atabey 0.1.1-beta → 0.1.3

package/dist/shared/src/audit.js

@@ -1,322 +1,2 @@
-/**
- * [AUDIT] Structured Audit Log Service
- *
- * Records all critical operations in structured JSON format to SQLite.
- * Queryable, filterable, and traceable.
- *
- * [KVKK/GDPR] GDPR and KVKK Art. 4, 5, 11, 12 compliant:
- * - Sensitive data automatically masked (PII masking)
- * - Data retention limited (TTL)
- * - Data subject rights supported (erasure, query)
- *
- * Usage:
- *   Audit.log("user.create", "SUCCESS", { userId: "usr_123" });
- *   Audit.query({ action: "user.create", status: "FAILED" });
- */
-import { AUDIT_CHAIN_GENESIS, buildStructuredAuditChainPayload, chainDigest, readChainAnchor, writeChainAnchor, clearChainAnchor, verifyHashChain, } from "./audit-chain.js";
-import { maskObject, maskText } from "./pii.js";
-import { databaseHolder } from "./database.js";
-import { logger } from "./logger.js";
-export class Audit {
-    static TABLE = "audit_log";
-    /** Out-of-DB anchor file name for the structured audit chain. */
-    static ANCHOR_NAME = "structured";
-    /** [KVKK] Default data retention period: 30 days */
-    static DEFAULT_RETENTION_DAYS = (() => {
-        const parsed = parseInt(process.env.ATABEY_DATA_RETENTION_DAYS || "30", 10);
-        return Number.isFinite(parsed) && parsed > 0 ? parsed : 30;
-    })();
-    /** [KVKK] Maximum retention for sensitive categories: 90 days */
-    static MAX_RETENTION_DAYS = 90;
-    static initialize() {
-        const db = databaseHolder.getDB();
-        db.exec(`
-            CREATE TABLE IF NOT EXISTS ${this.TABLE} (
-                id INTEGER PRIMARY KEY AUTOINCREMENT,
-                timestamp TEXT NOT NULL,
-                action TEXT NOT NULL,
-                status TEXT NOT NULL,
-                agent TEXT NOT NULL,
-                traceId TEXT,
-                details TEXT,
-                errorMessage TEXT,
-                durationMs INTEGER,
-                dataCategory TEXT DEFAULT 'OPERATIONAL',
-                retentionDays INTEGER DEFAULT ${this.DEFAULT_RETENTION_DAYS},
-                prev_hash TEXT,
-                hash TEXT
-            )
-        `);
-        // Migrate older DBs
-        try {
-            const cols = db.prepare(`PRAGMA table_info(${this.TABLE})`).all().map((c) => c.name);
-            if (!cols.includes("prev_hash"))
-                db.exec(`ALTER TABLE ${this.TABLE} ADD COLUMN prev_hash TEXT`);
-            if (!cols.includes("hash"))
-                db.exec(`ALTER TABLE ${this.TABLE} ADD COLUMN hash TEXT`);
-        }
-        catch {
-            /* ignore */
-        }
-        // Indexes for performance
-        db.exec(`
-            CREATE INDEX IF NOT EXISTS idx_audit_action ON ${this.TABLE}(action);
-            CREATE INDEX IF NOT EXISTS idx_audit_status ON ${this.TABLE}(status);
-            CREATE INDEX IF NOT EXISTS idx_audit_trace ON ${this.TABLE}(traceId);
-            CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON ${this.TABLE}(timestamp);
-            CREATE INDEX IF NOT EXISTS idx_audit_category ON ${this.TABLE}(dataCategory);
-        `);
-    }
-    /**
-     * Refresh the out-of-DB chain anchor after a legitimate deletion
-     * (retention / right-to-erasure). Without this, legitimate deletions would
-     * be indistinguishable from tampering.
