@geminilight/mindos 1.1.5 → 1.1.7

package/dist/server/handlers/assistants.js

@@ -0,0 +1,369 @@
+import { existsSync, lstatSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync, } from 'node:fs';
+import { posix } from 'node:path';
+import { resolveExistingSafe, resolveSafe } from '../../foundation/security/index.js';
+import { json, privateCacheHeaders } from '../response.js';
+export const MINDOS_ASSISTANTS_ROOT = '.mindos/assistants';
+const SAFE_ASSISTANT_ID = /^[a-z0-9][a-z0-9-]*$/;
+const MAX_PROMPT_BYTES = 256 * 1024;
+const BUILTIN_ASSISTANT_IDS = new Set([
+    'inbox-organizer',
+    'daily-signal',
+    'decision-synthesizer',
+    'rule-keeper',
+    'boundary-reviewer',
+    'method-organizer',
+    'checklist-builder',
+    'tool-inventory',
+    'resource-auditor',
+]);
+export function handleAssistantsGet(services) {
+    try {
+        return json({
+            root: MINDOS_ASSISTANTS_ROOT,
+            assistants: listLocalAssistants(services.mindRoot),
+        }, { headers: privateCacheHeaders(10) });
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : String(error);
+        if (/access denied|outside root|absolute paths|symlink/i.test(message)) {
+            return json({ error: 'Access denied' }, { status: 403 });
+        }
+        return json({ error: message }, { status: 500 });
+    }
+}
+export function handleAssistantsPost(body, services) {
+    try {
+        const record = objectBody(body);
+        const assistantId = sanitizeAssistantId(record.id);
+        if (!assistantId) {
+            return json({ error: 'Invalid assistant id' }, { status: 400 });
+        }
+        if (isMindosBuiltinAssistantId(assistantId)) {
+            return json({ error: 'Built-in assistants are managed by MindOS' }, { status: 409 });
+        }
+        const rootRelPath = posix.join(MINDOS_ASSISTANTS_ROOT, assistantId);
+        ensureAssistantsRoot(services.mindRoot);
+        const rootPath = resolveSafe(services.mindRoot, rootRelPath);
+        if (existsSync(rootPath)) {
+            return json({ error: 'Assistant already exists' }, { status: 409 });
+        }
+        mkdirSync(rootPath, { recursive: false });
+        resolveExistingSafe(services.mindRoot, rootRelPath);
+        const name = sanitizeString(record.name, 80) ?? titleizeAssistantId(assistantId);
+        const description = sanitizeString(record.description, 280) ?? '';
+        const preferredAgent = sanitizeString(record.preferredAgent, 120) ?? 'mindos-agent';
+        const profile = {
+            name,
+            description,
+            schemaVersion: 1,
+            preferredAgent,
+            skills: sanitizeStringArray(record.skills) ?? [],
+            mcp: sanitizeStringArray(record.mcp) ?? [],
+        };
+        const prompt = sanitizeMultiline(record.prompt) ?? defaultAssistantPrompt(name, description);
+        writeFileSync(resolveSafe(services.mindRoot, posix.join(rootRelPath, 'profile.json')), `${JSON.stringify(profile, null, 2)}\n`, 'utf-8');
+        writeFileSync(resolveSafe(services.mindRoot, posix.join(rootRelPath, 'prompt.md')), prompt.endsWith('\n') ? prompt : `${prompt}\n`, 'utf-8');
+        return json({
+            ok: true,
+            id: assistantId,
+            paths: {
+                root: rootRelPath,
+                profile: posix.join(rootRelPath, 'profile.json'),
+                prompt: posix.join(rootRelPath, 'prompt.md'),
+            },
+        }, { status: 201 });
+    }
+    catch (error) {
+        return assistantErrorResponse(error);
+    }
+}
+export function handleAssistantsDelete(body, services) {
+    try {
+        const record = objectBody(body);
+        const assistantId = sanitizeAssistantId(record.id);
+        if (!assistantId) {
+            return json({ error: 'Invalid assistant id' }, { status: 400 });
+        }
+        if (isMindosBuiltinAssistantId(assistantId)) {
+            return json({ error: 'Built-in assistants cannot be deleted' }, { status: 403 });
+        }
+        const rootRelPath = posix.join(MINDOS_ASSISTANTS_ROOT, assistantId);
+        const rootPath = resolveExistingSafe(services.mindRoot, rootRelPath);
+        if (!existsSync(rootPath)) {
+            return json({ error: 'Assistant not found' }, { status: 404 });
+        }
