@vorionsys/security 1.0.0

package/dist/aci-extensions/aci-string-extensions.js

@@ -0,0 +1,435 @@
+/**
+ * ACI String Extension Utilities
+ *
+ * Provides parsing and manipulation functions for ACI strings with
+ * extension suffixes. Extensions are declared in ACI strings using
+ * the # suffix format.
+ *
+ * @packageDocumentation
+ * @module @vorion/aci-extensions/aci-string-extensions
+ * @license Apache-2.0
+ *
+ * @example
+ * ```
+ * // ACI string formats:
+ * // Without extensions:
+ * //   a3i.vorion.banquet-advisor:FHC-L3@1.2.0
+ * //
+ * // With single extension:
+ * //   a3i.vorion.banquet-advisor:FHC-L3@1.2.0#gov
+ * //
+ * // With multiple extensions:
+ * //   a3i.vorion.banquet-advisor:FHC-L3@1.2.0#gov,audit,hipaa
+ * ```
+ */
+import { z } from 'zod';
+/**
+ * Zod schema for ParsedExtensions validation
+ */
+export const ParsedExtensionsSchema = z.object({
+    core: z.string().min(1),
+    extensions: z.array(z.string()),
+});
+/**
+ * Regular expression for validating extension ID format
+ * Format: aci-ext-{name}-v{major}
+ * Example: aci-ext-governance-v1
+ */
+const EXTENSION_ID_REGEX = /^aci-ext-[a-z]+-v\d+$/;
+/**
+ * Regular expression for validating shortcode format
+ * Format: 1-10 lowercase letters
+ * Example: gov, audit, hipaa
+ */
+const SHORTCODE_REGEX = /^[a-z]{1,10}$/;
+/**
+ * Regular expression for validating ACI string with optional extensions
+ * Matches: namespace.publisher.name:DOMAINS-L{level}@version[#extensions]
+ * Note: Trust tier is NOT part of ACI - it's computed at runtime
+ */
+const ACI_WITH_EXTENSIONS_REGEX = /^[a-z0-9]+\.[a-z0-9-]+\.[a-z0-9-]+:[A-Z]+-L[0-7]@\d+\.\d+\.\d+(#[a-z]+(,[a-z]+)*)?$/;
+/**
+ * Parse extension suffix from an ACI string
+ *
+ * Extracts the core ACI string and any extension shortcodes from
+ * an ACI string that may include an extension suffix.
+ *
+ * @param aci - The ACI string to parse (with or without extensions)
+ * @returns Object containing core ACI string and array of extensions
+ *
+ * @example
+ * ```typescript
+ * // Without extensions
+ * parseExtensions('a3i.vorion.agent:FHC-L3@1.0.0');
+ * // { core: 'a3i.vorion.agent:FHC-L3@1.0.0', extensions: [] }
+ *
+ * // With single extension
+ * parseExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov');
+ * // { core: 'a3i.vorion.agent:FHC-L3@1.0.0', extensions: ['gov'] }
+ *
+ * // With multiple extensions
+ * parseExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov,audit,hipaa');
+ * // { core: 'a3i.vorion.agent:FHC-L3@1.0.0', extensions: ['gov', 'audit', 'hipaa'] }
+ * ```
+ */
+export function parseExtensions(aci) {
+    const hashIndex = aci.indexOf('#');
+    if (hashIndex === -1) {
+        return { core: aci, extensions: [] };
+    }
+    const core = aci.slice(0, hashIndex);
+    const extSuffix = aci.slice(hashIndex + 1);
+    // Split by comma and trim whitespace
+    const extensions = extSuffix
+        .split(',')
+        .map((e) => e.trim())
+        .filter((e) => e.length > 0);
+    return { core, extensions };
+}
+/**
+ * Add an extension shortcode to an ACI string
+ *
+ * If the extension is already present, the string is returned unchanged.
+ * Extensions are appended to the end of the extension list.
