@taxdao/fintax-mcp 0.2.0

package/README.md

@@ -0,0 +1,220 @@
+# FinTax MCP
+
+FinTax MCP is a local Model Context Protocol server for FinTax accounting and finance workflows. It uses the official TypeScript MCP SDK and exposes a stdio transport: the MCP host starts the process, sends JSON-RPC on stdin, and reads JSON-RPC from stdout.
+
+## Install for an MCP client
+
+FinTax MCP is installed as a local stdio process. The published npm package is
+the standard installation method; the MCP client starts its `fintax-mcp`
+command through `npx`.
+
+### npm or npx package
+
+Run the published package without cloning the source repository:
+
+```bash
+npx --yes --package @taxdao/fintax-mcp@0.2.0 fintax-mcp
+```
+
+Use `@taxdao/fintax-mcp` without a version when the client should follow the
+latest published release. For a private registry, configure npm authentication
+and the registry in the client environment before starting the command.
+
+### Prebuilt TGZ package
+
+For a fixed local archive, place the `.tgz` file on the client machine and
+pass its absolute path to `npx`. The package does not need to be unpacked or
+compiled:
+
+```bash
+npx --yes --package /path/to/fintax-mcp-0.2.0.tgz fintax-mcp
+```
+
+Inject the gateway URL and dedicated MCP credentials through the client's
+protected environment configuration. The project does not load `.env` files
+automatically:
+
+```text
+FINTAX_API_URL=https://your-fintax-gateway.example
+FINTAX_USERNAME=your-mcp-service-account
+FINTAX_PASSWORD=your-secret
+```
+
+For Codex, add this to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.fintax]
+command = "npx"
+args = ["--yes", "--package", "@taxdao/fintax-mcp@0.2.0", "fintax-mcp"]
+env_vars = ["FINTAX_API_URL", "FINTAX_USERNAME", "FINTAX_PASSWORD", "FINTAX_TOOL_PACKS"]
+startup_timeout_sec = 10
+tool_timeout_sec = 60
+default_tools_approval_mode = "writes"
+```
+
+For MCP clients that use the JSON `mcpServers` format, the environment can be
+declared directly in the client configuration:
+
+```json
+{
+  "mcpServers": {
+    "fintax": {
+      "command": "npx",
+      "args": ["--yes", "--package", "@taxdao/fintax-mcp@0.2.0", "fintax-mcp"],
+      "env": {
+        "FINTAX_API_URL": "https://your-fintax-gateway.example",
+        "FINTAX_USERNAME": "your-mcp-service-account",
+        "FINTAX_PASSWORD": "your-secret",
+        "FINTAX_TOOL_PACKS": "core-read,fnd-import,core-edit,workflow,period-end,asset-ops,automation,configuration"
+      }
+    }
+  }
+}
+```
+
+To use a TGZ in either configuration, replace the package specifier with the
+absolute archive path, for example
+`/path/to/fintax-mcp-0.2.0.tgz`. Keep configuration files containing
+credentials protected by the host account.
+
+Any MCP client that launches stdio commands can use the same `npx` command.
+Restart the client, then verify the server with `codex mcp list` or the
+client's MCP tools view. The default directory exposes 77 Tools; login is
+deferred until the first protected business call.
+
+## Features
+
+- Read-only queries and exports for accounting, transactions, journals, documents, assets, balances, reports, master data, and profit and loss.
+- FND account-transaction import with template, validation, confirmation, and job-status steps. The initial import type is `fund.account`.
+- Draft writes for transactions, fund accounts, master data, journals, business documents, and assets.
+- Explicit prepare/preview and execute pairs for state-changing workflows.
+- Structured success results with `trace_id`, `warnings`, and `source_refs`.
+- Normalized public errors without credentials, stack traces, or raw upstream error text.
+- Static Tool registration at startup. `tools/list` does not require login; authentication starts only for a protected business call.
+
+## Architecture
+
+```text
+MCP host
+  | JSON-RPC over stdin/stdout
+  v
+MCP SDK registration
+  v
+ToolDefinition and public Schema
+  v
+FinTaxToolHandler
+  | validation, auth, organization scope, files, plans,
+  | idempotency, output validation, errors, and audit
+  v
+Capability registry and operation adapter
+  v
+Base/Suite HTTP client
+```
+
+## Tool directory
+
+The default startup directory contains 77 Tools across eight fixed packs:
+
+| Pack            | Count | Scope                                                                  |
+| --------------- | ----: | ---------------------------------------------------------------------- |
+| `core-read`     |    24 | Queries, exports, reference data, and `get_job_status`                 |
+| `fnd-import`    |     3 | Account-import template, validation, and execution                     |
+| `core-edit`     |     9 | Transaction, account, master-data, journal, document, and asset drafts |
+| `workflow`      |     8 | Submission, posting, offset candidates, preview, and execution         |
+| `period-end`    |     9 | Period status, revaluation, close, reconciliation, and reverse close   |
+| `asset-ops`     |     7 | Depreciation, cost adjustment, impairment, and retirement              |
+| `automation`    |     5 | Accounting events and accounting-flow execution                        |
+| `configuration` |    12 | Mapping, rules, allocations, P&L, and generator configuration          |
+
+Enabled Tools are listed by `tools/list`. The following operations are not exposed: generic `call_api`, dynamic OpenAPI Tools, database access, arbitrary code execution, unsupported import types, hard delete, reversal, unplanned depreciation, `collectAndPost`, and `sync_fund_account`.