+        if (!lstatSync(rootPath).isDirectory()) {
+            return json({ error: 'Assistant path is not a directory' }, { status: 409 });
+        }
+        rmSync(rootPath, { recursive: true, force: false });
+        return json({ ok: true, id: assistantId });
+    }
+    catch (error) {
+        return assistantErrorResponse(error);
+    }
+}
+export function listLocalAssistants(mindRoot) {
+    const rootPath = resolveExistingSafe(mindRoot, MINDOS_ASSISTANTS_ROOT);
+    if (!existsSync(rootPath))
+        return [];
+    if (!statSync(rootPath).isDirectory())
+        return [];
+    return readdirSync(rootPath, { withFileTypes: true })
+        .filter((entry) => entry.isDirectory() && SAFE_ASSISTANT_ID.test(entry.name))
+        .map((entry) => readAssistantDirectory(mindRoot, entry.name))
+        .sort((a, b) => a.name.localeCompare(b.name) || a.id.localeCompare(b.id));
+}
+export function isMindosBuiltinAssistantId(assistantId) {
+    return BUILTIN_ASSISTANT_IDS.has(assistantId);
+}
+function readAssistantDirectory(mindRoot, assistantId) {
+    const rootRelPath = posix.join(MINDOS_ASSISTANTS_ROOT, assistantId);
+    const promptPath = posix.join(MINDOS_ASSISTANTS_ROOT, assistantId, 'prompt.md');
+    const profilePath = posix.join(MINDOS_ASSISTANTS_ROOT, assistantId, 'profile.json');
+    const profile = readAssistantProfile(mindRoot, profilePath);
+    const prompt = readAssistantPrompt(mindRoot, promptPath);
+    const promptBody = stripLeadingFrontmatter(prompt.content);
+    const promptTitle = extractPromptTitle(promptBody);
+    const fallbackName = promptTitle ?? titleizeAssistantId(assistantId);
+    const source = isMindosBuiltinAssistantId(assistantId) ? 'builtin' : 'custom';
+    const healthIssues = assistantHealthIssues(profile, prompt);
+    const description = firstNonEmptyString(profile.description, prompt.promptPreview, 'Local assistant profile.');
+    return {
+        id: assistantId,
+        name: firstNonEmptyString(profile.name, fallbackName),
+        description,
+        schemaVersion: 1,
+        ...(profile.preferredAgent ? { preferredAgent: profile.preferredAgent } : {}),
+        skills: profile.skills,
+        mcp: profile.mcp,
+        source,
+        deletable: source === 'custom',
+        paths: {
+            root: rootRelPath,
+            profile: profilePath,
+            prompt: promptPath,
+        },
+        prompt: {
+            exists: prompt.exists,
+            ...(prompt.content ? { content: prompt.content } : {}),
+        },
+        health: {
+            state: healthIssues.length > 0 ? 'warning' : 'ready',
+            issues: healthIssues,
+        },
+        promptPath,
+        profilePath,
+        promptReady: prompt.exists && !prompt.tooLarge,
+        profileReady: profile.ready,
+        ...(promptTitle ? { promptTitle } : {}),
+        promptPreview: prompt.promptPreview,
+        ...(profile.error ? { profileError: profile.error } : {}),
+    };
+}
+function readAssistantProfile(mindRoot, profilePath) {
+    const result = {
+        ready: false,
+        exists: false,
+        schemaVersion: 1,
+        skills: [],
+        mcp: [],
+    };
+    let resolvedPath;
+    try {
+        resolvedPath = resolveExistingSafe(mindRoot, profilePath);
+    }
+    catch {
+        return result;
+    }
+    if (!existsSync(resolvedPath))
+        return result;
+    try {
+        if (!lstatSync(resolvedPath).isFile())
+            return result;
+        const parsed = JSON.parse(readFileSync(resolvedPath, 'utf-8'));
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+            return { ...result, ready: true, error: 'invalid_json' };
+        }
+        const record = parsed;
+        const schemaVersion = sanitizeSchemaVersion(record.schemaVersion);
+        return {
+            ready: true,
+            exists: true,
+            name: sanitizeString(record.name, 80),
+            description: sanitizeString(record.description, 280) ?? sanitizeString(record.desc, 280),
+            schemaVersion,
+            preferredAgent: sanitizeString(record.preferredAgent, 120),
+            skills: sanitizeStringArray(record.skills) ?? [],
+            mcp: sanitizeStringArray(record.mcp) ?? [],
+        };
+    }
+    catch (error) {
+        if (error instanceof SyntaxError)
