@nahisaho/katashiro-security 1.3.0 → 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 nahisaho
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/action-logger.d.ts

@@ -0,0 +1,114 @@
+/**
+ * ActionLogger - 監査ログ記録クラス
+ *
+ * @requirement REQ-012-05
+ * @design すべてのアクションをタイムスタンプ付きで記録
+ */
+import { Action, SecurityAnalysis, Observation, AuditLogEntry, AuditLogFilter, UserConfirmation, RiskLevel } from './types';
+/**
+ * ログストレージインターフェース
+ */
+export interface LogStorage {
+    /** ログエントリを追加 */
+    append(entry: AuditLogEntry): Promise<void>;
+    /** ログを検索 */
+    query(filter: AuditLogFilter): Promise<AuditLogEntry[]>;
+    /** ログをクリア */
+    clear(): Promise<void>;
+    /** ログ件数を取得 */
+    count(): Promise<number>;
+}
+/**
+ * インメモリログストレージ
+ */
+export declare class InMemoryLogStorage implements LogStorage {
+    private logs;
+    private maxEntries;
+    constructor(maxEntries?: number);
+    append(entry: AuditLogEntry): Promise<void>;
+    query(filter: AuditLogFilter): Promise<AuditLogEntry[]>;
+    clear(): Promise<void>;
+    count(): Promise<number>;
+    /**
+     * 全ログを取得（テスト用）
+     */
+    getAllLogs(): AuditLogEntry[];
+}
+/**
+ * ActionLoggerオプション
+ */
+export interface ActionLoggerOptions {
+    /** ログストレージ */
+    storage?: LogStorage;
+    /** 最小記録リスクレベル */
+    minLogLevel?: RiskLevel;
+    /** ID生成関数 */
+    generateId?: () => string;
+}
+/**
+ * アクションロガー
+ */
+export declare class ActionLogger {
+    private readonly storage;
+    private readonly minLogLevel;
+    private readonly generateId;
+    constructor(options?: ActionLoggerOptions);
+    /**
+     * アクションと分析結果を記録（REQ-012-05）
+     */
+    logAction(action: Action, analysis: SecurityAnalysis, observation?: Observation, userConfirmation?: UserConfirmation): Promise<string>;
+    /**
+     * アクション開始を記録
+     */
+    logActionStart(action: Action, analysis: SecurityAnalysis): Promise<string>;
+    /**
+     * アクション完了を記録（既存エントリを更新）
+     */
+    logActionComplete(logId: string, observation: Observation, userConfirmation?: UserConfirmation): Promise<void>;
+    /**
+     * ログを検索
+     */
+    queryLogs(filter: AuditLogFilter): Promise<AuditLogEntry[]>;
+    /**
+     * 最近のログを取得
+     */
+    getRecentLogs(count?: number): Promise<AuditLogEntry[]>;
+    /**
+     * 高リスクログを取得
+     */
+    getHighRiskLogs(count?: number): Promise<AuditLogEntry[]>;
+    /**
+     * ユーザーのログを取得
+     */
+    getUserLogs(userId: string, count?: number): Promise<AuditLogEntry[]>;
+    /**
+     * ログをクリア
+     */
+    clearLogs(): Promise<void>;
+    /**
+     * ログ件数を取得
+     */
+    getLogCount(): Promise<number>;
+    /**
+     * サマリーを生成
+     */
+    generateSummary(filter?: AuditLogFilter): Promise<AuditLogSummary>;
+}
+/**
+ * 監査ログサマリー
+ */
+export interface AuditLogSummary {
+    /** 総アクション数 */
+    totalActions: number;
+    /** リスクレベル別件数 */
+    byRiskLevel: Record<RiskLevel, number>;
+    /** アクションタイプ別件数 */
+    byActionType: Record<string, number>;
+    /** 成功率 */
+    successRate: number;
+    /** ブロック数 */
+    blockedCount: number;
+    /** 確認数 */
+    confirmedCount: number;
+}
+//# sourceMappingURL=action-logger.d.ts.map

package/dist/action-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-logger.d.ts","sourceRoot":"","sources":["../src/action-logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,MAAM,EACN,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,SAAS,EAEV,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,gBAAgB;IAChB,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,YAAY;IACZ,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxD,aAAa;IACb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,cAAc;IACd,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1B;AAED;;GAEG;AACH,qBAAa,kBAAmB,YAAW,UAAU;IACnD,OAAO,CAAC,IAAI,CAAuB;IACnC,OAAO,CAAC,UAAU,CAAS;gBAEf,UAAU,GAAE,MAAc;IAIhC,MAAM,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3C,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAgEvD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAI9B;;OAEG;IACH,UAAU,IAAI,aAAa,EAAE;CAG9B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,cAAc;IACd,OAAO,CAAC,EAAE,UAAU,CAAC;IACrB,iBAAiB;IACjB,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,aAAa;IACb,UAAU,CAAC,EAAE,MAAM,MAAM,CAAC;CAC3B;AAED;;GAEG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAa;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAY;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAe;gBAE9B,OAAO,GAAE,mBAAwB;IAQ7C;;OAEG;IACG,SAAS,CACb,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,gBAAgB,EAC1B,WAAW,CAAC,EAAE,WAAW,EACzB,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,OAAO,CAAC,MAAM,CAAC;IAqBlB;;OAEG;IACG,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIjF;;OAEG;IACG,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,WAAW,EACxB,gBAAgB,CAAC,EAAE,gBAAgB,GAClC,OAAO,CAAC,IAAI,CAAC;IAahB;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIjE;;OAEG;IACG,aAAa,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIjE;;OAEG;IACG,eAAe,CAAC,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAInE;;OAEG;IACG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAI/E;;OAEG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAIhC;;OAEG;IACG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAIpC;;OAEG;IACG,eAAe,CAAC,MAAM,GAAE,cAAmB,GAAG,OAAO,CAAC,eAAe,CAAC;CA+C7E;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,cAAc;IACd,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB;IAChB,WAAW,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACvC,kBAAkB;IAClB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,UAAU;IACV,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU;IACV,cAAc,EAAE,MAAM,CAAC;CACxB"}

package/dist/action-logger.js

@@ -0,0 +1,358 @@
+"use strict";
+/**
+ * ActionLogger - 監査ログ記録クラス
+ *
+ * @requirement REQ-012-05
+ * @design すべてのアクションをタイムスタンプ付きで記録
+ */
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {
+    if (pack || arguments.length === 2) for (var i = 0, l = from.length, ar; i < l; i++) {
+        if (ar || !(i in from)) {
+            if (!ar) ar = Array.prototype.slice.call(from, 0, i);
+            ar[i] = from[i];
+        }
+    }
+    return to.concat(ar || Array.prototype.slice.call(from));
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionLogger = exports.InMemoryLogStorage = void 0;
+var types_1 = require("./types");
+/**
+ * インメモリログストレージ
+ */
+var InMemoryLogStorage = /** @class */ (function () {
+    function InMemoryLogStorage(maxEntries) {
+        if (maxEntries === void 0) { maxEntries = 10000; }
+        this.logs = [];
+        this.maxEntries = maxEntries;
+    }
+    InMemoryLogStorage.prototype.append = function (entry) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.logs.push(entry);
+                // 最大件数を超えたら古いログを削除
+                if (this.logs.length > this.maxEntries) {
+                    this.logs = this.logs.slice(-this.maxEntries);
+                }
+                return [2 /*return*/];
+            });
+        });
+    };
+    InMemoryLogStorage.prototype.query = function (filter) {
+        return __awaiter(this, void 0, void 0, function () {
+            var results, minOrder_1, keyword_1, offset, limit;
+            var _a, _b;
+            return __generator(this, function (_c) {
+                results = __spreadArray([], this.logs, true);
+                // 時間範囲フィルター
+                if (filter.startTime) {
+                    results = results.filter(function (e) { return e.timestamp >= filter.startTime; });
+                }
+                if (filter.endTime) {
+                    results = results.filter(function (e) { return e.timestamp <= filter.endTime; });
+                }
+                // アクションタイプフィルター
+                if (filter.actionTypes && filter.actionTypes.length > 0) {
+                    results = results.filter(function (e) { return filter.actionTypes.includes(e.action.type); });
+                }
+                // リスクレベルフィルター
+                if (filter.minRiskLevel) {
+                    minOrder_1 = types_1.RISK_LEVEL_ORDER[filter.minRiskLevel];
+                    results = results.filter(function (e) { return types_1.RISK_LEVEL_ORDER[e.analysis.riskLevel] >= minOrder_1; });
+                }
+                // 成功/失敗フィルター
+                if (filter.success !== undefined) {
+                    results = results.filter(function (e) { var _a; return ((_a = e.observation) === null || _a === void 0 ? void 0 : _a.success) === filter.success; });
+                }
+                // ユーザーIDフィルター
+                if (filter.userId) {
+                    results = results.filter(function (e) { var _a; return ((_a = e.action.context) === null || _a === void 0 ? void 0 : _a.userId) === filter.userId; });
+                }
+                // キーワード検索
+                if (filter.keyword) {
+                    keyword_1 = filter.keyword.toLowerCase();
+                    results = results.filter(function (e) {
+                        var _a;
+                        var searchText = __spreadArray(__spreadArray([
+                            e.action.name,
+                            e.action.target
+                        ], e.analysis.reasons, true), [
+                            (_a = e.observation) === null || _a === void 0 ? void 0 : _a.error,
