atabey 0.1.1-beta → 0.1.3

package/dist/atabey/src/cli/commands/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../../../src/cli/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAErC,QAAQ,UAAU,EAAE,CAAC;QACjB,KAAK,OAAO;YACR,MAAM,cAAc,EAAE,CAAC;YACvB,MAAM;QACV,KAAK,SAAS;YACV,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM;QACV,KAAK,QAAQ;YACT,MAAM,cAAc,EAAE,CAAC;YACvB,MAAM;QACV,KAAK,MAAM,CAAC;QACZ;YACI,WAAW,EAAE,CAAC;YACd,MAAM;IACd,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc;IACzB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,6EAA6E;IAC7E,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,MAAM,CAAC;IAEpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,YAAY,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,6DAA6D;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;YACzE,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,OAAO,CAAC;gBAClB,MAAM,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,GAAG,YAAY,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK;QACzB,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhB,EAAE,CAAC,OAAO,CAAC,0BAA0B,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpE,4BAA4B;IAC5B,iEAAiE;IACjE,wCAAwC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;QAC9B,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;QACxC,GAAG,EAAE;YACD,GAAG,OAAO,CAAC,GAAG;YACd,mBAAmB,EAAE,OAAO,CAAC,GAAG,EAAE;YAClC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,eAAe;YACxC,8BAA8B,EAAE,MAAM;SACzC;KACJ,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;QACtB,EAAE,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;QACtB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACb,EAAE,CAAC,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,gBAAgB,OAAO,UAAU,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACjG,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;GAsBtB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../../../../src/cli/commands/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,GAAG,EAAE,MAAM,2BAA2B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AAEpC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAc;IAC3C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAErC,QAAQ,UAAU,EAAE,CAAC;QACjB,KAAK,OAAO;YACR,MAAM,cAAc,EAAE,CAAC;YACvB,MAAM;QACV,KAAK,SAAS;YACV,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM;QACV,KAAK,QAAQ;YACT,MAAM,cAAc,EAAE,CAAC;YACvB,MAAM;QACV,KAAK,MAAM,CAAC;QACZ;YACI,WAAW,EAAE,CAAC;YACd,MAAM;IACd,CAAC;AACL,CAAC;AAED,KAAK,UAAU,cAAc;IACzB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAElC,6EAA6E;IAC7E,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,MAAM,GAAG,MAAM,CAAC;IAEpB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,qBAAqB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzF,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,OAAO,GAAG,YAAY,CAAC;QAC3B,CAAC;aAAM,CAAC;YACJ,6DAA6D;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;YACzE,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzB,OAAO,GAAG,OAAO,CAAC;gBAClB,MAAM,GAAG,KAAK,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACJ,MAAM,GAAG,KAAK,CAAC;gBACf,OAAO,GAAG,YAAY,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK;QACzB,CAAC,CAAC,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhB,EAAE,CAAC,OAAO,CAAC,0BAA0B,GAAG,MAAM,GAAG,KAAK,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpE,MAAM,YAAY,GAAG,CAAC,CAAC;IACvB,MAAM,uBAAuB,GAAG,KAAK,CAAC;IACtC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,SAAS,cAAc;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YAC9B,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;YACxC,GAAG,EAAE;gBACD,GAAG,OAAO,CAAC,GAAG;gBACd,mBAAmB,EAAE,OAAO,CAAC,GAAG,EAAE;gBAClC,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,eAAe;gBACxC,8BAA8B,EAAE,MAAM;aACzC;SACJ,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,EAAE,CAAC,KAAK,CAAC,+BAA+B,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,CAAC;YAClD,IAAI,CAAC,cAAc,IAAI,YAAY,GAAG,YAAY,EAAE,CAAC;gBACjD,YAAY,EAAE,CAAC;gBACf,EAAE,CAAC,OAAO,CAAC,iCAAiC,YAAY,IAAI,YAAY,MAAM,CAAC,CAAC;gBAChF,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACJ,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrB,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC9B,IAAI,cAAc,IAAI,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC9E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YACtC,IAAI,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACnC,YAAY,GAAG,CAAC,CAAC;YACrB,CAAC;YAED,YAAY,EAAE,CAAC;YACf,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,KAAK,OAAO,IAAI,YAAY,IAAI,YAAY,CAAC;YAE/F,IAAI,UAAU,EAAE,CAAC;gBACb,EAAE,CAAC,OAAO,CAAC,oCAAoC,IAAI,6BAA6B,YAAY,IAAI,YAAY,MAAM,CAAC,CAAC;gBACpH,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAChF,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YACrC,CAAC;iBAAM,CAAC;gBACJ,IAAI,YAAY,GAAG,YAAY,EAAE,CAAC;oBAC9B,EAAE,CAAC,KAAK,CAAC,mCAAmC,YAAY,sBAAsB,CAAC,CAAC;gBACpF,CAAC;qBAAM,CAAC;oBACJ,EAAE,CAAC,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;YAC7B,CAAC;QACL,CAAC,CAAC,CAAC;IACP,CAAC;IAED,cAAc,EAAE,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAEvE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAClC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,gBAAgB,OAAO,UAAU,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,2BAA2B,CAAC,CAAC;IACnG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAC3F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;AACpG,CAAC;AAED,KAAK,UAAU,cAAc;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAC3E,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;IACjG,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;GAsBtB,CAAC,CAAC;AACL,CAAC"}

