@integsec/agentic-pentest-proxy 0.2.5 → 0.2.7

package/dist/bin/integsec-agentic-pentest-manifest.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=integsec-agentic-pentest-manifest.d.ts.map

package/dist/bin/integsec-agentic-pentest-manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-manifest.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-manifest.tsx"],"names":[],"mappings":""}

package/dist/bin/integsec-agentic-pentest-manifest.js

@@ -0,0 +1,180 @@
+#!/usr/bin/env node
+import { jsx as _jsx } from "react/jsx-runtime";
+import { render } from "ink";
+import fs from "fs";
+import { Wizard } from "../src/builder/wizard.js";
+import { ReviewDisplay } from "../src/builder/review-display.js";
+import { writeManifest } from "../src/builder/manifest-writer.js";
+import { ScopeManifestSchema } from "../src/manifest-schema.js";
+function parseArgs() {
+    const args = process.argv.slice(2);
+    const mode = (args[0] && !args[0].startsWith("--")) ? args[0] : "new";
+    let fromTemplate;
+    let targetFile;
+    let section;
+    let output;
+    if ((mode === "edit" || mode === "review") && args[1] && !args[1].startsWith("--")) {
+        targetFile = args[1];
+    }
+    for (let i = 1; i < args.length; i++) {
+        if (args[i] === "--from" && args[i + 1]) {
+            fromTemplate = args[i + 1];
+            i++;
+        }
+        else if (args[i] === "--template" && args[i + 1]) {
+            fromTemplate = args[i + 1];
+            i++;
+        }
+        else if (args[i] === "--section" && args[i + 1]) {
+            section = args[i + 1];
+            i++;
+        }
+        else if ((args[i] === "--output" || args[i] === "-o") && args[i + 1]) {
+            output = args[i + 1];
+            i++;
+        }
+        else if (args[i] === "--help" || args[i] === "-h") {
+            return { mode: "help" };
+        }
+    }
+    if (args[0] === "--help" || args[0] === "-h")
+        return { mode: "help" };
+    return { mode, fromTemplate, targetFile, section, output };
+}
+function printHelp() {
+    console.log(`
+IntegSec Agentic Pentest MCP Proxy — Manifest Builder
+
+Usage:
+  integsec-agentic-pentest-manifest [mode] [options]
+
+Modes:
+  new                           Create a new scope manifest (default)
+  edit <file>                   Edit an existing manifest
+  review <file>                 Review a client-submitted manifest
+  serve                         Start the client intake web server
+
+Options:
+  --from <template.json>        Pre-fill wizard from a template (new mode)
+  --section <name>              Jump to a specific section (edit mode)
+  -o, --output <file>           Output file path (default: ./scope-manifest.json)
+  -h, --help                    Show this help message
+
+Serve Options:
+  --template <template.json>    Pre-fill form from a template
+  --host <host>                 Bind address (default: 127.0.0.1)
+  --port <port>                 Port (default: 9471)
+  --tls-cert <path>             TLS certificate (required for non-localhost)
+  --tls-key <path>              TLS private key (required for non-localhost)
+  --timeout <minutes>           Auto-shutdown timeout (default: 60)
+
+Examples:
+  integsec-agentic-pentest-manifest new
+  integsec-agentic-pentest-manifest new --from template.json -o scope.json
+  integsec-agentic-pentest-manifest edit scope.json --section targets
+  integsec-agentic-pentest-manifest review submission.pending.json
+  integsec-agentic-pentest-manifest serve --template scope-template.json
+`);
+}
+function loadTemplate(filePath) {
+    const content = fs.readFileSync(filePath, "utf-8");
+    return JSON.parse(content);
+}
+const config = parseArgs();
+if (config.mode === "help") {
+    printHelp();
+    process.exit(0);
+}
+if (config.mode === "new") {
+    const initial = config.fromTemplate ? loadTemplate(config.fromTemplate) : undefined;
+    const outputPath = config.output ?? "./scope-manifest.json";
+    const { unmount } = render(_jsx(Wizard, { initial: initial, onFinish: (manifest) => {
+            unmount();
+            try {
+                writeManifest(manifest, outputPath);
+                console.log(`\n✓ Manifest written to ${outputPath}`);
+            }
+            catch (err) {
+                console.error(`\n✗ ${err.message}`);
+                process.exit(1);
+            }
+        } }));
+}
+else if (config.mode === "edit") {
+    if (!config.targetFile) {
+        console.error("Error: edit mode requires a file path. Usage: integsec-agentic-pentest-manifest edit <file>");
+        process.exit(1);
+    }
+    const content = fs.readFileSync(config.targetFile, "utf-8");
+    const manifest = ScopeManifestSchema.parse(JSON.parse(content));
+    const outputPath = config.output ?? config.targetFile;
+    const { unmount } = render(_jsx(Wizard, { initial: manifest, onFinish: (updated) => {
+            unmount();
+            try {
+                writeManifest(updated, outputPath, { force: true });
+                console.log(`\n✓ Manifest updated at ${outputPath}`);
+            }
+            catch (err) {
+                console.error(`\n✗ ${err.message}`);
+                process.exit(1);
+            }
+        } }));
+}
+else if (config.mode === "review") {
+    if (!config.targetFile) {
+        console.error("Error: review mode requires a file path. Usage: integsec-agentic-pentest-manifest review <file>");
+        process.exit(1);
+    }
+    const content = fs.readFileSync(config.targetFile, "utf-8");
+    const manifest = ScopeManifestSchema.parse(JSON.parse(content));
+    const { unmount } = render(_jsx(ReviewDisplay, { manifest: manifest, sourcePath: config.targetFile, onDone: () => {
+            unmount();
+            process.exit(0);
+        } }));
+}
+else if (config.mode === "serve") {
+    const template = config.fromTemplate ? loadTemplate(config.fromTemplate) : undefined;
+    // Parse serve-specific args
+    const args = process.argv.slice(2);
+    let host = "127.0.0.1";
+    let port = 9471;
+    let tlsCert;
+    let tlsKey;
+    let timeout = 60;
+    for (let i = 0; i < args.length; i++) {
+        if (args[i] === "--host" && args[i + 1]) {
+            host = args[i + 1];
+            i++;
+        }
+        if (args[i] === "--port" && args[i + 1]) {
+            port = parseInt(args[i + 1], 10);
+            i++;
+        }
+        if (args[i] === "--tls-cert" && args[i + 1]) {
+            tlsCert = args[i + 1];
+            i++;
+        }
+        if (args[i] === "--tls-key" && args[i + 1]) {
+            tlsKey = args[i + 1];
+            i++;
+        }
+        if (args[i] === "--timeout" && args[i + 1]) {
+            timeout = parseInt(args[i + 1], 10);
+            i++;
+        }
+        if (args[i] === "--template" && args[i + 1]) {
+            i++;
+        } // already handled by fromTemplate
+    }
+    const { startServer } = await import("../src/builder/web/server.js");
+    startServer({
+        port,
+        host,
+        template,
+        outputDir: config.output ?? "./submissions",
+        tlsCert,
+        tlsKey,
+        timeoutMinutes: timeout,
+    });
+}
+//# sourceMappingURL=integsec-agentic-pentest-manifest.js.map

