anantham-v2 2.0.0-alpha.1 → 2.0.2

package/dist/governance/air-gapped-policy-enforcer.d.ts

@@ -0,0 +1,106 @@
+import { z } from "zod";
+import { EventStore } from "../event-state/event-store.js";
+export declare const AirGappedModeSchema: z.ZodEnum<["ONLINE", "RESTRICTED_EGRESS", "STRICT_OFFLINE", "AIR_GAPPED_ISOLATED"]>;
+export type AirGappedMode = z.infer<typeof AirGappedModeSchema>;
+export declare const EgressAttemptSchema: z.ZodObject<{
+    targetUrl: z.ZodString;
+    protocol: z.ZodDefault<z.ZodString>;
+    toolName: z.ZodOptional<z.ZodString>;
+    projectId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    actor: z.ZodDefault<z.ZodString>;
+    timestamp: z.ZodDefault<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    actor: string;
+    timestamp: string;
+    targetUrl: string;
+    protocol: string;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    toolName?: string | undefined;
+}, {
+    targetUrl: string;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    actor?: string | undefined;
+    timestamp?: string | undefined;
+    toolName?: string | undefined;
+    protocol?: string | undefined;
+}>;
+export type EgressAttempt = z.infer<typeof EgressAttemptSchema>;
+export declare const EgressDecisionSchema: z.ZodObject<{
+    allowed: z.ZodBoolean;
+    mode: z.ZodEnum<["ONLINE", "RESTRICTED_EGRESS", "STRICT_OFFLINE", "AIR_GAPPED_ISOLATED"]>;
+    targetUrl: z.ZodString;
+    ruleMatched: z.ZodString;
+    violationReason: z.ZodOptional<z.ZodString>;
+    timestamp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    timestamp: string;
+    mode: "ONLINE" | "RESTRICTED_EGRESS" | "STRICT_OFFLINE" | "AIR_GAPPED_ISOLATED";
+    allowed: boolean;
+    targetUrl: string;
+    ruleMatched: string;
+    violationReason?: string | undefined;
+}, {
+    timestamp: string;
+    mode: "ONLINE" | "RESTRICTED_EGRESS" | "STRICT_OFFLINE" | "AIR_GAPPED_ISOLATED";
+    allowed: boolean;
+    targetUrl: string;
+    ruleMatched: string;
+    violationReason?: string | undefined;
+}>;
+export type EgressDecision = z.infer<typeof EgressDecisionSchema>;
+export declare const AirGappedPolicyConfigSchema: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodEnum<["ONLINE", "RESTRICTED_EGRESS", "STRICT_OFFLINE", "AIR_GAPPED_ISOLATED"]>>;
+    allowedEgressDomains: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    allowLocalhost: z.ZodDefault<z.ZodBoolean>;
+    enforceAirGappedToolSandbox: z.ZodDefault<z.ZodBoolean>;
+    blockExternalModelEndpoints: z.ZodDefault<z.ZodBoolean>;
+    localModelEndpoint: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    mode: "ONLINE" | "RESTRICTED_EGRESS" | "STRICT_OFFLINE" | "AIR_GAPPED_ISOLATED";
+    allowedEgressDomains: string[];
+    allowLocalhost: boolean;
+    enforceAirGappedToolSandbox: boolean;
+    blockExternalModelEndpoints: boolean;
+    localModelEndpoint?: string | undefined;
+}, {
+    mode?: "ONLINE" | "RESTRICTED_EGRESS" | "STRICT_OFFLINE" | "AIR_GAPPED_ISOLATED" | undefined;
+    allowedEgressDomains?: string[] | undefined;
+    allowLocalhost?: boolean | undefined;
+    enforceAirGappedToolSandbox?: boolean | undefined;
+    blockExternalModelEndpoints?: boolean | undefined;
+    localModelEndpoint?: string | undefined;
+}>;
+export type AirGappedPolicyConfig = z.infer<typeof AirGappedPolicyConfigSchema>;
+export declare class AirGappedViolationError extends Error {
+    readonly decision: EgressDecision;
+    constructor(message: string, decision: EgressDecision);
+}
+export interface AirGappedPolicyEnforcerOptions {
+    eventStore?: EventStore;
+    config?: Partial<AirGappedPolicyConfig>;
+}
+export declare class AirGappedPolicyEnforcer {
+    private readonly eventStore?;
+    private config;
+    constructor(options?: AirGappedPolicyEnforcerOptions);
+    getMode(): AirGappedMode;
+    setMode(mode: AirGappedMode): void;
+    updateConfig(newConfig: Partial<AirGappedPolicyConfig>): void;
+    private isLocalhost;
+    private isDomainAllowed;
+    evaluateEgress(attempt: EgressAttempt): EgressDecision;
+    assertEgressAllowed(attempt: EgressAttempt): void;
+    interceptModelRequest(endpointUrl: string, providerId: string): {
+        allowed: boolean;
+        redirectUrl?: string;
+        violationReason?: string;
+    };
+    interceptToolExecution(toolName: string, targetEndpoint?: string): {
+        allowed: boolean;
+        violationReason?: string;
+    };
+}
+//# sourceMappingURL=air-gapped-policy-enforcer.d.ts.map

