@trusty-squire/mcp 1.1.13-rc.8 → 1.1.13

package/dist/session.js

@@ -1,164 +1,283 @@
 // MCP session storage.
 //
-// Prefer keytar (OS keychain) when available. Fall back to a 0600
-// file at $XDG_CONFIG_HOME/trusty-squire/session.json (or
-// ~/.config/trusty-squire/session.json) so the install works on
-// minimal Linux containers and CI machines without libsecret.
+// ONE store, ONE pathway: 0600 JSON files under
+// $XDG_CONFIG_HOME/trusty-squire/ (or ~/.config/trusty-squire/). There is no
+// keychain backend or environment-selectable alternate store.
+//
+// Each account owns its source-of-truth `sessions/<account_id>.json`, written
+// atomically. Do not add a cross-process lock: a write touches only one
+// account's file, so accounts cannot lose each other's updates.
+//
+// `session.json` remains the last-write-wins current-account pointer and a
+// flat compatibility mirror for older running builds. Reads never rewrite it;
+// migration to `sessions/<account_id>.json` happens only on an explicit write.
+import { randomUUID } from "node:crypto";
 import { promises as fs } from "node:fs";
 import os from "node:os";
 import path from "node:path";
-const KEYTAR_SERVICE = "trusty-squire";
-const KEYTAR_ACCOUNT = "session";
-// rc.21 — DO NOT cache the fallback path at module-load time. Tests
-// sandbox via beforeEach { process.env.HOME = tmpdir }; a path cached
-// at import time captures the REAL ~/.config/trusty-squire/ and the
-// test then writes the test-fixture session.json to the user's actual
-// home, destroying live credentials. Resolve per-call so the env
-// override in effect at write-time wins.
-function resolveFallbackFile() {
-    return path.join(process.env.XDG_CONFIG_HOME ?? path.join(os.homedir(), ".config"), "trusty-squire", "session.json");
-}
-// Tries keytar first. Falls back to the file backend if keytar isn't
-// installed or its native binding can't load. The fallback is also the
-// chosen backend for CI / tests.
-export async function openSessionStorage(options = {}) {
-    if (options.preferFile === true || preferFileFromEnv()) {
-        return new FileStorage();
-    }
-    const keytar = await tryLoadKeytar();
-    if (keytar !== null)
-        return new KeytarStorage(keytar);
-    return new FileStorage();
+import { VERSION } from "./version.js";
+// rc.21 — DO NOT cache the file path at module-load time. Tests sandbox via
+// beforeEach { process.env.HOME = tmpdir }; a path cached at import time
+// captures the REAL ~/.config/trusty-squire/ and the test then writes the
+// test-fixture session.json to the user's actual home, destroying live
+// credentials. Resolve per-call so the env override in effect at write-time
+// wins.
+function resolveConfigDir() {
+    return path.join(process.env.XDG_CONFIG_HOME ?? path.join(os.homedir(), ".config"), "trusty-squire");
 }
-// Escape hatch for boxes where the OS keychain is present-but-ephemeral —
-// a headless Linux server's per-login gnome-keyring "session" collection is
-// the common case: keytar's write/delete probe passes (so it gets picked),
-// but the saved session is wiped between SSH logins, leaving `connect`
-// re-pairing on every run. Set TRUSTY_SQUIRE_SESSION_FILE=1 to force the
-// durable 0600 session.json instead. Set it GLOBALLY (shell profile / the
-// service env) so `connect` AND the spawned MCP server agree on the backend.
-function preferFileFromEnv() {
-    const v = (process.env.TRUSTY_SQUIRE_SESSION_FILE ?? "").trim().toLowerCase();
-    return v === "1" || v === "true" || v === "yes";
+/**
+ * Slot for an entry whose claim has not landed yet, so it has no account to be
+ * keyed by. A real account_id is a ULID, so this can never collide with one.
+ */
+export const UNBOUND_ACCOUNT_KEY = "__unbound__";
+export function accountKey(data) {
+    const id = data.account_id;
+    return id !== undefined && id.length > 0 ? id : UNBOUND_ACCOUNT_KEY;
 }
-async function tryLoadKeytar() {
-    // Two things can fail here:
-    //   1. The module itself can't load (no native binding for this Node
-    //      version, or the package isn't installed).