+                        ], false).filter(Boolean)
+                            .join(' ')
+                            .toLowerCase();
+                        return searchText.includes(keyword_1);
+                    });
+                }
+                // ソート（新しい順）
+                results.sort(function (a, b) { return b.timestamp.localeCompare(a.timestamp); });
+                offset = (_a = filter.offset) !== null && _a !== void 0 ? _a : 0;
+                limit = (_b = filter.limit) !== null && _b !== void 0 ? _b : 100;
+                return [2 /*return*/, results.slice(offset, offset + limit)];
+            });
+        });
+    };
+    InMemoryLogStorage.prototype.clear = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                this.logs = [];
+                return [2 /*return*/];
+            });
+        });
+    };
+    InMemoryLogStorage.prototype.count = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.logs.length];
+            });
+        });
+    };
+    /**
+     * 全ログを取得（テスト用）
+     */
+    InMemoryLogStorage.prototype.getAllLogs = function () {
+        return __spreadArray([], this.logs, true);
+    };
+    return InMemoryLogStorage;
+}());
+exports.InMemoryLogStorage = InMemoryLogStorage;
+/**
+ * アクションロガー
+ */
+var ActionLogger = /** @class */ (function () {
+    function ActionLogger(options) {
+        if (options === void 0) { options = {}; }
+        var _a, _b, _c;
+        this.storage = (_a = options.storage) !== null && _a !== void 0 ? _a : new InMemoryLogStorage();
+        this.minLogLevel = (_b = options.minLogLevel) !== null && _b !== void 0 ? _b : 'low';
+        this.generateId =
+            (_c = options.generateId) !== null && _c !== void 0 ? _c : (function () { return "log-".concat(Date.now(), "-").concat(Math.random().toString(36).slice(2, 8)); });
+    }
+    /**
+     * アクションと分析結果を記録（REQ-012-05）
+     */
+    ActionLogger.prototype.logAction = function (action, analysis, observation, userConfirmation) {
+        return __awaiter(this, void 0, void 0, function () {
+            var entry;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        // 最小リスクレベル未満はスキップ
+                        if (types_1.RISK_LEVEL_ORDER[analysis.riskLevel] < types_1.RISK_LEVEL_ORDER[this.minLogLevel]) {
+                            return [2 /*return*/, ''];
+                        }
+                        entry = {
+                            id: this.generateId(),
+                            timestamp: new Date().toISOString(),
+                            action: action,
+                            analysis: analysis,
+                            observation: observation,
+                            userConfirmation: userConfirmation,
+                        };
+                        return [4 /*yield*/, this.storage.append(entry)];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/, entry.id];
+                }
+            });
+        });
+    };
+    /**
+     * アクション開始を記録
+     */
+    ActionLogger.prototype.logActionStart = function (action, analysis) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.logAction(action, analysis)];
+            });
+        });
+    };
+    /**
+     * アクション完了を記録（既存エントリを更新）
+     */
+    ActionLogger.prototype.logActionComplete = function (logId, observation, userConfirmation) {
+        return __awaiter(this, void 0, void 0, function () {
+            var logs, entry;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.storage.query({ limit: 1000 })];
+                    case 1:
+                        logs = _a.sent();
+                        entry = logs.find(function (e) { return e.id === logId; });
+                        if (entry) {
+                            entry.observation = observation;
+                            if (userConfirmation) {
+                                entry.userConfirmation = userConfirmation;
+                            }
+                        }
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    /**
+     * ログを検索
+     */
+    ActionLogger.prototype.queryLogs = function (filter) {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.query(filter)];
+            });
+        });
+    };
+    /**
+     * 最近のログを取得
+     */
+    ActionLogger.prototype.getRecentLogs = function () {
+        return __awaiter(this, arguments, void 0, function (count) {
+            if (count === void 0) { count = 10; }
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.query({ limit: count })];
+            });
+        });
+    };
+    /**
+     * 高リスクログを取得
+     */
+    ActionLogger.prototype.getHighRiskLogs = function () {
+        return __awaiter(this, arguments, void 0, function (count) {