package/dist/governance/air-gapped-policy-enforcer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"air-gapped-policy-enforcer.d.ts","sourceRoot":"","sources":["../../src/governance/air-gapped-policy-enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE3D,eAAO,MAAM,mBAAmB,qFAK9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;EAQ9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;EAOtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,qBAAa,uBAAwB,SAAQ,KAAK;IAChD,SAAgB,QAAQ,EAAE,cAAc,CAAC;gBAE7B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc;CAKtD;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzC;AAED,qBAAa,uBAAuB;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,OAAO,CAAC,MAAM,CAAwB;gBAE1B,OAAO,GAAE,8BAAmC;IAKjD,OAAO,IAAI,aAAa;IAIxB,OAAO,CAAC,IAAI,EAAE,aAAa,GAAG,IAAI;IAIlC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,qBAAqB,CAAC,GAAG,IAAI;IAIpE,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,eAAe;IAmBhB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc;IA2GtD,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI;IAOjD,qBAAqB,CAC1B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,GACjB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;IAoChE,sBAAsB,CAC3B,QAAQ,EAAE,MAAM,EAChB,cAAc,CAAC,EAAE,MAAM,GACtB;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;CAwBlD"}

package/dist/governance/air-gapped-policy-enforcer.js

@@ -0,0 +1,243 @@
+import { z } from "zod";
+export const AirGappedModeSchema = z.enum([
+    "ONLINE",
+    "RESTRICTED_EGRESS",
+    "STRICT_OFFLINE",
+    "AIR_GAPPED_ISOLATED",
+]);
+export const EgressAttemptSchema = z.object({
+    targetUrl: z.string(),
+    protocol: z.string().default("https:"),
+    toolName: z.string().optional(),
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    actor: z.string().default("agent"),
+    timestamp: z.string().default(() => new Date().toISOString()),
+});
+export const EgressDecisionSchema = z.object({
+    allowed: z.boolean(),
+    mode: AirGappedModeSchema,
+    targetUrl: z.string(),
+    ruleMatched: z.string(),
+    violationReason: z.string().optional(),
+    timestamp: z.string(),
+});
+export const AirGappedPolicyConfigSchema = z.object({
+    mode: AirGappedModeSchema.default("ONLINE"),
+    allowedEgressDomains: z.array(z.string()).default([]),
+    allowLocalhost: z.boolean().default(true),
+    enforceAirGappedToolSandbox: z.boolean().default(true),
+    blockExternalModelEndpoints: z.boolean().default(false),
+    localModelEndpoint: z.string().optional(),
+});
+export class AirGappedViolationError extends Error {
+    decision;
+    constructor(message, decision) {
+        super(message);
+        this.name = "AirGappedViolationError";
+        this.decision = decision;
+    }
+}
+export class AirGappedPolicyEnforcer {
+    eventStore;
+    config;
+    constructor(options = {}) {
+        this.eventStore = options.eventStore;
+        this.config = AirGappedPolicyConfigSchema.parse(options.config ?? {});
+    }
+    getMode() {
+        return this.config.mode;
+    }
+    setMode(mode) {
+        this.config.mode = mode;
+    }
+    updateConfig(newConfig) {
+        this.config = AirGappedPolicyConfigSchema.parse({ ...this.config, ...newConfig });
+    }
+    isLocalhost(urlStr) {
+        try {
+            const u = new URL(urlStr.includes("://") ? urlStr : "http://" + urlStr);
+            const host = u.hostname.toLowerCase();
+            return host === "localhost" || host === "127.0.0.1" || host === "::1" || host.endsWith(".localhost");
+        }
+        catch {
+            return false;
+        }
+    }
+    isDomainAllowed(urlStr) {
+        try {
+            const u = new URL(urlStr.includes("://") ? urlStr : "http://" + urlStr);
+            const host = u.hostname.toLowerCase();
+            for (const allowed of this.config.allowedEgressDomains) {
+                const allowedNorm = allowed.toLowerCase().trim();
+                if (allowedNorm.startsWith("*.")) {
+                    const rootDomain = allowedNorm.slice(2);
+                    if (host === rootDomain || host.endsWith("." + rootDomain))
+                        return true;
+                }
+                else if (host === allowedNorm) {
+                    return true;
+                }
+            }
+            return false;
+        }
+        catch {
+            return false;
+        }
+    }
+    evaluateEgress(attempt) {
+        const validated = EgressAttemptSchema.parse(attempt);
+        const now = new Date().toISOString();
+        if (this.config.mode === "ONLINE") {
+            return {
+                allowed: true,
+                mode: this.config.mode,
+                targetUrl: validated.targetUrl,
+                ruleMatched: "DEFAULT_ALLOW_ONLINE",
+                timestamp: now,
+            };
+        }
+        const isLocal = this.isLocalhost(validated.targetUrl);
+        if (this.config.mode === "AIR_GAPPED_ISOLATED" || this.config.mode === "STRICT_OFFLINE") {
+            if (this.config.allowLocalhost && isLocal) {
