atabey 0.0.37 → 0.1.0

package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.js

@@ -0,0 +1,400 @@
+/**
+ * ─── ASYNCHRONOUS TELEMETRY STREAMER ───────────────────────────────
+ *
+ * Streams local audit logs, metrics, and governance events to the
+ * central enterprise server asynchronously without blocking the
+ * developer's AI CLI workflow.
+ *
+ * Features:
+ * - Batch streaming (accumulates events, sends in batches)
+ * - Retry with exponential backoff
+ * - Queue persistence (survives process restarts)
+ * - Bandwidth throttling (max N events per minute)
+ * - PII masking before transmission (GDPR/KVKK)
+ * - Connection health monitoring
+ *
+ * Architecture:
+ *   [Local MCP] → SQLite Queue → Batch Processor → HTTPS/WS → [Enterprise Server]
+ *
+ * [KVKK/GDPR] All PII is masked BEFORE leaving the local machine.
+ */
+import fs from "fs";
+import os from "os";
+import path from "path";
+import { maskObject, maskText } from "../../shared/pii.js";
+// ─── Configuration ────────────────────────────────────────────────
+const CONFIG = {
+    /** Enterprise server URL (e.g., https://atabey.company.com) */
+    SERVER_URL: process.env.ATABEY_SERVER_URL || "",
+    /** Auth token for enterprise server */
+    AUTH_TOKEN: process.env.ATABEY_SERVER_TOKEN || "",
+    /** Max events per batch */
+    BATCH_SIZE: parseInt(process.env.ATABEY_TELEMETRY_BATCH_SIZE || "50", 10),
+    /** Flush interval in ms */
+    FLUSH_INTERVAL_MS: parseInt(process.env.ATABEY_TELEMETRY_FLUSH_INTERVAL || "30000", 10),
+    /** Max retries per batch */
+    MAX_RETRIES: parseInt(process.env.ATABEY_TELEMETRY_MAX_RETRIES || "3", 10),
+    /** Retry base delay (exponential backoff) */
+    RETRY_BASE_DELAY_MS: parseInt(process.env.ATABEY_TELEMETRY_RETRY_DELAY || "1000", 10),
+    /** Max events per minute (throttle) */
+    MAX_EVENTS_PER_MINUTE: parseInt(process.env.ATABEY_TELEMETRY_RATE_LIMIT || "200", 10),
+    /** Enable/disable telemetry */
+    ENABLED: process.env.ATABEY_TELEMETRY_ENABLED !== "false",
+    /** Use WebSocket for real-time streaming (fallback to HTTPS) */
+    USE_WEBSOCKET: process.env.ATABEY_TELEMETRY_WS === "true",
+};
+// ─── Telemetry Streamer ───────────────────────────────────────────
+export class TelemetryStreamer {
+    static instance;
+    queue = [];
+    flushTimer = null;
+    ws = null;
+    wsReconnectTimer = null;
+    eventCountThisMinute = 0;
+    minuteResetTimer = null;
+    machineId;
+    projectHash;
+    isFlushing = false;
+    constructor() {
+        this.machineId = this.generateMachineId();
+        this.projectHash = this.generateProjectHash();
+    }
+    static getInstance() {
+        if (!TelemetryStreamer.instance) {
+            TelemetryStreamer.instance = new TelemetryStreamer();
+        }
+        return TelemetryStreamer.instance;
+    }
+    /**
+     * Start the telemetry streamer.
+     * Begins periodic flush and WebSocket connection if configured.
+     */
+    start() {
+        if (!CONFIG.ENABLED || !CONFIG.SERVER_URL) {
+            process.stderr.write("[TELEMETRY] Disabled or no server URL configured.\n");
+            return;
+        }
+        process.stderr.write(`[TELEMETRY] Starting streamer → ${CONFIG.SERVER_URL}\n`);
+        // Periodic flush
+        this.flushTimer = setInterval(() => this.flush(), CONFIG.FLUSH_INTERVAL_MS);
+        // Minute counter reset
+        this.minuteResetTimer = setInterval(() => {
+            this.eventCountThisMinute = 0;
+        }, 60000);
+        // WebSocket connection (if enabled)
+        if (CONFIG.USE_WEBSOCKET) {
+            this.connectWebSocket();
+        }
+        // Flush on exit
+        process.on("beforeExit", () => this.flushSync());
+        process.on("SIGINT", () => { this.flushSync(); });
+        process.on("SIGTERM", () => { this.flushSync(); });
+    }
+    /**
+     * Stop the telemetry streamer.
+     */
+    stop() {
+        if (this.flushTimer) {
+            clearInterval(this.flushTimer);
+            this.flushTimer = null;
+        }
+        if (this.minuteResetTimer) {
+            clearInterval(this.minuteResetTimer);
+            this.minuteResetTimer = null;
+        }
+        if (this.ws) {
+            this.ws.close();
+            this.ws = null;
+        }
+        if (this.wsReconnectTimer) {
+            clearTimeout(this.wsReconnectTimer);
+            this.wsReconnectTimer = null;
+        }
+        this.flushSync();
+    }
+    /**
+     * Enqueue a telemetry event for streaming.
+     * Events are batched and sent asynchronously.
+     */
+    enqueue(event) {
+        if (!CONFIG.ENABLED)
+            return;
+        // Rate limiting
+        if (this.eventCountThisMinute >= CONFIG.MAX_EVENTS_PER_MINUTE) {
+            return; // Silently drop
+        }
+        this.eventCountThisMinute++;
+        const fullEvent = {
+            ...event,
+            id: `${Date.now()}-${Math.random().toString(36).substr(2, 9)}`,
