npm - @parmanasystems/audit-db - Versions diffs - 1.19.0 → 1.21.0 - Mend

@parmanasystems/audit-db 1.19.0 → 1.21.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/dist/index.js CHANGED Viewed

@@ -5,7 +5,7 @@ import { Pool } from "pg";
 var SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS audit_decisions (
   id              BIGSERIAL    PRIMARY KEY,
-  execution_id    UUID         NOT NULL UNIQUE,
+  execution_id    TEXT         NOT NULL UNIQUE,
   policy_id       TEXT         NOT NULL,
   policy_version  TEXT         NOT NULL,
   schema_version  TEXT         NOT NULL,
@@ -31,7 +31,7 @@ CREATE INDEX IF NOT EXISTS idx_audit_decisions_decision
 CREATE TABLE IF NOT EXISTS audit_verifications (
   id                   BIGSERIAL    PRIMARY KEY,
-  execution_id         UUID         NOT NULL,
+  execution_id         TEXT         NOT NULL,
   valid                BOOLEAN      NOT NULL,
   signature_verified   BOOLEAN      NOT NULL,
   runtime_verified     BOOLEAN      NOT NULL,
@@ -84,7 +84,7 @@ CREATE TABLE IF NOT EXISTS audit_api_access (
   response_time_ms INTEGER,
   ip_address       TEXT,
   user_agent       TEXT,
-  execution_id     UUID,
+  execution_id     TEXT,
   accessed_at      TIMESTAMPTZ  NOT NULL DEFAULT NOW()
 );
@@ -99,8 +99,8 @@ CREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at
 CREATE TABLE IF NOT EXISTS audit_overrides (
   id                 BIGSERIAL    PRIMARY KEY,
-  override_id        UUID         NOT NULL UNIQUE,
-  execution_id       UUID         NOT NULL,
+  override_id        TEXT         NOT NULL UNIQUE,
+  execution_id       TEXT         NOT NULL,
   approved_by        TEXT         NOT NULL,
   approver_role      TEXT         NOT NULL,
   reason             TEXT         NOT NULL,
@@ -484,24 +484,26 @@ var AuditDb = class {
   async storePendingExecution(attestation) {
     await this.pool.query(
       `
-      INSERT INTO audit_decisions
-        (
-          execution_id,
-          decision,
-          execution_state,
-          runtime_hash,
-          signature,
-          attestation,
-          executed_at
-        )
+    INSERT INTO audit_decisions
+      (
+        execution_id,
+        policy_id,
+        decision,
+        execution_state,
+        runtime_hash,
+        signature,
+        attestation,
+        executed_at
+      )
-      VALUES ($1,$2,$3,$4,$5,$6,$7)
+    VALUES ($1,$2,$3,$4,$5,$6,$7,$8)
-      ON CONFLICT (execution_id)
-      DO NOTHING
-      `,
+    ON CONFLICT (execution_id)
+    DO NOTHING
+    `,
       [
         attestation.execution_id,
+        "unknown",
         JSON.stringify(
           attestation.decision
         ),
@@ -527,6 +529,7 @@ var AuditDb = class {
     INSERT INTO audit_decisions
       (
         execution_id,
+        policy_id,
         decision,
         execution_state,
         runtime_hash,
@@ -535,13 +538,14 @@ var AuditDb = class {
         executed_at
       )
-    VALUES ($1,$2,$3,$4,$5,$6,$7)
+    VALUES ($1,$2,$3,$4,$5,$6,$7,$8)
     ON CONFLICT (execution_id)
     DO NOTHING
     `,
       [
         executionId,
+        parsed.token.policy_id,
         JSON.stringify(
           parsed.token.decision_payload
         ),

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"sources":["../src/client.ts","../src/migrations.ts"],"sourcesContent":["import { Pool } from \"pg\";\r\nimport type { PoolClient } from \"pg\";\r\n\r\nimport type { ExecutionAttestation } from \"@parmanasystems/execution\";\r\nimport type { VerificationResult } from \"@parmanasystems/verifier\";\r\n\r\nimport type {\r\n AuditDecision,\r\n AuditVerification,\r\n AuditOverride,\r\n SecurityEventInput,\r\n ApiAccessInput,\r\n DecisionTimelineRow,\r\n DecisionFilter,\r\n SecurityDashboardRow,\r\n AuditStats,\r\n} from \"./types.js\";\r\n\r\nimport { runMigrations } from \"./migrations.js\";\r\n\r\nexport class AuditDb {\r\n\r\n private readonly pool:\r\n InstanceType<typeof Pool>;\r\n\r\n constructor(\r\n connectionString: string\r\n ) {\r\n\r\n this.pool =\r\n new Pool({\r\n connectionString\r\n });\r\n }\r\n\r\n async ping(): Promise<void> {\r\n\r\n await this.pool.query(\r\n \"SELECT 1\"\r\n );\r\n }\r\n\r\n async disconnect(): Promise<void> {\r\n\r\n await this.pool.end();\r\n }\r\n\r\n async migrate(): Promise<void> {\r\n\r\n const client:\r\n PoolClient =\r\n await this.pool.connect();\r\n\r\n try {\r\n\r\n await runMigrations(\r\n client\r\n );\r\n\r\n } finally {\r\n\r\n client.release();\r\n }\r\n }\r\n\r\n // ----------------------------------\r\n // Decision recording\r\n // ----------------------------------\r\n\r\n recordDecision(\r\n attestation: ExecutionAttestation\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n attestation.execution_id,\r\n\r\n JSON.stringify(\r\n attestation.decision\r\n ),\r\n\r\n attestation.execution_state,\r\n\r\n attestation.runtime_hash,\r\n\r\n attestation.signature,\r\n\r\n JSON.stringify(attestation),\r\n\r\n new Date().toISOString()\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Verification recording\r\n // ----------------------------------\r\n\r\n recordVerification(\r\n executionId: string,\r\n result: VerificationResult\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_verifications\r\n (\r\n execution_id,\r\n valid,\r\n signature_verified,\r\n runtime_verified,\r\n