;QAED,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;QAC7B,CAAC;QAED,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC;QAE9C,KAAK,EAAE,CAAC,SAAS,EAAE,EAAE;YACnB,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,IAA+B,EAAE;gBAClE,MAAM,UAAU,GAAG,MAAM,EAAE,CAAC,KAAK,CAC/B,GAAG,CAAA,iBAAiB,KAAK,eAAe,SAAS,0BAA0B,CAC5E,CAAA;gBACD,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,cAAc,EAAE,EAAE,CAAA;gBAC5D,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,cAAc,EAAE,CAAA;gBACtC,mEAAmE;gBACnE,8DAA8D;gBAC9D,sEAAsE;gBACtE,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,CAAA;gBACjE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBACpB,oEAAoE;oBACpE,iEAAiE;oBACjE,MAAM,WAAW,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;gBAC/C,CAAC;gBAED,MAAM,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;oBAChC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,KAAK,eAAe,SAAS,EAAE,CAAC,CAAA;oBACjE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA,eAAe,YAAY,eAAe,WAAW,EAAE,CAAC,CAAA;oBAC1E,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAA;0BACF,YAAY;sBAChB,WAAW,KAAK,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI;sBACvD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAA;gBAClF,CAAC,CAAC,CAAA;gBAEF,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YACjE,CAAC,CAAC,CAAA;YAEF,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/credentials.d.ts

@@ -26,6 +26,33 @@ export interface CredentialStore {
         data: WebAuthnCredentialData;
     } | null>;
     updateWebAuthnCounter(credentialId: string, counter: number): Promise<void>;
+    /**
+     * Replaces this account's recovery codes wholesale with `hashes` — already
+     * hashed by the caller (`recovery-codes.ts`), never a plaintext code. Used
+     * both for the first batch (TOTP confirmation) and for regeneration, which
+     * is exactly what makes regeneration invalidate the old ones: there is
+     * nothing left to consume the previous batch against.
+     */
+    setRecoveryCodes(userId: string, hashes: readonly string[]): Promise<void>;
+    /** How many codes exist and how many are still unused. `null` when none were ever issued. */
+    recoveryCodesStatus(userId: string): Promise<{
+        readonly total: number;
+        readonly remaining: number;
+    } | null>;
+    /**
+     * Checks `code` against every unused code for this account and, on a
+     * match, marks that one used. Single use is enforced with a
+     * compare-and-set on the write (`resets.ts`'s `markUsed` idiom): the
+     * `update` is conditioned on the row still holding the exact bytes this
+     * call read, so a concurrent redemption that wrote first makes this one's
+     * `update` affect zero rows, which is retried against the fresher row
+     * rather than blindly overwriting it. Two simultaneous calls with the same
+     * code can therefore never both return `true`. Returns `false` for no
+     * account, no codes, or no match at all.
+     */
+    consumeRecoveryCode(userId: string, code: string): Promise<boolean>;
+    /** Deletes every recovery code for this account — there is nothing left to be a spare key for once TOTP itself is off. */
+    removeRecoveryCodes(userId: string): Promise<void>;
     /** What second factors, if any, this user has set up. */
     kinds(userId: string): Promise<readonly CredentialKind[]>;
 }

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAGzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAUhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE7C,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,kFAAkF;IAClF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACjF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClF,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAA;IAC/E,8BAA8B,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACnE,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3E,yDAAyD;IACzD,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;CAC1D;AAED,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,eAAe,CAkHjB"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,cAAc,EAA0B,MAAM,eAAe,CAAA;AAIzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAUhD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAE7C,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC5D,kFAAkF;IAClF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACjF,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1C,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAEzC,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAClF,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAAC,CAAA;IAC/E,8BAA8B,CAC5B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACnE,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAE3E;;;;;;OAMG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,6FAA6F;IAC7F,mBAAmB,CACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACzE;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE,0HAA0H;IAC1H,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAElD,yDAAyD;IACzD,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAA;CAC1D;AAUD,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,cAAc,EAClB,GAAG,GAAE,MAAM,MAAiB,GAC3B,eAAe,CAoLjB"}