@defai.digital/ax-cli 3.6.0 → 3.6.2

package/dist/ui/utils/tool-grouper.js

@@ -0,0 +1,224 @@
+/**
+ * Tool Grouping Utilities
+ * Groups consecutive tool operations for cleaner UX in quiet mode
+ */
+import { UI_CONFIG } from '../../constants.js';
+/**
+ * Check if an entry is a ToolGroup
+ */
+export function isToolGroup(entry) {
+    return 'operations' in entry && Array.isArray(entry.operations);
+}
+/**
+ * Extract file path from tool call arguments
+ */
+function getResourceFromToolCall(entry) {
+    if (entry.type !== 'tool_call' && entry.type !== 'tool_result') {
+        return '';
+    }
+    const toolName = entry.toolCall?.function?.name;
+    if (!toolName)
+        return '';
+    try {
+        const argsStr = entry.toolCall?.function?.arguments;
+        if (!argsStr)
+            return '';
+        const args = JSON.parse(argsStr);
+        // File operations
+        if (toolName === 'view_file' || toolName === 'str_replace_editor' || toolName === 'create_file') {
+            return args.path || args.file_path || '';
+        }
+        // Search operations
+        if (toolName === 'search') {
+            return `search:${args.query || ''}`;
+        }
+        // Bash operations
+        if (toolName === 'bash') {
+            const cmd = args.command || '';
+            // Group by command type (git, npm, etc)
+            const cmdType = cmd.split(' ')[0];
+            return `bash:${cmdType}`;
+        }
+        // Todo operations
+        if (toolName === 'create_todo_list' || toolName === 'update_todo_list') {
+            return 'todo';
+        }
+        return '';
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Determine group type based on tool name
+ */
+function getGroupType(toolName) {
+    if (toolName === 'bash')
+        return 'bash';
+    if (toolName === 'search')
+        return 'search';
+    if (toolName === 'create_todo_list' || toolName === 'update_todo_list')
+        return 'todo';
+    if (toolName === 'view_file' || toolName === 'str_replace_editor' || toolName === 'create_file')
+        return 'file';
+    return 'mixed';
+}
+/**
+ * Check if two entries should be grouped together
+ */
+function shouldGroup(current, previous, groupSize, maxGroupSize, timeWindow) {
+    // Don't group if we've hit the max size
+    if (groupSize >= maxGroupSize) {
+        return false;
+    }
+    // Only group tool operations
+    if ((current.type !== 'tool_call' && current.type !== 'tool_result') ||
+        (previous.type !== 'tool_call' && previous.type !== 'tool_result')) {
+        return false;
+    }
+    // Check time window
+    const timeDiff = current.timestamp.getTime() - previous.timestamp.getTime();
+    if (timeDiff > timeWindow) {
+        return false;
+    }
+    // Must operate on the same resource
+    const currentResource = getResourceFromToolCall(current);
+    const previousResource = getResourceFromToolCall(previous);
+    if (!currentResource || !previousResource) {
+        return false;
+    }
+    return currentResource === previousResource;
+}
+/**
+ * Group consecutive tool operations
+ *
+ * @param entries - Chat history entries
+ * @param options - Grouping configuration
+ * @returns Array of grouped or individual entries
+ */
+export function groupConsecutiveTools(entries, options = {}) {
+    const { enabled = UI_CONFIG.GROUP_TOOL_CALLS, maxGroupSize = UI_CONFIG.MAX_GROUP_SIZE, timeWindow = UI_CONFIG.GROUP_TIME_WINDOW, } = options;
+    // If grouping disabled, return entries as-is
+    if (!enabled) {
+        return entries;
+    }
+    const result = [];
+    let currentGroup = null;
+    for (const entry of entries) {
+        // Non-tool entries always break the group
+        if (entry.type !== 'tool_call' && entry.type !== 'tool_result') {
+            if (currentGroup) {
+                result.push(currentGroup);
+                currentGroup = null;
+            }
+            result.push(entry);
+            continue;
+        }
+        const resource = getResourceFromToolCall(entry);
+        const toolName = entry.toolCall?.function?.name || 'unknown';
+        const groupType = getGroupType(toolName);
+        // Start new group or continue existing
+        if (!currentGroup) {
+            // Start new group
+            currentGroup = {
+                resource,
+                operations: [entry],
+                startTime: entry.timestamp instanceof Date ? entry.timestamp : new Date(entry.timestamp),
+                endTime: entry.timestamp instanceof Date ? entry.timestamp : new Date(entry.timestamp),
+                hasError: entry.toolResult ? !entry.toolResult.success : false,
+                groupType,
+            };
+        }
+        else if (shouldGroup(entry, currentGroup.operations[currentGroup.operations.length - 1], currentGroup.operations.length, maxGroupSize, timeWindow)) {