-    //   2. The module loads but the OS keychain isn't available (no
-    //      D-Bus secrets daemon on a headless Linux box, locked Keychain
-    //      on macOS, etc.) — load succeeds, the first call throws.
-    // Probe with a write to a throwaway entry: getPassword() can succeed
-    // (returning null) on a half-broken D-Bus where the secrets service
-    // is present but no collection is unlocked — only setPassword
-    // surfaces that. We delete the probe right after so we don't pollute
-    // the keychain.
-    try {
-        const mod = await import("keytar");
-        const probeAccount = `${KEYTAR_ACCOUNT}__probe`;
-        await mod.default.setPassword(KEYTAR_SERVICE, probeAccount, "1");
-        await mod.default.deletePassword(KEYTAR_SERVICE, probeAccount);
-        return {
-            getPassword: mod.default.getPassword,
-            setPassword: mod.default.setPassword,
-            deletePassword: mod.default.deletePassword,
-        };
-    }
-    catch {
-        return null;
+/**
+ * The account entry a server bound to is gone — logged out, or erased by hand.
+ * Loud rather than an empty read, because an empty read reports "not installed"
+ * for a machine that is installed, just not under this account any more.
+ */
+export class AccountSessionMissingError extends Error {
+    accountId;
+    available;
+    code = "account_session_missing";
+    constructor(accountId, available, self = { pid: process.pid, version: VERSION }) {
+        super(`This Trusty Squire server (pid ${self.pid}, v${self.version}) is bound to account ` +
+            `${accountId}, but that account no longer has a session on this machine ` +
+            `(${available.length === 0 ? "no accounts are installed" : `installed: ${available.join(", ")}`}). ` +
+            `Refusing to fall back to another account — a credential in one account's vault is ` +
+            `not visible from another. Re-run \`npx @trusty-squire/mcp connect\` under account ` +
+            `${accountId}, or restart this host agent's Trusty Squire connection to adopt the ` +
+            `account it is now installed under.`);
+        this.accountId = accountId;
+        this.available = available;
+        this.name = "AccountSessionMissingError";
     }
 }
 function withoutLegacyProxy(data) {
     const stored = data;
-    if (!Object.prototype.hasOwnProperty.call(stored, "proxy_url")) {
-        return { data, changed: false };
-    }
+    if (!Object.prototype.hasOwnProperty.call(stored, "proxy_url"))
+        return data;
     const clean = { ...stored };
     delete clean.proxy_url;
-    return { data: clean, changed: true };
+    return clean;
 }
-async function migrateLegacyProxy(clean, write) {
-    if (!clean.changed)
-        return;
-    try {
-        await write(clean.data);
-    }
-    catch {
-        return;
-    }
+/** A stored entry, or null when the file is absent or not an object. */
+function parseEntry(raw) {
+    if (raw === null || typeof raw !== "object")
+        return null;
+    return withoutLegacyProxy(raw);
 }
-class KeytarStorage {
-    kt;
-    constructor(kt) {
-        this.kt = kt;
-    }
-    async read() {
-        const raw = await this.kt.getPassword(KEYTAR_SERVICE, KEYTAR_ACCOUNT);
-        if (raw === null)
-            return null;
-        let data;
-        try {
-            data = JSON.parse(raw);
-        }
-        catch {
-            return null;
-        }
-        const clean = withoutLegacyProxy(data);
-        await migrateLegacyProxy(clean, async (session) => {
-            await this.kt.setPassword(KEYTAR_SERVICE, KEYTAR_ACCOUNT, JSON.stringify(session));
-        });
-        return clean.data;
-    }
-    async write(data) {
-        const clean = withoutLegacyProxy(data).data;
-        await this.kt.setPassword(KEYTAR_SERVICE, KEYTAR_ACCOUNT, JSON.stringify(clean));
-    }
-    async clear() {
-        await this.kt.deletePassword(KEYTAR_SERVICE, KEYTAR_ACCOUNT);
-    }
-    backendName() {
-        return "keytar";
-    }
+/** Account ids are ULIDs; refuse anything that could escape the directory. */
+function isSafeAccountKey(key) {
+    return /^[A-Za-z0-9_-]{1,128}$/.test(key) || key === UNBOUND_ACCOUNT_KEY;
 }
-export class FileStorage {
-    filePath;
-    // Allow tests to override the default file path. When no override is
-    // supplied, resolve the path NOW (constructor invocation) instead of
-    // capturing a value cached at module-import time — see
-    // resolveFallbackFile's comment.
