@digimuza/system-core 0.2.0 → 0.3.0-rc.1

package/dist/ai/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/ai/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAqB,MAAM,qBAAqB,CAAA;AAErE;;;;GAIG;AACH,MAAM,CAAC,MAAM,EAAE,GAAG,YAAY,CAAC;IAC7B,EAAE,EAAE,IAAI;IACR,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,4BAA4B;IACzC,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC;IACjI,eAAe,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,WAAW,EAAE,+BAA+B,EAAE,WAAW,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;CAC/I,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,aAAa,EAA6D,CAAA"}

package/dist/ai/runner.d.ts

@@ -0,0 +1,71 @@
+import type { AiOptions, MessageView } from "./contract.js";
+/** Max model steps (calls) per run turn; guards against tool loops. */
+export declare const AI_MAX_STEPS = 8;
+/** Text deltas are written with `_appendText` at most this often … */
+export declare const AI_FLUSH_MS = 150;
+/** … or as soon as this many characters are buffered. */
+export declare const AI_FLUSH_CHARS = 200;
+export type AiLanguageModel = any;
+export interface AiRunnerOptions extends AiOptions {
+    /** OpenAI API key; default `process.env.OPENAI_API_KEY`. Never logged or returned. */
+    openAiApiKey?: () => string | undefined;
+    /**
+     * Base URL of an OpenAI-compatible API, e.g. a proxy like 9Router
+     * (`https://router.digimuza.ai/v1`). Default `process.env.OPENAI_BASE_URL`,
+     * else api.openai.com. Requests go to `<baseURL>/chat/completions`.
+     */
+    baseURL?: string;
+    /** Custom fetch for the provider (tests, request middleware). Default: global fetch. */
+    fetch?: typeof globalThis.fetch;
+    /**
+     * Test hook: builds the language model for a model id instead of OpenAI (e.g.
+     * `MockLanguageModelV4` from `ai/test`). When set, no API key is needed.
+     */
+    model?: (modelId: string) => AiLanguageModel;
+}
+type ModelMessage = {
+    role: "user";
+    content: string;
+} | {
+    role: "assistant";
+    content: Array<{
+        type: "text";
+        text: string;
+    } | {
+        type: "tool-call";
+        toolCallId: string;
+        toolName: string;
+        input: unknown;
+    }>;
+} | {
+    role: "tool";
+    content: Array<{
+        type: "tool-result";
+        toolCallId: string;
+        toolName: string;
+        output: {
+            type: "json";
+            value: unknown;
+        };
+    }>;
+};
+/** OpenAI function names allow only `[a-zA-Z0-9_-]`; tool ids are `module.verb_object`. */
+export declare const modelToolName: (toolId: string) => string;
+/**
+ * History → model messages. User text → user messages; assistant parts in order as
+ * text + tool calls, each finished call (done/error/rejected) followed by its result.
+ * Calls without an outcome yet are left out (a call without a result is invalid).
+ */
+export declare function toModelMessages(history: readonly MessageView[]): ModelMessage[];
+/**
+ *   // convex/aiRunner.ts
+ *   "use node"
+ *   export const { runAgent } = defineAiRunner(aiOptions)
+ */
+export declare function defineAiRunner(options: AiRunnerOptions): {
+    runAgent: import("convex/server").RegisteredAction<"internal", {
+        runId: import("convex/values").GenericId<"aiRuns">;
+    }, Promise<void>>;
+};
+export {};
+//# sourceMappingURL=runner.d.ts.map

package/dist/ai/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/ai/runner.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAgC,WAAW,EAA6D,MAAM,eAAe,CAAA;AAEpJ,uEAAuE;AACvE,eAAO,MAAM,YAAY,IAAI,CAAA;AAC7B,sEAAsE;AACtE,eAAO,MAAM,WAAW,MAAM,CAAA;AAC9B,yDAAyD;AACzD,eAAO,MAAM,cAAc,MAAM,CAAA;AAKjC,MAAM,MAAM,eAAe,GAAG,GAAG,CAAA;AAEjC,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;IACvC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,wFAAwF;IACxF,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;IAC/B;;;OAGG;IACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,eAAe,CAAA;CAC7C;AAGD,KAAK,YAAY,GACb;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;CAAE,GACnJ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,OAAO,CAAA;SAAE,CAAA;KAAE,CAAC,CAAA;CAAE,CAAA;AAO7I,2FAA2F;AAC3F,eAAO,MAAM,aAAa,WAAY,MAAM,WAA2C,CAAA;AAKvF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,YAAY,EAAE,CA8B/E;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,eAAe;;;;EA6KtD"}

