@connexum/ai-governance 1.0.0-beta.11

package/dist/esm/cli/wrap-shim-generator.js

@@ -0,0 +1,205 @@
+/**
+ * wrap-shim-generator.ts
+ *
+ * For each DetectedAgent from the scanner (slice 1), generates a sibling
+ * `<file>.governed.<ext>` shim file that:
+ *   - Imports the original module
+ *   - Wraps the LLM client using the appropriate Connexum governed equivalent
+ *   - Re-exports the original module's public API with the wrapped client
+ *   - Includes a stable agentId header for idempotent re-runs
+ *
+ * Pure function: generateWrapShim() returns string content only (no disk writes).
+ * writeWrapShims() is the disk-writing orchestrator called by the CLI.
+ *
+ * F-NEW-PRODUCT-AGENT-DIR-WRAPPER slice 2
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+// ---------------------------------------------------------------------------
+// Template key derivation
+// ---------------------------------------------------------------------------
+/**
+ * Maps (language, provider, framework) to a template key.
+ * Returns null when no template exists for the combo (caller skips + logs).
+ */
+export function templateKey(language, provider, framework) {
+    const lang = language === 'javascript' ? 'typescript' : language;
+    // Framework-first routing
+    if (framework === 'langchain') {
+        const p = provider ?? 'openai';
+        if (lang === 'python') {
+            if (p === 'anthropic')
+                return 'python-langchain-anthropic';
+            return 'python-langchain-openai'; // default: openai backend
+        }
+        // TypeScript LangChain uses openai shim (GovernedOpenAI wraps the underlying client)
+        if (lang === 'typescript')
+            return 'typescript-openai';
+    }
+    if (lang === 'python') {
+        switch (provider) {
+            case 'openai': return 'python-openai';
+            case 'anthropic': return 'python-anthropic';
+            case 'google': return 'python-google';
+            case 'bedrock': return 'python-bedrock';
+            case 'ollama': return 'python-ollama';
+            case 'huggingface': return 'python-huggingface';
+            default: return null;
+        }
+    }
+    if (lang === 'typescript') {
+        switch (provider) {
+            case 'openai': return 'typescript-openai';
+            case 'anthropic': return 'typescript-anthropic';
+            case 'google': return 'typescript-google';
+            default: return null;
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------------------
+// Template loading
+// ---------------------------------------------------------------------------
+const TEMPLATES_DIR = path.join(__dirname, 'shim-templates');
+/** Cache loaded template text to avoid repeated disk reads. */
+const _templateCache = new Map();
+function loadTemplate(key) {
+    if (_templateCache.has(key))
+        return _templateCache.get(key);
+    // Template files named: <key>.template.{py,ts}.txt
+    const suffix = key.startsWith('python') ? 'py' : 'ts';
+    const templateFile = path.join(TEMPLATES_DIR, `${key}.template.${suffix}.txt`);
+    const content = fs.readFileSync(templateFile, 'utf-8');
+    _templateCache.set(key, content);
+    return content;
+}
+// ---------------------------------------------------------------------------
+// Interpolation
+// ---------------------------------------------------------------------------
+/**
+ * Replace {{PLACEHOLDER}} tokens in a template string.
+ */
+function interpolate(template, vars) {
+    return template.replace(/\{\{([A-Z_]+)\}\}/g, (_, key) => {
+        if (key in vars)
+            return vars[key];
+        return `{{${key}}}`; // leave unknown placeholders intact
+    });
+}
+function packsToLiteral(packs, lang) {
+    if (packs.length === 0) {
+        return lang === 'python' ? '[]' : '[]';
+    }
+    const items = packs.map(p => `"${p}"`).join(', ');
+    return `[${items}]`;
+}
+/**
+ * Pure function. Returns the shim file content for a single DetectedAgent.
+ * Does not write to disk.
+ *
+ * @param agent   The DetectedAgent from the scanner.
+ * @param agentDir Absolute path to the scanned agent directory.
+ * @returns       The generated shim file content as a string.
+ * @throws        Error if the template file cannot be read.
