atabey 0.0.37 → 0.1.0

package/dist/shared/src/sandbox.js

@@ -1,179 +1,2 @@
-/**
- * OS-level subprocess isolation via uid/gid (no Docker required).
- *
- * On Unix, child_process.spawn accepts `uid` and `gid`. When configured,
- * agent-triggered shell commands run as a restricted system user so that
- * even a hallucinated destructive command hits EACCES / Permission Denied
- * on protected paths.
- *
- * Windows: uid/gid are ignored; isolation is a no-op (allow-list still applies).
- *
- * Configuration (any of):
- *   ATABEY_SANDBOX_UID=501
- *   ATABEY_SANDBOX_GID=20
- *   ATABEY_SANDBOX_USER=atabey-sandbox   (resolved via `id -u` / `id -g` when possible)
- *   ATABEY_SANDBOX_ENABLED=true|false   (default: true when uid/gid resolvable)
- */
-import { spawn } from "child_process";
-import { execFileSync } from "child_process";
-import os from "os";
-let cachedIdentity = null;
-function parseUint(value) {
-    if (value === undefined || value === "")
-        return undefined;
-    const n = Number.parseInt(value, 10);
-    if (!Number.isFinite(n) || n < 0)
-        return undefined;
-    return n;
-}
-function resolveUserIds(username) {
-    if (process.platform === "win32")
-        return {};
-    try {
-        const uidRaw = execFileSync("id", ["-u", username], {
-            encoding: "utf8",
-            timeout: 2000,
-            stdio: ["ignore", "pipe", "ignore"],
-        }).trim();
-        const gidRaw = execFileSync("id", ["-g", username], {
-            encoding: "utf8",
-            timeout: 2000,
-            stdio: ["ignore", "pipe", "ignore"],
-        }).trim();
-        return {
-            uid: parseUint(uidRaw),
-            gid: parseUint(gidRaw),
-        };
-    }
-    catch {
-        return {};
-    }
-}
-/**
- * Resolve sandbox identity from env (cached).
- * Call `clearSandboxIdentityCache()` in tests after env changes.
- */
-export function resolveSandboxIdentity() {
-    if (cachedIdentity)
-        return cachedIdentity;
-    if (process.platform === "win32") {
-        cachedIdentity = {
-            enabled: false,
-            reason: "uid/gid isolation is not available on Windows",
-        };
-        return cachedIdentity;
-    }
-    const explicitOff = process.env.ATABEY_SANDBOX_ENABLED === "false" ||
-        process.env.ATABEY_SANDBOX_ENABLED === "0";
-    if (explicitOff) {
-        cachedIdentity = { enabled: false, reason: "ATABEY_SANDBOX_ENABLED=false" };
-        return cachedIdentity;
-    }
-    let uid = parseUint(process.env.ATABEY_SANDBOX_UID);
-    let gid = parseUint(process.env.ATABEY_SANDBOX_GID);
-    const user = process.env.ATABEY_SANDBOX_USER?.trim() || undefined;
-    if (user && (uid === undefined || gid === undefined)) {
-        const resolved = resolveUserIds(user);
-        uid = uid ?? resolved.uid;
-        gid = gid ?? resolved.gid;
-    }
-    // Never drop privileges to root (0) — that would be a no-op or worse
-    if (uid === 0) {
-        cachedIdentity = {
-            enabled: false,
-            reason: "ATABEY_SANDBOX_UID=0 (root) is refused",
-            uid,
-            gid,
-            user,
-        };
-        return cachedIdentity;
-    }
-    if (uid === undefined) {
-        // Optional: if current process is already non-root and no sandbox user
-        // configured, we leave sandbox disabled rather than inventing a user.
-        cachedIdentity = {
-            enabled: false,
-            reason: "No ATABEY_SANDBOX_UID / ATABEY_SANDBOX_USER configured — shell runs as current user",
-            user,
-        };
-        return cachedIdentity;
-    }
-    // Dropping privileges only works if we are root (or have CAP_SETUID).
-    // If we are a normal user with a different target uid, spawn will fail —
-    // detect and warn via reason, still pass options (caller sees Permission error).
-    const canSetUid = typeof process.getuid === "function" && process.getuid() === 0;
-    if (!canSetUid && typeof process.getuid === "function" && process.getuid() !== uid) {
-        cachedIdentity = {
-            enabled: false,
-            uid,
-            gid,
-            user,
-            reason: `Sandbox uid=${uid} requested but process uid=${process.getuid()} is not root; ` +
-                `setuid will fail. Run MCP as root with a dedicated sandbox user, or unset sandbox env.`,
-        };
-        return cachedIdentity;
-    }
-    cachedIdentity = {
-        enabled: true,
-        uid,
-        gid,
-        user,
-    };
-    return cachedIdentity;
-}
-export function clearSandboxIdentityCache() {
-    cachedIdentity = null;
-}
-/**
- * Build spawn options with uid/gid when sandbox is active.
- */
-export function applySandboxToSpawnOptions(options = {}) {
-    const { disableSandbox, ...rest } = options;
-    if (disableSandbox)
-        return { ...rest };
-    const identity = resolveSandboxIdentity();
-    if (!identity.enabled || identity.uid === undefined) {
-        return { ...rest };
-    }
-    return {
-        ...rest,
-        uid: identity.uid,
-        ...(identity.gid !== undefined ? { gid: identity.gid } : {}),
-    };
-}
-/**
- * spawn() wrapper that applies OS sandbox identity when configured.
- */
-export function sandboxSpawn(command, args, options = {}) {
-    const opts = applySandboxToSpawnOptions(options);
-    return spawn(command, args, opts);
-}
-/**
- * Human-readable status for dashboard / CLI diagnostics.
- */
-export function getSandboxStatus() {
-    return {
-        platform: process.platform,
-        identity: resolveSandboxIdentity(),
-        processUid: typeof process.getuid === "function" ? process.getuid() : null,
-        processGid: typeof process.getgid === "function" ? process.getgid() : null,
-    };
-}
-/** Default restricted paths agents should not touch even with shell allow-list. */
-export const SANDBOX_PROTECTED_HINTS = [
-    "/etc",
-    "/usr",
-    "/bin",
-    "/sbin",
-    "/System",
-    pathHomeDotSsh(),
-];
-function pathHomeDotSsh() {
-    try {
-        return `${os.homedir()}/.ssh`;
-    }
-    catch {
-        return "~/.ssh";
-    }
-}
+export * from "./modules/sandbox/sandbox.js";
 //# sourceMappingURL=sandbox.js.map