+
+## Requirements
+
+- Node.js 24 LTS (`>=24 <27`)
+- npm and npx supplied with Node.js
+- pnpm 11 or newer for source builds and tests
+- A FinTax gateway that routes authentication, system, and business APIs
+- A FinTax MCP service account with the required capabilities
+
+## Configuration
+
+Copy `.env.example` as a variable reference only. The service does not read it
+by itself. MCP hosts can pass variables directly through their configuration:
+use `env` in JSON-based clients and `env_vars` in Codex to forward values from
+the host environment.
+
+| Variable                     | Default                     | Purpose                                                         |
+| ---------------------------- | --------------------------- | --------------------------------------------------------------- |
+| `FINTAX_API_URL`             | required                    | Unified FinTax gateway URL                                      |
+| `FINTAX_USERNAME`            | required for business calls | Dedicated MCP account                                           |
+| `FINTAX_PASSWORD`            | required for business calls | MCP account secret                                              |
+| `FINTAX_DEFAULT_ORG_ID`      | empty                       | Reserved; never replaces explicit write context                 |
+| `FINTAX_TOOL_PACKS`          | all eight packs             | Comma-separated fixed startup directory                         |
+| `FINTAX_ALLOWED_IMPORT_DIRS` | empty                       | Absolute directories allowed for `local_path` imports           |
+| `FINTAX_ARTIFACT_DIR`        | `./var/artifacts`           | Temporary templates and export artifacts                        |
+| `FINTAX_AUDIT_DIR`           | `./var/audit`               | Structured JSONL audit records                                  |
+| `FINTAX_LOG_LEVEL`           | `info`                      | `fatal`, `error`, `warn`, `info`, `debug`, `trace`, or `silent` |
+| `FINTAX_REQUEST_TIMEOUT_MS`  | `10000`                     | Per-request upstream timeout                                    |
+| `FINTAX_SHUTDOWN_TIMEOUT_MS` | `5000`                      | Bounded shutdown timeout                                        |
+| `FINTAX_MAX_FILE_BYTES`      | `26214400`                  | Maximum import file size                                        |
+
+`FINTAX_TOOL_PACKS` is parsed once at startup. Unknown packs, an empty list, or unmet dependencies make startup fail. Tool discovery remains stable for the process lifetime. Missing API credentials do not prevent `initialize` or `tools/list`; a protected call returns structured `AUTH_REQUIRED`.
+
+`FINTAX_ARTIFACT_DIR` and `FINTAX_AUDIT_DIR` use paths relative to the MCP
+process working directory unless absolute paths are configured. Set absolute
+paths when artifacts or audit records must remain in stable locations. A
+`cwd` setting is not required for `.tgz` installation.
+
+Declare MCP roots when sending a local import path; without roots, arbitrary
+`local_path` inputs are rejected.
+
+## Safe call patterns
+
+1. Call `query_accounting_context` first when a Tool needs an organization or ledger. Use only IDs returned by that Tool.
+2. Every multi-organization write must include `context.org_id`. Every draft write requires a caller-generated UUID `idempotency_key`.
+3. Read the current object and `version` before an update.
+4. For prepare/preview and execute pairs, show the impact summary and obtain explicit confirmation before execution.
+5. Never retry POST, import confirmation, posting, close, or other state-changing calls automatically. On timeout, follow the read-only recovery Tool.
+6. Amounts are decimal strings. Do not send JSON floating-point values for financial amounts.
+
+## Import flow
+
+The initial import flow supports only `import_type=fund.account`:
+
+```text
+get_import_template
+        |
+prepare_import  -> validation, operation plan, confirmation token
+        |
+explicit user confirmation
+        |
+execute_import  -> job_id
+        |
+get_job_status  -> progress and terminal result
+```
+
+`prepare_import` creates an upstream validation batch but does not import business data. A confirmation token is short-lived and single-use. If execution times out, query the job reference and do not retry with a new idempotency key.
+
+## Runtime behavior
+
+- stdout contains only MCP JSON-RPC; logs go to stderr and audit records go to the configured audit directory.
+- Local files must pass realpath, server allowlist, regular-file, type, size, and MCP-root checks.
+- POST operations are not automatically retried; read-only GET retries are bounded.
+- Confirmation tokens and operation plans are opaque, short-lived, single-use handles and are excluded from logs, audit, errors, and execution results.
+- Public errors never include passwords, cookies, access tokens, stack traces, raw upstream responses, or complete financial line items.
+
+## Diagnostics
+
+```bash
+pnpm build
+pnpm dlx @modelcontextprotocol/inspector@2.2.0 \
+  --cli node dist/index.js \
+  --method tools/list \
+  --format json
+```
+
+```bash
+FINTAX_RUN_INTEGRATION=1 pnpm test:integration
+```
+
+The integration suite discovers organization and ledger IDs through `query_accounting_context`, runs read-only checks and exports, and does not execute imports.

