@schema-weaver/pg-connector 0.0.0-stage → 2.0.1

package/dist/cjs/audit/files.js

@@ -0,0 +1,406 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_FILE_MODE = exports.AUDIT_DIR_MODE = void 0;
+exports.repairAuditDirMode = repairAuditDirMode;
+exports.ensureAuditDir = ensureAuditDir;
+exports.probeAuditDir = probeAuditDir;
+exports.getAuditFilesChronological = getAuditFilesChronological;
+exports.getAuditFilesReverse = getAuditFilesReverse;
+exports.parseSince = parseSince;
+exports.readAuditLogChronological = readAuditLogChronological;
+exports.eventMatchesFilter = eventMatchesFilter;
+exports.readAuditEvents = readAuditEvents;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/**
+ * Mode for the audit **directory**. A directory needs the execute bit to be
+ * traversable; creating one with a regular file's mode (0o600) makes every
+ * stat/open/readdir inside it fail with EACCES, which is how a clean install
+ * ended up with no audit trail at all.
+ */
+exports.AUDIT_DIR_MODE = 0o700;
+/** Mode for the audit log files themselves: read/write for the owner only. */
+exports.AUDIT_FILE_MODE = 0o600;
+function posixModes() {
+    return process.platform !== 'win32';
+}
+/**
+ * Repairs an audit directory left with a mode that cannot be traversed.
+ *
+ * `fs.mkdir({ recursive: true })` is a no-op on an existing directory, so a
+ * directory created earlier with the wrong mode stays wrong and every later
+ * append keeps failing EACCES. The explicit chmod is what makes an
+ * already-broken install repair itself.
+ *
+ * @returns true when the mode had to be corrected.
+ */
+async function repairAuditDirMode(dir, mode = exports.AUDIT_DIR_MODE) {
+    if (!posixModes())
+        return false;
+    let st;
+    try {
+        st = await fs.promises.stat(dir);
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return false;
+        throw err;
+    }
+    if (!st.isDirectory()) {
+        throw new Error(`audit path exists but is not a directory: ${dir}`);
+    }
+    if ((st.mode & 0o777) === mode)
+        return false;
+    await fs.promises.chmod(dir, mode);
+    return true;
+}
+/**
+ * Ensures the audit directory exists and is traversable, creating it at mode
+ * 0o700 and repairing a pre-existing wrong mode.
+ *
+ * Idempotent and safe to call from setup, startup, append and repair paths:
+ *
+ * ```ts
+ * await ensureAuditDir(path.join(getSwAgentDir(), 'audit'));
+ * ```
+ *
+ * @returns true when the directory had to be created or its mode corrected.
+ */
+async function ensureAuditDir(dir, opts = {}) {
+    const dirMode = opts.dirMode ?? exports.AUDIT_DIR_MODE;
+    let existed = true;
+    try {
+        await fs.promises.stat(dir);
+    }
+    catch {
+        existed = false;
+    }
+    await fs.promises.mkdir(dir, { recursive: true, mode: dirMode });
+    const repaired = await repairAuditDirMode(dir, dirMode);
+    return !existed || repaired;
+}
+/**
+ * Startup gate for the audit path: creates/repairs the directory, then proves a
+ * real write + fsync succeeds. "Audit loss must not be silent" is only
+ * enforceable if startup refuses to claim the log is fine without trying it.
