@revealui/db 0.2.0 → 0.3.0

package/dist/security-audit-storage.d.ts

@@ -0,0 +1,54 @@
+/**
+ * DrizzleSecurityAuditStorage — DB-backed implementation of @revealui/core's AuditStorage.
+ *
+ * Adapts the core security audit interface to the shared `audit_log` table.
+ * Maps AuditEvent.actor.id → agentId, and stores the full event in payload.
+ */
+import type { NeonHttpDatabase } from 'drizzle-orm/neon-http';
+import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
+interface AuditEvent {
+    id: string;
+    timestamp: string;
+    type: string;
+    severity: string;
+    actor: {
+        id: string;
+        type: 'user' | 'system' | 'api';
+        ip?: string;
+        userAgent?: string;
+    };
+    resource?: {
+        type: string;
+        id: string;
+        name?: string;
+    };
+    action: string;
+    result: 'success' | 'failure' | 'partial';
+    changes?: {
+        before?: Record<string, unknown>;
+        after?: Record<string, unknown>;
+    };
+    metadata?: Record<string, unknown>;
+}
+interface AuditQuery {
+    types?: string[];
+    actorId?: string;
+    resourceType?: string;
+    resourceId?: string;
+    startDate?: Date;
+    endDate?: Date;
+    severity?: string[];
+    result?: string[];
+    limit?: number;
+    offset?: number;
+}
+type DrizzleDb = NeonHttpDatabase | NodePgDatabase;
+export declare class DrizzleSecurityAuditStorage {
+    private db;
+    constructor(db: DrizzleDb);
+    write(event: AuditEvent): Promise<void>;
+    query(query: AuditQuery): Promise<AuditEvent[]>;
+    count(query: AuditQuery): Promise<number>;
+}
+export {};
+//# sourceMappingURL=security-audit-storage.d.ts.map

package/dist/security-audit-storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit-storage.d.ts","sourceRoot":"","sources":["../src/security-audit-storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAA;AAG/D,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE;QACL,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAA;QAC/B,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAA;IACD,QAAQ,CAAC,EAAE;QACT,IAAI,EAAE,MAAM,CAAA;QACZ,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,CAAC,EAAE,MAAM,CAAA;KACd,CAAA;IACD,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,SAAS,CAAA;IACzC,OAAO,CAAC,EAAE;QACR,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAChC,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAED,UAAU,UAAU;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,IAAI,CAAA;IAChB,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,KAAK,SAAS,GAAG,gBAAgB,GAAG,cAAc,CAAA;AAElD,qBAAa,2BAA2B;IAC1B,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,SAAS;IAE3B,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBvC,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAiD/C,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;CAyBhD"}