-     */
-    static refreshAnchor() {
-        try {
-            const db = databaseHolder.getDB();
-            const row = db.prepare(`SELECT hash FROM ${this.TABLE} WHERE hash IS NOT NULL ORDER BY id DESC LIMIT 1`).get();
-            const count = db.prepare(`SELECT COUNT(*) AS c FROM ${this.TABLE} WHERE hash IS NOT NULL`).get().c;
-            if (row?.hash && count > 0)
-                writeChainAnchor(this.ANCHOR_NAME, row.hash, count);
-            else
-                clearChainAnchor(this.ANCHOR_NAME);
-        }
-        catch {
-            /* ignore */
-        }
-    }
-    /**
-     * Logs a structured audit entry.
-     * [KVKK] Sensitive data is automatically masked.
-     */
-    static log(action, status, options = {}) {
-        const db = databaseHolder.getDB();
-        const requested = options.retentionDays ?? this.DEFAULT_RETENTION_DAYS;
-        const safeRequested = Number.isFinite(requested) && requested >= 0 ? requested : this.DEFAULT_RETENTION_DAYS;
-        const retentionDays = Math.min(safeRequested, this.MAX_RETENTION_DAYS);
-        // [KVKK] PII Masking — mask sensitive data in the details field
-        const maskedDetails = options.details
-            ? maskObject(options.details)
-            : undefined;
-        const maskedError = options.errorMessage
-            ? maskText(options.errorMessage)
-            : undefined;
-        const timestamp = new Date().toISOString();
-        const agent = options.agent || "@manager";
-        const detailsJson = maskedDetails ? JSON.stringify(maskedDetails) : "";
-        const errorMessage = maskedError || "";
-        const traceId = options.traceId || "";
-        const dataCategory = options.dataCategory || "OPERATIONAL";
-        // Append-only hash chain inside a transaction (Phase 1.4)
-        const insert = db.transaction(() => {
-            let prevHash = AUDIT_CHAIN_GENESIS;
-            try {
-                const last = db.prepare(`SELECT hash FROM ${this.TABLE} WHERE hash IS NOT NULL ORDER BY id DESC LIMIT 1`).get();
-                if (last?.hash)
-                    prevHash = last.hash;
-            }
-            catch {
-                /* genesis */
-            }
-            const payload = buildStructuredAuditChainPayload({
-                prevHash,
-                agent,
-                action,
-                status,
-                traceId,
-                timestamp,
-                detailsJson,
-                errorMessage,
-            });
-            const hash = chainDigest(payload);
-            db.prepare(`
-                INSERT INTO ${this.TABLE}
-                    (timestamp, action, status, agent, traceId, details, errorMessage, durationMs, dataCategory, retentionDays, prev_hash, hash)
-                VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-            `).run(timestamp, action, status, agent, options.traceId || null, detailsJson || null, errorMessage || null, options.durationMs || null, dataCategory, retentionDays, prevHash, hash);
-            // Refresh the out-of-DB anchor so tail truncation becomes detectable.
-            const count = db.prepare(`SELECT COUNT(*) AS c FROM ${this.TABLE} WHERE hash IS NOT NULL`).get().c;
-            writeChainAnchor(this.ANCHOR_NAME, hash, count);
-        });
-        insert();
-    }
-    /**
-     * Verify tamper-evident chain for structured audit_log table.
-     */
-    static verifyIntegrity() {
-        const db = databaseHolder.getDB();
-        try {
-            const rows = db.prepare(`SELECT id, prev_hash, hash, agent, action, status, traceId, timestamp, details, errorMessage
-                 FROM ${this.TABLE} ORDER BY id ASC`).all();
-            // Skip unhashed legacy rows at the head; start chain at first hashed row
-            const hashed = rows.filter((r) => r.hash);
-            if (hashed.length === 0) {
-                return { valid: true, checked: 0, reason: "No hashed audit rows yet" };
-            }
-            const anchor = readChainAnchor(this.ANCHOR_NAME);
-            return verifyHashChain(hashed, (row, prevHash) => buildStructuredAuditChainPayload({
-                prevHash,
-                agent: row.agent,
-                action: row.action,
-                status: row.status,
-                traceId: row.traceId || "",
-                timestamp: row.timestamp,
-                detailsJson: row.details || "",
-                errorMessage: row.errorMessage || "",
-            }), {
-                expectedTip: anchor?.tip,
-                expectedCount: anchor?.count,
-            });
-        }
-        catch (err) {
-            return {
-                valid: false,
-                checked: 0,
-                reason: `Verification error: ${err.message}`,
-            };
-        }
-    }
-    /**
-     * Queries audit logs with filters.