+ *
+ * @param aci - The ACI string (with or without existing extensions)
+ * @param extension - The extension shortcode to add
+ * @returns The ACI string with the extension added
+ *
+ * @example
+ * ```typescript
+ * // Add to string without extensions
+ * addExtension('a3i.vorion.agent:FHC-L3@1.0.0', 'gov');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#gov'
+ *
+ * // Add to string with existing extensions
+ * addExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov', 'audit');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#gov,audit'
+ *
+ * // Extension already present
+ * addExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov', 'gov');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#gov'
+ * ```
+ */
+export function addExtension(aci, extension) {
+    const { core, extensions } = parseExtensions(aci);
+    // Don't add if already present
+    if (extensions.includes(extension)) {
+        return aci;
+    }
+    extensions.push(extension);
+    return `${core}#${extensions.join(',')}`;
+}
+/**
+ * Add multiple extensions to an ACI string
+ *
+ * Adds all specified extensions that are not already present.
+ * Extensions are appended in the order provided.
+ *
+ * @param aci - The ACI string (with or without existing extensions)
+ * @param extensionsToAdd - Array of extension shortcodes to add
+ * @returns The ACI string with all extensions added
+ *
+ * @example
+ * ```typescript
+ * addExtensions('a3i.vorion.agent:FHC-L3@1.0.0', ['gov', 'audit']);
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#gov,audit'
+ * ```
+ */
+export function addExtensions(aci, extensionsToAdd) {
+    let result = aci;
+    for (const ext of extensionsToAdd) {
+        result = addExtension(result, ext);
+    }
+    return result;
+}
+/**
+ * Remove an extension shortcode from an ACI string
+ *
+ * If the extension is not present, the string is returned unchanged.
+ * If removing the last extension, the # suffix is also removed.
+ *
+ * @param aci - The ACI string with extensions
+ * @param extension - The extension shortcode to remove
+ * @returns The ACI string with the extension removed
+ *
+ * @example
+ * ```typescript
+ * // Remove from multiple extensions
+ * removeExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov,audit', 'gov');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#audit'
+ *
+ * // Remove last extension
+ * removeExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov', 'gov');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0'
+ *
+ * // Extension not present
+ * removeExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov', 'audit');
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#gov'
+ * ```
+ */
+export function removeExtension(aci, extension) {
+    const { core, extensions } = parseExtensions(aci);
+    const filtered = extensions.filter((e) => e !== extension);
+    if (filtered.length === 0) {
+        return core;
+    }
+    return `${core}#${filtered.join(',')}`;
+}
+/**
+ * Remove multiple extensions from an ACI string
+ *
+ * @param aci - The ACI string with extensions
+ * @param extensionsToRemove - Array of extension shortcodes to remove
+ * @returns The ACI string with all specified extensions removed
+ */
+export function removeExtensions(aci, extensionsToRemove) {
+    const { core, extensions } = parseExtensions(aci);
+    const filtered = extensions.filter((e) => !extensionsToRemove.includes(e));
+    if (filtered.length === 0) {
+        return core;
+    }
+    return `${core}#${filtered.join(',')}`;
+}
+/**
+ * Check if an ACI string has a specific extension
+ *
+ * @param aci - The ACI string to check
+ * @param extension - The extension shortcode to look for
+ * @returns True if the extension is present, false otherwise
+ *
+ * @example
+ * ```typescript
+ * hasExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov,audit', 'gov');
+ * // true
+ *
+ * hasExtension('a3i.vorion.agent:FHC-L3@1.0.0#gov', 'audit');
+ * // false
+ *
+ * hasExtension('a3i.vorion.agent:FHC-L3@1.0.0', 'gov');
+ * // false
+ * ```
+ */
+export function hasExtension(aci, extension) {
+    const { extensions } = parseExtensions(aci);
+    return extensions.includes(extension);
+}
+/**
+ * Check if an ACI string has all specified extensions
+ *
+ * @param aci - The ACI string to check
+ * @param requiredExtensions - Array of extension shortcodes required
+ * @returns True if all extensions are present, false otherwise
+ */
+export function hasAllExtensions(aci, requiredExtensions) {
+    const { extensions } = parseExtensions(aci);
+    return requiredExtensions.every((ext) => extensions.includes(ext));
+}
+/**
+ * Check if an ACI string has any of the specified extensions
+ *
+ * @param aci - The ACI string to check
+ * @param extensionsToCheck - Array of extension shortcodes to check
+ * @returns True if any extension is present, false otherwise
+ */
+export function hasAnyExtension(aci, extensionsToCheck) {
+    const { extensions } = parseExtensions(aci);
+    return extensionsToCheck.some((ext) => extensions.includes(ext));
+}
+/**
+ * Validate extension ID format
+ *
+ * Extension IDs must follow the format: aci-ext-{name}-v{major}
+ * Where {name} is lowercase letters and {major} is a positive integer.
