@planu/cli 0.63.7 → 0.64.1

package/dist/storage/federation-store.js

@@ -0,0 +1,111 @@
+// storage/federation-store.ts — JSON persistence for federation links (SPEC-160)
+// Persistence file: data/global/federation.json
+import { readJson, writeJson, globalDataDir } from './base-store.js';
+import { withFileLock } from './file-mutex.js';
+// ---------------------------------------------------------------------------
+// File path
+// ---------------------------------------------------------------------------
+function federationFile() {
+    return `${globalDataDir()}/federation.json`;
+}
+// ---------------------------------------------------------------------------
+// Private helpers
+// ---------------------------------------------------------------------------
+function defaultData() {
+    return {
+        links: [],
+        lastUpdated: new Date().toISOString(),
+    };
+}
+async function loadData() {
+    return readJson(federationFile(), defaultData());
+}
+async function saveData(data) {
+    await writeJson(federationFile(), data);
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Return all federation links across all projects.
+ */
+export async function getAllLinks() {
+    const data = await loadData();
+    return data.links;
+}
+/**
+ * Return all links for a given project.
+ */
+export async function getLinksByProject(projectId) {
+    const data = await loadData();
+    return data.links.filter((l) => l.projectId === projectId);
+}
+/**
+ * Return all links for a given project + spec combination.
+ */
+export async function getLinksBySpec(projectId, specId) {
+    const data = await loadData();
+    return data.links.filter((l) => l.projectId === projectId && l.specId === specId);
+}
+/**
+ * Persist a new federation link. Replaces an existing link with the same
+ * (projectId, specId, linkedRepo, linkedSpecId) tuple.
+ */
+export async function saveFederationLink(link) {
+    await withFileLock(federationFile(), async () => {
+        const data = await loadData();
+        const idx = data.links.findIndex((l) => l.projectId === link.projectId &&
+            l.specId === link.specId &&
+            l.linkedRepo === link.linkedRepo &&
+            l.linkedSpecId === link.linkedSpecId);
+        if (idx === -1) {
+            data.links.push(link);
+        }
+        else {
+            data.links[idx] = link;
+        }
+        data.lastUpdated = new Date().toISOString();
+        await saveData(data);
+    });
+}
+/**
+ * Update the status of a link by ID.
+ * Returns `true` if the link was found and updated.
+ */
+export async function updateLinkStatus(linkId, status, checkedAt) {
+    return withFileLock(federationFile(), async () => {
+        const data = await loadData();
+        const idx = data.links.findIndex((l) => l.id === linkId);
+        if (idx === -1) {
+            return false;
+        }
+        const existing = data.links[idx];
+        /* v8 ignore start */
+        if (!existing) {
+            return false;
+        }
+        /* v8 ignore stop */
+        data.links[idx] = { ...existing, status, lastCheckedAt: checkedAt };
+        data.lastUpdated = new Date().toISOString();
+        await saveData(data);
+        return true;
+    });
+}
+/**
+ * Delete a link by ID.
+ * Returns `true` if the link existed and was removed.
+ */
+export async function deleteFederationLink(linkId) {
+    return withFileLock(federationFile(), async () => {
+        const data = await loadData();
+        const before = data.links.length;
+        data.links = data.links.filter((l) => l.id !== linkId);
+        if (data.links.length === before) {
+            return false;
+        }
+        data.lastUpdated = new Date().toISOString();
+        await saveData(data);
+        return true;
+    });
+}
+//# sourceMappingURL=federation-store.js.map

package/dist/storage/federation-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federation-store.js","sourceRoot":"","sources":["../../src/storage/federation-store.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,gDAAgD;AAGhD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,cAAc;IACrB,OAAO,GAAG,aAAa,EAAE,kBAAkB,CAAC;AAC9C,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,WAAW;IAClB,OAAO;QACL,KAAK,EAAE,EAAE;QACT,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,OAAO,QAAQ,CAAiB,cAAc,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAoB;IAC1C,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;AAC7E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,MAAc;IACpE,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;AACpG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IAC3D,MAAM,YAAY,CAAC,cAAc,EAAE,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAC9B,CAAC,CAAiB,EAAE,EAAE,CACpB,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAC9B,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YACxB,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU;YAChC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CACvC,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAAgC,EAChC,SAAiB;IAEjB,OAAO,YAAY,CAAC,cAAc,EAAE,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACzE,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;YACf,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,qBAAqB;QACrB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACf,CAAC;QACD,oBAAoB;QACpB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;QACpE,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAc;IACvD,OAAO,YAAY,CAAC,cAAc,EAAE,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,IAAI,GAAG,MAAM,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC5C,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/storage/index.d.ts