package/dist/app/create-server.d.ts

@@ -0,0 +1,18 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Logger } from 'pino';
+import type { AuditSink } from '../audit/audit-sink.js';
+import type { CapabilityDefinition } from '../capabilities/capability.js';
+import type { RuntimeConfig } from '../config/schema.js';
+export interface Application {
+    readonly server: McpServer;
+    close(): Promise<void>;
+}
+export interface ApplicationOptions {
+    readonly config?: RuntimeConfig;
+    readonly fetch?: typeof fetch;
+    readonly auditSink?: AuditSink;
+    readonly logger?: Logger;
+    readonly capabilities?: readonly CapabilityDefinition[];
+}
+export declare function createApplication(options?: ApplicationOptions): Application;
+export declare function createServer(options?: ApplicationOptions): McpServer;

package/dist/app/create-server.js

@@ -0,0 +1,80 @@
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { FileAuditSink } from '../audit/file-audit-sink.js';
+import { CapabilityExecutor } from '../capabilities/executor.js';
+import { createCapabilities } from '../capabilities/create-capabilities.js';
+import { CapabilityRegistry } from '../capabilities/registry.js';
+import { loadConfig } from '../config/load-config.js';
+import { LockManager } from '../concurrency/lock-manager.js';
+import { ArtifactStore } from '../files/artifact-store.js';
+import { InputFilePolicy } from '../files/input-policy.js';
+import { McpRootsProvider } from '../files/roots-provider.js';
+import { createLogger } from '../logging/logger.js';
+import { OperationPlanManager } from '../policies/operation-plan.js';
+import { IdempotencyManager } from '../policies/idempotency.js';
+import { createTools } from '../tools/create-tools.js';
+import { FinTaxToolHandler } from '../tools/tool-handler.js';
+import { DrainingTransport } from '../transport/draining-transport.js';
+import { SERVER_NAME, SERVER_VERSION } from '../version.js';
+import { registerTools } from './register-tools.js';
+class ApplicationMcpServer extends McpServer {
+    #transport;
+    async connect(transport) {
+        const drainingTransport = new DrainingTransport(transport);
+        this.#transport = drainingTransport;
+        try {
+            await super.connect(drainingTransport);
+        }
+        catch (error) {
+            this.#transport = undefined;
+            throw error;
+        }
+    }
+    drainTransport() {
+        return this.#transport?.drain() ?? Promise.resolve();
+    }
+}
+export function createApplication(options = {}) {
+    const config = options.config ?? loadConfig();
+    const server = new ApplicationMcpServer({
+        name: SERVER_NAME,
+        version: SERVER_VERSION,
+    });
+    const locks = new LockManager();
+    const artifacts = new ArtifactStore(config.FINTAX_ARTIFACT_DIR);
+    const capabilities = new CapabilityExecutor({
+        config,
+        registry: new CapabilityRegistry(options.capabilities ?? createCapabilities()),
+        locks,
+        ...(options.fetch === undefined ? {} : { fetch: options.fetch }),
+    });
+    const handler = new FinTaxToolHandler({
+        capabilities,
+        files: new InputFilePolicy({
+            allowedDirectories: config.FINTAX_ALLOWED_IMPORT_DIRS,
+            maxBytes: config.FINTAX_MAX_FILE_BYTES,
+            roots: new McpRootsProvider(server),
+            artifacts,
+        }),
+        artifacts,
+        plans: new OperationPlanManager(locks),
+        idempotency: new IdempotencyManager(locks),
+        locks,
+        audit: options.auditSink ?? new FileAuditSink(config.FINTAX_AUDIT_DIR),
+        logger: options.logger ?? createLogger(config),
+    });
+    registerTools(server, createTools(config.FINTAX_TOOL_PACKS), handler);
+    return {
+        server,
+        async close() {
+            handler.stopAccepting();
+            await handler.drain();
+            await server.drainTransport();
+            await server.close();
+            await handler.close();
+        },
+    };
+}
+export function createServer(options = {}) {
+    return createApplication(options).server;
+}
+//# sourceMappingURL=create-server.js.map

package/dist/app/create-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-server.js","sourceRoot":"","sources":["../../src/app/create-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAIpE,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAE5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,oBAAqB,SAAQ,SAAS;IAC1C,UAAU,CAAgC;IAEjC,KAAK,CAAC,OAAO,CAAC,SAAoB;QACzC,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,cAAc;QACZ,OAAO,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACvD,CAAC;CACF;AAeD,MAAM,UAAU,iBAAiB,CAC/B,UAA8B,EAAE;IAEhC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC;QACtC,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,cAAc;KACxB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,kBAAkB,CAAC;QAC1C,MAAM;QACN,QAAQ,EAAE,IAAI,kBAAkB,CAC9B,OAAO,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAC7C;QACD,KAAK;QACL,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,IAAI,iBAAiB,CAAC;QACpC,YAAY;QACZ,KAAK,EAAE,IAAI,eAAe,CAAC;YACzB,kBAAkB,EAAE,MAAM,CAAC,0BAA0B;YACrD,QAAQ,EAAE,MAAM,CAAC,qBAAqB;YACtC,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC;YACnC,SAAS;SACV,CAAC;QACF,SAAS;QACT,KAAK,EAAE,IAAI,oBAAoB,CAAC,KAAK,CAAC;QACtC,WAAW,EAAE,IAAI,kBAAkB,CAAC,KAAK,CAAC;QAC1C,KAAK;QACL,KAAK,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACtE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;KAC/C,CAAC,CAAC;IAEH,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,CAAC;IACtE,OAAO;QACL,MAAM;QACN,KAAK,CAAC,KAAK;YACT,OAAO,CAAC,aAAa,EAAE,CAAC;YACxB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAC9B,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAA8B,EAAE;IAC3D,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC"}

package/dist/app/register-tools.d.ts

@@ -0,0 +1,4 @@
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { ToolDefinition } from '../tools/tool-definition.js';
+import type { FinTaxToolHandler } from '../tools/tool-handler.js';
+export declare function registerTools(server: McpServer, definitions: readonly ToolDefinition[], handler: FinTaxToolHandler): void;

