@llm-dev-ops/agentics-cli 1.4.32 → 1.4.35

package/dist/bundled-agents/policy-engine-agents/dist/db/models/api-key-repository.d.ts

@@ -0,0 +1,85 @@
+export interface APIKey {
+    id: string;
+    name: string;
+    key_hash: string;
+    key_prefix: string;
+    permissions: string[];
+    rate_limit: number;
+    expires_at: Date | null;
+    last_used_at: Date | null;
+    created_at: Date;
+    created_by: string | null;
+    revoked: boolean;
+}
+export interface CreateAPIKeyParams {
+    name: string;
+    permissions: string[];
+    rateLimit?: number;
+    expiresAt?: Date;
+    createdBy?: string;
+}
+export interface GeneratedAPIKey {
+    apiKey: APIKey;
+    rawKey: string;
+}
+/**
+ * API Key Repository
+ */
+export declare class APIKeyRepository {
+    /**
+     * Generate a secure API key
+     * Format: llmpe_<random_bytes_hex>
+     */
+    private generateSecureKey;
+    /**
+     * Extract key prefix for identification (first 12 chars)
+     */
+    private extractKeyPrefix;
+    /**
+     * Hash API key using bcrypt
+     */
+    hashApiKey(key: string): Promise<string>;
+    /**
+     * Validate API key against stored hash
+     */
+    private compareKey;
+    /**
+     * Create a new API key
+     */
+    createApiKey(params: CreateAPIKeyParams): Promise<GeneratedAPIKey>;
+    /**
+     * Validate API key and return key details if valid
+     * Returns null if key is invalid, expired, or revoked
+     */
+    validateApiKey(key: string): Promise<APIKey | null>;
+    /**
+     * Update last_used_at timestamp for API key
+     */
+    updateLastUsed(id: string): Promise<void>;
+    /**
+     * Revoke an API key
+     */
+    revokeApiKey(id: string): Promise<void>;
+    /**
+     * Get API key by ID
+     */
+    getApiKeyById(id: string): Promise<APIKey | null>;
+    /**
+     * List all API keys (excluding hashes)
+     */
+    listApiKeys(filters?: {
+        revoked?: boolean;
+        createdBy?: string;
+    }): Promise<Omit<APIKey, 'key_hash'>[]>;
+    /**
+     * Delete an API key permanently
+     */
+    deleteApiKey(id: string): Promise<void>;
+    /**
+     * Rotate an API key (revoke old, create new)
+     */
+    rotateApiKey(id: string): Promise<GeneratedAPIKey>;
+}
+export declare const apiKeyRepository: APIKeyRepository;
+export default apiKeyRepository;
+//# sourceMappingURL=api-key-repository.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/db/models/api-key-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-repository.d.ts","sourceRoot":"","sources":["../../../src/db/models/api-key-repository.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,IAAI,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;GAEG;AACH,qBAAa,gBAAgB;IAC3B;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAKzB;;OAEG;IACH,OAAO,CAAC,gBAAgB;IAIxB;;OAEG;IACG,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAU9C;;OAEG;YACW,UAAU;IASxB;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC;IAiDxE;;;OAGG;IACG,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkDzD;;OAEG;IACG,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/C;;OAEG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7C;;OAEG;IACG,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAevD;;OAEG;IACG,WAAW,CAAC,OAAO,CAAC,EAAE;QAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;IAgCvC;;OAEG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAmB7C;;OAEG;IACG,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;CA0BzD;AAGD,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AACvD,eAAe,gBAAgB,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/db/models/api-key-repository.js

@@ -0,0 +1,248 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiKeyRepository = exports.APIKeyRepository = void 0;
+/**
+ * API Key Repository
+ * Database operations for API key management with bcrypt hashing
+ */
+const bcrypt_1 = __importDefault(require("bcrypt"));
+const crypto_1 = require("crypto");
+const client_1 = require("../client");
+const logger_1 = __importDefault(require("@utils/logger"));
+const errors_1 = require("@utils/errors");
+const BCRYPT_ROUNDS = 12;
+const API_KEY_LENGTH = 32; // 256 bits
+const API_KEY_PREFIX = 'llmpe_'; // LLM Policy Engine prefix