@@ -13,4 +13,7 @@ export * as hashSnapshotStore from './hash-snapshot-store.js';
 export * as livingDashboardStore from './living-dashboard-store.js';
 export * as syncLogStore from './sync-log-store.js';
 export * as errorTelemetryStore from './error-telemetry-store.js';
+export * as specObservabilityStore from './spec-observability-store.js';
+export * as federationStore from './federation-store.js';
+export * as rbacStore from './rbac-store.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,QAAQ,EACR,SAAS,EACT,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,QAAQ,EACR,SAAS,EACT,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC"}

package/dist/storage/index.js

@@ -14,4 +14,7 @@ export * as hashSnapshotStore from './hash-snapshot-store.js';
 export * as livingDashboardStore from './living-dashboard-store.js';
 export * as syncLogStore from './sync-log-store.js';
 export * as errorTelemetryStore from './error-telemetry-store.js';
+export * as specObservabilityStore from './spec-observability-store.js';
+export * as federationStore from './federation-store.js';
+export * as rbacStore from './rbac-store.js';
 //# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EACL,eAAe,EACf,QAAQ,EACR,SAAS,EACT,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,OAAO,EACL,eAAe,EACf,QAAQ,EACR,SAAS,EACT,cAAc,EACd,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,cAAc,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,aAAa,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,UAAU,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,YAAY,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,iBAAiB,MAAM,0BAA0B,CAAC;AAC9D,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAC;AACpE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAC;AAClE,OAAO,KAAK,sBAAsB,MAAM,+BAA+B,CAAC;AACxE,OAAO,KAAK,eAAe,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,SAAS,MAAM,iBAAiB,CAAC"}

package/dist/storage/rbac-store.d.ts

@@ -0,0 +1,8 @@
+import type { RbacConfig, RoleAssignment, RbacRole } from '../types/index.js';
+export declare function getRbacConfig(projectId: string): Promise<RbacConfig>;
+export declare function saveRbacConfig(config: RbacConfig): Promise<void>;
+export declare function setRbacEnabled(projectId: string, enabled: boolean): Promise<RbacConfig>;
+export declare function assignRole(projectId: string, userId: string, role: RbacRole, specId?: string, assignedBy?: string): Promise<RbacConfig>;
+export declare function removeRole(projectId: string, userId: string, specId?: string): Promise<RbacConfig>;
+export declare function listAssignments(projectId: string): Promise<RoleAssignment[]>;
+//# sourceMappingURL=rbac-store.d.ts.map

package/dist/storage/rbac-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-store.d.ts","sourceRoot":"","sources":["../../src/storage/rbac-store.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AA6B9E,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAE1E;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE;AAMD,wBAAsB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAO7F;AAMD,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,UAAU,CAAC,CAqBrB;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAGlF"}