package/dist/ai/runner.js

@@ -0,0 +1,246 @@
+// Node-only Mastra runner of the AI module (DIG-71). Entry `@digimuza/system-core/ai/runner`.
+// All Mastra / AI SDK imports live here, never in contract/api/tools: the app file that
+// re-exports `runAgent` must start with "use node".
+import { createOpenAI } from "@ai-sdk/openai";
+import { Agent } from "@mastra/core/agent";
+import { noopLogger } from "@mastra/core/logger";
+import { createTool } from "@mastra/core/tools";
+import { internalActionGeneric, makeFunctionReference } from "convex/server";
+import { v } from "convex/values";
+import { createLogger } from "../diagnostics/logging.js";
+/** Max model steps (calls) per run turn; guards against tool loops. */
+export const AI_MAX_STEPS = 8;
+/** Text deltas are written with `_appendText` at most this often … */
+export const AI_FLUSH_MS = 150;
+/** … or as soon as this many characters are buffered. */
+export const AI_FLUSH_CHARS = 200;
+class StopTurn extends Error {
+}
+const UNAVAILABLE = "UNAVAILABLE";
+const FAILED = { code: UNAVAILABLE, message: "The assistant failed. Try again." };
+/** OpenAI function names allow only `[a-zA-Z0-9_-]`; tool ids are `module.verb_object`. */
+export const modelToolName = (toolId) => toolId.replace(/[^a-zA-Z0-9_-]/g, "_");
+const toolOutput = (p) => p.state === "done" ? { ok: true, result: p.result ?? null } : p.state === "rejected" ? { ok: false, error: "REJECTED", message: "rejected by user" } : { ok: false, error: p.error ?? UNAVAILABLE };
+/**
+ * History → model messages. User text → user messages; assistant parts in order as
+ * text + tool calls, each finished call (done/error/rejected) followed by its result.
+ * Calls without an outcome yet are left out (a call without a result is invalid).
+ */
+export function toModelMessages(history) {
+    const out = [];
+    for (const m of history) {
+        if (m.role === "user") {
+            const text = m.parts.flatMap((p) => (p.type === "text" ? [p.text] : [])).join("\n");
+            if (text.trim())
+                out.push({ role: "user", content: text });
+            continue;
+        }
+        let assistant = [];
+        let results = [];
+        const flush = () => {
+            if (assistant.length)
+                out.push({ role: "assistant", content: assistant });
+            if (results.length)
+                out.push({ role: "tool", content: results });
+            assistant = [];
+            results = [];
+        };
+        for (const p of m.parts) {
+            if (p.type === "text") {
+                if (!p.text)
+                    continue;
+                if (results.length)
+                    flush();
+                assistant.push({ type: "text", text: p.text });
+            }
+            else if (p.state === "done" || p.state === "error" || p.state === "rejected") {
+                const toolName = modelToolName(p.toolName);
+                assistant.push({ type: "tool-call", toolCallId: p.toolCallId, toolName, input: p.args ?? {} });
+                results.push({ type: "tool-result", toolCallId: p.toolCallId, toolName, output: { type: "json", value: toolOutput(p) } });
+            }
+        }
+        flush();
+    }
+    return out;
+}
+/**
+ *   // convex/aiRunner.ts
+ *   "use node"
+ *   export const { runAgent } = defineAiRunner(aiOptions)
+ */
+export function defineAiRunner(options) {
+    const fnModule = options.functionsModule ?? "ai";
+    const mutation = (name) => makeFunctionReference(`${fnModule}:${name}`);
+    const query = (name) => makeFunctionReference(`${fnModule}:${name}`);
+    const fn = {
+        startRun: mutation("_startRun"),
+        appendText: mutation("_appendText"),
+        addToolCall: mutation("_addToolCall"),
+        executeTool: mutation("_executeTool"),
+        setToolCallState: mutation("_setToolCallState"),
+        finishRun: mutation("_finishRun"),
+        isStopRequested: query("_isStopRequested"),
+    };
+    const logger = createLogger({ moduleId: "ai.runner" });
+    async function run(ctx, runId) {
+        const rc = (await ctx.runMutation(fn.startRun, { runId }));
+        if (!rc)
+            return;
+        let finished = null;
+        const finish = async (status, error) => {
+            if (finished)
+                return;
+            finished = status;
+            await ctx.runMutation(fn.finishRun, error ? { runId, status, error } : { runId, status });
+        };
+        try {
+            const agentDef = options.agents.find((a) => a.id === rc.agentId);
+            if (!agentDef)
+                return await finish("error", { code: UNAVAILABLE, message: "Unknown assistant" });
+            let modelFor = options.model;
+            if (!modelFor) {
+                const apiKey = options.openAiApiKey?.() ?? process.env.OPENAI_API_KEY;
+                if (!apiKey)
+                    return await finish("error", { code: UNAVAILABLE, message: "AI model is not configured" });
+                const baseURL = options.baseURL ?? (process.env.OPENAI_BASE_URL || undefined);
+                const openai = createOpenAI({ apiKey, ...(baseURL ? { baseURL } : {}), ...(options.fetch ? { fetch: options.fetch } : {}) });
+                // Chat Completions, not the Responses API default: OpenAI-compatible
+                // proxies (9Router, LiteLLM, …) implement /v1/chat/completions. Model ids
+                // are plain strings (router names like `cx/gpt-5` are not in the SDK's union).
+                modelFor = (id) => openai.chat(id);
+            }
+            const messageId = rc.messageId;
+            const executeTool = async (toolCallId) => {
+                let res;
+                try {
+                    res = (await ctx.runMutation(fn.executeTool, { runId, toolCallId }));
+                }
+                catch (e) {
+                    logger.warn("ai_tool_execute_failed", { errorName: e instanceof Error ? e.name : typeof e });
+                    res = { ok: false, code: UNAVAILABLE, message: "Tool failed" };
+                }
+                await ctx.runMutation(fn.setToolCallState, res.ok ? { messageId, toolCallId, state: "done", result: res.result ?? null } : { messageId, toolCallId, state: "error", error: res.code });