+                return {
+                    allowed: true,
+                    mode: this.config.mode,
+                    targetUrl: validated.targetUrl,
+                    ruleMatched: "ALLOW_LOCALHOST_ONLY",
+                    timestamp: now,
+                };
+            }
+            const decision = {
+                allowed: false,
+                mode: this.config.mode,
+                targetUrl: validated.targetUrl,
+                ruleMatched: "BLOCK_ALL_EXTERNAL_EGRESS",
+                violationReason: "AIR_GAPPED_POLICY_VIOLATION: Strict offline / air-gapped isolation mode blocks external network destination: " + validated.targetUrl,
+                timestamp: now,
+            };
+            if (this.eventStore) {
+                this.eventStore.append({
+                    id: "evt_egress_blk_" + Date.now(),
+                    schemaVersion: 1,
+                    projectId: validated.projectId,
+                    sessionId: validated.sessionId,
+                    type: "governance.egress_blocked",
+                    actor: "system",
+                    timestamp: now,
+                    payload: {
+                        targetUrl: validated.targetUrl,
+                        toolName: validated.toolName,
+                        mode: this.config.mode,
+                    },
+                });
+            }
+            return decision;
+        }
+        // RESTRICTED_EGRESS mode
+        if (isLocal && this.config.allowLocalhost) {
+            return {
+                allowed: true,
+                mode: this.config.mode,
+                targetUrl: validated.targetUrl,
+                ruleMatched: "ALLOW_LOCALHOST",
+                timestamp: now,
+            };
+        }
+        const domainAllowed = this.isDomainAllowed(validated.targetUrl);
+        if (domainAllowed) {
+            return {
+                allowed: true,
+                mode: this.config.mode,
+                targetUrl: validated.targetUrl,
+                ruleMatched: "ALLOWLISTED_EGRESS_DOMAIN",
+                timestamp: now,
+            };
+        }
+        const decision = {
+            allowed: false,
+            mode: this.config.mode,
+            targetUrl: validated.targetUrl,
+            ruleMatched: "UNLISTED_EGRESS_DOMAIN",
+            violationReason: "RESTRICTED_EGRESS_POLICY_VIOLATION: Destination " + validated.targetUrl + " is not in the approved egress domains whitelist.",
+            timestamp: now,
+        };
+        if (this.eventStore) {
+            this.eventStore.append({
+                id: "evt_egress_blk_" + Date.now(),
+                schemaVersion: 1,
+                projectId: validated.projectId,
+                sessionId: validated.sessionId,
+                type: "governance.egress_blocked",
+                actor: "system",
+                timestamp: now,
+                payload: {
+                    targetUrl: validated.targetUrl,
+                    toolName: validated.toolName,
+                    mode: this.config.mode,
+                },
+            });
+        }
+        return decision;
+    }
+    assertEgressAllowed(attempt) {
+        const decision = this.evaluateEgress(attempt);
+        if (!decision.allowed) {
+            throw new AirGappedViolationError(decision.violationReason || "Egress prohibited", decision);
+        }
+    }
+    interceptModelRequest(endpointUrl, providerId) {
+        if (this.config.mode === "ONLINE") {
+            return { allowed: true };
+        }
+        const isLocal = this.isLocalhost(endpointUrl);
+        if (isLocal) {
+            return { allowed: true };
+        }
+        if (this.config.blockExternalModelEndpoints || this.config.mode === "AIR_GAPPED_ISOLATED" || this.config.mode === "STRICT_OFFLINE") {
+            if (this.config.localModelEndpoint) {
+                return {
+                    allowed: true,
+                    redirectUrl: this.config.localModelEndpoint,
+                };
+            }
+            return {
+                allowed: false,
+                violationReason: "External AI model endpoint call to " + endpointUrl + " (" + providerId + ") blocked by air-gapped policy.",
+            };
+        }
+        if (this.config.mode === "RESTRICTED_EGRESS") {
+            if (this.isDomainAllowed(endpointUrl)) {
+                return { allowed: true };
+            }
+            return {
+                allowed: false,
+                violationReason: "Model endpoint " + endpointUrl + " not in approved egress domains.",
+            };
+        }
+        return { allowed: true };
+    }
+    interceptToolExecution(toolName, targetEndpoint) {
+        if (this.config.mode === "ONLINE") {