package/dist/storage/rbac-store.js

@@ -0,0 +1,75 @@
+// storage/rbac-store.ts — Persistence for RBAC role assignments (SPEC-166)
+// Stores: data/projects/{hash}/roles.json
+import { readJson, writeJson, projectDataDir } from './base-store.js';
+import { withFileLock } from './file-mutex.js';
+// ---------------------------------------------------------------------------
+// File path
+// ---------------------------------------------------------------------------
+function rolesFile(projectId) {
+    return `${projectDataDir(projectId)}/roles.json`;
+}
+// ---------------------------------------------------------------------------
+// Default config
+// ---------------------------------------------------------------------------
+function defaultConfig(projectId) {
+    return {
+        enabled: false,
+        projectId,
+        assignments: [],
+        updatedAt: new Date().toISOString(),
+    };
+}
+// ---------------------------------------------------------------------------
+// Read / Write
+// ---------------------------------------------------------------------------
+export async function getRbacConfig(projectId) {
+    return readJson(rolesFile(projectId), defaultConfig(projectId));
+}
+export async function saveRbacConfig(config) {
+    const updated = { ...config, updatedAt: new Date().toISOString() };
+    await writeJson(rolesFile(updated.projectId), updated);
+}
+// ---------------------------------------------------------------------------
+// Enable / Disable RBAC
+// ---------------------------------------------------------------------------
+export async function setRbacEnabled(projectId, enabled) {
+    return withFileLock(rolesFile(projectId), async () => {
+        const config = await getRbacConfig(projectId);
+        config.enabled = enabled;
+        await saveRbacConfig(config);
+        return config;
+    });
+}
+// ---------------------------------------------------------------------------
+// Role assignment CRUD
+// ---------------------------------------------------------------------------
+export async function assignRole(projectId, userId, role, specId, assignedBy) {
+    return withFileLock(rolesFile(projectId), async () => {
+        const config = await getRbacConfig(projectId);
+        // Remove existing assignment with same scope
+        config.assignments = config.assignments.filter((a) => !(a.userId === userId && a.specId === specId));
+        const assignment = {
+            userId,
+            role,
+            specId,
+            assignedAt: new Date().toISOString(),
+            assignedBy,
+        };
+        config.assignments.push(assignment);
+        await saveRbacConfig(config);
+        return config;
+    });
+}
+export async function removeRole(projectId, userId, specId) {
+    return withFileLock(rolesFile(projectId), async () => {
+        const config = await getRbacConfig(projectId);
+        config.assignments = config.assignments.filter((a) => !(a.userId === userId && a.specId === specId));
+        await saveRbacConfig(config);
+        return config;
+    });
+}
+export async function listAssignments(projectId) {
+    const config = await getRbacConfig(projectId);
+    return config.assignments;
+}
+//# sourceMappingURL=rbac-store.js.map

package/dist/storage/rbac-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac-store.js","sourceRoot":"","sources":["../../src/storage/rbac-store.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,0CAA0C;AAG1C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,aAAa,CAAC;AACnD,CAAC;AAED,8EAA8E;AAC9E,iBAAiB;AACjB,8EAA8E;AAE9E,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO;QACL,OAAO,EAAE,KAAK;QACd,SAAS;QACT,WAAW,EAAE,EAAE;QACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,OAAO,QAAQ,CAAa,SAAS,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAkB;IACrD,MAAM,OAAO,GAAe,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC/E,MAAM,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAgB;IACtE,OAAO,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;QACzB,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAAc,EACd,IAAc,EACd,MAAe,EACf,UAAmB;IAEnB,OAAO,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAE9C,6CAA6C;QAC7C,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAC5C,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CACrE,CAAC;QAEF,MAAM,UAAU,GAAmB;YACjC,MAAM;YACN,IAAI;YACJ,MAAM;YACN,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,UAAU;SACX,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,MAAc,EACd,MAAe;IAEf,OAAO,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAC5C,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CACrE,CAAC;QACF,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,WAAW,CAAC;AAC5B,CAAC"}

package/dist/storage/spec-observability-store.d.ts

@@ -0,0 +1,16 @@
+import type { SpecUsageEvent, SpecUsageLog } from '../types/index.js';
+/**
+ * Append a spec usage event for the given project.
+ * When the event count exceeds MAX_EVENTS, the oldest entries are trimmed (FIFO).
+ * This is intended to be called fire-and-forget from tool wrappers.
+ */
+export declare function recordSpecAccess(projectId: string, event: SpecUsageEvent): Promise<void>;
+/**
+ * Read all spec usage events for the given project.
+ */
+export declare function getSpecUsageLog(projectId: string): Promise<SpecUsageLog>;
+/**
+ * Remove all events (useful for testing / reset).
+ */
+export declare function clearSpecUsageLog(projectId: string): Promise<void>;
+//# sourceMappingURL=spec-observability-store.d.ts.map