+ */
+export function generateWrapShim(agent, agentDir) {
+    const key = templateKey(agent.language, agent.provider, agent.framework);
+    if (!key) {
+        throw new Error(`No shim template for (${agent.language}, provider=${agent.provider}, framework=${agent.framework})`);
+    }
+    const template = loadTemplate(key);
+    // Derive module name from filePath (basename without extension)
+    const basename = path.basename(agent.filePath);
+    const ext = path.extname(basename);
+    const moduleName = basename.slice(0, -ext.length);
+    const sourceFile = basename;
+    const packsLiteral = packsToLiteral(agent.packs, agent.language);
+    return interpolate(template, {
+        AGENT_ID: agent.agentId,
+        MODULE_NAME: moduleName,
+        SOURCE_FILE: sourceFile,
+        PACKS: packsLiteral,
+    });
+}
+/**
+ * Derive the output shim path for an agent.
+ * `agents/bot.py` => `agents/bot.governed.py`
+ * `agents/bot.ts`  => `agents/bot.governed.ts`
+ */
+export function shimPathFor(agent, agentDir) {
+    const absSource = path.join(agentDir, agent.filePath);
+    const ext = path.extname(absSource);
+    const withoutExt = absSource.slice(0, -ext.length);
+    return `${withoutExt}.governed${ext}`;
+}
+/** Marker string present in all auto-generated shims. Used for don't-clobber check. */
+export const SHIM_MARKER = '# auto-generated by @connexum/ai-governance';
+export const SHIM_MARKER_TS = '// auto-generated by @connexum/ai-governance';
+function hasShimMarker(content) {
+    return (content.includes(SHIM_MARKER) ||
+        content.includes(SHIM_MARKER_TS));
+}
+/**
+ * Write shim files for all detected agents into the agent directory.
+ * - Skips files that already exist AND were previously auto-generated (idempotent).
+ * - Skips files that already exist but were manually edited (don't-clobber).
+ * - Logs a warning for providers without a template (no crash).
+ *
+ * @param agents    Array from scanAgentDirectory().
+ * @param agentDir  Absolute path to the agent directory.
+ * @param log       Optional log function (defaults to process.stdout.write).
+ * @returns         Array of ShimResult, one per agent.
+ */
+export function writeWrapShims(agents, agentDir, log = (msg) => process.stdout.write(msg + '\n')) {
+    const results = [];
+    for (const agent of agents) {
+        const outPath = shimPathFor(agent, agentDir);
+        const key = templateKey(agent.language, agent.provider, agent.framework);
+        // No template for this (provider, language) combo
+        if (!key) {
+            const msg = `  [SKIP] ${agent.filePath}: no shim template for ` +
+                `(${agent.language}, provider=${agent.provider ?? 'null'}, ` +
+                `framework=${agent.framework ?? 'null'}) — deferred to follow-up`;
+            log(msg);
+            results.push({
+                shimPath: outPath,
+                content: '',
+                status: 'skipped-no-template',
+                message: msg,
+            });
+            continue;
+        }
+        // File already exists — check if it's ours or customer-edited
+        if (fs.existsSync(outPath)) {
+            const existing = fs.readFileSync(outPath, 'utf-8');
+            if (!hasShimMarker(existing)) {
+                // Customer-edited: do not clobber
+                const msg = `  [WARN] ${path.basename(outPath)} already exists and was manually edited — skipping. ` +
+                    `Delete the file to regenerate.`;
+                log(msg);
+                results.push({
+                    shimPath: outPath,
+                    content: '',
+                    status: 'skipped-exists',
+                    message: msg,
+                });
+                continue;
+            }
+            // It's our own generated file — idempotent re-run: regenerate it silently
+        }
+        // Generate and write
+        const content = generateWrapShim(agent, agentDir);
+        fs.writeFileSync(outPath, content, { encoding: 'utf-8', mode: 0o644 });
+        const msg = `  [OK]   ${agent.filePath} => ${path.relative(agentDir, outPath)}`;
+        log(msg);
+        results.push({
+            shimPath: outPath,
+            content,
+            status: 'generated',
+            message: msg,
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=wrap-shim-generator.js.map