+            machineId: this.machineId,
+            projectHash: this.projectHash,
+            // [KVKK/GDPR] Mask PII before queuing
+            payload: maskObject(event.payload),
+        };
+        this.queue.push({ event: fullEvent, retries: 0, lastAttempt: null });
+        // If queue is large enough, flush immediately
+        if (this.queue.length >= CONFIG.BATCH_SIZE) {
+            this.flush();
+        }
+    }
+    /**
+     * Convenience method for logging tool calls.
+     */
+    logToolCall(agent, toolName, tokens, traceId, durationMs) {
+        this.enqueue({
+            type: "tool_call",
+            timestamp: new Date().toISOString(),
+            agent,
+            payload: {
+                tool: toolName,
+                estimatedTokens: tokens,
+                traceId,
+                durationMs,
+            },
+        });
+    }
+    /**
+     * Convenience method for logging governance violations.
+     */
+    logGovernanceViolation(agent, toolName, error) {
+        this.enqueue({
+            type: "governance_violation",
+            timestamp: new Date().toISOString(),
+            agent,
+            payload: {
+                tool: toolName,
+                error: maskText(error),
+            },
+        });
+    }
+    /**
+     * Convenience method for logging errors.
+     */
+    logError(agent, action, error) {
+        this.enqueue({
+            type: "error",
+            timestamp: new Date().toISOString(),
+            agent,
+            payload: {
+                action,
+                error: maskText(error),
+            },
+        });
+    }
+    // ─── Private Methods ───────────────────────────────────────
+    /**
+     * Flush queued events to the enterprise server.
+     */
+    async flush() {
+        if (this.isFlushing || this.queue.length === 0)
+            return;
+        this.isFlushing = true;
+        let success;
+        const batch = this.queue.splice(0, CONFIG.BATCH_SIZE);
+        try {
+            const events = batch.map(q => q.event);
+            // [KVKK/GDPR] Double-check PII masking before transmission
+            const sanitizedEvents = events.map(e => ({
+                ...e,
+                payload: maskObject(e.payload),
+            }));
+            success = await this.sendBatch(sanitizedEvents);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Unknown error";
+            process.stderr.write(`[TELEMETRY] Send batch failed: ${message}\n`);
+            success = false;
+        }
+        if (!success) {
+            // Re-queue with retry count
+            for (const q of batch) {
+                q.retries++;
+                q.lastAttempt = Date.now();
+                if (q.retries < CONFIG.MAX_RETRIES) {
+                    this.queue.push(q);
+                }
+                else {
+                    // Max retries exceeded, log locally and drop
+                    process.stderr.write(`[TELEMETRY] Dropped event after ${CONFIG.MAX_RETRIES} retries: ${q.event.type}\n`);
+                    this.saveToLocalFallback(q.event);
+                }
+            }
+        }
+        this.isFlushing = false;
+    }
+    /**
+     * Synchronous flush (for process exit).
+     */
+    flushSync() {
+        if (this.queue.length === 0)
+            return;
+        const batch = this.queue.splice(0, CONFIG.BATCH_SIZE);
+        const events = batch.map(q => q.event);
+        // Save to local fallback file (best effort)
+        for (const event of events) {
+            this.saveToLocalFallback(event);
+        }
+    }
+    /**
+     * Send a batch of events to the enterprise server via HTTPS.
+     */
+    async sendBatch(events) {
+        try {
+            const url = `${CONFIG.SERVER_URL.replace(/\/$/, "")}/api/telemetry/ingest`;
+            const response = await fetch(url, {
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    "Authorization": `Bearer ${CONFIG.AUTH_TOKEN}`,
+                    "X-Machine-Id": this.machineId,
+                    "X-Project-Hash": this.projectHash,
+                },
+                body: JSON.stringify({
+                    batch: events,
+                    sentAt: new Date().toISOString(),
+                    machineId: this.machineId,
+                }),
+            });
+            if (!response.ok) {
+                process.stderr.write(`[TELEMETRY] Server returned ${response.status}: ${response.statusText}\n`);
+                return false;
+            }
+            return true;
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            process.stderr.write(`[TELEMETRY] Send failed: ${message}\n`);
+            return false;
+        }
+    }
+    /**
+     * Connect to enterprise server via WebSocket for real-time streaming.
+     */
+    connectWebSocket() {
+        // Native WebSocket is available in Node.js >= 22.
+        // For older versions, we skip WebSocket and rely on HTTPS batch mode.