package/dist/app/register-tools.js

@@ -0,0 +1,18 @@
+import { createSdkInputSchema } from '../schemas/public-input.js';
+export function registerTools(server, definitions, handler) {
+    const names = new Set();
+    for (const definition of definitions) {
+        if (names.has(definition.name)) {
+            throw new Error(`Duplicate MCP tool name: ${definition.name}`);
+        }
+        names.add(definition.name);
+        server.registerTool(definition.name, {
+            title: definition.title,
+            description: `${definition.description} Risk level: ${definition.risk}. Deployment pack: ${definition.exposurePack}.`,
+            inputSchema: createSdkInputSchema(definition.inputSchema, definition.publicInputSchema),
+            outputSchema: definition.outputSchema,
+            annotations: definition.annotations,
+        }, (params) => handler.invoke(definition, params));
+    }
+}
+//# sourceMappingURL=register-tools.js.map

package/dist/app/register-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-tools.js","sourceRoot":"","sources":["../../src/app/register-tools.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAIlE,MAAM,UAAU,aAAa,CAC3B,MAAiB,EACjB,WAAsC,EACtC,OAA0B;IAE1B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhC,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAE3B,MAAM,CAAC,YAAY,CACjB,UAAU,CAAC,IAAI,EACf;YACE,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,WAAW,EAAE,GAAG,UAAU,CAAC,WAAW,gBAAgB,UAAU,CAAC,IAAI,sBAAsB,UAAU,CAAC,YAAY,GAAG;YACrH,WAAW,EAAE,oBAAoB,CAC/B,UAAU,CAAC,WAAW,EACtB,UAAU,CAAC,iBAAiB,CAC7B;YACD,YAAY,EAAE,UAAU,CAAC,YAAY;YACrC,WAAW,EAAE,UAAU,CAAC,WAAW;SACpC,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/audit/audit-context.d.ts

@@ -0,0 +1,38 @@
+import type { AuthIdentity } from '../auth/auth-session.js';
+import type { HttpMethod, ServiceName } from '../capabilities/capability.js';
+export interface AuditSummary {
+    readonly digest: string;
+    readonly fields: readonly string[];
+}
+export interface AuditActor {
+    readonly userId?: string;
+    readonly tenantId?: string;
+    readonly orgId?: string;
+}
+export interface UpstreamAuditCall {
+    readonly service: ServiceName;
+    readonly operation: string;
+    readonly method: HttpMethod;
+    readonly outcome: 'succeeded' | 'failed';
+    readonly statusCodes: readonly number[];
+}
+export interface AuditSnapshot {
+    readonly actor?: AuditActor;
+    readonly targetObjectIds?: Readonly<Record<string, readonly string[]>>;
+    readonly filterSummary?: AuditSummary;
+    readonly fileChecksums?: readonly string[];
+    readonly operationPlanSummary?: string;
+    readonly idempotencyKeySummary?: string;
+    readonly idempotencyOutcome?: 'started' | 'replayed' | 'failed';
+    readonly upstreamCalls?: readonly UpstreamAuditCall[];
+}
+export declare class AuditContext {
+    #private;
+    captureInput(input: unknown): void;
+    captureIdentity(identity: AuthIdentity): void;
+    captureTargetObjectId(field: string, value: string): void;
+    captureFileChecksum(checksum: string): void;
+    captureIdempotencyOutcome(outcome: NonNullable<AuditSnapshot['idempotencyOutcome']>): void;
+    recordUpstreamCall(call: UpstreamAuditCall): void;
+    snapshot(): AuditSnapshot;
+}