package/dist/shared/src/sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../shared/src/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,KAAK,EAA8B,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,MAAM,IAAI,CAAC;AAgBpB,IAAI,cAAc,GAA2B,IAAI,CAAC;AAElD,SAAS,SAAS,CAAC,KAAyB;IACxC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,CAAC,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE;YAChD,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACH,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;YACtB,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC;SACzB,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IAClC,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAE1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC/B,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,+CAA+C;SAC1D,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,MAAM,WAAW,GACb,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO;QAC9C,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,GAAG,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QACd,cAAc,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;QAC5E,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAElE,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,SAAS,CAAC,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACtC,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;QAC1B,GAAG,GAAG,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,qEAAqE;IACrE,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACZ,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,wCAAwC;YAChD,GAAG;YACH,GAAG;YACH,IAAI;SACP,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACpB,uEAAuE;QACvE,sEAAsE;QACtE,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,MAAM,EACF,qFAAqF;YACzF,IAAI;SACP,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,sEAAsE;IACtE,yEAAyE;IACzE,iFAAiF;IACjF,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,EAAE,CAAC;QACjF,cAAc,GAAG;YACb,OAAO,EAAE,KAAK;YACd,GAAG;YACH,GAAG;YACH,IAAI;YACJ,MAAM,EACF,eAAe,GAAG,8BAA8B,OAAO,CAAC,MAAM,EAAE,gBAAgB;gBAChF,wFAAwF;SAC/F,CAAC;QACF,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,cAAc,GAAG;QACb,OAAO,EAAE,IAAI;QACb,GAAG;QACH,GAAG;QACH,IAAI;KACP,CAAC;IACF,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,yBAAyB;IACrC,cAAc,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CAAC,UAA+B,EAAE;IACxE,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC5C,IAAI,cAAc;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IAEvC,MAAM,QAAQ,GAAG,sBAAsB,EAAE,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAClD,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,OAAO;QACH,GAAG,IAAI;QACP,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,CAAC,QAAQ,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CACxB,OAAe,EACf,IAAuB,EACvB,UAA+B,EAAE;IAEjC,MAAM,IAAI,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,OAAO,EAAE,IAAgB,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAM5B,OAAO;QACH,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,sBAAsB,EAAE;QAClC,UAAU,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;QAC1E,UAAU,EAAE,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;KAC7E,CAAC;AACN,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACnC,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,cAAc,EAAE;CACV,CAAC;AAEX,SAAS,cAAc;IACnB,IAAI,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,QAAQ,CAAC;IACpB,CAAC;AACL,CAAC"}
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../../shared/src/sandbox.ts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC"}