package/dist/bin/integsec-agentic-pentest-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-manifest.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-manifest.tsx"],"names":[],"mappings":";;AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC;AAC7B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAGhE,SAAS,SAAS;IAOhB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAE7E,IAAI,YAAgC,CAAC;IACrC,IAAI,UAA8B,CAAC;IACnC,IAAI,OAA2B,CAAC;IAChC,IAAI,MAA0B,CAAC;IAE/B,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACnF,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,YAAY,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aACxE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,YAAY,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aACjF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aAC3E,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aAC/F,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,CAAC;IACjF,CAAC;IAED,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAEtE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAA2B,CAAC;AACvD,CAAC;AAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;AAE3B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC3B,SAAS,EAAE,CAAC;IACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,uBAAuB,CAAC;IAE5D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CACxB,KAAC,MAAM,IACL,OAAO,EAAE,OAAO,EAChB,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE;YACrB,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,GACD,CACH,CAAC;AACJ,CAAC;KAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,6FAA6F,CAAC,CAAC;QAC7G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC;IAEtD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CACxB,KAAC,MAAM,IACL,OAAO,EAAE,QAAQ,EACjB,QAAQ,EAAE,CAAC,OAAO,EAAE,EAAE;YACpB,OAAO,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,OAAO,CAAC,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC,GACD,CACH,CAAC;AACJ,CAAC;KAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,iGAAiG,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAEhE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CACxB,KAAC,aAAa,IACZ,QAAQ,EAAE,QAAQ,EAClB,UAAU,EAAE,MAAM,CAAC,UAAU,EAC7B,MAAM,EAAE,GAAG,EAAE;YACX,OAAO,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,GACD,CACH,CAAC;AACJ,CAAC;KAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAErF,4BAA4B;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,WAAW,CAAC;IACvB,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,OAA2B,CAAC;IAChC,IAAI,MAA0B,CAAC;IAC/B,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QACrE,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QACnF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAC1E,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QACzF,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC,CAAC,kCAAkC;IAC1F,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;IACrE,WAAW,CAAC;QACV,IAAI;QACJ,IAAI;QACJ,QAAQ;QACR,SAAS,EAAE,MAAM,CAAC,MAAM,IAAI,eAAe;QAC3C,OAAO;QACP,MAAM;QACN,cAAc,EAAE,OAAO;KACxB,CAAC,CAAC;AACL,CAAC"}

package/dist/bin/integsec-agentic-pentest-proxy.d.ts

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-export {};
+import "dotenv/config";
 //# sourceMappingURL=integsec-agentic-pentest-proxy.d.ts.map

package/dist/bin/integsec-agentic-pentest-proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integsec-agentic-pentest-proxy.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":""}
+{"version":3,"file":"integsec-agentic-pentest-proxy.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC"}