+        const NodeWebSocket = typeof WebSocket !== "undefined" ? WebSocket : undefined;
+        if (!NodeWebSocket) {
+            process.stderr.write("[TELEMETRY] WebSocket unavailable (Node.js < 22). Using HTTPS batch mode only.\n");
+            // Force HTTPS mode by disabling WS flag
+            return;
+        }
+        try {
+            const wsUrl = CONFIG.SERVER_URL.replace(/^http/, "ws").replace(/\/$/, "") + "/ws/telemetry";
+            this.ws = new NodeWebSocket(wsUrl);
+            this.ws.onopen = () => {
+                process.stderr.write("[TELEMETRY] WebSocket connected.\n");
+                // Authenticate
+                this.ws?.send(JSON.stringify({
+                    type: "auth",
+                    token: CONFIG.AUTH_TOKEN,
+                    machineId: this.machineId,
+                    projectHash: this.projectHash,
+                }));
+            };
+            this.ws.onclose = () => {
+                process.stderr.write("[TELEMETRY] WebSocket disconnected. Reconnecting...\n");
+                this.ws = null;
+                // Reconnect after delay
+                this.wsReconnectTimer = setTimeout(() => this.connectWebSocket(), 5000);
+            };
+            this.ws.onerror = () => {
+                // onclose will handle reconnection
+            };
+            this.ws.onmessage = (msg) => {
+                try {
+                    const data = JSON.parse(msg.data.toString());
+                    if (data.type === "config_update") {
+                        process.stderr.write(`[TELEMETRY] Config update received: ${JSON.stringify(data.payload)}\n`);
+                        // Apply remote config changes
+                        if (data.payload.maxEventsPerMinute) {
+                            // Dynamic rate limiting from server
+                        }
+                    }
+                }
+                catch { /* ignore */ }
+            };
+        }
+        catch (error) {
+            process.stderr.write(`[TELEMETRY] WebSocket connection failed: ${error}\n`);
+            // Retry
+            this.wsReconnectTimer = setTimeout(() => this.connectWebSocket(), 10000);
+        }
+    }
+    /**
+     * Save event to local fallback file (when server is unreachable).
+     */
+    saveToLocalFallback(event) {
+        try {
+            const defaultDir = process.env.VITEST
+                ? path.join(os.tmpdir(), `atabey-vitest-worker-${process.pid}`, ".atabey")
+                : path.join(process.cwd(), ".atabey");
+            const frameworkDir = process.env.ATABEY_FRAMEWORK_DIR || process.env.ATABEY_TEST_DIR || defaultDir;
+            const telemetryDir = path.join(frameworkDir, "telemetry");
+            if (!fs.existsSync(telemetryDir)) {
+                fs.mkdirSync(telemetryDir, { recursive: true });
+            }
+            const fallbackPath = path.join(telemetryDir, "pending-events.jsonl");
+            fs.appendFileSync(fallbackPath, JSON.stringify(event) + "\n");
+        }
+        catch { /* ignore: best effort */ }
+    }
+    /**
+     * Generate a unique machine ID.
+     */
+    generateMachineId() {
+        try {
+            const hostname = os.hostname();
+            const cpus = os.cpus();
+            const cpuModel = cpus.length > 0 ? cpus[0].model : "unknown";
+            const hash = this.simpleHash(`${hostname}-${cpuModel}`);
+            return `machine-${hash}`;
+        }
+        catch {
+            return `machine-${Math.random().toString(36).substr(2, 8)}`;
+        }
+    }
+    /**
+     * Generate a project hash for grouping.
+     */
+    generateProjectHash() {
+        try {
+            const pkgPath = path.join(process.cwd(), "package.json");
+            if (fs.existsSync(pkgPath)) {
+                const pkg = JSON.parse(fs.readFileSync(pkgPath, "utf8"));
+                return this.simpleHash(pkg.name || pkgPath);
+            }
+        }
+        catch { /* ignore */ }
+        return this.simpleHash(process.cwd());
+    }
+    /**
+     * Simple string hash.
+     */
+    simpleHash(str) {
+        let hash = 0;
+        for (let i = 0; i < str.length; i++) {
+            const char = str.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash = hash & hash; // Convert to 32bit integer
+        }
+        return Math.abs(hash).toString(16).substring(0, 8);
+    }
+    /**
+     * Get streamer status.
+     */
+    getStatus() {
+        return {
+            enabled: CONFIG.ENABLED,
+            serverUrl: CONFIG.SERVER_URL,
+            queueSize: this.queue.length,
+            wsConnected: this.ws?.readyState === WebSocket.OPEN,
+            eventsThisMinute: this.eventCountThisMinute,
+        };
+    }
+}
+// ─── Singleton Export ─────────────────────────────────────────────
+export const telemetryStreamer = TelemetryStreamer.getInstance();
+export { CONFIG as TelemetryConfig };
+//# sourceMappingURL=telemetry-streamer.js.map

