@vorionsys/security 1.0.0

package/dist/intent/replay/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../../src/intent/replay/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EACV,EAAE,EACF,MAAM,EACN,UAAU,EACV,UAAU,EACV,SAAS,EACV,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAS7E;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,EAAE,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,UAAU,CAAC;IAClB,UAAU,EAAE;QACV,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,UAAU,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,EAAE,CAAC;IACP,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACjC,UAAU,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,EAAE,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,EAAE,CAAC;IACb,QAAQ,EAAE,EAAE,CAAC;IAEb,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;IAEf,qCAAqC;IACrC,KAAK,EAAE,aAAa,CAAC;IAErB,wCAAwC;IACxC,QAAQ,EAAE,cAAc,EAAE,CAAC;IAE3B,0BAA0B;IAC1B,WAAW,EAAE,mBAAmB,CAAC;IAEjC,0BAA0B;IAC1B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAElC,sCAAsC;IACtC,UAAU,EAAE,SAAS,CAAC;IAEtB,qCAAqC;IACrC,OAAO,EAAE,KAAK,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,4BAA4B;IAC5B,aAAa,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACvC,wBAAwB;IACxB,eAAe,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAC5C,2BAA2B;IAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,aAAa,CAAC;IACrB,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,WAAW,EAAE,mBAAmB,CAAC;IACjC,iBAAiB,EAAE,uBAAuB,CAAC;CAC5C;AAOD;;GAEG;AACH,qBAAa,eAAe;IAC1B;;OAEG;IACG,OAAO,CACX,MAAM,EAAE,MAAM,EACd,SAAS,EAAE;QACT,KAAK,EAAE,UAAU,CAAC;QAClB,KAAK,EAAE,UAAU,CAAC;QAClB,UAAU,CAAC,EAAE;YACX,UAAU,EAAE,MAAM,CAAC;YACnB,UAAU,EAAE,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC;YACjB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;KACH,EACD,QAAQ,EAAE,MAAM,EAAE,EAClB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,cAAc,CAAC;IAgG1B;;OAEG;IACG,GAAG,CAAC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIzD;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IASjE;;OAEG;IACG,OAAO,CACX,UAAU,EAAE,EAAE,EACd,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAwFlC;;OAEG;IACG,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAS9C;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAY3D;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;CAG/B;AAED;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CAEvD"}

package/dist/intent/replay/snapshot.js

@@ -0,0 +1,245 @@
+/**
+ * REPLAY - Snapshot Manager
+ *
+ * Captures and restores system state at intent execution time
+ * for accurate replay and "what-if" analysis.
+ */
+import { randomUUID } from 'node:crypto';
+import { trace, SpanKind, SpanStatusCode } from '@opentelemetry/api';
+import { createLogger } from '../../common/logger.js';
+const logger = createLogger({ component: 'snapshot-manager' });
+// Tracer for snapshot operations
+const TRACER_NAME = 'vorion.replay.snapshot';
+const tracer = trace.getTracer(TRACER_NAME, '1.0.0');
+/**
+ * In-memory snapshot store (should be replaced with persistent storage in production)
+ */
+const snapshotStore = new Map();
+/**
+ * SnapshotManager - Captures and restores system state for replay
+ */
+export class SnapshotManager {
+    /**
+     * Capture a complete system snapshot at the current point in time
+     */
+    async capture(intent, trustData, policies, options = {}) {
+        return tracer.startActiveSpan('snapshot.capture', { kind: SpanKind.INTERNAL }, async (span) => {
+            try {
+                const now = new Date().toISOString();
+                const snapshotId = randomUUID();
+                span.setAttributes({
+                    'snapshot.id': snapshotId,
+                    'snapshot.intent_id': intent.id,
+                    'snapshot.tenant_id': intent.tenantId,
+                    'snapshot.policy_count': policies.length,
+                });
+                // Capture trust snapshot
+                const trustSnapshot = {
+                    entityId: intent.entityId,
+                    score: trustData.score,
+                    level: trustData.level,
+                    components: trustData.components ?? {
+                        behavioral: 0,
+                        compliance: 0,
+                        identity: 0,
+                        context: 0,
+                    },
+                    capturedAt: now,