+ */
+async function probeAuditDir(dir, opts = {}) {
+    const dirMode = opts.dirMode ?? exports.AUDIT_DIR_MODE;
+    const fileMode = opts.fileMode ?? exports.AUDIT_FILE_MODE;
+    let repaired = false;
+    let actualMode = dirMode;
+    try {
+        repaired = await repairAuditDirMode(dir, dirMode).catch(() => false);
+        const st = await fs.promises.stat(dir);
+        if (!st.isDirectory()) {
+            return { ok: false, dir, dirMode, repaired, reason: `audit path is not a directory: ${dir}` };
+        }
+        actualMode = st.mode & 0o777;
+    }
+    catch (err) {
+        return {
+            ok: false,
+            dir,
+            dirMode,
+            repaired,
+            reason: `cannot create audit directory: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const probe = path.join(dir, '.write_test');
+    try {
+        const fd = await fs.promises.open(probe, 'w', fileMode);
+        try {
+            await fd.writeFile('audit preflight');
+            await fd.sync();
+        }
+        finally {
+            await fd.close();
+        }
+        await fs.promises.unlink(probe);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            dir,
+            dirMode: actualMode,
+            repaired,
+            reason: `audit directory is not writable: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    return { ok: true, dir, dirMode: actualMode, repaired };
+}
+/**
+ * Returns audit log files in strict chronological order:
+ * audit-N.jsonl (oldest archive) -> ... -> audit-1.jsonl (most recent archive) -> audit.jsonl (active file)
+ */
+async function getAuditFilesChronological(auditDir) {
+    const archives = [];
+    let hasActive = false;
+    try {
+        const entries = await fs.promises.readdir(auditDir);
+        for (const entry of entries) {
+            if (entry === 'audit.jsonl') {
+                hasActive = true;
+                continue;
+            }
+            const match = entry.match(/^audit-(\d+)\.jsonl$/);
+            if (match) {
+                archives.push({ file: path.join(auditDir, entry), index: parseInt(match[1], 10) });
+            }
+        }
+    }
+    catch {
+        return [];
+    }
+    // Older archives have higher numbers (audit-2 is older than audit-1)
+    archives.sort((a, b) => b.index - a.index);
+    const result = archives.map((a) => a.file);
+    if (hasActive) {
+        result.push(path.join(auditDir, 'audit.jsonl'));
+    }
+    return result;
+}
+/**
+ * Returns audit log files in reverse-chronological order:
+ * audit.jsonl (active, newest) -> audit-1.jsonl -> audit-2.jsonl -> ... -> audit-N.jsonl (oldest)
+ */
+async function getAuditFilesReverse(auditDir) {
+    const chrono = await getAuditFilesChronological(auditDir);
+    return chrono.reverse();
+}
+/**
+ * Parse relative time string (e.g. "15m", "1h", "24h", "7d", "today") or ISO string into unix timestamp (ms).
+ */
+function parseSince(since) {
+    if (since === undefined || since === null || since === '')
+        return null;
+    if (typeof since === 'number')
+        return since;
+    const s = since.trim().toLowerCase();
+    if (s === 'today') {
+        const startOfToday = new Date();
+        startOfToday.setHours(0, 0, 0, 0);
+        return startOfToday.getTime();
+    }
+    const relMatch = s.match(/^(\d+)\s*(s|sec|m|min|h|hr|d|day|w|week)s?$/);
+    if (relMatch) {
+        const val = parseInt(relMatch[1], 10);
+        const unit = relMatch[2];
+        let mult = 1000;
+        if (unit.startsWith('s'))
+            mult = 1000;
+        else if (unit.startsWith('m'))
+            mult = 60 * 1000;
+        else if (unit.startsWith('h'))
+            mult = 3600 * 1000;
+        else if (unit.startsWith('d'))
+            mult = 86400 * 1000;
+        else if (unit.startsWith('w'))
+            mult = 7 * 86400 * 1000;
+        return Date.now() - val * mult;
+    }
+    const parsed = Date.parse(since);
+    if (!Number.isNaN(parsed)) {
+        return parsed;
+    }
+    return null;
+}
+function stripBom(content) {
+    return content.charCodeAt(0) === 0xfeff ? content.slice(1) : content;
+}
+/**
+ * Reads every record of the audit log in strict chronological order across all
+ * rotated files, with no limit.
+ *
+ * Chain verification must see the log as one sequence: verifying each rotated
+ * file in isolation reports every file that begins mid-chain as broken, which is
+ * what made routine rotation look like tampering.