+            return { allowed: true };
+        }
+        const networkTools = ["web_search", "fetch_url", "http_request", "read_url_content", "curl", "wget"];
+        if (networkTools.includes(toolName.toLowerCase())) {
+            if (!targetEndpoint) {
+                return {
+                    allowed: false,
+                    violationReason: "Network tool " + toolName + " is forbidden under " + this.config.mode + " mode without a verified local endpoint.",
+                };
+            }
+            const egressDec = this.evaluateEgress({ targetUrl: targetEndpoint, toolName, protocol: "https:", actor: "agent", timestamp: new Date().toISOString() });
+            if (!egressDec.allowed) {
+                return {
+                    allowed: false,
+                    violationReason: egressDec.violationReason,
+                };
+            }
+        }
+        return { allowed: true };
+    }
+}
+//# sourceMappingURL=air-gapped-policy-enforcer.js.map

package/dist/governance/air-gapped-policy-enforcer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"air-gapped-policy-enforcer.js","sourceRoot":"","sources":["../../src/governance/air-gapped-policy-enforcer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,QAAQ;IACR,mBAAmB;IACnB,gBAAgB;IAChB,qBAAqB;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;CAC9D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3C,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtD,2BAA2B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC;AAGH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChC,QAAQ,CAAiB;IAEzC,YAAY,OAAe,EAAE,QAAwB;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAOD,MAAM,OAAO,uBAAuB;IACjB,UAAU,CAAc;IACjC,MAAM,CAAwB;IAEtC,YAAY,UAA0C,EAAE;QACtD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAEM,OAAO;QACZ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;IAC1B,CAAC;IAEM,OAAO,CAAC,IAAmB;QAChC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,CAAC;IAEM,YAAY,CAAC,SAAyC;QAC3D,IAAI,CAAC,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,SAAS,EAAE,CAAC,CAAC;IACpF,CAAC;IAEO,WAAW,CAAC,MAAc;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAc;QACpC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,MAAM,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YACtC,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;gBACjD,IAAI,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,MAAM,UAAU,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACxC,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,UAAU,CAAC;wBAAE,OAAO,IAAI,CAAC;gBAC1E,CAAC;qBAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;oBAChC,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEM,cAAc,CAAC,OAAsB;QAC1C,MAAM,SAAS,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,sBAAsB;gBACnC,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEtD,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACxF,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,EAAE,CAAC;gBAC1C,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;oBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,WAAW,EAAE,sBAAsB;oBACnC,SAAS,EAAE,GAAG;iBACf,CAAC;YACJ,CAAC;YAED,MAAM,QAAQ,GAAmB;gBAC/B,OAAO,EAAE,KAAK;gBACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,2BAA2B;gBACxC,eAAe,EAAE,+GAA+G,GAAG,SAAS,CAAC,SAAS;gBACtJ,SAAS,EAAE,GAAG;aACf,CAAC;YAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBACrB,EAAE,EAAE,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE;oBAClC,aAAa,EAAE,CAAC;oBAChB,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,IAAI,EAAE,2BAA2B;oBACjC,KAAK,EAAE,QAAQ;oBACf,SAAS,EAAE,GAAG;oBACd,OAAO,EAAE;wBACP,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;qBACvB;iBACF,CAAC,CAAC;YACL,CAAC;YAED,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,yBAAyB;QACzB,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1C,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;gBACtB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,WAAW,EAAE,2BAA2B;gBACxC,SAAS,EAAE,GAAG;aACf,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAmB;YAC/B,OAAO,EAAE,KAAK;YACd,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YACtB,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,WAAW,EAAE,wBAAwB;YACrC,eAAe,EAAE,kDAAkD,GAAG,SAAS,CAAC,SAAS,GAAG,mDAAmD;YAC/I,SAAS,EAAE,GAAG;SACf,CAAC;QAEF,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBACrB,EAAE,EAAE,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE;gBAClC,aAAa,EAAE,CAAC;gBAChB,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,IAAI,EAAE,2BAA2B;gBACjC,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,GAAG;gBACd,OAAO,EAAE;oBACP,SAAS,EAAE,SAAS,CAAC,SAAS;oBAC9B,QAAQ,EAAE,SAAS,CAAC,QAAQ;oBAC5B,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;iBACvB;