schema_compatible\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5)\r\n `,\r\n [\r\n executionId,\r\n result.valid,\r\n result.checks.signature_verified,\r\n result.checks.runtime_verified,\r\n result.checks.schema_compatible\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Security event recording\r\n // ----------------------------------\r\n\r\n recordSecurityEvent(\r\n event: SecurityEventInput\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_security_events\r\n (\r\n event_type,\r\n severity,\r\n ip_address,\r\n path,\r\n method,\r\n user_agent,\r\n details\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n event.event_type,\r\n event.severity,\r\n event.ip_address ?? null,\r\n event.path ?? null,\r\n event.method ?? null,\r\n event.user_agent ?? null,\r\n\r\n event.details != null\r\n ? JSON.stringify(event.details)\r\n : null\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // API access recording\r\n // ----------------------------------\r\n\r\n recordApiAccess(\r\n access: ApiAccessInput\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_api_access\r\n (\r\n method,\r\n path,\r\n status_code,\r\n response_time_ms,\r\n ip_address,\r\n user_agent,\r\n execution_id\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n access.method,\r\n access.path,\r\n access.status_code,\r\n access.response_time_ms ?? null,\r\n access.ip_address ?? null,\r\n access.user_agent ?? null,\r\n access.execution_id ?? null\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Decision timeline\r\n // ----------------------------------\r\n\r\n async getDecisionTimeline(\r\n limit = 100,\r\n filter?: DecisionFilter\r\n ): Promise<DecisionTimelineRow[]> {\r\n\r\n const conditions: string[] = [];\r\n\r\n const values: unknown[] = [];\r\n\r\n if (filter?.policy_id) {\r\n\r\n values.push(\r\n filter.policy_id\r\n );\r\n\r\n conditions.push(\r\n `policy_id = $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.decision) {\r\n\r\n values.push(\r\n filter.decision\r\n );\r\n\r\n conditions.push(\r\n `decision = $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.from_date) {\r\n\r\n values.push(\r\n filter.from_date\r\n );\r\n\r\n conditions.push(\r\n `executed_at >= $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.to_date) {\r\n\r\n values.push(\r\n filter.to_date\r\n );\r\n\r\n conditions.push(\r\n `executed_at <= $${values.length}`\r\n );\r\n }\r\n\r\n values.push(limit);\r\n\r\n const limitParam =\r\n `$${values.length}`;\r\n\r\n const where =\r\n conditions.length\r\n ? `WHERE ${conditions.join(\" AND \")}`\r\n : \"\";\r\n\r\n const { rows } =\r\n await this.pool.query<DecisionTimelineRow>(\r\n `\r\n SELECT \r\n FROM view_decision_timeline\r\n\r\n ${where}\r\n\r\n ORDER BY executed_at DESC\r\n\r\n LIMIT ${limitParam}\r\n `,\r\n values\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Stats\r\n // ----------------------------------\r\n\r\n async getStats(): Promise<AuditStats> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditStats>(\r\n `\r\n SELECT\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_decisions\r\n )::text AS total_decisions,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_decisions\r\n WHERE executed_at >= CURRENT_DATE\r\n )::text AS decisions_today,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n )::text AS total_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n WHERE valid = true\r\n )::text AS valid_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n WHERE valid = false\r\n )::text AS invalid_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_security_events\r\n )::text AS total_security_events,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_api_access\r\n )::text AS total_api_calls\r\n `\r\n );\r\n\r\n return rows[0]!;\r\n }\r\n\r\n // ----------------------------------\r\n // Decision lookup\r\n // ----------------------------------\r\n\r\n async getDecisionById(\r\n executionId: string\r\n ): Promise<AuditDecision \| null> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditDecision>(\r\n `\r\n SELECT \r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows[0] ?? null;\r\n }\r\n\r\n // ----------------------------------\r\n // Verification lookup\r\n // ----------------------------------\r\n\r\n async getVerificationsByExecution(\r\n executionId: string\r\n ): Promise<AuditVerification[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditVerification>(\r\n `\r\n SELECT \r\n FROM audit_verifications\r\n\r\n WHERE execution_id = $1\r\n\r\n ORDER BY verified_at DESC\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Security dashboard\r\n // ----------------------------------\r\n\r\n async getSecurityDashboard():\r\n Promise<SecurityDashboardRow[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<SecurityDashboardRow>(\r\n `\r\n SELECT \r\n FROM view_security_dashboard\r\n\r\n ORDER BY event_count DESC\r\n `\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Replay protection\r\n // ----------------------------------\r\n\r\n async hasExecution(\r\n executionId: string\r\n ): Promise<boolean> {\r\n\r\n const { rows } =\r\n await this.pool.query(\r\n `\r\n SELECT execution_id\r\n\r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n\r\n LIMIT 1\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows.length > 0;\r\n }\r\n\r\n // ----------------------------------\r\n // Pending override