+ */
+async function readAuditLogChronological(auditDir) {
+    const result = {
+        files: [],
+        events: [],
+        unreadableFiles: [],
+        malformedLines: 0,
+    };
+    const files = await getAuditFilesChronological(auditDir);
+    result.files = files;
+    for (const file of files) {
+        let content;
+        try {
+            content = await fs.promises.readFile(file, 'utf8');
+        }
+        catch {
+            result.unreadableFiles.push(file);
+            continue;
+        }
+        const lines = content.split('\n').filter((l) => l.trim().length > 0);
+        for (let i = 0; i < lines.length; i++) {
+            const raw = i === 0 ? stripBom(lines[i]) : lines[i];
+            try {
+                const parsed = JSON.parse(raw);
+                if (typeof parsed !== 'object' || parsed === null || Array.isArray(parsed)) {
+                    result.malformedLines++;
+                    continue;
+                }
+                result.events.push(parsed);
+            }
+            catch {
+                result.malformedLines++;
+            }
+        }
+    }
+    return result;
+}
+/**
+ * Checks whether an event satisfies the given filter.
+ */
+function eventMatchesFilter(event, filter, sinceTs, untilTs, searchLower) {
+    if (filter.project && event.project.toLowerCase() !== filter.project.toLowerCase()) {
+        return false;
+    }
+    if (filter.user && !event.user_id.toLowerCase().includes(filter.user.toLowerCase())) {
+        return false;
+    }
+    if (filter.action && event.action.toLowerCase() !== filter.action.toLowerCase()) {
+        return false;
+    }
+    if (filter.decision && event.decision.toLowerCase() !== filter.decision.toLowerCase()) {
+        return false;
+    }
+    if (filter.outcome && event.outcome.toLowerCase() !== filter.outcome.toLowerCase()) {
+        return false;
+    }
+    const eventTs = new Date(event.ts).getTime();
+    if (sinceTs !== null && sinceTs !== undefined && eventTs < sinceTs) {
+        return false;
+    }
+    if (untilTs !== null && untilTs !== undefined && eventTs > untilTs) {
+        return false;
+    }
+    if (searchLower) {
+        const haystack = [
+            event.statement_preview ?? '',
+            event.project,
+            event.user_id,
+            event.action,
+            event.decision,
+            event.outcome,
+            event.error_code ?? '',
+            event.denial_reason ?? '',
+            event.statement_fingerprint ?? '',
+        ]
+            .join(' ')
+            .toLowerCase();
+        if (!haystack.includes(searchLower)) {
+            return false;
+        }
+    }
+    return true;
+}
+/**
+ * Reads audit events matching the filter.
+ * Defaults to descending order (newest first).
+ * Fast backwards reading: stops as soon as `limit` matches are satisfied.
+ */
+async function readAuditEvents(auditDir, filter = {}) {
+    const isAsc = filter.order === 'asc';
+    const limit = filter.limit && filter.limit > 0 ? filter.limit : 50;
+    const sinceTs = parseSince(filter.since);
+    const untilTs = parseSince(filter.until);
+    const searchLower = filter.search?.trim().toLowerCase();
+    const matched = [];
+    if (!isAsc) {
+        // Newest first: read files in reverse (audit.jsonl first, then audit-1.jsonl, etc.)
+        const files = await getAuditFilesReverse(auditDir);
+        for (const file of files) {
+            try {
+                const content = await fs.promises.readFile(file, 'utf8');
+                const lines = content.split('\n').filter((l) => l.trim().length > 0);
+                // Process lines from bottom to top (newest in file to oldest)
+                for (let i = lines.length - 1; i >= 0; i--) {
+                    const raw = i === 0 ? stripBom(lines[i]) : lines[i];
+                    try {
+                        const event = JSON.parse(raw);
+                        if (eventMatchesFilter(event, filter, sinceTs, untilTs, searchLower)) {
+                            matched.push(event);