+/**
+ * API Key Repository
+ */
+class APIKeyRepository {
+    /**
+     * Generate a secure API key
+     * Format: llmpe_<random_bytes_hex>
+     */
+    generateSecureKey() {
+        const randomBytesHex = (0, crypto_1.randomBytes)(API_KEY_LENGTH).toString('hex');
+        return `${API_KEY_PREFIX}${randomBytesHex}`;
+    }
+    /**
+     * Extract key prefix for identification (first 12 chars)
+     */
+    extractKeyPrefix(key) {
+        return key.substring(0, 12);
+    }
+    /**
+     * Hash API key using bcrypt
+     */
+    async hashApiKey(key) {
+        try {
+            return await bcrypt_1.default.hash(key, BCRYPT_ROUNDS);
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to hash API key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Validate API key against stored hash
+     */
+    async compareKey(key, hash) {
+        try {
+            return await bcrypt_1.default.compare(key, hash);
+        }
+        catch (error) {
+            logger_1.default.error({ error }, 'Failed to compare API key');
+            return false;
+        }
+    }
+    /**
+     * Create a new API key
+     */
+    async createApiKey(params) {
+        const rawKey = this.generateSecureKey();
+        const keyHash = await this.hashApiKey(rawKey);
+        const keyPrefix = this.extractKeyPrefix(rawKey);
+        try {
+            const result = await client_1.db.query(`INSERT INTO api_keys (
+          name, key_hash, key_prefix, permissions, rate_limit, expires_at, created_by
+        ) VALUES ($1, $2, $3, $4, $5, $6, $7)
+        RETURNING *`, [
+                params.name,
+                keyHash,
+                keyPrefix,
+                params.permissions,
+                params.rateLimit || 100,
+                params.expiresAt || null,
+                params.createdBy || null,
+            ]);
+            if (result.rows.length === 0) {
+                throw new errors_1.DatabaseError('Failed to create API key');
+            }
+            const apiKey = result.rows[0];
+            logger_1.default.info({
+                keyId: apiKey.id,
+                name: apiKey.name,
+                keyPrefix: apiKey.key_prefix,
+                permissions: apiKey.permissions,
+            }, 'API key created');
+            return {
+                apiKey,
+                rawKey, // Only returned once, never stored
+            };
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to create API key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Validate API key and return key details if valid
+     * Returns null if key is invalid, expired, or revoked
+     */
+    async validateApiKey(key) {
+        // Validate key format
+        if (!key || !key.startsWith(API_KEY_PREFIX)) {
+            logger_1.default.debug('Invalid API key format');
+            return null;
+        }
+        const keyPrefix = this.extractKeyPrefix(key);
+        try {
+            // Find API keys with matching prefix
+            const result = await client_1.db.query(`SELECT * FROM api_keys
+         WHERE key_prefix = $1
+         AND revoked = false
+         AND (expires_at IS NULL OR expires_at > NOW())`, [keyPrefix]);
+            // Check each matching key with bcrypt
+            for (const apiKey of result.rows) {
+                const isValid = await this.compareKey(key, apiKey.key_hash);
+                if (isValid) {
+                    // Update last_used_at timestamp asynchronously
+                    this.updateLastUsed(apiKey.id).catch((err) => {
+                        logger_1.default.warn({ error: err, keyId: apiKey.id }, 'Failed to update last_used_at');
+                    });
+                    logger_1.default.debug({
+                        keyId: apiKey.id,
+                        keyPrefix: apiKey.key_prefix,
+                        permissions: apiKey.permissions,
+                    }, 'API key validated successfully');
+                    return apiKey;
+                }
+            }
+            logger_1.default.debug({ keyPrefix }, 'API key validation failed');
+            return null;
+        }
+        catch (error) {
+            logger_1.default.error({ error, keyPrefix }, 'Error validating API key');