+                };
+                // Capture policy snapshots
+                const policySnapshots = policies.map((policy) => ({
+                    id: policy.id,
+                    name: policy.name,
+                    namespace: policy.namespace,
+                    version: policy.version,
+                    checksum: policy.checksum,
+                    definition: options.includePolicyDefinitions ? policy.definition : {
+                        version: '1.0',
+                        rules: [],
+                        defaultAction: policy.definition.defaultAction,
+                    },
+                    capturedAt: now,
+                }));
+                // Capture environment snapshot
+                const environmentSnapshot = {
+                    timestamp: now,
+                    timezone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+                    requestId: randomUUID(),
+                    custom: options.customContext,
+                };
+                const snapshot = {
+                    id: snapshotId,
+                    intentId: intent.id,
+                    tenantId: intent.tenantId,
+                    intent: { ...intent },
+                    trust: trustSnapshot,
+                    policies: policySnapshots,
+                    environment: environmentSnapshot,
+                    metadata: options.metadata ?? {},
+                    capturedAt: now,
+                    version: '1.0',
+                };
+                // Store snapshot
+                snapshotStore.set(snapshotId, snapshot);
+                logger.info({
+                    snapshotId,
+                    intentId: intent.id,
+                    policyCount: policies.length,
+                }, 'System snapshot captured');
+                span.setStatus({ code: SpanStatusCode.OK });
+                return snapshot;
+            }
+            catch (error) {
+                span.setStatus({
+                    code: SpanStatusCode.ERROR,
+                    message: error instanceof Error ? error.message : 'Unknown error',
+                });
+                if (error instanceof Error) {
+                    span.recordException(error);
+                }
+                throw error;
+            }
+            finally {
+                span.end();
+            }
+        });
+    }
+    /**
+     * Retrieve a snapshot by ID
+     */
+    async get(snapshotId) {
+        return snapshotStore.get(snapshotId) ?? null;
+    }
+    /**
+     * Retrieve a snapshot by intent ID
+     */
+    async getByIntentId(intentId) {
+        for (const snapshot of snapshotStore.values()) {
+            if (snapshot.intentId === intentId) {
+                return snapshot;
+            }
+        }
+        return null;
+    }
+    /**
+     * Restore a snapshot to create a replay context
+     */
+    async restore(snapshotId, options = {}) {
+        return tracer.startActiveSpan('snapshot.restore', { kind: SpanKind.INTERNAL }, async (span) => {
+            try {
+                span.setAttribute('snapshot.id', snapshotId);
+                const snapshot = await this.get(snapshotId);
+                if (!snapshot) {
+                    logger.warn({ snapshotId }, 'Snapshot not found');
+                    span.setStatus({ code: SpanStatusCode.ERROR, message: 'Snapshot not found' });
+                    return null;
+                }
+                // Apply trust overrides
+                const trust = {
+                    ...snapshot.trust,
+                    ...options.trustOverride,
+                };
+                // Apply policy overrides
+                let policies = [...snapshot.policies];
+                if (options.policyOverrides) {
+                    for (const override of options.policyOverrides) {
+                        const index = policies.findIndex((p) => p.id === override.id);
+                        if (index >= 0) {
+                            policies[index] = { ...policies[index], ...override };
+                        }
+                    }
+                }
+                // Apply environment overrides
+                const environment = {
+                    ...snapshot.environment,
+                    ...options.environmentOverride,
+                };
+                // Build evaluation context for replay
