@lssm/module.audit-trail 0.0.0-canary-20251217060834 → 0.0.0-canary-20251217072406

package/dist/audit-trail.feature.js

@@ -1 +1,57 @@
-const e={meta:{key:`audit-trail`,title:`Audit Trail`,description:`Audit logging, querying, export, and compliance reporting`,domain:`platform`,owners:[`@platform.audit-trail`],tags:[`audit`,`compliance`,`logging`,`security`],stability:`stable`},operations:[{name:`audit.logs.export`,version:1},{name:`audit.logs.query`,version:1},{name:`audit.logs.get`,version:1},{name:`audit.trace.get`,version:1},{name:`audit.stats`,version:1}],events:[],presentations:[],opToPresentation:[],presentationsTargets:[],capabilities:{provides:[{key:`audit-trail`,version:1}],requires:[]}};export{e as AuditTrailFeature};
+//#region src/audit-trail.feature.ts
+/**
+* Audit Trail feature module that bundles audit log querying,
+* export, and statistics capabilities.
+*/
+const AuditTrailFeature = {
+	meta: {
+		key: "audit-trail",
+		title: "Audit Trail",
+		description: "Audit logging, querying, export, and compliance reporting",
+		domain: "platform",
+		owners: ["@platform.audit-trail"],
+		tags: [
+			"audit",
+			"compliance",
+			"logging",
+			"security"
+		],
+		stability: "stable"
+	},
+	operations: [
+		{
+			name: "audit.logs.export",
+			version: 1
+		},
+		{
+			name: "audit.logs.query",
+			version: 1
+		},
+		{
+			name: "audit.logs.get",
+			version: 1
+		},
+		{
+			name: "audit.trace.get",
+			version: 1
+		},
+		{
+			name: "audit.stats",
+			version: 1
+		}
+	],
+	events: [],
+	presentations: [],
+	opToPresentation: [],
+	presentationsTargets: [],
+	capabilities: {
+		provides: [{
+			key: "audit-trail",
+			version: 1
+		}],
+		requires: []
+	}
+};
+
+//#endregion
+export { AuditTrailFeature };

package/dist/contracts/index.d.ts

@@ -1,5 +1,5 @@
-import * as _lssm_lib_schema0 from "@lssm/lib.schema";
 import * as _lssm_lib_contracts0 from "@lssm/lib.contracts";
+import * as _lssm_lib_schema0 from "@lssm/lib.schema";
 
 //#region src/contracts/index.d.ts
 declare const AuditLogModel: _lssm_lib_schema0.SchemaModel<{