package/dist/atabey-mcp/src/mcp/utils/telemetry-streamer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-streamer.js","sourceRoot":"","sources":["../../../../../../atabey-mcp/src/mcp/utils/telemetry-streamer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE3D,qEAAqE;AAErE,MAAM,MAAM,GAAG;IACX,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;IAC/C,uCAAuC;IACvC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE;IACjD,2BAA2B;IAC3B,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,IAAI,EAAE,EAAE,CAAC;IACzE,2BAA2B;IAC3B,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,IAAI,OAAO,EAAE,EAAE,CAAC;IACvF,4BAA4B;IAC5B,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,GAAG,EAAE,EAAE,CAAC;IAC1E,6CAA6C;IAC7C,mBAAmB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,MAAM,EAAE,EAAE,CAAC;IACrF,uCAAuC;IACvC,qBAAqB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,KAAK,EAAE,EAAE,CAAC;IACrF,+BAA+B;IAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,OAAO;IACzD,gEAAgE;IAChE,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,MAAM;CAC5D,CAAC;AAoBF,qEAAqE;AAErE,MAAM,OAAO,iBAAiB;IAClB,MAAM,CAAC,QAAQ,CAAoB;IACnC,KAAK,GAAkB,EAAE,CAAC;IAC1B,UAAU,GAA0C,IAAI,CAAC;IACzD,EAAE,GAAqB,IAAI,CAAC;IAC5B,gBAAgB,GAAyC,IAAI,CAAC;IAC9D,oBAAoB,GAAG,CAAC,CAAC;IACzB,gBAAgB,GAA0C,IAAI,CAAC;IAC/D,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,UAAU,GAAG,KAAK,CAAC;IAE3B;QACI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAClD,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,CAAC;YAC9B,iBAAiB,CAAC,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzD,CAAC;QACD,OAAO,iBAAiB,CAAC,QAAQ,CAAC;IACtC,CAAC;IAED;;;OAGG;IACI,KAAK;QACR,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC5E,OAAO;QACX,CAAC;QAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QAE/E,iBAAiB;QACjB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE5E,uBAAuB;QACvB,IAAI,CAAC,gBAAgB,GAAG,WAAW,CAAC,GAAG,EAAE;YACrC,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;QAClC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEV,oCAAoC;QACpC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC5B,CAAC;QAED,gBAAgB;QAChB,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,IAAI;QACP,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACrC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;IACrB,CAAC;IAED;;;OAGG;IACI,OAAO,CAAC,KAA+D;QAC1E,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAE5B,gBAAgB;QAChB,IAAI,IAAI,CAAC,oBAAoB,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAC5D,OAAO,CAAC,gBAAgB;QAC5B,CAAC;QACD,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAE5B,MAAM,SAAS,GAAmB;YAC9B,GAAG,KAAK;YACR,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAC9D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,sCAAsC;YACtC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAA4B;SAChE,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QAErE,8CAA8C;QAC9C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACI,WAAW,CAAC,KAAa,EAAE,QAAgB,EAAE,MAAc,EAAE,OAAe,EAAE,UAAkB;QACnG,IAAI,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,eAAe,EAAE,MAAM;gBACvB,OAAO;gBACP,UAAU;aACb;SACJ,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACI,sBAAsB,CAAC,KAAa,EAAE,QAAgB,EAAE,KAAa;QACxE,IAAI,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;aACzB;SACJ,CAAC,CAAC;IACP,CAAC;IAED;;OAEG;IACI,QAAQ,CAAC,KAAa,EAAE,MAAc,EAAE,KAAa;QACxD,IAAI,CAAC,OAAO,CAAC;YACT,IAAI,EAAE,OAAO;YACb,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK;YACL,OAAO,EAAE;gBACL,MAAM;gBACN,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;aACzB;SACJ,CAAC,CAAC;IACP,CAAC;IAED,8DAA8D;IAE9D;;OAEG;IACK,KAAK,CAAC,KAAK;QACf,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACvD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QAEvB,IAAI,OAAgB,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAEvC,2DAA2D;YAC3D,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,GAAG,CAAC;gBACJ,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAA4B;aAC5D,CAAC,CAAC,CAAC;YAEJ,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,OAAO,IAAI,CAAC,CAAC;YACpE,OAAO,GAAG,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,4BAA4B;YAC5B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACpB,CAAC,CAAC,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;oBACjC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACJ,6CAA6C;oBAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