@parmanasystems/audit-db 1.18.0 → 1.20.0

package/dist/index.js

@@ -5,7 +5,7 @@ import { Pool } from "pg";
 var SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS audit_decisions (
   id              BIGSERIAL    PRIMARY KEY,
-  execution_id    UUID         NOT NULL UNIQUE,
+  execution_id    TEXT         NOT NULL UNIQUE,
   policy_id       TEXT         NOT NULL,
   policy_version  TEXT         NOT NULL,
   schema_version  TEXT         NOT NULL,
@@ -31,7 +31,7 @@ CREATE INDEX IF NOT EXISTS idx_audit_decisions_decision
 
 CREATE TABLE IF NOT EXISTS audit_verifications (
   id                   BIGSERIAL    PRIMARY KEY,
-  execution_id         UUID         NOT NULL,
+  execution_id         TEXT         NOT NULL,
   valid                BOOLEAN      NOT NULL,
   signature_verified   BOOLEAN      NOT NULL,
   runtime_verified     BOOLEAN      NOT NULL,
@@ -84,7 +84,7 @@ CREATE TABLE IF NOT EXISTS audit_api_access (
   response_time_ms INTEGER,
   ip_address       TEXT,
   user_agent       TEXT,
-  execution_id     UUID,
+  execution_id     TEXT,
   accessed_at      TIMESTAMPTZ  NOT NULL DEFAULT NOW()
 );
 
@@ -99,8 +99,8 @@ CREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at
 
 CREATE TABLE IF NOT EXISTS audit_overrides (
   id                 BIGSERIAL    PRIMARY KEY,
-  override_id        UUID         NOT NULL UNIQUE,
-  execution_id       UUID         NOT NULL,
+  override_id        TEXT         NOT NULL UNIQUE,
+  execution_id       TEXT         NOT NULL,
   approved_by        TEXT         NOT NULL,
   approver_role      TEXT         NOT NULL,
   reason             TEXT         NOT NULL,
@@ -524,26 +524,30 @@ var AuditDb = class {
     const parsed = JSON.parse(value);
     await this.pool.query(
       `
-      INSERT INTO audit_decisions
-        (
-          execution_id,
-          decision,
-          execution_state,
-          attestation,
-          executed_at
-        )
-
-      VALUES ($1,$2,$3,$4,$5)
-
-      ON CONFLICT (execution_id)
-      DO NOTHING
-      `,
+    INSERT INTO audit_decisions
+      (
+        execution_id,
+        decision,
+        execution_state,
+        runtime_hash,
+        signature,
+        attestation,
+        executed_at
+      )
+
+    VALUES ($1,$2,$3,$4,$5,$6,$7)
+
+    ON CONFLICT (execution_id)
+    DO NOTHING
+    `,
       [
         executionId,
         JSON.stringify(
           parsed.token.decision_payload
         ),
         "pending_override",
+        parsed.runtime_manifest.runtime_hash,
+        parsed.token_signature,
         value,
         (/* @__PURE__ */ new Date()).toISOString()
       ]

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/client.ts","../src/migrations.ts"],"sourcesContent":["import { Pool } from \"pg\";\r\nimport type { PoolClient } from \"pg\";\r\n\r\nimport type { ExecutionAttestation } from \"@parmanasystems/execution\";\r\nimport type { VerificationResult } from \"@parmanasystems/verifier\";\r\n\r\nimport type {\r\n  AuditDecision,\r\n  AuditVerification,\r\n  AuditOverride,\r\n  SecurityEventInput,\r\n  ApiAccessInput,\r\n  DecisionTimelineRow,\r\n  DecisionFilter,\r\n  SecurityDashboardRow,\r\n  AuditStats,\r\n} from \"./types.js\";\r\n\r\nimport { runMigrations } from \"./migrations.js\";\r\n\r\nexport class AuditDb {\r\n\r\n  private readonly pool:\r\n    InstanceType<typeof Pool>;\r\n\r\n  constructor(\r\n    connectionString: string\r\n  ) {\r\n\r\n    this.pool =\r\n      new Pool({\r\n        connectionString\r\n      });\r\n  }\r\n\r\n  async ping(): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      \"SELECT 1\"\r\n    );\r\n  }\r\n\r\n  async disconnect(): Promise<void> {\r\n\r\n    await this.pool.end();\r\n  }\r\n\r\n  async migrate(): Promise<void> {\r\n\r\n    const client:\r\n      PoolClient =\r\n        await this.pool.connect();\r\n\r\n    try {\r\n\r\n      await runMigrations(\r\n        client\r\n      );\r\n\r\n    } finally {\r\n\r\n      client.release();\r\n    }\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision recording\r\n  // ----------------------------------\r\n\r\n  recordDecision(\r\n    attestation: ExecutionAttestation\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_decisions\r\n          (\r\n            execution_id,\r\n            decision,\r\n            execution_state,\r\n            runtime_hash,\r\n            signature,\r\n            attestation,\r\n            executed_at\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n        ON CONFLICT (execution_id)\r\n        DO NOTHING\r\n        `,\r\n        [\r\n          attestation.execution_id,\r\n\r\n          JSON.stringify(\r\n            attestation.decision\r\n          ),\r\n\r\n          attestation.execution_state,\r\n\r\n          attestation.runtime_hash,\r\n\r\n          attestation.signature,\r\n\r\n          JSON.stringify(attestation),\r\n\r\n          new Date().toISOString()\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Verification recording\r\n  // ----------------------------------\r\n\r\n  recordVerification(\r\n    executionId: string,\r\n    result: VerificationResult\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_verifications\r\n          (\r\n            execution_id,\r\n            valid,\r\n            signature_verified,\r\n            runtime_verified,\r\n            schema_compatible\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5)\r\n        `,\r\n        [\r\n          executionId,\r\n          result.valid,\r\n          result.checks.signature_verified,\r\n          result.checks.runtime_verified,\r\n          result.checks.schema_compatible\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Security event recording\r\n  // ----------------------------------\r\n\r\n  recordSecurityEvent(\r\n    event: SecurityEventInput\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_security_events\r\n          (\r\n            