storage\r\n // ----------------------------------\r\n\r\n async storePendingExecution(\r\n attestation: ExecutionAttestation\r\n ): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n attestation.execution_id,\r\n\r\n JSON.stringify(\r\n attestation.decision\r\n ),\r\n\r\n \"pending_override\",\r\n\r\n attestation.runtime_hash,\r\n\r\n attestation.signature,\r\n\r\n JSON.stringify(attestation),\r\n\r\n new Date().toISOString()\r\n ]\r\n );\r\n }\r\n\r\n// ----------------------------------\r\n// Redis-compatible KV set\r\n// ----------------------------------\r\n\r\nasync set(\r\n key: string,\r\n value: string\r\n): Promise<void> {\r\n\r\n const executionId =\r\n key.replace(\r\n \"pending:\",\r\n \"\"\r\n );\r\n\r\n const parsed =\r\n JSON.parse(value);\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n executionId,\r\n\r\n JSON.stringify(\r\n parsed.token.decision_payload\r\n ),\r\n\r\n \"pending_override\",\r\n\r\n parsed.runtime_manifest.runtime_hash,\r\n\r\n parsed.token_signature,\r\n\r\n value,\r\n\r\n new Date().toISOString()\r\n ]\r\n );\r\n}\r\n // ----------------------------------\r\n // Redis-compatible KV get\r\n // ----------------------------------\r\n\r\n async get(\r\n key: string\r\n ): Promise<string \| null> {\r\n\r\n const executionId =\r\n key.replace(\r\n \"pending:\",\r\n \"\"\r\n );\r\n\r\n const { rows } =\r\n await this.pool.query(\r\n `\r\n SELECT attestation\r\n\r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n\r\n LIMIT 1\r\n `,\r\n [executionId]\r\n );\r\n\r\n if (rows.length === 0) {\r\n return null;\r\n }\r\n\r\n return rows[0].attestation;\r\n }\r\n\r\n // ----------------------------------\r\n // Completed execution marking\r\n // ----------------------------------\r\n\r\n async markExecuted(\r\n executionId: string\r\n ): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n UPDATE audit_decisions\r\n\r\n SET\r\n execution_state = $2\r\n\r\n WHERE execution_id = $1\r\n `,\r\n [\r\n executionId,\r\n \"completed\"\r\n ]\r\n );\r\n }\r\n\r\n // ----------------------------------\r\n // Override authority recording\r\n // ----------------------------------\r\n\r\n async recordOverride(\r\n override: AuditOverride\r\n ): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_overrides\r\n (\r\n override_id,\r\n execution_id,\r\n approved_by,\r\n approver_role,\r\n reason,\r\n override_signature,\r\n approved_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n override.override_id,\r\n override.execution_id,\r\n override.approved_by,\r\n override.approver_role,\r\n override.reason,\r\n override.override_signature,\r\n override.approved_at\r\n ]\r\n );\r\n }\r\n\r\n // ----------------------------------\r\n // Override lookup\r\n // ----------------------------------\r\n\r\n async getOverridesForExecution(\r\n executionId: string\r\n ): Promise<AuditOverride[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditOverride>(\r\n `\r\n SELECT \r\n\r\n FROM audit_overrides\r\n\r\n WHERE execution_id = $1\r\n\r\n ORDER BY approved_at DESC\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Cleanup\r\n // ----------------------------------\r\n\r\n async close(): Promise<void> {\r\n\r\n await this.pool.end();\r\n }\r\n}","import type { PoolClient } from \"pg\";\r\n\r\n// Inlined so the bundle has no runtime fs dependency.\r\n// The canonical reference lives in schema.sql alongside this file.\r\nconst SCHEMA_SQL = `\r\nCREATE TABLE IF NOT EXISTS audit_decisions (\r\n id BIGSERIAL PRIMARY KEY,\r\n execution_id UUID NOT NULL UNIQUE,\r\n policy_id TEXT NOT NULL,\r\n policy_version TEXT NOT NULL,\r\n schema_version TEXT NOT NULL,\r\n runtime_version TEXT NOT NULL,\r\n runtime_hash TEXT NOT NULL,\r\n decision TEXT NOT NULL,\r\n execution_state TEXT NOT NULL,\r\n signals_hash TEXT NOT NULL,\r\n signature TEXT NOT NULL,\r\n attestation JSONB NOT NULL,\r\n executed_at TIMESTAMPTZ NOT NULL,\r\n recorded_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_policy_id\r\n ON audit_decisions (policy_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_executed_at\r\n ON audit_decisions (executed_at DESC);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_decision\r\n ON audit_decisions (decision);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_verifications (\r\n id BIGSERIAL PRIMARY KEY,\r\n execution_id UUID NOT NULL,\r\n valid BOOLEAN NOT NULL,\r\n signature_verified BOOLEAN NOT NULL,\r\n runtime_verified BOOLEAN NOT NULL,\r\n schema_compatible BOOLEAN NOT NULL,\r\n verified_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_execution_id\r\n ON audit_verifications (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_valid\r\n ON audit_verifications (valid);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_verified_at\r\n ON audit_verifications (verified_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_security_events (\r\n id BIGSERIAL PRIMARY KEY,\r\n event_type TEXT NOT NULL,\r\n severity TEXT NOT NULL CHECK (\r\n severity IN (\r\n 'low',\r\n 'medium',\r\n 'high',\r\n 'critical'\r\n )\r\n ),\r\n ip_address TEXT,\r\n path TEXT,\r\n method TEXT,\r\n user_agent TEXT,\r\n details JSONB,\r\n occurred_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_event_type\r\n ON audit_security_events (event_type);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_severity\r\n ON audit_security_events (severity);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_occurred_at\r\n ON audit_security_events (occurred_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_api_access (\r\n id BIGSERIAL PRIMARY KEY,\r\n method TEXT NOT NULL,\r\n path TEXT NOT NULL,\r\n status_code INTEGER NOT NULL,\r\n response_time_ms INTEGER,\r\n ip_address TEXT,\r\n user_agent TEXT,\r\n execution_id UUID,\r\n accessed_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_path\r\n ON audit_api_access (path);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_status_code\r\n ON audit_api_access (status_code);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at\r\n ON audit_api_access (accessed_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_overrides (\r\n id BIGSERIAL PRIMARY KEY,\r\n override_id UUID NOT NULL UNIQUE,\r\n execution_id UUID NOT NULL,\r\n approved_by TEXT NOT NULL,\r\n approver_role TEXT NOT NULL,\r\n reason TEXT NOT NULL,\r\n override_signature TEXT NOT NULL,\r\n approved_at TIMESTAMPTZ NOT NULL,\r\n recorded_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_execution_id\r\n ON audit_overrides (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_approved_at\r\n ON audit_overrides (approved_at DESC);\r\n\r\nCREATE OR REPLACE VIEW view_decision_timeline AS\r\nSELECT\r\n d.execution_id,\r\n d.policy_id,\r\n d.policy_version,\r\n d.decision,\r\n d.execution_state,\r\n d.runtime_version,\r\n d.runtime_hash,\r\n d.executed_at,\r\n d.recorded_at,\r\n v.valid AS verification_valid,\r\n v.signature_verified,\r\n v.runtime_verified,\r\n v.schema_compatible,\r\n v.verified_at\r\nFROM audit_decisions d\r\nLEFT JOIN audit_verifications v\r\nON d.execution_id = v.execution_id;\r\n\r\nCREATE OR REPLACE VIEW view_security_dashboard AS\r\nSELECT\r\n event_type,\r\n severity,\r\n COUNT(*) AS event_count,\r\n MAX(occurred_at) AS last_occurrence,\r\n MIN(occurred_at) AS first_occurrence\r\nFROM audit_security_events\r\nGROUP BY event_type, severity;\r\n`;\r\n\r\nexport async function runMigrations(\r\n client: PoolClient\r\n): Promise<void> {\r\n\r\n await client.query(\"BEGIN\");\r\n\r\n try {\r\n\r\n await client.query(\r\n SCHEMA_SQL\r\n );\r\n\r\n await client.query(\r\n \"COMMIT\"\r\n );\r\n\r\n } catch (err) {\r\n\r\n await client.query(\r\n \"ROLLBACK\"\r\n );\r\n\r\n throw err;\r\n }\r\n}"],"mappings":";AAAA,SAAS,YAAY;;;ACIrB,IAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgJnB,eAAsB,cACpB,QACe;AAEf,QAAM,OAAO,MAAM,OAAO;AAE1B,MAAI;AAEF,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAAA,EAEF,SAAS,KAAK;AAEZ,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AACF;;;ADxJO,IAAM,UAAN,MAAc;AAAA,EAEF;AAAA,EAGjB,YACE,kBACA;AAEA,SAAK,OACH,IAAI,KAAK;AAAA,MACP;AAAA,IACF,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAsB;AAE1B,UAAM,KAAK,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAA4B;AAEhC,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,SAEF,MAAM,KAAK,KAAK,QAAQ;AAE5B,QAAI;AAEF,YAAM;AAAA,QACJ;AAAA,MACF;AAAA,IAEF,UAAE;AAEA,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,eACE,aACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,mBACE,aACA,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYA;AAAA,QACE;AAAA,QACA,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,MAChB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,oBACE,OACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,MAAM,cAAc;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,MAAM,UAAU;AAAA,QAChB,MAAM,cAAc;AAAA,QAEpB,MAAM,WAAW,OACb,KAAK,UAAU,MAAM,OAAO,IAC5B;AAAA,MACN;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,gBACE,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO,oBAAoB;AAAA,QAC3B,OAAO,cAAc;AAAA,QACrB,OAAO,cAAc;AAAA,QACrB,OAAO,gBAAgB;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBACJ,QAAQ,KACR,QACgC;AAEhC,UAAM,aAAuB,CAAC;AAE9B,UAAM,SAAoB,CAAC;AAE3B,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,gBAAgB,OAAO,MAAM;AAAA,MAC/B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AAEpB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,eAAe,OAAO,MAAM;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS;AAEnB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,WAAO,KAAK,KAAK;AAEjB,UAAM,aACJ,IAAI,OAAO,MAAM;AAEnB,UAAM,QACJ,WAAW,SACP,SAAS,WAAW,KAAK,OAAO,CAAC,KACjC;AAEN,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA,UAIE,KAAK;AAAA;AAAA;AAAA;AAAA,gBAIC,UAAU;AAAA;AAAA,MAElB;AAAA,IACF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAgC;AAEpC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyCF;AAEF,WAAO,KAAK,CAAC;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,aAC+B;AAE/B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,CAAC,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,4BACJ,aAC8B;AAE9B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,uBAC4B;AAEhC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACkB;AAElB,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,sBACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMF,MAAM,IACJ,KACA,OACe;AAEf,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,SACJ,KAAK,MAAM,KAAK;AAElB,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE;AAAA,QAEA,KAAK;AAAA,UACH,OAAO,MAAM;AAAA,QACf;AAAA,QAEA;AAAA,QAEA,OAAO,iBAAiB;AAAA,QAExB,OAAO;AAAA,QAEP;AAAA,SAEA,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKE,MAAM,IACJ,KACwB;AAExB,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,QAAI,KAAK,WAAW,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,CAAC,EAAE;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eACJ,UACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,yBACJ,aAC0B;AAE1B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAE3B,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACF;","names":[]}