+                const evaluationContext = {
+                    intent: {
+                        ...snapshot.intent,
+                        intentType: snapshot.intent.intentType ?? 'generic',
+                    },
+                    entity: {
+                        id: snapshot.intent.entityId,
+                        type: snapshot.intent.metadata['entityType'] ?? 'agent',
+                        trustScore: trust.score,
+                        trustLevel: trust.level,
+                        attributes: snapshot.intent.metadata,
+                    },
+                    environment: {
+                        timestamp: environment.timestamp,
+                        timezone: environment.timezone,
+                        requestId: environment.requestId,
+                    },
+                    custom: environment.custom,
+                };
+                logger.info({ snapshotId, intentId: snapshot.intentId }, 'Snapshot restored for replay');
+                span.setStatus({ code: SpanStatusCode.OK });
+                return {
+                    intent: snapshot.intent,
+                    trust,
+                    policies,
+                    environment,
+                    evaluationContext,
+                };
+            }
+            catch (error) {
+                span.setStatus({
+                    code: SpanStatusCode.ERROR,
+                    message: error instanceof Error ? error.message : 'Unknown error',
+                });
+                if (error instanceof Error) {
+                    span.recordException(error);
+                }
+                throw error;
+            }
+            finally {
+                span.end();
+            }
+        });
+    }
+    /**
+     * Delete a snapshot
+     */
+    async delete(snapshotId) {
+        const existed = snapshotStore.has(snapshotId);
+        snapshotStore.delete(snapshotId);
+        if (existed) {
+            logger.info({ snapshotId }, 'Snapshot deleted');
+        }
+        return existed;
+    }
+    /**
+     * List all snapshots for a tenant
+     */
+    async listByTenant(tenantId) {
+        const snapshots = [];
+        for (const snapshot of snapshotStore.values()) {
+            if (snapshot.tenantId === tenantId) {
+                snapshots.push(snapshot);
+            }
+        }
+        return snapshots.sort((a, b) => new Date(b.capturedAt).getTime() - new Date(a.capturedAt).getTime());
+    }
+    /**
+     * Clear all snapshots (for testing)
+     */
+    async clear() {
+        snapshotStore.clear();
+        logger.info({}, 'All snapshots cleared');
+    }
+    /**
+     * Get snapshot count
+     */
+    async count() {
+        return snapshotStore.size;
+    }
+}
+/**
+ * Create a new SnapshotManager instance
+ */
+export function createSnapshotManager() {
+    return new SnapshotManager();
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/intent/replay/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../../src/intent/replay/snapshot.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAa,MAAM,oBAAoB,CAAC;AAShF,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAE/D,iCAAiC;AACjC,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AA0GrD;;GAEG;AACH,MAAM,aAAa,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEpD;;GAEG;AACH,MAAM,OAAO,eAAe;IAC1B;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,MAAc,EACd,SASC,EACD,QAAkB,EAClB,UAAkC,EAAE;QAEpC,OAAO,MAAM,CAAC,eAAe,CAC3B,kBAAkB,EAClB,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAC3B,KAAK,EAAE,IAAU,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC;gBAEhC,IAAI,CAAC,aAAa,CAAC;oBACjB,aAAa,EAAE,UAAU;oBACzB,oBAAoB,EAAE,MAAM,CAAC,EAAE;oBAC/B,oBAAoB,EAAE,MAAM,CAAC,QAAQ;oBACrC,uBAAuB,EAAE,QAAQ,CAAC,MAAM;iBACzC,CAAC,CAAC;gBAEH,yBAAyB;gBACzB,MAAM,aAAa,GAAkB;oBACnC,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,KAAK,EAAE,SAAS,CAAC,KAAK;oBACtB,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI;wBAClC,UAAU,EAAE,CAAC;wBACb,UAAU,EAAE,CAAC;wBACb,QAAQ,EAAE,CAAC;wBACX,OAAO,EAAE,CAAC;qBACX;oBACD,UAAU,EAAE,GAAG;iBAChB,CAAC;gBAEF,2BAA2B;gBAC3B,MAAM,eAAe,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;oBAClE,EAAE,EAAE,MAAM,CAAC,EAAE;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI;oBACjB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,UAAU,EAAE,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