,MAAM,CAAC,WAAW,aAAa,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;oBACzG,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBACtC,CAAC;YACL,CAAC;QACL,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED;;OAEG;IACK,SAAS;QACb,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEpC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAEvC,4CAA4C;QAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACL,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,SAAS,CAAC,MAAwB;QAC5C,IAAI,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC;YAE3E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC9B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE;oBAC9C,cAAc,EAAE,IAAI,CAAC,SAAS;oBAC9B,gBAAgB,EAAE,IAAI,CAAC,WAAW;iBACrC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACjB,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBAChC,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC5B,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,IAAI,CAAC,CAAC;gBACjG,OAAO,KAAK,CAAC;YACjB,CAAC;YAED,OAAO,IAAI,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,IAAI,CAAC,CAAC;YAC9D,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IAED;;OAEG;IACK,gBAAgB;QACpB,kDAAkD;QAClD,sEAAsE;QACtE,MAAM,aAAa,GACf,OAAO,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7D,IAAI,CAAC,aAAa,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAChB,kFAAkF,CACrF,CAAC;YACF,wCAAwC;YACxC,OAAO;QACX,CAAC;QAED,IAAI,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,eAAe,CAAC;YAC5F,IAAI,CAAC,EAAE,GAAG,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;YAEnC,IAAI,CAAC,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;gBAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAC3D,eAAe;gBACf,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,IAAI,EAAE,MAAM;oBACZ,KAAK,EAAE,MAAM,CAAC,UAAU;oBACxB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,WAAW,EAAE,IAAI,CAAC,WAAW;iBAChC,CAAC,CAAC,CAAC;YACR,CAAC,CAAC;YAEF,IAAI,CAAC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC9E,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;gBACf,wBAAwB;gBACxB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5E,CAAC,CAAC;YAEF,IAAI,CAAC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE;gBACnB,mCAAmC;YACvC,CAAC,CAAC;YAEF,IAAI,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,GAAG,EAAE,EAAE;gBACxB,IAAI,CAAC;oBACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;wBAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;wBAC9F,8BAA8B;wBAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;4BAClC,oCAAoC;wBACxC,CAAC;oBACL,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,KAAK,IAAI,CAAC,CAAC;YAC5E,QAAQ;YACR,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,KAAK,CAAC,CAAC;QAC7E,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB,CAAC,KAAqB;QAC7C,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM;gBACjC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,wBAAwB,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC;gBAC1E,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,UAAU,CAAC;YACnG,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;YAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,CAAC;YAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,sBAAsB,CAAC,CAAC;YACrE,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACK,iBAAiB;QACrB,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,QAAQ,EAAE,CAAC,CAAC;YACxD,OAAO,WAAW,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,WAAW,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAChE,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB;QACvB,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;gBACzD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;YAChD,CAAC;QACL,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,GAAW;QAC1B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAC/B,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACnC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,2BAA2B;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;OAEG;IACI,SAAS;QAOZ,OAAO;YACH,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC5B,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,KAAK,SAAS,CAAC,IAAI;YACnD,gBAAgB,EAAE,IAAI,CAAC,oBAAoB;SAC9C,CAAC;IACN,CAAC;CACJ;AAED,qEAAqE;AAErE,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,WAAW,EAAE,CAAC;AACjE,OAAO,EAAE,MAAM,IAAI,eAAe,EAAE,CAAC"}

