@terminai/core 0.21.0

package/dist/src/agents/utils.test.js

@@ -0,0 +1,88 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect } from 'vitest';
+import { templateString } from './utils.js';
+describe('templateString', () => {
+    it('should replace a single placeholder with a string value', () => {
+        const template = 'Hello, ${name}!';
+        const inputs = { name: 'World' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('Hello, World!');
+    });
+    it('should replace multiple unique placeholders', () => {
+        const template = 'User: ${user}, Role: ${role}';
+        const inputs = { user: 'Alex', role: 'Admin' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('User: Alex, Role: Admin');
+    });
+    it('should replace multiple instances of the same placeholder', () => {
+        const template = '${greeting}, ${user}. Welcome, ${user}!';
+        const inputs = { greeting: 'Hi', user: 'Sam' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('Hi, Sam. Welcome, Sam!');
+    });
+    it('should handle various data types for input values', () => {
+        const template = 'Name: ${name}, Age: ${age}, Active: ${isActive}, Plan: ${plan}, Score: ${score}';
+        const inputs = {
+            name: 'Jo',
+            age: 30,
+            isActive: true,
+            plan: null,
+            score: undefined,
+        };
+        const result = templateString(template, inputs);
+        // All values are converted to their string representations
+        expect(result).toBe('Name: Jo, Age: 30, Active: true, Plan: null, Score: undefined');
+    });
+    it('should return the original string if no placeholders are present', () => {
+        const template = 'This is a plain string with no placeholders.';
+        const inputs = { key: 'value' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('This is a plain string with no placeholders.');
+    });
+    it('should correctly handle an empty template string', () => {
+        const template = '';
+        const inputs = { key: 'value' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('');
+    });
+    it('should ignore extra keys in the inputs object that are not in the template', () => {
+        const template = 'Hello, ${name}.';
+        const inputs = { name: 'Alice', extra: 'ignored' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('Hello, Alice.');
+    });
+    it('should throw an error if a required key is missing from the inputs', () => {
+        const template = 'The goal is ${goal}.';
+        const inputs = { other_input: 'some value' };
+        expect(() => templateString(template, inputs)).toThrow('Template validation failed: Missing required input parameters: goal. Available inputs: other_input');
+    });
+    it('should throw an error listing all missing keys if multiple are missing', () => {
+        const template = 'Analyze ${file} with ${tool}.';
+        const inputs = { an_available_key: 'foo' };
+        // Using a regex to allow for any order of missing keys in the error message
+        expect(() => templateString(template, inputs)).toThrow(/Missing required input parameters: (file, tool|tool, file)/);
+    });
+    it('should be case-sensitive with placeholder keys', () => {
+        const template = 'Value: ${Key}';
+        const inputs = { key: 'some value' }; // 'key' is lowercase
+        expect(() => templateString(template, inputs)).toThrow('Template validation failed: Missing required input parameters: Key. Available inputs: key');
+    });
+    it('should not replace malformed or incomplete placeholders', () => {
+        const template = 'This is {not_a_placeholder} and this is $$escaped. Test: ${valid}';
+        const inputs = { valid: 'works' };
+        const result = templateString(template, inputs);
+        expect(result).toBe('This is {not_a_placeholder} and this is $$escaped. Test: works');
+    });
+    it('should work correctly with an empty inputs object if the template has no placeholders', () => {
+        const template = 'Static text.';
+        const inputs = {};
+        const result = templateString(template, inputs);
+        expect(result).toBe('Static text.');
+    });
+});
+//# sourceMappingURL=utils.test.js.map