+ *
+ * @param id - The extension ID to validate
+ * @returns True if the ID is valid, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isValidExtensionId('aci-ext-governance-v1');  // true
+ * isValidExtensionId('aci-ext-healthcare-v2'); // true
+ * isValidExtensionId('aci-ext-CAPS-v1');       // false (uppercase)
+ * isValidExtensionId('my-extension');          // false (wrong format)
+ * isValidExtensionId('aci-ext-foo');           // false (missing version)
+ * ```
+ */
+export function isValidExtensionId(id) {
+    return EXTENSION_ID_REGEX.test(id);
+}
+/**
+ * Validate extension shortcode format
+ *
+ * Shortcodes must be 1-10 lowercase letters only.
+ *
+ * @param shortcode - The shortcode to validate
+ * @returns True if the shortcode is valid, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isValidShortcode('gov');     // true
+ * isValidShortcode('hipaa');   // true
+ * isValidShortcode('audit');   // true
+ * isValidShortcode('GOV');     // false (uppercase)
+ * isValidShortcode('gov1');    // false (contains number)
+ * isValidShortcode('');        // false (empty)
+ * isValidShortcode('verylongcode'); // false (too long)
+ * ```
+ */
+export function isValidShortcode(shortcode) {
+    return SHORTCODE_REGEX.test(shortcode);
+}
+/**
+ * Validate an ACI string with optional extensions
+ *
+ * Validates that the ACI string follows the expected format including
+ * any extension suffix.
+ *
+ * @param aci - The ACI string to validate
+ * @returns True if the ACI string is valid, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isValidACIWithExtensions('a3i.vorion.agent:FHC-L3@1.0.0');           // true
+ * isValidACIWithExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov');       // true
+ * isValidACIWithExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov,audit'); // true
+ * isValidACIWithExtensions('invalid-aci-string');                      // false
+ * ```
+ */
+export function isValidACIWithExtensions(aci) {
+    return ACI_WITH_EXTENSIONS_REGEX.test(aci);
+}
+/**
+ * Get the extension count for an ACI string
+ *
+ * @param aci - The ACI string to check
+ * @returns Number of extensions in the ACI string
+ */
+export function getExtensionCount(aci) {
+    const { extensions } = parseExtensions(aci);
+    return extensions.length;
+}
+/**
+ * Replace all extensions in an ACI string
+ *
+ * Removes any existing extensions and adds the new ones.
+ *
+ * @param aci - The ACI string (with or without extensions)
+ * @param newExtensions - Array of new extension shortcodes
+ * @returns ACI string with only the new extensions
+ *
+ * @example
+ * ```typescript
+ * replaceExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov', ['audit', 'hipaa']);
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0#audit,hipaa'
+ *
+ * replaceExtensions('a3i.vorion.agent:FHC-L3@1.0.0#gov', []);
+ * // 'a3i.vorion.agent:FHC-L3@1.0.0'
+ * ```
+ */
+export function replaceExtensions(aci, newExtensions) {
+    const { core } = parseExtensions(aci);
+    if (newExtensions.length === 0) {
+        return core;
+    }
+    // Remove duplicates while preserving order
+    const unique = Array.from(new Set(newExtensions));
+    return `${core}#${unique.join(',')}`;
+}
+/**
+ * Sort extensions in an ACI string alphabetically
+ *
+ * @param aci - The ACI string with extensions
+ * @returns ACI string with extensions sorted alphabetically
+ */
+export function sortExtensions(aci) {
+    const { core, extensions } = parseExtensions(aci);
+    if (extensions.length === 0) {
+        return core;
+    }
+    const sorted = [...extensions].sort();
+    return `${core}#${sorted.join(',')}`;
+}
+/**
+ * Compare two ACI strings for extension equality
+ *
+ * Checks if two ACI strings have the same extensions (regardless of order).
