atabey-shared 0.1.1-beta → 0.1.2

package/dist/resilience.js

@@ -1,217 +1,2 @@
-/**
- * Polly-style resilience primitives — no external deps.
- *
- * - withRetry: exponential backoff + jitter for transient failures
- * - CircuitBreaker: closed → open → half-open state machine
- * - withResilience: compose retry + circuit breaker
- *
- * Typical use: LLM provider rate limits, timeouts, 5xx, network blips.
- */
-export class CircuitOpenError extends Error {
-    circuit;
-    retryAfterMs;
-    constructor(circuit, retryAfterMs) {
-        super(`[CircuitBreaker:${circuit}] Circuit is OPEN — rejecting call. Retry after ~${retryAfterMs}ms`);
-        this.name = "CircuitOpenError";
-        this.circuit = circuit;
-        this.retryAfterMs = retryAfterMs;
-    }
-}
-export class CircuitBreaker {
-    state = "closed";
-    failures = 0;
-    successes = 0;
-    openedAt = 0;
-    failureThreshold;
-    successThreshold;
-    openMs;
-    name;
-    constructor(options = {}) {
-        this.failureThreshold = options.failureThreshold ?? 5;
-        this.successThreshold = options.successThreshold ?? 2;
-        this.openMs = options.openMs ?? 30_000;
-        this.name = options.name ?? "default";
-    }
-    getState() {
-        this.maybeTransitionToHalfOpen();
-        return this.state;
-    }
-    getStats() {
-        return {
-            state: this.getState(),
-            failures: this.failures,
-            successes: this.successes,
-            name: this.name,
-        };
-    }
-    /** Manual reset (e.g. after operator intervention). */
-    reset() {
-        this.state = "closed";
-        this.failures = 0;
-        this.successes = 0;
-        this.openedAt = 0;
-    }
-    async exec(fn) {
-        this.maybeTransitionToHalfOpen();
-        if (this.state === "open") {
-            const retryAfterMs = Math.max(0, this.openMs - (Date.now() - this.openedAt));
-            throw new CircuitOpenError(this.name, retryAfterMs);
-        }
-        try {
-            const result = await fn();
-            this.onSuccess();
-            return result;
-        }
-        catch (err) {
-            this.onFailure();
-            throw err;
-        }
-    }
-    maybeTransitionToHalfOpen() {
-        if (this.state === "open" && Date.now() - this.openedAt >= this.openMs) {
-            this.state = "half-open";
-            this.successes = 0;
-        }
-    }
-    onSuccess() {
-        if (this.state === "half-open") {
-            this.successes++;
-            if (this.successes >= this.successThreshold) {
-                this.state = "closed";
-                this.failures = 0;
-                this.successes = 0;
-            }
-            return;
-        }
-        // closed: decay failure count on success
-        this.failures = 0;
-    }
-    onFailure() {
-        this.failures++;
-        this.successes = 0;
-        if (this.state === "half-open") {
-            this.trip();
-            return;
-        }
-        if (this.failures >= this.failureThreshold) {
-            this.trip();
-        }
-    }
-    trip() {
-        this.state = "open";
-        this.openedAt = Date.now();
-    }
-}
-export function computeBackoffDelay(attempt, options = {}) {
-    const base = options.baseDelayMs ?? 100;
-    const max = options.maxDelayMs ?? 10_000;
-    const factor = options.factor ?? 2;
-    const jitter = options.jitter !== false;
-    // attempt is 1-based for first retry after failure → attempt 1 => base * factor^0
-    const exp = Math.max(0, attempt - 1);
-    let delay = Math.min(max, base * Math.pow(factor, exp));
-    if (jitter) {
-        delay = Math.floor(Math.random() * delay);
-    }
-    return delay;
-}
-export async function withRetry(fn, options = {}) {
-    const maxAttempts = Math.max(1, options.maxAttempts ?? 3);
-    const retryIf = options.retryIf ?? (() => true);
-    let lastError;
-    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
-        if (options.signal?.aborted) {
-            throw options.signal.reason ?? new Error("Aborted");
-        }
-        try {
-            return await fn(attempt);
-        }
-        catch (err) {
-            lastError = err;
-            const isLast = attempt >= maxAttempts;
-            if (isLast || !retryIf(err, attempt)) {
-                throw err;
-            }
-            const delay = computeBackoffDelay(attempt, options);
-            options.onRetry?.(err, attempt, delay);
-            await sleep(delay, options.signal);
-        }
-    }
-    throw lastError;
-}
-/**
- * Execute `fn` through optional circuit breaker + retry with exponential backoff.