+                            if (matched.length >= limit) {
+                                return matched;
+                            }
+                        }
+                    }
+                    catch {
+                        // ignore malformed line
+                    }
+                }
+            }
+            catch {
+                // ignore unreadable file
+            }
+        }
+        return matched;
+    }
+    else {
+        // Oldest first: read files in chronological order
+        const files = await getAuditFilesChronological(auditDir);
+        for (const file of files) {
+            try {
+                const content = await fs.promises.readFile(file, 'utf8');
+                const lines = content.split('\n').filter((l) => l.trim().length > 0);
+                for (let i = 0; i < lines.length; i++) {
+                    const raw = i === 0 ? stripBom(lines[i]) : lines[i];
+                    try {
+                        const event = JSON.parse(raw);
+                        if (eventMatchesFilter(event, filter, sinceTs, untilTs, searchLower)) {
+                            matched.push(event);
+                            if (matched.length >= limit) {
+                                return matched;
+                            }
+                        }
+                    }
+                    catch {
+                        // ignore malformed line
+                    }
+                }
+            }
+            catch {
+                // ignore unreadable file
+            }
+        }
+        return matched;
+    }
+}
+//# sourceMappingURL=files.js.map

package/dist/cjs/audit/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../../src/audit/files.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsDA,gDAkBC;AAcD,wCAcC;AAiBD,sCA+CC;AAMD,gEA4BC;AAMD,oDAGC;AAKD,gCA6BC;AAcD,8DAoCC;AAKD,gDAoDC;AAOD,0CAoEC;AAvaD,uCAAyB;AACzB,2CAA6B;AA4B7B;;;;;GAKG;AACU,QAAA,cAAc,GAAG,KAAK,CAAC;AAEpC,8EAA8E;AACjE,QAAA,eAAe,GAAG,KAAK,CAAC;AAErC,SAAS,UAAU;IACjB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AACtC,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,OAAe,sBAAc;IAE7B,IAAI,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAC;IAChC,IAAI,EAAE,CAAC;IACP,IAAI,CAAC;QACH,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6CAA6C,GAAG,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7C,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAClC,GAAW,EACX,OAA6B,EAAE;IAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAc,CAAC;IAC/C,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxD,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC;AAC9B,CAAC;AAYD;;;;GAIG;AACI,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAAgD,EAAE;IAElD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,sBAAc,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,uBAAe,CAAC;IAElD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,UAAU,GAAG,OAAO,CAAC;IACzB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,kCAAkC,GAAG,EAAE,EAAE,CAAC;QAChG,CAAC;QACD,UAAU,GAAG,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG;YACH,OAAO;YACP,QAAQ;YACR,MAAM,EAAE,kCAAkC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC7F,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;YACtC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;QACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,GAAG;YACH,OAAO,EAAE,UAAU;YACnB,QAAQ;YACR,MAAM,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC/F,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,0BAA0B,CAAC,QAAgB;IAC/D,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;gBAC5B,SAAS,GAAG,IAAI,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,qEAAqE;IACrE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,MAAM,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,KAAuB;IAChD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QAChC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IAED,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACxE,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,IAAI,GAAG,IAAI,CAAC;QAChB