event_type,\r\n            severity,\r\n            ip_address,\r\n            path,\r\n            method,\r\n            user_agent,\r\n            details\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n        `,\r\n        [\r\n          event.event_type,\r\n          event.severity,\r\n          event.ip_address ?? null,\r\n          event.path ?? null,\r\n          event.method ?? null,\r\n          event.user_agent ?? null,\r\n\r\n          event.details != null\r\n            ? JSON.stringify(event.details)\r\n            : null\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // API access recording\r\n  // ----------------------------------\r\n\r\n  recordApiAccess(\r\n    access: ApiAccessInput\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_api_access\r\n          (\r\n            method,\r\n            path,\r\n            status_code,\r\n            response_time_ms,\r\n            ip_address,\r\n            user_agent,\r\n            execution_id\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n        `,\r\n        [\r\n          access.method,\r\n          access.path,\r\n          access.status_code,\r\n          access.response_time_ms ?? null,\r\n          access.ip_address ?? null,\r\n          access.user_agent ?? null,\r\n          access.execution_id ?? null\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision timeline\r\n  // ----------------------------------\r\n\r\n  async getDecisionTimeline(\r\n    limit = 100,\r\n    filter?: DecisionFilter\r\n  ): Promise<DecisionTimelineRow[]> {\r\n\r\n    const conditions: string[] = [];\r\n\r\n    const values: unknown[] = [];\r\n\r\n    if (filter?.policy_id) {\r\n\r\n      values.push(\r\n        filter.policy_id\r\n      );\r\n\r\n      conditions.push(\r\n        `policy_id = $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.decision) {\r\n\r\n      values.push(\r\n        filter.decision\r\n      );\r\n\r\n      conditions.push(\r\n        `decision = $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.from_date) {\r\n\r\n      values.push(\r\n        filter.from_date\r\n      );\r\n\r\n      conditions.push(\r\n        `executed_at >= $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.to_date) {\r\n\r\n      values.push(\r\n        filter.to_date\r\n      );\r\n\r\n      conditions.push(\r\n        `executed_at <= $${values.length}`\r\n      );\r\n    }\r\n\r\n    values.push(limit);\r\n\r\n    const limitParam =\r\n      `$${values.length}`;\r\n\r\n    const where =\r\n      conditions.length\r\n        ? `WHERE ${conditions.join(\" AND \")}`\r\n        : \"\";\r\n\r\n    const { rows } =\r\n      await this.pool.query<DecisionTimelineRow>(\r\n        `\r\n        SELECT *\r\n        FROM view_decision_timeline\r\n\r\n        ${where}\r\n\r\n        ORDER BY executed_at DESC\r\n\r\n        LIMIT ${limitParam}\r\n        `,\r\n        values\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Stats\r\n  // ----------------------------------\r\n\r\n  async getStats(): Promise<AuditStats> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditStats>(\r\n        `\r\n        SELECT\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_decisions\r\n          )::text AS total_decisions,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_decisions\r\n            WHERE executed_at >= CURRENT_DATE\r\n          )::text AS decisions_today,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n          )::text AS total_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n            WHERE valid = true\r\n          )::text AS valid_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n            WHERE valid = false\r\n          )::text AS invalid_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_security_events\r\n          )::text AS total_security_events,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_api_access\r\n          )::text AS total_api_calls\r\n        `\r\n      );\r\n\r\n    return rows[0]!;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision lookup\r\n  // ----------------------------------\r\n\r\n  async getDecisionById(\r\n    executionId: string\r\n  ): Promise<AuditDecision | null> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditDecision>(\r\n        `\r\n        SELECT *\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows[0] ?? null;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Verification lookup\r\n  // ----------------------------------\r\n\r\n  async getVerificationsByExecution(\r\n    executionId: string\r\n  ): Promise<AuditVerification[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditVerification>(\r\n        `\r\n        SELECT *\r\n        FROM audit_verifications\r\n\r\n        WHERE execution_id = $1\r\n\r\n        ORDER BY verified_at DESC\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Security dashboard\r\n  // ----------------------------------\r\n\r\n  async getSecurityDashboard():\r\n    Promise<SecurityDashboardRow[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<SecurityDashboardRow>(\r\n        `\r\n        SELECT *\r\n        FROM view_security_dashboard\r\n\r\n        ORDER BY event_count DESC\r\n        `\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Replay protection\r\n  // ----------------------------------\r\n\r\n  async hasExecution(\r\n    executionId: string\r\n  ): Promise<boolean> {\r\n\r\n    const { rows } =\r\n      await this.pool.query(\r\n        `\r\n        SELECT execution_id\r\n\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n\r\n        LIMIT 1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows.length > 0;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Pending override storage\r\n  // ----------------------------------\r\n\r\n  async storePendingExecution(\r\n    attestation: ExecutionAttestation\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      