-     */
-    static query(options = {}) {
-        const db = databaseHolder.getDB();
-        const conditions = [];
-        const params = [];
-        if (options.action) {
-            conditions.push("action = ?");
-            params.push(options.action);
-        }
-        if (options.status) {
-            conditions.push("status = ?");
-            params.push(options.status);
-        }
-        if (options.agent) {
-            conditions.push("agent = ?");
-            params.push(options.agent);
-        }
-        if (options.traceId) {
-            conditions.push("traceId = ?");
-            params.push(options.traceId);
-        }
-        if (options.dataCategory) {
-            conditions.push("dataCategory = ?");
-            params.push(options.dataCategory);
-        }
-        if (options.since) {
-            conditions.push("timestamp >= ?");
-            params.push(options.since);
-        }
-        if (options.until) {
-            conditions.push("timestamp <= ?");
-            params.push(options.until);
-        }
-        const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
-        const limit = options.limit || 50;
-        const offset = options.offset || 0;
-        const rows = db.prepare(`SELECT * FROM ${this.TABLE} ${where} ORDER BY timestamp DESC LIMIT ? OFFSET ?`).all(...params, limit, offset);
-        return rows.map(row => ({
-            ...row,
-            details: row.details ? JSON.parse(row.details) : undefined,
-        }));
-    }
-    /**
-   * [KVKK Art. 11] Deletes records upon data subject request.
-   * Clears all records matching a given traceId or agent.
-   *
-   * @param filter Which records to delete
-   * @returns Number of deleted records
-   */
-    static deleteByFilter(filter) {
-        const db = databaseHolder.getDB();
-        const conditions = [];
-        const params = [];
-        if (filter.traceId) {
-            conditions.push("traceId = ?");
-            params.push(filter.traceId);
-        }
-        if (filter.agent) {
-            conditions.push("agent = ?");
-            params.push(filter.agent);
-        }
-        if (filter.action) {
-            conditions.push("action = ?");
-            params.push(filter.action);
-        }
-        if (filter.olderThanDays) {
-            conditions.push("timestamp < datetime('now', ? || ' days')");
-            params.push(`-${filter.olderThanDays}`);
-        }
-        if (conditions.length === 0)
-            return 0;
-        const result = db.prepare(`DELETE FROM ${this.TABLE} WHERE ${conditions.join(" AND ")}`).run(...params);
-        if (result.changes > 0)
-            this.refreshAnchor();
-        return result.changes;
-    }
-    /**
-     * [KVKK/GDPR] Cleans expired records.
-     * Operates based on each audit record's retentionDays field.
-     * Can be auto-triggered by cron job or each Audit.log() call.
-     *
-     * @returns Number of cleaned records
-     */
-    static cleanExpired() {
-        const db = databaseHolder.getDB();
-        const result = db.prepare(`
-            DELETE FROM ${this.TABLE}
-            WHERE retentionDays IS NOT NULL
-            AND strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-' || retentionDays || ' days')
-        `).run();
-        if (result.changes > 0) {
-            this.refreshAnchor();
-            logger.info(`[AUDIT] Expired records cleaned: ${result.changes}`);
-        }
-        return result.changes;
-    }
-    /**
-     * Returns audit statistics.