package/dist/esm/cli/wrap-shim-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrap-shim-generator.js","sourceRoot":"","sources":["../../../src/cli/wrap-shim-generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,WAAW,CACzB,QAAgD,EAChD,QAAuB,EACvB,SAAwB;IAExB,MAAM,IAAI,GAAG,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEjE,0BAA0B;IAC1B,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAQ,IAAI,QAAQ,CAAC;QAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,WAAW;gBAAE,OAAO,4BAA4B,CAAC;YAC3D,OAAO,yBAAyB,CAAC,CAAG,0BAA0B;QAChE,CAAC;QACD,qFAAqF;QACrF,IAAI,IAAI,KAAK,YAAY;YAAE,OAAO,mBAAmB,CAAC;IACxD,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,CAAC,CAAM,OAAO,eAAe,CAAC;YAC3C,KAAK,WAAW,CAAC,CAAG,OAAO,kBAAkB,CAAC;YAC9C,KAAK,QAAQ,CAAC,CAAM,OAAO,eAAe,CAAC;YAC3C,KAAK,SAAS,CAAC,CAAK,OAAO,gBAAgB,CAAC;YAC5C,KAAK,QAAQ,CAAC,CAAM,OAAO,eAAe,CAAC;YAC3C,KAAK,aAAa,CAAC,CAAC,OAAO,oBAAoB,CAAC;YAChD,OAAO,CAAC,CAAY,OAAO,IAAI,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,QAAQ,CAAC,CAAI,OAAO,mBAAmB,CAAC;YAC7C,KAAK,WAAW,CAAC,CAAC,OAAO,sBAAsB,CAAC;YAChD,KAAK,QAAQ,CAAC,CAAI,OAAO,mBAAmB,CAAC;YAC7C,OAAO,CAAC,CAAU,OAAO,IAAI,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAE7D,+DAA+D;AAC/D,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEjD,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;IAE7D,mDAAmD;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,GAAG,aAAa,MAAM,MAAM,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACvD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E;;GAEG;AACH,SAAS,WAAW,CAAC,QAAgB,EAAE,IAA4B;IACjE,OAAO,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;QACvD,IAAI,GAAG,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;QAClC,OAAO,KAAK,GAAG,IAAI,CAAC,CAAE,oCAAoC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAe,EAAE,IAA4C;IACnF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACzC,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,IAAI,KAAK,GAAG,CAAC;AACtB,CAAC;AAkBD;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAoB,EAAE,QAAgB;IACrE,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,yBAAyB,KAAK,CAAC,QAAQ,cAAc,KAAK,CAAC,QAAQ,eAAe,KAAK,CAAC,SAAS,GAAG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEnC,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,QAAQ,CAAC;IAE5B,MAAM,YAAY,GAAG,cAAc,CACjC,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,QAAQ,CACf,CAAC;IAEF,OAAO,WAAW,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAK,KAAK,CAAC,OAAO;QAC1B,WAAW,EAAE,UAAU;QACvB,WAAW,EAAE,UAAU;QACvB,KAAK,EAAQ,YAAY;KAC1B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAoB,EAAE,QAAgB;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,GAAG,UAAU,YAAY,GAAG,EAAE,CAAC;AACxC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,WAAW,GAAG,6CAA6C,CAAC;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,8CAA8C,CAAC;AAE7E,SAAS,aAAa,CAAC,OAAe;IACpC,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,cAAc,CAC5B,MAAuB,EACvB,QAAgB,EAChB,MAA6B,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;IAEtE,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAEzE,kDAAkD;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,QAAQ,yBAAyB;gBAC7D,IAAI,KAAK,CAAC,QAAQ,cAAc,KAAK,CAAC,QAAQ,IAAI,MAAM,IAAI;gBAC5D,aAAa,KAAK,CAAC,SAAS,IAAI,MAAM,2BAA2B,CAAC;YACpE,GAAG,CAAC,GAAG,CAAC,CAAC;YACT,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,EAAE;gBACX,MAAM,EAAE,qBAAqB;gBAC7B,OAAO,EAAE,GAAG;aACb,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,8DAA8D;QAC9D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,kCAAkC;gBAClC,MAAM,GAAG,GAAG,YAAY,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sDAAsD;oBAClG,gCAAgC,CAAC;gBACnC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,OAAO;oBACjB,OAAO,EAAE,EAAE;oBACX,MAAM,EAAE,gBAAgB;oBACxB,OAAO,EAAE,GAAG;iBACb,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,0EAA0E;QAC5E,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,GAAG,CAAC,CAAC;QACT,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,OAAO;YACjB,OAAO;YACP,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,GAAG;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/esm/dashboard/api.js

@@ -0,0 +1,310 @@
+/**
+ * Centralized Governance API for the Oversight Command Center.
+ *
+ * Provides REST-style endpoint handlers for:
+ * - Event ingestion from governed installations
+ * - Status queries across agents and tenants
+ * - Configuration management
+ * - Report generation
+ *
+ * These are handler functions, not a running HTTP server.