+            return null;
+        }
+    }
+    /**
+     * Update last_used_at timestamp for API key
+     */
+    async updateLastUsed(id) {
+        try {
+            await client_1.db.query(`UPDATE api_keys SET last_used_at = NOW() WHERE id = $1`, [id]);
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to update last_used_at: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Revoke an API key
+     */
+    async revokeApiKey(id) {
+        try {
+            const result = await client_1.db.query(`UPDATE api_keys SET revoked = true WHERE id = $1 RETURNING *`, [id]);
+            if (result.rowCount === 0) {
+                throw new errors_1.DatabaseError(`API key not found: ${id}`);
+            }
+            logger_1.default.info({ keyId: id }, 'API key revoked');
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to revoke API key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Get API key by ID
+     */
+    async getApiKeyById(id) {
+        try {
+            const result = await client_1.db.query(`SELECT * FROM api_keys WHERE id = $1`, [id]);
+            return result.rows[0] || null;
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to get API key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * List all API keys (excluding hashes)
+     */
+    async listApiKeys(filters) {
+        try {
+            let query = `SELECT
+        id, name, key_prefix, permissions, rate_limit,
+        expires_at, last_used_at, created_at, created_by, revoked
+        FROM api_keys WHERE 1=1`;
+            const params = [];
+            let paramCount = 1;
+            if (filters?.revoked !== undefined) {
+                query += ` AND revoked = $${paramCount}`;
+                params.push(filters.revoked);
+                paramCount++;
+            }
+            if (filters?.createdBy) {
+                query += ` AND created_by = $${paramCount}`;
+                params.push(filters.createdBy);
+                paramCount++;
+            }
+            query += ` ORDER BY created_at DESC`;
+            const result = await client_1.db.query(query, params);
+            return result.rows;
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to list API keys: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Delete an API key permanently
+     */
+    async deleteApiKey(id) {
+        try {
+            const result = await client_1.db.query(`DELETE FROM api_keys WHERE id = $1 RETURNING *`, [id]);
+            if (result.rowCount === 0) {
+                throw new errors_1.DatabaseError(`API key not found: ${id}`);
+            }
+            logger_1.default.info({ keyId: id }, 'API key deleted');
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to delete API key: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Rotate an API key (revoke old, create new)
+     */
+    async rotateApiKey(id) {
+        const oldKey = await this.getApiKeyById(id);
+        if (!oldKey) {
+            throw new errors_1.DatabaseError(`API key not found: ${id}`);
+        }
+        // Create new key with same properties
+        const newKey = await this.createApiKey({
+            name: `${oldKey.name} (rotated)`,
+            permissions: oldKey.permissions,
+            rateLimit: oldKey.rate_limit,
+            expiresAt: oldKey.expires_at || undefined,
+            createdBy: oldKey.created_by || undefined,
+        });
+        // Revoke old key
+        await this.revokeApiKey(id);
+        logger_1.default.info({ oldKeyId: id, newKeyId: newKey.apiKey.id }, 'API key rotated');
+        return newKey;
+    }
+}
+exports.APIKeyRepository = APIKeyRepository;
+// Export singleton instance
+exports.apiKeyRepository = new APIKeyRepository();
+exports.default = exports.apiKeyRepository;
+//# sourceMappingURL=api-key-repository.js.map