package/dist/src/agents/utils.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.test.js","sourceRoot":"","sources":["../../../src/agents/utils.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAG5C,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACnC,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,QAAQ,GAAG,8BAA8B,CAAC;QAChD,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG,yCAAyC,CAAC;QAC3D,MAAM,MAAM,GAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,QAAQ,GACZ,iFAAiF,CAAC;QACpF,MAAM,MAAM,GAAgB;YAC1B,IAAI,EAAE,IAAI;YACV,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE,IAAI;YACd,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,SAAS;SACjB,CAAC;QACF,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,2DAA2D;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACjB,+DAA+D,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,QAAQ,GAAG,8CAA8C,CAAC;QAChE,MAAM,MAAM,GAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,QAAQ,GAAG,EAAE,CAAC;QACpB,MAAM,MAAM,GAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,QAAQ,GAAG,iBAAiB,CAAC;QACnC,MAAM,MAAM,GAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,QAAQ,GAAG,sBAAsB,CAAC;QACxC,MAAM,MAAM,GAAgB,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAE1D,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CACpD,oGAAoG,CACrG,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QACjD,MAAM,MAAM,GAAgB,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC;QAExD,4EAA4E;QAC5E,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CACpD,4DAA4D,CAC7D,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,eAAe,CAAC;QACjC,MAAM,MAAM,GAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,qBAAqB;QAExE,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CACpD,2FAA2F,CAC5F,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,QAAQ,GACZ,mEAAmE,CAAC;QACtE,MAAM,MAAM,GAAgB,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QAC/C,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACjB,gEAAgE,CACjE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,QAAQ,GAAG,cAAc,CAAC;QAChC,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/audit/export.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { AuditEvent } from './schema.js';
+export type AuditExportFormat = 'jsonl' | 'json';
+export type AuditExportRedaction = 'enterprise' | 'debug';
+export declare function applyExportRedaction(events: AuditEvent[], redaction: AuditExportRedaction): AuditEvent[];

package/dist/src/audit/export.js

@@ -0,0 +1,30 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export function applyExportRedaction(events, redaction) {
+    if (redaction === 'debug') {
+        return events;
+    }
+    // Enterprise export keeps metadata but removes detailed args/results.
+    return events.map((event) => ({
+        ...event,
+        tool: event.tool
+            ? {
+                callId: event.tool.callId,
+                toolName: event.tool.toolName,
+                toolKind: event.tool.toolKind,
+                args: undefined,
+                result: event.tool.result
+                    ? {
+                        ...event.tool.result,
+                        metadata: undefined,
+                    }
+                    : undefined,
+            }
+            : undefined,
+    }));
+}
+//# sourceMappingURL=export.js.map

package/dist/src/audit/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../../../src/audit/export.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,MAAM,UAAU,oBAAoB,CAClC,MAAoB,EACpB,SAA+B;IAE/B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,sEAAsE;IACtE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5B,GAAG,KAAK;QACR,IAAI,EAAE,KAAK,CAAC,IAAI;YACd,CAAC,CAAC;gBACE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;gBACzB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;gBAC7B,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;gBAC7B,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM;oBACvB,CAAC,CAAC;wBACE,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM;wBACpB,QAAQ,EAAE,SAAS;qBACpB;oBACH,CAAC,CAAC,SAAS;aACd;YACH,CAAC,CAAC,SAAS;KACd,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/src/audit/hashChain.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { AuditEvent } from './schema.js';
+export interface HashResult {
+    hash: string;
+    prevHash: string;
+}
+export declare function computeHash(event: AuditEvent, previousHash: string): HashResult;
+export declare function verifyHashChain(events: AuditEvent[]): {
+    ok: boolean;
+    error?: string;
+};

package/dist/src/audit/hashChain.js

@@ -0,0 +1,43 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import crypto from 'node:crypto';
+import { stableStringify } from '../policy/stable-stringify.js';
+function normalizeEventForHash(event) {
+    const { hash: _hash, prevHash: _prevHash, ...rest } = event;
+    return rest;
+}
+export function computeHash(event, previousHash) {
+    const normalized = normalizeEventForHash(event);
+    const serialized = stableStringify(normalized);
+    const hash = crypto
+        .createHash('sha256')
+        .update(previousHash + serialized)
+        .digest('hex');
+    return { hash, prevHash: previousHash };
+}
+export function verifyHashChain(events) {
+    let prevHash = '';
+    for (const [index, event] of events.entries()) {
+        const { hash, prevHash: expectedPrevHash } = event;
+        const { hash: computedHash, prevHash: computedPrev } = computeHash(event, prevHash);
+        if (expectedPrevHash !== computedPrev) {
+            return {
+                ok: false,
+                error: `Hash chain break at index ${index}: expected prevHash=${computedPrev}, found ${expectedPrevHash}`,
+            };
+        }
+        if (hash !== computedHash) {
+            return {
+                ok: false,
+                error: `Hash mismatch at index ${index}`,
+            };
+        }
+        prevHash = hash ?? '';
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=hashChain.js.map