package/dist/atabey/src/cli/commands/orchestrate.d.ts

@@ -14,26 +14,26 @@ export declare const HermesMessageSchema: z.ZodObject<{
     requiresApproval: z.ZodOptional<z.ZodBoolean>;
     dependencies: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, "strip", z.ZodTypeAny, {
-    content: string;
-    traceId: string;
     to: string;
     from: string;
-    status: "PENDING" | "APPROVED" | "PROCESSED" | "WAITING";
+    traceId: string;
+    status: "PENDING" | "PROCESSED" | "WAITING" | "APPROVED";
     category: "DELEGATION" | "ALERT" | "ACTION" | "SUBTASK" | "REPLY";
     timestamp: string;
+    content: string;
     requiresApproval?: boolean | undefined;
     parentId?: string | undefined;
     priority?: "LOW" | "HIGH" | "NORMAL" | undefined;
     action?: string | undefined;
     dependencies?: string[] | undefined;
 }, {
-    content: string;
-    traceId: string;
     to: string;
     from: string;
-    status: "PENDING" | "APPROVED" | "PROCESSED" | "WAITING";
+    traceId: string;
+    status: "PENDING" | "PROCESSED" | "WAITING" | "APPROVED";
     category: "DELEGATION" | "ALERT" | "ACTION" | "SUBTASK" | "REPLY";
     timestamp: string;
+    content: string;
     requiresApproval?: boolean | undefined;
     parentId?: string | undefined;
     priority?: "LOW" | "HIGH" | "NORMAL" | undefined;

package/dist/atabey/src/cli/index.js

@@ -384,7 +384,7 @@ async function main() {
 }
 function showHelp() {
     process.stdout.write(`
-[ATABEY] v${getPackageVersion()} — AI Governance & Multi-Agent Platform / Orchestrator
+[ATABEY] v${getPackageVersion()} — Local AI Control Plane & Discipline Layer
 
 Usage:
   atabey <command> [options]

package/dist/shared/src/agent-identity.d.ts

@@ -1,34 +1 @@
-/**
- * Agent Identity — cryptographically signed agent tokens.
- *
- * Problem: `ATABEY_ACTIVE_AGENT` is a plain env var, so any tool/subprocess can
- * impersonate `@manager` or `@security`. When `ATABEY_AGENT_SECRET` is set,
- * Atabey accepts an HMAC-signed `ATABEY_AGENT_TOKEN` and verifies it
- * (fail-closed on tampering/expiry). Set `ATABEY_AGENT_IDENTITY_REQUIRED=true`
- * to refuse plain-env identity entirely.
- *
- * Token format: `${agent}.${issuedAt}.${expiresAt}.${hmacSha256Base64url}`
- */
-export interface AgentIdentity {
-    agent: string;
-    issuedAt: number;
-    expiresAt: number;
-}
-export interface AgentTokenResult {
-    valid: boolean;
-    agent?: string;
-    reason?: string;
-}
-/** True when agent-token verification is mandatory (plain env rejected). */
-export declare function isAgentIdentityEnforced(): boolean;
-/** Sign an agent identity into a compact token. */
-export declare function signAgentToken(agent: string, options?: {
-    ttlMs?: number;
-    key?: string | Buffer;
-}): string;
-/** Verify an agent token (signature + expiry). */
-export declare function verifyAgentToken(token: string, options?: {
-    key?: string | Buffer;
-}): AgentTokenResult;
-/** Decode a token's identity without verification (for diagnostics only). */
-export declare function decodeAgentToken(token: string): AgentIdentity | null;
+export * from "./modules/agent/agent-identity.js";