package/dist/security-audit-storage.js

@@ -0,0 +1,100 @@
+/**
+ * DrizzleSecurityAuditStorage — DB-backed implementation of @revealui/core's AuditStorage.
+ *
+ * Adapts the core security audit interface to the shared `audit_log` table.
+ * Maps AuditEvent.actor.id → agentId, and stores the full event in payload.
+ */
+import { and, count, desc, eq, gte, inArray, lte } from 'drizzle-orm';
+import { auditLog } from './schema/audit-log.js';
+export class DrizzleSecurityAuditStorage {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async write(event) {
+        await this.db.insert(auditLog).values({
+            id: event.id,
+            timestamp: new Date(event.timestamp),
+            eventType: event.type,
+            severity: event.severity,
+            agentId: event.actor.id,
+            taskId: event.resource?.id ?? null,
+            sessionId: null,
+            payload: {
+                actor: event.actor,
+                resource: event.resource,
+                action: event.action,
+                result: event.result,
+                changes: event.changes,
+                metadata: event.metadata,
+            },
+            policyViolations: [],
+        });
+    }
+    async query(query) {
+        const conditions = [];
+        if (query.types?.length) {
+            conditions.push(inArray(auditLog.eventType, query.types));
+        }
+        if (query.actorId) {
+            conditions.push(eq(auditLog.agentId, query.actorId));
+        }
+        if (query.startDate) {
+            conditions.push(gte(auditLog.timestamp, query.startDate));
+        }
+        if (query.endDate) {
+            conditions.push(lte(auditLog.timestamp, query.endDate));
+        }
+        if (query.severity?.length) {
+            conditions.push(inArray(auditLog.severity, query.severity));
+        }
+        const where = conditions.length > 0 ? and(...conditions) : undefined;
+        const rows = await this.db
+            .select()
+            .from(auditLog)
+            .where(where)
+            .orderBy(desc(auditLog.timestamp))
+            .limit(query.limit ?? 100)
+            .offset(query.offset ?? 0);
+        return rows.map((row) => {
+            const payload = (row.payload ?? {});
+            return {
+                id: row.id,
+                timestamp: row.timestamp.toISOString(),
+                type: row.eventType,
+                severity: row.severity,
+                actor: payload.actor ?? {
+                    id: row.agentId,
+                    type: 'system',
+                },
+                resource: payload.resource,
+                action: payload.action ?? row.eventType,
+                result: payload.result ?? 'success',
+                changes: payload.changes,
+                metadata: payload.metadata,
+            };
+        });
+    }
+    async count(query) {
+        const conditions = [];
+        if (query.types?.length) {
+            conditions.push(inArray(auditLog.eventType, query.types));
+        }
+        if (query.actorId) {
+            conditions.push(eq(auditLog.agentId, query.actorId));
+        }
+        if (query.startDate) {
+            conditions.push(gte(auditLog.timestamp, query.startDate));
+        }
+        if (query.endDate) {
+            conditions.push(lte(auditLog.timestamp, query.endDate));
+        }
+        const where = conditions.length > 0 ? and(...conditions) : undefined;
+        const [result] = await this.db
+            .select({ total: count() })
+            .from(auditLog)
+            .where(where);
+        return result?.total ?? 0;
+    }
+}
+//# sourceMappingURL=security-audit-storage.js.map

package/dist/security-audit-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit-storage.js","sourceRoot":"","sources":["../src/security-audit-storage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAGrE,OAAO,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAA;AA0ChD,MAAM,OAAO,2BAA2B;IAClB;IAApB,YAAoB,EAAa;QAAb,OAAE,GAAF,EAAE,CAAW;IAAG,CAAC;IAErC,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAO,IAAI,CAAC,EAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;YAC1D,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YACpC,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;YACvB,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI;YAClC,SAAS,EAAE,IAAI;YACf,OAAO,EAAE;gBACP,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;aACzB;YACD,gBAAgB,EAAE,EAAE;SACrB,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,UAAU,GAAG,EAAE,CAAA;QAErB,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAC3B,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEpE,MAAM,IAAI,GAAG,MAAO,IAAI,CAAC,EAAuB;aAC7C,MAAM,EAAE;aACR,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,KAAK,CAAC;aACZ,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;aACjC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC;aACzB,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAA;QAE5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAA;YAC9D,OAAO;gBACL,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;gBACtC,IAAI,EAAE,GAAG,CAAC,SAAS;gBACnB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,KAAK,EAAG,OAAO,CAAC,KAA6B,IAAI;oBAC/C,EAAE,EAAE,GAAG,CAAC,OAAO;oBACf,IAAI,EAAE,QAAiB;iBACxB;gBACD,QAAQ,EAAE,OAAO,CAAC,QAAkC;gBACpD,MAAM,EAAG,OAAO,CAAC,MAAiB,IAAI,GAAG,CAAC,SAAS;gBACnD,MAAM,EAAG,OAAO,CAAC,MAA+B,IAAI,SAAS;gBAC7D,OAAO,EAAE,OAAO,CAAC,OAAgC;gBACjD,QAAQ,EAAE,OAAO,CAAC,QAAmC;aACtD,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC3B,MAAM,UAAU,GAAG,EAAE,CAAA;QAErB,IAAI,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;YACpB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QAC3D,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClB,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAEpE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAO,IAAI,CAAC,EAAuB;aACjD,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;aAC1B,IAAI,CAAC,QAAQ,CAAC;aACd,KAAK,CAAC,KAAK,CAAC,CAAA;QAEf,OAAO,MAAM,EAAE,KAAK,IAAI,CAAC,CAAA;IAC3B,CAAC;CACF"}