@ddd-ts-kit/audit 0.0.0-stage → 0.1.1

package/dist/search/comparing.js

@@ -0,0 +1,23 @@
+/**
+ * The comparison of an order, between two entries or between an entry and the position a
+ * cursor names: negative when `left` comes first in that order.
+ */
+export function comparing(order) {
+    const sign = order.direction === 'asc' ? 1 : -1;
+    return (left, right) => sign * compareKeys(sortKeyOf(left, order.field), sortKeyOf(right, order.field));
+}
+function sortKeyOf(position, field) {
+    const inChain = [position.chain, position.sequence];
+    return field === 'occurredAt' ? [position.occurredAt.getTime(), ...inChain] : inChain;
+}
+function compareKeys(left, right) {
+    for (const [index, value] of left.entries()) {
+        const other = right[index];
+        if (other === undefined || value === other) {
+            continue;
+        }
+        return value < other ? -1 : 1;
+    }
+    return 0;
+}
+//# sourceMappingURL=comparing.js.map

package/dist/search/comparing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comparing.js","sourceRoot":"","sources":["../../src/search/comparing.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,KAAkB;IAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhD,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,SAAS,CAAC,QAAwB,EAAE,KAAqB;IAChE,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAEpD,OAAO,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACxF,CAAC;AAED,SAAS,WAAW,CAAC,IAAa,EAAE,KAAc;IAChD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAE3B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;YAC3C,SAAS;QACX,CAAC;QAED,OAAO,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/search/cursor-position.d.ts

@@ -0,0 +1,7 @@
+/** Where a page ended: enough to resume in either order, whatever the store. */
+export interface CursorPosition {
+    readonly occurredAt: Date;
+    readonly chain: string;
+    readonly sequence: number;
+}
+//# sourceMappingURL=cursor-position.d.ts.map

package/dist/search/cursor-position.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-position.d.ts","sourceRoot":"","sources":["../../src/search/cursor-position.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B"}

package/dist/search/cursor-position.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cursor-position.js.map

package/dist/search/cursor-position.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cursor-position.js","sourceRoot":"","sources":["../../src/search/cursor-position.ts"],"names":[],"mappings":""}

package/dist/search/decode-cursor.d.ts

@@ -0,0 +1,3 @@
+import type { CursorPosition } from './cursor-position.js';
+export declare function decodeCursor(cursor: string): CursorPosition;
+//# sourceMappingURL=decode-cursor.d.ts.map

package/dist/search/decode-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-cursor.d.ts","sourceRoot":"","sources":["../../src/search/decode-cursor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAQ3D"}

package/dist/search/decode-cursor.js

@@ -0,0 +1,21 @@
+import { InvalidPageRequestError } from '@ddd-ts-kit/kernel';
+export function decodeCursor(cursor) {
+    const [occurredAt, chain, sequence] = parsed(Buffer.from(cursor, 'base64url').toString('utf8'));
+    if (typeof occurredAt !== 'string' || typeof chain !== 'string' || typeof sequence !== 'number') {
+        throw new InvalidPageRequestError('The cursor of a page is not one this list gave');
+    }
+    return { occurredAt: new Date(occurredAt), chain, sequence };
+}
+function parsed(text) {
+    try {
+        const value = JSON.parse(text);
+        return isList(value) ? value : [];
+    }
+    catch {
+        return [];
+    }
+}
+function isList(value) {
+    return Array.isArray(value);
+}
+//# sourceMappingURL=decode-cursor.js.map

package/dist/search/decode-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-cursor.js","sourceRoot":"","sources":["../../src/search/decode-cursor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAG7D,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAEhG,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChG,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAExC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/search/encode-cursor.d.ts