package/dist/atabey-mcp/src/shared/logger.d.ts

@@ -0,0 +1 @@
+export * from "atabey-shared/logger.js";

package/dist/atabey-mcp/src/shared/logger.js

@@ -0,0 +1,2 @@
+export * from "atabey-shared/logger.js";
+//# sourceMappingURL=logger.js.map

package/dist/atabey-mcp/src/shared/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../../../atabey-mcp/src/shared/logger.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC"}

package/dist/atabey-mcp/src/shared/pii.d.ts

@@ -0,0 +1 @@
+export * from "atabey-shared/pii.js";

package/dist/atabey-mcp/src/shared/pii.js

@@ -0,0 +1,2 @@
+export * from "atabey-shared/pii.js";
+//# sourceMappingURL=pii.js.map

package/dist/atabey-mcp/src/shared/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../../../../../atabey-mcp/src/shared/pii.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC"}

package/dist/atabey-mcp/src/shared/storage.d.ts

@@ -0,0 +1,2 @@
+export * from "atabey-shared/storage.js";
+export { AtabeyStorage, Storage } from "atabey-shared/storage.js";

package/dist/atabey-mcp/src/shared/storage.js

@@ -0,0 +1,3 @@
+export * from "atabey-shared/storage.js";
+export { AtabeyStorage, Storage } from "atabey-shared/storage.js";
+//# sourceMappingURL=storage.js.map

package/dist/atabey-mcp/src/shared/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../../../atabey-mcp/src/shared/storage.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/shared/src/agent-identity.d.ts