INSERT INTO audit_decisions\r\n        (\r\n          execution_id,\r\n          decision,\r\n          execution_state,\r\n          runtime_hash,\r\n          signature,\r\n          attestation,\r\n          executed_at\r\n        )\r\n\r\n      VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n      ON CONFLICT (execution_id)\r\n      DO NOTHING\r\n      `,\r\n      [\r\n        attestation.execution_id,\r\n\r\n        JSON.stringify(\r\n          attestation.decision\r\n        ),\r\n\r\n        \"pending_override\",\r\n\r\n        attestation.runtime_hash,\r\n\r\n        attestation.signature,\r\n\r\n        JSON.stringify(attestation),\r\n\r\n        new Date().toISOString()\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Redis-compatible KV set\r\n  // ----------------------------------\r\n\r\n  async set(\r\n    key: string,\r\n    value: string\r\n  ): Promise<void> {\r\n\r\n    const executionId =\r\n      key.replace(\r\n        \"pending:\",\r\n        \"\"\r\n      );\r\n\r\n    const parsed =\r\n      JSON.parse(value);\r\n\r\n    await this.pool.query(\r\n      `\r\n      INSERT INTO audit_decisions\r\n        (\r\n          execution_id,\r\n          decision,\r\n          execution_state,\r\n          attestation,\r\n          executed_at\r\n        )\r\n\r\n      VALUES ($1,$2,$3,$4,$5)\r\n\r\n      ON CONFLICT (execution_id)\r\n      DO NOTHING\r\n      `,\r\n      [\r\n        executionId,\r\n\r\n        JSON.stringify(\r\n          parsed.token.decision_payload\r\n        ),\r\n\r\n        \"pending_override\",\r\n\r\n        value,\r\n\r\n        new Date().toISOString()\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Redis-compatible KV get\r\n  // ----------------------------------\r\n\r\n  async get(\r\n    key: string\r\n  ): Promise<string | null> {\r\n\r\n    const executionId =\r\n      key.replace(\r\n        \"pending:\",\r\n        \"\"\r\n      );\r\n\r\n    const { rows } =\r\n      await this.pool.query(\r\n        `\r\n        SELECT attestation\r\n\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n\r\n        LIMIT 1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    if (rows.length === 0) {\r\n      return null;\r\n    }\r\n\r\n    return rows[0].attestation;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Completed execution marking\r\n  // ----------------------------------\r\n\r\n  async markExecuted(\r\n    executionId: string\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      UPDATE audit_decisions\r\n\r\n      SET\r\n        execution_state = $2\r\n\r\n      WHERE execution_id = $1\r\n      `,\r\n      [\r\n        executionId,\r\n        \"completed\"\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Override authority recording\r\n  // ----------------------------------\r\n\r\n  async recordOverride(\r\n    override: AuditOverride\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      INSERT INTO audit_overrides\r\n        (\r\n          override_id,\r\n          execution_id,\r\n          approved_by,\r\n          approver_role,\r\n          reason,\r\n          override_signature,\r\n          approved_at\r\n        )\r\n\r\n      VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n      `,\r\n      [\r\n        override.override_id,\r\n        override.execution_id,\r\n        override.approved_by,\r\n        override.approver_role,\r\n        override.reason,\r\n        override.override_signature,\r\n        override.approved_at\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Override lookup\r\n  // ----------------------------------\r\n\r\n  async getOverridesForExecution(\r\n    executionId: string\r\n  ): Promise<AuditOverride[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditOverride>(\r\n        `\r\n        SELECT *\r\n\r\n        FROM audit_overrides\r\n\r\n        WHERE execution_id = $1\r\n\r\n        ORDER BY approved_at DESC\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Cleanup\r\n  // ----------------------------------\r\n\r\n  async close(): Promise<void> {\r\n\r\n    await this.pool.end();\r\n  }\r\n}","import type { PoolClient } from \"pg\";\r\n\r\n// Inlined so the bundle has no runtime fs dependency.\r\n// The canonical reference lives in schema.sql alongside this file.\r\nconst SCHEMA_SQL = `\r\nCREATE TABLE IF NOT EXISTS audit_decisions (\r\n  id              BIGSERIAL    PRIMARY KEY,\r\n  execution_id    UUID         NOT NULL UNIQUE,\r\n  policy_id       TEXT         NOT NULL,\r\n  policy_version  TEXT         NOT NULL,\r\n  schema_version  TEXT         NOT NULL,\r\n  runtime_version TEXT         NOT NULL,\r\n  runtime_hash    TEXT         NOT NULL,\r\n  decision        TEXT         NOT NULL,\r\n  execution_state TEXT         NOT NULL,\r\n  signals_hash    TEXT         NOT NULL,\r\n  signature       TEXT         NOT NULL,\r\n  attestation     JSONB        NOT NULL,\r\n  executed_at     TIMESTAMPTZ  NOT NULL,\r\n  recorded_at     TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_policy_id\r\n  ON audit_decisions (policy_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_executed_at\r\n  ON audit_decisions (executed_at DESC);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_decision\r\n  ON audit_decisions (decision);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_verifications (\r\n  id                   BIGSERIAL    PRIMARY KEY,\r\n  execution_id         UUID         NOT NULL,\r\n  valid                BOOLEAN      NOT NULL,\r\n  signature_verified   BOOLEAN      NOT NULL,\r\n  runtime_verified     BOOLEAN      NOT NULL,\r\n  schema_compatible    BOOLEAN      NOT NULL,\r\n  verified_at          TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_execution_id\r\n  ON audit_verifications (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_valid\r\n  ON audit_verifications (valid);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_verified_at\r\n  