auxiora 1.3.0

package/LICENSE

@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by the Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding any notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2026 Auxiora Contributors
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,37 @@
+# Auxiora
+
+Security-first self-hosted AI assistant. Encrypted credential vault, multi-provider LLM support, plugin system, and a web dashboard — all running on your own machine.
+
+## Quick start
+
+```bash
+npx auxiora start
+```
+
+Or install globally:
+
+```bash
+npm install -g auxiora
+auxiora start
+```
+
+## Requirements
+
+- **Node.js >= 22** (uses built-in SQLite and other modern Node APIs)
+
+## What you get
+
+- **Encrypted vault** — API keys and secrets stored with Argon2 + AES-256
+- **Multi-provider** — OpenAI, Anthropic, Google, Ollama, and more
+- **Web dashboard** — manage conversations, providers, and settings from your browser
+- **Plugin system** — extend with custom tools, connectors, and behaviors
+- **Personality engine** — configurable response style with The Architect system
+- **Privacy** — everything stays on your machine, no telemetry
+
+## Documentation
+
+Visit [auxiora.dev](https://auxiora.dev) for full documentation.
+
+## License
+
+MIT

package/dist/commands/ambient.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function createAmbientCommand(): Command;
+//# sourceMappingURL=ambient.d.ts.map

package/dist/commands/ambient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient.d.ts","sourceRoot":"","sources":["../../src/commands/ambient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,wBAAgB,oBAAoB,IAAI,OAAO,CAiG9C"}

package/dist/commands/ambient.js

@@ -0,0 +1,86 @@
+import { Command } from 'commander';
+export function createAmbientCommand() {
+    const ambientCmd = new Command('ambient').description('Ambient intelligence — patterns, briefings, notifications');
+    ambientCmd
+        .command('status')
+        .description('Show ambient intelligence status')
+        .action(async () => {
+        const { AmbientPatternEngine } = await import('@auxiora/ambient');
+        const { QuietNotificationManager } = await import('@auxiora/ambient');
+        const engine = new AmbientPatternEngine();
+        const notifications = new QuietNotificationManager();
+        console.log('Ambient Intelligence Status:');
+        console.log(`  Observed events: ${engine.getEventCount()}`);
+        console.log(`  Detected patterns: ${engine.getPatterns().length}`);
+        console.log(`  Pending notifications: ${notifications.getPendingCount()}`);
+    });
+    ambientCmd
+        .command('briefing')
+        .description('Generate a personalized briefing')
+        .option('-t, --time <time>', 'Time of day (morning/evening)', 'morning')
+        .action(async (opts) => {
+        const { BriefingGenerator } = await import('@auxiora/ambient');
+        const generator = new BriefingGenerator();
+        const time = opts.time === 'evening' ? 'evening' : 'morning';
+        const briefing = generator.generateBriefing('cli-user', time, {});
+        console.log(`\n${time.charAt(0).toUpperCase() + time.slice(1)} Briefing`);
+        console.log('='.repeat(40));
+        if (briefing.sections.length === 0) {
+            console.log('No items for your briefing yet.');
+            console.log('As you use Auxiora, patterns and data will be collected.');
+        }
+        else {
+            for (const section of briefing.sections) {
+                console.log(`\n## ${section.title}`);
+                for (const item of section.items) {
+                    console.log(`  - ${item}`);
+                }
+            }
+        }
+        console.log('');
+    });
+    ambientCmd
+        .command('patterns')
+        .description('Show detected behavioral patterns')
+        .option('-l, --limit <n>', 'Max patterns to show', '10')
+        .action(async (opts) => {
+        const { AmbientPatternEngine } = await import('@auxiora/ambient');
+        const engine = new AmbientPatternEngine();
+        const patterns = engine.getPatterns();
+        const limit = parseInt(opts.limit, 10) || 10;
+        const shown = patterns.slice(0, limit);
+        if (shown.length === 0) {
+            console.log('No patterns detected yet.');
+            console.log('Patterns emerge as Auxiora observes your usage over time.');
+            return;
+        }
+        console.log('Detected Patterns:');
+        for (const pattern of shown) {
+            const confidence = Math.round(pattern.confidence * 100);
+            console.log(`  [${pattern.type}] ${pattern.description} (${confidence}% confidence)`);
+            console.log(`    Occurrences: ${pattern.occurrences} | Last: ${new Date(pattern.lastConfirmedAt).toISOString()}`);
+        }
+    });
+    ambientCmd
+        .command('notifications')
+        .description('Show quiet notifications')
+        .action(async () => {
+        const { QuietNotificationManager } = await import('@auxiora/ambient');
+        const manager = new QuietNotificationManager();
+        const queue = manager.getQueue();
+        if (queue.length === 0) {
+            console.log('No notifications.');
+            return;
+        }
+        console.log('Notifications:');
+        for (const n of queue) {
+            const date = new Date(n.createdAt).toLocaleTimeString();
+            console.log(`  [${n.priority}] ${n.message} (${date})`);
+            if (n.detail) {
+                console.log(`    ${n.detail}`);
+            }
+        }
+    });
+    return ambientCmd;
+}
+//# sourceMappingURL=ambient.js.map