package/dist/src/audit/hashChain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hashChain.js","sourceRoot":"","sources":["../../../src/audit/hashChain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAQhE,SAAS,qBAAqB,CAAC,KAAiB;IAC9C,MAAM,EACJ,IAAI,EAAE,KAAK,EACX,QAAQ,EAAE,SAAS,EACnB,GAAG,IAAI,EACR,GAAG,KAA2C,CAAC;IAChD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAiB,EACjB,YAAoB;IAEpB,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM;SAChB,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,YAAY,GAAG,UAAU,CAAC;SACjC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAoB;IAIlD,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,GAAG,KAAK,CAAC;QACnD,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,WAAW,CAChE,KAAK,EACL,QAAQ,CACT,CAAC;QACF,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;YACtC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,6BAA6B,KAAK,uBAAuB,YAAY,WAAW,gBAAgB,EAAE;aAC1G,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YAC1B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,0BAA0B,KAAK,EAAE;aACzC,CAAC;QACJ,CAAC;QACD,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/audit/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from './schema.js';
+export * from './ledger.js';
+export * from './hashChain.js';
+export * from './redaction.js';
+export * from './export.js';
+export declare function getRecentAuditEvents(ledger: {
+    query: (opts: {
+        limit: number;
+    }) => Promise<unknown[]>;
+}, limit?: number): Promise<unknown[]>;

package/dist/src/audit/index.js

@@ -0,0 +1,15 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export * from './schema.js';
+export * from './ledger.js';
+export * from './hashChain.js';
+export * from './redaction.js';
+export * from './export.js';
+export async function getRecentAuditEvents(ledger, limit = 10) {
+    return ledger.query({ limit });
+}
+//# sourceMappingURL=index.js.map

package/dist/src/audit/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/audit/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkE,EAClE,KAAK,GAAG,EAAE;IAEV,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACjC,CAAC"}

package/dist/src/audit/ledger.d.ts

@@ -0,0 +1,46 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { type RedactionOptions } from './redaction.js';
+import type { AuditEvent } from './schema.js';
+import { type AuditExportRedaction } from './export.js';
+export interface AuditWriteOptions {
+    redactWriteTime: boolean;
+}
+export interface AuditQueryOptions {
+    limit: number;
+    since?: string;
+    toolName?: string;
+    eventTypes?: string[];
+}
+export interface AuditExportOptions {
+    format: 'jsonl' | 'json';
+    redaction: AuditExportRedaction;
+}
+export interface AuditLedger {
+    append(event: AuditEvent): Promise<void>;
+    query(opts: AuditQueryOptions): Promise<AuditEvent[]>;
+    verifyHashChain(): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    export(opts: AuditExportOptions): Promise<string>;
+}
+export declare class FileAuditLedger implements AuditLedger {
+    private readonly filePath;
+    private readonly redactionOptions;
+    private lastHash;
+    private initialized;
+    constructor(filePath: string, redactionOptions: RedactionOptions);
+    private ensureInitialized;
+    append(event: AuditEvent): Promise<void>;
+    query(opts: AuditQueryOptions): Promise<AuditEvent[]>;
+    verifyHashChain(): Promise<{
+        ok: boolean;
+        error?: string;
+    }>;
+    export(opts: AuditExportOptions): Promise<string>;
+}