+ * The consuming application (my-cc.io or any Express/Fastify app) wires
+ * these handlers to its own routing layer.
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+// ---- API Implementation ----
+export class GovernanceAPI {
+    config;
+    events = [];
+    agents = new Map();
+    installations = new Map();
+    eventsFile;
+    stateFile;
+    constructor(config) {
+        this.config = {
+            maxEvents: 10000,
+            apiKey: config.apiKey || '',
+            ...config,
+        };
+        this.eventsFile = path.join(this.config.dataDir, 'events.jsonl');
+        this.stateFile = path.join(this.config.dataDir, 'state.json');
+        this.ensureDir(this.config.dataDir);
+        this.loadState();
+    }
+    /**
+     * Ingest a governance event from a client installation.
+     */
+    ingestEvent(event, apiKey) {
+        if (this.config.apiKey && apiKey !== this.config.apiKey) {
+            return this.error('Invalid API key');
+        }
+        if (!event.id || !event.timestamp || !event.installationId || !event.agentId) {
+            return this.error('Missing required fields: id, timestamp, installationId, agentId');
+        }
+        this.events.push(event);
+        // Trim events if over max
+        if (this.events.length > this.config.maxEvents) {
+            this.events = this.events.slice(-this.config.maxEvents);
+        }
+        // Update agent status
+        this.updateAgentStatus(event);
+        // Update installation status
+        this.updateInstallationStatus(event);
+        // Persist
+        this.appendEvent(event);
+        this.saveState();
+        return this.ok({ eventId: event.id });
+    }
+    /**
+     * Query events with filters.
+     */
+    queryEvents(query = {}) {
+        let filtered = [...this.events];
+        if (query.installationId) {
+            filtered = filtered.filter(e => e.installationId === query.installationId);
+        }
+        if (query.tenantId) {
+            filtered = filtered.filter(e => e.tenantId === query.tenantId);
+        }
+        if (query.agentId) {
+            filtered = filtered.filter(e => e.agentId === query.agentId);
+        }
+        if (query.type) {
+            filtered = filtered.filter(e => e.type === query.type);
+        }
+        if (query.severity) {
+            filtered = filtered.filter(e => e.severity === query.severity);
+        }
+        if (query.since) {
+            filtered = filtered.filter(e => e.timestamp >= query.since);
+        }
+        const total = filtered.length;
+        const offset = query.offset || 0;
+        const limit = query.limit || 100;
+        filtered = filtered.slice(offset, offset + limit);
+        return this.ok({ events: filtered, total });
+    }
+    /**
+     * Get agent status.
+     */
+    getAgentStatus(agentId) {
+        const status = this.agents.get(agentId);
+        if (!status) {
+            return this.error(`Agent not found: ${agentId}`);
+        }
+        return this.ok(status);
+    }
+    /**
+     * List all agents with optional filters.
+     */
+    listAgents(installationId) {
+        let agents = Array.from(this.agents.values());
+        if (installationId) {
+            agents = agents.filter(a => a.installationId === installationId);
+        }
+        return this.ok(agents);
+    }
+    /**
+     * Get installation status.
+     */
+    getInstallation(installationId) {
+        const status = this.installations.get(installationId);
+        if (!status) {
+            return this.error(`Installation not found: ${installationId}`);
+        }
+        return this.ok(status);
+    }
+    /**
+     * List all installations.
+     */
+    listInstallations() {
+        return this.ok(Array.from(this.installations.values()));
+    }
+    /**
+     * Get dashboard summary.
+     */
+    getSummary() {
+        const agents = Array.from(this.agents.values());
+        const scores = agents.map(a => a.complianceScore).filter(s => s > 0);
+        return this.ok({
+            totalInstallations: this.installations.size,
+            totalAgents: agents.length,
+            activeAgents: agents.filter(a => a.state === 'active').length,
+            suspendedAgents: agents.filter(a => a.state === 'suspended').length,
+            totalEvents: this.events.length,
+            criticalEvents: this.events.filter(e => e.severity === 'CRITICAL').length,
+            averageComplianceScore: scores.length > 0
+                ? Math.round(scores.reduce((a, b) => a + b, 0) / scores.length)
+                : 0,
+            lastUpdated: new Date().toISOString(),
+        });
+    }
+    /**
+     * Get event counts grouped by type.