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,mBAAmB,CAAC,OAAsB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,MAAM,IAAI,uBAAuB,CAAC,QAAQ,CAAC,eAAe,IAAI,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAEM,qBAAqB,CAC1B,WAAmB,EACnB,UAAkB;QAElB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,2BAA2B,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,qBAAqB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACnI,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBACnC,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;iBAC5C,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,qCAAqC,GAAG,WAAW,GAAG,IAAI,GAAG,UAAU,GAAG,iCAAiC;aAC7H,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,eAAe,EAAE,iBAAiB,GAAG,WAAW,GAAG,kCAAkC;aACtF,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAEM,sBAAsB,CAC3B,QAAgB,EAChB,cAAuB;QAEvB,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrG,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,eAAe,EAAE,eAAe,GAAG,QAAQ,GAAG,sBAAsB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,0CAA0C;iBACrI,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACxJ,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;gBACvB,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,eAAe,EAAE,SAAS,CAAC,eAAe;iBAC3C,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;CACF"}

package/dist/governance/data-retention-manager.d.ts

@@ -0,0 +1,109 @@
+import { z } from "zod";
+import { SqliteEngine } from "../persistence/sqlite-engine.js";
+import { EventStore } from "../event-state/event-store.js";
+export declare const QuotaPolicySchema: z.ZodObject<{
+    maxDatabaseSizeBytes: z.ZodDefault<z.ZodNumber>;
+    maxEventsPerSession: z.ZodDefault<z.ZodNumber>;
+    maxArtifactSizeBytes: z.ZodDefault<z.ZodNumber>;
+    maxArtifactsPerSession: z.ZodDefault<z.ZodNumber>;
+    retentionDays: z.ZodDefault<z.ZodNumber>;
+    enforcementMode: z.ZodDefault<z.ZodEnum<["soft_warning", "hard_reject"]>>;
+}, "strip", z.ZodTypeAny, {
+    maxDatabaseSizeBytes: number;
+    maxEventsPerSession: number;
+    maxArtifactSizeBytes: number;
+    maxArtifactsPerSession: number;
+    retentionDays: number;
+    enforcementMode: "soft_warning" | "hard_reject";
+}, {
+    maxDatabaseSizeBytes?: number | undefined;
+    maxEventsPerSession?: number | undefined;
+    maxArtifactSizeBytes?: number | undefined;
+    maxArtifactsPerSession?: number | undefined;
+    retentionDays?: number | undefined;
+    enforcementMode?: "soft_warning" | "hard_reject" | undefined;
+}>;
+export type QuotaPolicy = z.infer<typeof QuotaPolicySchema>;
+export declare const QuotaUsageSchema: z.ZodObject<{
+    sessionId: z.ZodString;
+    projectId: z.ZodOptional<z.ZodString>;
+    currentEventsCount: z.ZodNumber;
+    currentArtifactCount: z.ZodNumber;
+    currentArtifactSizeBytes: z.ZodNumber;
+    violations: z.ZodArray<z.ZodString, "many">;
+    withinLimits: z.ZodBoolean;
+    mode: z.ZodEnum<["soft_warning", "hard_reject"]>;
+}, "strip", z.ZodTypeAny, {
+    sessionId: string;
+    mode: "soft_warning" | "hard_reject";
+    currentEventsCount: number;
+    currentArtifactCount: number;
+    currentArtifactSizeBytes: number;
+    violations: string[];
+    withinLimits: boolean;
+    projectId?: string | undefined;
+}, {
+    sessionId: string;
+    mode: "soft_warning" | "hard_reject";
+    currentEventsCount: number;
+    currentArtifactCount: number;
+    currentArtifactSizeBytes: number;
+    violations: string[];
+    withinLimits: boolean;
+    projectId?: string | undefined;
+}>;
+export type QuotaUsage = z.infer<typeof QuotaUsageSchema>;
+export declare const RetentionPurgeReportSchema: z.ZodObject<{
+    scannedSessions: z.ZodNumber;
+    purgedSessions: z.ZodNumber;
+    purgedEventsCount: z.ZodNumber;
+    purgedArtifactsCount: z.ZodNumber;
+    reclaimedBytes: z.ZodNumber;
+    dryRun: z.ZodBoolean;
+    timestamp: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    timestamp: string;
+    dryRun: boolean;
+    scannedSessions: number;
+    purgedSessions: number;
+    purgedEventsCount: number;
+    purgedArtifactsCount: number;
+    reclaimedBytes: number;
+}, {
+    timestamp: string;
+    dryRun: boolean;
+    scannedSessions: number;
+    purgedSessions: number;
+    purgedEventsCount: number;
+    purgedArtifactsCount: number;
+    reclaimedBytes: number;
+}>;
+export type RetentionPurgeReport = z.infer<typeof RetentionPurgeReportSchema>;
+export declare class QuotaExceededError extends Error {
+    readonly usage: QuotaUsage;
+    constructor(message: string, usage: QuotaUsage);
+}
+export interface DataRetentionManagerOptions {
+    engine: SqliteEngine;
+    eventStore?: EventStore;
+    policy?: Partial<QuotaPolicy>;
+}
+export declare class DataRetentionManager {
+    private readonly engine;