+                return res;
+            };
+            // 5. Resume: run the tools the user approved since the last turn.
+            const history = rc.history.map((m) => (m.id === messageId ? { ...m, parts: m.parts.map((p) => ({ ...p })) } : m));
+            const current = history.find((m) => m.id === messageId);
+            for (const p of current?.parts ?? []) {
+                if (p.type !== "tool-call" || p.state !== "approved")
+                    continue;
+                await ctx.runMutation(fn.setToolCallState, { messageId, toolCallId: p.toolCallId, state: "running" });
+                const res = await executeTool(p.toolCallId);
+                Object.assign(p, res.ok ? { state: "done", result: res.result ?? null } : { state: "error", error: res.code });
+            }
+            // Still waiting on the user for another call: nothing to do until they answer.
+            if (current?.parts.some((p) => p.type === "tool-call" && p.state === "awaiting-approval"))
+                return await finish("waiting-approval");
+            // 7. Text batching + stop checks.
+            const controller = new AbortController();
+            let buffer = "";
+            let lastFlush = Date.now();
+            let chain = Promise.resolve();
+            const flush = () => (chain = chain.then(async () => {
+                lastFlush = Date.now();
+                if (buffer && !finished) {
+                    const text = buffer;
+                    buffer = "";
+                    await ctx.runMutation(fn.appendText, { messageId, text });
+                }
+                if (!finished && (await ctx.runQuery(fn.isStopRequested, { runId }))) {
+                    controller.abort();
+                    await finish("stopped");
+                }
+            }));
+            // 4. Tools: only those the actor may use right now.
+            let awaitingApproval = false;
+            const allowed = new Set(rc.allowedToolIds);
+            const tools = {};
+            for (const tool of agentDef.tools) {
+                if (!allowed.has(tool.id))
+                    continue;
+                const name = modelToolName(tool.id);
+                tools[name] = createTool({
+                    id: name,
+                    description: tool.description,
+                    inputSchema: tool.input,
+                    execute: async (input, toolCtx) => {
+                        const toolCallId = toolCtx?.agent?.toolCallId || `call_${crypto.randomUUID()}`;
+                        await flush();
+                        if (finished)
+                            throw new StopTurn("stopped");
+                        const args = input ?? {};
+                        if (tool.requiresApproval) {
+                            awaitingApproval = true;
+                            await ctx.runMutation(fn.addToolCall, { messageId, toolCallId, toolName: tool.id, args, state: "awaiting-approval" });
+                            return { ok: false, status: "awaiting-approval", message: "The user must approve this action first. Stop and wait for their answer." };
+                        }
+                        await ctx.runMutation(fn.addToolCall, { messageId, toolCallId, toolName: tool.id, args, state: "running" });
+                        const res = await executeTool(toolCallId);
+                        return res.ok ? { ok: true, result: res.result ?? null } : { ok: false, error: res.code, message: res.message };
+                    },
+                });
+            }
+            const agent = new Agent({
+                id: agentDef.id,
+                name: agentDef.name,
+                instructions: agentDef.instructions,
+                model: modelFor(rc.model),
+                tools,
+            });
+            // Mastra logs stream errors with the full error object; upstream API errors carry the
+            // request body (prompts, tool results). Silence it; we log only the error name.
+            agent.__setLogger(noopLogger);
+            const messages = toModelMessages(history);
+            // An approval call ends the turn after its step (other calls of the same step still
+            // finish and are recorded); the step cap stops tool loops.
+            const stopWhen = [({ steps }) => steps.length >= AI_MAX_STEPS, () => awaitingApproval];
+            try {
+                const output = await agent.stream(messages, {
+                    maxSteps: AI_MAX_STEPS,
+                    stopWhen: stopWhen,
+                    abortSignal: controller.signal,
+                });
+                const reader = output.fullStream.getReader();
+                for (;;) {
+                    const { done, value } = await reader.read();
+                    if (done || finished)
+                        break;
+                    const chunk = value;
+                    if (chunk.type === "text-delta" && chunk.payload?.text) {
+                        buffer += chunk.payload.text;
+                        if (buffer.length >= AI_FLUSH_CHARS || Date.now() - lastFlush >= AI_FLUSH_MS)
+                            await flush();
+                    }
+                    else if (chunk.type === "error") {
+                        throw chunk.payload?.error instanceof Error ? chunk.payload.error : new Error("stream error");
+                    }
+                    if (finished)
+                        break;
+                }
+                if (finished)
+                    await reader.cancel().catch(() => { });
+            }
+            catch (e) {
+                if (!finished)
+                    throw e;
+            }
+            await flush();
+            await chain;
+            // 8. End of turn.
+            await finish(awaitingApproval ? "waiting-approval" : "done");
+        }
+        catch (e) {
+            logger.error("ai_run_failed", { errorName: e instanceof Error ? e.name : typeof e });
+            await finish("error", FAILED);
+        }
+    }
+    const runAgent = internalActionGeneric({
+        args: { runId: v.id("aiRuns") },
+        handler: async (ctx, { runId }) => {
+            await run(ctx, runId);
+        },
+    });
+    return { runAgent };
+}
+//# sourceMappingURL=runner.js.map