- */
-export async function withResilience(fn, options = {}) {
-    const breaker = options.circuitBreaker;
-    const skipOpen = options.skipRetryOnOpenCircuit !== false;
-    const retryOpts = {
-        ...options.retry,
-        retryIf: (err, attempt) => {
-            if (skipOpen && err instanceof CircuitOpenError)
-                return false;
-            return options.retry?.retryIf ? options.retry.retryIf(err, attempt) : true;
-        },
-    };
-    return withRetry(async (attempt) => {
-        if (breaker) {
-            return breaker.exec(() => fn(attempt));
-        }
-        return fn(attempt);
-    }, retryOpts);
-}
-/** Heuristic: retry rate limits, timeouts, and common transient network errors. */
-export function isTransientError(error) {
-    if (error instanceof CircuitOpenError)
-        return false;
-    if (!error)
-        return false;
-    const msg = error instanceof Error ? error.message : String(error);
-    const lower = msg.toLowerCase();
-    const code = error.code;
-    const status = error.status;
-    if (status === 429 || status === 502 || status === 503 || status === 504)
-        return true;
-    if (code === "ETIMEDOUT" || code === "ECONNRESET" || code === "EAI_AGAIN" || code === "ENOTFOUND") {
-        return true;
-    }
-    if (lower.includes("rate limit") ||
-        lower.includes("too many requests") ||
-        lower.includes("timeout") ||
-        lower.includes("temporar") ||
-        lower.includes("econnreset") ||
-        lower.includes("socket hang up")) {
-        return true;
-    }
-    return false;
-}
-/** Shared breakers for common services (lazy). */
-const breakers = new Map();
-export function getCircuitBreaker(name, options) {
-    let b = breakers.get(name);
-    if (!b) {
-        b = new CircuitBreaker({ name, ...options });
-        breakers.set(name, b);
-    }
-    return b;
-}
-export function resetAllCircuitBreakers() {
-    for (const b of breakers.values())
-        b.reset();
-    breakers.clear();
-}
-function sleep(ms, signal) {
-    return new Promise((resolve, reject) => {
-        if (signal?.aborted) {
-            reject(signal.reason ?? new Error("Aborted"));
-            return;
-        }
-        const timer = setTimeout(resolve, ms);
-        const onAbort = () => {
-            clearTimeout(timer);
-            reject(signal?.reason ?? new Error("Aborted"));
-        };
-        signal?.addEventListener("abort", onAbort, { once: true });
-    });
-}
+export * from "./modules/concurrency/resilience.js";
 //# sourceMappingURL=resilience.js.map

package/dist/resilience.js.map

@@ -1 +1 @@
-{"version":3,"file":"resilience.js","sourceRoot":"","sources":["../src/resilience.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACvB,OAAO,CAAS;IAChB,YAAY,CAAS;IAErC,YAAY,OAAe,EAAE,YAAoB;QAC7C,KAAK,CACD,mBAAmB,OAAO,oDAAoD,YAAY,IAAI,CACjG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACrC,CAAC;CACJ;AAED,MAAM,OAAO,cAAc;IACf,KAAK,GAAiB,QAAQ,CAAC;IAC/B,QAAQ,GAAG,CAAC,CAAC;IACb,SAAS,GAAG,CAAC,CAAC;IACd,QAAQ,GAAG,CAAC,CAAC;IACJ,gBAAgB,CAAS;IACzB,gBAAgB,CAAS;IACzB,MAAM,CAAS;IACf,IAAI,CAAS;IAE9B,YAAY,UAAiC,EAAE;QAC3C,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;IAC1C,CAAC;IAEM,QAAQ;QACX,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAEM,QAAQ;QAMX,OAAO;YACH,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE;YACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAI;SAClB,CAAC;IACN,CAAC;IAED,uDAAuD;IAChD,KAAK;QACR,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAI,EAAoB;QACrC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QAEjC,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7E,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAC1B,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;IAEO,yBAAyB;QAC7B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrE,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACvB,CAAC;IACL,CAAC;IAEO,SAAS;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,SAAS,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC1C,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACX,CAAC;QACD,yCAAyC;QACzC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;IACtB,CAAC;IAEO,SAAS;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO;QACX,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACzC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,IAAI;QACR,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,CAAC;CACJ;AAED,MAAM,UAAU,mBAAmB,CAC/B,OAAe,EACf,UAAkF,EAAE;IAEpF,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,GAAG,CAAC;IACxC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,MAAM,CAAC;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IAExC,kFAAkF;IAClF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,IAAI,MAAM,EAAE,CAAC;QACT,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,EAAmC,EACnC,UAAwB,EAAE;IAE1B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEhD,IAAI,SAAkB,CAAC;IACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,SAAS,GAAG,GAAG,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,IAAI,WAAW,CAAC;YACtC,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;gBACnC,MAAM,GAAG,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpD,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACvC,MAAM,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,CAAC;AACpB,CAAC;AASD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAChC,EAAmC,EACnC,UAA6B,EAAE;IAE/B,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,sBAAsB,KAAK,KAAK,CAAC;IAE1D,MAAM,SAAS,GAAiB;QAC5B,GAAG,OAAO,CAAC,KAAK;QAChB,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;YACtB,IAAI,QAAQ,IAAI,GAAG,YAAY,gBAAgB;gBAAE,OAAO,KAAK,CAAC;YAC9D,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,CAAC;KACJ,CAAC;IAEF,OAAO,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC/B,IAAI,OAAO,EAAE,CAAC;YACV,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC,EAAE,SAAS,CAAC,CAAC;AAClB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAEzB,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;IAChC,MAAM,IAAI,GAAI,KAA2B,CAAC,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAI,KAA6B,CAAC,MAAM,CAAC;IAErD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACtF,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QAChG,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IACI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACnC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACzB,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAC1B,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC5B,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAClC,CAAC;QACC,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,kDAAkD;AAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;AAEnD,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,OAA+B;IAC3E,IAAI,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC,EAAE,CAAC;QACL,CAAC,GAAG,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QAC7C,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,MAAM,UAAU,uBAAuB;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,EAAE;YACjB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACnD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"resilience.js","sourceRoot":"","sources":["../src/resilience.ts"],"names":[],"mappings":"AAAA,cAAc,qCAAqC,CAAC"}

package/dist/retention.d.ts

@@ -1,68 +1 @@
-/**
- * Data retention categories and default durations (days)
- */
-export declare const RETENTION_POLICIES: Record<string, number>;
-/**
- * [KVKK/GDPR] Data Retention Manager
- */
-export declare class DataRetention {
-    private static cleanupInterval;
-    /**
-   * Initialize data retention with automatic cleanup.
-   * Starts a periodic cleanup job.
-   *
-   * @param intervalMs Cleanup interval in milliseconds (default: 1 hour)
-   */
-    static initialize(intervalMs?: number): void;
-    /**
-   * Run cleanup for all data stores.
-   * Cleans audit logs, messages, and logs based on retention policies.
-   */
-    static runCleanup(): {
-        audit: number;
-        messages: number;
-        logs: number;
-    };
-    /**
-   * [KVKK Art. 7] "Right to Erasure" — Deletes all data for a given trace ID.
-   * Cleans audit records, messages, logs, and tasks.
-   *
-   * @param traceId Trace ID to erase
-   * @returns Total number of deleted records
-   */
-    static eraseTraceData(traceId: string): number;
-    /**
-   * [KVKK Art. 11] Erases all data across every store (full right-to-erasure).