-     */
-    static getStats() {
-        const db = databaseHolder.getDB();
-        this.cleanExpired();
-        const total = db.prepare(`SELECT COUNT(*) as count FROM ${this.TABLE}`).get().count;
-        const byStatusRows = db.prepare(`SELECT status, COUNT(*) as count FROM ${this.TABLE} GROUP BY status`).all();
-        const byActionRows = db.prepare(`SELECT action, COUNT(*) as count FROM ${this.TABLE} GROUP BY action ORDER BY count DESC LIMIT 10`).all();
-        const byCategoryRows = db.prepare(`SELECT dataCategory, COUNT(*) as count FROM ${this.TABLE} GROUP BY dataCategory`).all();
-        const errors = db.prepare(`SELECT * FROM ${this.TABLE} WHERE status IN ('FAILED', 'BLOCKED') ORDER BY timestamp DESC LIMIT 10`).all();
-        const expiredCount = db.prepare(`
-                SELECT COUNT(*) as count FROM ${this.TABLE}
-                WHERE retentionDays IS NOT NULL
-                AND strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-' || retentionDays || ' days')
-            `).get().count;
-        return {
-            total,
-            byStatus: Object.fromEntries(byStatusRows.map(r => [r.status, r.count])),
-            byAction: Object.fromEntries(byActionRows.map(r => [r.action, r.count])),
-            byCategory: Object.fromEntries(byCategoryRows.map(r => [r.dataCategory, r.count])),
-            recentErrors: errors.map(row => ({
-                ...row,
-                details: row.details ? JSON.parse(row.details) : undefined,
-            })),
-            expiredCount,
-        };
-    }
-    /**
-     * [KVKK Art. 7] Clears all audit records.
-     * Used under the "Right to Erasure" provision.
-     * Only authorized users may call this.
-     */
-    static clearAll(confirmationCode) {
-        if (confirmationCode !== "KVKK-RIGHT-TO-ERASURE") {
-            throw new Error("[AUDIT] Invalid confirmation code for data erasure");
-        }
-        const db = databaseHolder.getDB();
-        const result = db.prepare(`DELETE FROM ${this.TABLE}`).run();
-        clearChainAnchor(this.ANCHOR_NAME);
-        logger.info(`[AUDIT] All records cleared (${result.changes} records). KVKK Article 7 compliance.`);
-        return result.changes;
-    }
-}
+export * from "./modules/observability/audit.js";
 //# sourceMappingURL=audit.js.map

package/dist/shared/src/audit.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../../shared/src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACH,mBAAmB,EACnB,gCAAgC,EAChC,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAwBrC,MAAM,OAAO,KAAK;IACN,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;IACnC,iEAAiE;IACzD,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;IAC1C,oDAAoD;IAC5C,MAAM,CAAC,sBAAsB,GAAG,CAAC,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,iEAAiE;IACzD,MAAM,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAEhC,MAAM,CAAC,UAAU;QACpB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,EAAE,CAAC,IAAI,CAAC;yCACyB,IAAI,CAAC,KAAK;;;;;;;;;;;gDAWH,IAAI,CAAC,sBAAsB;;;;SAIlE,CAAC,CAAC;QACH,oBAAoB;QACpB,IAAI,CAAC;YACD,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,4BAA4B,CAAC,CAAC;YAChG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,uBAAuB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACL,YAAY;QAChB,CAAC;QACD,0BAA0B;QAC1B,EAAE,CAAC,IAAI,CAAC;6DAC6C,IAAI,CAAC,KAAK;6DACV,IAAI,CAAC,KAAK;4DACX,IAAI,CAAC,KAAK;gEACN,IAAI,CAAC,KAAK;+DACX,IAAI,CAAC,KAAK;SAChE,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,aAAa;QACxB,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAClB,oBAAoB,IAAI,CAAC,KAAK,kDAAkD,CACnF,CAAC,GAAG,EAAkC,CAAC;YACxC,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CACrB,6BAA6B,IAAI,CAAC,KAAK,yBAAyB,CACnE,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC5B,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;gBAAE,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;gBAC3E,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,YAAY;QAChB,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,GAAG,CACb,MAAc,EACd,MAAmB,EACnB,UASI,EAAE;QAEN,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,sBAAsB,CAAC;QACvE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAC7G,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEvE,gEAAgE;QAChE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO;YACjC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAA4B;YACxD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY;YACpC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;YAChC,