1	+ {"version":3,"sources":["../src/client.ts","../src/migrations.ts"],"sourcesContent":["import { Pool } from \"pg\";\r\nimport type { PoolClient } from \"pg\";\r\n\r\nimport type { ExecutionAttestation } from \"@parmanasystems/execution\";\r\nimport type { VerificationResult } from \"@parmanasystems/verifier\";\r\n\r\nimport type {\r\n AuditDecision,\r\n AuditVerification,\r\n AuditOverride,\r\n SecurityEventInput,\r\n ApiAccessInput,\r\n DecisionTimelineRow,\r\n DecisionFilter,\r\n SecurityDashboardRow,\r\n AuditStats,\r\n} from \"./types.js\";\r\n\r\nimport { runMigrations } from \"./migrations.js\";\r\n\r\nexport class AuditDb {\r\n\r\n private readonly pool:\r\n InstanceType<typeof Pool>;\r\n\r\n constructor(\r\n connectionString: string\r\n ) {\r\n\r\n this.pool =\r\n new Pool({\r\n connectionString\r\n });\r\n }\r\n\r\n async ping(): Promise<void> {\r\n\r\n await this.pool.query(\r\n \"SELECT 1\"\r\n );\r\n }\r\n\r\n async disconnect(): Promise<void> {\r\n\r\n await this.pool.end();\r\n }\r\n\r\n async migrate(): Promise<void> {\r\n\r\n const client:\r\n PoolClient =\r\n await this.pool.connect();\r\n\r\n try {\r\n\r\n await runMigrations(\r\n client\r\n );\r\n\r\n } finally {\r\n\r\n client.release();\r\n }\r\n }\r\n\r\n // ----------------------------------\r\n // Decision recording\r\n // ----------------------------------\r\n\r\n recordDecision(\r\n attestation: ExecutionAttestation\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n attestation.execution_id,\r\n\r\n JSON.stringify(\r\n attestation.decision\r\n ),\r\n\r\n attestation.execution_state,\r\n\r\n attestation.runtime_hash,\r\n\r\n attestation.signature,\r\n\r\n JSON.stringify(attestation),\r\n\r\n new Date().toISOString()\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Verification recording\r\n // ----------------------------------\r\n\r\n recordVerification(\r\n executionId: string,\r\n result: VerificationResult\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_verifications\r\n (\r\n execution_id,\r\n valid,\r\n signature_verified,\r\n runtime_verified,\r\n schema_compatible\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5)\r\n `,\r\n [\r\n executionId,\r\n result.valid,\r\n result.checks.signature_verified,\r\n result.checks.runtime_verified,\r\n result.checks.schema_compatible\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Security event recording\r\n // ----------------------------------\r\n\r\n recordSecurityEvent(\r\n event: SecurityEventInput\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_security_events\r\n (\r\n event_type,\r\n severity,\r\n ip_address,\r\n path,\r\n method,\r\n user_agent,\r\n details\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n event.event_type,\r\n event.severity,\r\n event.ip_address ?? null,\r\n event.path ?? null,\r\n event.method ?? null,\r\n event.user_agent ?? null,\r\n\r\n event.details != null\r\n ? JSON.stringify(event.details)\r\n : null\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // API access recording\r\n // ----------------------------------\r\n\r\n recordApiAccess(\r\n access: ApiAccessInput\r\n ): void {\r\n\r\n this.pool\r\n .query(\r\n `\r\n INSERT INTO audit_api_access\r\n (\r\n method,\r\n path,\r\n status_code,\r\n response_time_ms,\r\n ip_address,\r\n user_agent,\r\n execution_id\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n access.method,\r\n access.path,\r\n access.status_code,\r\n access.response_time_ms ?? null,\r\n access.ip_address ?? null,\r\n access.user_agent ?? null,\r\n access.execution_id ?? null\r\n ]\r\n )\r\n .catch(() => undefined);\r\n }\r\n\r\n // ----------------------------------\r\n // Decision timeline\r\n // ----------------------------------\r\n\r\n async getDecisionTimeline(\r\n limit = 100,\r\n filter?: DecisionFilter\r\n ): Promise<DecisionTimelineRow[]> {\r\n\r\n const conditions: string[] = [];\r\n\r\n const values: unknown[] = [];\r\n\r\n if (filter?.policy_id) {\r\n\r\n values.push(\r\n filter.policy_id\r\n );\r\n\r\n conditions.push(\r\n `policy_id = $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.decision) {\r\n\r\n values.push(\r\n filter.decision\r\n );\r\n\r\n conditions.push(\r\n `decision = $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.from_date) {\r\n\r\n values.push(\r\n filter.from_date\r\n );\r\n\r\n conditions.push(\r\n `executed_at >= $${values.length}`\r\n );\r\n }\r\n\r\n if (filter?.to_date) {\r\n\r\n values.push(\r\n filter.to_date\r\n );\r\n\r\n conditions.push(\r\n `executed_at <= $${values.length}`\r\n );\r\n }\r\n\r\n values.push(limit);\r\n\r\n const limitParam =\r\n `$${values.length}`;\r\n\r\n const where =\r\n conditions.length\r\n ? `WHERE ${conditions.join(\" AND \")}`\r\n : \"\";\r\n\r\n const { rows } =\r\n await this.pool.query<DecisionTimelineRow>(\r\n `\r\n SELECT \r\n FROM view_decision_timeline\r\n\r\n ${where}\r\n\r\n ORDER BY executed_at DESC\r\n\r\n LIMIT ${limitParam}\r\n `,\r\n