+            return { ...result, ready: true, exists: true, error: 'invalid_json' };
+        return { ...result, ready: true, exists: true, error: 'unreadable' };
+    }
+}
+function readAssistantPrompt(mindRoot, promptPath) {
+    let resolvedPath;
+    try {
+        resolvedPath = resolveExistingSafe(mindRoot, promptPath);
+    }
+    catch {
+        return { exists: false, content: '', promptPreview: '' };
+    }
+    try {
+        if (!existsSync(resolvedPath) || !lstatSync(resolvedPath).isFile()) {
+            return { exists: false, content: '', promptPreview: '' };
+        }
+        const stat = statSync(resolvedPath);
+        if (stat.size > MAX_PROMPT_BYTES) {
+            return {
+                exists: true,
+                content: '',
+                promptPreview: `Prompt is larger than ${Math.round(MAX_PROMPT_BYTES / 1024)} KB. Open the file to inspect it.`,
+                tooLarge: {
+                    sizeBytes: stat.size,
+                    maxBytes: MAX_PROMPT_BYTES,
+                },
+            };
+        }
+        const content = readFileSync(resolvedPath, 'utf-8');
+        return {
+            exists: true,
+            content,
+            promptPreview: makePreview(stripLeadingFrontmatter(content)),
+        };
+    }
+    catch {
+        return { exists: false, content: '', promptPreview: '' };
+    }
+}
+function sanitizeString(value, maxLength) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.trim().replace(/\s+/g, ' ');
+    return normalized ? normalized.slice(0, maxLength) : undefined;
+}
+function sanitizeStringArray(value) {
+    const rawItems = Array.isArray(value)
+        ? value
+        : typeof value === 'string'
+            ? value.split(',')
+            : [];
+    const items = rawItems
+        .map((item) => sanitizeString(item, 96))
+        .filter((item) => Boolean(item));
+    return items.length > 0 ? Array.from(new Set(items)).slice(0, 12) : undefined;
+}
+function sanitizeAssistantId(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.trim().toLowerCase();
+    return SAFE_ASSISTANT_ID.test(normalized) ? normalized : undefined;
+}
+function sanitizeMultiline(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const normalized = value.replace(/\r\n/g, '\n').trim();
+    return normalized ? normalized.slice(0, 64_000) : undefined;
+}
+function sanitizeSchemaVersion(value) {
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < 1)
+        return 1;
+    return value;
+}
+function stripLeadingFrontmatter(content) {
+    const normalized = content.replace(/\r\n/g, '\n');
+    if (!normalized.startsWith('---\n'))
+        return content.trim();
+    const end = normalized.indexOf('\n---', 4);
+    if (end === -1)
+        return content.trim();
+    const afterFence = normalized.slice(end + 4).replace(/^\n+/, '');
+    return afterFence.trim();
+}
+function extractPromptTitle(content) {
+    const match = content.match(/^#\s+(.+?)\s*$/m);
+    return sanitizeString(match?.[1], 100);
+}
+function makePreview(content, maxLength = 180) {
+    const normalized = content
+        .replace(/^#+\s+/gm, '')
+        .replace(/\s+/g, ' ')
+        .trim();
+    if (normalized.length <= maxLength)
+        return normalized;
+    return `${normalized.slice(0, maxLength - 1).trimEnd()}…`;
+}
+function titleizeAssistantId(assistantId) {
+    return assistantId
+        .split('-')
+        .filter(Boolean)
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join(' ') || assistantId;
+}
+function firstNonEmptyString(...values) {
+    return values.find((value) => typeof value === 'string' && value.trim().length > 0)?.trim() ?? '';
+}
+function objectBody(body) {
+    return body && typeof body === 'object' && !Array.isArray(body)
+        ? body
+        : {};
+}
+function ensureAssistantsRoot(mindRoot) {
+    resolveExistingSafe(mindRoot, MINDOS_ASSISTANTS_ROOT);
+    const rootPath = resolveSafe(mindRoot, MINDOS_ASSISTANTS_ROOT);
+    mkdirSync(rootPath, { recursive: true });
+    resolveExistingSafe(mindRoot, MINDOS_ASSISTANTS_ROOT);
+}
+function defaultAssistantPrompt(name, description) {
+    return `# ${name}
+
+## Role
+
+${description || 'Describe what this assistant should help with.'}
+
+## Inputs
+
+- Add the files, notes, or context this assistant should inspect.