package/dist/bundled-agents/policy-engine-agents/dist/db/models/api-key-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-key-repository.js","sourceRoot":"","sources":["../../../src/db/models/api-key-repository.ts"],"names":[],"mappings":";;;;;;AAAA;;;GAGG;AACH,oDAA4B;AAC5B,mCAAqC;AACrC,sCAA+B;AAC/B,2DAAmC;AACnC,0CAA8C;AA6B9C,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,WAAW;AACtC,MAAM,cAAc,GAAG,QAAQ,CAAC,CAAC,2BAA2B;AAE5D;;GAEG;AACH,MAAa,gBAAgB;IAC3B;;;OAGG;IACK,iBAAiB;QACvB,MAAM,cAAc,GAAG,IAAA,oBAAW,EAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,GAAG,cAAc,GAAG,cAAc,EAAE,CAAC;IAC9C,CAAC;IAED;;OAEG;IACK,gBAAgB,CAAC,GAAW;QAClC,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,GAAW;QAC1B,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,IAAY;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,gBAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,MAA0B;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B;;;oBAGY,EACZ;gBACE,MAAM,CAAC,IAAI;gBACX,OAAO;gBACP,SAAS;gBACT,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,SAAS,IAAI,GAAG;gBACvB,MAAM,CAAC,SAAS,IAAI,IAAI;gBACxB,MAAM,CAAC,SAAS,IAAI,IAAI;aACzB,CACF,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,sBAAa,CAAC,0BAA0B,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE9B,gBAAM,CAAC,IAAI,CACT;gBACE,KAAK,EAAE,MAAM,CAAC,EAAE;gBAChB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,EACD,iBAAiB,CAClB,CAAC;YAEF,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE,mCAAmC;aAC5C,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,GAAW;QAC9B,sBAAsB;QACtB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,gBAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,qCAAqC;YACrC,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B;;;wDAGgD,EAChD,CAAC,SAAS,CAAC,CACZ,CAAC;YAEF,sCAAsC;YACtC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAE5D,IAAI,OAAO,EAAE,CAAC;oBACZ,+CAA+C;oBAC/C,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC3C,gBAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC;oBACjF,CAAC,CAAC,CAAC;oBAEH,gBAAM,CAAC,KAAK,CACV;wBACE,KAAK,EAAE,MAAM,CAAC,EAAE;wBAChB,SAAS,EAAE,MAAM,CAAC,UAAU;wBAC5B,WAAW,EAAE,MAAM,CAAC,WAAW;qBAChC,EACD,gCAAgC,CACjC,CAAC;oBAEF,OAAO,MAAM,CAAC;gBAChB,CAAC;YACH,CAAC;YAED,gBAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,EAAE,2BAA2B,CAAC,CAAC;YACzD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,gBAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,EAAU;QAC7B,IAAI,CAAC;YACH,MAAM,WAAE,CAAC,KAAK,CACZ,wDAAwD,EACxD,CAAC,EAAE,CAAC,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,kCAAkC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B,8DAA8D,EAC9D,CAAC,EAAE,CAAC,CACL,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,gBAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,EAAU;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B,sCAAsC,EACtC,CAAC,EAAE,CAAC,CACL,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,OAGjB;QACC,IAAI,CAAC;YACH,IAAI,KAAK,GAAG;;;gCAGc,CAAC;YAC3B,MAAM,MAAM,GAAU,EAAE,CAAC;YACzB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,KAAK,IAAI,mBAAmB,UAAU,EAAE,CAAC;gBACzC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC7B,UAAU,EAAE,CAAC;YACf,CAAC;YAED,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,KAAK,IAAI,sBAAsB,UAAU,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC/B,UAAU,EAAE,CAAC;YACf,CAAC;YAED,KAAK,IAAI,2BAA2B,CAAC;YAErC,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC7C,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B,gDAAgD,EAChD,CAAC,EAAE,CAAC,CACL,CAAC;YAEF,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;YACtD,CAAC;YAED,gBAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,EAAU;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;QAE5C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAa,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;QAED,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACrC,IAAI,EAAE,GAAG,MAAM,CAAC,IAAI,YAAY;YAChC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;YACzC,SAAS,EAAE,MAAM,CAAC,UAAU,IAAI,SAAS;SAC1C,CAAC,CAAC;QAEH,iBAAiB;QACjB,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAE5B,gBAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAC5C,iBAAiB,CAClB,CAAC;QAEF,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AArSD,4CAqSC;AAED,4BAA4B;AACf,QAAA,gBAAgB,GAAG,IAAI,gBAAgB,EAAE,CAAC;AACvD,kBAAe,wBAAgB,CAAC"}

package/dist/bundled-agents/policy-engine-agents/dist/db/models/evaluation-repository.d.ts

@@ -0,0 +1,65 @@
+import { PolicyEvaluationRequest, PolicyEvaluationResponse, DecisionType } from '../../types/policy';
+export interface EvaluationLog {