package/dist/audit/audit-context.js

@@ -0,0 +1,167 @@
+import { hashOperationValue } from '../policies/operation-plan.js';
+const SECRET_FIELDS = new Set([
+    'confirmation_token',
+    'idempotency_key',
+    'operation_plan_id',
+]);
+const REFERENCE_FIELDS = new Set(['file_ref']);
+const OMITTED_FIELDS = new Set(['file_content', 'lines', 'raw_file']);
+const NON_TARGET_IDS = new Set(['org_id', 'tenant_id', 'user_id']);
+function digest(namespace, value) {
+    return hashOperationValue({ namespace, value });
+}
+function isTargetIdField(key) {
+    return (!NON_TARGET_IDS.has(key) &&
+        (key === 'id' || key.endsWith('_id') || key.endsWith('_ids')));
+}
+function summarizeInput(input) {
+    const fields = new Set();
+    const targetObjectIds = new Map();
+    const visit = (value, path) => {
+        if (Array.isArray(value)) {
+            return value.map((entry, index) => visit(entry, [...path, String(index)]));
+        }
+        if (value === null || typeof value !== 'object') {
+            if (path.length > 0)
+                fields.add(path.join('.'));
+            return value;
+        }
+        return Object.fromEntries(Object.entries(value).map(([key, entry]) => {
+            const nextPath = [...path, key];
+            if (SECRET_FIELDS.has(key)) {
+                fields.add(nextPath.join('.'));
+                return [key, '[REDACTED]'];
+            }
+            if (REFERENCE_FIELDS.has(key)) {
+                fields.add(nextPath.join('.'));
+                const kind = entry !== null &&
+                    typeof entry === 'object' &&
+                    'kind' in entry &&
+                    typeof entry.kind === 'string'
+                    ? entry.kind
+                    : 'unknown';
+                return [key, { kind, value: '[REFERENCE]' }];
+            }
+            if (OMITTED_FIELDS.has(key)) {
+                fields.add(nextPath.join('.'));
+                return [key, '[OMITTED]'];
+            }
+            if (isTargetIdField(key)) {
+                const values = Array.isArray(entry) ? entry : [entry];
+                const ids = targetObjectIds.get(key) ?? new Set();
+                for (const candidate of values) {
+                    if (typeof candidate === 'string')
+                        ids.add(candidate);
+                }
+                if (ids.size > 0)
+                    targetObjectIds.set(key, ids);
+            }
+            return [key, visit(entry, nextPath)];
+        }));
+    };
+    const summarized = visit(input, []);
+    return {
+        value: summarized,
+        fields: [...fields].sort(),
+        targetObjectIds: new Map([...targetObjectIds].map(([key, values]) => [key, [...values].sort()])),
+    };
+}
+export class AuditContext {
+    #actor;
+    #filterSummary;
+    #operationPlanSummary;
+    #idempotencyKeySummary;
+    #idempotencyOutcome;
+    #targetObjectIds = new Map();
+    #fileChecksums = new Set();
+    #upstreamCalls = [];
+    captureInput(input) {
+        const summarized = summarizeInput(input);
+        this.#filterSummary = {
+            digest: digest('tool-input', summarized.value),
+            fields: summarized.fields,
+        };
+        for (const [field, values] of summarized.targetObjectIds) {
+            for (const value of values)
+                this.captureTargetObjectId(field, value);