+    private readonly eventStore?;
+    readonly policy: QuotaPolicy;
+    constructor(options: DataRetentionManagerOptions);
+    checkQuota(sessionId: string, projectId?: string): Promise<QuotaUsage>;
+    assertQuotaWithinLimits(sessionId: string, projectId?: string): Promise<void>;
+    enforceRetentionPolicies(options?: {
+        projectId?: string;
+        dryRun?: boolean;
+        now?: number;
+    }): Promise<RetentionPurgeReport>;
+    exportProjectAuditLog(projectId: string): Promise<{
+        projectId: string;
+        eventsCount: number;
+        data: string;
+    }>;
+}
+//# sourceMappingURL=data-retention-manager.d.ts.map

package/dist/governance/data-retention-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-retention-manager.d.ts","sourceRoot":"","sources":["../../src/governance/data-retention-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAE3D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;EAO5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;EAQrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,KAAK,EAAE,UAAU,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU;CAK/C;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,YAAY,CAAC;IACrB,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CAC/B;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAa;IACzC,SAAgB,MAAM,EAAE,WAAW,CAAC;gBAExB,OAAO,EAAE,2BAA2B;IAMnC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IA2CtE,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU7E,wBAAwB,CAAC,OAAO,CAAC,EAAE;QAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,GAAG,CAAC,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0EpB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAYzH"}

package/dist/governance/data-retention-manager.js

@@ -0,0 +1,167 @@
+import { z } from "zod";
+export const QuotaPolicySchema = z.object({
+    maxDatabaseSizeBytes: z.number().int().positive().default(10 * 1024 * 1024 * 1024),
+    maxEventsPerSession: z.number().int().positive().default(10_000),
+    maxArtifactSizeBytes: z.number().int().positive().default(500 * 1024 * 1024),
+    maxArtifactsPerSession: z.number().int().positive().default(500),
+    retentionDays: z.number().int().positive().default(90),
+    enforcementMode: z.enum(["soft_warning", "hard_reject"]).default("hard_reject"),
+});
+export const QuotaUsageSchema = z.object({
+    sessionId: z.string(),
+    projectId: z.string().optional(),
+    currentEventsCount: z.number().int().nonnegative(),
+    currentArtifactCount: z.number().int().nonnegative(),
+    currentArtifactSizeBytes: z.number().int().nonnegative(),
+    violations: z.array(z.string()),
+    withinLimits: z.boolean(),
+    mode: z.enum(["soft_warning", "hard_reject"]),
+});
+export const RetentionPurgeReportSchema = z.object({
+    scannedSessions: z.number().int().nonnegative(),
+    purgedSessions: z.number().int().nonnegative(),
+    purgedEventsCount: z.number().int().nonnegative(),
+    purgedArtifactsCount: z.number().int().nonnegative(),
+    reclaimedBytes: z.number().int().nonnegative(),
+    dryRun: z.boolean(),
+    timestamp: z.string(),
+});
+export class QuotaExceededError extends Error {
+    usage;
+    constructor(message, usage) {
+        super(message);
+        this.name = "QuotaExceededError";
+        this.usage = usage;
+    }
+}
+export class DataRetentionManager {
+    engine;
+    eventStore;
+    policy;
+    constructor(options) {
+        this.engine = options.engine;
+        this.eventStore = options.eventStore;
+        this.policy = QuotaPolicySchema.parse(options.policy ?? {});
+    }
+    async checkQuota(sessionId, projectId) {
+        let currentEventsCount = 0;
+        try {
+            const row = this.engine.raw
+                .prepare("SELECT COUNT(*) as cnt FROM events WHERE session_id = ?;")
+                .get(sessionId);
+            currentEventsCount = Number(row?.cnt ?? 0);
+        }
+        catch { }
+        let currentArtifactCount = 0;
+        let currentArtifactSizeBytes = 0;
+        try {
+            const row = this.engine.raw
+                .prepare("SELECT COUNT(*) as cnt, COALESCE(SUM(LENGTH(content_uri)), 0) as total_size FROM artifacts WHERE session_id = ?;")
+                .get(sessionId);
+            currentArtifactCount = Number(row?.cnt ?? 0);
+            currentArtifactSizeBytes = Number(row?.total_size ?? 0);
+        }
+        catch { }
+        const violations = [];
+        if (currentEventsCount >= this.policy.maxEventsPerSession) {
+            violations.push("EVENT_QUOTA_EXCEEDED: Session has " + currentEventsCount + " events (max " + this.policy.maxEventsPerSession + ").");
+        }
+        if (currentArtifactCount >= this.policy.maxArtifactsPerSession) {