package/dist/bin/integsec-agentic-pentest-proxy.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import "dotenv/config";
 import { loadConfig } from "../src/config.js";
 import { loadManifest } from "../src/manifest.js";
 import { ScopeEnforcementProxy } from "../src/proxy.js";
@@ -9,6 +10,22 @@ import { CloudWatchAuditLogger } from "../src/audit/cloudwatch.js";
 import { AzureMonitorAuditLogger } from "../src/audit/azure-monitor.js";
 import { GcpAuditLogger } from "../src/audit/gcp-logging.js";
 async function main() {
+    if (process.argv.includes("--help") || process.argv.includes("-h")) {
+        console.log(`IntegSec Agentic Pentest Proxy
+
+Every MCP tool call is checked against your scope manifest before forwarding.
+
+Get started:
+  1. integsec-agentic-pentest-manifest new -o scope.json
+  2. integsec-agentic-pentest-setup --name my-tool --manifest ./scope.json -- <tool-command> [args...]
+  3. Paste the generated mcpServers entry into your MCP client's configuration.
+  4. integsec-agentic-pentest-tui --audit-path ./audit
+
+The proxy starts when your MCP client launches its configured tool.
+Docs: https://github.com/IntegSec/agentic-pentest-proxy#quick-start
+`);
+        return;
+    }
     console.error("[integsec-agentic-pentest-proxy] Starting...");
     const config = loadConfig();
     const manifest = await loadManifest();
@@ -22,11 +39,22 @@ async function main() {
         auditLogger.addBackend(new CloudWatchAuditLogger(config.awsLogGroup, config.awsRegion));
         console.error(`[integsec-agentic-pentest-proxy] CloudWatch logging enabled: ${config.awsLogGroup}`);
     }
-    if (config.azureLogWorkspaceId && config.azureDcrImmutableId) {
-        auditLogger.addBackend(new AzureMonitorAuditLogger(config.azureLogWorkspaceId, config.azureDcrImmutableId, config.azureDcrStreamName));
+    if (config.azureLogWorkspaceId && !config.azureLogIngestionEndpoint) {
+        throw new Error("AZURE_LOG_WORKSPACE_ID cannot be used as an ingestion endpoint; set AZURE_LOG_INGESTION_ENDPOINT from the DCR or DCE");
+    }
+    if (config.azureLogIngestionEndpoint && config.azureDcrImmutableId) {
+        auditLogger.addBackend(new AzureMonitorAuditLogger(config.azureLogIngestionEndpoint, config.azureDcrImmutableId, config.azureDcrStreamName));
         console.error("[integsec-agentic-pentest-proxy] Azure Monitor logging enabled");
     }
     if (config.gcpProject) {
+        try {
+            const moduleName = "@google-cloud/logging";
+            await import(/* @vite-ignore */ moduleName);
+        }
+        catch {
+            throw new Error("GOOGLE_CLOUD_PROJECT is set but @google-cloud/logging is unavailable. " +
+                "Install it alongside the proxy before starting GCP audit logging.");
+        }
         auditLogger.addBackend(new GcpAuditLogger(config.gcpProject));
         console.error("[integsec-agentic-pentest-proxy] GCP Cloud Logging enabled");
     }
@@ -35,7 +63,7 @@ async function main() {
             console.error("[integsec-agentic-pentest-proxy] ERROR: UPSTREAM_MCP_COMMAND is required for stdio transport");
             process.exit(1);
         }
-        await runStdioProxy(proxy, config.upstreamMcpCommand, config.upstreamMcpArgs);
+        await runStdioProxy(proxy, config.upstreamMcpCommand, config.upstreamMcpArgs, config.upstreamStartupDelayMs);
     }
     else if (config.transport === "sse") {
         if (!config.upstreamMcpUrl) {
@@ -49,7 +77,7 @@ async function main() {
             console.error("[integsec-agentic-pentest-proxy] ERROR: UPSTREAM_MCP_URL is required for HTTP transport");
             process.exit(1);
         }
-        await runHttpProxy(proxy, config.upstreamMcpUrl, config.proxyPort);
+        await runHttpProxy(proxy, config.upstreamMcpUrl, config.proxyPort, config.proxyHost, config.proxyAuthToken);
     }
 }
 main().catch((err) => {