values\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Stats\r\n // ----------------------------------\r\n\r\n async getStats(): Promise<AuditStats> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditStats>(\r\n `\r\n SELECT\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_decisions\r\n )::text AS total_decisions,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_decisions\r\n WHERE executed_at >= CURRENT_DATE\r\n )::text AS decisions_today,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n )::text AS total_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n WHERE valid = true\r\n )::text AS valid_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_verifications\r\n WHERE valid = false\r\n )::text AS invalid_verifications,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_security_events\r\n )::text AS total_security_events,\r\n\r\n (\r\n SELECT COUNT()\r\n FROM audit_api_access\r\n )::text AS total_api_calls\r\n `\r\n );\r\n\r\n return rows[0]!;\r\n }\r\n\r\n // ----------------------------------\r\n // Decision lookup\r\n // ----------------------------------\r\n\r\n async getDecisionById(\r\n executionId: string\r\n ): Promise<AuditDecision \| null> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditDecision>(\r\n `\r\n SELECT \r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows[0] ?? null;\r\n }\r\n\r\n // ----------------------------------\r\n // Verification lookup\r\n // ----------------------------------\r\n\r\n async getVerificationsByExecution(\r\n executionId: string\r\n ): Promise<AuditVerification[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditVerification>(\r\n `\r\n SELECT \r\n FROM audit_verifications\r\n\r\n WHERE execution_id = $1\r\n\r\n ORDER BY verified_at DESC\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Security dashboard\r\n // ----------------------------------\r\n\r\n async getSecurityDashboard():\r\n Promise<SecurityDashboardRow[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<SecurityDashboardRow>(\r\n `\r\n SELECT \r\n FROM view_security_dashboard\r\n\r\n ORDER BY event_count DESC\r\n `\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Replay protection\r\n // ----------------------------------\r\n\r\n async hasExecution(\r\n executionId: string\r\n ): Promise<boolean> {\r\n\r\n const { rows } =\r\n await this.pool.query(\r\n `\r\n SELECT execution_id\r\n\r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n\r\n LIMIT 1\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows.length > 0;\r\n }\r\n\r\n // ----------------------------------\r\n// Pending override storage\r\n// ----------------------------------\r\n\r\n\r\nasync storePendingExecution(\r\n attestation: ExecutionAttestation\r\n): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n policy_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7,$8)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n attestation.execution_id,\r\n\r\n \"unknown\",\r\n\r\n JSON.stringify(\r\n attestation.decision\r\n ),\r\n\r\n \"pending_override\",\r\n\r\n attestation.runtime_hash,\r\n\r\n attestation.signature,\r\n\r\n JSON.stringify(attestation),\r\n\r\n new Date().toISOString()\r\n ]\r\n );\r\n}\r\n\r\n// ----------------------------------\r\n// Redis-compatible KV set\r\n// ----------------------------------\r\n\r\nasync set(\r\n key: string,\r\n value: string\r\n): Promise<void> {\r\n\r\n const executionId =\r\n key.replace(\r\n \"pending:\",\r\n \"\"\r\n );\r\n\r\n const parsed =\r\n JSON.parse(value);\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_decisions\r\n (\r\n execution_id,\r\n policy_id,\r\n decision,\r\n execution_state,\r\n runtime_hash,\r\n signature,\r\n attestation,\r\n executed_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7,$8)\r\n\r\n ON CONFLICT (execution_id)\r\n DO NOTHING\r\n `,\r\n [\r\n executionId,\r\n\r\n parsed.token.policy_id,\r\n\r\n JSON.stringify(\r\n parsed.token.decision_payload\r\n ),\r\n\r\n \"pending_override\",\r\n\r\n parsed.runtime_manifest.runtime_hash,\r\n\r\n parsed.token_signature,\r\n\r\n value,\r\n\r\n new Date().toISOString()\r\n ]\r\n );\r\n}\r\n // ----------------------------------\r\n // Redis-compatible KV get\r\n // ----------------------------------\r\n\r\n async get(\r\n key: string\r\n ): Promise<string \| null> {\r\n\r\n const executionId =\r\n key.replace(\r\n \"pending:\",\r\n \"\"\r\n );\r\n\r\n const { rows } =\r\n await this.pool.query(\r\n `\r\n SELECT attestation\r\n\r\n FROM audit_decisions\r\n\r\n WHERE execution_id = $1\r\n\r\n LIMIT 1\r\n `,\r\n [executionId]\r\n );\r\n\r\n if (rows.length === 0) {\r\n return null;\r\n }\r\n\r\n return rows[0].attestation;\r\n }\r\n\r\n // ----------------------------------\r\n // Completed execution marking\r\n // ----------------------------------\r\n\r\n async markExecuted(\r\n executionId: string\r\n ): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n UPDATE audit_decisions\r\n\r\n SET\r\n execution_state = $2\r\n\r\n WHERE execution_id = $1\r\n `,\r\n [\r\n executionId,\r\n \"completed\"\r\n ]\r\n );\r\n }\r\n\r\n // ----------------------------------\r\n // Override authority recording\r\n // ----------------------------------\r\n\r\n async recordOverride(\r\n override: AuditOverride\r\n ): Promise<void> {\r\n\r\n await this.pool.query(\r\n `\r\n INSERT INTO audit_overrides\r\n (\r\n override_id,\r\n