+     */
+    getEventBreakdown(installationId) {
+        let events = this.events;
+        if (installationId) {
+            events = events.filter(e => e.installationId === installationId);
+        }
+        const breakdown = {};
+        for (const e of events) {
+            breakdown[e.type] = (breakdown[e.type] || 0) + 1;
+        }
+        return this.ok(breakdown);
+    }
+    /**
+     * Get the total number of stored events.
+     */
+    get eventCount() {
+        return this.events.length;
+    }
+    /**
+     * Get the total number of tracked agents.
+     */
+    get agentCount() {
+        return this.agents.size;
+    }
+    // ---- Private helpers ----
+    updateAgentStatus(event) {
+        const key = `${event.installationId}:${event.agentId}`;
+        const existing = this.agents.get(key) || {
+            agentId: event.agentId,
+            installationId: event.installationId,
+            tenantId: event.tenantId,
+            state: 'active',
+            lastSeen: event.timestamp,
+            circuitBreakerState: 'CLOSED',
+            totalActions: 0,
+            blockedActions: 0,
+            anomalyCount: 0,
+            complianceScore: 100,
+        };
+        existing.lastSeen = event.timestamp;
+        existing.totalActions++;
+        if (event.decision === 'DENY') {
+            existing.blockedActions++;
+        }
+        if (event.type === 'circuit_break') {
+            existing.state = 'suspended';
+            existing.circuitBreakerState = 'OPEN';
+        }
+        if (event.type === 'anomaly') {
+            existing.anomalyCount++;
+        }
+        // Compliance score degrades with violations
+        if (event.type === 'violation') {
+            const penalty = event.severity === 'CRITICAL' ? 10
+                : event.severity === 'HIGH' ? 5
+                    : event.severity === 'MEDIUM' ? 2
+                        : 1;
+            existing.complianceScore = Math.max(0, existing.complianceScore - penalty);
+        }
+        this.agents.set(key, existing);
+    }
+    updateInstallationStatus(event) {
+        const existing = this.installations.get(event.installationId) || {
+            installationId: event.installationId,
+            name: event.installationId,
+            agents: [],
+            activePacks: [],
+            lastEvent: event.timestamp,
+            overallScore: 100,
+            eventCount: 0,
+        };
+        existing.lastEvent = event.timestamp;
+        existing.eventCount++;
+        // Update agents list
+        const agentKey = `${event.installationId}:${event.agentId}`;
+        const agentStatus = this.agents.get(agentKey);
+        if (agentStatus) {
+            const idx = existing.agents.findIndex(a => a.agentId === event.agentId);
+            if (idx >= 0) {
+                existing.agents[idx] = agentStatus;
+            }
+            else {
+                existing.agents.push(agentStatus);
+            }
+        }
+        // Recalculate overall score
+        if (existing.agents.length > 0) {
+            existing.overallScore = Math.round(existing.agents.reduce((sum, a) => sum + a.complianceScore, 0) / existing.agents.length);
+        }
+        this.installations.set(event.installationId, existing);
+    }
+    appendEvent(event) {
+        try {
+            fs.appendFileSync(this.eventsFile, JSON.stringify(event) + '\n');
+        }
+        catch {
+            // Non-fatal: event is still in memory
+        }
+    }
+    saveState() {
+        try {
+            const state = {
+                agents: Array.from(this.agents.entries()),
+                installations: Array.from(this.installations.entries()),
+            };
+            fs.writeFileSync(this.stateFile, JSON.stringify(state));
+        }
+        catch {
+            // Non-fatal
+        }
+    }
+    loadState() {
+        // Load events from JSONL
+        if (fs.existsSync(this.eventsFile)) {
+            try {
+                const lines = fs.readFileSync(this.eventsFile, 'utf-8').trim().split('\n');
+                for (const line of lines) {
+                    if (line.trim()) {
+                        try {
+                            this.events.push(JSON.parse(line));
+                        }
+                        catch {
+                            // Skip malformed lines
+                        }
+                    }
+                }
+                // Trim to max
+                if (this.events.length > this.config.maxEvents) {
+                    this.events = this.events.slice(-this.config.maxEvents);
+                }
+            }
+            catch {
+                // Fresh start
+            }
+        }
+        // Load state
+        if (fs.existsSync(this.stateFile)) {
+            try {
+                const state = JSON.parse(fs.readFileSync(this.stateFile, 'utf-8'));
+                if (state.agents) {
+                    this.agents = new Map(state.agents);
+                }
+                if (state.installations) {
+                    this.installations = new Map(state.installations);
+                }
+            }
+            catch {
+                // Fresh start
+            }
+        }
+    }
+    ok(data) {
+        return { success: true, data, timestamp: new Date().toISOString() };
+    }
+    error(message) {
+        return { success: false, error: message, timestamp: new Date().toISOString() };
+    }
+    ensureDir(dir) {