+        }
+        if (input === null || typeof input !== 'object')
+            return;
+        if ('operation_plan_id' in input &&
+            typeof input.operation_plan_id === 'string') {
+            this.#operationPlanSummary = digest('operation-plan', input.operation_plan_id);
+        }
+        if ('idempotency_key' in input &&
+            typeof input.idempotency_key === 'string') {
+            this.#idempotencyKeySummary = digest('idempotency-key', input.idempotency_key);
+        }
+        if ('context' in input &&
+            input.context !== null &&
+            typeof input.context === 'object' &&
+            'org_id' in input.context &&
+            typeof input.context.org_id === 'string') {
+            this.#actor = {
+                ...(this.#actor?.userId === undefined
+                    ? {}
+                    : { userId: this.#actor.userId }),
+                ...(this.#actor?.tenantId === undefined
+                    ? {}
+                    : { tenantId: this.#actor.tenantId }),
+                orgId: digest('actor-org', input.context.org_id),
+            };
+        }
+    }
+    captureIdentity(identity) {
+        this.#actor = {
+            userId: digest('actor-user', identity.userId),
+            tenantId: digest('actor-tenant', identity.tenantId),
+            ...(identity.orgId === undefined
+                ? this.#actor?.orgId === undefined
+                    ? {}
+                    : { orgId: this.#actor.orgId }
+                : { orgId: digest('actor-org', identity.orgId) }),
+        };
+    }
+    captureTargetObjectId(field, value) {
+        const values = this.#targetObjectIds.get(field) ?? new Set();
+        values.add(value);
+        this.#targetObjectIds.set(field, values);
+    }
+    captureFileChecksum(checksum) {
+        this.#fileChecksums.add(checksum);
+    }
+    captureIdempotencyOutcome(outcome) {
+        this.#idempotencyOutcome = outcome;
+    }
+    recordUpstreamCall(call) {
+        this.#upstreamCalls.push(call);
+    }
+    snapshot() {
+        const targetObjectIds = Object.fromEntries([...this.#targetObjectIds]
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([field, values]) => [field, [...values].sort()]));
+        return {
+            ...(this.#actor === undefined ? {} : { actor: this.#actor }),
+            ...(Object.keys(targetObjectIds).length === 0 ? {} : { targetObjectIds }),
+            ...(this.#filterSummary === undefined
+                ? {}
+                : { filterSummary: this.#filterSummary }),
+            ...(this.#fileChecksums.size === 0
+                ? {}
+                : { fileChecksums: [...this.#fileChecksums].sort() }),
+            ...(this.#operationPlanSummary === undefined
+                ? {}
+                : { operationPlanSummary: this.#operationPlanSummary }),
+            ...(this.#idempotencyKeySummary === undefined
+                ? {}
+                : { idempotencyKeySummary: this.#idempotencyKeySummary }),
+            ...(this.#idempotencyOutcome === undefined
+                ? {}
+                : { idempotencyOutcome: this.#idempotencyOutcome }),
+            ...(this.#upstreamCalls.length === 0
+                ? {}
+                : { upstreamCalls: [...this.#upstreamCalls] }),
+        };
+    }
+}
+//# sourceMappingURL=audit-context.js.map