+            // Add to existing group
+            currentGroup.operations.push(entry);
+            currentGroup.endTime = entry.timestamp instanceof Date ? entry.timestamp : new Date(entry.timestamp);
+            if (entry.toolResult && !entry.toolResult.success) {
+                currentGroup.hasError = true;
+            }
+        }
+        else {
+            // Can't group, flush current and start new
+            result.push(currentGroup);
+            currentGroup = {
+                resource,
+                operations: [entry],
+                startTime: entry.timestamp instanceof Date ? entry.timestamp : new Date(entry.timestamp),
+                endTime: entry.timestamp instanceof Date ? entry.timestamp : new Date(entry.timestamp),
+                hasError: entry.toolResult ? !entry.toolResult.success : false,
+                groupType,
+            };
+        }
+    }
+    // Flush final group
+    if (currentGroup) {
+        result.push(currentGroup);
+    }
+    return result;
+}
+/**
+ * Get operation counts by type from a group
+ */
+export function getOperationCounts(group) {
+    const counts = {
+        reads: 0,
+        updates: 0,
+        creates: 0,
+        searches: 0,
+        bash: 0,
+        todos: 0,
+        other: 0,
+    };
+    for (const op of group.operations) {
+        const toolName = op.toolCall?.function?.name;
+        if (!toolName)
+            continue;
+        switch (toolName) {
+            case 'view_file':
+                counts.reads++;
+                break;
+            case 'str_replace_editor':
+                counts.updates++;
+                break;
+            case 'create_file':
+                counts.creates++;
+                break;
+            case 'search':
+                counts.searches++;
+                break;
+            case 'bash':
+                counts.bash++;
+                break;
+            case 'create_todo_list':
+            case 'update_todo_list':
+                counts.todos++;
+                break;
+            default:
+                counts.other++;
+        }
+    }
+    return counts;
+}
+/**
+ * Get execution duration for a group in milliseconds
+ */
+export function getGroupDuration(group) {
+    return group.endTime.getTime() - group.startTime.getTime();
+}
+/**
+ * Format duration in human-readable form
+ */
+export function formatDuration(ms) {
+    if (ms < 1000) {
+        return `${ms}ms`;
+    }
+    else if (ms < 60000) {
+        return `${(ms / 1000).toFixed(1)}s`;
+    }
+    else {
+        const minutes = Math.floor(ms / 60000);
+        const seconds = Math.floor((ms % 60000) / 1000);
+        return `${minutes}m ${seconds}s`;
+    }
+}
+//# sourceMappingURL=tool-grouper.js.map

package/dist/ui/utils/tool-grouper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-grouper.js","sourceRoot":"","sources":["../../../src/ui/utils/tool-grouper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAyB/C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB;IAC7C,OAAO,YAAY,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO,CAAE,KAAa,CAAC,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,SAAS,uBAAuB,CAAC,KAAgB;IAC/C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC;QACpD,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAExB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAEjC,kBAAkB;QAClB,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAChG,OAAO,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3C,CAAC;QAED,oBAAoB;QACpB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,UAAU,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;QACtC,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;YAC/B,wCAAwC;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,OAAO,QAAQ,OAAO,EAAE,CAAC;QAC3B,CAAC;QAED,kBAAkB;QAClB,IAAI,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YACvE,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACvC,IAAI,QAAQ,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,QAAQ,KAAK,kBAAkB,IAAI,QAAQ,KAAK,kBAAkB;QAAE,OAAO,MAAM,CAAC;IACtF,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC;IAC/G,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,SAAS,WAAW,CAClB,OAAkB,EAClB,QAAmB,EACnB,SAAiB,EACjB,YAAoB,EACpB,UAAkB;IAElB,wCAAwC;IACxC,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,6BAA6B;IAC7B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC;QAChE,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;IAC5E,IAAI,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oCAAoC;IACpC,MAAM,eAAe,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAE3D,IAAI,CAAC,eAAe,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,eAAe,KAAK,gBAAgB,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAoB,EACpB,UAII,EAAE;IAEN,MAAM,EACJ,OAAO,GAAG,SAAS,CAAC,gBAAgB,EACpC,YAAY,GAAG,SAAS,CAAC,cAAc,EACvC,UAAU,GAAG,SAAS,CAAC,iBAAiB,GACzC,GAAG,OAAO,CAAC;IAEZ,6CAA6C;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAmB,EAAE,CAAC;IAClC,IAAI,YAAY,GAAqB,IAAI,CAAC;IAE1C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,0CAA0C;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/D,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC1B,YAAY,GAAG,IAAI,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC;QAC7D,MAAM,SAAS,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QAEzC,uCAAuC;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,kBAAkB;YAClB,YAAY,GAAG;gBACb,QAAQ;gBACR,UAAU,EAAE,CAAC,KAAK,CAAC;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBACxF,OAAO,EAAE,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBACtF,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC9D,SAAS;aACV,CAAC;QACJ,CAAC;aAAM,IAAI,WAAW,CAAC,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACrJ,wBAAwB;YACxB,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpC,YAAY,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrG,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBAClD,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAC;YAC/B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,2CAA2C;YAC3C,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1B,YAAY,GAAG;gBACb,QAAQ;gBACR,UAAU,EAAE,CAAC,KAAK,CAAC;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBACxF,OAAO,EAAE,KAAK,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBACtF,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC9D,SAAS;aACV,CAAC;QACJ,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAgB;IASjD,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,KAAK,EAAE,CAAC;QACR,KAAK,EAAE,CAAC;KACT,CAAC;IAEF,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC;QAC7C,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,WAAW;gBACd,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM;YACR,KAAK,oBAAoB;gBACvB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM;YACR,KAAK,aAAa;gBAChB,MAAM,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAClB,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM;YACR,KAAK,kBAAkB,CAAC;YACxB,KAAK,kBAAkB;gBACrB,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM;YACR;gBACE,MAAM,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAgB;IAC/C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;AAC7D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,IAAI,EAAE,GAAG,IAAI,EAAE,CAAC;QACd,OAAO,GAAG,EAAE,IAAI,CAAC;IACnB,CAAC;SAAM,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAChD,OAAO,GAAG,OAAO,KAAK,OAAO,GAAG,CAAC;IACnC,CAAC;AACH,CAAC"}

package/dist/utils/audit-logger.d.ts

@@ -1,12 +1,21 @@
 /**
- * Security Audit Logging System (REQ-SEC-008)
+ * Basic Audit Logger (Free Tier)
  *
- * Provides tamper-proof logging for security-critical events
- * Implements:
- * - Cryptographic log integrity verification
- * - Automatic log retention (90 days)
- * - SIEM-ready structured logging
- * - Critical event alerting
+ * Provides simple JSON logging for security events.
+ *
+ * Free Tier Features:
+ * ✅ Simple JSON logging to file
+ * ✅ 30-day retention (auto-cleanup)
+ * ✅ Basic event tracking
+ * ✅ Lightweight (no encryption, no hash chains)
+ *
+ * Enterprise features (requires @ax-cli/enterprise):
+ * - Compliance reports (SOC2, HIPAA, PCI-DSS)
+ * - Tamper-proof encrypted logs with hash chains
+ * - Real-time dashboards
+ * - Custom retention (1yr, 7yr, forever)
+ * - Incident response workflows
+ * - Anomaly detection
  *
  * Security: CVSS 6.1 (Medium Priority)
  */
@@ -37,7 +46,7 @@ export declare enum AuditCategory {
     SYSTEM_EVENT = "SYSTEM_EVENT"
 }
 /**
- * Audit event structure
+ * Audit event structure (basic version)
  */
 export interface AuditEvent {
     /**
@@ -84,17 +93,9 @@ export interface AuditEvent {
      * Source IP address (if applicable)
      */
     sourceIp?: string;
-    /**
-     * Previous log entry hash (for tamper detection)
-     */
-    previousHash?: string;
-    /**
-     * Current entry hash (SHA-256 of all fields)
-     */
-    hash?: string;
 }
 /**
- * Audit log configuration
+ * Audit log configuration (basic version)
  */
 export interface AuditLogConfig {
     /**
@@ -102,26 +103,18 @@ export interface AuditLogConfig {
      */
     logDirectory?: string;
     /**
-     * Log retention period in days (default: 90)
+     * Log retention period in days (max 30 days in free tier)
      */
     retentionDays?: number;
-    /**
-     * Whether to emit critical event alerts
-     */
-    enableAlerts?: boolean;
-    /**
-     * Whether to enable tamper-proof chaining
-     */
-    enableChaining?: boolean;
     /**
      * Maximum log file size in bytes (default: 10MB)
      */
     maxFileSize?: number;
 }
 /**
- * Audit Logger
+ * Basic Audit Logger (Free Tier)
  *
- * Provides tamper-proof audit logging with cryptographic verification
+ * Simple JSON logging for security events.