;wBACjE,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,EAAE;wBACT,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,aAAa;qBAC/C;oBACD,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC,CAAC;gBAEJ,+BAA+B;gBAC/B,MAAM,mBAAmB,GAAwB;oBAC/C,SAAS,EAAE,GAAG;oBACd,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ;oBAC1D,SAAS,EAAE,UAAU,EAAE;oBACvB,MAAM,EAAE,OAAO,CAAC,aAAa;iBAC9B,CAAC;gBAEF,MAAM,QAAQ,GAAmB;oBAC/B,EAAE,EAAE,UAAU;oBACd,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE;oBACrB,KAAK,EAAE,aAAa;oBACpB,QAAQ,EAAE,eAAe;oBACzB,WAAW,EAAE,mBAAmB;oBAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;oBAChC,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,KAAK;iBACf,CAAC;gBAEF,iBAAiB;gBACjB,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAExC,MAAM,CAAC,IAAI,CACT;oBACE,UAAU;oBACV,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,WAAW,EAAE,QAAQ,CAAC,MAAM;iBAC7B,EACD,0BAA0B,CAC3B,CAAC;gBAEF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc,CAAC,KAAK;oBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAClE,CAAC,CAAC;gBACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;oBAC3B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,UAAc;QACtB,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CAAC,QAAY;QAC9B,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,QAAQ,CAAC;YAClB,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CACX,UAAc,EACd,UAAkC,EAAE;QAEpC,OAAO,MAAM,CAAC,eAAe,CAC3B,kBAAkB,EAClB,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAC3B,KAAK,EAAE,IAAU,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;gBAE7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,oBAAoB,CAAC,CAAC;oBAClD,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;oBAC9E,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,wBAAwB;gBACxB,MAAM,KAAK,GAAkB;oBAC3B,GAAG,QAAQ,CAAC,KAAK;oBACjB,GAAG,OAAO,CAAC,aAAa;iBACzB,CAAC;gBAEF,yBAAyB;gBACzB,IAAI,QAAQ,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC5B,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;wBAC/C,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAC9D,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;4BACf,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,EAAoB,CAAC;wBAC1E,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,8BAA8B;gBAC9B,MAAM,WAAW,GAAwB;oBACvC,GAAG,QAAQ,CAAC,WAAW;oBACvB,GAAG,OAAO,CAAC,mBAAmB;iBAC/B,CAAC;gBAEF,sCAAsC;gBACtC,MAAM,iBAAiB,GAA4B;oBACjD,MAAM,EAAE;wBACN,GAAG,QAAQ,CAAC,MAAM;wBAClB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,IAAI,SAAS;qBACpD;oBACD,MAAM,EAAE;wBACN,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;wBAC5B,IAAI,EAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAY,IAAI,OAAO;wBACnE,UAAU,EAAE,KAAK,CAAC,KAAK;wBACvB,UAAU,EAAE,KAAK,CAAC,KAAK;wBACvB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;qBACrC;oBACD,WAAW,EAAE;wBACX,SAAS,EAAE,WAAW,CAAC,SAAS;wBAChC,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,SAAS,EAAE,WAAW,CAAC,SAAS;qBACjC;oBACD,MAAM,EAAE,WAAW,CAAC,MAAM;iBAC3B,CAAC;gBAEF,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,EAC3C,8BAA8B,CAC/B,CAAC;gBAEF,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,KAAK;oBACL,QAAQ;oBACR,WAAW;oBACX,iBAAiB;iBAClB,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,SAAS,CAAC;oBACb,IAAI,EAAE,cAAc,CAAC,KAAK;oBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;iBAClE,CAAC,CAAC;gBACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;oBAC3B,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;gBAC9B,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,UAAc;QACzB,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAY;QAC7B,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;YAC9C,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,aAAa,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,OAAO,aAAa,CAAC,IAAI,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,eAAe,EAAE,CAAC;AAC/B,CAAC"}

package/dist/intent/repository.d.ts

@@ -0,0 +1,198 @@
+import type { NodePgDatabase } from 'drizzle-orm/node-postgres';
+import type { ID, Intent, IntentEvaluationRecord, IntentStatus, TrustLevel, TrustScore } from '../common/types.js';
+import { type Config } from '../common/config.js';
+import { type NewIntentEventRow, type NewIntentEvaluationRow, type NewIntentRow } from './schema.js';
+/**
+ * Dependencies for IntentRepository
+ *
+ * Use these to inject dependencies for testing or custom configurations.