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,CAAC;aACjC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC;aAC3C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;aAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;aAC9C,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,yBAAyB,CAAC,QAAgB;IAC9D,MAAM,MAAM,GAAuB;QACjC,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,eAAe,EAAE,EAAE;QACnB,cAAc,EAAE,CAAC;KAClB,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;IAErB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACrE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;gBAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3E,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,SAAS;gBACX,CAAC;gBACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAoB,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAgB,kBAAkB,CAChC,KAAiB,EACjB,MAAsB,EACtB,OAAuB,EACvB,OAAuB,EACvB,WAAoB;IAEpB,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACpF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,GAAG,OAAO,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG;YACf,KAAK,CAAC,iBAAiB,IAAI,EAAE;YAC7B,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,UAAU,IAAI,EAAE;YACtB,KAAK,CAAC,aAAa,IAAI,EAAE;YACzB,KAAK,CAAC,qBAAqB,IAAI,EAAE;SAClC;aACE,IAAI,CAAC,GAAG,CAAC;aACT,WAAW,EAAE,CAAC;QAEjB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,SAAyB,EAAE;IAE3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,KAAK,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAExD,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,oFAAoF;QACpF,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAErE,8DAA8D;gBAC9D,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC3C,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACpD,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;wBAC5C,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;4BACrE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACpB,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gCAC5B,OAAO,OAAO,CAAC;4BACjB,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wBAAwB;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;SAAM,CAAC;QACN,kDAAkD;QAClD,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACzD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAErE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACpD,IAAI,CAAC;wBACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;wBAC5C,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;4BACrE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;4BACpB,IAAI,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gCAC5B,OAAO,OAAO,CAAC;4BACjB,CAAC;wBACH,CAAC;oBACH,CAAC;oBAAC,MAAM,CAAC;wBACP,wBAAwB;oBAC1B,CAAC;gBACH,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/cjs/audit/index.d.ts

@@ -0,0 +1,9 @@
+export type { AuditAction, AuditDecision, AuditOutcome, AuditActor, AuditRole, AuditPermissionLevel, AuditEvent, AuditHead, AuditFilter, AuditQueryResult, AuditWriterHealth, AuditSinkHealth, } from './types';
+export { computeHash, computeMac, computeEventMac, canonicalStringify, isHash64, loadAuditKey, tryLoadAuditKey, decodeKeyMaterial, deriveChainId, readHead, readHeadFloor, resolveAnchor, writeHead, writeHeadFloor, floorPathFor, headPathFor, makeHead, verifyChain, verifyChainAgainstHead, verifyHashChain, ChainVerifier, AuditKeyError, GENESIS_HASH, AUDIT_KEY_BYTES, AUDIT_KEY_ENV, AUDIT_KEY_FILENAME, AUDIT_HEAD_FILENAME, AUDIT_FLOOR_SUFFIX, type AnchorClaim, type AuditKey, type AuditKeySource, type ChainFailureReason, type ChainVerifyResult, type ChainVerifyOptions, type MacInput, type ResolvedAnchor, type WriteHeadOptions, type LoadAuditKeyOptions, } from './chain';
+export { fingerprintStatement, previewStatement, redactSqlLiterals, isUnredactable, UNREDACTABLE, PREVIEW_MAX_LENGTH, } from './redact';
+export { LocalAuditWriter, verifyAuditLog, verifyStream, ACTIVE_AUDIT_FILE, type LocalWriterOptions, type AppendOptions, type VerifyAuditLogOptions, type VerifyStreamOptions, type AuditLogVerification, } from './local-writer';
+export { CloudAuditWriter, type CloudWriterConfig, type CloudWriterResult } from './cloud-writer';