-   * Only works with the confirmation code.
-   */
-    static eraseAllData(confirmationCode: string): number;
-    /**
-     * Recompute the agent-log chain anchor after a legitimate deletion so that
-     * verification does not mistake retention/erasure for tampering.
-     */
-    private static refreshLogAnchor;
-    /**
-   * Get retention statistics.
-   */
-    static getStats(): {
-        auditExpired: number;
-        messageCount: number;
-        logCount: number;
-        taskCount: number;
-        policies: Record<string, number>;
-    };
-    /**
-   * Stop the periodic cleanup job.
-   */
-    static shutdown(): void;
-    /**
-   * Clean old messages from the Hermes queue.
-   * Messages older than 30 days are removed.
-   */
-    private static cleanOldMessages;
-    /**
-   * Clean old logs.
-   * Logs older than 30 days are removed.
-   */
-    private static cleanOldLogs;
-}
+export * from "./modules/security/retention.js";

package/dist/retention.js

@@ -1,218 +1,2 @@
-/**
- * [KVKK/GDPR] Data Retention & Privacy Service
- *
- * KVKK Art. 4, 5, 7, 11 and GDPR Art. 5, 17 compliant data retention management.
- *
- * Features:
- * - Automatic expired record cleanup
- * - Data categorization (operational, user_data, api_call, security, compliance)
- * - "Right to Erasure" support
- * - Configurable retention policies
- * - Periodic cleanup cron job
- */
-import { Audit } from "./audit.js";
-import { logger } from "./logger.js";
-import { databaseHolder } from "./database.js";
-import { clearChainAnchor, writeChainAnchor } from "./audit-chain.js";
-/**
- * Data retention categories and default durations (days)
- */
-export const RETENTION_POLICIES = {
-    OPERATIONAL: 30, // Operational logs: 30 days
-    USER_DATA: 90, // User data: 90 days (KVKK Art. 5)
-    API_CALL: 180, // API call records: 180 days
-    SECURITY: 365, // Security logs: 1 year
-    COMPLIANCE: 730, // Compliance records: 2 years
-};
-/**
- * [KVKK/GDPR] Data Retention Manager
- */
-export class DataRetention {
-    static cleanupInterval = null;
-    /**
-   * Initialize data retention with automatic cleanup.
-   * Starts a periodic cleanup job.
-   *
-   * @param intervalMs Cleanup interval in milliseconds (default: 1 hour)
-   */
-    static initialize(intervalMs = 3600000) {
-        // Run initial cleanup
-        this.runCleanup();
-        // Schedule periodic cleanup
-        if (this.cleanupInterval) {
-            clearInterval(this.cleanupInterval);
-        }
-        this.cleanupInterval = setInterval(() => this.runCleanup(), intervalMs);
-        logger.info("[RETENTION] Data retention initialized. " +
-            `Cleanup interval: ${intervalMs / 60000}min. ` +
-            `Policies: ${Object.entries(RETENTION_POLICIES).map(([k, v]) => `${k}=${v}d`).join(", ")}`);
-    }
-    /**
-   * Run cleanup for all data stores.
-   * Cleans audit logs, messages, and logs based on retention policies.
-   */
-    static runCleanup() {
-        const result = { audit: 0, messages: 0, logs: 0 };
-        try {
-            // 1. Clean audit logs
-            result.audit = Audit.cleanExpired();
-            // 2. Clean old messages (Hermes message queue)
-            result.messages = this.cleanOldMessages();
-            // 3. Clean old logs
-            result.logs = this.cleanOldLogs();
-            if (result.audit > 0 || result.messages > 0 || result.logs > 0) {
-                logger.info("[RETENTION] Cleanup complete: " +
-                    `${result.audit} audit, ${result.messages} messages, ${result.logs} logs`);
-            }
-        }
-        catch (error) {
-            logger.error(`[RETENTION] Cleanup failed: ${error.message}`);
-        }
-        return result;
-    }
-    /**
-   * [KVKK Art. 7] "Right to Erasure" — Deletes all data for a given trace ID.