package/dist/ai/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/ai/runner.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,wFAAwF;AACxF,oDAAoD;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAA;AAC/C,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAgD,MAAM,eAAe,CAAA;AAC1H,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAA;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAGxD,uEAAuE;AACvE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAA;AAC7B,sEAAsE;AACtE,MAAM,CAAC,MAAM,WAAW,GAAG,GAAG,CAAA;AAC9B,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,CAAA;AA+BjC,MAAM,QAAS,SAAQ,KAAK;CAAG;AAE/B,MAAM,WAAW,GAAG,aAAa,CAAA;AACjC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAA;AAEjF,2FAA2F;AAC3F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAA;AAEvF,MAAM,UAAU,GAAG,CAAC,CAAW,EAAW,EAAE,CAC1C,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,WAAW,EAAE,CAAA;AAErM;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,GAAG,GAAmB,EAAE,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACnF,IAAI,IAAI,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YAC1D,SAAQ;QACV,CAAC;QACD,IAAI,SAAS,GAA4D,EAAE,CAAA;QAC3E,IAAI,OAAO,GAAuD,EAAE,CAAA;QACpE,MAAM,KAAK,GAAG,GAAG,EAAE;YACjB,IAAI,SAAS,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;YACzE,IAAI,OAAO,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;YAChE,SAAS,GAAG,EAAE,CAAA;YACd,OAAO,GAAG,EAAE,CAAA;QACd,CAAC,CAAA;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,IAAI,CAAC,CAAC,CAAC,IAAI;oBAAE,SAAQ;gBACrB,IAAI,OAAO,CAAC,MAAM;oBAAE,KAAK,EAAE,CAAA;gBAC3B,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YAChD,CAAC;iBAAM,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;gBAC/E,MAAM,QAAQ,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;gBAC1C,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;gBAC9F,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YAC3H,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAA;IACT,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,OAAwB;IACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAA;IAChD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,qBAAqB,CAAa,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,qBAAqB,CAAU,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAA;IACrF,MAAM,EAAE,GAAG;QACT,QAAQ,EAAE,QAAQ,CAAC,WAAW,CAAC;QAC/B,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC;QACnC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;QACrC,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;QACrC,gBAAgB,EAAE,QAAQ,CAAC,mBAAmB,CAAC;QAC/C,SAAS,EAAE,QAAQ,CAAC,YAAY,CAAC;QACjC,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC;KAC3C,CAAA;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAA;IAEtD,KAAK,UAAU,GAAG,CAAC,GAAuC,EAAE,KAAc;QACxE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAsB,CAAA;QAC/E,IAAI,CAAC,EAAE;YAAE,OAAM;QAEf,IAAI,QAAQ,GAAqB,IAAI,CAAA;QACrC,MAAM,MAAM,GAAG,KAAK,EAAE,MAAiB,EAAE,KAAyC,EAAE,EAAE;YACpF,IAAI,QAAQ;gBAAE,OAAM;YACpB,QAAQ,GAAG,MAAM,CAAA;YACjB,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3F,CAAC,CAAA;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,CAAA;YAChE,IAAI,CAAC,QAAQ;gBAAE,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAA;YAEhG,IAAI,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAA;YAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;gBACrE,IAAI,CAAC,MAAM;oBAAE,OAAO,MAAM,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC,CAAA;gBACvG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC,CAAA;gBAC7E,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;gBAC5H,qEAAqE;gBACrE,0EAA0E;gBAC1E,+EAA+E;gBAC/E,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC5C,CAAC;YAED,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAA;YAC9B,MAAM,WAAW,GAAG,KAAK,EAAE,UAAkB,EAAgC,EAAE;gBAC7E,IAAI,GAAwB,CAAA;gBAC5B,IAAI,CAAC;oBACH,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAwB,CAAA;gBAC7F,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;oBAC5F,GAAG,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,CAAA;gBAChE,CAAC;gBACD,MAAM,GAAG,CAAC,WAAW,CACnB,EAAE,CAAC,gBAAgB,EACnB,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAC3I,CAAA;gBACD,OAAO,GAAG,CAAA;YACZ,CAAC,CAAA;YAED,kEAAkE;YAClE,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACjH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAA;YACvD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU;oBAAE,SAAQ;gBAC9D,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;gBACrG,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;gBAC3C,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAuB,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAwB,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;YAClJ,CAAC;YACD,+EAA+E;YAC/E,IAAI,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,KAAK,KAAK,mBAAmB,CAAC;gBAAE,OAAO,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAA;YAElI,kCAAkC;YAClC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YACxC,IAAI,MAAM,GAAG,EAAE,CAAA;YACf,IAAI,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC1B,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;YAC5C,MAAM,KAAK,GAAG,GAAkB,EAAE,CAChC,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAC7B,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;gBACtB,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACxB,MAAM,IAAI,GAAG,MAAM,CAAA;oBACnB,MAAM,GAAG,EAAE,CAAA;oBACX,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,CAAC;gBACD,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;oBACrE,UAAU,CAAC,KAAK,EAAE,CAAA;oBAClB,MAAM,MAAM,CAAC,SAAS,CAAC,CAAA;gBACzB,CAAC;YACH,CAAC,CAAC,CAAC,CAAA;YAEL,oDAAoD;YACpD,IAAI,gBAAgB,GAAG,KAAK,CAAA;YAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,CAAA;YAC1C,MAAM,KAAK,GAAkD,EAAE,CAAA;YAC/D,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAA0B,EAAE,CAAC;gBACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAAE,SAAQ;gBACnC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBACnC,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;oBACvB,EAAE,EAAE,IAAI;oBACR,WAAW,EAAE,IAAI,CAAC,WAAW;oBAC7B,WAAW,EAAE,IAAI,CAAC,KAAK;oBACvB,OAAO,EAAE,KAAK,EAAE,KAAc,EAAE,OAAwD,EAAE,EAAE;wBAC1F,MAAM,UAAU,GAAG,OAAO,EAAE,KAAK,EAAE,UAAU,IAAI,QAAQ,MAAM,CAAC,UAAU,EAAE,EAAE,CAAA;wBAC9E,MAAM,KAAK,EAAE,CAAA;wBACb,IAAI,QAAQ;4BAAE,MAAM,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAA;wBAC3C,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAA;wBACxB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;4BAC1B,gBAAgB,GAAG,IAAI,CAAA;4BACvB,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAA;4BACrH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,0EAA0E,EAAE,CAAA;wBACxI,CAAC;wBACD,MAAM,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;wBAC3G,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAA;wBACzC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAA;oBACjH,CAAC;iBACkC,CAAkC,CAAA;YACzE,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC;gBACtB,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,YAAY,EAAE,QAAQ,CAAC,YAAY;gBACnC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;gBACzB,KAAK;aACN,CAAC,CAAA;YACF,sFAAsF;YACtF,gFAAgF;YAChF,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAA;YAE7B,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;YACzC,oFAAoF;YACpF,2DAA2D;YAC3D,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,KAAK,EAAwB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,CAAA;YAC5G,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,QAAiB,EAAE;oBACnD,QAAQ,EAAE,YAAY;oBACtB,QAAQ,EAAE,QAAiB;oBAC3B,WAAW,EAAE,UAAU,CAAC,MAAM;iBAC/B,CAAC,CAAA;gBACF,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,CAAA;gBAC5C,SAAS,CAAC;oBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;oBAC3C,IAAI,IAAI,IAAI,QAAQ;wBAAE,MAAK;oBAC3B,MAAM,KAAK,GAAG,KAAuE,CAAA;oBACrF,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;wBACvD,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAA;wBAC5B,IAAI,MAAM,CAAC,MAAM,IAAI,cAAc,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,WAAW;4BAAE,MAAM,KAAK,EAAE,CAAA;oBAC7F,CAAC;yBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;wBAClC,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;oBAC/F,CAAC;oBACD,IAAI,QAAQ;wBAAE,MAAK;gBACrB,CAAC;gBACD,IAAI,QAAQ;oBAAE,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACrD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,QAAQ;oBAAE,MAAM,CAAC,CAAA;YACxB,CAAC;YACD,MAAM,KAAK,EAAE,CAAA;YACb,MAAM,KAAK,CAAA;YACX,kBAAkB;YAClB,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YACpF,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC;QACrC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC/B,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAChC,MAAM,GAAG,CAAC,GAAG,EAAE,KAAgB,CAAC,CAAA;QAClC,CAAC;KACF,CAAC,CAAA;IAEF,OAAO,EAAE,QAAQ,EAAE,CAAA;AACrB,CAAC"}