+export class SessionStore {
+    /** The current-account pointer and pre-per-account compatibility mirror. */
+    path;
+    dir;
+    // Allow tests to override the location. When no override is supplied, resolve
+    // the path NOW (constructor invocation) instead of capturing a value cached
+    // at module-import time — see resolveConfigDir.
     constructor(filePath) {
-        this.filePath = filePath ?? resolveFallbackFile();
+        this.path = filePath ?? path.join(resolveConfigDir(), "session.json");
+        this.dir = path.dirname(this.path);
+    }
+    get sessionsDir() {
+        return path.join(this.dir, "sessions");
+    }
+    accountFile(accountId) {
+        return path.join(this.sessionsDir, `${accountId}.json`);
     }
-    async read() {
-        let raw;
+    async readJson(file) {
         try {
-            raw = await fs.readFile(this.filePath, "utf8");
+            return JSON.parse(await fs.readFile(file, "utf8"));
         }
         catch (err) {
             if (err.code === "ENOENT")
                 return null;
             throw err;
         }
-        const clean = withoutLegacyProxy(JSON.parse(raw));
-        await migrateLegacyProxy(clean, async (session) => await this.write(session));
-        return clean.data;
     }
-    async write(data) {
-        const clean = withoutLegacyProxy(data).data;
-        await fs.mkdir(path.dirname(this.filePath), { recursive: true, mode: 0o700 });
-        await fs.writeFile(this.filePath, JSON.stringify(clean, null, 2), { mode: 0o600 });
+    /**
+     * The legacy flat pointer/mirror. Also the pre-per-account file, which is
+     * why a read falls back to it: an install that predates `sessions/` has its
+     * only copy here, and reading must not require migrating it first.
+     */
+    async readPointer() {
+        return parseEntry(await this.readJson(this.path));
+    }
+    async writeAtomic(file, value) {
+        await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+        // Write-then-rename so a reader — including an older server reading the
+        // pointer — never observes a partially written file. rename within the
+        // same directory is atomic.
+        const temporary = `${file}.tmp-${randomUUID()}`;
+        try {
+            await fs.writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, {
+                mode: 0o600,
+                flag: "wx",
+            });
+            await fs.rename(temporary, file);
+        }
+        finally {
+            await fs.rm(temporary, { force: true });
+        }
+    }
+    async writeAtomicIfMissing(file, value) {
+        await fs.mkdir(path.dirname(file), { recursive: true, mode: 0o700 });
+        const temporary = `${file}.tmp-${randomUUID()}`;
+        try {
+            await fs.writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, {
+                mode: 0o600,
+                flag: "wx",
+            });
+            try {
+                await fs.link(temporary, file);
+            }
+            catch (err) {
+                if (err.code !== "EEXIST")
+                    throw err;
+            }
+        }
+        finally {
+            await fs.rm(temporary, { force: true });
+        }
     }
-    async clear() {
+    /** Every account installed on this machine. */
+    async listAccounts() {
+        let names;
         try {
-            await fs.unlink(this.filePath);
+            names = await fs.readdir(this.sessionsDir);
         }
         catch (err) {
             if (err.code !== "ENOENT")
                 throw err;
+            names = [];
         }
+        const accounts = names
+            .filter((name) => name.endsWith(".json") && !name.includes(".tmp-"))
+            .map((name) => name.slice(0, -".json".length))
+            .filter(isSafeAccountKey);
+        // An install that predates `sessions/` lives only in the pointer file.