@@ -0,0 +1,3 @@
+import type { CursorPosition } from './cursor-position.js';
+export declare function encodeCursor(last: CursorPosition): string;
+//# sourceMappingURL=encode-cursor.d.ts.map

package/dist/search/encode-cursor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode-cursor.d.ts","sourceRoot":"","sources":["../../src/search/encode-cursor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,wBAAgB,YAAY,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAIzD"}

package/dist/search/encode-cursor.js

@@ -0,0 +1,5 @@
+export function encodeCursor(last) {
+    const position = [last.occurredAt.toISOString(), last.chain, last.sequence];
+    return Buffer.from(JSON.stringify(position), 'utf8').toString('base64url');
+}
+//# sourceMappingURL=encode-cursor.js.map

package/dist/search/encode-cursor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encode-cursor.js","sourceRoot":"","sources":["../../src/search/encode-cursor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5E,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC7E,CAAC"}

package/dist/search/matches.d.ts

@@ -0,0 +1,5 @@
+import type { AuditEntry, AuditFilter } from '@ddd-ts-kit/kernel';
+type EntryTest = (entry: AuditEntry) => boolean;
+export declare function matches(filter: AuditFilter): EntryTest;
+export {};
+//# sourceMappingURL=matches.d.ts.map

package/dist/search/matches.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matches.d.ts","sourceRoot":"","sources":["../../src/search/matches.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElE,KAAK,SAAS,GAAG,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC;AAEhD,wBAAgB,OAAO,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAItD"}

package/dist/search/matches.js

@@ -0,0 +1,34 @@
+export function matches(filter) {
+    const tests = [...identityTests(filter), ...resourceTests(filter), ...rangeTests(filter)];
+    return (entry) => tests.every((test) => test(entry));
+}
+function identityTests(filter) {
+    const expected = [
+        [filter.chain, (entry) => entry.chain],
+        [filter.tenantId, (entry) => entry.tenantId],
+        [filter.actorId, (entry) => entry.actor.id],
+        [filter.action, (entry) => entry.action],
+        [filter.category, (entry) => entry.category],
+        [filter.outcome, (entry) => entry.outcome],
+        [filter.correlationId, (entry) => entry.correlationId],
+    ];
+    return expected.flatMap(([value, read]) => value === undefined ? [] : [(entry) => read(entry) === value]);
+}
+function resourceTests({ resource }) {
+    if (resource === undefined) {
+        return [];
+    }
+    return [
+        (entry) => entry.resource?.type === resource.type && (resource.id === undefined || entry.resource.id === resource.id),
+    ];
+}
+function rangeTests(filter) {
+    const { from, to, fromSequence, toSequence } = filter;
+    return [
+        ...(from === undefined ? [] : [(entry) => entry.occurredAt.getTime() >= from.getTime()]),
+        ...(to === undefined ? [] : [(entry) => entry.occurredAt.getTime() < to.getTime()]),
+        ...(fromSequence === undefined ? [] : [(entry) => entry.sequence >= fromSequence]),
+        ...(toSequence === undefined ? [] : [(entry) => entry.sequence <= toSequence]),
+    ];
+}
+//# sourceMappingURL=matches.js.map

package/dist/search/matches.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matches.js","sourceRoot":"","sources":["../../src/search/matches.ts"],"names":[],"mappings":"AAIA,MAAM,UAAU,OAAO,CAAC,MAAmB;IACzC,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,aAAa,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1F,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,MAAM,QAAQ,GAA0F;QACtG,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC;QACtC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;QACxC,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;QAC1C,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;KACvD,CAAC;IAEF,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,CACxC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAe;IAC9C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO;QACL,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC;KAC7G,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,MAAmB;IACrC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAEtD,OAAO;QACL,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpG,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/F,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC;QAC9F,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAiB,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,CAAC;KAC3F,CAAC;AACJ,CAAC"}

package/dist/search/order-of.d.ts

@@ -0,0 +1,4 @@
+import type { AuditSortField, PageRequest } from '@ddd-ts-kit/kernel';
+import type { SearchOrder } from './search-order.js';
+export declare function orderOf(page: PageRequest<AuditSortField>): SearchOrder;
+//# sourceMappingURL=order-of.d.ts.map