package/dist/shared/src/agent-identity.js

@@ -1,77 +1,2 @@
-/**
- * Agent Identity — cryptographically signed agent tokens.
- *
- * Problem: `ATABEY_ACTIVE_AGENT` is a plain env var, so any tool/subprocess can
- * impersonate `@manager` or `@security`. When `ATABEY_AGENT_SECRET` is set,
- * Atabey accepts an HMAC-signed `ATABEY_AGENT_TOKEN` and verifies it
- * (fail-closed on tampering/expiry). Set `ATABEY_AGENT_IDENTITY_REQUIRED=true`
- * to refuse plain-env identity entirely.
- *
- * Token format: `${agent}.${issuedAt}.${expiresAt}.${hmacSha256Base64url}`
- */
-import crypto from "crypto";
-import { resolveAuditChainKey } from "./audit-chain.js";
-function resolveKey(explicit) {
-    if (explicit) {
-        return Buffer.isBuffer(explicit) ? explicit : crypto.createHash("sha256").update(explicit, "utf8").digest();
-    }
-    const envSecret = process.env.ATABEY_AGENT_SECRET;
-    if (envSecret && envSecret.trim()) {
-        return crypto.createHash("sha256").update(envSecret.trim(), "utf8").digest();
-    }
-    return resolveAuditChainKey();
-}
-function timingSafeEqual(a, b) {
-    const ba = Buffer.from(a);
-    const bb = Buffer.from(b);
-    if (ba.length !== bb.length)
-        return false;
-    return crypto.timingSafeEqual(ba, bb);
-}
-/** True when agent-token verification is mandatory (plain env rejected). */
-export function isAgentIdentityEnforced() {
-    return process.env.ATABEY_AGENT_IDENTITY_REQUIRED === "true";
-}
-/** Sign an agent identity into a compact token. */
-export function signAgentToken(agent, options = {}) {
-    const key = resolveKey(options.key);
-    if (!key) {
-        throw new Error("[AGENT_IDENTITY] No signing key. Set ATABEY_AGENT_SECRET.");
-    }
-    const name = agent.replace(/^@/, "");
-    const issuedAt = Date.now();
-    const expiresAt = issuedAt + (options.ttlMs ?? 60 * 60 * 1000);
-    const payload = `${name}.${issuedAt}.${expiresAt}`;
-    const sig = crypto.createHmac("sha256", key).update(payload).digest("base64url");
-    return `${payload}.${sig}`;
-}
-/** Verify an agent token (signature + expiry). */
-export function verifyAgentToken(token, options = {}) {
-    const key = resolveKey(options.key);
-    if (!key)
-        return { valid: false, reason: "No signing key configured." };
-    if (!token || typeof token !== "string")
-        return { valid: false, reason: "Empty token." };
-    const parts = token.split(".");
-    if (parts.length !== 4)
-        return { valid: false, reason: "Malformed token." };
-    const [name, issuedAt, expiresAt, sig] = parts;
-    const payload = `${name}.${issuedAt}.${expiresAt}`;
-    const expected = crypto.createHmac("sha256", key).update(payload).digest("base64url");
-    if (!timingSafeEqual(sig, expected))
-        return { valid: false, reason: "Signature mismatch." };
-    const exp = Number(expiresAt);
-    if (!Number.isFinite(exp))
-        return { valid: false, reason: "Invalid expiry." };
-    if (Date.now() > exp)
-        return { valid: false, reason: "Token expired." };
-    return { valid: true, agent: `@${name}` };
-}
-/** Decode a token's identity without verification (for diagnostics only). */
-export function decodeAgentToken(token) {
-    const parts = token.split(".");
-    if (parts.length !== 4)
-        return null;
-    return { agent: `@${parts[0]}`, issuedAt: Number(parts[1]), expiresAt: Number(parts[2]) };
-}
+export * from "./modules/agent/agent-identity.js";
 //# sourceMappingURL=agent-identity.js.map