package/dist/bin/integsec-agentic-pentest-proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"integsec-agentic-pentest-proxy.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,OAAO,CAAC,KAAK,CAAC,gEAAgE,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,CAAC,iBAAiB,CAAC,KAAK,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC;IACnI,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,WAAW,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,gEAAgE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7D,WAAW,CAAC,UAAU,CACpB,IAAI,uBAAuB,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CAC/G,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,WAAW,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,eAAe,CAAC,CAAC;IAChF,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"integsec-agentic-pentest-proxy.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-proxy.ts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;CAYf,CAAC,CAAC;QACC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAE9D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,OAAO,CAAC,KAAK,CAAC,gEAAgE,QAAQ,CAAC,aAAa,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7H,OAAO,CAAC,KAAK,CAAC,4CAA4C,QAAQ,CAAC,iBAAiB,CAAC,KAAK,OAAO,QAAQ,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC;IACnI,OAAO,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAEjF,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;IAE3C,mCAAmC;IACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,WAAW,CAAC,UAAU,CAAC,IAAI,qBAAqB,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QACxF,OAAO,CAAC,KAAK,CAAC,gEAAgE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;IAC1I,CAAC;IACD,IAAI,MAAM,CAAC,yBAAyB,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACnE,WAAW,CAAC,UAAU,CACpB,IAAI,uBAAuB,CAAC,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,kBAAkB,CAAC,CACrH,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YAC3C,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CACb,wEAAwE;gBACxE,mEAAmE,CACpE,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,UAAU,CAAC,IAAI,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,8FAA8F,CAAC,CAAC;YAC9G,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,aAAa,CACjB,KAAK,EACL,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,sBAAsB,CAC9B,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;YACxG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,yFAAyF,CAAC,CAAC;YACzG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iDAAiD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/bin/integsec-agentic-pentest-setup.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=integsec-agentic-pentest-setup.d.ts.map

package/dist/bin/integsec-agentic-pentest-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-setup.d.ts","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-setup.ts"],"names":[],"mappings":""}

package/dist/bin/integsec-agentic-pentest-setup.js

@@ -0,0 +1,92 @@
+#!/usr/bin/env node
+import { existsSync, statSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+const HELP = `IntegSec Agentic Pentest Proxy - add an MCP tool
+
+Usage:
+  integsec-agentic-pentest-setup --name <name> --manifest <scope.json> [--audit-dir <dir>] -- <command> [args...]
+  integsec-agentic-pentest-setup --name <name> --manifest <scope.json> [--audit-dir <dir>] --sse <url>
+
+Examples:
+  integsec-agentic-pentest-setup --name scanner-scoped --manifest ./scope.json -- npx -y @example/scanner-mcp
+  integsec-agentic-pentest-setup --name burp-scoped --manifest ./scope.json --sse http://127.0.0.1:9876
+
+Paste the printed mcpServers entry into your MCP client's config. Repeat for each tool.
+Audit logs default to an audit directory beside your manifest.
+`;
+function fail(message) {
+    console.error(`Setup error: ${message}\n\n${HELP}`);
+    process.exit(1);
+}
+function main() {
+    const args = process.argv.slice(2);
+    if (args.includes("--help") || args.includes("-h")) {
+        console.log(HELP);
+        return;
+    }
+    const separator = args.indexOf("--");
+    const options = separator === -1 ? args : args.slice(0, separator);
+    const command = separator === -1 ? [] : args.slice(separator + 1);
+    let name;
+    let manifest;
+    let sse;
+    let auditDir;
+    for (let i = 0; i < options.length; i += 2) {
+        const key = options[i];
+        const value = options[i + 1];
+        if (!value || value.startsWith("--"))
+            fail(`Missing value for ${key}.`);
+        if (key === "--name")
+            name = value;
+        else if (key === "--manifest")
+            manifest = value;
+        else if (key === "--audit-dir")
+            auditDir = value;
+        else if (key === "--sse")
+            sse = value;
+        else
+            fail(`Unknown option ${key}.`);
+    }
+    if (!name?.trim())
+        fail("--name is required.");
+    if (!manifest?.trim())
+        fail("--manifest is required.");
+    if ((sse && command.length > 0) || (!sse && command.length === 0)) {
+        fail("Provide either --sse <url> or a tool command after --.");
+    }
+    const manifestPath = resolve(manifest);
+    if (!existsSync(manifestPath) || !statSync(manifestPath).isFile()) {
+        fail(`Manifest file was not found: ${manifestPath}`);
+    }
+    if (sse) {
+        let url;
+        try {
+            url = new URL(sse);
+        }
+        catch {
+            fail("--sse must be a valid http:// or https:// URL.");
+        }
+        if (url.protocol !== "http:" && url.protocol !== "https:") {
+            fail("--sse must be a valid http:// or https:// URL.");
+        }
+    }
+    const env = {
+        SCOPE_MANIFEST_PATH: manifestPath,
+        MCP_TRANSPORT: sse ? "sse" : "stdio",
+        AUDIT_LOG_PATH: auditDir ? resolve(auditDir) : resolve(dirname(manifestPath), "audit"),
+    };
+    if (sse) {
+        env.UPSTREAM_MCP_URL = sse;
+    }
+    else {
+        env.UPSTREAM_MCP_COMMAND = command[0];
+        env.UPSTREAM_MCP_ARGS_JSON = JSON.stringify(command.slice(1));
+    }
+    console.log(JSON.stringify({ mcpServers: { [name]: {
+                command: "integsec-agentic-pentest-proxy",
+                env,
+            } } }, null, 2));
+    console.error(`\nMonitor: integsec-agentic-pentest-tui --audit-path "${env.AUDIT_LOG_PATH}"`);
+}
+main();
+//# sourceMappingURL=integsec-agentic-pentest-setup.js.map