package/dist/ai/tools.d.ts

@@ -0,0 +1,42 @@
+import type { z } from "zod";
+import { type ActorRef } from "../core/access.js";
+import type { SystemContext } from "../core/context.js";
+import { type AiAgentDefinition, type AiTool, type ToolExecutionResult } from "./contract.js";
+/** `module.verb_object`, e.g. `finance.list_invoices`. */
+export declare const AI_TOOL_ID: RegExp;
+export declare const AI_AGENT_ID: RegExp;
+/**
+ * Declares a tool. Identity at runtime; validates the definition (id format, permission format).
+ *
+ * Handler rule: check everything (existence, state, uniqueness, limits) BEFORE the
+ * first write. A failed handler's earlier writes are committed, because
+ * `executeAiTool` reports the failure as a result instead of throwing, so the
+ * mutation (and its `ai.tool.run` audit event) commits. The finance tools follow
+ * this: their shared invoice operations validate first, then insert/patch once.
+ *
+ * Conventions: `permission` is the owning module's own permission; anything that
+ * writes sets `requiresApproval: true`.
+ */
+export declare function defineAiTool<I extends z.ZodType, O>(tool: AiTool<I, O>): AiTool<I, O>;
+/** Declares an agent. Identity at runtime; validates ids and that tool ids are unique. */
+export declare function defineAiAgent<const A extends AiAgentDefinition>(agent: A): A;
+/**
+ * Runs one tool call as the run's actor, inside a mutation:
+ * validates `args` with the tool's zod schema (VALIDATION), re-authorizes the
+ * actor for `tool.permission` with system-core `authorizeJob` (FORBIDDEN when
+ * null: revoked key, suspended user, role view, disabled module…), runs the
+ * handler, maps SystemError to its code, and audits `ai.tool.run`.
+ *
+ * Handlers must validate before they write: the failure is returned (not
+ * thrown) so the audit is kept, which means the surrounding mutation also
+ * commits whatever the handler wrote before it failed.
+ */
+export declare function executeAiTool(input: {
+    db: any;
+    sys: SystemContext;
+    actorRef: ActorRef;
+    tool: AiTool<any, any>;
+    args: unknown;
+    toolCallId: string;
+}): Promise<ToolExecutionResult>;
+//# sourceMappingURL=tools.d.ts.map