package/dist/shared/src/agent-identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../../../../shared/src/agent-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAcxD,SAAS,UAAU,CAAC,QAA0B;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAClD,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,oBAAoB,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,CAAS,EAAE,CAAS;IACzC,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,MAAM,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB;IACnC,OAAO,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,MAAM,CAAC;AACjE,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc,CAAC,KAAa,EAAE,UAAqD,EAAE;IACjG,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACjF,OAAO,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC;AAC/B,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,UAAqC,EAAE;IACnF,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACxE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEzF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC5E,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACtF,IAAI,CAAC,eAAe,CAAC,GAAG,EAAE,QAAQ,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAE5F,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC9E,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAExE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AAC9C,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"agent-identity.js","sourceRoot":"","sources":["../../../../shared/src/agent-identity.ts"],"names":[],"mappings":"AAAA,cAAc,mCAAmC,CAAC"}

package/dist/shared/src/api-catalog.d.ts

@@ -1,57 +1 @@
-/**
- * API Catalog — endpoint registry, route/OpenAPI scanner, and drift detection.
- *
- * Purpose: let frontend/mobile agents integrate against the backend API using
- * a compact JSON catalog instead of reading large route source files (token
- * savings + zero context pollution).
- *
- * The scanner is HEURISTIC (regex/AST-lite) and covers:
- *   - Express / Fastify:  app|router|server|fastify.get('/path', ...)
- *   - Fastify route():    fastify.route({ method, url, ... })
- *   - NestJS decorators:  @Get('path') / @Post('path')
- *   - OpenAPI v3 / Swagger v2 JSON specs
- */
-export interface ApiEndpoint {
-    method: string;
-    path: string;
-    tag?: string;
-    summary?: string;
-    authRequired: boolean;
-    requestSchema?: string;
-    responseSchema?: string;
-    source?: string;
-    updatedAt: string;
-}
-export interface ApiCatalog {
-    version: 1;
-    generatedAt: string;
-    endpoints: ApiEndpoint[];
-}
-export interface ApiDrift {
-    added: ApiEndpoint[];
-    removed: ApiEndpoint[];
-    changed: Array<{
-        previous: ApiEndpoint;
-        current: ApiEndpoint;
-    }>;
-}
-export declare function endpointKey(e: {
-    method: string;
-    path: string;
-}): string;
-export declare function normalizePath(p: string): string;
-/** Parse an OpenAPI v3 or Swagger v2 spec object into endpoints. */
-export declare function parseOpenApiSpec(spec: unknown): ApiEndpoint[];
-/**
- * Walk a project tree and collect endpoints from route source files and any
- * OpenAPI/Swagger JSON specs.
- */
-export declare function scanProjectForEndpoints(rootDir: string, options?: {
-    maxFiles?: number;
-}): ApiEndpoint[];
-export declare function dedupe(endpoints: ApiEndpoint[]): ApiEndpoint[];
-/**
- * Diff a previous catalog against a freshly scanned one.
- */
-export declare function detectApiDrift(previous: ApiEndpoint[], current: ApiEndpoint[]): ApiDrift;
-export declare function isApiDriftClean(drift: ApiDrift): boolean;
+export * from "./modules/agent/api-catalog.js";