package/dist/bin/integsec-agentic-pentest-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"integsec-agentic-pentest-setup.js","sourceRoot":"","sources":["../../bin/integsec-agentic-pentest-setup.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,MAAM,IAAI,GAAG;;;;;;;;;;;;CAYZ,CAAC;AAEF,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,CAAC,KAAK,CAAC,gBAAgB,OAAO,OAAO,IAAI,EAAE,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,IAAI;IACX,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,IAAwB,CAAC;IAC7B,IAAI,QAA4B,CAAC;IACjC,IAAI,GAAuB,CAAC;IAC5B,IAAI,QAA4B,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,qBAAqB,GAAG,GAAG,CAAC,CAAC;QACxE,IAAI,GAAG,KAAK,QAAQ;YAAE,IAAI,GAAG,KAAK,CAAC;aAC9B,IAAI,GAAG,KAAK,YAAY;YAAE,QAAQ,GAAG,KAAK,CAAC;aAC3C,IAAI,GAAG,KAAK,aAAa;YAAE,QAAQ,GAAG,KAAK,CAAC;aAC5C,IAAI,GAAG,KAAK,OAAO;YAAE,GAAG,GAAG,KAAK,CAAC;;YACjC,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE;QAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAClE,IAAI,CAAC,gCAAgC,YAAY,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1D,IAAI,CAAC,gDAAgD,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAA2B;QAClC,mBAAmB,EAAE,YAAY;QACjC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;QACpC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;KACvF,CAAC;IACF,IAAI,GAAG,EAAE,CAAC;QACR,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,oBAAoB,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACtC,GAAG,CAAC,sBAAsB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE;gBACjD,OAAO,EAAE,gCAAgC;gBACzC,GAAG;aACJ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjB,OAAO,CAAC,KAAK,CAAC,yDAAyD,GAAG,CAAC,cAAc,GAAG,CAAC,CAAC;AAChG,CAAC;AAED,IAAI,EAAE,CAAC"}

package/dist/src/audit/azure-monitor.d.ts

@@ -9,13 +9,13 @@ import type { AuditBackend } from "./index.js";
  * disabled.
  */
 export declare class AzureMonitorAuditLogger implements AuditBackend {
-    private workspaceId;
+    private endpoint;
     private dcrImmutableId;
     private streamName;
     private buffer;
     /** Set to false when the SDKs cannot be loaded so we never crash. */
     private enabled;
-    constructor(workspaceId: string, dcrImmutableId: string, streamName: string);
+    constructor(endpoint: string, dcrImmutableId: string, streamName: string);
     log(entry: AuditEntry): Promise<void>;
     flush(): Promise<void>;
 }

package/dist/src/audit/azure-monitor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"azure-monitor.d.ts","sourceRoot":"","sources":["../../../src/audit/azure-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;GAOG;AACH,qBAAa,uBAAwB,YAAW,YAAY;IAC1D,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAoB;IAClC,qEAAqE;IACrE,OAAO,CAAC,OAAO,CAAQ;gBAEX,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAMrE,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA4C7B"}
+{"version":3,"file":"azure-monitor.d.ts","sourceRoot":"","sources":["../../../src/audit/azure-monitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;GAOG;AACH,qBAAa,uBAAwB,YAAW,YAAY;IAC1D,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,MAAM,CAAoB;IAClC,qEAAqE;IACrE,OAAO,CAAC,OAAO,CAAQ;gBAEX,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;IAUlE,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA0C7B"}

package/dist/src/audit/azure-monitor.js

@@ -7,14 +7,18 @@
  * disabled.
  */
 export class AzureMonitorAuditLogger {
-    workspaceId;
+    endpoint;
     dcrImmutableId;
     streamName;
     buffer = [];
     /** Set to false when the SDKs cannot be loaded so we never crash. */
     enabled = true;
-    constructor(workspaceId, dcrImmutableId, streamName) {
-        this.workspaceId = workspaceId;
+    constructor(endpoint, dcrImmutableId, streamName) {
+        const parsed = new URL(endpoint);
+        if (parsed.protocol !== "https:" || !parsed.hostname.endsWith(".monitor.azure.com")) {
+            throw new Error("AZURE_LOG_INGESTION_ENDPOINT must be an HTTPS Azure Monitor ingestion endpoint");
+        }
+        this.endpoint = parsed.origin;
         this.dcrImmutableId = dcrImmutableId;
         this.streamName = streamName;
     }
@@ -45,9 +49,8 @@ export class AzureMonitorAuditLogger {
         }
         const { LogsIngestionClient } = ingestionModule;
         const { DefaultAzureCredential } = identityModule;
-        const endpoint = `https://${this.workspaceId}.ingest.monitor.azure.com`;
         const credential = new DefaultAzureCredential();
-        const client = new LogsIngestionClient(endpoint, credential);
+        const client = new LogsIngestionClient(this.endpoint, credential);
         try {
             // The SDK types require Record<string, unknown>[] — cast via unknown.
             await client.upload(this.dcrImmutableId, this.streamName, toSend);