+export { AuditSink, type AuditSinkOptions, type PendingEvent } from './sink';
+export { UNRESOLVED_DB_ALIAS, UNRESOLVED_DB_IDENTITY, currentResolvedDbIdentity, resolvedIdentityOf, withResolvedDatabase, type ResolvedDbIdentity, } from './context';
+export { getAuditFilesChronological, getAuditFilesReverse, readAuditLogChronological, ensureAuditDir, probeAuditDir, repairAuditDirMode, AUDIT_DIR_MODE, AUDIT_FILE_MODE, parseSince, eventMatchesFilter, readAuditEvents, type AuditLogFilter, type AuditLogReadResult, type AuditDirProbe, } from './files';
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/audit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,SAAS,EACT,oBAAoB,EACpB,UAAU,EACV,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,GAChB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,WAAW,EACX,UAAU,EACV,eAAe,EACf,kBAAkB,EAClB,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,QAAQ,EACR,aAAa,EACb,aAAa,EACb,SAAS,EACT,cAAc,EACd,YAAY,EACZ,WAAW,EACX,QAAQ,EACR,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,aAAa,EACb,aAAa,EACb,YAAY,EACZ,eAAe,EACf,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,SAAS,CAAC;AAEjB,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,kBAAkB,GACnB,MAAM,UAAU,CAAC;AAElB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,gBAAgB,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAElG,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,KAAK,YAAY,EAAE,MAAM,QAAQ,CAAC;AAE7E,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,KAAK,kBAAkB,GACxB,MAAM,WAAW,CAAC;AAEnB,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,yBAAyB,EACzB,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,cAAc,EACd,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,SAAS,CAAC"}

package/dist/cjs/audit/index.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.probeAuditDir = exports.ensureAuditDir = exports.readAuditLogChronological = exports.getAuditFilesReverse = exports.getAuditFilesChronological = exports.withResolvedDatabase = exports.resolvedIdentityOf = exports.currentResolvedDbIdentity = exports.UNRESOLVED_DB_IDENTITY = exports.UNRESOLVED_DB_ALIAS = exports.AuditSink = exports.CloudAuditWriter = exports.ACTIVE_AUDIT_FILE = exports.verifyStream = exports.verifyAuditLog = exports.LocalAuditWriter = exports.PREVIEW_MAX_LENGTH = exports.UNREDACTABLE = exports.isUnredactable = exports.redactSqlLiterals = exports.previewStatement = exports.fingerprintStatement = exports.AUDIT_FLOOR_SUFFIX = exports.AUDIT_HEAD_FILENAME = exports.AUDIT_KEY_FILENAME = exports.AUDIT_KEY_ENV = exports.AUDIT_KEY_BYTES = exports.GENESIS_HASH = exports.AuditKeyError = exports.ChainVerifier = exports.verifyHashChain = exports.verifyChainAgainstHead = exports.verifyChain = exports.makeHead = exports.headPathFor = exports.floorPathFor = exports.writeHeadFloor = exports.writeHead = exports.resolveAnchor = exports.readHeadFloor = exports.readHead = exports.deriveChainId = exports.decodeKeyMaterial = exports.tryLoadAuditKey = exports.loadAuditKey = exports.isHash64 = exports.canonicalStringify = exports.computeEventMac = exports.computeMac = exports.computeHash = void 0;
+exports.readAuditEvents = exports.eventMatchesFilter = exports.parseSince = exports.AUDIT_FILE_MODE = exports.AUDIT_DIR_MODE = exports.repairAuditDirMode = void 0;
+var chain_1 = require("./chain");
+Object.defineProperty(exports, "computeHash", { enumerable: true, get: function () { return chain_1.computeHash; } });
+Object.defineProperty(exports, "computeMac", { enumerable: true, get: function () { return chain_1.computeMac; } });
+Object.defineProperty(exports, "computeEventMac", { enumerable: true, get: function () { return chain_1.computeEventMac; } });
+Object.defineProperty(exports, "canonicalStringify", { enumerable: true, get: function () { return chain_1.canonicalStringify; } });
+Object.defineProperty(exports, "isHash64", { enumerable: true, get: function () { return chain_1.isHash64; } });
+Object.defineProperty(exports, "loadAuditKey", { enumerable: true, get: function () { return chain_1.loadAuditKey; } });