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;QAC1C,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,YAAY,GAAG,WAAW,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;QAE3D,0DAA0D;QAC1D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC/B,IAAI,QAAQ,GAAG,mBAAmB,CAAC;YACnC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB,oBAAoB,IAAI,CAAC,KAAK,kDAAkD,CACnF,CAAC,GAAG,EAAkC,CAAC;gBACxC,IAAI,IAAI,EAAE,IAAI;oBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACL,aAAa;YACjB,CAAC;YAED,MAAM,OAAO,GAAG,gCAAgC,CAAC;gBAC7C,QAAQ;gBACR,KAAK;gBACL,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,SAAS;gBACT,WAAW;gBACX,YAAY;aACf,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAElC,EAAE,CAAC,OAAO,CAAC;8BACO,IAAI,CAAC,KAAK;;;aAG3B,CAAC,CAAC,GAAG,CACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,CAAC,OAAO,IAAI,IAAI,EACvB,WAAW,IAAI,IAAI,EACnB,YAAY,IAAI,IAAI,EACpB,OAAO,CAAC,UAAU,IAAI,IAAI,EAC1B,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,IAAI,CACP,CAAC;YAEF,sEAAsE;YACtE,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CACrB,6BAA6B,IAAI,CAAC,KAAK,yBAAyB,CACnE,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC;IACb,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,eAAe;QACzB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB;wBACQ,IAAI,CAAC,KAAK,kBAAkB,CACvC,CAAC,GAAG,EAWH,CAAC;YAEH,yEAAyE;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;YAC3E,CAAC;YAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,eAAe,CAClB,MAAM,EACN,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CACd,gCAAgC,CAAC;gBAC7B,QAAQ;gBACR,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC9B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;aACvC,CAAC,EACN;gBACI,WAAW,EAAE,MAAM,EAAE,GAAG;gBACxB,aAAa,EAAE,MAAM,EAAE,KAAK;aAC/B,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE;aAC1D,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,UAUhB,EAAE;QACF,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACnF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAChF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACtF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;QACrG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACrF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAErF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB,iBAAiB,IAAI,CAAC,KAAK,IAAI,KAAK,2CAA2C,CAClF,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAmD,CAAC;QAElF,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpB,GAAG,GAAG;YACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;;;;;KAMC;IACM,MAAM,CAAC,cAAc,CAAC,MAK5B;QACG,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACpF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACjF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,eAAe,IAAI,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAEjB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,YAAY;QACtB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;0BACR,IAAI,CAAC,KAAK;;;SAG3B,CAAC,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,oCAAoC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,QAAQ;QAQlB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,iCAAiC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;QAE3G,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAC3B,yCAAyC,IAAI,CAAC,KAAK,kBAAkB,CACxE,CAAC,GAAG,EAA8C,CAAC;QAEpD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAC3B,yCAAyC,IAAI,CAAC,KAAK,+CAA+C,CACrG,CAAC,GAAG,EAA8C,CAAC;QAEpD,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAC7B,+CAA+C,IAAI,CAAC,KAAK,wBAAwB,CACpF,CAAC,GAAG,EAAoD,CAAC;QAE1D,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,iBAAiB,IAAI,CAAC,KAAK,yEAAyE,CACvG,CAAC,GAAG,EAAoD,CAAC;QAE1D,MAAM,YAAY,GACd,EAAE,CAAC,OAAO,CAAC;gDACyB,IAAI,CAAC,KAAK;;;aAG7C,CAAC,CAAC,GAAG,EACT,CAAC,KAAK,CAAC;QAER,OAAO;YACH,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAClF,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,GAAG,GAAG;gBACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC;YACH,YAAY;SACf,CAAC;IACN,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,gBAAwB;QAC3C,IAAI,gBAAgB,KAAK,uBAAuB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7D,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,OAAO,uCAAuC,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC"}
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../../shared/src/audit.ts"],"names":[],"mappings":"AAAA,cAAc,kCAAkC,CAAC"}

package/dist/shared/src/constants.d.ts

@@ -1,150 +1 @@
-/**
- * Atabey — Single Source of Truth for framework constants.