package/dist/storage/spec-observability-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-observability-store.d.ts","sourceRoot":"","sources":["../../src/storage/spec-observability-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAkCtE;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9F;AAED;;GAEG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAE9E;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIxE"}

package/dist/storage/spec-observability-store.js

@@ -0,0 +1,55 @@
+// storage/spec-observability-store.ts — Persistence for spec usage events (SPEC-158)
+// Append-only log at data/projects/{projectId}/spec-usage.json
+// Zero-overhead when not queried: writes are fire-and-forget.
+import { readJson, writeJson, projectDataDir } from './base-store.js';
+import { withFileLock } from './file-mutex.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+const MAX_EVENTS = 10_000;
+// ---------------------------------------------------------------------------
+// File path
+// ---------------------------------------------------------------------------
+function usageFile(projectId) {
+    return `${projectDataDir(projectId)}/spec-usage.json`;
+}
+// ---------------------------------------------------------------------------
+// Private helpers
+// ---------------------------------------------------------------------------
+function emptyLog() {
+    return { events: [] };
+}
+async function loadLog(projectId) {
+    return readJson(usageFile(projectId), emptyLog());
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Append a spec usage event for the given project.
+ * When the event count exceeds MAX_EVENTS, the oldest entries are trimmed (FIFO).
+ * This is intended to be called fire-and-forget from tool wrappers.
+ */
+export async function recordSpecAccess(projectId, event) {
+    await withFileLock(usageFile(projectId), async () => {
+        const log = await loadLog(projectId);
+        const events = [...log.events, event];
+        const trimmed = events.length > MAX_EVENTS ? events.slice(events.length - MAX_EVENTS) : events;
+        await writeJson(usageFile(projectId), { events: trimmed });
+    });
+}
+/**
+ * Read all spec usage events for the given project.
+ */
+export async function getSpecUsageLog(projectId) {
+    return loadLog(projectId);
+}
+/**
+ * Remove all events (useful for testing / reset).
+ */
+export async function clearSpecUsageLog(projectId) {
+    await withFileLock(usageFile(projectId), async () => {
+        await writeJson(usageFile(projectId), emptyLog());
+    });
+}
+//# sourceMappingURL=spec-observability-store.js.map

package/dist/storage/spec-observability-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-observability-store.js","sourceRoot":"","sources":["../../src/storage/spec-observability-store.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,+DAA+D;AAC/D,8DAA8D;AAG9D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,SAAS,SAAS,CAAC,SAAiB;IAClC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,kBAAkB,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,QAAQ;IACf,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,SAAiB;IACtC,OAAO,QAAQ,CAAe,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,KAAqB;IAC7E,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/F,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB;IACrD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,MAAM,YAAY,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/a2a-handler.d.ts

@@ -0,0 +1,14 @@
+import type { A2ARegisterInput, A2ADelegateInput } from '../types/a2a.js';
+import type { ToolResult } from '../types/index.js';
+/**
+ * Register Planu as an A2A-capable agent.
+ * Generates and persists a capability card to data/global/a2a-config.json.
+ */
+export declare function handleA2ARegister(args: A2ARegisterInput): Promise<ToolResult>;
+/**
+ * Delegate a task to another A2A agent.
+ * Because the A2A network protocol is nascent, delegation always falls back
+ * to local execution and records the delegation attempt in task history.
+ */
+export declare function handleA2ADelegate(args: A2ADelegateInput): Promise<ToolResult>;
+//# sourceMappingURL=a2a-handler.d.ts.map

package/dist/tools/a2a-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-handler.d.ts","sourceRoot":"","sources":["../../src/tools/a2a-handler.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAGV,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA+CpD;;;GAGG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAiCnF;AAMD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwCnF"}