+
+## Output
+
+Return a concise, reviewable result.
+
+## Boundaries
+
+- Prefer proposing changes before applying them.
+- Do not read secrets or credentials.
+`;
+}
+function assistantErrorResponse(error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (/access denied|outside root|absolute paths|symlink/i.test(message)) {
+        return json({ error: 'Access denied' }, { status: 403 });
+    }
+    return json({ error: message }, { status: 500 });
+}
+function assistantHealthIssues(profile, prompt) {
+    const issues = [];
+    if (!prompt.exists)
+        issues.push({ code: 'missing_prompt' });
+    if (!profile.exists)
+        issues.push({ code: 'missing_profile' });
+    if (profile.error === 'invalid_json')
+        issues.push({ code: 'invalid_profile' });
+    if (profile.error === 'unreadable')
+        issues.push({ code: 'unreadable_profile' });
+    if (profile.schemaVersion !== 1) {
+        issues.push({ code: 'unsupported_schema', schemaVersion: profile.schemaVersion });
+    }
+    if (prompt.tooLarge) {
+        issues.push({
+            code: 'prompt_too_large',
+            sizeBytes: prompt.tooLarge.sizeBytes,
+            maxBytes: prompt.tooLarge.maxBytes,
+        });
+    }
+    return issues;
+}
+//# sourceMappingURL=assistants.js.map

package/dist/server/handlers/assistants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assistants.js","sourceRoot":"","sources":["../../../src/server/handlers/assistants.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,SAAS,EACT,WAAW,EACX,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAC;AACtF,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAA6B,MAAM,gBAAgB,CAAC;AAEtF,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACjD,MAAM,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,iBAAiB;IACjB,cAAc;IACd,sBAAsB;IACtB,aAAa;IACb,mBAAmB;IACnB,kBAAkB;IAClB,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;CACnB,CAAC,CAAC;AA+EH,MAAM,UAAU,mBAAmB,CACjC,QAAkC;IAElC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC;YACV,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC;SACnD,EAAE,EAAE,OAAO,EAAE,mBAAmB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,IAAa,EACb,QAAkC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,0BAA0B,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,2CAA2C,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;QACpE,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC7D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;QAClE,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC;QACpF,MAAM,OAAO,GAAG;YACd,IAAI;YACJ,WAAW;YACX,aAAa,EAAE,CAAC;YAChB,cAAc;YACd,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAChD,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;SAC3C,CAAC;QACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,sBAAsB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAE7F,aAAa,CACX,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,EACvE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACvC,OAAO,CACR,CAAC;QACF,aAAa,CACX,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,EACpE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,EAC9C,OAAO,CACR,CAAC;QAEF,OAAO,IAAI,CAAC;YACV,EAAE,EAAE,IAAI;YACR,EAAE,EAAE,WAAW;YACf,KAAK,EAAE;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;gBAChD,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC;aAC7C;SACF,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAa,EACb,QAAkC;IAElC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,0BAA0B,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACvE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,CAAC;IAEjD,OAAO,WAAW,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;SAClD,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;SAC5E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,OAAO,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;IACnE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,oBAAoB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,YAAY,GAAG,WAAW,IAAI,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACrE,MAAM,MAAM,GAA0B,0BAA0B,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;IACrG,MAAM,YAAY,GAAG,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,mBAAmB,CACrC,OAAO,CAAC,WAAW,EACnB,MAAM,CAAC,aAAa,EACpB,0BAA0B,CAC3B,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC;QACrD,WAAW;QACX,aAAa,EAAE,CAAC;QAChB,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM;QACN,SAAS,EAAE,MAAM,KAAK,QAAQ;QAC9B,KAAK,EAAE;YACL,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,UAAU;SACnB;QACD,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD;QACD,MAAM,EAAE;YACN,KAAK,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACpD,MAAM,EAAE,YAAY;SACrB;QACD,UAAU;QACV,WAAW;QACX,WAAW,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ;QAC9C,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAcD,SAAS,oBAAoB,CAAC,QAAgB,EAAE,WAAmB;IACjE,MAAM,MAAM,GAA+B;QACzC,KAAK,EAAE,KAAK;QACZ,MAAM,EAAE,KAAK;QACb,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,EAAE;QACV,GAAG,EAAE,EAAE;KACR,CAAC;IACF,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,MAAM,CAAC;IAE7C,IAAI,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,MAAM,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAY,CAAC;QAC1E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACnE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,MAAM,GAAG,MAAiC,CAAC;QACjD,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClE,OAAO;YACL,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;YACrC,WAAW,EAAE,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC;YACxF,aAAa;YACb,cAAc,EAAE,cAAc,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,CAAC;YAC1D,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YAChD,GAAG,EAAE,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE;SAC3C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QACzG,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,UAAkB;IAElB,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACnE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAC3D,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;YACjC,OAAO;gBACL,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,EAAE;gBACX,aAAa,EAAE,yBAAyB,IAAI,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,mCAAmC;gBAC9G,QAAQ,EAAE;oBACR,SAAS,EAAE,IAAI,CAAC,IAAI;oBACpB,QAAQ,EAAE,gBAAgB;iBAC3B;aACF,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,OAAO;YACP,aAAa,EAAE,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;SAC7D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,SAAiB;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;YAClB,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,KAAK,GAAG,QAAQ;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAChF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,OAAO,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvD,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3D,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IAC/C,OAAO,cAAc,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,SAAS,GAAG,GAAG;IACnD,MAAM,UAAU,GAAG,OAAO;SACvB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE,CAAC;IACV,IAAI,UAAU,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,UAAU,CAAC;IACtD,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC;AAC5D,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,OAAO,WAAW;SACf,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC;AAC9B,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAG,MAAiC;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAC7D,CAAC,CAAC,IAA+B;QACjC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC/D,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,WAAmB;IAC/D,OAAO,KAAK,IAAI;;;;EAIhB,WAAW,IAAI,gDAAgD;;;;;;;;;;;;;;CAchE,CAAC;AACF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,oDAAoD,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAmC,EACnC,MAA8C;IAE9C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,KAAK,KAAK,cAAc;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,KAAK,KAAK,YAAY;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC;YACV,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS;YACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/handlers/audit-log.d.ts

@@ -0,0 +1,12 @@
+import type { AgentAuditEvent, AgentAuditInput } from '../../knowledge/audit/index.js';
+/**
+ * Appends a batch of audit events in a single file append (one line per
+ * event). This replaces the previous whole-file rewrite per entry, which made
+ * batched `.agent-log.json` appends O(N^2).