package/dist/contracts/index.js

@@ -1 +1,373 @@
-import{ScalarTypeEnum as e,defineEnum as t}from"@lssm/lib.schema";import{defineCommand as n,defineQuery as r,defineSchemaModel as i}from"@lssm/lib.contracts";const a=[`platform.audit-trail`],o=i({name:`AuditLog`,description:`Detailed audit log entry`,fields:{id:{type:e.String_unsecure(),isOptional:!1},eventName:{type:e.String_unsecure(),isOptional:!1},eventVersion:{type:e.Int_unsecure(),isOptional:!1},payload:{type:e.JSONObject(),isOptional:!1},actorId:{type:e.String_unsecure(),isOptional:!0},actorType:{type:e.String_unsecure(),isOptional:!0},actorEmail:{type:e.EmailAddress(),isOptional:!0},targetId:{type:e.String_unsecure(),isOptional:!0},targetType:{type:e.String_unsecure(),isOptional:!0},orgId:{type:e.String_unsecure(),isOptional:!0},traceId:{type:e.String_unsecure(),isOptional:!0},clientIp:{type:e.String_unsecure(),isOptional:!0},occurredAt:{type:e.DateTime(),isOptional:!1},recordedAt:{type:e.DateTime(),isOptional:!1}}}),s=i({name:`AuditQueryInput`,description:`Input for querying audit logs`,fields:{eventName:{type:e.String_unsecure(),isOptional:!0},actorId:{type:e.String_unsecure(),isOptional:!0},targetId:{type:e.String_unsecure(),isOptional:!0},targetType:{type:e.String_unsecure(),isOptional:!0},orgId:{type:e.String_unsecure(),isOptional:!0},traceId:{type:e.String_unsecure(),isOptional:!0},from:{type:e.DateTime(),isOptional:!0},to:{type:e.DateTime(),isOptional:!0},limit:{type:e.Int_unsecure(),isOptional:!0,defaultValue:100},offset:{type:e.Int_unsecure(),isOptional:!0,defaultValue:0}}}),c=i({name:`AuditQueryOutput`,description:`Output from querying audit logs`,fields:{logs:{type:o,isArray:!0,isOptional:!1},total:{type:e.Int_unsecure(),isOptional:!1},hasMore:{type:e.Boolean(),isOptional:!1}}}),l=t(`ExportFormat`,[`json`,`csv`,`parquet`]),u=i({name:`AuditExportInput`,description:`Input for exporting audit logs`,fields:{orgId:{type:e.String_unsecure(),isOptional:!1},from:{type:e.DateTime(),isOptional:!1},to:{type:e.DateTime(),isOptional:!1},format:{type:l,isOptional:!0,defaultValue:`json`},eventNames:{type:e.String_unsecure(),isArray:!0,isOptional:!0}}}),d=t(`ExportStatus`,[`pending`,`processing`,`completed`,`failed`]),f=i({name:`AuditExportOutput`,description:`Output from initiating an audit export`,fields:{exportId:{type:e.String_unsecure(),isOptional:!1},status:{type:d,isOptional:!1},downloadUrl:{type:e.URL(),isOptional:!0}}}),p=i({name:`AuditStatsInput`,description:`Input for getting audit statistics`,fields:{orgId:{type:e.String_unsecure(),isOptional:!0},from:{type:e.DateTime(),isOptional:!0},to:{type:e.DateTime(),isOptional:!0}}}),m=i({name:`AuditStatsOutput`,description:`Audit log statistics`,fields:{totalLogs:{type:e.Int_unsecure(),isOptional:!1},uniqueActors:{type:e.Int_unsecure(),isOptional:!1},uniqueTargets:{type:e.Int_unsecure(),isOptional:!1},eventCounts:{type:e.JSONObject(),isOptional:!1}}}),h=r({meta:{name:`audit.logs.query`,version:1,stability:`stable`,owners:[...a],tags:[`audit`,`logs`,`query`],description:`Query audit logs with filters.`,goal:`Enable searching and filtering of audit history.`,context:`Admin dashboard, compliance reporting, debugging.`},io:{input:s,output:c},policy:{auth:`admin`}}),g=r({meta:{name:`audit.logs.get`,version:1,stability:`stable`,owners:[...a],tags:[`audit`,`logs`,`get`],description:`Get a specific audit log by ID.`,goal:`View detailed audit log entry.`,context:`Log detail view.`},io:{input:i({name:`GetAuditLogInput`,fields:{logId:{type:e.String_unsecure(),isOptional:!1}}}),output:o},policy:{auth:`admin`}}),_=r({meta:{name:`audit.trace.get`,version:1,stability:`stable`,owners:[...a],tags:[`audit`,`trace`,`get`],description:`Get all audit logs for a trace.`,goal:`View complete request trace for debugging.`,context:`Request tracing, debugging.`},io:{input:i({name:`GetAuditTraceInput`,fields:{traceId:{type:e.String_unsecure(),isOptional:!1}}}),output:i({name:`GetAuditTraceOutput`,fields:{logs:{type:o,isArray:!0,isOptional:!1}}})},policy:{auth:`admin`}}),v=n({meta:{name:`audit.logs.export`,version:1,stability:`stable`,owners:[...a],tags:[`audit`,`logs`,`export`],description:`Export audit logs for compliance reporting.