-   * Cleans audit records, messages, logs, and tasks.
-   *
-   * @param traceId Trace ID to erase
-   * @returns Total number of deleted records
-   */
-    static eraseTraceData(traceId) {
-        let total = 0;
-        const db = databaseHolder.getDB();
-        // Audit logs
-        total += Audit.deleteByFilter({ traceId });
-        // Messages
-        const msgResult = db.prepare("DELETE FROM messages WHERE trace_id = ?").run(traceId);
-        total += msgResult.changes;
-        // Tasks
-        const taskResult = db.prepare("DELETE FROM tasks WHERE trace_id = ?").run(traceId);
-        total += taskResult.changes;
-        // Logs
-        const logResult = db.prepare("DELETE FROM logs WHERE trace_id = ?").run(traceId);
-        total += logResult.changes;
-        if (logResult.changes > 0)
-            this.refreshLogAnchor();
-        // Costs (may carry trace_id / usage data)
-        total += db.prepare("DELETE FROM costs WHERE trace_id = ?").run(traceId).changes;
-        // Approvals (args + passcode)
-        total += db.prepare("DELETE FROM approvals WHERE trace_id = ?").run(traceId).changes;
-        logger.info(`[RETENTION] Trace ${traceId} erased: ${total} records deleted (KVKK Article 7)`);
-        return total;
-    }
-    /**
-   * [KVKK Art. 11] Erases all data across every store (full right-to-erasure).
-   * Only works with the confirmation code.
-   */
-    static eraseAllData(confirmationCode) {
-        if (confirmationCode !== "KVKK-RIGHT-TO-ERASURE") {
-            throw new Error("[RETENTION] Invalid confirmation code. Use 'KVKK-RIGHT-TO-ERASURE'");
-        }
-        let total = 0;
-        const db = databaseHolder.getDB();
-        total += Audit.clearAll(confirmationCode);
-        // Every table that can hold user/agent/personal data.
-        for (const table of [
-            "messages",
-            "tasks",
-            "logs",
-            "agents",
-            "metadata",
-            "costs",
-            "knowledge",
-            "users",
-            "loop_cooldowns",
-            "approvals",
-            "discipline",
-            "distributed_locks",
-        ]) {
-            try {
-                total += db.prepare(`DELETE FROM ${table}`).run().changes;
-            }
-            catch {
-                // Table may not exist in this schema version — skip.
-            }
-        }
-        // Both hash-chain anchors are now empty.
-        clearChainAnchor("agent-log");
-        clearChainAnchor("structured");
-        logger.warn(`[RETENTION] ALL DATA ERASED: ${total} records (KVKK Article 7 - Right to Erasure)`);
-        return total;
-    }
-    /**
-     * Recompute the agent-log chain anchor after a legitimate deletion so that
-     * verification does not mistake retention/erasure for tampering.
-     */
-    static refreshLogAnchor() {
-        try {
-            const db = databaseHolder.getDB();
-            const row = db.prepare("SELECT hash FROM logs WHERE hash IS NOT NULL ORDER BY id DESC LIMIT 1").get();
-            const count = db.prepare("SELECT COUNT(*) AS c FROM logs WHERE hash IS NOT NULL").get().c;
-            if (row?.hash && count > 0)
-                writeChainAnchor("agent-log", row.hash, count);
-            else
-                clearChainAnchor("agent-log");
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    /**
-   * Get retention statistics.
-   */
-    static getStats() {
-        const db = databaseHolder.getDB();
-        const auditExpired = db.prepare(`
-        SELECT COUNT(*) as count FROM audit_log
-        WHERE retentionDays IS NOT NULL
-        AND timestamp < datetime('now', '-' || retentionDays || ' days')
-      `).get().count;
-        const messageCount = db.prepare("SELECT COUNT(*) as count FROM messages").get().count;
-        const logCount = db.prepare("SELECT COUNT(*) as count FROM logs").get().count;
-        const taskCount = db.prepare("SELECT COUNT(*) as count FROM tasks").get().count;
-        return {
-            auditExpired,
-            messageCount,
-            logCount,
-            taskCount,
-            policies: { ...RETENTION_POLICIES },
-        };
-    }
-    /**
-   * Stop the periodic cleanup job.