+Object.defineProperty(exports, "tryLoadAuditKey", { enumerable: true, get: function () { return chain_1.tryLoadAuditKey; } });
+Object.defineProperty(exports, "decodeKeyMaterial", { enumerable: true, get: function () { return chain_1.decodeKeyMaterial; } });
+Object.defineProperty(exports, "deriveChainId", { enumerable: true, get: function () { return chain_1.deriveChainId; } });
+Object.defineProperty(exports, "readHead", { enumerable: true, get: function () { return chain_1.readHead; } });
+Object.defineProperty(exports, "readHeadFloor", { enumerable: true, get: function () { return chain_1.readHeadFloor; } });
+Object.defineProperty(exports, "resolveAnchor", { enumerable: true, get: function () { return chain_1.resolveAnchor; } });
+Object.defineProperty(exports, "writeHead", { enumerable: true, get: function () { return chain_1.writeHead; } });
+Object.defineProperty(exports, "writeHeadFloor", { enumerable: true, get: function () { return chain_1.writeHeadFloor; } });
+Object.defineProperty(exports, "floorPathFor", { enumerable: true, get: function () { return chain_1.floorPathFor; } });
+Object.defineProperty(exports, "headPathFor", { enumerable: true, get: function () { return chain_1.headPathFor; } });
+Object.defineProperty(exports, "makeHead", { enumerable: true, get: function () { return chain_1.makeHead; } });
+Object.defineProperty(exports, "verifyChain", { enumerable: true, get: function () { return chain_1.verifyChain; } });
+Object.defineProperty(exports, "verifyChainAgainstHead", { enumerable: true, get: function () { return chain_1.verifyChainAgainstHead; } });
+Object.defineProperty(exports, "verifyHashChain", { enumerable: true, get: function () { return chain_1.verifyHashChain; } });
+Object.defineProperty(exports, "ChainVerifier", { enumerable: true, get: function () { return chain_1.ChainVerifier; } });
+Object.defineProperty(exports, "AuditKeyError", { enumerable: true, get: function () { return chain_1.AuditKeyError; } });
+Object.defineProperty(exports, "GENESIS_HASH", { enumerable: true, get: function () { return chain_1.GENESIS_HASH; } });
+Object.defineProperty(exports, "AUDIT_KEY_BYTES", { enumerable: true, get: function () { return chain_1.AUDIT_KEY_BYTES; } });
+Object.defineProperty(exports, "AUDIT_KEY_ENV", { enumerable: true, get: function () { return chain_1.AUDIT_KEY_ENV; } });
+Object.defineProperty(exports, "AUDIT_KEY_FILENAME", { enumerable: true, get: function () { return chain_1.AUDIT_KEY_FILENAME; } });
+Object.defineProperty(exports, "AUDIT_HEAD_FILENAME", { enumerable: true, get: function () { return chain_1.AUDIT_HEAD_FILENAME; } });
+Object.defineProperty(exports, "AUDIT_FLOOR_SUFFIX", { enumerable: true, get: function () { return chain_1.AUDIT_FLOOR_SUFFIX; } });
+var redact_1 = require("./redact");
+Object.defineProperty(exports, "fingerprintStatement", { enumerable: true, get: function () { return redact_1.fingerprintStatement; } });
+Object.defineProperty(exports, "previewStatement", { enumerable: true, get: function () { return redact_1.previewStatement; } });
+Object.defineProperty(exports, "redactSqlLiterals", { enumerable: true, get: function () { return redact_1.redactSqlLiterals; } });
+Object.defineProperty(exports, "isUnredactable", { enumerable: true, get: function () { return redact_1.isUnredactable; } });
+Object.defineProperty(exports, "UNREDACTABLE", { enumerable: true, get: function () { return redact_1.UNREDACTABLE; } });
+Object.defineProperty(exports, "PREVIEW_MAX_LENGTH", { enumerable: true, get: function () { return redact_1.PREVIEW_MAX_LENGTH; } });
+var local_writer_1 = require("./local-writer");
+Object.defineProperty(exports, "LocalAuditWriter", { enumerable: true, get: function () { return local_writer_1.LocalAuditWriter; } });
+Object.defineProperty(exports, "verifyAuditLog", { enumerable: true, get: function () { return local_writer_1.verifyAuditLog; } });
+Object.defineProperty(exports, "verifyStream", { enumerable: true, get: function () { return local_writer_1.verifyStream; } });