package/dist/search/order-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-of.d.ts","sourceRoot":"","sources":["../../src/search/order-of.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,wBAAgB,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,cAAc,CAAC,GAAG,WAAW,CAItE"}

package/dist/search/order-of.js

@@ -0,0 +1,5 @@
+export function orderOf(page) {
+    const [first] = page.sort;
+    return { field: first?.field ?? 'occurredAt', direction: first?.direction ?? 'asc' };
+}
+//# sourceMappingURL=order-of.js.map

package/dist/search/order-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-of.js","sourceRoot":"","sources":["../../src/search/order-of.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,OAAO,CAAC,IAAiC;IACvD,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAE1B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,CAAC;AACvF,CAAC"}

package/dist/search/search-order.d.ts

@@ -0,0 +1,6 @@
+import type { AuditSortField, SortDirection } from '@ddd-ts-kit/kernel';
+export interface SearchOrder {
+    readonly field: AuditSortField;
+    readonly direction: SortDirection;
+}
+//# sourceMappingURL=search-order.d.ts.map

package/dist/search/search-order.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-order.d.ts","sourceRoot":"","sources":["../../src/search/search-order.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;CACnC"}

package/dist/search/search-order.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=search-order.js.map

package/dist/search/search-order.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-order.js","sourceRoot":"","sources":["../../src/search/search-order.ts"],"names":[],"mappings":""}

package/dist/sources/allowed-reads.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Which allowed decisions about reads are recorded, next to those of sensitive permissions:
+ * none (`sensitive`), every one (`all`), or a share of them between 0 and 1.
+ */
+export type AllowedReads = 'sensitive' | 'all' | {
+    readonly sample: number;
+    readonly random?: () => number;
+};
+//# sourceMappingURL=allowed-reads.d.ts.map

package/dist/sources/allowed-reads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-reads.d.ts","sourceRoot":"","sources":["../../src/sources/allowed-reads.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,KAAK,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;CAAE,CAAC"}

package/dist/sources/allowed-reads.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=allowed-reads.js.map

package/dist/sources/allowed-reads.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowed-reads.js","sourceRoot":"","sources":["../../src/sources/allowed-reads.ts"],"names":[],"mappings":""}

package/dist/sources/audit-decisions.d.ts

@@ -0,0 +1,19 @@
+import type { AuditTrail } from '@ddd-ts-kit/kernel';
+import type { AllowedReads } from './allowed-reads.js';
+import type { AuditSource } from './audit-source.js';
+import type { AuthorizationDecision } from './authorization-decision.js';
+export interface AuditDecisionsOptions extends AuditSource {
+    /** Says that a decision concerns a read. Default: its `kind` is `query`, as the bus that carried it says. */
+    readonly isRead?: (decision: AuthorizationDecision) => boolean;
+    /** Ids of the permissions whose allowed reads are always recorded. */
+    readonly sensitivePermissions?: readonly string[];
+    /** Default `sensitive`. */
+    readonly allowedReads?: AllowedReads;
+}
+/**
+ * The `onDecision` hook of the authorization middleware. A refusal is always recorded, and so
+ * is an allowed decision about anything that is not a read. An allowed read is recorded when
+ * its permission is sensitive: recording every list and every page view drowns the trail.
+ */
+export declare function auditDecisions(trail: AuditTrail, options: AuditDecisionsOptions): (decision: AuthorizationDecision) => Promise<void>;
+//# sourceMappingURL=audit-decisions.d.ts.map

package/dist/sources/audit-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-decisions.d.ts","sourceRoot":"","sources":["../../src/sources/audit-decisions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AAEzE,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,6GAA6G;IAC7G,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC;IAE/D,sEAAsE;IACtE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAElD,2BAA2B;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,qBAAqB,GAC7B,CAAC,QAAQ,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAmBpD"}