package/dist/shared/src/api-catalog.js

@@ -1,254 +1,2 @@
-/**
- * API Catalog — endpoint registry, route/OpenAPI scanner, and drift detection.
- *
- * Purpose: let frontend/mobile agents integrate against the backend API using
- * a compact JSON catalog instead of reading large route source files (token
- * savings + zero context pollution).
- *
- * The scanner is HEURISTIC (regex/AST-lite) and covers:
- *   - Express / Fastify:  app|router|server|fastify.get('/path', ...)
- *   - Fastify route():    fastify.route({ method, url, ... })
- *   - NestJS decorators:  @Get('path') / @Post('path')
- *   - OpenAPI v3 / Swagger v2 JSON specs
- */
-import fs from "fs";
-import path from "path";
-const HTTP_METHODS = ["get", "post", "put", "patch", "delete", "options", "head"];
-const ROUTE_EXTENSIONS = new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
-const SKIP_DIRS = new Set(["node_modules", "dist", "build", ".git", "coverage", ".atabey", ".next"]);
-export function endpointKey(e) {
-    return `${e.method.toUpperCase()} ${normalizePath(e.path)}`;
-}
-export function normalizePath(p) {
-    if (!p)
-        return "/";
-    let out = p.trim();
-    if (!out.startsWith("/"))
-        out = `/${out}`;
-    // Collapse :param and {param} to a stable placeholder for drift comparison.
-    out = out.replace(/\{[^}]+\}/g, ":param").replace(/:[A-Za-z0-9_]+/g, ":param");
-    out = out.replace(/\/+$/, "");
-    return out || "/";
-}
-function defaultTag(p) {
-    const seg = p.split("/").filter(Boolean);
-    return seg[0] || "root";
-}
-/** Extract a route statement plus a few following lines for schema hints. */
-function scanRouteSource(filePath, content) {
-    const now = new Date().toISOString();
-    const lines = content.split("\n");
-    const found = new Map();
-    const add = (method, rawPath, schemaHint, authHint) => {
-        if (!rawPath || rawPath === "*")
-            return;
-        const m = method.toUpperCase();
-        const p = rawPath;
-        const key = endpointKey({ method: m, path: p });
-        if (found.has(key))
-            return;
-        const schemaMatch = /(?:schema|body|response)\s*:\s*([A-Za-z0-9_.]+)/.exec(schemaHint);
-        found.set(key, {
-            method: m,
-            path: p.startsWith("/") ? p : `/${p}`,
-            tag: defaultTag(p),
-            authRequired: authHint,
-            requestSchema: schemaMatch?.[1],
-            source: filePath,
-            updatedAt: now,
-        });
-    };
-    const isRouteLine = (l) => /\.(get|post|put|patch|delete|options|head)\s*\(/.test(l) ||
-        /@(Get|Post|Put|Patch|Delete|Options|Head)\s*\(/.test(l) ||
-        /\broute\s*\(/.test(l);
-    for (let i = 0; i < lines.length; i++) {
-        const line = lines[i];
-        // Statement-bounded window: stop at the next route line or statement end
-        // so schema/auth hints cannot bleed into the following route.
-        let window = line;
-        for (let j = i + 1; j < Math.min(i + 12, lines.length); j++) {
-            if (isRouteLine(lines[j]))
-                break;
-            window += `\n${lines[j]}`;
-            if (/;\s*$/.test(lines[j]))
-                break;
-        }
-        const authHint = /\b(authenticate|authGuard|verifyToken|preHandler\s*:\s*\[?\s*auth|requireAuth|jwt)\b/i.test(window);
-        // Express / Fastify shorthand: app.get('/x', ...) / router.post("/x", ...)
-        const short = /\.(get|post|put|patch|delete|options|head)\s*\(\s*[`'"]([^`'"]+)[`'"]/gi;
-        let m;
-        while ((m = short.exec(line)) !== null) {
-            add(m[1], m[2], window, authHint);
-        }
-        // Fastify route({ method: 'GET', url: '/x' }) — method/url may be in either order.
-        if (/\broute\s*\(/.test(line) || /\burl\s*:/.test(line)) {
-            const methodM = /method\s*:\s*[`'"](\w+)[`'"]/i.exec(window);
-            const urlM = /url\s*:\s*[`'"]([^`'"]+)[`'"]/i.exec(window);
-            if (methodM && urlM)
-                add(methodM[1], urlM[1], window, authHint);
-        }
-        // NestJS decorators: @Get('path') @Post()
-        const dec = /@(Get|Post|Put|Patch|Delete|Options|Head)\s*\(\s*[`'"]?([^`'")]*)[`'"]?\s*\)/g;
-        while ((m = dec.exec(line)) !== null) {
-            add(m[1], m[2] || "/", window, authHint);
-        }
-    }
-    return [...found.values()];
-}
-/** Parse an OpenAPI v3 or Swagger v2 spec object into endpoints. */
-export function parseOpenApiSpec(spec) {
-    const now = new Date().toISOString();
-    const doc = spec;
-    const paths = doc?.["paths"];
-    if (!paths || typeof paths !== "object")
-        return [];
-    const out = [];
-    for (const [rawPath, item] of Object.entries(paths)) {
-        if (!item || typeof item !== "object")
-            continue;
-        for (const method of HTTP_METHODS) {
-            const op = item[method];
-            if (!op)
-                continue;
-            const tags = Array.isArray(op["tags"]) ? op["tags"] : [];
-            const security = op["security"];
-            const requestSchema = refName(op["requestBody"]?.["content"]?.["application/json"]) ??