+    id: string;
+    requestId: string;
+    policyIds: string[];
+    decision: DecisionType;
+    allowed: boolean;
+    reason?: string;
+    matchedPolicies: string[];
+    matchedRules: string[];
+    context: any;
+    evaluationTimeMs: number;
+    cached: boolean;
+    createdAt: Date;
+    metadata?: any;
+}
+export interface EvaluationFilters {
+    requestId?: string;
+    policyIds?: string[];
+    decision?: DecisionType;
+    allowed?: boolean;
+    startDate?: Date;
+    endDate?: Date;
+    limit?: number;
+    offset?: number;
+}
+export declare class EvaluationRepository {
+    /**
+     * Log a policy evaluation
+     */
+    log(request: PolicyEvaluationRequest, response: PolicyEvaluationResponse): Promise<EvaluationLog>;
+    /**
+     * Get evaluation by request ID
+     */
+    findByRequestId(requestId: string): Promise<EvaluationLog | null>;
+    /**
+     * Find evaluations with filters
+     */
+    find(filters: EvaluationFilters): Promise<EvaluationLog[]>;
+    /**
+     * Get evaluations by policy ID
+     */
+    findByPolicyId(policyId: string, limit?: number): Promise<EvaluationLog[]>;
+    /**
+     * Get evaluation statistics
+     */
+    getStats(startDate?: Date, endDate?: Date): Promise<{
+        total: number;
+        allowed: number;
+        denied: number;
+        warned: number;
+        modified: number;
+        avgEvaluationTimeMs: number;
+        cacheHitRate: number;
+    }>;
+    /**
+     * Delete old evaluations
+     */
+    deleteOlderThan(days: number): Promise<number>;
+    /**
+     * Map database row to EvaluationLog object
+     */
+    private mapRowToEvaluationLog;
+}
+//# sourceMappingURL=evaluation-repository.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/db/models/evaluation-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation-repository.d.ts","sourceRoot":"","sources":["../../../src/db/models/evaluation-repository.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAIrG,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,YAAY,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,GAAG,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;IAChB,QAAQ,CAAC,EAAE,GAAG,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,oBAAoB;IAC/B;;OAEG;IACG,GAAG,CACP,OAAO,EAAE,uBAAuB,EAChC,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,aAAa,CAAC;IAkCzB;;OAEG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAoBvE;;OAEG;IACG,IAAI,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IA4DhE;;OAEG;IACG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,GAAE,MAAY,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIrF;;OAEG;IACG,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC;QACxD,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC;IAkDF;;OAEG;IACG,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBpD;;OAEG;IACH,OAAO,CAAC,qBAAqB;CAiB9B"}

package/dist/bundled-agents/policy-engine-agents/dist/db/models/evaluation-repository.js

@@ -0,0 +1,192 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvaluationRepository = void 0;
+/**
+ * Evaluation Repository - Audit log repository for policy evaluations
+ */
+const client_1 = require("../client");
+const errors_1 = require("@utils/errors");
+const logger_1 = __importDefault(require("@utils/logger"));
+class EvaluationRepository {
+    /**
+     * Log a policy evaluation
+     */
+    async log(request, response) {
+        try {
+            const result = await client_1.db.query(`INSERT INTO policy_evaluations (
+          request_id, policy_ids, decision, allowed, reason,
+          matched_policies, matched_rules, context, evaluation_time_ms, cached, metadata
+        ) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9, $10, $11)
+        RETURNING *`, [
+                response.requestId,
+                request.policies || [],
+                response.decision.decision,
+                response.decision.allowed,
+                response.decision.reason,
+                response.decision.matchedPolicies,
+                response.decision.matchedRules,
+                JSON.stringify(request.context),
+                response.decision.evaluationTimeMs,
+                response.cached || false,