package/dist/sources/audit-decisions.js

@@ -0,0 +1,48 @@
+import { auditRecordOf } from './audit-record-of.js';
+/**
+ * The `onDecision` hook of the authorization middleware. A refusal is always recorded, and so
+ * is an allowed decision about anything that is not a read. An allowed read is recorded when
+ * its permission is sensitive: recording every list and every page view drowns the trail.
+ */
+export function auditDecisions(trail, options) {
+    return async (decision) => {
+        if (!isRecorded(decision, options)) {
+            return;
+        }
+        const record = auditRecordOf(options, {
+            category: 'authorization',
+            action: decision.permissionId,
+            outcome: decision.decision.allowed ? 'allowed' : 'denied',
+            ...(decision.decision.allowed ? {} : { reason: decision.decision.reason }),
+            ...(decision.resource === undefined ? {} : { resource: decision.resource }),
+            ...contextOf(decision.permissionId),
+        });
+        const itself = record.actor.id === decision.actorId;
+        await trail.record(itself ? record : { ...record, actor: { id: decision.actorId, type: 'unknown' } });
+    };
+}
+function isRecorded(decision, options) {
+    if (!decision.decision.allowed) {
+        return true;
+    }
+    if (!(options.isRead ?? isAboutAQuery)(decision)) {
+        return true;
+    }
+    if (options.sensitivePermissions?.includes(decision.permissionId) === true) {
+        return true;
+    }
+    const allowedReads = options.allowedReads ?? 'sensitive';
+    if (typeof allowedReads === 'string') {
+        return allowedReads === 'all';
+    }
+    return (allowedReads.random ?? Math.random)() < allowedReads.sample;
+}
+function isAboutAQuery(decision) {
+    return decision.kind === 'query';
+}
+/** A permission id is `<context>:<name>`. */
+function contextOf(permissionId) {
+    const separator = permissionId.indexOf(':');
+    return separator > 0 ? { context: permissionId.slice(0, separator) } : {};
+}
+//# sourceMappingURL=audit-decisions.js.map

package/dist/sources/audit-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-decisions.js","sourceRoot":"","sources":["../../src/sources/audit-decisions.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAerD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAiB,EACjB,OAA8B;IAE9B,OAAO,KAAK,EAAE,QAAQ,EAAE,EAAE;QACxB,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE;YACpC,QAAQ,EAAE,eAAe;YACzB,MAAM,EAAE,QAAQ,CAAC,YAAY;YAC7B,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;YACzD,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,GAAG,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC3E,GAAG,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC;SACpC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,OAAO,CAAC;QAEpD,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACxG,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAA+B,EAAE,OAA8B;IACjF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC;IAEzD,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACrC,OAAO,YAAY,KAAK,KAAK,CAAC;IAChC,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CAAC,QAA+B;IACpD,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;AACnC,CAAC;AAED,6CAA6C;AAC7C,SAAS,SAAS,CAAC,YAAoB;IACrC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5C,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5E,CAAC"}

package/dist/sources/audit-fact.d.ts

@@ -0,0 +1,4 @@
+import type { AuditEntry } from '@ddd-ts-kit/kernel';
+/** What happened. Who, in which session and under which correlation come from the scope. */
+export type AuditFact = Pick<AuditEntry, 'category' | 'action' | 'outcome'> & Partial<Pick<AuditEntry, 'reason' | 'resource' | 'context' | 'changes' | 'extensions'>>;
+//# sourceMappingURL=audit-fact.d.ts.map

package/dist/sources/audit-fact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-fact.d.ts","sourceRoot":"","sources":["../../src/sources/audit-fact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAErD,4FAA4F;AAC5F,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC,GACzE,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC"}

package/dist/sources/audit-fact.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=audit-fact.js.map

package/dist/sources/audit-fact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-fact.js","sourceRoot":"","sources":["../../src/sources/audit-fact.ts"],"names":[],"mappings":""}