+ * If not provided, defaults to global singletons for backward compatibility.
+ */
+export interface IntentRepositoryDependencies {
+    /** Drizzle database instance */
+    database?: NodePgDatabase;
+    /** Configuration (for encryption settings) */
+    config?: Config;
+}
+/** Default page size when no limit is specified */
+export declare const DEFAULT_PAGE_SIZE = 50;
+/** Maximum allowed page size to prevent unbounded queries */
+export declare const MAX_PAGE_SIZE = 1000;
+/**
+ * Paginated result with metadata for cursor/offset-based pagination
+ */
+export interface PaginatedResult<T> {
+    /** The items in the current page */
+    items: T[];
+    /** Total count of matching items (if available) */
+    total?: number;
+    /** The limit used for this query */
+    limit: number;
+    /** The offset used for this query (for offset-based pagination) */
+    offset?: number;
+    /** Cursor for the next page (for cursor-based pagination) */
+    nextCursor?: ID;
+    /** Whether there are more items after this page */
+    hasMore: boolean;
+}
+export interface ListIntentFilters {
+    tenantId: ID;
+    entityId?: ID;
+    status?: IntentStatus;
+    /** Page size limit (default: DEFAULT_PAGE_SIZE, max: MAX_PAGE_SIZE) */
+    limit?: number;
+    /** Offset for pagination (default: 0) */
+    offset?: number;
+    /** Cursor for pagination (intent ID) - mutually exclusive with offset */
+    cursor?: ID;
+    /** Pre-computed createdAt for cursor to skip lookup query */
+    cursorCreatedAt?: Date;
+    /** Include soft-deleted intents */
+    includeDeleted?: boolean;
+    /**
+     * If true, throw an error when limit exceeds MAX_PAGE_SIZE instead of silently capping.
+     * Default: false (silently cap to MAX_PAGE_SIZE for backwards compatibility)
+     */
+    strictLimitValidation?: boolean;
+}
+export interface IntentEventRecord {
+    id: ID;
+    intentId: ID;
+    eventType: string;
+    payload: Record<string, unknown>;
+    occurredAt: string;
+    hash?: string | null;
+    previousHash?: string | null;
+}
+export declare class IntentRepository {
+    private db;
+    private encryptIfEnabled;
+    /**
+     * Create a new IntentRepository instance.
+     *
+     * @param deps - Optional dependencies for dependency injection.
+     *               If not provided, uses global singletons (backward compatible).
+     *
+     * @example
+     * // Default usage (backward compatible)
+     * const repo = new IntentRepository();
+     *
+     * @example
+     * // With dependency injection (for testing)
+     * const repo = new IntentRepository({
+     *   database: mockDb,
+     *   config: testConfig,
+     * });
+     */
+    constructor(deps?: IntentRepositoryDependencies);
+    /**
+     * Create intent with encryption and return the created intent
+     */
+    createIntent(data: NewIntentRow): Promise<Intent>;
+    /**
+     * Create intent within a transaction, including initial event
+     */
+    createIntentWithEvent(intentData: NewIntentRow, eventData: Omit<NewIntentEventRow, 'intentId'>): Promise<Intent>;
+    /**
+     * Create multiple intents in a single batch operation.
+     *
+     * This method provides optimized performance for bulk inserts by using
+     * a single database transaction. Note that individual intents will not
+     * have initial events recorded - use this for high-performance scenarios
+     * where event tracking can be handled separately.