package/dist/tools/a2a-handler.js

@@ -0,0 +1,100 @@
+import { readJson, writeJson, projectDataDir, globalDataDir } from '../storage/index.js';
+import { generateCapabilityCard, createTask, updateTaskStatus, listTasks, loadTasks, delegateTask, } from '../engine/a2a/index.js';
+import { PLANU_VERSION } from '../config/version.js';
+import { jsonResult, errText } from './response-helpers.js';
+// ---------------------------------------------------------------------------
+// Storage helpers
+// ---------------------------------------------------------------------------
+function a2aConfigPath() {
+    return `${globalDataDir()}/a2a-config.json`;
+}
+function a2aTasksPath(projectId) {
+    return `${projectDataDir(projectId)}/a2a-tasks.json`;
+}
+async function loadCards() {
+    return readJson(a2aConfigPath(), []);
+}
+async function saveCards(cards) {
+    await writeJson(a2aConfigPath(), cards);
+}
+async function loadAndHydrateTasks(projectId) {
+    const tasks = await readJson(a2aTasksPath(projectId), []);
+    loadTasks(tasks);
+}
+async function persistTasks(projectId) {
+    const tasks = listTasks(projectId);
+    await writeJson(a2aTasksPath(projectId), tasks);
+}
+// ---------------------------------------------------------------------------
+// a2a_register handler
+// ---------------------------------------------------------------------------
+/**
+ * Register Planu as an A2A-capable agent.
+ * Generates and persists a capability card to data/global/a2a-config.json.
+ */
+export async function handleA2ARegister(args) {
+    if (!args.projectId || args.projectId.trim() === '') {
+        return errText('projectId is required. Provide the project hash or identifier.');
+    }
+    const agentId = `planu-sdd-agent-${args.projectId}`;
+    const card = generateCapabilityCard(agentId, PLANU_VERSION, args.projectId, args.skills, args.name);
+    const cards = await loadCards();
+    const idx = cards.findIndex((c) => c.agentId === agentId);
+    if (idx >= 0) {
+        cards[idx] = card;
+    }
+    else {
+        cards.push(card);
+    }
+    await saveCards(cards);
+    return jsonResult({
+        registered: true,
+        agentId: card.agentId,
+        name: card.name,
+        version: card.version,
+        skillCount: card.skills.length,
+        supportedSpecTypes: card.supportedSpecTypes,
+        registeredAt: card.registeredAt,
+        storedAt: a2aConfigPath(),
+    });
+}
+// ---------------------------------------------------------------------------
+// a2a_delegate handler
+// ---------------------------------------------------------------------------
+/**
+ * Delegate a task to another A2A agent.
+ * Because the A2A network protocol is nascent, delegation always falls back
+ * to local execution and records the delegation attempt in task history.
+ */
+export async function handleA2ADelegate(args) {
+    if (!args.projectId || args.projectId.trim() === '') {
+        return errText('projectId is required. Provide the project hash or identifier.');
+    }
+    if (!args.taskDescription || args.taskDescription.trim() === '') {
+        return errText('taskDescription is required. Describe the task you want to delegate in natural language.');
+    }
+    await loadAndHydrateTasks(args.projectId);
+    const targetEndpoint = args.agentEndpoint
+        ? { name: 'external-agent', url: args.agentEndpoint }
+        : undefined;
+    const task = createTask(args.projectId, args.taskDescription, args.specId, targetEndpoint);
+    // Transition to running before delegation attempt
+    updateTaskStatus(task.taskId, 'running');
+    // Attempt delegation (always falls back to local for now)
+    const delegation = delegateTask({ ...task, status: 'running' });
+    // Mark task completed after fallback
+    const completedTask = updateTaskStatus(task.taskId, 'completed');
+    await persistTasks(args.projectId);
+    return jsonResult({
+        taskId: task.taskId,
+        status: completedTask?.status ?? 'completed',
+        outcome: delegation.outcome,
+        fallbackReason: delegation.fallbackReason,
+        specId: args.specId,
+        taskDescription: args.taskDescription,
+        agentEndpoint: args.agentEndpoint ?? null,
+        storedAt: a2aTasksPath(args.projectId),
+        hint: "Use a2a_register to publish Planu's capability card so other agents can discover it.",
+    });
+}
+//# sourceMappingURL=a2a-handler.js.map