`,goal:`Generate audit reports for compliance.`,context:`Compliance reporting, external audits.`},io:{input:u,output:f},policy:{auth:`admin`}}),y=r({meta:{name:`audit.stats`,version:1,stability:`stable`,owners:[...a],tags:[`audit`,`stats`],description:`Get audit log statistics.`,goal:`Monitor audit activity levels.`,context:`Admin dashboard, monitoring.`},io:{input:p,output:m},policy:{auth:`admin`}});export{u as AuditExportInputModel,f as AuditExportOutputModel,o as AuditLogModel,s as AuditQueryInputModel,c as AuditQueryOutputModel,p as AuditStatsInputModel,m as AuditStatsOutputModel,v as ExportAuditLogsContract,l as ExportFormatEnum,d as ExportStatusEnum,g as GetAuditLogContract,y as GetAuditStatsContract,_ as GetAuditTraceContract,h as QueryAuditLogsContract};
+import { defineEnum } from "../libs/schema/dist/EnumType.js";
+import { ScalarTypeEnum } from "../libs/schema/dist/ScalarTypeEnum.js";
+import "../libs/schema/dist/index.js";
+import { defineSchemaModel } from "../libs/contracts/dist/schema/dist/SchemaModel.js";
+import { defineCommand, defineQuery } from "../libs/contracts/dist/spec.js";
+import "../libs/contracts/dist/index.js";
+
+//#region src/contracts/index.ts
+const OWNERS = ["platform.audit-trail"];
+const AuditLogModel = defineSchemaModel({
+	name: "AuditLog",
+	description: "Detailed audit log entry",
+	fields: {
+		id: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		eventName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		eventVersion: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		},
+		payload: {
+			type: ScalarTypeEnum.JSONObject(),
+			isOptional: false
+		},
+		actorId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		actorType: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		actorEmail: {
+			type: ScalarTypeEnum.EmailAddress(),
+			isOptional: true
+		},
+		targetId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		targetType: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		traceId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		clientIp: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		occurredAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		},
+		recordedAt: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		}
+	}
+});
+const AuditQueryInputModel = defineSchemaModel({
+	name: "AuditQueryInput",
+	description: "Input for querying audit logs",
+	fields: {
+		eventName: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		actorId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		targetId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		targetType: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		traceId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		from: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		},
+		to: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		},
+		limit: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: true,
+			defaultValue: 100
+		},
+		offset: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: true,
+			defaultValue: 0
+		}
+	}
+});
+const AuditQueryOutputModel = defineSchemaModel({
+	name: "AuditQueryOutput",
+	description: "Output from querying audit logs",
+	fields: {
+		logs: {
+			type: AuditLogModel,
+			isArray: true,
+			isOptional: false
+		},
+		total: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		},
+		hasMore: {
+			type: ScalarTypeEnum.Boolean(),
+			isOptional: false
+		}
+	}
+});
+const ExportFormatEnum = defineEnum("ExportFormat", [
+	"json",
+	"csv",
+	"parquet"
+]);
+const AuditExportInputModel = defineSchemaModel({
+	name: "AuditExportInput",
+	description: "Input for exporting audit logs",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		from: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		},
+		to: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: false
+		},
+		format: {
+			type: ExportFormatEnum,
+			isOptional: true,
+			defaultValue: "json"
+		},
+		eventNames: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isArray: true,
+			isOptional: true
+		}
+	}
+});
+const ExportStatusEnum = defineEnum("ExportStatus", [
+	"pending",
+	"processing",
+	"completed",
+	"failed"
+]);
+const AuditExportOutputModel = defineSchemaModel({