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/esm/dashboard/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/dashboard/api.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AA4F7B,+BAA+B;AAE/B,MAAM,OAAO,aAAa;IAChB,MAAM,CAAgC;IACtC,MAAM,GAAsB,EAAE,CAAC;IAC/B,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC7C,aAAa,GAAoC,IAAI,GAAG,EAAE,CAAC;IAC3D,UAAU,CAAS;IACnB,SAAS,CAAS;IAE1B,YAAY,MAA2B;QACrC,IAAI,CAAC,MAAM,GAAG;YACZ,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;YAC3B,GAAG,MAAM;SACV,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,KAAsB,EAAE,MAAe;QACjD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxD,OAAO,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7E,OAAO,IAAI,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,0BAA0B;QAC1B,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,CAAC;QAED,sBAAsB;QACtB,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAE9B,6BAA6B;QAC7B,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QAErC,UAAU;QACV,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,SAAS,EAAE,CAAC;QAEjB,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAoB,EAAE;QAChC,IAAI,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAEhC,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,KAAM,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;QACjC,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,OAAe;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,cAAuB;QAChC,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,cAAsB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,KAAK,CAAC,2BAA2B,cAAc,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,UAAU;QACR,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAErE,OAAO,IAAI,CAAC,EAAE,CAAC;YACb,kBAAkB,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI;YAC3C,WAAW,EAAE,MAAM,CAAC,MAAM;YAC1B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM;YAC7D,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,MAAM;YACnE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM;YACzE,sBAAsB,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC/D,CAAC,CAAC,CAAC;YACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,iBAAiB,CAAC,cAAuB;QACvC,IAAI,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QACzB,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QAED,OAAO,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAED,4BAA4B;IAEpB,iBAAiB,CAAC,KAAsB;QAC9C,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI;YACvC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,KAAK,EAAE,QAAiB;YACxB,QAAQ,EAAE,KAAK,CAAC,SAAS;YACzB,mBAAmB,EAAE,QAAiB;YACtC,YAAY,EAAE,CAAC;YACf,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,CAAC;YACf,eAAe,EAAE,GAAG;SACrB,CAAC;QAEF,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC;QACpC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAExB,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC9B,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YACnC,QAAQ,CAAC,KAAK,GAAG,WAAW,CAAC;YAC7B,QAAQ,CAAC,mBAAmB,GAAG,MAAM,CAAC;QACxC,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,CAAC;QAED,4CAA4C;QAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE;gBAChD,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC/B,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC;wBACjC,CAAC,CAAC,CAAC,CAAC;YACN,QAAQ,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,eAAe,GAAG,OAAO,CAAC,CAAC;QAC7E,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAEO,wBAAwB,CAAC,KAAsB;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI;YAC/D,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,IAAI,EAAE,KAAK,CAAC,cAAc;YAC1B,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,GAAG;YACjB,UAAU,EAAE,CAAC;SACd,CAAC;QAEF,QAAQ,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QACrC,QAAQ,CAAC,UAAU,EAAE,CAAC;QAEtB,qBAAqB;QACrB,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC5D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC;YACxE,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBACb,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,KAAK,CAChC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CACxF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;IACzD,CAAC;IAEO,WAAW,CAAC,KAAsB;QACxC,IAAI,CAAC;YACH,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,sCAAsC;QACxC,CAAC;IACH,CAAC;IAEO,SAAS;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG;gBACZ,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACzC,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;aACxD,CAAC;YACF,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,YAAY;QACd,CAAC;IACH,CAAC;IAEO,SAAS;QACf,yBAAyB;QACzB,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;oBACzB,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;wBAChB,IAAI,CAAC;4BACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;wBACrC,CAAC;wBAAC,MAAM,CAAC;4BACP,uBAAuB;wBACzB,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,cAAc;gBACd,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1D,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;QAED,aAAa;QACb,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBACnE,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBACxB,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,cAAc;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,EAAE,CAAI,IAAO;QACnB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAI,OAAe;QAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;CACF"}

package/dist/esm/dashboard/theme.js

@@ -0,0 +1,135 @@
+/**
+ * White-label theming system for the Oversight Command Center.