package/dist/ai/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/ai/tools.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,EAA8B,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAA;AAG7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAGvD,OAAO,EAAY,KAAK,iBAAiB,EAAE,KAAK,MAAM,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAA;AAEvG,0DAA0D;AAC1D,eAAO,MAAM,UAAU,QAAuC,CAAA;AAC9D,eAAO,MAAM,WAAW,QAA2B,CAAA;AAInD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAUrF;AAED,0FAA0F;AAC1F,wBAAgB,aAAa,CAAC,KAAK,CAAC,CAAC,SAAS,iBAAiB,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAW5E;AAQD;;;;;;;;;;GAUG;AACH,wBAAsB,aAAa,CAAC,KAAK,EAAE;IAEzC,EAAE,EAAE,GAAG,CAAA;IACP,GAAG,EAAE,aAAa,CAAA;IAClB,QAAQ,EAAE,QAAQ,CAAA;IAElB,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAA;IACtB,IAAI,EAAE,OAAO,CAAA;IACb,UAAU,EAAE,MAAM,CAAA;CACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6C/B"}

package/dist/ai/tools.js

@@ -0,0 +1,117 @@
+import { rehydrateActor } from "../core/access.js";
+import { recordAudit } from "../core/audit.js";
+import { PERMISSION_ID } from "../core/catalog.js";
+import { toSystemError } from "../core/errors.js";
+import { authorizeJob } from "../core/jobs.js";
+import { AI_AUDIT } from "./contract.js";
+/** `module.verb_object`, e.g. `finance.list_invoices`. */
+export const AI_TOOL_ID = /^[a-z][a-z0-9-]*\.[a-z][a-z0-9_]*$/;
+export const AI_AGENT_ID = /^[a-z][a-z0-9-]{1,47}$/;
+const isZodSchema = (s) => !!s && typeof s === "object" && typeof s.safeParse === "function";
+/**
+ * Declares a tool. Identity at runtime; validates the definition (id format, permission format).
+ *
+ * Handler rule: check everything (existence, state, uniqueness, limits) BEFORE the
+ * first write. A failed handler's earlier writes are committed, because
+ * `executeAiTool` reports the failure as a result instead of throwing, so the
+ * mutation (and its `ai.tool.run` audit event) commits. The finance tools follow
+ * this: their shared invoice operations validate first, then insert/patch once.
+ *
+ * Conventions: `permission` is the owning module's own permission; anything that
+ * writes sets `requiresApproval: true`.
+ */
+export function defineAiTool(tool) {
+    const id = typeof tool?.id === "string" ? tool.id : "";
+    if (!AI_TOOL_ID.test(id))
+        throw new Error(`defineAiTool: invalid tool id "${id}" (expected module.verb_object, e.g. finance.list_invoices)`);
+    if (typeof tool.permission !== "string" || !PERMISSION_ID.test(tool.permission)) {
+        throw new Error(`defineAiTool(${id}): invalid permission "${String(tool.permission)}" (expected module:resource:action)`);
+    }
+    if (typeof tool.description !== "string" || !tool.description.trim())
+        throw new Error(`defineAiTool(${id}): description is required`);
+    if (!isZodSchema(tool.input))
+        throw new Error(`defineAiTool(${id}): input must be a zod schema`);
+    if (typeof tool.handler !== "function")
+        throw new Error(`defineAiTool(${id}): handler must be a function`);
+    return tool;
+}
+/** Declares an agent. Identity at runtime; validates ids and that tool ids are unique. */
+export function defineAiAgent(agent) {
+    const id = typeof agent?.id === "string" ? agent.id : "";
+    if (!AI_AGENT_ID.test(id))
+        throw new Error(`defineAiAgent: invalid agent id "${id}" (expected ${AI_AGENT_ID.source})`);
+    if (typeof agent.instructions !== "string" || !agent.instructions.trim())
+        throw new Error(`defineAiAgent(${id}): instructions are required`);
+    if (!Array.isArray(agent.tools))
+        throw new Error(`defineAiAgent(${id}): tools must be an array`);
+    const seen = new Set();
+    for (const tool of agent.tools) {
+        if (seen.has(tool.id))
+            throw new Error(`defineAiAgent(${id}): duplicate tool id "${tool.id}"`);
+        seen.add(tool.id);
+    }
+    return agent;
+}
+/** Field paths of the failed issues, never their values. */
+function invalidFields(error) {
+    const paths = error.issues.map((i) => (i.path.length ? i.path.map((p) => String(p)).join(".") : "(root)"));
+    return [...new Set(paths)];
+}
+/**
+ * Runs one tool call as the run's actor, inside a mutation:
+ * validates `args` with the tool's zod schema (VALIDATION), re-authorizes the
+ * actor for `tool.permission` with system-core `authorizeJob` (FORBIDDEN when
+ * null: revoked key, suspended user, role view, disabled module…), runs the
+ * handler, maps SystemError to its code, and audits `ai.tool.run`.
+ *
+ * Handlers must validate before they write: the failure is returned (not
+ * thrown) so the audit is kept, which means the surrounding mutation also
+ * commits whatever the handler wrote before it failed.
+ */
+export async function executeAiTool(input) {
+    const { db, sys, actorRef, tool, args, toolCallId } = input;
+    // Who the audit event names: the rehydrated actor if still valid, else "system".
+    let auditActor = (await rehydrateActor(sys, actorRef)) ?? "system";
+    const audit = (result, reason) => {
+        const event = { action: AI_AUDIT.toolRun, targetType: "ai_tool", targetId: tool.id, result, changes: { toolCallId } };
+        if (reason)
+            event.reason = reason;
+        return recordAudit(sys, auditActor, event);
+    };
+    const failure = async (code, message) => {
+        await audit(code === "FORBIDDEN" || code === "UNAUTHENTICATED" ? "denied" : "failed", code);
+        return { ok: false, code, message };
+    };
+    const parsed = tool.input.safeParse(args);
+    if (!parsed.success) {
+        const fields = invalidFields(parsed.error);
+        sys.logger.info("ai_tool_invalid_args", { toolId: tool.id, fields });
+        return failure("VALIDATION", `Invalid arguments for ${tool.id}: ${fields.join(", ")}`);
+    }
+    const auth = await authorizeJob(sys, actorRef, tool.permission);
+    if (!auth)
+        return failure("FORBIDDEN", `Not allowed to use ${tool.id}.`);
+    auditActor = auth.actor;
+    let result;
+    try {
+        result = await tool.handler({ db, sys, actor: auth.actor }, parsed.data);
+    }
+    catch (e) {
+        const se = toSystemError(e);
+        if (se)
+            return failure(se.code, se.toPublic().message);
+        sys.logger.error("ai_tool_failed", { toolId: tool.id, error: e });
+        return failure("UNAVAILABLE", "The tool failed.");
+    }
+    let json;
+    try {
+        json = result === undefined ? null : JSON.parse(JSON.stringify(result));
+    }
+    catch (e) {
+        sys.logger.error("ai_tool_result_not_json", { toolId: tool.id, error: e });
+        return failure("UNAVAILABLE", "The tool returned an invalid result.");
+    }
+    await audit("success");
+    return { ok: true, result: json };
+}
+//# sourceMappingURL=tools.js.map