+ *
+ * @param aci1 - First ACI string
+ * @param aci2 - Second ACI string
+ * @returns True if both have the same extensions
+ */
+export function haveEqualExtensions(aci1, aci2) {
+    const ext1 = parseExtensions(aci1).extensions.sort();
+    const ext2 = parseExtensions(aci2).extensions.sort();
+    if (ext1.length !== ext2.length) {
+        return false;
+    }
+    return ext1.every((e, i) => e === ext2[i]);
+}
+/**
+ * Extract the core ACI string without extensions
+ *
+ * @param aci - The ACI string (with or without extensions)
+ * @returns The core ACI string
+ */
+export function getCoreACI(aci) {
+    return parseExtensions(aci).core;
+}
+/**
+ * Build an ACI string from core and extensions
+ *
+ * @param core - The core ACI string
+ * @param extensions - Array of extension shortcodes
+ * @returns Complete ACI string with extensions
+ */
+export function buildACI(core, extensions) {
+    if (extensions.length === 0) {
+        return core;
+    }
+    // Remove duplicates while preserving order
+    const unique = Array.from(new Set(extensions));
+    return `${core}#${unique.join(',')}`;
+}
+/**
+ * Parse extension ID to extract name and version
+ *
+ * @param extensionId - The extension ID (e.g., 'aci-ext-governance-v1')
+ * @returns Object with name and version, or null if invalid
+ *
+ * @example
+ * ```typescript
+ * parseExtensionId('aci-ext-governance-v1');
+ * // { name: 'governance', version: 1 }
+ *
+ * parseExtensionId('invalid');
+ * // null
+ * ```
+ */
+export function parseExtensionId(extensionId) {
+    const match = extensionId.match(/^aci-ext-([a-z]+)-v(\d+)$/);
+    if (!match) {
+        return null;
+    }
+    return {
+        name: match[1],
+        version: parseInt(match[2], 10),
+    };
+}
+/**
+ * Build an extension ID from name and version
+ *
+ * @param name - Extension name (lowercase letters)
+ * @param version - Major version number
+ * @returns Extension ID in format aci-ext-{name}-v{version}
+ *
+ * @example
+ * ```typescript
+ * buildExtensionId('governance', 1);
+ * // 'aci-ext-governance-v1'
+ * ```
+ */
+export function buildExtensionId(name, version) {
+    return `aci-ext-${name.toLowerCase()}-v${version}`;
+}
+//# sourceMappingURL=aci-string-extensions.js.map

package/dist/aci-extensions/aci-string-extensions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aci-string-extensions.js","sourceRoot":"","sources":["../../src/aci-extensions/aci-string-extensions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;GAEG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAChC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,uBAAuB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC;;;;GAIG;AACH,MAAM,yBAAyB,GAC7B,qFAAqF,CAAC;AAExF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnC,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAE3C,qCAAqC;IACrC,MAAM,UAAU,GAAG,SAAS;SACzB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,SAAiB;IACzD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAElD,+BAA+B;IAC/B,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,GAAG,CAAC;IACb,CAAC;IAED,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,GAAG,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,eAAyB;IAClE,IAAI,MAAM,GAAG,GAAG,CAAC;IACjB,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,SAAiB;IAC5D,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IAE3D,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,kBAA4B;IACxE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAE3E,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,GAAG,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,SAAiB;IACzD,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,kBAA4B;IACxE,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,iBAA2B;IACtE,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB;IAChD,OAAO,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAW;IAClD,OAAO,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,aAAuB;IACpE,MAAM,EAAE,IAAI,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAEtC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IAElD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAErD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,UAAoB;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAC/C,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAC9B,WAAmB;IAEnB,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAE7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE;QACf,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC;KACjC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;IAC5D,OAAO,WAAW,IAAI,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;AACrD,CAAC"}

package/dist/aci-extensions/builtin-extensions/audit.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Audit Trail Extension
+ *
+ * Provides comprehensive audit logging for all agent activities.