-                refName(op["parameters"]);
-            const responses = op["responses"];
-            const okResp = responses?.["200"] ?? responses?.["201"] ?? Object.values(responses || {})[0];
-            const responseSchema = refName((okResp?.["content"]?.["application/json"]) ?? okResp?.["schema"]);
-            out.push({
-                method: method.toUpperCase(),
-                path: rawPath,
-                tag: tags[0] || defaultTag(rawPath),
-                summary: typeof op["summary"] === "string" ? op["summary"] : undefined,
-                authRequired: Array.isArray(security) ? security.length > 0 : false,
-                requestSchema,
-                responseSchema,
-                source: "openapi",
-                updatedAt: now,
-            });
-        }
-    }
-    return out;
-}
-function refName(node) {
-    if (!node || typeof node !== "object")
-        return undefined;
-    const obj = node;
-    if (typeof obj["$ref"] === "string")
-        return obj["$ref"];
-    if (typeof obj["title"] === "string")
-        return obj["title"];
-    const schema = obj["schema"];
-    if (schema && typeof schema === "object") {
-        const s = schema;
-        if (typeof s["$ref"] === "string")
-            return s["$ref"];
-        if (typeof s["title"] === "string")
-            return s["title"];
-    }
-    return undefined;
-}
-/**
- * Walk a project tree and collect endpoints from route source files and any
- * OpenAPI/Swagger JSON specs.
- */
-export function scanProjectForEndpoints(rootDir, options = {}) {
-    const maxFiles = options.maxFiles ?? 5000;
-    const results = [];
-    let visited = 0;
-    const walk = (dir) => {
-        if (visited >= maxFiles)
-            return;
-        let entries;
-        try {
-            entries = fs.readdirSync(dir, { withFileTypes: true });
-        }
-        catch {
-            return;
-        }
-        for (const entry of entries) {
-            if (visited >= maxFiles)
-                return;
-            const full = path.join(dir, entry.name);
-            if (entry.isDirectory()) {
-                if (SKIP_DIRS.has(entry.name))
-                    continue;
-                walk(full);
-            }
-            else if (entry.isFile()) {
-                visited++;
-                const ext = path.extname(entry.name).toLowerCase();
-                try {
-                    if (ext === ".json" && /openapi|swagger/i.test(entry.name)) {
-                        const spec = JSON.parse(fs.readFileSync(full, "utf8"));
-                        results.push(...parseOpenApiSpec(spec));
-                    }
-                    else if (ROUTE_EXTENSIONS.has(ext)) {
-                        const content = fs.readFileSync(full, "utf8");
-                        if (/\.(get|post|put|patch|delete)\(|@(Get|Post|Put|Patch|Delete)\(|\broute\(/.test(content)) {
-                            results.push(...scanRouteSource(path.relative(rootDir, full), content));
-                        }
-                    }
-                }
-                catch {
-                    /* skip unreadable files */
-                }
-            }
-        }
-    };
-    walk(rootDir);
-    return dedupe(results);
-}
-export function dedupe(endpoints) {
-    const map = new Map();
-    for (const e of endpoints) {
-        const key = endpointKey(e);
-        const existing = map.get(key);
-        if (!existing) {
-            map.set(key, e);
-        }
-        else {
-            // Prefer the record with richer schema info.
-            map.set(key, {
-                ...existing,
-                requestSchema: existing.requestSchema ?? e.requestSchema,
-                responseSchema: existing.responseSchema ?? e.responseSchema,
-                authRequired: existing.authRequired || e.authRequired,
-            });
-        }
-    }
-    return [...map.values()].sort((a, b) => endpointKey(a).localeCompare(endpointKey(b)));
-}
-/**
- * Diff a previous catalog against a freshly scanned one.
- */
-export function detectApiDrift(previous, current) {
-    const prevMap = new Map(previous.map((e) => [endpointKey(e), e]));
-    const curMap = new Map(current.map((e) => [endpointKey(e), e]));
-    const added = [];
-    const removed = [];
-    const changed = [];
-    for (const [key, cur] of curMap) {
-        const prev = prevMap.get(key);
-        if (!prev) {
-            added.push(cur);
-            continue;
-        }
-        if ((prev.requestSchema ?? "") !== (cur.requestSchema ?? "") ||
-            (prev.responseSchema ?? "") !== (cur.responseSchema ?? "") ||
-            prev.authRequired !== cur.authRequired) {
-            changed.push({ previous: prev, current: cur });
-        }
-    }
-    for (const [key, prev] of prevMap) {
-        if (!curMap.has(key))
-            removed.push(prev);
-    }
-    return { added, removed, changed };
-}
-export function isApiDriftClean(drift) {
-    return drift.added.length === 0 && drift.removed.length === 0 && drift.changed.length === 0;
-}
+export * from "./modules/agent/api-catalog.js";
 //# sourceMappingURL=api-catalog.js.map