package/dist/ai/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/ai/tools.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,cAAc,EAA6B,MAAM,mBAAmB,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAmB,MAAM,kBAAkB,CAAA;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAC9C,OAAO,EAAE,QAAQ,EAAiE,MAAM,eAAe,CAAA;AAEvG,0DAA0D;AAC1D,MAAM,CAAC,MAAM,UAAU,GAAG,oCAAoC,CAAA;AAC9D,MAAM,CAAC,MAAM,WAAW,GAAG,wBAAwB,CAAA;AAEnD,MAAM,WAAW,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAQ,CAA6B,CAAC,SAAS,KAAK,UAAU,CAAA;AAElJ;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAyB,IAAkB;IACrE,MAAM,EAAE,GAAG,OAAO,IAAI,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,EAAE,6DAA6D,CAAC,CAAA;IAC5I,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,0BAA0B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAA;IAC3H,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAA;IACrI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAA;IAChG,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAA;IAC1G,OAAO,IAAI,CAAA;AACb,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,aAAa,CAAoC,KAAQ;IACvE,MAAM,EAAE,GAAG,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACxD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,EAAE,eAAe,WAAW,CAAC,MAAM,GAAG,CAAC,CAAA;IACtH,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,8BAA8B,CAAC,CAAA;IAC5I,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,2BAA2B,CAAC,CAAA;IAChG,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,yBAAyB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;QAC9F,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,4DAA4D;AAC5D,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC1G,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KASnC;IACC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;IAC3D,iFAAiF;IACjF,IAAI,UAAU,GAAqB,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,IAAI,QAAQ,CAAA;IAEpF,MAAM,KAAK,GAAG,CAAC,MAAyC,EAAE,MAAe,EAAE,EAAE;QAC3E,MAAM,KAAK,GAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,CAAA;QACjI,IAAI,MAAM;YAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAA;QACjC,OAAO,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,CAAA;IAC5C,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,IAAY,EAAE,OAAe,EAAgC,EAAE;QACpF,MAAM,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;QAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACrC,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;QACpE,OAAO,OAAO,CAAC,YAAY,EAAE,yBAAyB,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;IAC/D,IAAI,CAAC,IAAI;QAAE,OAAO,OAAO,CAAC,WAAW,EAAE,sBAAsB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;IACxE,UAAU,GAAG,IAAI,CAAC,KAAK,CAAA;IAEvB,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC,CAAA;QAC3B,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAA;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACjE,OAAO,OAAO,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAA;IACnD,CAAC;IAED,IAAI,IAAa,CAAA;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IACzE,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAO,OAAO,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAA;IACvE,CAAC;IACD,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;IACtB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACnC,CAAC"}

package/dist/audit/csv.d.ts

@@ -0,0 +1,31 @@
+/** The fields of an audit event (`listAudit` items) the export reads. */
+export interface AuditCsvEvent {
+    at: number;
+    action: string;
+    result: string;
+    actorKind?: string;
+    actorUserId?: string;
+    apiKeyId?: string;
+    targetType: string;
+    targetId: string;
+    operationId: string;
+    changes?: Record<string, unknown>;
+    reason?: string;
+}
+/** Stable column order. */
+export declare const AUDIT_CSV_COLUMNS: readonly ["at", "action", "result", "actor", "apiKey", "target", "operationId", "details"];
+export interface AuditCsvOptions {
+    /** Prepend a UTF-8 BOM so Excel reads Lithuanian letters correctly. Default false. */
+    bom?: boolean;
+}
+/** One CSV cell: neutralizes formula injection (leading `'`), then RFC 4180 quoting. */
+export declare function csvCell(value: unknown): string;
+/**
+ * Audit events as CSV (RFC 4180: CRLF line ends, quoted cells where needed),
+ * header row first. Columns: at (ISO 8601 UTC), action, result, actor (user ID,
+ * or `system` / `anonymous`), apiKey (key ID for agents), target
+ * (`type:id`), operationId, details (JSON of `changes` and `reason`).
+ * Cells starting with = + - @ tab or CR get a leading `'` (CSV formula injection).
+ */
+export declare function auditToCsv(events: readonly AuditCsvEvent[], options?: AuditCsvOptions): string;
+//# sourceMappingURL=csv.d.ts.map