- * Import from here instead of hardcoding paths, phases, or directory names.
- */
-export declare const FRAMEWORK: {
-    NAME: string;
-    CORE_DIR: string;
-    UNIFIED_HUB_DIR: string;
-    CONSTITUTION_FILE: string;
-    DEFAULT_TRACE_ID: string;
-    DEFAULT_PHASE: string;
-    DEFAULT_MANAGER_STATE: string;
-};
-export declare const PROJECT_PHASES: readonly ["PHASE_0", "PHASE_1", "PHASE_2", "PHASE_3", "PHASE_4"];
-export declare const ADAPTER_DIRS: {
-    readonly GEMINI: ".gemini";
-    readonly CLAUDE: ".claude";
-    readonly GROK: ".grok";
-    readonly CURSOR: ".cursor";
-    readonly CODEX: ".agents";
-    readonly ANTIGRAVITY: ".agents";
-    readonly LOCAL: ".atabey";
-    readonly OPENCODE: ".opencode";
-    readonly LEGACY_AGENT: ".agent";
-};
-/** Priority order for framework directory resolution (CLI + MCP).
- *  De-duplicated: `.agents` serves both CODEX and ANTIGRAVITY, `.atabey` is also LOCAL. */
-export declare const FRAMEWORK_DIR_CANDIDATES: readonly [string, ".agents", ".claude", ".gemini", ".grok", ".cursor", ".opencode"];
-/** Slug under `.agents/{slug}/` for each adapter in unified mode. */
-export declare const UNIFIED_ADAPTER_SLUG: {
-    readonly gemini: "gemini";
-    readonly claude: "claude";
-    readonly grok: "grok";
-    readonly cursor: "cursor";
-    readonly codex: "codex";
-    readonly local: "local";
-    readonly opencode: "opencode";
-    readonly "antigravity-cli": "antigravity";
-};
-export type UnifiedAdapterSlug = keyof typeof UNIFIED_ADAPTER_SLUG;
-export declare const NATIVE_AGENT_PATHS: {
-    readonly gemini: string;
-    readonly claude: string;
-    readonly grok: string;
-    readonly cursor: string;
-    readonly codex: string;
-    readonly local: string;
-    readonly opencode: string;
-    readonly "antigravity-cli": string;
-};
-/** Legacy layout bases used by `check` and discovery (non-unified installs). */
-export declare const LEGACY_AGENT_LAYOUT_BASES: readonly [string, string, string, string, string, string, string, string];
-export declare const FRAMEWORK_SUBDIRS: {
-    readonly AGENTS: "agents";
-    readonly SKILLS: "skills";
-    readonly KNOWLEDGE: "knowledge";
-    readonly PROMPTS: "prompts";
-    readonly MEMORY: "memory";
-    readonly ROUTER: "router";
-    readonly REGISTRY: "registry";
-    readonly OBSERVABILITY: "observability";
-    readonly RULES: "rules";
-    readonly MESSAGES: "messages";
-    readonly LOGS: "logs";
-    readonly MEMORY_GRAPH: "memory-graph";
-};
-export declare const CORE_SCAFFOLD_SUBDIRS: readonly ["knowledge", "prompts", "memory", "router", "registry", "observability", "rules"];
-export declare const RUNTIME_SUBDIRS: readonly ["messages", "logs", "memory-graph"];
-export declare const MEMORY_SUBDIRS: {
-    readonly TASKS: "tasks";
-    readonly HISTORY: "history";
-};
-export declare const MEMORY_FILES: {
-    readonly STATE: "state.json";
-    readonly STATUS: "status.json";
-    readonly PROJECT_MEMORY: "PROJECT_MEMORY.md";
-    readonly SHARED_FACTS: "shared-facts.json";
-};
-/** Default layout scaffolded into consumer projects after `atabey init`. */