package/dist/audit/audit-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-context.js","sourceRoot":"","sources":["../../src/audit/audit-context.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAgCnE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,oBAAoB;IACpB,iBAAiB;IACjB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;AAC/C,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACtE,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnE,SAAS,MAAM,CAAC,SAAiB,EAAE,KAAc;IAC/C,OAAO,kBAAkB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,CACL,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC;QACxB,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAC9D,CAAC;AACJ,CAAC;AAQD,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IAEvD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,IAAuB,EAAW,EAAE;QACjE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAChC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;YACpE,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC7B,CAAC;YACD,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,MAAM,IAAI,GACR,KAAK,KAAK,IAAI;oBACd,OAAO,KAAK,KAAK,QAAQ;oBACzB,MAAM,IAAI,KAAK;oBACf,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,CAAC,KAAK,CAAC,IAAI;oBACZ,CAAC,CAAC,SAAS,CAAC;gBAChB,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/C,CAAC;YACD,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC/B,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;gBAC1D,KAAK,MAAM,SAAS,IAAI,MAAM,EAAE,CAAC;oBAC/B,IAAI,OAAO,SAAS,KAAK,QAAQ;wBAAE,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACxD,CAAC;gBACD,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;oBAAE,eAAe,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACpC,OAAO;QACL,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE;QAC1B,eAAe,EAAE,IAAI,GAAG,CACtB,CAAC,GAAG,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CACvE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,YAAY;IACvB,MAAM,CAAyB;IAC/B,cAAc,CAA2B;IACzC,qBAAqB,CAAqB;IAC1C,sBAAsB,CAAqB;IAC3C,mBAAmB,CAAsC;IAChD,gBAAgB,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,cAAc,GAAwB,EAAE,CAAC;IAElD,YAAY,CAAC,KAAc;QACzB,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,cAAc,GAAG;YACpB,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC;YAC9C,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;YACzD,KAAK,MAAM,KAAK,IAAI,MAAM;gBAAE,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QACxD,IACE,mBAAmB,IAAI,KAAK;YAC5B,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,EAC3C,CAAC;YACD,IAAI,CAAC,qBAAqB,GAAG,MAAM,CACjC,gBAAgB,EAChB,KAAK,CAAC,iBAAiB,CACxB,CAAC;QACJ,CAAC;QACD,IACE,iBAAiB,IAAI,KAAK;YAC1B,OAAO,KAAK,CAAC,eAAe,KAAK,QAAQ,EACzC,CAAC;YACD,IAAI,CAAC,sBAAsB,GAAG,MAAM,CAClC,iBAAiB,EACjB,KAAK,CAAC,eAAe,CACtB,CAAC;QACJ,CAAC;QACD,IACE,SAAS,IAAI,KAAK;YAClB,KAAK,CAAC,OAAO,KAAK,IAAI;YACtB,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,QAAQ,IAAI,KAAK,CAAC,OAAO;YACzB,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EACxC,CAAC;YACD,IAAI,CAAC,MAAM,GAAG;gBACZ,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,KAAK,SAAS;oBACrC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACvC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;aACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,eAAe,CAAC,QAAsB;QACpC,IAAI,CAAC,MAAM,GAAG;YACZ,MAAM,EAAE,MAAM,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC;YAC7C,QAAQ,EAAE,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC;YACnD,GAAG,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAC9B,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE;gBAChC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;SACpD,CAAC;IACJ,CAAC;IAED,qBAAqB,CAAC,KAAa,EAAE,KAAa;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClB,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,mBAAmB,CAAC,QAAgB;QAClC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,yBAAyB,CACvB,OAAyD;QAEzD,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,kBAAkB,CAAC,IAAuB;QACxC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,QAAQ;QACN,MAAM,eAAe,GAAG,MAAM,CAAC,WAAW,CACxC,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC;aACvB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CACzD,CAAC;QACF,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC5D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;gBACnC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC;gBAChC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC,qBAAqB,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,oBAAoB,EAAE,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,sBAAsB,KAAK,SAAS;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,mBAAmB,KAAK,SAAS;gBACxC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACrD,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;gBAClC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;SACjD,CAAC;IACJ,CAAC;CACF"}