+        if (accounts.length === 0) {
+            const legacy = await this.readPointer();
+            if (legacy !== null)
+                return [accountKey(legacy)];
+        }
+        return accounts.sort();
     }
-    backendName() {
-        return "file";
+    /** The account the most recent connect bound, for a reader that has no own. */
+    async currentAccountId() {
+        const pointer = await this.readPointer();
+        if (pointer !== null)
+            return accountKey(pointer);
+        const accounts = await this.listAccounts();
+        return accounts.length === 1 ? accounts[0] : null;
     }
+    /**
+     * One account's entry. With `accountId`, ONLY that account's file — a caller
+     * bound to an account never silently reads another's. Without it, the account
+     * the most recent connect bound.
+     */
+    async read(accountId) {
+        if (accountId === undefined) {
+            const current = await this.currentAccountId();
+            return current === null ? null : await this.read(current);
+        }
+        if (!isSafeAccountKey(accountId))
+            return null;
+        const own = parseEntry(await this.readJson(this.accountFile(accountId)));
+        if (own !== null)
+            return own;
+        // Mixed builds can still write a flat pointer for an account with no
+        // per-account file. That fallback is required for those live sessions;
+        // only a manual file deletion leaves it masking a missing account.
+        const pointer = await this.readPointer();
+        return pointer !== null && accountKey(pointer) === accountId ? pointer : null;
+    }
+    /**
+     * Upsert ONE account's entry. Structurally cannot touch another account's:
+     * it writes that account's own file, then refreshes the pointer/mirror.
+     */
+    async write(data) {
+        const key = accountKey(data);
+        if (!isSafeAccountKey(key)) {
+            throw new Error(`Invalid session account ID: ${key}`);
+        }
+        const entry = withoutLegacyProxy(data);
+        await this.writeAtomic(this.accountFile(key), entry);
+        // A claim that finally names an account supersedes the transient pre-claim
+        // entry rather than leaving it behind forever.
+        if (key !== UNBOUND_ACCOUNT_KEY) {
+            await fs.rm(this.accountFile(UNBOUND_ACCOUNT_KEY), { force: true });
+        }
+        const pointer = await this.readPointer();
+        if (pointer !== null) {
+            const pointerKey = accountKey(pointer);
+            if (pointerKey !== key &&
+                pointerKey !== UNBOUND_ACCOUNT_KEY &&
+                isSafeAccountKey(pointerKey)) {
+                await this.writeAtomicIfMissing(this.accountFile(pointerKey), pointer);
+            }
+        }
+        // The pointer, in the ORIGINAL flat shape, so servers already running an
+        // older build keep reading a binding they understand. Last-write-wins is
+        // the correct semantics: the most recent connect IS the current account.
+        await this.writeAtomic(this.path, entry);
+    }
+    /**
+     * Remove ONE account's entry (the current one by default). Other accounts'
+     * files are untouched; the pointer moves to a survivor, or is deleted when
+     * nothing is left.
+     */
+    async clear(accountId) {
+        const key = accountId ?? (await this.currentAccountId());
+        if (key === null || key === undefined)
+            return;
+        if (!isSafeAccountKey(key)) {
+            throw new Error(`Invalid session account ID: ${key}`);
+        }
+        const pointer = await this.readPointer();
+        if (pointer !== null && accountKey(pointer) === key) {
+            const remaining = (await this.listAccounts()).filter((id) => id !== key);
+            if (remaining.length > 0) {
+                const survivor = await this.read(remaining[0]);
+                if (survivor !== null) {
+                    await this.writeAtomic(this.path, survivor);
+                }
+                else {
+                    try {
+                        await fs.unlink(this.path);
+                    }
+                    catch (err) {
+                        if (err.code !== "ENOENT")
+                            throw err;
+                    }
+                }
+            }
+            else {
+                try {
+                    await fs.unlink(this.path);
+                }
+                catch (err) {
+                    if (err.code !== "ENOENT")
+                        throw err;
+                }
+            }
+        }
+        const targetFile = this.accountFile(key);
+        await fs.rm(targetFile, { force: true });
+        // This catches a writer that re-materialized the legacy-only pointer
+        // account while logout retargeted the pointer. A writer already paused
+        // after its snapshot can still land later, but only for a legacy-only
+        // account and only as a stale credential file, never cross-account reads.