package/dist/shared/src/api-catalog.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-catalog.js","sourceRoot":"","sources":["../../../../shared/src/api-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AA0BxB,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AACjF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAErG,MAAM,UAAU,WAAW,CAAC,CAAmC;IAC3D,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAS;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IACnB,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,GAAG,GAAG,IAAI,GAAG,EAAE,CAAC;IAC1C,4EAA4E;IAC5E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IAC/E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,GAAG,IAAI,GAAG,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IACzB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAC5B,CAAC;AAED,6EAA6E;AAC7E,SAAS,eAAe,CAAC,QAAgB,EAAE,OAAe;IACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE7C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,UAAkB,EAAE,QAAiB,EAAE,EAAE;QACnF,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG;YAAE,OAAO;QACxC,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC;QAClB,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC3B,MAAM,WAAW,GAAG,iDAAiD,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;YACX,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE;YACrC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YAClB,YAAY,EAAE,QAAQ;YACtB,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;IACP,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAC9B,iDAAiD,CAAC,IAAI,CAAC,CAAC,CAAC;QACzD,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAE3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACtB,yEAAyE;QACzE,8DAA8D;QAC9D,IAAI,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1D,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM;YACjC,MAAM,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,uFAAuF,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEtH,2EAA2E;QAC3E,MAAM,KAAK,GAAG,yEAAyE,CAAC;QACxF,IAAI,CAAyB,CAAC;QAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACrC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACtC,CAAC;QAED,mFAAmF;QACnF,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,IAAI,IAAI;gBAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACpE,CAAC;QAED,0CAA0C;QAC1C,MAAM,GAAG,GAAG,+EAA+E,CAAC;QAC5F,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,gBAAgB,CAAC,IAAa;IAC1C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,IAAsC,CAAC;IACnD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAwD,CAAC;IACpF,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEnD,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;YAChC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAwC,CAAC;YAC/D,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,MAAM,CAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC;YAChC,MAAM,aAAa,GACf,OAAO,CAAG,EAAE,CAAC,aAAa,CAA6B,EAAE,CAAC,SAAS,CAA6B,EAAE,CAAC,kBAAkB,CAAC,CAAC;gBACvH,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;YAC9B,MAAM,SAAS,GAAG,EAAE,CAAC,WAAW,CAAwD,CAAC;YACzF,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7F,MAAM,cAAc,GAAG,OAAO,CAC1B,CAAE,MAAM,EAAE,CAAC,SAAS,CAA6B,EAAE,CAAC,kBAAkB,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,QAAQ,CAAC,CACjG,CAAC;YACF,GAAG,CAAC,IAAI,CAAC;gBACL,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,IAAI,EAAE,OAAO;gBACb,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC;gBACnC,OAAO,EAAE,OAAO,EAAE,CAAC,SAAS,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,EAAE,CAAC,SAAS,CAAY,CAAC,CAAC,CAAC,SAAS;gBAClF,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK;gBACnE,aAAa;gBACb,cAAc;gBACd,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,GAAG;aACjB,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CAAC,IAAa;IAC1B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxD,MAAM,GAAG,GAAG,IAA+B,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,OAAO,CAAW,CAAC;IACpE,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAiC,CAAC;QAC5C,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,MAAM,CAAW,CAAC;QAC9D,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,OAAO,CAAW,CAAC;IACpE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,UAAiC,EAAE;IACxF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QACzB,IAAI,OAAO,IAAI,QAAQ;YAAE,OAAO;QAChC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACD,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACtB,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACf,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,OAAO,EAAE,CAAC;gBACV,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,IAAI,CAAC;oBACD,IAAI,GAAG,KAAK,OAAO,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;wBACzD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;wBACvD,OAAO,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC5C,CAAC;yBAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBACnC,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;wBAC9C,IAAI,0EAA0E,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC3F,OAAO,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;wBAC5E,CAAC;oBACL,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,2BAA2B;gBAC/B,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,SAAwB;IAC3C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACJ,6CAA6C;YAC7C,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE;gBACT,GAAG,QAAQ;gBACX,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,CAAC,CAAC,aAAa;gBACxD,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,CAAC,CAAC,cAAc;gBAC3D,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY;aACxD,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,OAAsB;IAC1E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhE,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,MAAM,OAAO,GAA2D,EAAE,CAAC;IAE3E,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,SAAS;QACb,CAAC;QACD,IACI,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;YACxD,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,YAAY,KAAK,GAAG,CAAC,YAAY,EACxC,CAAC;YACC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAe;IAC3C,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;AAChG,CAAC"}
+{"version":3,"file":"api-catalog.js","sourceRoot":"","sources":["../../../../shared/src/api-catalog.ts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC"}