-export declare const DEFAULT_CONSUMER_PATHS: {
-    readonly backend: "apps/backend";
-    readonly frontend: "apps/web";
-    readonly mobile: "apps/mobile";
-    readonly docs: "docs";
-    readonly tests: "tests";
-};
-/** Paths inside the Atabey framework source monorepo (not consumer apps/). */
-export declare const FRAMEWORK_MONOREPO_PATHS: {
-    readonly backend: "packages/atabey";
-    readonly frontend: "apps/web";
-    readonly mobile: "apps/mobile";
-    readonly docs: "docs";
-    readonly tests: "packages";
-};
-/** @deprecated Use DEFAULT_CONSUMER_PATHS */
-export declare const DEFAULT_MONOREPO_PATHS: {
-    readonly backend: "apps/backend";
-    readonly frontend: "apps/web";
-    readonly mobile: "apps/mobile";
-    readonly docs: "docs";
-    readonly tests: "tests";
-};
-/** Cursor rule globs per agent role (framework monorepo layout). */
-export declare const CURSOR_AGENT_GLOBS: Record<string, string>;
-export declare const MCP: {
-    readonly SERVER_NAME: "atabey";
-    readonly ROOT_CONFIG_FILE: "mcp.json";
-    readonly PROJECT_ROOT_ENV: "ATABEY_PROJECT_ROOT";
-    readonly TEST_DIR_ENV: "ATABEY_TEST_DIR";
-    readonly TRANSPORT_ENV: "MCP_TRANSPORT";
-    /** IDE clients (Claude, Cursor, Gemini) spawn MCP via stdio JSON-RPC. */
-    readonly TRANSPORT_STDIO: "stdio";
-    /** HTTP/SSE unified server for multi-session and remote clients. */
-    readonly TRANSPORT_UNIFIED: "unified";
-    readonly SERVER_DIST_PATH: "../atabey-mcp/dist/atabey-mcp/src/mcp/index.js";
-};
-/** Headless Hermes orchestrator (AgentLoop) — auto-starts with MCP server by default. */
-export declare const ORCHESTRATOR: {
-    readonly AUTO_START_ENV: "ATABEY_AUTO_START_ORCHESTRATOR";
-    readonly INTERVAL_MS_ENV: "ATABEY_ORCHESTRATOR_INTERVAL_MS";
-    readonly DEFAULT_AUTO_START: true;
-    readonly DEFAULT_INTERVAL_MS: 1000;
-};
-export declare const ROOT_CONFIG_FILES: {
-    readonly MCP: "mcp.json";
-    readonly DOT_MCP: ".mcp.json";
-    readonly ENV_EXAMPLE: ".env.example";
-    readonly VSCODE_MCP: ".vscode/mcp.json";
-};
-export declare const TEMPLATE_PLACEHOLDERS: {
-    readonly FRAMEWORK_DIR: "{{FRAMEWORK_DIR}}";
-    readonly ADAPTER: "{{ADAPTER}}";
-    readonly BACKEND_DIR: "{{BACKEND_DIR}}";
-    readonly FRONTEND_DIR: "{{FRONTEND_DIR}}";
-    readonly DOCS_DIR: "{{DOCS_DIR}}";
-    readonly TESTS_DIR: "{{TESTS_DIR}}";
-};
-export declare const AGENT_FILE_EXT: {
-    readonly MARKDOWN: ".md";
-    readonly CURSOR_RULE: ".mdc";
-};
-export declare function pathJoin(...segments: string[]): string;
-export declare function corePath(...segments: string[]): string;
-export declare function unifiedHubPath(...segments: string[]): string;
-export declare function unifiedAdapterPath(slug: string, ...segments: string[]): string;
-export declare function knowledgePath(filename: string): string;
-/** Backward-compatible aliases */
-export declare const CORE_FRAMEWORK_DIR: string;
-export declare const UNIFIED_HUB_DIR: string;
-export declare const SKILLS_HUB_PATH: string;
+export * from "./modules/primitives/constants.js";