+ *
+ * Enables per-tenant branding customization: logo, colors, domain,
+ * company name, and custom CSS. Themes are stored per-tenant and
+ * resolved at render time.
+ *
+ * @connexum/ai-governance
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+const DEFAULT_THEME = {
+    primaryColor: '#1a56db',
+    secondaryColor: '#6b7280',
+    accentColor: '#dc2626',
+    backgroundColor: '#f9fafb',
+    textColor: '#111827',
+};
+export class ThemeStore {
+    themes = new Map();
+    themeDir;
+    constructor(config) {
+        this.themeDir = config.themeDir;
+        this.ensureDir(this.themeDir);
+        this.loadThemes();
+    }
+    /**
+     * Set or update a tenant's theme.
+     */
+    setTheme(config) {
+        if (!config.tenantId || !config.companyName) {
+            throw new Error('tenantId and companyName are required');
+        }
+        if (config.primaryColor && !this.isValidHex(config.primaryColor)) {
+            throw new Error(`Invalid primaryColor hex: ${config.primaryColor}`);
+        }
+        const theme = { ...DEFAULT_THEME, ...config };
+        this.themes.set(theme.tenantId, theme);
+        this.saveTheme(theme);
+        return this.resolveTheme(theme);
+    }
+    /**
+     * Get a tenant's resolved theme.
+     */
+    getTheme(tenantId) {
+        const config = this.themes.get(tenantId);
+        if (!config)
+            return null;
+        return this.resolveTheme(config);
+    }
+    /**
+     * Delete a tenant's theme.
+     */
+    deleteTheme(tenantId) {
+        const existed = this.themes.delete(tenantId);
+        if (existed) {
+            const filePath = path.join(this.themeDir, `${tenantId}.json`);
+            if (fs.existsSync(filePath)) {
+                fs.unlinkSync(filePath);
+            }
+        }
+        return existed;
+    }
+    /**
+     * List all registered themes.
+     */
+    listThemes() {
+        return Array.from(this.themes.values());
+    }
+    /**
+     * Get a default theme for unbranded tenants.
+     */
+    getDefaultTheme(tenantId, companyName) {
+        return this.resolveTheme({
+            tenantId,
+            companyName,
+            ...DEFAULT_THEME,
+            primaryColor: DEFAULT_THEME.primaryColor,
+        });
+    }
+    /**
+     * Get the number of stored themes.
+     */
+    get themeCount() {
+        return this.themes.size;
+    }
+    // ---- Private helpers ----
+    resolveTheme(config) {
+        const cssVariables = {
+            '--gov-primary': config.primaryColor,
+            '--gov-secondary': config.secondaryColor || DEFAULT_THEME.secondaryColor,
+            '--gov-accent': config.accentColor || DEFAULT_THEME.accentColor,
+            '--gov-bg': config.backgroundColor || DEFAULT_THEME.backgroundColor,
+            '--gov-text': config.textColor || DEFAULT_THEME.textColor,
+        };
+        const variablesCss = Object.entries(cssVariables)
+            .map(([k, v]) => `  ${k}: ${v};`)
+            .join('\n');
+        const css = `:root {\n${variablesCss}\n}${config.customCss ? '\n' + config.customCss : ''}`;
+        return {
+            ...config,
+            cssVariables,
+            css,
+        };
+    }
+    isValidHex(color) {
+        return /^#([0-9a-fA-F]{3}|[0-9a-fA-F]{6})$/.test(color);
+    }
+    saveTheme(config) {
+        const filePath = path.join(this.themeDir, `${config.tenantId}.json`);
+        fs.writeFileSync(filePath, JSON.stringify(config, null, 2));
+    }
+    loadThemes() {
+        if (!fs.existsSync(this.themeDir))
+            return;
+        const files = fs.readdirSync(this.themeDir).filter(f => f.endsWith('.json'));
+        for (const file of files) {
+            try {
+                const data = JSON.parse(fs.readFileSync(path.join(this.themeDir, file), 'utf-8'));
+                if (data.tenantId) {
+                    this.themes.set(data.tenantId, data);
+                }
+            }
+            catch {
+                // Skip corrupted theme files
+            }
+        }
+    }
+    ensureDir(dir) {
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+    }
+}
+//# sourceMappingURL=theme.js.map