ON audit_verifications (verified_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_security_events (\r\n  id           BIGSERIAL    PRIMARY KEY,\r\n  event_type   TEXT         NOT NULL,\r\n  severity     TEXT         NOT NULL CHECK (\r\n    severity IN (\r\n      'low',\r\n      'medium',\r\n      'high',\r\n      'critical'\r\n    )\r\n  ),\r\n  ip_address   TEXT,\r\n  path         TEXT,\r\n  method       TEXT,\r\n  user_agent   TEXT,\r\n  details      JSONB,\r\n  occurred_at  TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_event_type\r\n  ON audit_security_events (event_type);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_severity\r\n  ON audit_security_events (severity);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_occurred_at\r\n  ON audit_security_events (occurred_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_api_access (\r\n  id               BIGSERIAL    PRIMARY KEY,\r\n  method           TEXT         NOT NULL,\r\n  path             TEXT         NOT NULL,\r\n  status_code      INTEGER      NOT NULL,\r\n  response_time_ms INTEGER,\r\n  ip_address       TEXT,\r\n  user_agent       TEXT,\r\n  execution_id     UUID,\r\n  accessed_at      TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_path\r\n  ON audit_api_access (path);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_status_code\r\n  ON audit_api_access (status_code);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at\r\n  ON audit_api_access (accessed_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_overrides (\r\n  id                 BIGSERIAL    PRIMARY KEY,\r\n  override_id        UUID         NOT NULL UNIQUE,\r\n  execution_id       UUID         NOT NULL,\r\n  approved_by        TEXT         NOT NULL,\r\n  approver_role      TEXT         NOT NULL,\r\n  reason             TEXT         NOT NULL,\r\n  override_signature TEXT         NOT NULL,\r\n  approved_at        TIMESTAMPTZ  NOT NULL,\r\n  recorded_at        TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_execution_id\r\n  ON audit_overrides (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_approved_at\r\n  ON audit_overrides (approved_at DESC);\r\n\r\nCREATE OR REPLACE VIEW view_decision_timeline AS\r\nSELECT\r\n  d.execution_id,\r\n  d.policy_id,\r\n  d.policy_version,\r\n  d.decision,\r\n  d.execution_state,\r\n  d.runtime_version,\r\n  d.runtime_hash,\r\n  d.executed_at,\r\n  d.recorded_at,\r\n  v.valid              AS verification_valid,\r\n  v.signature_verified,\r\n  v.runtime_verified,\r\n  v.schema_compatible,\r\n  v.verified_at\r\nFROM audit_decisions d\r\nLEFT JOIN audit_verifications v\r\nON d.execution_id = v.execution_id;\r\n\r\nCREATE OR REPLACE VIEW view_security_dashboard AS\r\nSELECT\r\n  event_type,\r\n  severity,\r\n  COUNT(*)         AS event_count,\r\n  MAX(occurred_at) AS last_occurrence,\r\n  MIN(occurred_at) AS first_occurrence\r\nFROM audit_security_events\r\nGROUP BY event_type, severity;\r\n`;\r\n\r\nexport async function runMigrations(\r\n  client: PoolClient\r\n): Promise<void> {\r\n\r\n  await client.query(\"BEGIN\");\r\n\r\n  try {\r\n\r\n    await client.query(\r\n      SCHEMA_SQL\r\n    );\r\n\r\n    await client.query(\r\n      \"COMMIT\"\r\n    );\r\n\r\n  } catch (err) {\r\n\r\n    await client.query(\r\n      \"ROLLBACK\"\r\n    );\r\n\r\n    throw err;\r\n  }\r\n}"],"mappings":";AAAA,SAAS,YAAY;;;ACIrB,IAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgJnB,eAAsB,cACpB,QACe;AAEf,QAAM,OAAO,MAAM,OAAO;AAE1B,MAAI;AAEF,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAAA,EAEF,SAAS,KAAK;AAEZ,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AACF;;;ADxJO,IAAM,UAAN,MAAc;AAAA,EAEF;AAAA,EAGjB,YACE,kBACA;AAEA,SAAK,OACH,IAAI,KAAK;AAAA,MACP;AAAA,IACF,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAsB;AAE1B,UAAM,KAAK,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAA4B;AAEhC,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,SAEF,MAAM,KAAK,KAAK,QAAQ;AAE5B,QAAI;AAEF,YAAM;AAAA,QACJ;AAAA,MACF;AAAA,IAEF,UAAE;AAEA,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,eACE,aACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,mBACE,aACA,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYA;AAAA,QACE;AAAA,QACA,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,MAChB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,oBACE,OACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,MAAM,cAAc;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,MAAM,UAAU;AAAA,QAChB,MAAM,cAAc;AAAA,QAEpB,MAAM,WAAW,OACb,KAAK,UAAU,MAAM,OAAO,IAC5B;AAAA,MACN;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,gBACE,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO,oBAAoB;AAAA,QAC3B,OAAO,cAAc;AAAA,QACrB,OAAO,cAAc;AAAA,QACrB,OAAO,gBAAgB;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBACJ,QAAQ,KACR,QACgC;AAEhC,UAAM,aAAuB,CAAC;AAE9B,UAAM,SAAoB,CAAC;AAE3B,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,gBAAgB,OAAO,MAAM;AAAA,MAC/B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AAEpB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,eAAe,OAAO,MAAM;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS;AAEnB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,WAAO,KAAK,KAAK;AAEjB,UAAM,aACJ,IAAI,OAAO,MAAM;AAEnB,UAAM,QACJ,WAAW,SACP,SAAS,WAAW,KAAK,OAAO,CAAC,KACjC;AAEN,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA,UAIE,KAAK;AAAA;AAAA;AAAA;AAAA,gBAIC,UAAU;AAAA;AAAA,MAElB;AAAA,IACF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAgC;AAEpC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyCF;AAEF,WAAO,KAAK,CAAC;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,aAC+B;AAE/B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,CAAC,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,4BACJ,aAC8B;AAE9B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,uBAC4B;AAEhC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACkB;AAElB,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,sBACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,IACJ,KACA,OACe;AAEf,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,SACJ,KAAK,MAAM,KAAK;AAElB,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAeA;AAAA,QACE;AAAA,QAEA,KAAK;AAAA,UACH,OAAO,MAAM;AAAA,QACf;AAAA,QAEA;AAAA,QAEA;AAAA,SAEA,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,IACJ,KACwB;AAExB,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,QAAI,KAAK,WAAW,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,CAAC,EAAE;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eACJ,UACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,yBACJ,aAC0B;AAE1B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAE3B,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACF;","names":[]}