execution_id,\r\n approved_by,\r\n approver_role,\r\n reason,\r\n override_signature,\r\n approved_at\r\n )\r\n\r\n VALUES ($1,$2,$3,$4,$5,$6,$7)\r\n `,\r\n [\r\n override.override_id,\r\n override.execution_id,\r\n override.approved_by,\r\n override.approver_role,\r\n override.reason,\r\n override.override_signature,\r\n override.approved_at\r\n ]\r\n );\r\n }\r\n\r\n // ----------------------------------\r\n // Override lookup\r\n // ----------------------------------\r\n\r\n async getOverridesForExecution(\r\n executionId: string\r\n ): Promise<AuditOverride[]> {\r\n\r\n const { rows } =\r\n await this.pool.query<AuditOverride>(\r\n `\r\n SELECT \r\n\r\n FROM audit_overrides\r\n\r\n WHERE execution_id = $1\r\n\r\n ORDER BY approved_at DESC\r\n `,\r\n [executionId]\r\n );\r\n\r\n return rows;\r\n }\r\n\r\n // ----------------------------------\r\n // Cleanup\r\n // ----------------------------------\r\n\r\n async close(): Promise<void> {\r\n\r\n await this.pool.end();\r\n }\r\n}","import type { PoolClient } from \"pg\";\r\n\r\n// Inlined so the bundle has no runtime fs dependency.\r\n// The canonical reference lives in schema.sql alongside this file.\r\nconst SCHEMA_SQL = `\r\nCREATE TABLE IF NOT EXISTS audit_decisions (\r\n id BIGSERIAL PRIMARY KEY,\r\n execution_id TEXT NOT NULL UNIQUE,\r\n policy_id TEXT NOT NULL,\r\n policy_version TEXT NOT NULL,\r\n schema_version TEXT NOT NULL,\r\n runtime_version TEXT NOT NULL,\r\n runtime_hash TEXT NOT NULL,\r\n decision TEXT NOT NULL,\r\n execution_state TEXT NOT NULL,\r\n signals_hash TEXT NOT NULL,\r\n signature TEXT NOT NULL,\r\n attestation JSONB NOT NULL,\r\n executed_at TIMESTAMPTZ NOT NULL,\r\n recorded_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_policy_id\r\n ON audit_decisions (policy_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_executed_at\r\n ON audit_decisions (executed_at DESC);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_decisions_decision\r\n ON audit_decisions (decision);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_verifications (\r\n id BIGSERIAL PRIMARY KEY,\r\n execution_id TEXT NOT NULL,\r\n valid BOOLEAN NOT NULL,\r\n signature_verified BOOLEAN NOT NULL,\r\n runtime_verified BOOLEAN NOT NULL,\r\n schema_compatible BOOLEAN NOT NULL,\r\n verified_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_execution_id\r\n ON audit_verifications (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_valid\r\n ON audit_verifications (valid);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_verifications_verified_at\r\n ON audit_verifications (verified_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_security_events (\r\n id BIGSERIAL PRIMARY KEY,\r\n event_type TEXT NOT NULL,\r\n severity TEXT NOT NULL CHECK (\r\n severity IN (\r\n 'low',\r\n 'medium',\r\n 'high',\r\n 'critical'\r\n )\r\n ),\r\n ip_address TEXT,\r\n path TEXT,\r\n method TEXT,\r\n user_agent TEXT,\r\n details JSONB,\r\n occurred_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_event_type\r\n ON audit_security_events (event_type);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_severity\r\n ON audit_security_events (severity);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_security_events_occurred_at\r\n ON audit_security_events (occurred_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_api_access (\r\n id BIGSERIAL PRIMARY KEY,\r\n method TEXT NOT NULL,\r\n path TEXT NOT NULL,\r\n status_code INTEGER NOT NULL,\r\n response_time_ms INTEGER,\r\n ip_address TEXT,\r\n user_agent TEXT,\r\n execution_id TEXT,\r\n accessed_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_path\r\n ON audit_api_access (path);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_status_code\r\n ON audit_api_access (status_code);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_api_access_accessed_at\r\n ON audit_api_access (accessed_at DESC);\r\n\r\nCREATE TABLE IF NOT EXISTS audit_overrides (\r\n id BIGSERIAL PRIMARY KEY,\r\n override_id TEXT NOT NULL UNIQUE,\r\n execution_id TEXT NOT NULL,\r\n approved_by TEXT NOT NULL,\r\n approver_role TEXT NOT NULL,\r\n reason TEXT NOT NULL,\r\n override_signature TEXT NOT NULL,\r\n approved_at TIMESTAMPTZ NOT NULL,\r\n recorded_at TIMESTAMPTZ NOT NULL DEFAULT NOW()\r\n);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_execution_id\r\n ON audit_overrides (execution_id);\r\n\r\nCREATE INDEX IF NOT EXISTS idx_audit_overrides_approved_at\r\n ON audit_overrides (approved_at DESC);\r\n\r\nCREATE OR REPLACE VIEW view_decision_timeline AS\r\nSELECT\r\n d.execution_id,\r\n d.policy_id,\r\n d.policy_version,\r\n d.decision,\r\n d.execution_state,\r\n d.runtime_version,\r\n d.runtime_hash,\r\n d.executed_at,\r\n d.recorded_at,\r\n v.valid AS verification_valid,\r\n v.signature_verified,\r\n v.runtime_verified,\r\n v.schema_compatible,\r\n v.verified_at\r\nFROM audit_decisions d\r\nLEFT JOIN audit_verifications v\r\nON d.execution_id = v.execution_id;\r\n\r\nCREATE OR REPLACE VIEW view_security_dashboard AS\r\nSELECT\r\n event_type,\r\n severity,\r\n COUNT(*) AS event_count,\r\n MAX(occurred_at) AS last_occurrence,\r\n MIN(occurred_at) AS first_occurrence\r\nFROM audit_security_events\r\nGROUP BY event_type, severity;\r\n`;\r\n\r\nexport async function runMigrations(\r\n client: PoolClient\r\n): Promise<void> {\r\n\r\n await client.query(\"BEGIN\");\r\n\r\n