+        await fs.rm(targetFile, { force: true });
+    }
+}
+export async function openSessionStorage(options = {}) {
+    return new SessionStore(options.filePath);
 }
 //# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,EAAE;AACF,kEAAkE;AAClE,0DAA0D;AAC1D,gEAAgE;AAChE,8DAA8D;AAE9D,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,cAAc,GAAG,SAAS,CAAC;AAEjC,oEAAoE;AACpE,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,iEAAiE;AACjE,yCAAyC;AACzC,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CACd,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EACjE,eAAe,EACf,cAAc,CACf,CAAC;AACJ,CAAC;AA+CD,qEAAqE;AACrE,uEAAuE;AACvE,iCAAiC;AACjC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAoC,EAAE;IAEtC,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACvD,OAAO,IAAI,WAAW,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO,IAAI,WAAW,EAAE,CAAC;AAC3B,CAAC;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,0EAA0E;AAC1E,6EAA6E;AAC7E,SAAS,iBAAiB;IACxB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9E,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,KAAK,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,aAAa;IAC1B,4BAA4B;IAC5B,qEAAqE;IACrE,iDAAiD;IACjD,gEAAgE;IAChE,qEAAqE;IACrE,+DAA+D;IAC/D,qEAAqE;IACrE,oEAAoE;IACpE,8DAA8D;IAC9D,qEAAqE;IACrE,gBAAgB;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,GAAiB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,YAAY,GAAG,GAAG,cAAc,SAAS,CAAC;QAChD,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;QAC/D,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;YACpC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;YACpC,cAAc,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc;SAC3C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD,SAAS,kBAAkB,CAAC,IAAiB;IAC3C,MAAM,MAAM,GAAG,IAA6C,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC5B,OAAO,KAAK,CAAC,SAAS,CAAC;IACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,KAA8C,EAC9C,KAA2C;IAE3C,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;AACH,CAAC;AAED,MAAM,aAAa;IACY;IAA7B,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEhD,KAAK,CAAC,IAAI;QACR,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,IAAiB,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAChD,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAiB;QAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAC/D,CAAC;IAED,WAAW;QACT,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IACL,QAAQ,CAAS;IAClC,qEAAqE;IACrE,qEAAqE;IACrE,uDAAuD;IACvD,iCAAiC;IACjC,YAAY,QAAiB;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,mBAAmB,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC9D,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC,CAAC;QACjE,MAAM,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9E,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAiB;QAC3B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,WAAW;QACT,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AAAA,uBAAuB;AACvB,EAAE;AACF,gDAAgD;AAChD,6EAA6E;AAC7E,8DAA8D;AAC9D,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,gEAAgE;AAChE,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,uEAAuE;AACvE,4EAA4E;AAC5E,QAAQ;AACR,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CACd,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EACjE,eAAe,CAChB,CAAC;AACJ,CAAC;AAgCD;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEjD,MAAM,UAAU,UAAU,CAAC,IAAiB;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,KAAK,SAAS,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAGxC;IACA;IAHF,IAAI,GAAG,yBAAyB,CAAC;IAC1C,YACW,SAAiB,EACjB,SAAmB,EAC5B,OAAyC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE;QAE/E,KAAK,CACH,kCAAkC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,wBAAwB;YAClF,GAAG,SAAS,6DAA6D;YACzE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK;YACpG,oFAAoF;YACpF,oFAAoF;YACpF,GAAG,SAAS,uEAAuE;YACnF,oCAAoC,CACvC,CAAC;QAZO,cAAS,GAAT,SAAS,CAAQ;QACjB,cAAS,GAAT,SAAS,CAAU;QAY5B,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,IAAiB;IAC3C,MAAM,MAAM,GAAG,IAA6C,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,KAAK,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IAC5B,OAAO,KAAK,CAAC,SAAS,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,GAAY;IAC9B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,OAAO,kBAAkB,CAAC,GAAkB,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,mBAAmB,CAAC;AAC3E,CAAC;AAED,MAAM,OAAO,YAAY;IACvB,4EAA4E;IACnE,IAAI,CAAS;IACL,GAAG,CAAS;IAE7B,8EAA8E;IAC9E,4EAA4E;IAC5E,gDAAgD;IAChD,YAAY,QAAiB;QAC3B,IAAI,CAAC,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,IAAY,WAAW;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAEO,WAAW,CAAC,SAAiB;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IAC1D,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAY;QACjC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC;QAChE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC9D,