package/dist/tools/a2a-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a-handler.js","sourceRoot":"","sources":["../../src/tools/a2a-handler.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzF,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,SAAS,EACT,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAE5D,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,SAAS,aAAa;IACpB,OAAO,GAAG,aAAa,EAAE,kBAAkB,CAAC;AAC9C,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,iBAAiB,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,OAAO,QAAQ,CAAsB,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAA0B;IACjD,MAAM,SAAS,CAAC,aAAa,EAAE,EAAE,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IAClD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAY,YAAY,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,SAAS,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB;IAC3C,MAAM,KAAK,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,SAAS,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,gEAAgE,CAAC,CAAC;IACnF,CAAC;IAED,MAAM,OAAO,GAAG,mBAAmB,IAAI,CAAC,SAAS,EAAE,CAAC;IACpD,MAAM,IAAI,GAAG,sBAAsB,CACjC,OAAO,EACP,aAAa,EACb,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,IAAI,CACV,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IAC1D,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAEvB,OAAO,UAAU,CAAC;QAChB,UAAU,EAAE,IAAI;QAChB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;QAC9B,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,QAAQ,EAAE,aAAa,EAAE;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAsB;IAC5D,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACpD,OAAO,OAAO,CAAC,gEAAgE,CAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAChE,OAAO,OAAO,CACZ,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAE1C,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa;QACvC,CAAC,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE;QACrD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAE3F,kDAAkD;IAClD,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEzC,0DAA0D;IAC1D,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAEhE,qCAAqC;IACrC,MAAM,aAAa,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEjE,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,OAAO,UAAU,CAAC;QAChB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,WAAW;QAC5C,OAAO,EAAE,UAAU,CAAC,OAAO;QAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;QACzC,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC;QACtC,IAAI,EAAE,sFAAsF;KAC7F,CAAC,CAAC;AACL,CAAC"}

package/dist/tools/analyze-spec-dependencies.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"analyze-spec-dependencies.d.ts","sourceRoot":"","sources":["../../src/tools/analyze-spec-dependencies.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIzE;;GAEG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CAyErB"}
+{"version":3,"file":"analyze-spec-dependencies.d.ts","sourceRoot":"","sources":["../../src/tools/analyze-spec-dependencies.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIzE;;GAEG;AACH,wBAAsB,6BAA6B,CACjD,IAAI,EAAE,mBAAmB,GACxB,OAAO,CAAC,UAAU,CAAC,CA0ErB"}

package/dist/tools/analyze-spec-dependencies.js

@@ -58,6 +58,7 @@ export async function handleAnalyzeSpecDependencies(args) {
         sections.push(`\n### Execution Waves`);
         for (let i = 0; i < analysis.executionWaves.length; i++) {
             const wave = analysis.executionWaves[i];
+            /* v8 ignore next 1 */
             if (wave) {
                 sections.push(`**Wave ${i + 1}**: ${wave.join(', ')}`);
             }

package/dist/tools/analyze-spec-dependencies.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyze-spec-dependencies.js","sourceRoot":"","sources":["../../src/tools/analyze-spec-dependencies.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,0FAA0F;AAG1F,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,+BAA+B,IAAI,CAAC,SAAS,yCAAyC;iBAC7F;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAElF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,yDAAyD,IAAI,CAAC,SAAS,IAAI;iBAClF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,UAAU;IACV,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,6BAA6B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAElE,gBAAgB;IAChB,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACpE,CAAC;IAED,SAAS;IACT,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,gCAAgC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,QAAQ,CAAC,IAAI,CAAC,0CAA0C,QAAQ,CAAC,cAAc,UAAU,CAAC,CAAC;IAE3F,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC"}
+{"version":3,"file":"analyze-spec-dependencies.js","sourceRoot":"","sources":["../../src/tools/analyze-spec-dependencies.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,0FAA0F;AAG1F,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAE7E;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,IAAyB;IAEzB,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAEjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,+BAA+B,IAAI,CAAC,SAAS,yCAAyC;iBAC7F;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,wCAAwC;IACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAElF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,IAAI,EAAE,yDAAyD,IAAI,CAAC,SAAS,IAAI;iBAClF;aACF;YACD,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,UAAU;IACV,QAAQ,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,sBAAsB,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC3D,QAAQ,CAAC,IAAI,CAAC,6BAA6B,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAElE,gBAAgB;IAChB,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,QAAQ,CAAC,iBAAiB,IAAI,CAAC,CAAC;QACtE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACpE,CAAC;IAED,SAAS;IACT,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,gCAAgC,QAAQ,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,IAAI,QAAQ,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,QAAQ,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACxC,sBAAsB;YACtB,IAAI,IAAI,EAAE,CAAC;gBACT,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,kBAAkB;IAClB,QAAQ,CAAC,IAAI,CAAC,0CAA0C,QAAQ,CAAC,cAAc,UAAU,CAAC,CAAC;IAE3F,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;KACvD,CAAC;AACJ,CAAC"}