package/dist/sources/audit-integration-events.d.ts

@@ -0,0 +1,23 @@
+import { type AuditTrail, type Clock, type ExecutionScope, type IdGenerator, type ProcessedEventStore, type UnitOfWork } from '@ddd-ts-kit/kernel';
+import type { AuditSubscription } from './audit-subscription.js';
+import type { AuditedEvents } from './audited-events.js';
+export interface AuditIntegrationEventsOptions {
+    readonly registry: AuditedEvents;
+    readonly clock: Clock;
+    readonly ids: IdGenerator;
+    /** At-least-once delivery is the rule: an event redelivered is recorded once. */
+    readonly processed: ProcessedEventStore;
+    /** When given, the mark and the entry commit together. */
+    readonly unitOfWork?: UnitOfWork;
+    /** When the consumer boundary opens an execution context, its actor and session are kept. */
+    readonly scope?: ExecutionScope;
+    /** The idempotency scope, and the name of the system actor. Default `audit`. */
+    readonly consumer?: string;
+}
+/**
+ * One subscription per event type of the registry, each recording that the event happened.
+ * Only the envelope is read (type, id, correlation), never the payload: the trail says that
+ * `billing.invoice.issued` occurred and under which correlation, not what it contained.
+ */
+export declare function auditIntegrationEvents(trail: AuditTrail, options: AuditIntegrationEventsOptions): AuditSubscription[];
+//# sourceMappingURL=audit-integration-events.d.ts.map

package/dist/sources/audit-integration-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-integration-events.d.ts","sourceRoot":"","sources":["../../src/sources/audit-integration-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,KAAK,EAEV,KAAK,cAAc,EACnB,KAAK,WAAW,EAEhB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGzD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IAEjC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IAEtB,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAE1B,iFAAiF;IACjF,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IAExC,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAEjC,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;IAEhC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,6BAA6B,GAAG,iBAAiB,EAAE,CAIrH"}

package/dist/sources/audit-integration-events.js

@@ -0,0 +1,59 @@
+import { executionContext, systemActor, } from '@ddd-ts-kit/kernel';
+import { recordIn } from './record-in.js';
+/**
+ * One subscription per event type of the registry, each recording that the event happened.
+ * Only the envelope is read (type, id, correlation), never the payload: the trail says that
+ * `billing.invoice.issued` occurred and under which correlation, not what it contained.
+ */
+export function auditIntegrationEvents(trail, options) {
+    const types = [...new Set(options.registry.all().map((definition) => definition.type))];
+    return types.map((type) => ({ type, handler: (event) => recordOnce(trail, options, event) }));
+}
+const WITHOUT_TRANSACTION = { run: (work) => work() };
+async function recordOnce(trail, options, event) {
+    const { processed, consumer = 'audit' } = options;
+    const mark = { taken: false };
+    try {
+        await (options.unitOfWork ?? WITHOUT_TRANSACTION).run(async () => {
+            mark.taken = await processed.markProcessed(consumer, event.id);
+            if (mark.taken) {
+                await trail.record(recordOfEvent(event, options));
+            }
+        });
+    }
+    catch (error) {
+        // Only a mark taken by this delivery, and only where no rollback already removed it.
+        if (mark.taken) {
+            await processed.release?.(consumer, event.id);
+        }
+        throw error;
+    }
+}
+function recordOfEvent(event, options) {
+    const fact = {
+        category: 'integration-event',
+        action: event.type,
+        outcome: 'succeeded',
+        ...contextOf(event.type),
+    };
+    return recordIn(contextOfDelivery(event, options), options, fact);
+}
+function contextOfDelivery(event, options) {
+    const current = options.scope?.current();
+    const correlationId = event.correlationId ?? current?.correlationId ?? event.id;
+    if (current !== undefined) {
+        return { ...current, correlationId, causationId: event.id };
+    }
+    return executionContext({
+        correlationId,
+        causationId: event.id,
+        actor: systemActor(options.consumer ?? 'audit'),
+        origin: 'event',
+    });
+}
+/** An event type is `<context>.<aggregate>.<fact>`. */
+function contextOf(type) {
+    const separator = type.indexOf('.');
+    return separator > 0 ? { context: type.slice(0, separator) } : {};
+}
+//# sourceMappingURL=audit-integration-events.js.map