+ */
+export declare function appendAgentAuditEvents(mindRoot: string, inputs: AgentAuditInput[]): AgentAuditEvent[];
+/** Lists audit events newest-first, normalized for the API boundary. */
+export declare function listAgentAuditEventsFromLog(mindRoot: string, limit?: number): AgentAuditEvent[];
+/** Parses raw `.agent-log.json`-style JSONL content leniently into audit inputs. */
+export declare function parseAgentAuditJsonLines(raw: string): AgentAuditInput[];
+//# sourceMappingURL=audit-log.d.ts.map

package/dist/server/handlers/audit-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../../src/server/handlers/audit-log.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAoFvF;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,eAAe,EAAE,CAOrG;AAED,wEAAwE;AACxE,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,eAAe,EAAE,CAa5F;AAED,oFAAoF;AACpF,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,EAAE,CAsBvE"}

package/dist/server/handlers/audit-log.js

@@ -0,0 +1,265 @@
+import { existsSync, readFileSync, rmSync } from 'node:fs';
+import { posix } from 'node:path';
+import { resolveExistingSafe } from '../../foundation/security/index.js';
+import { redactSensitiveObject, redactSensitiveText } from '../../session/redaction.js';
+import { appendJsonlEvents, ensureJsonlStore, readJsonlEvents, writeJsonlMeta, } from './jsonl-log.js';
+/**
+ * Append-only agent audit log backed by the shared JSONL store.
+ *
+ * On-disk format is shared with `packages/web/lib/core/agent-audit-log.ts`:
+ * `.mindos/agent-audit-log.json` holds one normalized event per line
+ * (oldest-first) and `.mindos/agent-audit-log.meta.json` tracks migration and
+ * legacy import counters. Events are redacted/summarized at write time and
+ * defensively re-normalized at read time.
+ */
+const LOG_FILE = '.mindos/agent-audit-log.json';
+const META_FILE = '.mindos/agent-audit-log.meta.json';
+const LEGACY_MD_FILE = 'Agent-Audit.md';
+const LEGACY_JSONL_FILE = '.agent-log.json';
+const MAX_EVENTS = 1000;
+const MAX_MESSAGE_CHARS = 2000;
+const COMPACTION = {
+    maxEvents: MAX_EVENTS,
+    maxBytes: 2_000_000,
+    targetBytes: 1_000_000,
+};
+function logPath(mindRoot) {
+    return resolveExistingSafe(mindRoot, posix.join('.mindos', 'agent-audit-log.json'));
+}
+function metaPath(mindRoot) {
+    return resolveExistingSafe(mindRoot, posix.join('.mindos', 'agent-audit-log.meta.json'));
+}
+function nowIso() {
+    return new Date().toISOString();
+}
+function validIso(ts) {
+    if (!ts)
+        return nowIso();
+    const ms = new Date(ts).getTime();
+    return Number.isFinite(ms) ? new Date(ms).toISOString() : nowIso();
+}
+function normalizeMessage(message) {
+    if (typeof message !== 'string')
+        return undefined;
+    const redacted = redactSensitiveText(message);
+    return redacted.length <= MAX_MESSAGE_CHARS ? redacted : redacted.slice(0, MAX_MESSAGE_CHARS);
+}
+function eventId() {
+    return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+}
+function buildEvent(input) {
+    const result = input.result === 'error' ? 'error' : 'ok';
+    const params = summarizeAuditParams(input.params && typeof input.params === 'object' ? input.params : {});
+    return {
+        id: eventId(),
+        ts: validIso(input.ts),
+        tool: typeof input.tool === 'string' && input.tool.trim() ? input.tool.trim() : 'unknown-tool',
+        params,
+        result,
+        actionSummary: normalizeMessage(input.actionSummary) ?? buildActionSummary(input.tool, params, result, input.message),
+        message: normalizeMessage(input.message),
+        durationMs: typeof input.durationMs === 'number' ? input.durationMs : undefined,
+        agentName: typeof input.agentName === 'string' && input.agentName.trim() ? input.agentName.trim() : undefined,
+        ...(input.debugCapture === 'redacted_raw'
+            ? {
+                rawDebug: redactSensitiveObject({
+                    params: input.params && typeof input.params === 'object' ? input.params : {},
+                    ...(typeof input.message === 'string' ? { message: input.message } : {}),
+                }),
+            }
+            : {}),
+        op: 'append',
+    };
+}
+/**
+ * Appends a batch of audit events in a single file append (one line per
+ * event). This replaces the previous whole-file rewrite per entry, which made
+ * batched `.agent-log.json` appends O(N^2).