package/dist/audit/audit-sink.d.ts

@@ -0,0 +1,20 @@
+import type { RiskLevel } from '../tools/tool-definition.js';
+import type { AuditSnapshot } from './audit-context.js';
+export interface AuditRecord extends AuditSnapshot {
+    readonly traceId: string;
+    readonly tool: string;
+    readonly version: string;
+    readonly risk: RiskLevel;
+    readonly capabilityIds: readonly string[];
+    readonly startedAt: string;
+    readonly finishedAt: string;
+    readonly durationMs: number;
+    readonly status: 'succeeded' | 'failed';
+    readonly errorCode?: string;
+}
+export interface AuditSink {
+    write(record: AuditRecord): Promise<void>;
+}
+export declare class NullAuditSink implements AuditSink {
+    write(): Promise<void>;
+}

package/dist/audit/audit-sink.js

@@ -0,0 +1,6 @@
+export class NullAuditSink {
+    write() {
+        return Promise.resolve();
+    }
+}
+//# sourceMappingURL=audit-sink.js.map

package/dist/audit/audit-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-sink.js","sourceRoot":"","sources":["../../src/audit/audit-sink.ts"],"names":[],"mappings":"AAoBA,MAAM,OAAO,aAAa;IACxB,KAAK;QACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/audit/file-audit-sink.d.ts

@@ -0,0 +1,6 @@
+import type { AuditRecord, AuditSink } from './audit-sink.js';
+export declare class FileAuditSink implements AuditSink {
+    #private;
+    constructor(directory: string);
+    write(record: AuditRecord): Promise<void>;
+}

package/dist/audit/file-audit-sink.js

@@ -0,0 +1,18 @@
+import { appendFile, mkdir } from 'node:fs/promises';
+import path from 'node:path';
+export class FileAuditSink {
+    #directory;
+    constructor(directory) {
+        this.#directory = path.resolve(directory);
+    }
+    async write(record) {
+        await mkdir(this.#directory, { recursive: true, mode: 0o700 });
+        const date = record.startedAt.slice(0, 10);
+        const file = path.join(this.#directory, `${date}.jsonl`);
+        await appendFile(file, `${JSON.stringify(record)}\n`, {
+            encoding: 'utf8',
+            mode: 0o600,
+        });
+    }
+}
+//# sourceMappingURL=file-audit-sink.js.map

package/dist/audit/file-audit-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-audit-sink.js","sourceRoot":"","sources":["../../src/audit/file-audit-sink.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,MAAM,OAAO,aAAa;IACf,UAAU,CAAS;IAE5B,YAAY,SAAiB;QAC3B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC7B,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;QACzD,MAAM,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACpD,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC;CACF"}