+            if (count === void 0) { count = 10; }
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.query({ minRiskLevel: 'high', limit: count })];
+            });
+        });
+    };
+    /**
+     * ユーザーのログを取得
+     */
+    ActionLogger.prototype.getUserLogs = function (userId_1) {
+        return __awaiter(this, arguments, void 0, function (userId, count) {
+            if (count === void 0) { count = 10; }
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.query({ userId: userId, limit: count })];
+            });
+        });
+    };
+    /**
+     * ログをクリア
+     */
+    ActionLogger.prototype.clearLogs = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.clear()];
+            });
+        });
+    };
+    /**
+     * ログ件数を取得
+     */
+    ActionLogger.prototype.getLogCount = function () {
+        return __awaiter(this, void 0, void 0, function () {
+            return __generator(this, function (_a) {
+                return [2 /*return*/, this.storage.count()];
+            });
+        });
+    };
+    /**
+     * サマリーを生成
+     */
+    ActionLogger.prototype.generateSummary = function () {
+        return __awaiter(this, arguments, void 0, function (filter) {
+            var logs, summary, successCount, totalWithObservation, _i, logs_1, log;
+            var _a, _b;
+            if (filter === void 0) { filter = {}; }
+            return __generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0: return [4 /*yield*/, this.storage.query(__assign(__assign({}, filter), { limit: 10000 }))];
+                    case 1:
+                        logs = _c.sent();
+                        summary = {
+                            totalActions: logs.length,
+                            byRiskLevel: { low: 0, medium: 0, high: 0, critical: 0 },
+                            byActionType: {},
+                            successRate: 0,
+                            blockedCount: 0,
+                            confirmedCount: 0,
+                        };
+                        successCount = 0;
+                        totalWithObservation = 0;
+                        for (_i = 0, logs_1 = logs; _i < logs_1.length; _i++) {
+                            log = logs_1[_i];
+                            // リスクレベル別
+                            summary.byRiskLevel[log.analysis.riskLevel]++;
+                            // アクションタイプ別
+                            summary.byActionType[log.action.type] =
+                                ((_a = summary.byActionType[log.action.type]) !== null && _a !== void 0 ? _a : 0) + 1;
+                            // 成功率計算
+                            if (log.observation) {
+                                totalWithObservation++;
+                                if (log.observation.success) {
+                                    successCount++;
+                                }
+                            }
+                            // ブロック数
+                            if (!log.analysis.allowed) {
+                                summary.blockedCount++;
+                            }
+                            // 確認数
+                            if ((_b = log.userConfirmation) === null || _b === void 0 ? void 0 : _b.confirmed) {
+                                summary.confirmedCount++;
+                            }
+                        }
+                        summary.successRate =
+                            totalWithObservation > 0 ? successCount / totalWithObservation : 0;
+                        return [2 /*return*/, summary];
+                }
+            });
+        });
+    };
+    return ActionLogger;
+}());
+exports.ActionLogger = ActionLogger;

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @nahisaho/katashiro-security
+ *
+ * Security analysis and audit logging for KATASHIRO
+ * @requirement REQ-012
+ */
+export { RiskLevel, RISK_LEVEL_ORDER, compareRiskLevels, isRiskLevelAtLeast, ActionType, Action, ActionContext, Observation, PatternRule, SecurityPolicy, RiskRule, RiskRuleMatch, SecurityAnalysis, AuditLogEntry, UserConfirmation, AuditLogFilter, DEFAULT_SECURITY_POLICY, BUILTIN_RISK_RULES, SecurityErrorCode, SecurityError, } from './types';
+export { SecurityAnalyzer, SecurityAnalyzerOptions } from './security-analyzer';
+export { LogStorage, InMemoryLogStorage, ActionLogger, ActionLoggerOptions, AuditLogSummary, } from './action-logger';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,SAAS,EACT,gBAAgB,EAChB,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,MAAM,EACN,aAAa,EACb,WAAW,EACX,WAAW,EACX,cAAc,EACd,QAAQ,EACR,aAAa,EACb,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAGhF,OAAO,EACL,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * @nahisaho/katashiro-security