package/dist/audit/csv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.d.ts","sourceRoot":"","sources":["../../src/audit/csv.ts"],"names":[],"mappings":"AAIA,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,2BAA2B;AAC3B,eAAO,MAAM,iBAAiB,YAAI,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAU,CAAA;AAE3H,MAAM,WAAW,eAAe;IAC9B,sFAAsF;IACtF,GAAG,CAAC,EAAE,OAAO,CAAA;CACd;AAKD,wFAAwF;AACxF,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAI9C;AASD;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,EAAE,OAAO,GAAE,eAAoB,GAAG,MAAM,CAQlG"}

package/dist/audit/csv.js

@@ -0,0 +1,39 @@
+// CSV export of audit events (DIG-73). Pure and browser-safe: no Convex, no env.
+// The UI pages through `listAudit`, calls `auditToCsv`, offers the download and
+// records the export with `recordAuditExport` (audit action `audit.export`).
+/** Stable column order. */
+export const AUDIT_CSV_COLUMNS = ["at", "action", "result", "actor", "apiKey", "target", "operationId", "details"];
+/** Characters that make spreadsheet apps evaluate a cell as a formula. */
+const FORMULA_START = /^[=+\-@\t\r]/;
+/** One CSV cell: neutralizes formula injection (leading `'`), then RFC 4180 quoting. */
+export function csvCell(value) {
+    let s = value === undefined || value === null ? "" : String(value);
+    if (FORMULA_START.test(s))
+        s = `'${s}`;
+    return /[",\r\n]/.test(s) ? `"${s.replace(/"/g, '""')}"` : s;
+}
+function details(e) {
+    const out = {};
+    if (e.changes !== undefined)
+        out.changes = e.changes;
+    if (e.reason !== undefined)
+        out.reason = e.reason;
+    return Object.keys(out).length ? JSON.stringify(out) : "";
+}
+/**
+ * Audit events as CSV (RFC 4180: CRLF line ends, quoted cells where needed),
+ * header row first. Columns: at (ISO 8601 UTC), action, result, actor (user ID,
+ * or `system` / `anonymous`), apiKey (key ID for agents), target
+ * (`type:id`), operationId, details (JSON of `changes` and `reason`).
+ * Cells starting with = + - @ tab or CR get a leading `'` (CSV formula injection).
+ */
+export function auditToCsv(events, options = {}) {
+    const rows = [AUDIT_CSV_COLUMNS.join(",")];
+    for (const e of events) {
+        const at = Number.isFinite(e.at) ? new Date(e.at).toISOString() : "";
+        const actor = e.actorUserId ?? e.actorKind ?? "";
+        rows.push([at, e.action, e.result, actor, e.apiKeyId ?? "", `${e.targetType}:${e.targetId}`, e.operationId, details(e)].map(csvCell).join(","));
+    }
+    return `${options.bom ? "" : ""}${rows.join("\r\n")}\r\n`;
+}
+//# sourceMappingURL=csv.js.map

package/dist/audit/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sourceRoot":"","sources":["../../src/audit/csv.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gFAAgF;AAChF,6EAA6E;AAiB7E,2BAA2B;AAC3B,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS,CAAU,CAAA;AAO3H,0EAA0E;AAC1E,MAAM,aAAa,GAAG,cAAc,CAAA;AAEpC,wFAAwF;AACxF,MAAM,UAAU,OAAO,CAAC,KAAc;IACpC,IAAI,CAAC,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAA;IACtC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,OAAO,CAAC,CAAgB;IAC/B,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAA;IACpD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;IACjD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,MAAgC,EAAE,OAAO,GAAoB,EAAE;IACxF,MAAM,IAAI,GAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACpD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;QACpE,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,CAAA;QAChD,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IACjJ,CAAC;IACD,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;AAC5D,CAAC"}

package/dist/audit/index.d.ts

@@ -0,0 +1,5 @@
+export { auditToCsv, csvCell, AUDIT_CSV_COLUMNS, type AuditCsvEvent, type AuditCsvOptions } from "./csv.js";
+export { auditModuleOf, CORE_AUDIT_PREFIXES } from "../core/audit-module.js";
+export type { AuditEventRow } from "../core/store.js";
+export type { AuditFacets, AuditFilter, AuditExportFilter } from "../core/audit.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAC3G,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAC5E,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACrD,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/audit/index.js

@@ -0,0 +1,6 @@
+// `@digimuza/system-core/audit`: browser-safe audit helpers (DIG-73).
+// The audit functions themselves (`listAudit`, `listAuditFacets`,
+// `recordAuditExport`) are part of `system.functions` (`@digimuza/system-core/convex`).
+export { auditToCsv, csvCell, AUDIT_CSV_COLUMNS } from "./csv.js";
+export { auditModuleOf, CORE_AUDIT_PREFIXES } from "../core/audit-module.js";
+//# sourceMappingURL=index.js.map

package/dist/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/audit/index.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,kEAAkE;AAClE,wFAAwF;AACxF,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAA4C,MAAM,UAAU,CAAA;AAC3G,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA"}