try {\r\n\r\n await client.query(\r\n SCHEMA_SQL\r\n );\r\n\r\n await client.query(\r\n \"COMMIT\"\r\n );\r\n\r\n } catch (err) {\r\n\r\n await client.query(\r\n \"ROLLBACK\"\r\n );\r\n\r\n throw err;\r\n }\r\n}\r\n"],"mappings":";AAAA,SAAS,YAAY;;;ACIrB,IAAM,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAgJnB,eAAsB,cACpB,QACe;AAEf,QAAM,OAAO,MAAM,OAAO;AAE1B,MAAI;AAEF,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAAA,EAEF,SAAS,KAAK;AAEZ,UAAM,OAAO;AAAA,MACX;AAAA,IACF;AAEA,UAAM;AAAA,EACR;AACF;;;ADxJO,IAAM,UAAN,MAAc;AAAA,EAEF;AAAA,EAGjB,YACE,kBACA;AAEA,SAAK,OACH,IAAI,KAAK;AAAA,MACP;AAAA,IACF,CAAC;AAAA,EACL;AAAA,EAEA,MAAM,OAAsB;AAE1B,UAAM,KAAK,KAAK;AAAA,MACd;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,aAA4B;AAEhC,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AAAA,EAEA,MAAM,UAAyB;AAE7B,UAAM,SAEF,MAAM,KAAK,KAAK,QAAQ;AAE5B,QAAI;AAEF,YAAM;AAAA,QACJ;AAAA,MACF;AAAA,IAEF,UAAE;AAEA,aAAO,QAAQ;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,eACE,aACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAiBA;AAAA,QACE,YAAY;AAAA,QAEZ,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,mBACE,aACA,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAYA;AAAA,QACE;AAAA,QACA,OAAO;AAAA,QACP,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,QACd,OAAO,OAAO;AAAA,MAChB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,oBACE,OACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,MAAM;AAAA,QACN,MAAM;AAAA,QACN,MAAM,cAAc;AAAA,QACpB,MAAM,QAAQ;AAAA,QACd,MAAM,UAAU;AAAA,QAChB,MAAM,cAAc;AAAA,QAEpB,MAAM,WAAW,OACb,KAAK,UAAU,MAAM,OAAO,IAC5B;AAAA,MACN;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,gBACE,QACM;AAEN,SAAK,KACF;AAAA,MACC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO;AAAA,QACP,OAAO,oBAAoB;AAAA,QAC3B,OAAO,cAAc;AAAA,QACrB,OAAO,cAAc;AAAA,QACrB,OAAO,gBAAgB;AAAA,MACzB;AAAA,IACF,EACC,MAAM,MAAM,MAAS;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBACJ,QAAQ,KACR,QACgC;AAEhC,UAAM,aAAuB,CAAC;AAE9B,UAAM,SAAoB,CAAC;AAE3B,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,gBAAgB,OAAO,MAAM;AAAA,MAC/B;AAAA,IACF;AAEA,QAAI,QAAQ,UAAU;AAEpB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,eAAe,OAAO,MAAM;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW;AAErB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,QAAI,QAAQ,SAAS;AAEnB,aAAO;AAAA,QACL,OAAO;AAAA,MACT;AAEA,iBAAW;AAAA,QACT,mBAAmB,OAAO,MAAM;AAAA,MAClC;AAAA,IACF;AAEA,WAAO,KAAK,KAAK;AAEjB,UAAM,aACJ,IAAI,OAAO,MAAM;AAEnB,UAAM,QACJ,WAAW,SACP,SAAS,WAAW,KAAK,OAAO,CAAC,KACjC;AAEN,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA,UAIE,KAAK;AAAA;AAAA;AAAA;AAAA,gBAIC,UAAU;AAAA;AAAA,MAElB;AAAA,IACF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,WAAgC;AAEpC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAyCF;AAEF,WAAO,KAAK,CAAC;AAAA,EACf;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,gBACJ,aAC+B;AAE/B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,CAAC,KAAK;AAAA,EACpB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,4BACJ,aAC8B;AAE9B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,uBAC4B;AAEhC,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMF;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACkB;AAElB,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAOF,MAAM,sBACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAkBA;AAAA,QACE,YAAY;AAAA,QAEZ;AAAA,QAEA,KAAK;AAAA,UACH,YAAY;AAAA,QACd;AAAA,QAEA;AAAA,QAEA,YAAY;AAAA,QAEZ,YAAY;AAAA,QAEZ,KAAK,UAAU,WAAW;AAAA,SAE1B,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,IACJ,KACA,OACe;AAEf,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,SACJ,KAAK,MAAM,KAAK;AAElB,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAkBA;AAAA,QACE;AAAA,QAEA,OAAO,MAAM;AAAA,QAEb,KAAK;AAAA,UACH,OAAO,MAAM;AAAA,QACf;AAAA,QAEA;AAAA,QAEA,OAAO,iBAAiB;AAAA,QAExB,OAAO;AAAA,QAEP;AAAA,SAEA,oBAAI,KAAK,GAAE,YAAY;AAAA,MACzB;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKE,MAAM,IACJ,KACwB;AAExB,UAAM,cACJ,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAEF,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,QAAI,KAAK,WAAW,GAAG;AACrB,aAAO;AAAA,IACT;AAEA,WAAO,KAAK,CAAC,EAAE;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aACJ,aACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA;AAAA,QACE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,eACJ,UACe;AAEf,UAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAcA;AAAA,QACE,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,QACT,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,yBACJ,aAC0B;AAE1B,UAAM,EAAE,KAAK,IACX,MAAM,KAAK,KAAK;AAAA,MACd;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MASA,CAAC,WAAW;AAAA,IACd;AAEF,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,QAAuB;AAE3B,UAAM,KAAK,KAAK,IAAI;AAAA,EACtB;AACF;","names":[]}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@parmanasystems/audit-db",
-  "version": "1.19.0",
+  "version": "1.21.0",
   "private": false,
   "type": "module",
   "description": "PostgreSQL audit database client for parmanasystems governance decisions, verifications, and security events.",
@@ -19,8 +19,8 @@
   ],
   "sideEffects": false,
   "dependencies": {
-    "@parmanasystems/execution": "^1.19.0",
-    "@parmanasystems/verifier": "^1.19.0",
+    "@parmanasystems/execution": "^1.21.0",
+    "@parmanasystems/verifier": "^1.21.0",
     "pg": "^8.13.3"
   },
   "devDependencies": {