package/dist/sources/audit-integration-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-integration-events.js","sourceRoot":"","sources":["../../src/sources/audit-integration-events.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,WAAW,GAUZ,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAsB1C;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB,EAAE,OAAsC;IAC9F,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAExF,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAChG,CAAC;AAED,MAAM,mBAAmB,GAAe,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;AAElE,KAAK,UAAU,UAAU,CACvB,KAAiB,EACjB,OAAsC,EACtC,KAAuB;IAEvB,MAAM,EAAE,SAAS,EAAE,QAAQ,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAC/D,IAAI,CAAC,KAAK,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;YAE/D,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qFAAqF;QACrF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAChD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAuB,EAAE,OAAsC;IACpF,MAAM,IAAI,GAAG;QACX,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,KAAK,CAAC,IAAI;QAClB,OAAO,EAAE,WAAW;QACpB,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;KAChB,CAAC;IAEX,OAAO,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAuB,EAAE,OAAsC;IACxF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;IACzC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,OAAO,EAAE,aAAa,IAAI,KAAK,CAAC,EAAE,CAAC;IAEhF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IAC9D,CAAC;IAED,OAAO,gBAAgB,CAAC;QACtB,aAAa;QACb,WAAW,EAAE,KAAK,CAAC,EAAE;QACrB,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC;QAC/C,MAAM,EAAE,OAAO;KAChB,CAAC,CAAC;AACL,CAAC;AAED,uDAAuD;AACvD,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC"}

package/dist/sources/audit-middleware.d.ts

@@ -0,0 +1,33 @@
+import { type AuditRecord, type AuditTrail, type BusMiddleware, type Message, type MessageType, type UnitOfWork } from '@ddd-ts-kit/kernel';
+import type { AuditMasker } from '../redaction/audit-masker.js';
+import type { AuditedMessage } from '../redaction/audited-message.js';
+import type { AuditSource } from './audit-source.js';
+/** The reason of a failure that is not a `DomainError`: its class and message stay out of the trail. */
+export declare const UNEXPECTED_ERROR = "UNEXPECTED_ERROR";
+export interface AuditMiddlewareOptions extends AuditSource {
+    /**
+     * The unit of work of the commands. Given, the entry of a command that succeeded is written
+     * in its transaction and exists only if it commits, and the entry of one that failed is
+     * written after the rollback. Install this middleware before `unitOfWorkMiddleware`, which
+     * then joins the transaction opened here.
+     */
+    readonly unitOfWork?: UnitOfWork;
+    /** What may go into `changes`, per message. A message without a declaration carries none. */
+    readonly fields?: readonly AuditedMessage[];
+    /** The queries to record. Default `none`: commands only. */
+    readonly queries?: 'none' | 'all' | readonly MessageType<Message>[];
+    /** Required as soon as one declaration masks a field. */
+    readonly masker?: AuditMasker;
+    /**
+     * Told when the entry of a failure could not be written. The failure of the use case is
+     * what the caller receives, never the failure of its audit.
+     */
+    readonly onLostRecord?: (error: unknown, record: AuditRecord | undefined) => void;
+}
+/**
+ * Records every command, and the queries asked for, with its outcome and the `code` of the
+ * domain error as reason. No use case knows: the middleware reads the message, the scope and
+ * the declarations of `auditedFields`.
+ */
+export declare function auditMiddleware(trail: AuditTrail, options: AuditMiddlewareOptions): BusMiddleware;
+//# sourceMappingURL=audit-middleware.d.ts.map

package/dist/sources/audit-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-middleware.d.ts","sourceRoot":"","sources":["../../src/sources/audit-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,OAAO,EAEZ,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAItE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAErD,wGAAwG;AACxG,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AAEnD,MAAM,WAAW,sBAAuB,SAAQ,WAAW;IACzD;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IAEjC,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAE5C,4DAA4D;IAC5D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;IAEpE,yDAAyD;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAE9B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,SAAS,KAAK,IAAI,CAAC;CACnF;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,sBAAsB,GAAG,aAAa,CAoBjG"}