+Object.defineProperty(exports, "ACTIVE_AUDIT_FILE", { enumerable: true, get: function () { return local_writer_1.ACTIVE_AUDIT_FILE; } });
+var cloud_writer_1 = require("./cloud-writer");
+Object.defineProperty(exports, "CloudAuditWriter", { enumerable: true, get: function () { return cloud_writer_1.CloudAuditWriter; } });
+var sink_1 = require("./sink");
+Object.defineProperty(exports, "AuditSink", { enumerable: true, get: function () { return sink_1.AuditSink; } });
+var context_1 = require("./context");
+Object.defineProperty(exports, "UNRESOLVED_DB_ALIAS", { enumerable: true, get: function () { return context_1.UNRESOLVED_DB_ALIAS; } });
+Object.defineProperty(exports, "UNRESOLVED_DB_IDENTITY", { enumerable: true, get: function () { return context_1.UNRESOLVED_DB_IDENTITY; } });
+Object.defineProperty(exports, "currentResolvedDbIdentity", { enumerable: true, get: function () { return context_1.currentResolvedDbIdentity; } });
+Object.defineProperty(exports, "resolvedIdentityOf", { enumerable: true, get: function () { return context_1.resolvedIdentityOf; } });
+Object.defineProperty(exports, "withResolvedDatabase", { enumerable: true, get: function () { return context_1.withResolvedDatabase; } });
+var files_1 = require("./files");
+Object.defineProperty(exports, "getAuditFilesChronological", { enumerable: true, get: function () { return files_1.getAuditFilesChronological; } });
+Object.defineProperty(exports, "getAuditFilesReverse", { enumerable: true, get: function () { return files_1.getAuditFilesReverse; } });
+Object.defineProperty(exports, "readAuditLogChronological", { enumerable: true, get: function () { return files_1.readAuditLogChronological; } });
+Object.defineProperty(exports, "ensureAuditDir", { enumerable: true, get: function () { return files_1.ensureAuditDir; } });
+Object.defineProperty(exports, "probeAuditDir", { enumerable: true, get: function () { return files_1.probeAuditDir; } });
+Object.defineProperty(exports, "repairAuditDirMode", { enumerable: true, get: function () { return files_1.repairAuditDirMode; } });
+Object.defineProperty(exports, "AUDIT_DIR_MODE", { enumerable: true, get: function () { return files_1.AUDIT_DIR_MODE; } });
+Object.defineProperty(exports, "AUDIT_FILE_MODE", { enumerable: true, get: function () { return files_1.AUDIT_FILE_MODE; } });
+Object.defineProperty(exports, "parseSince", { enumerable: true, get: function () { return files_1.parseSince; } });
+Object.defineProperty(exports, "eventMatchesFilter", { enumerable: true, get: function () { return files_1.eventMatchesFilter; } });
+Object.defineProperty(exports, "readAuditEvents", { enumerable: true, get: function () { return files_1.readAuditEvents; } });
+//# sourceMappingURL=index.js.map

package/dist/cjs/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":";;;;AAeA,iCAuCiB;AAtCf,oGAAA,WAAW,OAAA;AACX,mGAAA,UAAU,OAAA;AACV,wGAAA,eAAe,OAAA;AACf,2GAAA,kBAAkB,OAAA;AAClB,iGAAA,QAAQ,OAAA;AACR,qGAAA,YAAY,OAAA;AACZ,wGAAA,eAAe,OAAA;AACf,0GAAA,iBAAiB,OAAA;AACjB,sGAAA,aAAa,OAAA;AACb,iGAAA,QAAQ,OAAA;AACR,sGAAA,aAAa,OAAA;AACb,sGAAA,aAAa,OAAA;AACb,kGAAA,SAAS,OAAA;AACT,uGAAA,cAAc,OAAA;AACd,qGAAA,YAAY,OAAA;AACZ,oGAAA,WAAW,OAAA;AACX,iGAAA,QAAQ,OAAA;AACR,oGAAA,WAAW,OAAA;AACX,+GAAA,sBAAsB,OAAA;AACtB,wGAAA,eAAe,OAAA;AACf,sGAAA,aAAa,OAAA;AACb,sGAAA,aAAa,OAAA;AACb,qGAAA,YAAY,OAAA;AACZ,wGAAA,eAAe,OAAA;AACf,sGAAA,aAAa,OAAA;AACb,2GAAA,kBAAkB,OAAA;AAClB,4GAAA,mBAAmB,OAAA;AACnB,2GAAA,kBAAkB,OAAA;AAapB,mCAOkB;AANhB,8GAAA,oBAAoB,OAAA;AACpB,0GAAA,gBAAgB,OAAA;AAChB,2GAAA,iBAAiB,OAAA;AACjB,wGAAA,cAAc,OAAA;AACd,sGAAA,YAAY,OAAA;AACZ,4GAAA,kBAAkB,OAAA;AAGpB,+CAUwB;AATtB,gHAAA,gBAAgB,OAAA;AAChB,8GAAA,cAAc,OAAA;AACd,4GAAA,YAAY,OAAA;AACZ,iHAAA,iBAAiB,OAAA;AAQnB,+CAAkG;AAAzF,gHAAA,gBAAgB,OAAA;AAEzB,+BAA6E;AAApE,iGAAA,SAAS,OAAA;AAElB,qCAOmB;AANjB,8GAAA,mBAAmB,OAAA;AACnB,iHAAA,sBAAsB,OAAA;AACtB,oHAAA,yBAAyB,OAAA;AACzB,6GAAA,kBAAkB,OAAA;AAClB,+GAAA,oBAAoB,OAAA;AAItB,iCAeiB;AAdf,mHAAA,0BAA0B,OAAA;AAC1B,6GAAA,oBAAoB,OAAA;AACpB,kHAAA,yBAAyB,OAAA;AACzB,uGAAA,cAAc,OAAA;AACd,sGAAA,aAAa,OAAA;AACb,2GAAA,kBAAkB,OAAA;AAClB,uGAAA,cAAc,OAAA;AACd,wGAAA,eAAe,OAAA;AACf,mGAAA,UAAU,OAAA;AACV,2GAAA,kBAAkB,OAAA;AAClB,wGAAA,eAAe,OAAA"}