package/dist/tools/assign-role-handler.d.ts

@@ -0,0 +1,3 @@
+import type { ToolResult, AssignRoleInput } from '../types/index.js';
+export declare function handleAssignRole(args: AssignRoleInput): Promise<ToolResult>;
+//# sourceMappingURL=assign-role-handler.d.ts.map

package/dist/tools/assign-role-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-role-handler.d.ts","sourceRoot":"","sources":["../../src/tools/assign-role-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIrE,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BjF"}

package/dist/tools/assign-role-handler.js

@@ -0,0 +1,25 @@
+// tools/assign-role-handler.ts — Handler for assign_role tool (SPEC-166)
+import { assignRole } from '../storage/rbac-store.js';
+import { ROLE_DESCRIPTIONS } from '../engine/rbac/index.js';
+export async function handleAssignRole(args) {
+    if (!args.userId || args.userId.trim().length === 0) {
+        return {
+            content: [{ type: 'text', text: 'userId must not be empty.' }],
+            isError: true,
+        };
+    }
+    const config = await assignRole(args.projectId, args.userId.trim(), args.role, args.specId, args.assignedBy);
+    const scope = args.specId ? ` for spec "${args.specId}"` : ' at project level';
+    const roleDesc = ROLE_DESCRIPTIONS[args.role];
+    const assignmentCount = config.assignments.length;
+    const lines = [
+        `Assigned role "${args.role}"${scope} to user "${args.userId}".`,
+        `Role description: ${roleDesc}`,
+        `Total assignments in project: ${String(assignmentCount)}`,
+    ];
+    if (args.assignedBy) {
+        lines.push(`Assigned by: ${args.assignedBy}`);
+    }
+    return { content: [{ type: 'text', text: lines.join('\n') }] };
+}
+//# sourceMappingURL=assign-role-handler.js.map

package/dist/tools/assign-role-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assign-role-handler.js","sourceRoot":"","sources":["../../src/tools/assign-role-handler.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAGzE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAqB;IAC1D,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;YAC9D,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,CAC7B,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAClB,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,UAAU,CAChB,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC/E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IAElD,MAAM,KAAK,GAAG;QACZ,kBAAkB,IAAI,CAAC,IAAI,IAAI,KAAK,aAAa,IAAI,CAAC,MAAM,IAAI;QAChE,qBAAqB,QAAQ,EAAE;QAC/B,iCAAiC,MAAM,CAAC,eAAe,CAAC,EAAE;KAC3D,CAAC;IAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/tools/audit-trail-handler.d.ts

@@ -0,0 +1,4 @@
+import type { ToolResult, AuditTrailInput, GenerateAttestationInput } from '../types/index.js';
+export declare function handleAuditTrail(args: AuditTrailInput): Promise<ToolResult>;
+export declare function handleGenerateAttestation(args: GenerateAttestationInput): Promise<ToolResult>;
+//# sourceMappingURL=audit-trail-handler.d.ts.map

package/dist/tools/audit-trail-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail-handler.d.ts","sourceRoot":"","sources":["../../src/tools/audit-trail-handler.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAkB/F,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC,CAsDjF;AAMD,wBAAsB,yBAAyB,CAC7C,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,UAAU,CAAC,CA6CrB"}