+                JSON.stringify(response.decision.metadata || {}),
+            ]);
+            logger_1.default.debug({ requestId: response.requestId }, 'Evaluation logged to database');
+            return this.mapRowToEvaluationLog(result.rows[0]);
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to log evaluation: ${error instanceof Error ? error.message : String(error)}`, { requestId: request.requestId });
+        }
+    }
+    /**
+     * Get evaluation by request ID
+     */
+    async findByRequestId(requestId) {
+        try {
+            const result = await client_1.db.query('SELECT * FROM policy_evaluations WHERE request_id = $1', [requestId]);
+            if (result.rows.length === 0) {
+                return null;
+            }
+            return this.mapRowToEvaluationLog(result.rows[0]);
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to find evaluation: ${error instanceof Error ? error.message : String(error)}`, { requestId });
+        }
+    }
+    /**
+     * Find evaluations with filters
+     */
+    async find(filters) {
+        try {
+            const conditions = [];
+            const params = [];
+            let paramCount = 1;
+            if (filters.requestId) {
+                conditions.push(`request_id = $${paramCount++}`);
+                params.push(filters.requestId);
+            }
+            if (filters.policyIds && filters.policyIds.length > 0) {
+                conditions.push(`policy_ids && $${paramCount++}`);
+                params.push(filters.policyIds);
+            }
+            if (filters.decision) {
+                conditions.push(`decision = $${paramCount++}`);
+                params.push(filters.decision);
+            }
+            if (filters.allowed !== undefined) {
+                conditions.push(`allowed = $${paramCount++}`);
+                params.push(filters.allowed);
+            }
+            if (filters.startDate) {
+                conditions.push(`created_at >= $${paramCount++}`);
+                params.push(filters.startDate);
+            }
+            if (filters.endDate) {
+                conditions.push(`created_at <= $${paramCount++}`);
+                params.push(filters.endDate);
+            }
+            const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
+            const limit = filters.limit || 100;
+            const offset = filters.offset || 0;
+            const query = `
+        SELECT * FROM policy_evaluations
+        ${whereClause}
+        ORDER BY created_at DESC
+        LIMIT $${paramCount++} OFFSET $${paramCount++}
+      `;
+            params.push(limit, offset);
+            const result = await client_1.db.query(query, params);
+            return result.rows.map((row) => this.mapRowToEvaluationLog(row));
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to find evaluations: ${error instanceof Error ? error.message : String(error)}`, { filters });
+        }
+    }
+    /**
+     * Get evaluations by policy ID
+     */
+    async findByPolicyId(policyId, limit = 100) {
+        return this.find({ policyIds: [policyId], limit });
+    }
+    /**
+     * Get evaluation statistics
+     */
+    async getStats(startDate, endDate) {
+        try {
+            const conditions = [];
+            const params = [];
+            let paramCount = 1;
+            if (startDate) {
+                conditions.push(`created_at >= $${paramCount++}`);
+                params.push(startDate);
+            }
+            if (endDate) {
+                conditions.push(`created_at <= $${paramCount++}`);
+                params.push(endDate);
+            }
+            const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(' AND ')}` : '';
+            const result = await client_1.db.query(`SELECT
+          COUNT(*) as total,
+          SUM(CASE WHEN allowed = true THEN 1 ELSE 0 END) as allowed,
+          SUM(CASE WHEN decision = 'deny' THEN 1 ELSE 0 END) as denied,
+          SUM(CASE WHEN decision = 'warn' THEN 1 ELSE 0 END) as warned,
+          SUM(CASE WHEN decision = 'modify' THEN 1 ELSE 0 END) as modified,
+          AVG(evaluation_time_ms) as avg_evaluation_time_ms,