+ */
+export function appendAgentAuditEvents(mindRoot, inputs) {
+    const file = logPath(mindRoot);
+    const metaFile = metaPath(mindRoot);
+    importLegacySources(mindRoot);
+    const events = inputs.map(buildEvent);
+    appendJsonlEvents(file, metaFile, events, COMPACTION);
+    return events;
+}
+/** Lists audit events newest-first, normalized for the API boundary. */
+export function listAgentAuditEventsFromLog(mindRoot, limit = 100) {
+    try {
+        importLegacySources(mindRoot);
+        const { events } = readJsonlEvents(logPath(mindRoot), metaPath(mindRoot));
+        const safeLimit = Math.max(1, Math.min(limit, MAX_EVENTS));
+        return events
+            .slice(0, MAX_EVENTS)
+            .map(normalizePersistedEvent)
+            .filter((event) => Boolean(event))
+            .slice(0, safeLimit);
+    }
+    catch {
+        return [];
+    }
+}
+/** Parses raw `.agent-log.json`-style JSONL content leniently into audit inputs. */
+export function parseAgentAuditJsonLines(raw) {
+    const entries = [];
+    for (const line of raw.split('\n')) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#') || trimmed.startsWith('//'))
+            continue;
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+                continue;
+            entries.push({
+                ts: typeof parsed.ts === 'string' ? parsed.ts : nowIso(),
+                tool: typeof parsed.tool === 'string' && parsed.tool.trim() ? parsed.tool : 'unknown-tool',
+                params: parsed.params && typeof parsed.params === 'object' ? parsed.params : {},
+                result: parsed.result === 'error' ? 'error' : 'ok',
+                message: typeof parsed.message === 'string' ? parsed.message : undefined,
+                durationMs: typeof parsed.durationMs === 'number' ? parsed.durationMs : undefined,
+                agentName: typeof parsed.agentName === 'string' ? parsed.agentName : undefined,
+            });
+        }
+        catch {
+            // Ignore malformed lines.
+        }
+    }
+    return entries;
+}
+function parseLegacyMdBlocks(raw) {
+    const blocks = [];
+    const re = /```agent-op\s*\n([\s\S]*?)```/g;
+    let match;
+    while ((match = re.exec(raw)) !== null) {
+        if (!match[1])
+            continue;
+        try {
+            blocks.push(JSON.parse(match[1].trim()));
+        }
+        catch {
+            // Ignore malformed blocks.
+        }
+    }
+    return blocks;
+}
+function toImportedEvent(entry, op, idx) {
+    const tool = typeof entry.tool === 'string' && entry.tool.trim() ? entry.tool.trim() : 'unknown-tool';
+    const result = entry.result === 'error' ? 'error' : 'ok';
+    const params = summarizeAuditParams(entry.params && typeof entry.params === 'object' ? entry.params : {});
+    return {
+        id: `legacy-${Date.now().toString(36)}-${idx.toString(36)}`,
+        ts: validIso(entry.ts),
+        tool,
+        params,
+        result,
+        actionSummary: buildActionSummary(tool, params, result, entry.message),
+        message: normalizeMessage(entry.message),
+        durationMs: typeof entry.durationMs === 'number' ? entry.durationMs : undefined,
+        op,
+    };
+}
+function importLegacySources(mindRoot) {
+    importLegacyFile(mindRoot, LEGACY_MD_FILE, 'mdImportedCount', 'legacy_agent_audit_md_import', parseLegacyMdBlocks);
+    importLegacyFile(mindRoot, LEGACY_JSONL_FILE, 'jsonlImportedCount', 'legacy_agent_log_jsonl_import', (raw) => parseAgentAuditJsonLines(raw));
+}
+function importLegacyFile(mindRoot, legacyFileName, counterKey, op, parse) {
+    try {
+        const legacyPath = resolveExistingSafe(mindRoot, legacyFileName);
+        if (!existsSync(legacyPath))
+            return;
+        const entries = parse(readFileSync(legacyPath, 'utf-8'));
+        if (entries.length === 0)
+            return;
+        const file = logPath(mindRoot);
+        const metaFile = metaPath(mindRoot);
+        const meta = ensureJsonlStore(file, metaFile, { persistIfMissing: true });
+        const importedCount = typeof meta.legacy[counterKey] === 'number' ? meta.legacy[counterKey] : 0;
+        if (entries.length > importedCount) {
+            const imported = entries.slice(importedCount).map((entry, idx) => toImportedEvent(entry, op, idx));
+            appendJsonlEvents(file, metaFile, imported, COMPACTION);
+            meta.legacy = { ...meta.legacy, [counterKey]: entries.length, lastImportedAt: nowIso() };
+            writeJsonlMeta(metaFile, meta);
+        }
+        rmSync(legacyPath, { force: true });
+    }
+    catch {
+        // Legacy import is best-effort and must never break the main flow.