+            violations.push("ARTIFACT_COUNT_QUOTA_EXCEEDED: Session has " + currentArtifactCount + " artifacts (max " + this.policy.maxArtifactsPerSession + ").");
+        }
+        if (currentArtifactSizeBytes >= this.policy.maxArtifactSizeBytes) {
+            violations.push("ARLIFACT_SIZE_QUOTA_EXCEEDED: Session artifact size is " + currentArtifactSizeBytes + " bytes (max " + this.policy.maxArtifactSizeBytes + ").");
+        }
+        return {
+            sessionId,
+            projectId,
+            currentEventsCount,
+            currentArtifactCount,
+            currentArtifactSizeBytes,
+            violations,
+            withinLimits: violations.length === 0,
+            mode: this.policy.enforcementMode,
+        };
+    }
+    async assertQuotaWithinLimits(sessionId, projectId) {
+        const usage = await this.checkQuota(sessionId, projectId);
+        if (!usage.withinLimits && this.policy.enforcementMode === "hard_reject") {
+            throw new QuotaExceededError("Quota limit exceeded for session " + (sessionId || "") + ": " + usage.violations.join("; "), usage);
+        }
+    }
+    async enforceRetentionPolicies(options) {
+        const now = options?.now ?? Date.now();
+        const cutoffDate = new Date(now - this.policy.retentionDays * 86400000).toISOString();
+        let sql = "SELECT id, project_id, updated_at FROM sessions WHERE updated_at < ?";
+        const params = [cutoffDate];
+        if (options?.projectId) {
+            sql += " AND project_id = ?";
+            params.push(options.projectId);
+        }
+        const expiredSessions = this.engine.raw.prepare(sql).all(...params);
+        let purgedEventsCount = 0;
+        let purgedArtifactsCount = 0;
+        let reclaimedBytes = 0;
+        let purgedSessions = 0;
+        for (const sess of expiredSessions) {
+            const sessionId = sess.id;
+            const evtRow = this.engine.raw
+                .prepare("SELECT COUNT(*) as cnt FROM events WHERE session_id = ?;")
+                .get(sessionId);
+            const evtCount = Number(evtRow?.cnt ?? 0);
+            const artRow = this.engine.raw
+                .prepare("SELECT COUNT(*) as cnt, COALESCE(SUM(LENGTH(content_uri)), 0) as total_size FROM artifacts WHERE session_id = ?;")
+                .get(sessionId);
+            const artCount = Number(artRow?.cnt ?? 0);
+            const artSize = Number(artRow?.total_size ?? 0);
+            purgedEventsCount += evtCount;
+            purgedArtifactsCount += artCount;
+            reclaimedBytes += artSize;
+            purgedSessions++;
+            if (!options?.dryRun) {
+                this.engine.transaction(() => {
+                    this.engine.raw.prepare("DELETE FROM events WHERE session_id = ?;").run(sessionId);
+                    this.engine.raw.prepare("DELETE FROM artifacts WHERE session_id = ?;").run(sessionId);
+                    this.engine.raw.prepare("UPDATE sessions SET status = 'archived', updated_at = ? WHERE id = ?;").run(new Date(now).toISOString(), sessionId);
+                });
+                if (this.eventStore) {
+                    this.eventStore.append({
+                        id: "evt_gov_purge_" + Date.now(),
+                        schemaVersion: 1,
+                        projectId: sess.project_id,
+                        type: "governance.retention_purged",
+                        actor: "system",
+                        timestamp: new Date(now).toISOString(),
+                        payload: {
+                            sessionId,
+                            purgedEventsCount: evtCount,
+                            purgedArtifactsCount: artCount,
+                            cutoffDate,
+                        },
+                    });
+                }
+            }
+        }
+        return {
+            scannedSessions: expiredSessions.length,
+            purgedSessions,
+            purgedEventsCount,
+            purgedArtifactsCount,
+            reclaimedBytes,
+            dryRun: options?.dryRun ?? false,
+            timestamp: new Date(now).toISOString(),
+        };
+    }
+    async exportProjectAuditLog(projectId) {
+        const rows = this.engine.raw
+            .prepare("SELECT * FROM events WHERE project_id = ? ORDER BY timestamp ASC;")
+            .all(projectId);
+        const data = JSON.stringify(rows, null, 2);
+        return {
+            projectId,
+            eventsCount: rows.length,
+            data,
+        };
+    }
+}
+//# sourceMappingURL=data-retention-manager.js.map