+{"version":3,"sources":["../src/client.ts","../src/migrations.ts"],"sourcesContent":["import { Pool } from \"pg\";\r\nimport type { PoolClient } from \"pg\";\r\n\r\nimport type { ExecutionAttestation } from \"@parmanasystems/execution\";\r\nimport type { VerificationResult } from \"@parmanasystems/verifier\";\r\n\r\nimport type {\r\n  AuditDecision,\r\n  AuditVerification,\r\n  AuditOverride,\r\n  SecurityEventInput,\r\n  ApiAccessInput,\r\n  DecisionTimelineRow,\r\n  DecisionFilter,\r\n  SecurityDashboardRow,\r\n  AuditStats,\r\n} from \"./types.js\";\r\n\r\nimport { runMigrations } from \"./migrations.js\";\r\n\r\nexport class AuditDb {\r\n\r\n  private readonly pool:\r\n    InstanceType<typeof Pool>;\r\n\r\n  constructor(\r\n    connectionString: string\r\n  ) {\r\n\r\n    this.pool =\r\n      new Pool({\r\n        connectionString\r\n      });\r\n  }\r\n\r\n  async ping(): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      \"SELECT 1\"\r\n    );\r\n  }\r\n\r\n  async disconnect(): Promise<void> {\r\n\r\n    await this.pool.end();\r\n  }\r\n\r\n  async migrate(): Promise<void> {\r\n\r\n    const client:\r\n      PoolClient =\r\n        await this.pool.connect();\r\n\r\n    try {\r\n\r\n      await runMigrations(\r\n        client\r\n      );\r\n\r\n    } finally {\r\n\r\n      client.release();\r\n    }\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision recording\r\n  // ----------------------------------\r\n\r\n  recordDecision(\r\n    attestation: ExecutionAttestation\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_decisions\r\n          (\r\n            execution_id,\r\n            decision,\r\n            execution_state,\r\n            runtime_hash,\r\n            signature,\r\n            attestation,\r\n            executed_at\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n        ON CONFLICT (execution_id)\r\n        DO NOTHING\r\n        `,\r\n        [\r\n          attestation.execution_id,\r\n\r\n          JSON.stringify(\r\n            attestation.decision\r\n          ),\r\n\r\n          attestation.execution_state,\r\n\r\n          attestation.runtime_hash,\r\n\r\n          attestation.signature,\r\n\r\n          JSON.stringify(attestation),\r\n\r\n          new Date().toISOString()\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Verification recording\r\n  // ----------------------------------\r\n\r\n  recordVerification(\r\n    executionId: string,\r\n    result: VerificationResult\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_verifications\r\n          (\r\n            execution_id,\r\n            valid,\r\n            signature_verified,\r\n            runtime_verified,\r\n            schema_compatible\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5)\r\n        `,\r\n        [\r\n          executionId,\r\n          result.valid,\r\n          result.checks.signature_verified,\r\n          result.checks.runtime_verified,\r\n          result.checks.schema_compatible\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Security event recording\r\n  // ----------------------------------\r\n\r\n  recordSecurityEvent(\r\n    event: SecurityEventInput\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_security_events\r\n          (\r\n            event_type,\r\n            severity,\r\n            ip_address,\r\n            path,\r\n            method,\r\n            user_agent,\r\n            details\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n        `,\r\n        [\r\n          event.event_type,\r\n          event.severity,\r\n          event.ip_address ?? null,\r\n          event.path ?? null,\r\n          event.method ?? null,\r\n          event.user_agent ?? null,\r\n\r\n          event.details != null\r\n            ? JSON.stringify(event.details)\r\n            : null\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // API access recording\r\n  // ----------------------------------\r\n\r\n  recordApiAccess(\r\n    access: ApiAccessInput\r\n  ): void {\r\n\r\n    this.pool\r\n      .query(\r\n        `\r\n        INSERT INTO audit_api_access\r\n          (\r\n            method,\r\n            path,\r\n            status_code,\r\n            response_time_ms,\r\n            ip_address,\r\n            user_agent,\r\n            execution_id\r\n          )\r\n\r\n        VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n        `,\r\n        [\r\n          access.method,\r\n          access.path,\r\n          access.status_code,\r\n          access.response_time_ms ?? null,\r\n          access.ip_address ?? null,\r\n          access.user_agent ?? null,\r\n          access.execution_id ?? null\r\n        ]\r\n      )\r\n      .catch(() => undefined);\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision timeline\r\n  // ----------------------------------\r\n\r\n  async getDecisionTimeline(\r\n    limit = 100,\r\n    filter?: DecisionFilter\r\n  ): Promise<DecisionTimelineRow[]> {\r\n\r\n    const conditions: string[] = [];\r\n\r\n    const values: unknown[] = [];\r\n\r\n    if (filter?.policy_id) {\r\n\r\n      values.push(\r\n        