package/dist/sources/audit-middleware.js

@@ -0,0 +1,113 @@
+import { DomainError, } from '@ddd-ts-kit/kernel';
+import { changesOf } from '../redaction/changes-of.js';
+import { MissingMaskerError } from '../redaction/missing-masker-error.js';
+import { auditRecordOf } from './audit-record-of.js';
+/** The reason of a failure that is not a `DomainError`: its class and message stay out of the trail. */
+export const UNEXPECTED_ERROR = 'UNEXPECTED_ERROR';
+/**
+ * Records every command, and the queries asked for, with its outcome and the `code` of the
+ * domain error as reason. No use case knows: the middleware reads the message, the scope and
+ * the declarations of `auditedFields`.
+ */
+export function auditMiddleware(trail, options) {
+    const declarations = new Map((options.fields ?? []).map((declaration) => [declaration.type, declaration]));
+    assertMaskerGiven(options);
+    return (message, next, info) => {
+        if (!isRecorded(message, info, options)) {
+            return next();
+        }
+        const audit = new MessageAudit(trail, options, {
+            message,
+            info,
+            declaration: declarations.get(message.constructor),
+        });
+        return audit.around(next);
+    };
+}
+function assertMaskerGiven(options) {
+    const masking = options.masker === undefined ? options.fields?.find((declaration) => declaration.masks) : undefined;
+    if (masking !== undefined) {
+        throw new MissingMaskerError(masking.type.name);
+    }
+}
+function isRecorded(message, info, { queries = 'none' }) {
+    if (info.kind === 'command') {
+        return true;
+    }
+    return typeof queries === 'string' ? queries === 'all' : queries.some((type) => message instanceof type);
+}
+class MessageAudit {
+    trail;
+    options;
+    sending;
+    constructor(trail, options, sending) {
+        this.trail = trail;
+        this.options = options;
+        this.sending = sending;
+    }
+    around(next) {
+        const { unitOfWork } = this.options;
+        if (unitOfWork === undefined || this.sending.info.kind === 'query') {
+            return this.afterwards(next);
+        }
+        return this.orRecordFailure(() => unitOfWork.run(() => this.thenRecordSuccess(next)));
+    }
+    async afterwards(next) {
+        const result = await this.orRecordFailure(next);
+        await this.record('succeeded');
+        return result;
+    }
+    async orRecordFailure(work) {
+        try {
+            return await work();
+        }
+        catch (error) {
+            await this.recordFailure(error);
+            throw error;
+        }
+    }
+    async recordFailure(failure) {
+        const reason = failure instanceof DomainError ? failure.code : UNEXPECTED_ERROR;
+        let record;
+        try {
+            record = await this.recordOf('failed', reason);
+            await this.trail.record(record);
+        }
+        catch (error) {
+            this.options.onLostRecord?.(error, record);
+        }
+    }
+    async thenRecordSuccess(next) {
+        const result = await next();
+        await this.record('succeeded');
+        return result;
+    }
+    async record(outcome) {
+        await this.trail.record(await this.recordOf(outcome));
+    }
+    async recordOf(outcome, reason) {
+        const { message, info, declaration } = this.sending;
+        const projection = declaration?.project(message) ?? {};
+        const { resource, context } = projection;
+        const who = this.options.scope.require();
+        const subject = {
+            actorId: who.actor.id,
+            ...(who.tenantId === undefined ? {} : { tenantId: who.tenantId }),
+            ...(resource === undefined ? {} : { resource }),
+        };
+        const changes = await changesOf(projection, {
+            subject,
+            ...(this.options.masker === undefined ? {} : { masker: this.options.masker }),
+        });
+        return auditRecordOf(this.options, {
+            category: info.kind,
+            action: info.name,
+            outcome,
+            ...(reason === undefined ? {} : { reason }),
+            ...(resource === undefined ? {} : { resource }),
+            ...(context === undefined ? {} : { context }),
+            ...(changes === undefined ? {} : { changes }),
+        });
+    }
+}
+//# sourceMappingURL=audit-middleware.js.map