  *
  * @example
  * ```typescript
@@ -136,23 +129,13 @@ export interface AuditLogConfig {
  *   outcome: 'failure',
  *   details: { limit: 20, attempts: 25 },
  * });
- *
- * // Log critical event (triggers alert)
- * logger.logCritical({
- *   category: AuditCategory.COMMAND_EXECUTION,
- *   action: 'shell_injection_attempt',
- *   outcome: 'failure',
- *   details: { command: 'ls; rm -rf /' },
- * });
  * ```
  */
 export declare class AuditLogger {
     private static instance;
     private config;
     private currentLogFile;
-    private lastHash;
     private eventCount;
-    private alertCallbacks;
     private constructor();
     /**
      * Get singleton instance
@@ -163,38 +146,25 @@ export declare class AuditLogger {
      */
     static resetInstance(): void;
     /**
-     * Register alert callback for critical events
-     */
-    onCriticalEvent(callback: (event: AuditEvent) => void): void;
-    /**
-     * Log an audit event
+     * Log an audit event (basic version - no hash chains)
      */
-    log(event: Omit<AuditEvent, 'id' | 'timestamp' | 'hash' | 'previousHash'>): void;
+    log(event: Omit<AuditEvent, 'id' | 'timestamp'>): void;
     /**
      * Log critical security event (convenience method)
      */
-    logCritical(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity' | 'hash' | 'previousHash'>): void;
+    logCritical(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity'>): void;
     /**
      * Log warning event (convenience method)
      */
-    logWarning(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity' | 'hash' | 'previousHash'>): void;
+    logWarning(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity'>): void;
     /**
      * Log error event (convenience method)
      */
-    logError(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity' | 'hash' | 'previousHash'>): void;
+    logError(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity'>): void;
     /**
      * Log info event (convenience method)
      */
-    logInfo(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity' | 'hash' | 'previousHash'>): void;
-    /**
-     * Verify log integrity
-     *
-     * Checks the hash chain to detect tampering
-     */
-    verifyIntegrity(logFile?: string): {
-        valid: boolean;
-        errors: string[];
-    };
+    logInfo(event: Omit<AuditEvent, 'id' | 'timestamp' | 'severity'>): void;
     /**
      * Get audit statistics
      */
@@ -208,10 +178,6 @@ export declare class AuditLogger {
      * Generate unique event ID
      */
     private generateEventId;
-    /**
-     * Calculate SHA-256 hash of event (excluding hash field itself)
-     */
-    private calculateHash;
     /**
      * Write event to log file
      */
@@ -220,10 +186,6 @@ export declare class AuditLogger {
      * Get current log file path
      */
     private getCurrentLogFile;
-    /**
-     * Load last hash from current log file
-     */
-    private loadLastHash;
     /**
      * Check if log file needs rotation
      */
@@ -233,13 +195,9 @@ export declare class AuditLogger {
      */
     private rotateLogFile;
     /**
-     * Clean up old log files (retention policy)
+     * Clean up old log files (30-day retention in free tier)
      */
     private cleanupOldLogs;
-    /**
-     * Emit alert for critical events
-     */
-    private emitAlert;
 }
 /**
  * Get audit logger singleton

package/dist/utils/audit-logger.js

@@ -1,17 +1,25 @@
 /**
- * Security Audit Logging System (REQ-SEC-008)
+ * Basic Audit Logger (Free Tier)
  *
- * Provides tamper-proof logging for security-critical events
- * Implements:
- * - Cryptographic log integrity verification
- * - Automatic log retention (90 days)
- * - SIEM-ready structured logging
- * - Critical event alerting
+ * Provides simple JSON logging for security events.