+	name: "AuditExportOutput",
+	description: "Output from initiating an audit export",
+	fields: {
+		exportId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: false
+		},
+		status: {
+			type: ExportStatusEnum,
+			isOptional: false
+		},
+		downloadUrl: {
+			type: ScalarTypeEnum.URL(),
+			isOptional: true
+		}
+	}
+});
+const AuditStatsInputModel = defineSchemaModel({
+	name: "AuditStatsInput",
+	description: "Input for getting audit statistics",
+	fields: {
+		orgId: {
+			type: ScalarTypeEnum.String_unsecure(),
+			isOptional: true
+		},
+		from: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		},
+		to: {
+			type: ScalarTypeEnum.DateTime(),
+			isOptional: true
+		}
+	}
+});
+const AuditStatsOutputModel = defineSchemaModel({
+	name: "AuditStatsOutput",
+	description: "Audit log statistics",
+	fields: {
+		totalLogs: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		},
+		uniqueActors: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		},
+		uniqueTargets: {
+			type: ScalarTypeEnum.Int_unsecure(),
+			isOptional: false
+		},
+		eventCounts: {
+			type: ScalarTypeEnum.JSONObject(),
+			isOptional: false
+		}
+	}
+});
+/**
+* Query audit logs.
+*/
+const QueryAuditLogsContract = defineQuery({
+	meta: {
+		name: "audit.logs.query",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"audit",
+			"logs",
+			"query"
+		],
+		description: "Query audit logs with filters.",
+		goal: "Enable searching and filtering of audit history.",
+		context: "Admin dashboard, compliance reporting, debugging."
+	},
+	io: {
+		input: AuditQueryInputModel,
+		output: AuditQueryOutputModel
+	},
+	policy: { auth: "admin" }
+});
+/**
+* Get audit log by ID.
+*/
+const GetAuditLogContract = defineQuery({
+	meta: {
+		name: "audit.logs.get",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"audit",
+			"logs",
+			"get"
+		],
+		description: "Get a specific audit log by ID.",
+		goal: "View detailed audit log entry.",
+		context: "Log detail view."
+	},
+	io: {
+		input: defineSchemaModel({
+			name: "GetAuditLogInput",
+			fields: { logId: {
+				type: ScalarTypeEnum.String_unsecure(),
+				isOptional: false
+			} }
+		}),
+		output: AuditLogModel
+	},
+	policy: { auth: "admin" }
+});
+/**
+* Get audit logs by trace ID.
+*/
+const GetAuditTraceContract = defineQuery({
+	meta: {
+		name: "audit.trace.get",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"audit",
+			"trace",
+			"get"
+		],
+		description: "Get all audit logs for a trace.",
+		goal: "View complete request trace for debugging.",
+		context: "Request tracing, debugging."
+	},
+	io: {
+		input: defineSchemaModel({
+			name: "GetAuditTraceInput",
+			fields: { traceId: {
+				type: ScalarTypeEnum.String_unsecure(),
+				isOptional: false
+			} }
+		}),
+		output: defineSchemaModel({
+			name: "GetAuditTraceOutput",
+			fields: { logs: {
+				type: AuditLogModel,
+				isArray: true,
+				isOptional: false
+			} }
+		})
+	},
+	policy: { auth: "admin" }
+});
+/**
+* Export audit logs.
+*/
+const ExportAuditLogsContract = defineCommand({
+	meta: {
+		name: "audit.logs.export",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: [
+			"audit",
+			"logs",
+			"export"
+		],
+		description: "Export audit logs for compliance reporting.",
+		goal: "Generate audit reports for compliance.",
+		context: "Compliance reporting, external audits."
+	},
+	io: {
+		input: AuditExportInputModel,
+		output: AuditExportOutputModel
+	},
+	policy: { auth: "admin" }
+});
+/**
+* Get audit statistics.
+*/
+const GetAuditStatsContract = defineQuery({
+	meta: {
+		name: "audit.stats",
+		version: 1,
+		stability: "stable",
+		owners: [...OWNERS],
+		tags: ["audit", "stats"],
+		description: "Get audit log statistics.",
+		goal: "Monitor audit activity levels.",
+		context: "Admin dashboard, monitoring."
+	},
+	io: {
+		input: AuditStatsInputModel,
+		output: AuditStatsOutputModel
+	},
+	policy: { auth: "admin" }
+});
+
+//#endregion
+export { AuditExportInputModel, AuditExportOutputModel, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, ExportAuditLogsContract, ExportFormatEnum, ExportStatusEnum, GetAuditLogContract, GetAuditStatsContract, GetAuditTraceContract, QueryAuditLogsContract };