package/dist/tools/audit-trail-handler.js

@@ -0,0 +1,91 @@
+// tools/audit-trail-handler.ts — Handlers for audit_trail and generate_attestation tools (SPEC-167)
+import { queryAuditLog, verifyChainIntegrity, generateAttestation, } from '../engine/audit-trail/index.js';
+import { projectDataDir } from '../storage/base-store.js';
+import { formatSuccess, formatError, toolResult } from './response-helpers.js';
+/** Build the path to a project's audit log file. */
+function auditLogPath(projectId) {
+    return `${projectDataDir(projectId)}/audit-log.jsonl`;
+}
+// ---------------------------------------------------------------------------
+// audit_trail handler
+// ---------------------------------------------------------------------------
+export async function handleAuditTrail(args) {
+    if (!args.projectId || args.projectId.trim().length === 0) {
+        return toolResult(formatError('projectId is required', 'Provide a valid project ID.'), undefined, true);
+    }
+    const filePath = auditLogPath(args.projectId);
+    const [queryResult, chainResult] = await Promise.all([
+        queryAuditLog(filePath, {
+            projectId: args.projectId,
+            specId: args.specId,
+            eventType: args.eventType,
+            from: args.from,
+            to: args.to,
+            limit: args.limit,
+        }),
+        verifyChainIntegrity(filePath),
+    ]);
+    const integrityLabel = chainResult.valid
+        ? 'Chain: INTACT'
+        : `Chain: BROKEN (${chainResult.message})`;
+    const lines = [
+        `Audit Log — ${args.projectId}`,
+        `${String(queryResult.total)} events found | ${integrityLabel}`,
+        queryResult.truncated
+            ? `(Showing first ${String(queryResult.events.length)} of ${String(queryResult.total)})`
+            : '',
+        '',
+    ].filter((l) => l !== '');
+    if (queryResult.events.length === 0) {
+        lines.push('No events match the specified filters.');
+    }
+    else {
+        for (const ev of queryResult.events) {
+            const specLabel = ev.specId ? ` [${ev.specId}]` : '';
+            const userLabel = ev.userId ? ` by ${ev.userId}` : '';
+            lines.push(`• ${ev.timestamp}${specLabel}${userLabel} — ${ev.eventType}: ${ev.action}`);
+        }
+    }
+    const body = lines.join('\n');
+    return toolResult(formatSuccess('Audit Trail', body), {
+        events: queryResult.events,
+        total: queryResult.total,
+        truncated: queryResult.truncated,
+        chainIntegrity: chainResult,
+    });
+}
+// ---------------------------------------------------------------------------
+// generate_attestation handler
+// ---------------------------------------------------------------------------
+export async function handleGenerateAttestation(args) {
+    if (!args.projectId || args.projectId.trim().length === 0) {
+        return toolResult(formatError('projectId is required', 'Provide a valid project ID.'), undefined, true);
+    }
+    if (!args.specId || args.specId.trim().length === 0) {
+        return toolResult(formatError('specId is required', 'Provide a spec ID to generate attestation for.'), undefined, true);
+    }
+    const filePath = auditLogPath(args.projectId);
+    const attestation = await generateAttestation(filePath, args.projectId, args.specId);
+    const { summary } = attestation;
+    const chainLabel = attestation.chainValid ? 'INTACT' : 'BROKEN';
+    const typeLines = Object.entries(summary.eventTypes)
+        .map(([type, count]) => `  • ${type}: ${String(count)}`)
+        .join('\n');
+    const body = [
+        `Attestation ID: ${attestation.attestationId}`,
+        `Generated: ${attestation.generatedAt}`,
+        `Spec: ${attestation.specId}`,
+        `Chain integrity: ${chainLabel}`,
+        `Total events: ${String(summary.totalEvents)}`,
+        summary.firstEvent ? `First event: ${summary.firstEvent}` : '',
+        summary.lastEvent ? `Last event: ${summary.lastEvent}` : '',
+        typeLines.length > 0 ? `\nEvent breakdown:\n${typeLines}` : '',
+    ]
+        .filter(Boolean)
+        .join('\n');
+    return toolResult(formatSuccess('Attestation Generated', body, [
+        'Export this attestation JSON for compliance audits (SOC2/HIPAA/ISO27001).',
+        'Verify chain integrity regularly to detect tampering.',
+    ]), attestation);
+}
+//# sourceMappingURL=audit-trail-handler.js.map