package/dist/src/audit/ledger.js

@@ -0,0 +1,113 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { computeHash, verifyHashChain } from './hashChain.js';
+import { redactEvent } from './redaction.js';
+import { applyExportRedaction } from './export.js';
+export class FileAuditLedger {
+    filePath;
+    redactionOptions;
+    lastHash = '';
+    initialized = false;
+    constructor(filePath, redactionOptions) {
+        this.filePath = filePath;
+        this.redactionOptions = redactionOptions;
+    }
+    async ensureInitialized() {
+        if (this.initialized)
+            return;
+        await fs.mkdir(path.dirname(this.filePath), { recursive: true });
+        try {
+            const data = await fs.readFile(this.filePath, 'utf-8');
+            const lines = data.split('\n').filter((line) => line.trim().length > 0);
+            if (lines.length > 0) {
+                const lastLine = JSON.parse(lines[lines.length - 1]);
+                this.lastHash = lastLine.hash ?? '';
+            }
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT') {
+                throw error;
+            }
+        }
+        this.initialized = true;
+    }
+    async append(event) {
+        await this.ensureInitialized();
+        const redacted = redactEvent(event, this.redactionOptions);
+        const finalized = {
+            ...redacted,
+            version: 1,
+            timestamp: new Date().toISOString(),
+        };
+        const { hash, prevHash } = computeHash(finalized, this.lastHash);
+        const toWrite = { ...finalized, hash, prevHash };
+        await fs.appendFile(this.filePath, JSON.stringify(toWrite, null, 0) + '\n', 'utf-8');
+        this.lastHash = hash;
+    }
+    async query(opts) {
+        await this.ensureInitialized();
+        const { limit, since, toolName, eventTypes } = opts;
+        let lines = [];
+        try {
+            const data = await fs.readFile(this.filePath, 'utf-8');
+            lines = data.split('\n').filter((line) => line.trim().length > 0);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return [];
+            }
+            throw error;
+        }
+        const events = [];
+        for (let i = lines.length - 1; i >= 0; i--) {
+            const parsed = JSON.parse(lines[i]);
+            if (since && parsed.timestamp < since) {
+                continue;
+            }
+            if (toolName && parsed.tool?.toolName !== toolName) {
+                continue;
+            }
+            if (eventTypes && !eventTypes.includes(parsed.eventType)) {
+                continue;
+            }
+            events.push(parsed);
+            if (events.length >= limit) {
+                break;
+            }
+        }
+        return events.reverse();
+    }
+    async verifyHashChain() {
+        await this.ensureInitialized();
+        let events = [];
+        try {
+            const data = await fs.readFile(this.filePath, 'utf-8');
+            events = data
+                .split('\n')
+                .filter((line) => line.trim().length > 0)
+                .map((line) => JSON.parse(line));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                return { ok: true };
+            }
+            throw error;
+        }
+        return verifyHashChain(events);
+    }
+    async export(opts) {
+        const events = await this.query({ limit: Number.MAX_SAFE_INTEGER });
+        const redacted = applyExportRedaction(events, opts.redaction);
+        if (opts.format === 'json') {
+            return JSON.stringify(redacted, null, 2);
+        }
+        return redacted.map((event) => JSON.stringify(event)).join('\n');
+    }
+}
+//# sourceMappingURL=ledger.js.map

package/dist/src/audit/ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.js","sourceRoot":"","sources":["../../../src/audit/ledger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAyB,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,oBAAoB,EAA6B,MAAM,aAAa,CAAC;AAyB9E,MAAM,OAAO,eAAe;IAKP;IACA;IALX,QAAQ,GAAW,EAAE,CAAC;IACtB,WAAW,GAAG,KAAK,CAAC;IAE5B,YACmB,QAAgB,EAChB,gBAAkC;QADlC,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAkB;IAClD,CAAC;IAEI,KAAK,CAAC,iBAAiB;QAC7B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAe,CAAC;gBACnE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAiB;QAC5B,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAe;YAC5B,GAAG,QAAQ;YACX,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QACF,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,OAAO,GAAe,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC7D,MAAM,EAAE,CAAC,UAAU,CACjB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACvC,OAAO,CACR,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAuB;QACjC,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;QACpD,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAe,CAAC;YAClD,IAAI,KAAK,IAAI,MAAM,CAAC,SAAS,GAAG,KAAK,EAAE,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnD,SAAS;YACX,CAAC;YACD,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzD,SAAS;YACX,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpB,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC3B,MAAM;YACR,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC/B,IAAI,MAAM,GAAiB,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACvD,MAAM,GAAG,IAAI;iBACV,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;iBACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAe,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YACtB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAwB;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/src/audit/ledger.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};