package/dist/entities/index.js

@@ -1 +1,126 @@
-import{defineEntity as e,field as t,index as n}from"@lssm/lib.schema";const r=e({name:`AuditLog`,description:`Audit log entry for tracking system events.`,schema:`lssm_audit`,map:`audit_log`,fields:{id:t.id({description:`Unique audit log ID`}),eventName:t.string({description:`Event name/type`}),eventVersion:t.int({description:`Event version`}),payload:t.json({description:`Event payload (may be redacted)`}),actorId:t.string({isOptional:!0,description:`User/service that triggered the event`}),actorType:t.string({isOptional:!0,description:`Actor type (user, system, service)`}),actorEmail:t.string({isOptional:!0,description:`Actor email (for searchability)`}),targetId:t.string({isOptional:!0,description:`Resource affected by the event`}),targetType:t.string({isOptional:!0,description:`Resource type`}),orgId:t.string({isOptional:!0,description:`Organization context`}),tenantId:t.string({isOptional:!0,description:`Tenant context`}),traceId:t.string({isOptional:!0,description:`Distributed trace ID`}),spanId:t.string({isOptional:!0,description:`Span ID`}),requestId:t.string({isOptional:!0,description:`Request ID`}),sessionId:t.string({isOptional:!0,description:`Session ID`}),clientIp:t.string({isOptional:!0,description:`Client IP address`}),userAgent:t.string({isOptional:!0,description:`User agent string`}),tags:t.json({isOptional:!0,description:`Custom tags for filtering`}),metadata:t.json({isOptional:!0,description:`Additional metadata`}),occurredAt:t.dateTime({description:`When the event occurred`}),recordedAt:t.createdAt({description:`When the log was recorded`})},indexes:[n.on([`actorId`,`occurredAt`]),n.on([`targetId`,`occurredAt`]),n.on([`orgId`,`occurredAt`]),n.on([`eventName`,`occurredAt`]),n.on([`traceId`]),n.on([`occurredAt`])]}),i=e({name:`AuditLogArchive`,description:`Archived audit logs for long-term retention.`,schema:`lssm_audit`,map:`audit_log_archive`,fields:{id:t.id(),batchId:t.string({description:`Archive batch ID`}),logCount:t.int({description:`Number of logs in batch`}),fromDate:t.dateTime({description:`Earliest log in batch`}),toDate:t.dateTime({description:`Latest log in batch`}),storagePath:t.string({description:`Path to archived data`}),storageType:t.string({description:`Storage type (s3, gcs, file)`}),compressedSize:t.int({description:`Compressed size in bytes`}),checksum:t.string({description:`SHA-256 checksum`}),retainUntil:t.dateTime({description:`When archive can be deleted`}),createdAt:t.createdAt()},indexes:[n.on([`fromDate`,`toDate`]),n.on([`retainUntil`])]}),a=[r,i],o={moduleId:`@lssm/module.audit-trail`,entities:a};export{i as AuditLogArchiveEntity,r as AuditLogEntity,a as auditTrailEntities,o as auditTrailSchemaContribution};
+import { defineEntity, field, index } from "../libs/schema/dist/entity/defineEntity.js";
+import "../libs/schema/dist/index.js";
+
+//#region src/entities/index.ts
+/**
+* AuditLog entity - main audit log entry.
+*/
+const AuditLogEntity = defineEntity({
+	name: "AuditLog",
+	description: "Audit log entry for tracking system events.",
+	schema: "lssm_audit",
+	map: "audit_log",
+	fields: {
+		id: field.id({ description: "Unique audit log ID" }),
+		eventName: field.string({ description: "Event name/type" }),
+		eventVersion: field.int({ description: "Event version" }),
+		payload: field.json({ description: "Event payload (may be redacted)" }),
+		actorId: field.string({
+			isOptional: true,
+			description: "User/service that triggered the event"
+		}),
+		actorType: field.string({
+			isOptional: true,
+			description: "Actor type (user, system, service)"
+		}),
+		actorEmail: field.string({
+			isOptional: true,
+			description: "Actor email (for searchability)"
+		}),
+		targetId: field.string({
+			isOptional: true,
+			description: "Resource affected by the event"
+		}),
+		targetType: field.string({
+			isOptional: true,
+			description: "Resource type"
+		}),
+		orgId: field.string({
+			isOptional: true,
+			description: "Organization context"
+		}),
+		tenantId: field.string({
+			isOptional: true,
+			description: "Tenant context"
+		}),
+		traceId: field.string({
+			isOptional: true,
+			description: "Distributed trace ID"
+		}),
+		spanId: field.string({
+			isOptional: true,
+			description: "Span ID"
+		}),
+		requestId: field.string({
+			isOptional: true,
+			description: "Request ID"
+		}),
+		sessionId: field.string({
+			isOptional: true,
+			description: "Session ID"
+		}),
+		clientIp: field.string({
+			isOptional: true,
+			description: "Client IP address"
+		}),
+		userAgent: field.string({
+			isOptional: true,
+			description: "User agent string"
+		}),
+		tags: field.json({
+			isOptional: true,
+			description: "Custom tags for filtering"
+		}),
+		metadata: field.json({
+			isOptional: true,
+			description: "Additional metadata"
+		}),
+		occurredAt: field.dateTime({ description: "When the event occurred" }),
+		recordedAt: field.createdAt({ description: "When the log was recorded" })
+	},
+	indexes: [
+		index.on(["actorId", "occurredAt"]),
+		index.on(["targetId", "occurredAt"]),
+		index.on(["orgId", "occurredAt"]),
+		index.on(["eventName", "occurredAt"]),
+		index.on(["traceId"]),
+		index.on(["occurredAt"])
+	]
+});
+/**
+* AuditLogArchive entity - archived logs for long-term retention.
+*/
+const AuditLogArchiveEntity = defineEntity({
+	name: "AuditLogArchive",
+	description: "Archived audit logs for long-term retention.",
+	schema: "lssm_audit",
+	map: "audit_log_archive",
+	fields: {
+		id: field.id(),
+		batchId: field.string({ description: "Archive batch ID" }),
+		logCount: field.int({ description: "Number of logs in batch" }),
+		fromDate: field.dateTime({ description: "Earliest log in batch" }),
+		toDate: field.dateTime({ description: "Latest log in batch" }),
+		storagePath: field.string({ description: "Path to archived data" }),
+		storageType: field.string({ description: "Storage type (s3, gcs, file)" }),
+		compressedSize: field.int({ description: "Compressed size in bytes" }),
+		checksum: field.string({ description: "SHA-256 checksum" }),
+		retainUntil: field.dateTime({ description: "When archive can be deleted" }),
+		createdAt: field.createdAt()
+	},
+	indexes: [index.on(["fromDate", "toDate"]), index.on(["retainUntil"])]
+});
+/**
+* All audit trail entities for schema composition.
+*/
+const auditTrailEntities = [AuditLogEntity, AuditLogArchiveEntity];
+/**
+* Module schema contribution for audit trail.
+*/
+const auditTrailSchemaContribution = {
+	moduleId: "@lssm/module.audit-trail",
+	entities: auditTrailEntities
+};
+
+//#endregion
+export { AuditLogArchiveEntity, AuditLogEntity, auditTrailEntities, auditTrailSchemaContribution };