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,WAAW;QACvB,OAAO,UAAU,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,KAAc;QACpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,wEAAwE;QACxE,uEAAuE;QACvE,4BAA4B;QAC5B,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACnE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,IAAY,EAAE,KAAc;QAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,GAAG,IAAI,QAAQ,UAAU,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;gBACnE,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,IAAI;aACX,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YAC9D,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,+CAA+C;IAC/C,KAAK,CAAC,YAAY;QAChB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAC5D,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK;aACnB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aACnE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;aAC7C,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC5B,uEAAuE;QACvE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YACxC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,gBAAgB;QACpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAkB;QAC3B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC9C,OAAO,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC;QAC7B,qEAAqE;QACrE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,OAAO,OAAO,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,IAAiB;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACrD,2EAA2E;QAC3E,+CAA+C;QAC/C,IAAI,GAAG,KAAK,mBAAmB,EAAE,CAAC;YAChC,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;YACvC,IACE,UAAU,KAAK,GAAG;gBAClB,UAAU,KAAK,mBAAmB;gBAClC,gBAAgB,CAAC,UAAU,CAAC,EAC5B,CAAC;gBACD,MAAM,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;YACzE,CAAC;QACH,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,SAAkB;QAC5B,MAAM,GAAG,GAAG,SAAS,IAAI,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACzD,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO;QAC9C,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,IAAI,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC;YACpD,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;YACzE,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACtB,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC;wBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,GAAG,CAAC;oBAC9D,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,IAAK,GAAyB,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,GAAG,CAAC;gBAC9D,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,qEAAqE;QACrE,uEAAuE;QACvE,sEAAsE;QACtE,0EAA0E;QAC1E,MAAM,EAAE,CAAC,EAAE,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,UAAiC,EAAE;IAEnC,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC"}

package/dist/tools/audit-log.d.ts

@@ -1,21 +1,35 @@
 import { z } from "zod";
 import { type Tool } from "./index.js";
+import { normalizeAuditType } from "./audit-rollup.js";
 declare const inputSchema: z.ZodObject<{
     limit: z.ZodOptional<z.ZodNumber>;
     before: z.ZodOptional<z.ZodString>;
     type: z.ZodOptional<z.ZodString>;
     reference: z.ZodOptional<z.ZodString>;
+    view: z.ZodOptional<z.ZodEnum<["ledger", "raw"]>>;
+    scan: z.ZodOptional<z.ZodNumber>;
+    window_minutes: z.ZodOptional<z.ZodNumber>;
+    expand: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
     limit?: number | undefined;
     before?: string | undefined;
     type?: string | undefined;
     reference?: string | undefined;
+    view?: "raw" | "ledger" | undefined;
+    scan?: number | undefined;
+    window_minutes?: number | undefined;
+    expand?: string | undefined;
 }, {
     limit?: number | undefined;
     before?: string | undefined;
     type?: string | undefined;
     reference?: string | undefined;
+    view?: "raw" | "ledger" | undefined;
+    scan?: number | undefined;
+    window_minutes?: number | undefined;
+    expand?: string | undefined;
 }>;
-export declare const auditLogTool: Tool<z.infer<typeof inputSchema>>;
-export {};
+type AuditLogArgs = z.infer<typeof inputSchema>;
+export declare const auditLogTool: Tool<AuditLogArgs>;
+export { normalizeAuditType };
 //# sourceMappingURL=audit-log.d.ts.map

package/dist/tools/audit-log.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/tools/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAQlD,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;EAKf,CAAC;AAYH,eAAO,MAAM,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAwB1D,CAAC"}
+{"version":3,"file":"audit-log.d.ts","sourceRoot":"","sources":["../../src/tools/audit-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAGlD,OAAO,EASL,kBAAkB,EAGnB,MAAM,mBAAmB,CAAC;AAa3B,QAAA,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;EAef,CAAC;AAEH,KAAK,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AA6BhD,eAAO,MAAM,YAAY,EAAE,IAAI,CAAC,YAAY,CA4B3C,CAAC;AAmNF,OAAO,EAAE,kBAAkB,EAAE,CAAC"}