+    }
+}
+function normalizePersistedEvent(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const source = value;
+    const tool = typeof source.tool === 'string' && source.tool.trim() ? source.tool.trim() : 'unknown-tool';
+    const result = source.result === 'error' ? 'error' : 'ok';
+    const params = summarizeAuditParams(source.params && typeof source.params === 'object' ? source.params : {});
+    return {
+        id: typeof source.id === 'string' && source.id ? source.id : eventId(),
+        ts: validIso(source.ts),
+        tool,
+        params,
+        result,
+        actionSummary: normalizeMessage(source.actionSummary) ?? buildActionSummary(tool, params, result, source.message),
+        message: normalizeMessage(source.message),
+        durationMs: typeof source.durationMs === 'number' ? source.durationMs : undefined,
+        agentName: typeof source.agentName === 'string' && source.agentName.trim() ? source.agentName.trim() : undefined,
+        ...(source.rawDebug && typeof source.rawDebug === 'object'
+            ? { rawDebug: redactSensitiveObject(source.rawDebug) }
+            : {}),
+        op: source.op,
+    };
+}
+function summarizeAuditParams(params) {
+    const redacted = redactSensitiveObject(params);
+    return summarizeValue(redacted, 0);
+}
+function summarizeValue(value, depth) {
+    if (typeof value === 'string')
+        return summarizeString(value);
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value !== 'object')
+        return value;
+    if (depth >= 5)
+        return '[max-depth]';
+    if (Array.isArray(value)) {
+        if (value.length > 20)
+            return `[${value.length} items]`;
+        return value.map((item) => summarizeValue(item, depth + 1));
+    }
+    const output = {};
+    for (const [key, nested] of Object.entries(value)) {
+        output[key] = shouldSummarizeAuditField(key, nested)
+            ? `[${String(nested ?? '').length} chars]`
+            : summarizeValue(nested, depth + 1);
+    }
+    return output;
+}
+function shouldSummarizeAuditField(key, value) {
+    if (typeof value !== 'string')
+        return false;
+    // Already-summarized placeholders must stay stable across re-normalization.
+    if (/^\[\d+ (chars|items)\]$/.test(value))
+        return false;
+    return /^(content|text|message|prompt|body|raw|input|output|response|diff)$/i.test(key);
+}
+function summarizeString(value) {
+    const redacted = redactSensitiveText(value);
+    return redacted.length > MAX_MESSAGE_CHARS ? `[${redacted.length} chars]` : redacted;
+}
+function buildActionSummary(tool, params, result, message) {
+    const target = firstString(params.path, params.filePath, params.filename, params.url, params.agent_id, params.agentId);
+    const query = firstString(params.q, params.query);
+    const suffix = target ? ` target=${target}` : query ? ` query=${query}` : '';
+    const note = message ? ` ${normalizeMessage(message) ?? ''}` : '';
+    return `${tool} ${result}${suffix}${note}`.trim();
+}
+function firstString(...values) {
+    for (const value of values) {
+        if (typeof value === 'string' && value.trim())
+            return summarizeString(value.trim());
+    }
+    return undefined;
+}
+//# sourceMappingURL=audit-log.js.map