-   */
-    static shutdown() {
-        if (this.cleanupInterval) {
-            clearInterval(this.cleanupInterval);
-            this.cleanupInterval = null;
-            logger.info("[RETENTION] Cleanup job stopped");
-        }
-    }
-    /**
-   * Clean old messages from the Hermes queue.
-   * Messages older than 30 days are removed.
-   */
-    static cleanOldMessages() {
-        const db = databaseHolder.getDB();
-        const result = db.prepare(`
-      DELETE FROM messages
-      WHERE strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-30 days')
-    `).run();
-        return result.changes;
-    }
-    /**
-   * Clean old logs.
-   * Logs older than 30 days are removed.
-   */
-    static cleanOldLogs() {
-        const db = databaseHolder.getDB();
-        const result = db.prepare(`
-      DELETE FROM logs
-      WHERE strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-30 days')
-    `).run();
-        if (result.changes > 0)
-            this.refreshLogAnchor();
-        return result.changes;
-    }
-}
+export * from "./modules/security/retention.js";
 //# sourceMappingURL=retention.js.map

package/dist/retention.js.map

@@ -1 +1 @@
-{"version":3,"file":"retention.js","sourceRoot":"","sources":["../src/retention.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEtE;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACtD,WAAW,EAAE,EAAE,EAAK,4BAA4B;IAChD,SAAS,EAAE,EAAE,EAAO,mCAAmC;IACvD,QAAQ,EAAE,GAAG,EAAO,6BAA6B;IACjD,QAAQ,EAAE,GAAG,EAAO,wBAAwB;IAC5C,UAAU,EAAE,GAAG,EAAK,8BAA8B;CACrD,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,aAAa;IACd,MAAM,CAAC,eAAe,GAA0C,IAAI,CAAC;IAE7E;;;;;KAKC;IACD,MAAM,CAAC,UAAU,CAAC,UAAU,GAAG,OAAO;QACtC,sBAAsB;QAClB,IAAI,CAAC,UAAU,EAAE,CAAC;QAElB,4BAA4B;QAC5B,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,eAAe,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;QAExE,MAAM,CAAC,IAAI,CACP,0CAA0C;YAChD,qBAAqB,UAAU,GAAG,KAAK,OAAO;YAC9C,aAAa,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACvF,CAAC;IACN,CAAC;IAED;;;KAGC;IACD,MAAM,CAAC,UAAU;QACb,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAElD,IAAI,CAAC;YACD,sBAAsB;YACtB,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YAEpC,+CAA+C;YAC/C,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAE1C,oBAAoB;YACpB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAElC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,CACP,gCAAgC;oBAC1C,GAAG,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,IAAI,OAAO,CAClE,CAAC;YACN,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,MAAM,CAAC,KAAK,CAAC,+BAAgC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;QAED,OAAO,MAAM,CAAC;IAClB,CAAC;IAED;;;;;;KAMC;IACD,MAAM,CAAC,cAAc,CAAC,OAAe;QACjC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAElC,aAAa;QACb,KAAK,IAAI,KAAK,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAE3C,WAAW;QACX,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrF,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC;QAE3B,QAAQ;QACR,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnF,KAAK,IAAI,UAAU,CAAC,OAAO,CAAC;QAE5B,OAAO;QACP,MAAM,SAAS,GAAG,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjF,KAAK,IAAI,SAAS,CAAC,OAAO,CAAC;QAC3B,IAAI,SAAS,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAEnD,0CAA0C;QAC1C,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAEjF,8BAA8B;QAC9B,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAErF,MAAM,CAAC,IAAI,CAAC,qBAAqB,OAAO,YAAY,KAAK,mCAAmC,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;KAGC;IACD,MAAM,CAAC,YAAY,CAAC,gBAAwB;QACxC,IAAI,gBAAgB,KAAK,uBAAuB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAElC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAC1C,sDAAsD;QACtD,KAAK,MAAM,KAAK,IAAI;YAChB,UAAU;YACV,OAAO;YACP,MAAM;YACN,QAAQ;YACR,UAAU;YACV,OAAO;YACP,WAAW;YACX,OAAO;YACP,gBAAgB;YAChB,WAAW;YACX,YAAY;YACZ,mBAAmB;SACtB,EAAE,CAAC;YACA,IAAI,CAAC;gBACD,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;YAC9D,CAAC;YAAC,MAAM,CAAC;gBACL,qDAAqD;YACzD,CAAC;QACL,CAAC;QAED,yCAAyC;QACzC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9B,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,gCAAgC,KAAK,8CAA8C,CAAC,CAAC;QACjG,OAAO,KAAK,CAAC;IACjB,CAAC;IAED;;;OAGG;IACK,MAAM,CAAC,gBAAgB;QAC3B,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,EAAkC,CAAC;YACtI,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,uDAAuD,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC7G,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;gBAAE,gBAAgB,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;gBACtE,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACL,YAAY;QAChB,CAAC;IACL,CAAC;IAED;;KAEC;IACD,MAAM,CAAC,QAAQ;QAOX,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAElC,MAAM,YAAY,GACpB,EAAE,CAAC,OAAO,CAAC;;;;OAIV,CAAC,CAAC,GAAG,EACH,CAAC,KAAK,CAAC;QAER,MAAM,YAAY,GAAI,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;QAC7G,MAAM,QAAQ,GAAI,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;QACrG,MAAM,SAAS,GAAI,EAAE,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;QAEvG,OAAO;YACH,YAAY;YACZ,YAAY;YACZ,QAAQ;YACR,SAAS;YACT,QAAQ,EAAE,EAAE,GAAG,kBAAkB,EAAE;SACtC,CAAC;IACN,CAAC;IAED;;KAEC;IACD,MAAM,CAAC,QAAQ;QACX,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACvB,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YACpC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IAED;;;KAGC;IACO,MAAM,CAAC,gBAAgB;QAC3B,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAG7B,CAAC,CAAC,GAAG,EAAE,CAAC;QACL,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED;;;KAGC;IACO,MAAM,CAAC,YAAY;QACvB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAG7B,CAAC,CAAC,GAAG,EAAE,CAAC;QACL,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC"}
+{"version":3,"file":"retention.js","sourceRoot":"","sources":["../src/retention.ts"],"names":[],"mappings":"AAAA,cAAc,iCAAiC,CAAC"}

package/dist/sandbox-fs.d.ts

@@ -1,28 +1 @@
-/**
- * Sandboxed filesystem mutations — Phase 1.2.
- *
- * - Always holds AtomicFileLock (try/finally).
- * - When runtime=container: write via container stdin → /workspace/<path>
- * - When runtime=uid|none: write on host under projectRoot (safePath caller responsibility)
- * - ATABEY_SANDBOX_REQUIRED=true rejects writes if isolation is none
- */
-import { type SandboxRuntimeConfig } from "./sandbox-runtime.js";
-export interface SandboxFsWriteResult {
-    absolutePath: string;
-    relativePath: string;
-    runtime: SandboxRuntimeConfig["effectiveMode"];
-    isolationLabel: string;
-    bytes: number;
-}
-/**
- * Normalize user path to a project-relative POSIX path.
- * Absolute paths are accepted only if they resolve inside projectRoot.
- */
-export declare function assertSafeRelativePath(userPath: string, projectRoot?: string): string;
-/**
- * Write file content under project root using the active local sandbox runtime.
- */
-export declare function writeFileInSandbox(projectRoot: string, userPath: string, content: string, options?: {
-    ownerId?: string;
-    timeoutMs?: number;
-}): Promise<SandboxFsWriteResult>;
+export * from "./modules/sandbox/sandbox-fs.js";