package/dist/src/audit/azure-monitor.js.map

@@ -1 +1 @@
-{"version":3,"file":"azure-monitor.js","sourceRoot":"","sources":["../../../src/audit/azure-monitor.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAC1B,WAAW,CAAS;IACpB,cAAc,CAAS;IACvB,UAAU,CAAS;IACnB,MAAM,GAAiB,EAAE,CAAC;IAClC,qEAAqE;IAC7D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,WAAmB,EAAE,cAAsB,EAAE,UAAkB;QACzE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,eAA0D,CAAC;QAC/D,IAAI,cAAgD,CAAC;QAErD,IAAI,CAAC;YACH,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpD,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,iBAAiB,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,+EAA+E;gBAC7E,qDAAqD,CACxD,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,eAAe,CAAC;QAChD,MAAM,EAAE,sBAAsB,EAAE,GAAG,cAAc,CAAC;QAElD,MAAM,QAAQ,GAAG,WAAW,IAAI,CAAC,WAAW,2BAA2B,CAAC;QACxE,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE7D,IAAI,CAAC;YACH,sEAAsE;YACtE,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,UAAU,EACf,MAA8C,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YAChE,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"azure-monitor.js","sourceRoot":"","sources":["../../../src/audit/azure-monitor.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,OAAO,uBAAuB;IAC1B,QAAQ,CAAS;IACjB,cAAc,CAAS;IACvB,UAAU,CAAS;IACnB,MAAM,GAAiB,EAAE,CAAC;IAClC,qEAAqE;IAC7D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,QAAgB,EAAE,cAAsB,EAAE,UAAkB;QACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,eAA0D,CAAC;QAC/D,IAAI,cAAgD,CAAC;QACrD,IAAI,CAAC;YACH,CAAC,eAAe,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACpD,MAAM,CAAC,0BAA0B,CAAC;gBAClC,MAAM,CAAC,iBAAiB,CAAC;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,+EAA+E;gBAC7E,qDAAqD,CACxD,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,eAAe,CAAC;QAChD,MAAM,EAAE,sBAAsB,EAAE,GAAG,cAAc,CAAC;QAElD,MAAM,UAAU,GAAG,IAAI,sBAAsB,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,sEAAsE;YACtE,MAAM,MAAM,CAAC,MAAM,CACjB,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,UAAU,EACf,MAA8C,CAC/C,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAC;YAChE,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/src/audit/cloudwatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudwatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cloudwatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;GAMG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAoB;IAClC,oEAAoE;IACpE,OAAO,CAAC,OAAO,CAAQ;gBAEX,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAKvC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAyE7B"}
+{"version":3,"file":"cloudwatch.d.ts","sourceRoot":"","sources":["../../../src/audit/cloudwatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;GAMG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,MAAM,CAAoB;IAClC,oEAAoE;IACpE,OAAO,CAAC,OAAO,CAAQ;gBAEX,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAKvC,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAsE7B"}

package/dist/src/audit/cloudwatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudwatch.js","sourceRoot":"","sources":["../../../src/audit/cloudwatch.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACxB,QAAQ,CAAS;IACjB,MAAM,CAAqB;IAC3B,MAAM,GAAiB,EAAE,CAAC;IAClC,oEAAoE;IAC5D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,QAAgB,EAAE,MAAe;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,GAAqD,CAAC;QAC1D,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,4EAA4E;gBAC1E,uCAAuC,CAC1C,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EACJ,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,GAAG,GAAG,CAAC;QAER,MAAM,MAAM,GAAG,IAAI,oBAAoB,CACrC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;QAEF,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,SAAS,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;QACjE,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,4CAA4C;YAC5C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YAC/C,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,sBAAsB,CAAC;oBACzB,YAAY,EAAE,IAAI,CAAC,QAAQ;oBAC3B,aAAa,EAAE,SAAS;iBACzB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YAC/C,CAAC;YAED,gCAAgC;YAChC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,mBAAmB,CAAC;gBACtB,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,aAAa,EAAE,SAAS;gBACxB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;oBAC9C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC/B,CAAC,CAAC;aACJ,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC9D,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,MAAM,IAAI,GAAG;QACZ,GAAwB,CAAC,IAAI,KAAK,gCAAgC,CACpE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"cloudwatch.js","sourceRoot":"","sources":["../../../src/audit/cloudwatch.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,MAAM,OAAO,qBAAqB;IACxB,QAAQ,CAAS;IACjB,MAAM,CAAqB;IAC3B,MAAM,GAAiB,EAAE,CAAC;IAClC,oEAAoE;IAC5D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,QAAgB,EAAE,MAAe;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,GAAqD,CAAC;QAC1D,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,4EAA4E;gBAC1E,uCAAuC,CAC1C,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EACJ,oBAAoB,EACpB,qBAAqB,EACrB,sBAAsB,EACtB,mBAAmB,GACpB,GAAG,GAAG,CAAC;QACR,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAEpF,wEAAwE;QACxE,4DAA4D;QAC5D,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,IAAI,SAAS,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa;QACjE,MAAM,SAAS,GAAG,GAAG,YAAY,IAAI,IAAI,EAAE,CAAC;QAE5C,IAAI,CAAC;YACH,4CAA4C;YAC5C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAChF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YAC/C,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,sBAAsB,CAAC;oBACzB,YAAY,EAAE,IAAI,CAAC,QAAQ;oBAC3B,aAAa,EAAE,SAAS;iBACzB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC;oBAAE,MAAM,GAAG,CAAC;YAC/C,CAAC;YAED,gCAAgC;YAChC,MAAM,MAAM,CAAC,IAAI,CACf,IAAI,mBAAmB,CAAC;gBACtB,YAAY,EAAE,IAAI,CAAC,QAAQ;gBAC3B,aAAa,EAAE,SAAS;gBACxB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;oBAChC,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;oBAC9C,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC/B,CAAC,CAAC;aACJ,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC9D,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,GAAG,KAAK,IAAI;QACZ,MAAM,IAAI,GAAG;QACZ,GAAyB,CAAC,IAAI,KAAK,gCAAgC,CACrE,CAAC;AACJ,CAAC"}