filter.policy_id\r\n      );\r\n\r\n      conditions.push(\r\n        `policy_id = $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.decision) {\r\n\r\n      values.push(\r\n        filter.decision\r\n      );\r\n\r\n      conditions.push(\r\n        `decision = $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.from_date) {\r\n\r\n      values.push(\r\n        filter.from_date\r\n      );\r\n\r\n      conditions.push(\r\n        `executed_at >= $${values.length}`\r\n      );\r\n    }\r\n\r\n    if (filter?.to_date) {\r\n\r\n      values.push(\r\n        filter.to_date\r\n      );\r\n\r\n      conditions.push(\r\n        `executed_at <= $${values.length}`\r\n      );\r\n    }\r\n\r\n    values.push(limit);\r\n\r\n    const limitParam =\r\n      `$${values.length}`;\r\n\r\n    const where =\r\n      conditions.length\r\n        ? `WHERE ${conditions.join(\" AND \")}`\r\n        : \"\";\r\n\r\n    const { rows } =\r\n      await this.pool.query<DecisionTimelineRow>(\r\n        `\r\n        SELECT *\r\n        FROM view_decision_timeline\r\n\r\n        ${where}\r\n\r\n        ORDER BY executed_at DESC\r\n\r\n        LIMIT ${limitParam}\r\n        `,\r\n        values\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Stats\r\n  // ----------------------------------\r\n\r\n  async getStats(): Promise<AuditStats> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditStats>(\r\n        `\r\n        SELECT\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_decisions\r\n          )::text AS total_decisions,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_decisions\r\n            WHERE executed_at >= CURRENT_DATE\r\n          )::text AS decisions_today,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n          )::text AS total_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n            WHERE valid = true\r\n          )::text AS valid_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_verifications\r\n            WHERE valid = false\r\n          )::text AS invalid_verifications,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_security_events\r\n          )::text AS total_security_events,\r\n\r\n          (\r\n            SELECT COUNT(*)\r\n            FROM audit_api_access\r\n          )::text AS total_api_calls\r\n        `\r\n      );\r\n\r\n    return rows[0]!;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Decision lookup\r\n  // ----------------------------------\r\n\r\n  async getDecisionById(\r\n    executionId: string\r\n  ): Promise<AuditDecision | null> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditDecision>(\r\n        `\r\n        SELECT *\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows[0] ?? null;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Verification lookup\r\n  // ----------------------------------\r\n\r\n  async getVerificationsByExecution(\r\n    executionId: string\r\n  ): Promise<AuditVerification[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditVerification>(\r\n        `\r\n        SELECT *\r\n        FROM audit_verifications\r\n\r\n        WHERE execution_id = $1\r\n\r\n        ORDER BY verified_at DESC\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Security dashboard\r\n  // ----------------------------------\r\n\r\n  async getSecurityDashboard():\r\n    Promise<SecurityDashboardRow[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<SecurityDashboardRow>(\r\n        `\r\n        SELECT *\r\n        FROM view_security_dashboard\r\n\r\n        ORDER BY event_count DESC\r\n        `\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Replay protection\r\n  // ----------------------------------\r\n\r\n  async hasExecution(\r\n    executionId: string\r\n  ): Promise<boolean> {\r\n\r\n    const { rows } =\r\n      await this.pool.query(\r\n        `\r\n        SELECT execution_id\r\n\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n\r\n        LIMIT 1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows.length > 0;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Pending override storage\r\n  // ----------------------------------\r\n\r\n  async storePendingExecution(\r\n    attestation: ExecutionAttestation\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      INSERT INTO audit_decisions\r\n        (\r\n          execution_id,\r\n          decision,\r\n          execution_state,\r\n          runtime_hash,\r\n          signature,\r\n          attestation,\r\n          executed_at\r\n        )\r\n\r\n      VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n      ON CONFLICT (execution_id)\r\n      DO NOTHING\r\n      `,\r\n      [\r\n        attestation.execution_id,\r\n\r\n        JSON.stringify(\r\n          attestation.decision\r\n        ),\r\n\r\n        \"pending_override\",\r\n\r\n        attestation.runtime_hash,\r\n\r\n        attestation.signature,\r\n\r\n        JSON.stringify(attestation),\r\n\r\n        new Date().toISOString()\r\n      ]\r\n    );\r\n  }\r\n\r\n// ----------------------------------\r\n// Redis-compatible KV set\r\n// ----------------------------------\r\n\r\nasync set(\r\n  key: string,\r\n  value: string\r\n): Promise<void> {\r\n\r\n  const executionId =\r\n    key.replace(\r\n      \"pending:\",\r\n      \"\"\r\n    );\r\n\r\n  const parsed =\r\n    JSON.parse(value);\r\n\r\n  await this.pool.query(\r\n    `\r\n    INSERT INTO audit_decisions\r\n      (\r\n        execution_id,\r\n        decision,\r\n        execution_state,\r\n        runtime_hash,\r\n        signature,\r\n        attestation,\r\n        executed_at\r\n      )\r\n\r\n    VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n    ON CONFLICT (execution_id)\r\n    DO NOTHING\r\n    `,\r\n    [\r\n      executionId,\r\n\r\n      JSON.stringify(\r\n        parsed.token.decision_payload\r\n      ),\r\n\r\n      \"pending_override\",\r\n\r\n      parsed.runtime_manifest.runtime_hash,\r\n\r\n      