package/dist/index.js

@@ -1 +1,6 @@
-import{AuditTrailFeature as e}from"./audit-trail.feature.js";import{AuditLogArchiveEntity as t,AuditLogEntity as n,auditTrailEntities as r,auditTrailSchemaContribution as i}from"./entities/index.js";import{AuditExportInputModel as a,AuditExportOutputModel as o,AuditLogModel as s,AuditQueryInputModel as c,AuditQueryOutputModel as l,AuditStatsInputModel as u,AuditStatsOutputModel as d,ExportAuditLogsContract as f,ExportFormatEnum as p,ExportStatusEnum as m,GetAuditLogContract as h,GetAuditStatsContract as g,GetAuditTraceContract as _,QueryAuditLogsContract as v}from"./contracts/index.js";import{InMemoryAuditStorage as y,RetentionPolicy as b,createInMemoryAuditStorage as x}from"./storage/index.js";export{a as AuditExportInputModel,o as AuditExportOutputModel,t as AuditLogArchiveEntity,n as AuditLogEntity,s as AuditLogModel,c as AuditQueryInputModel,l as AuditQueryOutputModel,u as AuditStatsInputModel,d as AuditStatsOutputModel,e as AuditTrailFeature,f as ExportAuditLogsContract,p as ExportFormatEnum,m as ExportStatusEnum,h as GetAuditLogContract,g as GetAuditStatsContract,_ as GetAuditTraceContract,y as InMemoryAuditStorage,v as QueryAuditLogsContract,b as RetentionPolicy,r as auditTrailEntities,i as auditTrailSchemaContribution,x as createInMemoryAuditStorage};
+import { AuditTrailFeature } from "./audit-trail.feature.js";
+import { AuditLogArchiveEntity, AuditLogEntity, auditTrailEntities, auditTrailSchemaContribution } from "./entities/index.js";
+import { AuditExportInputModel, AuditExportOutputModel, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, ExportAuditLogsContract, ExportFormatEnum, ExportStatusEnum, GetAuditLogContract, GetAuditStatsContract, GetAuditTraceContract, QueryAuditLogsContract } from "./contracts/index.js";
+import { InMemoryAuditStorage, RetentionPolicy, createInMemoryAuditStorage } from "./storage/index.js";
+
+export { AuditExportInputModel, AuditExportOutputModel, AuditLogArchiveEntity, AuditLogEntity, AuditLogModel, AuditQueryInputModel, AuditQueryOutputModel, AuditStatsInputModel, AuditStatsOutputModel, AuditTrailFeature, ExportAuditLogsContract, ExportFormatEnum, ExportStatusEnum, GetAuditLogContract, GetAuditStatsContract, GetAuditTraceContract, InMemoryAuditStorage, QueryAuditLogsContract, RetentionPolicy, auditTrailEntities, auditTrailSchemaContribution, createInMemoryAuditStorage };