@@ -0,0 +1 @@
+export * from "./modules/agent/agent-identity.js";

package/dist/shared/src/agent-identity.js

@@ -0,0 +1,2 @@
+export * from "./modules/agent/agent-identity.js";
+//# sourceMappingURL=agent-identity.js.map

package/dist/shared/src/agent-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../../../../shared/src/agent-identity.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC"}

package/dist/shared/src/api-catalog.d.ts

@@ -0,0 +1 @@
+export * from "./modules/agent/api-catalog.js";

package/dist/shared/src/api-catalog.js

@@ -0,0 +1,2 @@
+export * from "./modules/agent/api-catalog.js";
+//# sourceMappingURL=api-catalog.js.map

package/dist/shared/src/api-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-catalog.js","sourceRoot":"","sources":["../../../../shared/src/api-catalog.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC"}

package/dist/shared/src/audit-chain.d.ts

@@ -1,51 +1 @@
-/**
- * Tamper-evident audit hash chain helpers (Phase 1.4).
- *
- * Chain: each entry stores prev_hash (previous entry hash or GENESIS) and hash = SHA-256(payload).
- * Any mutation of historical rows fails verification.
- */
-export declare const AUDIT_CHAIN_GENESIS = "GENESIS";
-export declare function sha256Hex(payload: string): string;
-/**
- * Canonical payload for agent execution logs (Storage.saveLog).
- * MUST stay stable — changing it breaks verification of existing DBs.
- */
-export declare function buildAgentLogChainPayload(fields: {
-    prevHash: string;
-    agent: string;
-    action: string;
-    traceId: string;
-    status: string;
-    summary: string;
-    timestamp: string;
-}): string;
-/**
- * Canonical payload for structured Audit.log entries.
- */
-export declare function buildStructuredAuditChainPayload(fields: {
-    prevHash: string;
-    agent: string;
-    action: string;
-    status: string;
-    traceId: string;
-    timestamp: string;
-    detailsJson: string;
-    errorMessage: string;
-}): string;
-export interface ChainRow {
-    id: number;
-    prev_hash: string | null;
-    hash: string | null;
-}
-export interface ChainVerifyResult {
-    valid: boolean;
-    checked: number;
-    failedLogId?: number;
-    reason?: string;
-    tip?: string;
-}
-/**
- * Verify a sequence of rows already ordered by id ASC.
- * `computePayload(row, prevHash)` must rebuild the exact string used at insert time.
- */
-export declare function verifyHashChain<T extends ChainRow>(rows: T[], computePayload: (row: T, prevHash: string) => string): ChainVerifyResult;
+export * from "./modules/observability/audit-chain.js";