+          SUM(CASE WHEN cached = true THEN 1 ELSE 0 END)::float / NULLIF(COUNT(*), 0) as cache_hit_rate
+        FROM policy_evaluations
+        ${whereClause}`, params);
+            const row = result.rows[0];
+            return {
+                total: parseInt(row.total, 10),
+                allowed: parseInt(row.allowed, 10),
+                denied: parseInt(row.denied, 10),
+                warned: parseInt(row.warned, 10),
+                modified: parseInt(row.modified, 10),
+                avgEvaluationTimeMs: parseFloat(row.avg_evaluation_time_ms) || 0,
+                cacheHitRate: parseFloat(row.cache_hit_rate) || 0,
+            };
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to get evaluation stats: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+    /**
+     * Delete old evaluations
+     */
+    async deleteOlderThan(days) {
+        try {
+            const cutoffDate = new Date();
+            cutoffDate.setDate(cutoffDate.getDate() - days);
+            const result = await client_1.db.query('DELETE FROM policy_evaluations WHERE created_at < $1', [cutoffDate]);
+            logger_1.default.info({ deletedCount: result.rowCount, days }, 'Old evaluations deleted from database');
+            return result.rowCount || 0;
+        }
+        catch (error) {
+            throw new errors_1.DatabaseError(`Failed to delete old evaluations: ${error instanceof Error ? error.message : String(error)}`, { days });
+        }
+    }
+    /**
+     * Map database row to EvaluationLog object
+     */
+    mapRowToEvaluationLog(row) {
+        return {
+            id: row.id,
+            requestId: row.request_id,
+            policyIds: row.policy_ids || [],
+            decision: row.decision,
+            allowed: row.allowed,
+            reason: row.reason,
+            matchedPolicies: row.matched_policies || [],
+            matchedRules: row.matched_rules || [],
+            context: row.context,
+            evaluationTimeMs: row.evaluation_time_ms,
+            cached: row.cached,
+            createdAt: row.created_at,
+            metadata: row.metadata,
+        };
+    }
+}
+exports.EvaluationRepository = EvaluationRepository;
+//# sourceMappingURL=evaluation-repository.js.map

package/dist/bundled-agents/policy-engine-agents/dist/db/models/evaluation-repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluation-repository.js","sourceRoot":"","sources":["../../../src/db/models/evaluation-repository.ts"],"names":[],"mappings":";;;;;;AAAA;;GAEG;AACH,sCAA+B;AAE/B,0CAA8C;AAC9C,2DAAmC;AA6BnC,MAAa,oBAAoB;IAC/B;;OAEG;IACH,KAAK,CAAC,GAAG,CACP,OAAgC,EAChC,QAAkC;QAElC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B;;;;oBAIY,EACZ;gBACE,QAAQ,CAAC,SAAS;gBAClB,OAAO,CAAC,QAAQ,IAAI,EAAE;gBACtB,QAAQ,CAAC,QAAQ,CAAC,QAAQ;gBAC1B,QAAQ,CAAC,QAAQ,CAAC,OAAO;gBACzB,QAAQ,CAAC,QAAQ,CAAC,MAAM;gBACxB,QAAQ,CAAC,QAAQ,CAAC,eAAe;gBACjC,QAAQ,CAAC,QAAQ,CAAC,YAAY;gBAC9B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC/B,QAAQ,CAAC,QAAQ,CAAC,gBAAgB;gBAClC,QAAQ,CAAC,MAAM,IAAI,KAAK;gBACxB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE,CAAC;aACjD,CACF,CAAC;YAEF,gBAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,+BAA+B,CAAC,CAAC;YAEjF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,6BAA6B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACrF,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CACjC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B,wDAAwD,EACxD,CAAC,SAAS,CAAC,CACZ,CAAC;YAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,8BAA8B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtF,EAAE,SAAS,EAAE,CACd,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI,CAAC,OAA0B;QACnC,IAAI,CAAC;YACH,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAU,EAAE,CAAC;YACzB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtD,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,eAAe,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC/C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAChC,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,cAAc,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC9C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;YAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gBACpB,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;YACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAEnC,MAAM,KAAK,GAAG;;UAEV,WAAW;;iBAEJ,UAAU,EAAE,YAAY,UAAU,EAAE;OAC9C,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAE3B,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAE7C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,+BAA+B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACvF,EAAE,OAAO,EAAE,CACZ,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,QAAgB,GAAG;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAgB,EAAE,OAAc;QAS7C,IAAI,CAAC;YACH,MAAM,UAAU,GAAa,EAAE,CAAC;YAChC,MAAM,MAAM,GAAU,EAAE,CAAC;YACzB,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,IAAI,SAAS,EAAE,CAAC;gBACd,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACzB,CAAC;YAED,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,CAAC;YAED,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAErF,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B;;;;;;;;;UASE,WAAW,EAAE,EACf,MAAM,CACP,CAAC;YAEF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE3B,OAAO;gBACL,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC9B,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;gBAClC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBAChC,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;gBAChC,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACpC,mBAAmB,EAAE,UAAU,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,CAAC;gBAChE,YAAY,EAAE,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC;aAClD,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,mCAAmC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CAAC,IAAY;QAChC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YAC9B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;YAEhD,MAAM,MAAM,GAAG,MAAM,WAAE,CAAC,KAAK,CAC3B,sDAAsD,EACtD,CAAC,UAAU,CAAC,CACb,CAAC;YAEF,gBAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,EACvC,uCAAuC,CACxC,CAAC;YAEF,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,sBAAa,CACrB,qCAAqC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC7F,EAAE,IAAI,EAAE,CACT,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,GAAQ;QACpC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;YAC/B,QAAQ,EAAE,GAAG,CAAC,QAAwB;YACtC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,eAAe,EAAE,GAAG,CAAC,gBAAgB,IAAI,EAAE;YAC3C,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,EAAE;YACrC,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,gBAAgB,EAAE,GAAG,CAAC,kBAAkB;YACxC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CAAC;IACJ,CAAC;CACF;AAlPD,oDAkPC"}

package/dist/bundled-agents/policy-engine-agents/dist/db/models/policy-repository.d.ts

@@ -0,0 +1,32 @@
+import { Policy } from '../../types/policy';
+export declare class PolicyRepository {
+    /**
+     * Create a new policy
+     */
+    create(policy: Policy, createdBy?: string): Promise<Policy>;
+    /**
+     * Get policy by ID
+     */
+    findById(id: string): Promise<Policy | null>;
+    /**
+     * Get all active policies
+     */
+    findActive(): Promise<Policy[]>;
+    /**
+     * Get policies by namespace
+     */
+    findByNamespace(namespace: string): Promise<Policy[]>;
+    /**
+     * Update policy
+     */
+    update(id: string, updates: Partial<Policy>): Promise<Policy>;
+    /**
+     * Delete policy
+     */
+    delete(id: string): Promise<void>;
+    /**
+     * Map database row to Policy object
+     */
+    private mapRowToPolicy;
+}
+//# sourceMappingURL=policy-repository.d.ts.map

package/dist/bundled-agents/policy-engine-agents/dist/db/models/policy-repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-repository.d.ts","sourceRoot":"","sources":["../../../src/db/models/policy-repository.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,MAAM,EAAgB,MAAM,oBAAoB,CAAC;AAI1D,qBAAa,gBAAgB;IAC3B;;OAEG;IACG,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgCjE;;OAEG;IACG,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAoBlD;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAerC;;OAEG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgB3D;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiDnE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBvC;;OAEG;IACH,OAAO,CAAC,cAAc;CAkBvB"}