+ *
+ * Free Tier Features:
+ * ✅ Simple JSON logging to file
+ * ✅ 30-day retention (auto-cleanup)
+ * ✅ Basic event tracking
+ * ✅ Lightweight (no encryption, no hash chains)
+ *
+ * Enterprise features (requires @ax-cli/enterprise):
+ * - Compliance reports (SOC2, HIPAA, PCI-DSS)
+ * - Tamper-proof encrypted logs with hash chains
+ * - Real-time dashboards
+ * - Custom retention (1yr, 7yr, forever)
+ * - Incident response workflows
+ * - Anomaly detection
  *
  * Security: CVSS 6.1 (Medium Priority)
  */
-import { createHash } from 'crypto';
-import { writeFileSync, readFileSync, existsSync, mkdirSync, readdirSync, unlinkSync, statSync } from 'fs';
+import { writeFileSync, existsSync, mkdirSync, readdirSync, unlinkSync, statSync } from 'fs';
 import { join } from 'path';
 import { homedir } from 'os';
 /**
@@ -43,19 +51,17 @@ export var AuditCategory;
     AuditCategory["SYSTEM_EVENT"] = "SYSTEM_EVENT";
 })(AuditCategory || (AuditCategory = {}));
 /**
- * Default configuration
+ * Default configuration (free tier)
  */
 const DEFAULT_CONFIG = {
     logDirectory: join(homedir(), '.ax-cli', 'audit-logs'),
-    retentionDays: 90,
-    enableAlerts: true,
-    enableChaining: true,
+    retentionDays: 30, // Free tier: max 30 days
     maxFileSize: 10 * 1024 * 1024, // 10MB
 };
 /**
- * Audit Logger
+ * Basic Audit Logger (Free Tier)
  *
- * Provides tamper-proof audit logging with cryptographic verification
+ * Simple JSON logging for security events.
  *
  * @example
  * ```typescript
@@ -70,35 +76,27 @@ const DEFAULT_CONFIG = {
  *   outcome: 'failure',
  *   details: { limit: 20, attempts: 25 },
  * });
- *
- * // Log critical event (triggers alert)
- * logger.logCritical({
- *   category: AuditCategory.COMMAND_EXECUTION,
- *   action: 'shell_injection_attempt',
- *   outcome: 'failure',
- *   details: { command: 'ls; rm -rf /' },
- * });
  * ```
  */
 export class AuditLogger {
     static instance = null;
     config;
     currentLogFile;
-    lastHash = null;
     eventCount = 0;
-    alertCallbacks = [];
     constructor(config = {}) {
-        this.config = { ...DEFAULT_CONFIG, ...config };
+        // Enforce free tier limits
+        const retentionDays = Math.min(config.retentionDays || 30, 30);
+        this.config = {
+            ...DEFAULT_CONFIG,
+            ...config,
+            retentionDays
+        };
         // Ensure log directory exists
         if (!existsSync(this.config.logDirectory)) {
             mkdirSync(this.config.logDirectory, { recursive: true });
         }
         // Initialize log file
         this.currentLogFile = this.getCurrentLogFile();
-        // Load last hash for chaining
-        if (this.config.enableChaining) {
-            this.lastHash = this.loadLastHash();
-        }
         // Start retention cleanup (run once on init)
         this.cleanupOldLogs();
     }
@@ -118,13 +116,7 @@ export class AuditLogger {
         AuditLogger.instance = null;
     }
     /**
-     * Register alert callback for critical events
-     */
-    onCriticalEvent(callback) {
-        this.alertCallbacks.push(callback);
-    }
-    /**
-     * Log an audit event
+     * Log an audit event (basic version - no hash chains)
      */
     log(event) {
         const fullEvent = {
@@ -132,18 +124,8 @@ export class AuditLogger {
             timestamp: new Date().toISOString(),
             ...event,
         };
-        // Add hash chain for tamper detection
-        if (this.config.enableChaining) {
-            fullEvent.previousHash = this.lastHash || undefined;
-            fullEvent.hash = this.calculateHash(fullEvent);
-            this.lastHash = fullEvent.hash;
-        }
         // Write to log file
         this.writeEvent(fullEvent);
-        // Emit alert for critical events
-        if (this.config.enableAlerts && fullEvent.severity === AuditSeverity.CRITICAL) {
-            this.emitAlert(fullEvent);
-        }
         // Check if we need to rotate log file
         this.checkLogRotation();
         this.eventCount++;
@@ -184,45 +166,6 @@ export class AuditLogger {
             severity: AuditSeverity.INFO,
         });
     }
-    /**
-     * Verify log integrity
-     *