package/dist/shared/src/audit-chain.d.ts

@@ -1,80 +1 @@
-/**
- * Tamper-evident audit hash chain helpers (Phase 1.4).
- *
- * Chain: each entry stores prev_hash (previous entry hash or GENESIS) and hash = SHA-256(payload).
- * Any mutation of historical rows fails verification.
- */
-export declare const AUDIT_CHAIN_GENESIS = "GENESIS";
-export declare function resolveAuditChainKey(): Buffer | null;
-/** Test helper — clears the memoized key. */
-export declare function clearAuditChainKeyCache(): void;
-/**
- * Keyed digest for audit chain entries.
- * Uses HMAC-SHA256 when a key is available; otherwise falls back to plain
- * SHA-256 with a one-time warning (degraded, not recommended).
- */
-export declare function chainDigest(payload: string): string;
-/** @deprecated Use chainDigest() — unkeyed SHA-256 is not tamper-evident. */
-export declare function sha256Hex(payload: string): string;
-export interface ChainAnchor {
-    tip: string;
-    count: number;
-    updatedAt: string;
-}
-export declare function writeChainAnchor(name: string, tip: string, count: number): void;
-export declare function readChainAnchor(name: string): ChainAnchor | null;
-export declare function clearChainAnchor(name: string): void;
-/**
- * Canonical payload for agent execution logs (Storage.saveLog).
- *
- * v2: fields are length-delimited via JSON to remove `|`-join boundary
- * ambiguity (previously agent="a|b" collided with action="b|c"). Changing this
- * invalidates verification of rows written by older (v1) builds.
- */
-export declare function buildAgentLogChainPayload(fields: {
-    prevHash: string;
-    agent: string;
-    action: string;
-    traceId: string;
-    status: string;
-    summary: string;
-    timestamp: string;
-}): string;
-/**
- * Canonical payload for structured Audit.log entries (v2, length-delimited).
- */
-export declare function buildStructuredAuditChainPayload(fields: {
-    prevHash: string;
-    agent: string;
-    action: string;
-    status: string;
-    traceId: string;
-    timestamp: string;
-    detailsJson: string;
-    errorMessage: string;
-}): string;
-export interface ChainRow {
-    id: number;
-    prev_hash: string | null;
-    hash: string | null;
-}
-export interface ChainVerifyResult {
-    valid: boolean;
-    checked: number;
-    failedLogId?: number;
-    reason?: string;
-    tip?: string;
-}
-/**
- * Verify a sequence of rows already ordered by id ASC.
- * `computePayload(row, prevHash)` must rebuild the exact string used at insert time.
- *
- * @param options.digest        keyed digest used at insert time (default: chainDigest)
- * @param options.expectedTip   last appended hash (from an external anchor) — detects truncation
- * @param options.expectedCount number of chained rows expected — detects deletion at the tail
- */
-export declare function verifyHashChain<T extends ChainRow>(rows: T[], computePayload: (row: T, prevHash: string) => string, options?: {
-    digest?: (payload: string) => string;
-    expectedTip?: string;
-    expectedCount?: number;
-}): ChainVerifyResult;
+export * from "./modules/observability/audit-chain.js";