+     *
+     * @param intentsData - Array of intent data to insert
+     * @returns Array of created intents
+     */
+    createIntentsBatch(intentsData: NewIntentRow[]): Promise<Intent[]>;
+    findById(id: ID, tenantId: ID): Promise<Intent | null>;
+    /**
+     * Find by ID including soft-deleted (for audit purposes)
+     */
+    findByIdIncludeDeleted(id: ID, tenantId: ID): Promise<Intent | null>;
+    findByDedupeHash(hash: string, tenantId: ID): Promise<Intent | null>;
+    updateStatus(id: ID, tenantId: ID, status: IntentStatus): Promise<Intent | null>;
+    /**
+     * Cancel an intent with reason
+     */
+    cancelIntent(id: ID, tenantId: ID, reason: string): Promise<Intent | null>;
+    /**
+     * Soft delete an intent (GDPR compliant)
+     */
+    softDelete(id: ID, tenantId: ID): Promise<Intent | null>;
+    /**
+     * Permanently delete soft-deleted intents older than retention period
+     * CRITICAL: Only deletes records where deletedAt IS NOT NULL to prevent accidental deletion
+     */
+    purgeDeletedIntents(retentionDays: number): Promise<number>;
+    /**
+     * List intents with cursor-based or offset-based pagination.
+     * Enforces strict pagination limits to prevent unbounded queries.
+     * Uses statement timeout to prevent long-running queries.
+     *
+     * @param filters - Query filters and pagination options
+     * @returns Paginated result with items and pagination metadata
+     * @throws VorionError if strictLimitValidation is true and limit > MAX_PAGE_SIZE
+     * @throws StatementTimeoutError if the query exceeds the timeout
+     */
+    listIntents(filters: ListIntentFilters): Promise<PaginatedResult<Intent>>;
+    /**
+     * Record event with cryptographic hash for tamper detection
+     */
+    recordEvent(event: NewIntentEventRow): Promise<void>;
+    /**
+     * Get recent events for an intent with pagination limits.
+     *
+     * @param intentId - The intent ID to get events for
+     * @param limit - Page size limit (default: DEFAULT_PAGE_SIZE, max: MAX_PAGE_SIZE)
+     * @param offset - Offset for pagination (default: 0)
+     * @returns Paginated result with events and pagination metadata
+     */
+    getRecentEvents(intentId: ID, limit?: number, offset?: number): Promise<PaginatedResult<IntentEventRecord>>;
+    /**
+     * Verify event chain integrity
+     */
+    verifyEventChain(intentId: ID): Promise<{
+        valid: boolean;
+        invalidAt?: number;
+        error?: string;
+    }>;
+    updateTrustMetadata(intentId: ID, tenantId: ID, trustSnapshot: Record<string, unknown> | null, trustLevel?: TrustLevel, trustScore?: TrustScore): Promise<Intent | null>;
+    recordEvaluation(evaluation: NewIntentEvaluationRow): Promise<IntentEvaluationRecord>;
+    /**
+     * List evaluations for an intent with pagination limits.
+     *
+     * @param intentId - The intent ID to get evaluations for
+     * @param limit - Page size limit (default: DEFAULT_PAGE_SIZE, max: MAX_PAGE_SIZE)
+     * @param offset - Offset for pagination (default: 0)
+     * @returns Paginated result with evaluations and pagination metadata
+     */
+    listEvaluations(intentId: ID, limit?: number, offset?: number): Promise<PaginatedResult<IntentEvaluationRecord>>;
+    countActiveIntents(tenantId: ID): Promise<number>;
+    /**
+     * Delete old events for retention compliance
+     */
+    deleteOldEvents(retentionDays: number): Promise<number>;
+}
+/**
+ * Create a new IntentRepository instance with dependency injection.
+ *
+ * This is the preferred way to create repositories in production code
+ * as it makes dependencies explicit and testable.