package/dist/src/audit/gcp-logging.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-logging.d.ts","sourceRoot":"","sources":["../../../src/audit/gcp-logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAI/C;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,YAAY;IACjD,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,MAAM,CAAoB;IAClC,oEAAoE;IACpE,OAAO,CAAC,OAAO,CAAQ;gBAEX,SAAS,CAAC,EAAE,MAAM;IAIxB,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAqD7B"}
+{"version":3,"file":"gcp-logging.d.ts","sourceRoot":"","sources":["../../../src/audit/gcp-logging.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAiB/C;;;;;;;;;;GAUG;AACH,qBAAa,cAAe,YAAW,YAAY;IACjD,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,MAAM,CAAoB;IAClC,oEAAoE;IACpE,OAAO,CAAC,OAAO,CAAQ;gBAEX,SAAS,CAAC,EAAE,MAAM;IAIxB,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAKrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAgD7B"}

package/dist/src/audit/gcp-logging.js

@@ -30,7 +30,8 @@ export class GcpAuditLogger {
         const toSend = this.buffer.splice(0);
         let sdk;
         try {
-            sdk = await import("@google-cloud/logging");
+            const moduleName = "@google-cloud/logging";
+            sdk = await import(/* @vite-ignore */ moduleName);
         }
         catch {
             console.warn("[GcpAuditLogger] @google-cloud/logging is not installed. " +
@@ -49,13 +50,11 @@ export class GcpAuditLogger {
                 const severity = entry.decision.startsWith("BLOCKED") ? "WARNING" : "INFO";
                 return log.entry({
                     severity,
-                    resource: {
-                        type: "global",
-                        labels: {
-                            engagement_id: entry.engagement_id,
-                            client: entry.client,
-                        },
+                    labels: {
+                        engagement_id: entry.engagement_id,
+                        client: entry.client,
                     },
+                    resource: { type: "global" },
                 }, entry);
             });
             await log.write(gcpEntries);

package/dist/src/audit/gcp-logging.js.map

@@ -1 +1 @@
-{"version":3,"file":"gcp-logging.js","sourceRoot":"","sources":["../../../src/audit/gcp-logging.ts"],"names":[],"mappings":"AAGA,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,CAAqB;IAC9B,MAAM,GAAiB,EAAE,CAAC;IAClC,oEAAoE;IAC5D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,GAA2C,CAAC;QAChD,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,2DAA2D;gBACzD,gCAAgC,CACnC,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAExB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS;YAClC,CAAC,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAElB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;gBAE3E,OAAO,GAAG,CAAC,KAAK,CACd;oBACE,QAAQ;oBACR,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE;4BACN,aAAa,EAAE,KAAK,CAAC,aAAa;4BAClC,MAAM,EAAE,KAAK,CAAC,MAAM;yBACrB;qBACF;iBACF,EACD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"gcp-logging.js","sourceRoot":"","sources":["../../../src/audit/gcp-logging.ts"],"names":[],"mappings":"AAGA,MAAM,QAAQ,GAAG,iBAAiB,CAAC;AAenC;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAc;IACjB,SAAS,CAAqB;IAC9B,MAAM,GAAiB,EAAE,CAAC;IAClC,oEAAoE;IAC5D,OAAO,GAAG,IAAI,CAAC;IAEvB,YAAY,SAAkB;QAC5B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEtD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAErC,IAAI,GAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,uBAAuB,CAAC;YAC3C,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,UAAU,CAAqB,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CACV,2DAA2D;gBACzD,gCAAgC,CACnC,CAAC;YACF,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;YACrB,sEAAsE;YACtE,OAAO;QACT,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QACxB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS;YAClC,CAAC,CAAC,IAAI,OAAO,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5C,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC3E,OAAO,GAAG,CAAC,KAAK,CACd;oBACE,QAAQ;oBACR,MAAM,EAAE;wBACN,aAAa,EAAE,KAAK,CAAC,aAAa;wBAClC,MAAM,EAAE,KAAK,CAAC,MAAM;qBACrB;oBACD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;iBAC7B,EACD,KAAK,CACN,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;YACvD,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF"}