package/dist/governance/data-retention-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-retention-manager.js","sourceRoot":"","sources":["../../src/governance/data-retention-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;IAClF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;IAC5E,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;CAChF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAClD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,wBAAwB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC/B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;CAC9C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC/C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACjD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3B,KAAK,CAAa;IAElC,YAAY,OAAe,EAAE,KAAiB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAQD,MAAM,OAAO,oBAAoB;IACd,MAAM,CAAe;IACrB,UAAU,CAAc;IACzB,MAAM,CAAc;IAEpC,YAAY,OAAoC;QAC9C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,SAAkB;QAC3D,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;iBACxB,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,CAAC,SAAS,CAAQ,CAAC;YACzB,kBAAkB,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAEV,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,wBAAwB,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;iBACxB,OAAO,CAAC,kHAAkH,CAAC;iBAC3H,GAAG,CAAC,SAAS,CAAQ,CAAC;YACzB,oBAAoB,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAC7C,wBAAwB,GAAG,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QAGV,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,IAAI,kBAAkB,IAAI,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC1D,UAAU,CAAC,IAAI,CAAC,oCAAoC,GAAG,kBAAkB,GAAG,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;QACxI,CAAC;QACD,IAAI,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;YAC/D,UAAU,CAAC,IAAI,CAAC,6CAA6C,GAAG,oBAAoB,GAAG,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAAC;QACzJ,CAAC;QACD,IAAI,wBAAwB,IAAI,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjE,UAAU,CAAC,IAAI,CAAC,yDAAyD,GAAG,wBAAwB,GAAG,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;QACnK,CAAC;QAED,OAAO;YACL,SAAS;YACT,SAAS;YACT,kBAAkB;YAClB,oBAAoB;YACpB,wBAAwB;YACxB,UAAU;YACV,YAAY,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;YACrC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe;SAClC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,uBAAuB,CAAC,SAAiB,EAAE,SAAkB;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,KAAK,aAAa,EAAE,CAAC;YACzE,MAAM,IAAI,kBAAkB,CAC1B,mCAAmC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAC5F,KAAK,CACN,CAAC;QACJ,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,wBAAwB,CAAC,OAIrC;QACC,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QAEtF,IAAI,GAAG,GAAG,sEAAsE,CAAC;QACjF,MAAM,MAAM,GAAU,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;YACvB,GAAG,IAAI,qBAAqB,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAU,CAAC;QAE7E,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,IAAI,oBAAoB,GAAG,CAAC,CAAC;QAC7B,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC;YAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;iBAC3B,OAAO,CAAC,0DAA0D,CAAC;iBACnE,GAAG,CAAC,SAAS,CAAQ,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAE1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;iBAC3B,OAAO,CAAC,kHAAkH,CAAC;iBAC3H,GAAG,CAAC,SAAS,CAAQ,CAAC;YACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;YAEhD,iBAAiB,IAAI,QAAQ,CAAC;YAC9B,oBAAoB,IAAI,QAAQ,CAAC;YACjC,cAAc,IAAI,OAAO,CAAC;YAC1B,cAAc,EAAE,CAAC;YAEjB,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;oBAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACnF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,6CAA6C,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACtF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;gBAC/I,CAAC,CAAC,CAAC;gBAEH,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;oBACpB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;wBACrB,EAAE,EAAE,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE;wBACjC,aAAa,EAAE,CAAC;wBAChB,SAAS,EAAE,IAAI,CAAC,UAAU;wBAC1B,IAAI,EAAE,6BAA6B;wBACnC,KAAK,EAAE,QAAQ;wBACf,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;wBACtC,OAAO,EAAE;4BACP,SAAS;4BACT,iBAAiB,EAAE,QAAQ;4BAC3B,oBAAoB,EAAE,QAAQ;4BAC9B,UAAU;yBACX;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO;YACL,eAAe,EAAE,eAAe,CAAC,MAAM;YACvC,cAAc;YACd,iBAAiB;YACjB,oBAAoB;YACpB,cAAc;YACd,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,KAAK;YAChC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,SAAiB;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG;aACzB,OAAO,CAAC,mEAAmE,CAAC;aAC5E,GAAG,CAAC,SAAS,CAAU,CAAC;QAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,OAAO;YACL,SAAS;YACT,WAAW,EAAE,IAAI,CAAC,MAAM;YACxB,IAAI;SACL,CAAC;IACJ,CAAC;CACF"}

package/dist/governance/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./data-retention-manager.js";
+export * from "./air-gapped-policy-enforcer.js";
+//# sourceMappingURL=index.d.ts.map