-     * Checks the hash chain to detect tampering
-     */
-    verifyIntegrity(logFile) {
-        const file = logFile || this.currentLogFile;
-        if (!existsSync(file)) {
-            return { valid: false, errors: ['Log file does not exist'] };
-        }
-        const errors = [];
-        const lines = readFileSync(file, 'utf8').split('\n').filter(l => l.trim());
-        let previousHash = null;
-        for (let i = 0; i < lines.length; i++) {
-            try {
-                const event = JSON.parse(lines[i]);
-                // Verify hash chain (normalize undefined to null for comparison)
-                const eventPrevHash = event.previousHash || null;
-                if (eventPrevHash !== previousHash) {
-                    errors.push(`Event ${event.id} (line ${i + 1}): Hash chain broken. ` +
-                        `Expected previous hash: ${previousHash}, got: ${eventPrevHash}`);
-                }
-                // Verify event hash
-                const calculatedHash = this.calculateHash(event);
-                if (event.hash !== calculatedHash) {
-                    errors.push(`Event ${event.id} (line ${i + 1}): Hash mismatch. ` +
-                        `Event may have been tampered with.`);
-                }
-                previousHash = event.hash || null;
-            }
-            catch (error) {
-                errors.push(`Line ${i + 1}: Invalid JSON - ${error instanceof Error ? error.message : 'Unknown error'}`);
-            }
-        }
-        return {
-            valid: errors.length === 0,
-            errors,
-        };
-    }
     /**
      * Get audit statistics
      */
@@ -242,22 +185,6 @@ export class AuditLogger {
         const random = Math.random().toString(36).substring(2, 11);
         return `evt_${timestamp}_${random}`;
     }
-    /**
-     * Calculate SHA-256 hash of event (excluding hash field itself)
-     */
-    calculateHash(event) {
-        // Create copy without hash field
-        const { hash, ...eventWithoutHash } = event;
-        // Sort keys for consistent hashing, filter out undefined values
-        const sortedKeys = Object.keys(eventWithoutHash)
-            .filter(key => eventWithoutHash[key] !== undefined)
-            .sort();
-        const data = sortedKeys.map(key => {
-            const value = eventWithoutHash[key];
-            return `${key}:${JSON.stringify(value)}`;
-        }).join('|');
-        return createHash('sha256').update(data).digest('hex');
-    }
     /**
      * Write event to log file
      */
@@ -280,24 +207,6 @@ export class AuditLogger {
         const date = new Date().toISOString().split('T')[0]; // YYYY-MM-DD
         return join(this.config.logDirectory, `audit-${date}.jsonl`);
     }
-    /**
-     * Load last hash from current log file
-     */
-    loadLastHash() {
-        if (!existsSync(this.currentLogFile)) {
-            return null;
-        }
-        try {
-            const lines = readFileSync(this.currentLogFile, 'utf8').split('\n').filter(l => l.trim());
-            if (lines.length === 0)
-                return null;
-            const lastEvent = JSON.parse(lines[lines.length - 1]);
-            return lastEvent.hash || null;
-        }
-        catch {
-            return null;
-        }
-    }
     /**
      * Check if log file needs rotation
      */
@@ -322,10 +231,9 @@ export class AuditLogger {
      */
     rotateLogFile() {
         this.currentLogFile = this.getCurrentLogFile();
-        this.lastHash = this.loadLastHash();
     }
     /**
-     * Clean up old log files (retention policy)
+     * Clean up old log files (30-day retention in free tier)
      */
     cleanupOldLogs() {
         try {
@@ -351,19 +259,6 @@ export class AuditLogger {
             console.error('Failed to clean up old audit logs:', error);
         }
     }
-    /**
-     * Emit alert for critical events
-     */
-    emitAlert(event) {
-        for (const callback of this.alertCallbacks) {
-            try {
-                callback(event);
-            }
-            catch (error) {
-                console.error('Alert callback failed:', error);
-            }
-        }
-    }
 }
 /**
  * Get audit logger singleton