package/dist/src/audit/index.d.ts

@@ -18,9 +18,16 @@ export interface AuditBackend {
  */
 export declare class AuditLogger {
     private backends;
+    private local;
     private flushIntervalMs;
     private timer;
     constructor(localPath: string, flushIntervalMs?: number);
+    /**
+     * Flush only the local JSONL backend. The proxy calls this after every
+     * decision so the on-disk trail is complete even if the process is killed
+     * (e.g. TerminateProcess on Windows); cloud backends keep batching.
+     */
+    flushLocal(): Promise<void>;
     /**
      * Register an additional backend (e.g. a cloud logging sink).
      */

package/dist/src/audit/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,YAAY,EAAE,UAAU,EAAE,CAAC;AAE3B;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAID;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,KAAK,CAA+C;gBAEhD,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM;IAMvD;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIvC;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;;;OAIG;IACG,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3C;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,YAAY,EAAE,UAAU,EAAE,CAAC;AAI3B;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED;;;;;;;;GAQG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAsB;IACtC,OAAO,CAAC,KAAK,CAAmB;IAChC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,KAAK,CAA+C;gBAEhD,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM;IAOvD;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC;;OAEG;IACH,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,IAAI;IAIvC;;OAEG;IACH,KAAK,IAAI,IAAI;IASb;;;;OAIG;IACG,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAY3C;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAY5B;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;CAO5B"}

package/dist/src/audit/index.js

@@ -11,12 +11,22 @@ const DEFAULT_FLUSH_INTERVAL_MS = 5000;
  */
 export class AuditLogger {
     backends = [];
+    local;
     flushIntervalMs;
     timer = null;
     constructor(localPath, flushIntervalMs) {
         this.flushIntervalMs = flushIntervalMs ?? DEFAULT_FLUSH_INTERVAL_MS;
         // Local backend is always present
-        this.backends.push(new LocalAuditLogger(localPath));
+        this.local = new LocalAuditLogger(localPath);
+        this.backends.push(this.local);
+    }
+    /**
+     * Flush only the local JSONL backend. The proxy calls this after every
+     * decision so the on-disk trail is complete even if the process is killed
+     * (e.g. TerminateProcess on Windows); cloud backends keep batching.
+     */
+    async flushLocal() {
+        await this.local.flush();
     }
     /**
      * Register an additional backend (e.g. a cloud logging sink).

package/dist/src/audit/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAY9C,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAEvC;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACd,QAAQ,GAAmB,EAAE,CAAC;IAC9B,eAAe,CAAS;IACxB,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAAY,SAAiB,EAAE,eAAwB;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,yBAAyB,CAAC;QACpE,kCAAkC;QAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAqB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,kBAAkB;QAC5B,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAI9C,MAAM,yBAAyB,GAAG,IAAI,CAAC;AAUvC;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IACd,QAAQ,GAAmB,EAAE,CAAC;IAC9B,KAAK,CAAmB;IACxB,eAAe,CAAS;IACxB,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAAY,SAAiB,EAAE,eAAwB;QACrD,IAAI,CAAC,eAAe,GAAG,eAAe,IAAI,yBAAyB,CAAC;QACpE,kCAAkC;QAClC,IAAI,CAAC,KAAK,GAAG,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,OAAqB;QAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,kBAAkB;QAC5B,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC3B,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CAAC,KAAiB;QACzB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/src/audit/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/audit/local.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,6DAA6D;IAC7D,OAAO,CAAC,MAAM,CAAwC;gBAE1C,QAAQ,EAAE,MAAM;IAI5B;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAsB7B"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../../src/audit/local.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAS;IACzB,6DAA6D;IAC7D,OAAO,CAAC,MAAM,CAAwC;gBAE1C,QAAQ,EAAE,MAAM;IAI5B;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAkB7B"}

package/dist/src/audit/local.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { engagementFileStem } from "../safe-filename.js";
 /**
  * LocalAuditLogger buffers AuditEntry objects in memory, keyed by engagement_id,
  * and writes them to JSONL files on disk when flush() is called.
@@ -39,7 +40,7 @@ export class LocalAuditLogger {
             if (entries.length === 0) {
                 continue;
             }
-            const filePath = path.join(this.basePath, `${engagementId}.jsonl`);
+            const filePath = path.join(this.basePath, `${engagementFileStem(engagementId)}.jsonl`);
             // Build the content to append: one JSON object per line, terminated with \n
             const lines = entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
             fs.appendFileSync(filePath, lines, "utf-8");