package/dist/sources/audit-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-middleware.js","sourceRoot":"","sources":["../../src/sources/audit-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,GASZ,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAGrD,wGAAwG;AACxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AA2BnD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB,EAAE,OAA+B;IAChF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAC7E,CAAC;IAEF,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAE3B,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC7B,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,KAAK,EAAE,OAAO,EAAE;YAC7C,OAAO;YACP,IAAI;YACJ,WAAW,EAAE,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;SACnD,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAA+B;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpH,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB,EAAE,IAAiB,EAAE,EAAE,OAAO,GAAG,MAAM,EAA0B;IACnG,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,YAAY,IAAI,CAAC,CAAC;AAC3G,CAAC;AAQD,MAAM,YAAY;IAEG,KAAK;IACL,OAAO;IACP,OAAO;IAH1B,YACmB,KAAiB,EACjB,OAA+B,EAC/B,OAAgB;qBAFhB,KAAK;uBACL,OAAO;uBACP,OAAO;IACvB,CAAC;IAEJ,MAAM,CAAC,IAA4B;QACjC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAEpC,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,IAA4B;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,IAA4B;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAEhC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,OAAgB;QAC1C,MAAM,MAAM,GAAG,OAAO,YAAY,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAChF,IAAI,MAA+B,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,IAA4B;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;QAE5B,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAE/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAqB;QACxC,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,OAAqB,EAAE,MAAe;QAC3D,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACpD,MAAM,UAAU,GAAG,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;YACrB,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;SAChD,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE;YAC1C,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;SAC9E,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE;YACjC,QAAQ,EAAE,IAAI,CAAC,IAAI;YACnB,MAAM,EAAE,IAAI,CAAC,IAAI;YACjB,OAAO;YACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;YAC7C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/sources/audit-record-of.d.ts

@@ -0,0 +1,10 @@
+import type { AuditRecord } from '@ddd-ts-kit/kernel';
+import type { AuditFact } from './audit-fact.js';
+import type { AuditSource } from './audit-source.js';
+/**
+ * The record of a fact that happened in the work in progress. Sources use it, and so does
+ * infrastructure writing a `data-access` entry by hand. Throws `NoExecutionContextError`
+ * outside of `ExecutionScope.run`.
+ */
+export declare function auditRecordOf(source: AuditSource, fact: AuditFact): AuditRecord;
+//# sourceMappingURL=audit-record-of.d.ts.map

package/dist/sources/audit-record-of.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-record-of.d.ts","sourceRoot":"","sources":["../../src/sources/audit-record-of.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,GAAG,WAAW,CAE/E"}

package/dist/sources/audit-record-of.js

@@ -0,0 +1,10 @@
+import { recordIn } from './record-in.js';
+/**
+ * The record of a fact that happened in the work in progress. Sources use it, and so does
+ * infrastructure writing a `data-access` entry by hand. Throws `NoExecutionContextError`
+ * outside of `ExecutionScope.run`.
+ */
+export function auditRecordOf(source, fact) {
+    return recordIn(source.scope.require(), source, fact);
+}
+//# sourceMappingURL=audit-record-of.js.map

package/dist/sources/audit-record-of.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-record-of.js","sourceRoot":"","sources":["../../src/sources/audit-record-of.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAmB,EAAE,IAAe;IAChE,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC"}

package/dist/sources/audit-source.d.ts

@@ -0,0 +1,8 @@
+import type { Clock, ExecutionScope, IdGenerator } from '@ddd-ts-kit/kernel';
+/** What every source reads instead of being handed parameters by the use cases. */
+export interface AuditSource {
+    readonly scope: ExecutionScope;
+    readonly clock: Clock;
+    readonly ids: IdGenerator;
+}
+//# sourceMappingURL=audit-source.d.ts.map