package/dist/src/audit/ledger.test.js

@@ -0,0 +1,68 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import { FileAuditLedger } from './ledger.js';
+describe('FileAuditLedger', () => {
+    let tempDir;
+    let ledgerPath;
+    beforeEach(async () => {
+        tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'audit-ledger-'));
+        ledgerPath = path.join(tempDir, 'audit.jsonl');
+    });
+    afterEach(async () => {
+        await fs.rm(tempDir, { recursive: true, force: true });
+    });
+    const baseTool = {
+        callId: 'call-1',
+        toolName: 'demo',
+    };
+    const baseEvent = {
+        version: 1,
+        eventType: 'tool.requested',
+        timestamp: new Date().toISOString(),
+        sessionId: 'session-1',
+        provenance: ['local_user'],
+        tool: baseTool,
+    };
+    it('writes events with hash chain and verifies', async () => {
+        const ledger = new FileAuditLedger(ledgerPath, {
+            redactUiTypedText: true,
+        });
+        await ledger.append(baseEvent);
+        await ledger.append({
+            ...baseEvent,
+            eventType: 'tool.execution_finished',
+            tool: { ...baseTool, result: { success: true } },
+        });
+        const events = await ledger.query({ limit: 10 });
+        expect(events).toHaveLength(2);
+        expect(events[0].hash).toBeDefined();
+        expect(events[1].prevHash).toBe(events[0].hash);
+        const verify = await ledger.verifyHashChain();
+        expect(verify.ok).toBe(true);
+    });
+    it('redacts secrets and ui typed text', async () => {
+        const ledger = new FileAuditLedger(ledgerPath, {
+            redactUiTypedText: true,
+        });
+        await ledger.append({
+            ...baseEvent,
+            tool: {
+                callId: 'call-2',
+                toolName: 'ui.type',
+                args: { text: 'supersecret token' },
+            },
+        });
+        const events = await ledger.query({ limit: 1 });
+        expect(events[0].tool?.args).not.toEqual(baseEvent.tool?.args);
+        expect(events[0].redactions?.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=ledger.test.js.map

package/dist/src/audit/ledger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger.test.js","sourceRoot":"","sources":["../../../src/audit/ledger.test.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAG9C,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,OAAe,CAAC;IACpB,IAAI,UAAkB,CAAC;IAEvB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QACpE,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG;QACf,MAAM,EAAE,QAAQ;QAChB,QAAQ,EAAE,MAAM;KACjB,CAAC;IAEF,MAAM,SAAS,GAAe;QAC5B,OAAO,EAAE,CAAC;QACV,SAAS,EAAE,gBAAgB;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,WAAW;QACtB,UAAU,EAAE,CAAC,YAAY,CAAC;QAC1B,IAAI,EAAE,QAAQ;KACf,CAAC;IAEF,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE;YAC7C,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,MAAM,CAAC;YAClB,GAAG,SAAS;YACZ,SAAS,EAAE,yBAAyB;YACpC,IAAI,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE;SACjD,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,UAAU,EAAE;YAC7C,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,MAAM,CAAC;YAClB,GAAG,SAAS;YACZ,IAAI,EAAE;gBACJ,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;aACpC;SACF,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/src/audit/redaction.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import type { AuditEvent } from './schema.js';
+export interface RedactionOptions {
+    redactUiTypedText?: boolean;
+}
+export declare function redactEvent(event: AuditEvent, options: RedactionOptions): AuditEvent;