parsed.token_signature,\r\n\r\n      value,\r\n\r\n      new Date().toISOString()\r\n    ]\r\n  );\r\n}\r\n  // ----------------------------------\r\n  // Redis-compatible KV get\r\n  // ----------------------------------\r\n\r\n  async get(\r\n    key: string\r\n  ): Promise<string | null> {\r\n\r\n    const executionId =\r\n      key.replace(\r\n        \"pending:\",\r\n        \"\"\r\n      );\r\n\r\n    const { rows } =\r\n      await this.pool.query(\r\n        `\r\n        SELECT attestation\r\n\r\n        FROM audit_decisions\r\n\r\n        WHERE execution_id = $1\r\n\r\n        LIMIT 1\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    if (rows.length === 0) {\r\n      return null;\r\n    }\r\n\r\n    return rows[0].attestation;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Completed execution marking\r\n  // ----------------------------------\r\n\r\n  async markExecuted(\r\n    executionId: string\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      UPDATE audit_decisions\r\n\r\n      SET\r\n        execution_state = $2\r\n\r\n      WHERE execution_id = $1\r\n      `,\r\n      [\r\n        executionId,\r\n        \"completed\"\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Override authority recording\r\n  // ----------------------------------\r\n\r\n  async recordOverride(\r\n    override: AuditOverride\r\n  ): Promise<void> {\r\n\r\n    await this.pool.query(\r\n      `\r\n      INSERT INTO audit_overrides\r\n        (\r\n          override_id,\r\n          execution_id,\r\n          approved_by,\r\n          approver_role,\r\n          reason,\r\n          override_signature,\r\n          approved_at\r\n        )\r\n\r\n      VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n      `,\r\n      [\r\n        override.override_id,\r\n        override.execution_id,\r\n        override.approved_by,\r\n        override.approver_role,\r\n        override.reason,\r\n        override.override_signature,\r\n        override.approved_at\r\n      ]\r\n    );\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Override lookup\r\n  // ----------------------------------\r\n\r\n  async getOverridesForExecution(\r\n    executionId: string\r\n  ): Promise<AuditOverride[]> {\r\n\r\n    const { rows } =\r\n      await this.pool.query<AuditOverride>(\r\n        `\r\n        SELECT *\r\n\r\n        FROM audit_overrides\r\n\r\n        WHERE execution_id = $1\r\n\r\n        ORDER BY approved_at DESC\r\n        `,\r\n        [executionId]\r\n      );\r\n\r\n    return rows;\r\n  }\r\n\r\n  // ----------------------------------\r\n  // Cleanup\r\n  // ----------------------------------\r\n\r\n  async close(): Promise<void> {\r\n\r\n    await this.pool.end();\r\n  }\r\n}","import type { PoolClient } from \"pg\";\r\n\r\n// Inlined so the bundle has no runtime fs dependency.\r\n// The canonical reference lives in schema.sql alongside this file.\r\nconst SCHEMA_SQL = `\r\nCREATE TABLE IF NOT EXISTS audit_decisions (\r\n  id              BIGSERIAL    PRIMARY KEY,\r\n  execution_id    TEXT         NOT NULL UNIQUE,\r\n  policy_id       TEXT         NOT NULL,\r\n  policy_version  TEXT         NOT NULL,\r\n  schema_version  TEXT         NOT NULL,\r\n  runtime_version TEXT         NOT NULL,\r\n  runtime_hash    TEXT         NOT NULL,\r\n  decision        TEXT         NOT NULL,\r\n  execution_state TEXT         NOT NULL,\r\n  signals_hash    TEXT         NOT NULL,\r\n  signature       TEXT         NOT NULL,\r\n  attestation     JSONB        NOT NULL,\r\n  executed_at     TIMESTAMPTZ  NOT NULL,\r\n  recorded_at     TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_policy_id\r\n  ON audit_decisions (policy_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_executed_at\r\n  ON audit_decisions (executed_at DESC);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_decision\r\n  ON audit_decisions (decision);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_verifications (\r\n  id                   BIGSERIAL    PRIMARY KEY,\r\n  execution_id         TEXT         NOT NULL,\r\n  valid                BOOLEAN      NOT NULL,\r\n  signature_verified   BOOLEAN      NOT NULL,\r\n  runtime_verified     BOOLEAN      NOT NULL,\r\n  schema_compatible    BOOLEAN      NOT NULL,\r\n  verified_at          TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_execution_id\r\n  ON audit_verifications (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_valid\r\n  ON audit_verifications (valid);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_verified_at\r\n  ON audit_verifications (verified_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_security_events (\r\n  id           BIGSERIAL    PRIMARY KEY,\r\n  event_type   TEXT         NOT NULL,\r\n  severity     TEXT         NOT NULL CHECK (\r\n    severity IN (\r\n      'low',\r\n      'medium',\r\n      'high',\r\n      'critical'\r\n    )\r\n  ),\r\n  ip_address   TEXT,\r\n  path         TEXT,\r\n  method       TEXT,\r\n  user_agent   TEXT,\r\n  details      JSONB,\r\n  occurred_at  TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_event_type\r\n  ON audit_security_events (event_type);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_severity\r\n  ON audit_security_events (severity);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_occurred_at\r\n  ON audit_security_events (occurred_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_api_access (\r\n  id               BIGSERIAL    PRIMARY KEY,\r\n  method           TEXT         NOT NULL,\r\n  path             TEXT         NOT NULL,\r\n  status_code      INTEGER      NOT NULL,\r\n  response_time_ms INTEGER,\r\n  ip_address       TEXT,\r\n  user_agent       TEXT,\r\n  execution_id     TEXT,\r\n  accessed_at      TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_path\r\n  ON audit_api_access (path);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_status_code\r\n  