+ * Integrates with Vorion's proof module for cryptographic sealing
+ * of audit records.
+ *
+ * @packageDocumentation
+ * @module @vorion/aci-extensions/builtin-extensions/audit
+ * @license Apache-2.0
+ */
+import type { ACIExtension } from '../types.js';
+/**
+ * Audit event types
+ */
+export type AuditEventType = 'capability.requested' | 'capability.granted' | 'capability.denied' | 'capability.expired' | 'action.initiated' | 'action.completed' | 'action.failed' | 'trust.adjusted' | 'trust.revoked' | 'attestation.verified' | 'attestation.failed' | 'anomaly.detected' | 'anomaly.responded';
+/**
+ * Audit record structure
+ */
+export interface AuditEvent {
+    /** Unique event ID */
+    id: string;
+    /** Event type */
+    type: AuditEventType;
+    /** Event timestamp */
+    timestamp: Date;
+    /** Agent DID */
+    agentDid: string;
+    /** Agent ACI at time of event */
+    agentAci: string;
+    /** Event details */
+    details: Record<string, unknown>;
+    /** Request/action ID if applicable */
+    correlationId?: string;
+    /** Previous event in chain */
+    previousEventId?: string;
+    /** Hash of the event for integrity */
+    hash?: string;
+    /** Signature if cryptographically sealed */
+    signature?: string;
+}
+/**
+ * Audit configuration
+ */
+interface AuditConfig {
+    /** Whether to log to external audit service */
+    externalLogging: boolean;
+    /** Whether to include detailed parameters in audit */
+    includeDetails: boolean;
+    /** Retention period in days */
+    retentionDays: number;
+    /** Whether to chain events cryptographically */
+    chainEvents: boolean;
+}
+/**
+ * Query audit events for an agent
+ */
+export declare function queryAuditEvents(agentDid: string, options?: {
+    type?: AuditEventType;
+    startTime?: Date;
+    endTime?: Date;
+    limit?: number;
+}): AuditEvent[];
+/**
+ * Verify audit chain integrity
+ */
+export declare function verifyAuditChain(agentDid: string): {
+    valid: boolean;
+    brokenAt?: string;
+    details?: string;
+};
+/**
+ * Audit Trail Extension
+ *
+ * Provides comprehensive audit logging including:
+ * - Capability request/grant auditing
+ * - Action initiation/completion auditing
+ * - Trust adjustment auditing
+ * - Anomaly response auditing
+ * - Cryptographic chaining of events
+ */
+export declare const auditExtension: ACIExtension;
+/**
+ * Create audit extension with custom configuration
+ */
+export declare function createAuditExtension(config?: Partial<AuditConfig>): ACIExtension;
+export default auditExtension;
+//# sourceMappingURL=audit.d.ts.map

package/dist/aci-extensions/builtin-extensions/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../src/aci-extensions/builtin-extensions/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,KAAK,EACV,YAAY,EAgBb,MAAM,aAAa,CAAC;AAIrB;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,sBAAsB,GACtB,oBAAoB,GACpB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,GAClB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,sBAAsB,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,mBAAmB,CAAC;AAExB;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,sBAAsB;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB;IACjB,IAAI,EAAE,cAAc,CAAC;IACrB,sBAAsB;IACtB,SAAS,EAAE,IAAI,CAAC;IAChB,gBAAgB;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,sCAAsC;IACtC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8BAA8B;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,sCAAsC;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,UAAU,WAAW;IACnB,+CAA+C;IAC/C,eAAe,EAAE,OAAO,CAAC;IACzB,sDAAsD;IACtD,cAAc,EAAE,OAAO,CAAC;IACxB,+BAA+B;IAC/B,aAAa,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,WAAW,EAAE,OAAO,CAAC;CACtB;AAuGD;;GAEG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IACR,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACA,UAAU,EAAE,CA2Bd;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CA2CA;AAED;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,EAAE,YA2W5B,CAAC;AAEF;;GAEG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAC5B,YAAY,CAGd;AAED,eAAe,cAAc,CAAC"}