+ *
+ * Security analysis and audit logging for KATASHIRO
+ * @requirement REQ-012
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionLogger = exports.InMemoryLogStorage = exports.SecurityAnalyzer = exports.SecurityError = exports.BUILTIN_RISK_RULES = exports.DEFAULT_SECURITY_POLICY = exports.isRiskLevelAtLeast = exports.compareRiskLevels = exports.RISK_LEVEL_ORDER = void 0;
+// Types
+var types_1 = require("./types");
+Object.defineProperty(exports, "RISK_LEVEL_ORDER", { enumerable: true, get: function () { return types_1.RISK_LEVEL_ORDER; } });
+Object.defineProperty(exports, "compareRiskLevels", { enumerable: true, get: function () { return types_1.compareRiskLevels; } });
+Object.defineProperty(exports, "isRiskLevelAtLeast", { enumerable: true, get: function () { return types_1.isRiskLevelAtLeast; } });
+Object.defineProperty(exports, "DEFAULT_SECURITY_POLICY", { enumerable: true, get: function () { return types_1.DEFAULT_SECURITY_POLICY; } });
+Object.defineProperty(exports, "BUILTIN_RISK_RULES", { enumerable: true, get: function () { return types_1.BUILTIN_RISK_RULES; } });
+Object.defineProperty(exports, "SecurityError", { enumerable: true, get: function () { return types_1.SecurityError; } });
+// SecurityAnalyzer
+var security_analyzer_1 = require("./security-analyzer");
+Object.defineProperty(exports, "SecurityAnalyzer", { enumerable: true, get: function () { return security_analyzer_1.SecurityAnalyzer; } });
+// ActionLogger
+var action_logger_1 = require("./action-logger");
+Object.defineProperty(exports, "InMemoryLogStorage", { enumerable: true, get: function () { return action_logger_1.InMemoryLogStorage; } });
+Object.defineProperty(exports, "ActionLogger", { enumerable: true, get: function () { return action_logger_1.ActionLogger; } });

package/dist/security-analyzer.d.ts

@@ -0,0 +1,71 @@
+/**
+ * SecurityAnalyzer - セキュリティ分析クラス
+ *
+ * @requirement REQ-012
+ * @design REQ-012-01 リスクレベル評価
+ * @design REQ-012-02 確認プロンプト判定
+ * @design REQ-012-03 拒否パターンブロック
+ * @design REQ-012-04 許可パターン判定
+ * @design REQ-012-06 ファイル削除=高リスク
+ */
+import { Action, SecurityPolicy, SecurityAnalysis, RiskRule } from './types';
+/**
+ * SecurityAnalyzerオプション
+ */
+export interface SecurityAnalyzerOptions {
+    /** カスタムポリシー */
+    policy?: Partial<SecurityPolicy>;
+    /** ビルトインルールを使用するか */
+    useBuiltinRules?: boolean;
+    /** 追加のリスクルール */
+    additionalRules?: RiskRule[];
+}
+/**
+ * セキュリティ分析器
+ */
+export declare class SecurityAnalyzer {
+    private readonly policy;
+    private readonly riskRules;
+    constructor(options?: SecurityAnalyzerOptions);
+    /**
+     * アクションを分析（REQ-012-01）
+     */
+    analyze(action: Action): SecurityAnalysis;
+    /**
+     * アクションの実行を検証（確認が不要な場合のみ許可）
+     */
+    validateAction(action: Action): void;
+    /**
+     * 確認付きでアクションを検証
+     */
+    validateActionWithConfirmation(action: Action, confirmed: boolean): void;
+    /**
+     * 拒否パターンをチェック（REQ-012-03）
+     */
+    private checkDenyPatterns;
+    /**
+     * 許可パターンをチェック（REQ-012-04）
+     */
+    private checkAllowPatterns;
+    /**
+     * リスクレベルを評価
+     */
+    private evaluateRiskLevel;
+    /**
+     * ルールがアクションにマッチするかチェック
+     */
+    private matchesRule;
+    /**
+     * 現在のポリシーを取得
+     */
+    getPolicy(): SecurityPolicy;
+    /**
+     * リスクルールを取得
+     */
+    getRiskRules(): RiskRule[];
+    /**
+     * ポリシーを更新
+     */
+    updatePolicy(update: Partial<SecurityPolicy>): void;
+}
+//# sourceMappingURL=security-analyzer.d.ts.map

package/dist/security-analyzer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-analyzer.d.ts","sourceRoot":"","sources":["../src/security-analyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,MAAM,EACN,cAAc,EACd,gBAAgB,EAEhB,QAAQ,EAOT,MAAM,SAAS,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe;IACf,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,qBAAqB;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gBAAgB;IAChB,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC9B;AAED;;GAEG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAa;gBAE3B,OAAO,GAAE,uBAA4B;IA4BjD;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB;IA8DzC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAgBpC;;OAEG;IACH,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI;IAgBxE;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAkBzB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAsBzB;;OAEG;IACH,OAAO,CAAC,WAAW;IA8BnB;;OAEG;IACH,SAAS,IAAI,cAAc;IAI3B;;OAEG;IACH,YAAY,IAAI,QAAQ,EAAE;IAI1B;;OAEG;IACH,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,IAAI;CAiBpD"}