ON audit_api_access (status_code);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at\r\n  ON audit_api_access (accessed_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_overrides (\r\n  id                 BIGSERIAL    PRIMARY KEY,\r\n  override_id        TEXT         NOT NULL UNIQUE,\r\n  execution_id       TEXT         NOT NULL,\r\n  approved_by        TEXT         NOT NULL,\r\n  approver_role      TEXT         NOT NULL,\r\n  reason             TEXT         NOT NULL,\r\n  override_signature TEXT         NOT NULL,\r\n  approved_at        TIMESTAMPTZ  NOT NULL,\r\n  recorded_at        TIMESTAMPTZ  NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_execution_id\r\n  ON audit_overrides (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_approved_at\r\n  ON audit_overrides (approved_at DESC);\r\n\r\nCREATE OR REPLACE VIEW view_decision_timeline AS\r\nSELECT\r\n  d.execution_id,\r\n  d.policy_id,\r\n  d.policy_version,\r\n  d.decision,\r\n  d.execution_state,\r\n  d.runtime_version,\r\n  d.runtime_hash,\r\n  d.executed_at,\r\n  d.recorded_at,\r\n  v.valid              AS verification_valid,\r\n  v.signature_verified,\r\n  v.runtime_verified,\r\n  v.schema_compatible,\r\n  v.verified_at\r\nFROM audit_decisions d\r\nLEFT JOIN audit_verifications v\r\nON d.execution_id = v.execution_id;\r\n\r\nCREATE OR REPLACE VIEW view_security_dashboard AS\r\nSELECT\r\n  event_type,\r\n  severity,\r\n  COUNT(*)         AS event_count,\r\n  MAX(occurred_at) AS last_occurrence,\r\n  MIN(occurred_at) AS first_occurrence\r\nFROM audit_security_events\r\nGROUP BY event_type, severity;\r\n`;\r\n\r\nexport async function runMigrations(\r\n  client: PoolClient\r\n): Promise<void> {\r\n\r\n  await client.query(\"BEGIN\");\r\n\r\n  try {\r\n\r\n    await client.query(\r\n      SCHEMA_SQL\r\n    );\r\n\r\n    await client.query(\r\n      \"COMMIT\"\r\n    );\r\n\r\n  } catch (err) {\r\n\r\n    await client.query(\r\n      \"ROLLBACK\"\r\n    );\r\n\r\n    throw err;\r\n  }\r\n}\r\n"],"mappings":";AAAA,SAAS,YAAY;;;ACIrB,IAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgJnB,eAAsB,cACpB,QACe;AAEf,QAAM,OAAO,MAAM,OAAO;AAE1B,MAAI;AAEF,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAAA,EAEF,SAAS,KAAK;AAEZ,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AACF;;;ADxJO,IAAM,UAAN,MAAc;AAAA,EAEF;AAAA,EAGjB,YACE,kBACA;AAEA,SAAK,OACH,IAAI,KAAK;AAAA,MACP;AAAA,IACF,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAsB;AAE1B,UAAM,KAAK,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAA4B;AAEhC,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,SAEF,MAAM,KAAK,KAAK,QAAQ;AAE5B,QAAI;AAEF,YAAM;AAAA,QACJ;AAAA,MACF;AAAA,IAEF,UAAE;AAEA,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,eACE,aACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,mBACE,aACA,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYA;AAAA,QACE;AAAA,QACA,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,MAChB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,oBACE,OACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,MAAM,cAAc;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,MAAM,UAAU;AAAA,QAChB,MAAM,cAAc;AAAA,QAEpB,MAAM,WAAW,OACb,KAAK,UAAU,MAAM,OAAO,IAC5B;AAAA,MACN;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,gBACE,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO,oBAAoB;AAAA,QAC3B,OAAO,cAAc;AAAA,QACrB,OAAO,cAAc;AAAA,QACrB,OAAO,gBAAgB;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBACJ,QAAQ,KACR,QACgC;AAEhC,UAAM,aAAuB,CAAC;AAE9B,UAAM,SAAoB,CAAC;AAE3B,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,gBAAgB,OAAO,MAAM;AAAA,MAC/B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AAEpB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,eAAe,OAAO,MAAM;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS;AAEnB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,WAAO,KAAK,KAAK;AAEjB,UAAM,aACJ,IAAI,OAAO,MAAM;AAEnB,UAAM,QACJ,WAAW,SACP,SAAS,WAAW,KAAK,OAAO,CAAC,KACjC;AAEN,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA,UAIE,KAAK;AAAA;AAAA;AAAA;AAAA,gBAIC,UAAU;AAAA;AAAA,MAElB;AAAA,IACF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAgC;AAEpC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyCF;AAEF,WAAO,KAAK,CAAC;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,aAC+B;AAE/B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,CAAC,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,4BACJ,aAC8B;AAE9B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,uBAC4B;AAEhC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACkB;AAElB,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,sBACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMF,MAAM,IACJ,KACA,OACe;AAEf,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,SACJ,KAAK,MAAM,KAAK;AAElB,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE;AAAA,QAEA,KAAK;AAAA,UACH,OAAO,MAAM;AAAA,QACf;AAAA,QAEA;AAAA,QAEA,OAAO,iBAAiB;AAAA,QAExB,OAAO;AAAA,QAEP;AAAA,SAEA,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKE,MAAM,IACJ,KACwB;AAExB,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,QAAI,KAAK,WAAW,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,CAAC,EAAE;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eACJ,UACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,yBACJ,aAC0B;AAE1B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAE3B,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parmanasystems/audit-db",
-  "version": "1.18.0",
+  "version": "1.20.0",
   "private": false,
   "type": "module",
   "description": "PostgreSQL audit database client for parmanasystems governance decisions, verifications, and security events.",
@@ -19,8 +19,8 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@parmanasystems/execution": "^1.18.0",
-    "@parmanasystems/verifier": "^1.18.0",
+    "@parmanasystems/execution": "^1.20.0",
+    "@parmanasystems/verifier": "^1.20.0",
     "pg": "^8.13.3"
   },
   "devDependencies": {