+ *
+ * @param deps - Optional dependencies. If not provided, uses global singletons.
+ * @returns Configured IntentRepository instance
+ *
+ * @example
+ * // Default usage (backward compatible)
+ * const repo = createIntentRepository();
+ *
+ * @example
+ * // With custom dependencies
+ * const repo = createIntentRepository({
+ *   database: customDb,
+ *   config: customConfig,
+ * });
+ */
+export declare function createIntentRepository(deps?: IntentRepositoryDependencies): IntentRepository;
+//# sourceMappingURL=repository.d.ts.map

package/dist/intent/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../src/intent/repository.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EACV,EAAE,EACF,MAAM,EACN,sBAAsB,EACtB,YAAY,EACZ,UAAU,EACV,UAAU,EAEX,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EAAa,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAc7D,OAAO,EAML,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAMrB;;;;;GAKG;AACH,MAAM,WAAW,4BAA4B;IAC3C,gCAAgC;IAChC,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAMD,mDAAmD;AACnD,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,6DAA6D;AAC7D,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,oCAAoC;IACpC,KAAK,EAAE,CAAC,EAAE,CAAC;IACX,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oCAAoC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,UAAU,CAAC,EAAE,EAAE,CAAC;IAChB,mDAAmD;IACnD,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,EAAE,CAAC;IACb,QAAQ,CAAC,EAAE,EAAE,CAAC;IACd,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,EAAE,CAAC;IACZ,6DAA6D;IAC7D,eAAe,CAAC,EAAE,IAAI,CAAC;IACvB,mCAAmC;IACnC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,EAAE,CAAC;IACP,QAAQ,EAAE,EAAE,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAqDD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,EAAE,CAAiB;IAC3B,OAAO,CAAC,gBAAgB,CAA6C;IAErE;;;;;;;;;;;;;;;;OAgBG;gBACS,IAAI,GAAE,4BAAiC;IAcnD;;OAEG;IACG,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAYvD;;OAEG;IACG,qBAAqB,CACzB,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAC7C,OAAO,CAAC,MAAM,CAAC;IA4BlB;;;;;;;;;;OAUG;IACG,kBAAkB,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAelE,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAe5D;;OAEG;IACG,sBAAsB,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASpE,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAepE,YAAY,CAChB,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,EAAE,EACZ,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAgBzB;;OAEG;IACG,YAAY,CAChB,EAAE,EAAE,EAAE,EACN,QAAQ,EAAE,EAAE,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsBzB;;OAEG;IACG,UAAU,CAAC,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAsB9D;;;OAGG;IACG,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiBjE;;;;;;;;;OASG;IACG,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAkG/E;;OAEG;IACG,WAAW,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB1D;;;;;;;OAOG;IACG,eAAe,CACnB,QAAQ,EAAE,EAAE,EACZ,KAAK,GAAE,MAA0B,EACjC,MAAM,GAAE,MAAU,GACjB,OAAO,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;IAmC9C;;OAEG;IACG,gBAAgB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC;QAC5C,KAAK,EAAE,OAAO,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IA6CI,mBAAmB,CACvB,QAAQ,EAAE,EAAE,EACZ,QAAQ,EAAE,EAAE,EACZ,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,EAC7C,UAAU,CAAC,EAAE,UAAU,EACvB,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqBnB,gBAAgB,CACpB,UAAU,EAAE,sBAAsB,GACjC,OAAO,CAAC,sBAAsB,CAAC;IASlC;;;;;;;OAOG;IACG,eAAe,CACnB,QAAQ,EAAE,EAAE,EACZ,KAAK,GAAE,MAA0B,EACjC,MAAM,GAAE,MAAU,GACjB,OAAO,CAAC,eAAe,CAAC,sBAAsB,CAAC,CAAC;IAyB7C,kBAAkB,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;IAsBvD;;OAEG;IACG,eAAe,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAW9D;AAMD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,GAAE,4BAAiC,GACtC,gBAAgB,CAElB"}