package/dist/shared/src/audit-chain.js

@@ -1,85 +1,2 @@
-/**
- * Tamper-evident audit hash chain helpers (Phase 1.4).
- *
- * Chain: each entry stores prev_hash (previous entry hash or GENESIS) and hash = SHA-256(payload).
- * Any mutation of historical rows fails verification.
- */
-import crypto from "crypto";
-export const AUDIT_CHAIN_GENESIS = "GENESIS";
-export function sha256Hex(payload) {
-    return crypto.createHash("sha256").update(payload, "utf8").digest("hex");
-}
-/**
- * Canonical payload for agent execution logs (Storage.saveLog).
- * MUST stay stable — changing it breaks verification of existing DBs.
- */
-export function buildAgentLogChainPayload(fields) {
-    return [
-        fields.prevHash,
-        fields.agent,
-        fields.action,
-        fields.traceId,
-        fields.status,
-        fields.summary,
-        fields.timestamp,
-    ].join("|");
-}
-/**
- * Canonical payload for structured Audit.log entries.
- */
-export function buildStructuredAuditChainPayload(fields) {
-    return [
-        fields.prevHash,
-        fields.agent,
-        fields.action,
-        fields.status,
-        fields.traceId,
-        fields.timestamp,
-        fields.detailsJson,
-        fields.errorMessage,
-    ].join("|");
-}
-/**
- * Verify a sequence of rows already ordered by id ASC.
- * `computePayload(row, prevHash)` must rebuild the exact string used at insert time.
- */
-export function verifyHashChain(rows, computePayload) {
-    let expectedPrev = rows.length > 0 ? (rows[0].prev_hash || AUDIT_CHAIN_GENESIS) : AUDIT_CHAIN_GENESIS;
-    let checked = 0;
-    for (const row of rows) {
-        checked++;
-        const prev = row.prev_hash || "";
-        if (prev !== expectedPrev) {
-            return {
-                valid: false,
-                checked,
-                failedLogId: row.id,
-                reason: `prev_hash mismatch at row ${row.id}`,
-                tip: "A log was deleted, reordered, or inserted out of chain order.",
-            };
-        }
-        if (!row.hash) {
-            return {
-                valid: false,
-                checked,
-                failedLogId: row.id,
-                reason: `Missing hash at row ${row.id}`,
-                tip: "Legacy row without hash; re-seed or accept and re-hash from tip.",
-            };
-        }
-        const payload = computePayload(row, prev);
-        const calculated = sha256Hex(payload);
-        if (calculated !== row.hash) {
-            return {
-                valid: false,
-                checked,
-                failedLogId: row.id,
-                reason: `Hash corruption at row ${row.id}`,
-                tip: "Row content was modified after append.",
-            };
-        }
-        expectedPrev = row.hash;
-    }
-    return { valid: true, checked };
-}
+export * from "./modules/observability/audit-chain.js";
 //# sourceMappingURL=audit-chain.js.map

package/dist/shared/src/audit-chain.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-chain.js","sourceRoot":"","sources":["../../../../shared/src/audit-chain.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,MAAM,CAAC,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAE7C,MAAM,UAAU,SAAS,CAAC,OAAe;IACrC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAQzC;IACG,OAAO;QACH,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,SAAS;KACnB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAAC,MAShD;IACG,OAAO;QACH,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,WAAW;QAClB,MAAM,CAAC,YAAY;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAgBD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC3B,IAAS,EACT,cAAoD;IAEpD,IAAI,YAAY,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,mBAAmB,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACtG,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,CAAC;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;QACjC,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACxB,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,WAAW,EAAE,GAAG,CAAC,EAAE;gBACnB,MAAM,EAAE,6BAA6B,GAAG,CAAC,EAAE,EAAE;gBAC7C,GAAG,EAAE,+DAA+D;aACvE,CAAC;QACN,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACZ,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,WAAW,EAAE,GAAG,CAAC,EAAE;gBACnB,MAAM,EAAE,uBAAuB,GAAG,CAAC,EAAE,EAAE;gBACvC,GAAG,EAAE,kEAAkE;aAC1E,CAAC;QACN,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,UAAU,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1B,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,OAAO;gBACP,WAAW,EAAE,GAAG,CAAC,EAAE;gBACnB,MAAM,EAAE,0BAA0B,GAAG,CAAC,EAAE,EAAE;gBAC1C,GAAG,EAAE,wCAAwC;aAChD,CAAC;QACN,CAAC;QACD,YAAY,GAAG,GAAG,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"audit-chain.js","sourceRoot":"","sources":["../../../../shared/src/audit-chain.ts"],"names":[],"mappings":"AAAA,cAAc,wCAAwC,CAAC"}