package/dist/shared/src/secrets.d.ts

@@ -0,0 +1 @@
+export * from "./modules/security/secrets.js";

package/dist/shared/src/secrets.js

@@ -0,0 +1,2 @@
+export * from "./modules/security/secrets.js";
+//# sourceMappingURL=secrets.js.map

package/dist/shared/src/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../../shared/src/secrets.ts"],"names":[],"mappings":"AAAA,cAAc,+BAA+B,CAAC"}

package/dist/shared/src/storage.d.ts

@@ -1,274 +1 @@
-import Database from "better-sqlite3";
-import { AgentID, LogID, MessageID, TaskID, TraceID } from "./types.js";
-export interface AgentRow {
-    name: AgentID;
-    state: string;
-    task: string;
-    last_updated: string;
-}
-export interface MessageRow {
-    id?: MessageID;
-    timestamp: string;
-    from: AgentID;
-    to: AgentID;
-    category: string;
-    content: string;
-    traceId: TraceID;
-    parentId?: TaskID;
-    status: string;
-    priority: string;
-    requiresApproval: boolean;
-}
-export interface TaskRow {
-    id: TaskID;
-    traceId: TraceID;
-    description: string;
-    agent: AgentID;
-    status: string;
-    priority: string;
-    dependencies: string[];
-    createdAt?: string;
-}
-export interface LogRow {
-    id?: LogID;
-    timestamp: string;
-    agent: AgentID;
-    action: string;
-    trace_id?: TraceID;
-    status: string;
-    summary: string;
-    findings?: string;
-    prev_hash?: string;
-    hash?: string;
-}
-export interface CostDbRow {
-    id: number;
-    provider: string;
-    model: string;
-    input_tokens: number;
-    output_tokens: number;
-    cost: number;
-    timestamp: string;
-    trace_id: string | null;
-}
-export interface MessageDbRow {
-    id: number;
-    timestamp: string;
-    sender: string;
-    receiver: string;
-    category: string;
-    content: string;
-    trace_id: string;
-    parent_id: string | null;
-    status: string;
-    priority: string;
-    requires_approval: number;
-}
-export interface TaskDbRow {
-    id: string;
-    trace_id: string;
-    description: string;
-    agent: string;
-    status: string;
-    priority: string;
-    dependencies: string;
-    created_at: string;
-}
-export interface LogDbRow {
-    id: number;
-    timestamp: string;
-    agent: string;
-    action: string;
-    trace_id: string | null;
-    status: string;
-    summary: string;
-    findings: string | null;
-    prev_hash: string | null;
-    hash: string | null;
-}
-/**
- * Resolves the framework directory (.atabey) intelligently by ascending the directory tree,
- * preventing subpackages and test runners from spraying databases in random subfolders.
- */
-export declare function resolveFrameworkDir(): string;
-/**
- * [DB] Canonical Atabey Storage Engine (Single Source of Truth)
- * Central SQLite database for enterprise-scale multi-agent state management.
- */
-export declare class AtabeyStorage {
-    private static db;
-    static getDB(): Database.Database;
-    private static initializeSchema;
-    static getKnowledgeList(): Array<{
-        filename: string;
-        updated_at: string;
-    }>;
-    static getKnowledgeFile(filename: string): {
-        filename: string;
-        content: string;
-        updated_at: string;
-    } | null;
-    static saveKnowledgeFile(filename: string, content: string): void;
-    static deleteKnowledgeFile(filename: string): boolean;
-    static hasUsers(): boolean;
-    static getUsers(): Array<{
-        name: string;
-        token: string;
-        role: string;
-    }>;
-    static getUserByToken(token: string): {
-        name: string;
-        role: string;
-    } | null;
-    static createUser(name: string, token: string, role: string): void;
-    static deleteUser(name: string): boolean;
-    static createAgent(name: string, description: string, skills: string): void;
-    static deleteAgent(name: string): boolean;
-    static updateAgentDetails(name: string, description: string, state: string, task: string, skills: string): void;
-    static onMessageSaved: ((msg: {
-        traceId: string;
-        category: string;
-    }) => void) | null;
-    static onMessageStatusUpdated: ((id: number, status: string) => void) | null;
-    static saveLog(log: {
-        agent: string;
-        action: string;
-        trace_id?: string;
-        status: string;
-        summary: string;
-        findings?: string;
-    }): number;
-    static verifyLogIntegrity(): {