package/dist/libs/contracts/dist/capabilities/openbanking.js

@@ -0,0 +1,88 @@
+import { StabilityEnum } from "../ownership.js";
+
+//#region ../../libs/contracts/dist/capabilities/openbanking.js
+const OWNERS = ["platform.finance"];
+const TAGS = ["open-banking", "finance"];
+const openBankingAccountsReadCapability = {
+	meta: {
+		key: "openbanking.accounts.read",
+		version: 1,
+		kind: "integration",
+		title: "Open Banking Accounts (Read)",
+		description: "Provides read-only access to linked bank accounts, including account summaries and metadata.",
+		domain: "finance",
+		owners: [...OWNERS],
+		tags: [...TAGS],
+		stability: StabilityEnum.Experimental
+	},
+	provides: [
+		{
+			surface: "operation",
+			name: "openbanking.accounts.list",
+			version: 1,
+			description: "List bank accounts linked to a Powens open banking connection."
+		},
+		{
+			surface: "operation",
+			name: "openbanking.accounts.get",
+			version: 1,
+			description: "Retrieve the canonical bank account record for a specific account."
+		},
+		{
+			surface: "operation",
+			name: "openbanking.accounts.sync",
+			version: 1,
+			description: "Trigger a refresh of bank account metadata from the open banking provider."
+		}
+	]
+};
+const openBankingTransactionsReadCapability = {
+	meta: {
+		key: "openbanking.transactions.read",
+		version: 1,
+		kind: "integration",
+		title: "Open Banking Transactions (Read)",
+		description: "Enables retrieval of transaction history for linked bank accounts via open banking providers.",
+		domain: "finance",
+		owners: [...OWNERS],
+		tags: [...TAGS, "transactions"],
+		stability: StabilityEnum.Experimental
+	},
+	provides: [{
+		surface: "operation",
+		name: "openbanking.transactions.list",
+		version: 1,
+		description: "List transactions for a given bank account with optional date filtering."
+	}, {
+		surface: "operation",
+		name: "openbanking.transactions.sync",
+		version: 1,
+		description: "Synchronise transactions from the open banking provider into the canonical ledger."
+	}]
+};
+const openBankingBalancesReadCapability = {
+	meta: {
+		key: "openbanking.balances.read",
+		version: 1,
+		kind: "integration",
+		title: "Open Banking Balances (Read)",
+		description: "Allows querying of current and available balances for linked bank accounts via open banking providers.",
+		domain: "finance",
+		owners: [...OWNERS],
+		tags: [...TAGS, "balances"],
+		stability: StabilityEnum.Experimental
+	},
+	provides: [{
+		surface: "operation",
+		name: "openbanking.balances.get",
+		version: 1,
+		description: "Retrieve the latest known balances for a specified bank account."
+	}, {
+		surface: "operation",
+		name: "openbanking.balances.refresh",
+		version: 1,
+		description: "Force a balance refresh from the open banking provider."
+	}]
+};
+
+//#endregion

package/dist/libs/contracts/dist/client/index.js

@@ -0,0 +1,5 @@
+'use client';
+
+import "./react/feature-render.js";
+import "./react/form-render.js";
+import "./react/index.js";

package/dist/libs/contracts/dist/client/react/feature-render.js

@@ -0,0 +1,2 @@
+import "../../presentations.v2.js";
+import "react";

package/dist/libs/contracts/dist/client/react/form-render.js

@@ -0,0 +1,4 @@
+import "react";
+import "react-hook-form";
+import "@hookform/resolvers/zod";
+import "react/jsx-runtime";