package/dist/src/audit/redaction.js

@@ -0,0 +1,77 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+const SECRET_PATTERNS = [
+    /token/i,
+    /secret/i,
+    /password/i,
+    /api[-_]?key/i,
+    /bearer\s+/i,
+];
+function mask(value) {
+    return value.length > 8 ? `${value.slice(0, 2)}***` : '***';
+}
+function shouldRedactString(value) {
+    return SECRET_PATTERNS.some((pattern) => pattern.test(value));
+}
+function redactValue(value, path, opts, hints) {
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value === 'string') {
+        if (opts.redactUiTypedText && path.endsWith('args.text')) {
+            hints.push({
+                path,
+                strategy: 'mask',
+                reason: 'ui_typed_text',
+            });
+            return mask(value);
+        }
+        if (shouldRedactString(value)) {
+            hints.push({
+                path,
+                strategy: 'mask',
+                reason: 'secret',
+            });
+            return mask(value);
+        }
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item, idx) => redactValue(item, `${path}[${idx}]`, opts, hints));
+    }
+    if (typeof value === 'object') {
+        const redacted = {};
+        for (const [key, nested] of Object.entries(value)) {
+            redacted[key] = redactValue(nested, path ? `${path}.${key}` : key, opts, hints);
+        }
+        return redacted;
+    }
+    return value;
+}
+export function redactEvent(event, options) {
+    const hints = [];
+    const tool = event.tool;
+    let redactedTool = undefined;
+    if (tool) {
+        const assuredTool = tool;
+        const redactedArgs = redactValue(assuredTool.args, 'tool.args', options, hints);
+        const redactedResult = redactValue(assuredTool.result, 'tool.result', options, hints);
+        redactedTool = {
+            ...assuredTool,
+            args: redactedArgs,
+            result: redactedResult,
+        };
+    }
+    const redacted = {
+        ...event,
+        tool: redactedTool,
+    };
+    if (hints.length > 0) {
+        redacted.redactions = [...(redacted.redactions ?? []), ...hints];
+    }
+    return redacted;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/src/audit/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../../src/audit/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAQH,MAAM,eAAe,GAAG;IACtB,QAAQ;IACR,SAAS;IACT,WAAW;IACX,cAAc;IACd,YAAY;CACb,CAAC;AAMF,SAAS,IAAI,CAAC,KAAa;IACzB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9D,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAClB,KAAc,EACd,IAAY,EACZ,IAAsB,EACtB,KAA2B;IAE3B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAExD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACzD,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC7B,WAAW,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,GAAG,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,CAClD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CACxC,KAAgC,CACjC,EAAE,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,GAAG,WAAW,CACzB,MAAM,EACN,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,EAC7B,IAAI,EACJ,KAAK,CACN,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,KAAiB,EACjB,OAAyB;IAEzB,MAAM,KAAK,GAAyB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,YAAY,GAAuB,SAAS,CAAC;IACjD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,WAAW,GAAqB,IAAI,CAAC;QAC3C,MAAM,YAAY,GAAG,WAAW,CAC9B,WAAW,CAAC,IAAI,EAChB,WAAW,EACX,OAAO,EACP,KAAK,CACiC,CAAC;QACzC,MAAM,cAAc,GAAG,WAAW,CAChC,WAAW,CAAC,MAAM,EAClB,aAAa,EACb,OAAO,EACP,KAAK,CACwB,CAAC;QAChC,YAAY,GAAG;YACb,GAAG,WAAW;YACd,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,cAAc;SACvB,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG;QACf,GAAG,KAAK;QACR,IAAI,EAAE,YAAY;KACnB,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,UAAU,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/audit/schema.d.ts

@@ -0,0 +1,52 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export type AuditReviewLevel = 'A' | 'B' | 'C';
+export type AuditEventType = 'tool.requested' | 'tool.awaiting_approval' | 'tool.approved' | 'tool.denied' | 'tool.execution_started' | 'tool.execution_finished' | 'tool.execution_failed' | 'session.start' | 'session.end';
+export type AuditProvenance = 'local_user' | 'web_remote_user' | 'model_suggestion' | 'workspace_file' | 'web_content' | 'tool_output' | 'unknown';
+export interface AuditActor {
+    kind: 'user' | 'policy' | 'model' | 'system';
+    id?: string;
+}
+export interface AuditRedactionHint {
+    path: string;
+    strategy: 'drop' | 'mask' | 'hash';
+    reason: 'secret' | 'pii' | 'ui_typed_text' | 'large_payload' | 'unknown';
+}
+export interface AuditEventBase {
+    version: 1;
+    eventType: AuditEventType;
+    timestamp: string;
+    sessionId: string;
+    traceId?: string;
+    provenance: AuditProvenance[];
+    reviewLevel?: AuditReviewLevel;
+    actor?: AuditActor;
+    redactions?: AuditRedactionHint[];
+    prevHash?: string;
+    hash?: string;
+}
+export interface AuditToolContext {
+    callId: string;
+    toolName: string;
+    toolKind?: string;
+    recipe?: {
+        id: string;
+        version?: string;
+        stepId?: string;
+    };
+    args?: Record<string, unknown>;
+    result?: {
+        success: boolean;
+        errorType?: string;
+        exitCode?: number;
+        outputBytes?: number;
+        metadata?: Record<string, unknown>;
+    };
+}
+export type AuditEvent = AuditEventBase & {
+    tool?: AuditToolContext;
+};

package/dist/src/audit/schema.js

@@ -0,0 +1,8 @@
+/**
+ * @license
+ * Copyright 2025 Google LLC
+ * Portions Copyright 2025 TerminaI Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+export {};
+//# sourceMappingURL=schema.js.map