-        valid: boolean;
-        checked?: number;
-        failedLogId?: number;
-        reason?: string;
-        tip?: string;
-    };
-    static saveCost(cost: {
-        provider: string;
-        model: string;
-        inputTokens: number;
-        outputTokens: number;
-        cost: number;
-        timestamp: string;
-        traceId?: string;
-    }): void;
-    static getAllCosts(): Array<{
-        provider: string;
-        model: string;
-        inputTokens: number;
-        outputTokens: number;
-        cost: number;
-        timestamp: string;
-        traceId?: string;
-    }>;
-    static updateAgentStatus(name: string, state: string, task: string, lastUpdated?: string): void;
-    static getAllAgents(): AgentRow[];
-    static saveMessage(msg: MessageRow): void;
-    static getPendingMessages(): MessageRow[];
-    static updateMessageStatus(id: number, status: string): void;
-    static saveTask(task: TaskRow): void;
-    static getTasks(traceId?: TraceID): TaskRow[];
-    static getLogs(agentName?: string): LogRow[];
-    static setMetadata(key: string, value: string): void;
-    static getMetadata(key: string): string | null;
-    static saveLoopCooldown(agent: string, cooldownUntil: number, detail: string | null, cooldownCount?: number): void;
-    static getLoopCooldown(agent: string): {
-        agent: string;
-        cooldownUntil: number;
-        detail: string | null;
-        cooldownCount: number;
-    } | null;
-    static clearLoopCooldown(agent: string): boolean;
-    static clearAllLoopCooldowns(): void;
-    static listActiveLoopCooldowns(): Array<{
-        agent: string;
-        cooldownUntil: number;
-        detail: string | null;
-        cooldownCount: number;
-    }>;
-    static purgeExpiredLoopCooldowns(): number;
-    static saveApproval(app: {
-        traceId: string;
-        toolName: string;
-        agent: string;
-        riskScore: number;
-        riskLevel: string;
-        reason: string;
-        args: Record<string, unknown>;
-        createdAt: number;
-        expiresAt: number;
-        status?: "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
-        passcode?: string;
-    }): void;
-    static saveApprovalRequest(request: {
-        traceId: string;
-        toolName: string;
-        agent: string;
-        riskScore: number;
-        riskLevel: string;
-        reason: string;
-        args: Record<string, unknown>;
-        createdAt: number;
-        expiresAt: number;
-        status?: "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
-        passcode?: string;
-    }): void;
-    static getApproval(traceId: string): {
-        traceId: string;
-        toolName: string;
-        agent: string;
-        riskScore: number;
-        riskLevel: string;
-        reason: string;
-        args: Record<string, unknown>;
-        createdAt: number;
-        expiresAt: number;
-        status: "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
-        passcode?: string;
-    } | null;
-    static getPendingApprovals(): Array<{
-        traceId: string;
-        toolName: string;
-        agent: string;
-        riskScore: number;
-        riskLevel: string;
-        reason: string;
-        args: Record<string, unknown>;
-        createdAt: number;
-        expiresAt: number;
-        status: "PENDING" | "APPROVED" | "REJECTED" | "EXPIRED";
-        passcode?: string;
-    }>;
-    static updateApprovalStatus(traceId: string, status: string): void;
-    static clearAllApprovals(): void;
-    static saveDiscipline(agent: string, stats: {
-        totalCalls: number;
-        violations: number;
-        lastViolation: string | null;
-        cooldownUntil: number;
-    }): void;
-    static getDiscipline(agent: string): {
-        agent: string;
-        totalCalls: number;
-        violations: number;
-        lastViolation: string | null;
-        cooldownUntil: number;
-    } | null;
-    static getAllDiscipline(): Array<{
-        agent: string;
-        totalCalls: number;
-        violations: number;
-        lastViolation: string | null;
-        cooldownUntil: number;
-    }>;
-    static clearAllDiscipline(): void;
-    static checkIntegrity(): {
-        ok: boolean;
-        message: string;
-    };
-    static reset(): void;
-}
-/** Canonical alias */
-export declare const Storage: typeof AtabeyStorage;
+export * from "./modules/storage/storage.js";