package/dist/commands/ambient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ambient.js","sourceRoot":"","sources":["../../src/commands/ambient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,UAAU,oBAAoB;IAClC,MAAM,UAAU,GAAG,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CACnD,2DAA2D,CAC5D,CAAC;IAEF,UAAU;SACP,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,aAAa,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAErD,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,OAAO,CAAC,GAAG,CAAC,4BAA4B,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,mBAAmB,EAAE,+BAA+B,EAAE,SAAS,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,IAAsB,EAAE,EAAE;QACvC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7D,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAElE,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAE5B,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAC1E,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACxC,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;oBACjC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,IAAI,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,IAAuB,EAAE,EAAE;QACxC,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEvC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACzC,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,WAAW,KAAK,UAAU,eAAe,CAAC,CAAC;YACtF,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,WAAW,YAAY,IAAI,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACpH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,UAAU;SACP,OAAO,CAAC,eAAe,CAAC;SACxB,WAAW,CAAC,0BAA0B,CAAC;SACvC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,wBAAwB,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAEjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,OAAO,KAAK,IAAI,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/commands/audit.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function createAuditCommand(): Command;
+//# sourceMappingURL=audit.d.ts.map

package/dist/commands/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,kBAAkB,IAAI,OAAO,CAmD5C"}

package/dist/commands/audit.js

@@ -0,0 +1,57 @@
+import { Command } from 'commander';
+import { AuditLogger } from '@auxiora/audit';
+function formatEntry(entry) {
+    const date = new Date(entry.timestamp);
+    const time = date.toLocaleTimeString();
+    const dateStr = date.toLocaleDateString();
+    let details = '';
+    const detailKeys = Object.keys(entry.details);
+    if (detailKeys.length > 0) {
+        details = ' ' + JSON.stringify(entry.details);
+    }
+    return `[${dateStr} ${time}] ${entry.event}${details}`;
+}
+export function createAuditCommand() {
+    const auditCmd = new Command('audit').description('View and verify audit logs');
+    auditCmd
+        .command('list')
+        .description('List recent audit log entries')
+        .option('-n, --limit <number>', 'Number of entries to show', '20')
+        .action(async (options) => {
+        const logger = new AuditLogger();
+        const limit = parseInt(options.limit, 10);
+        const entries = await logger.getEntries(limit);
+        if (entries.length === 0) {
+            console.log('No audit log entries');
+            return;
+        }
+        console.log(`Last ${entries.length} audit log entries:\n`);
+        for (const entry of entries) {
+            console.log(formatEntry(entry));
+        }
+    });
+    auditCmd
+        .command('verify')
+        .description('Verify audit log chain integrity')
+        .action(async () => {
+        console.log('Verifying audit log integrity...\n');
+        const logger = new AuditLogger();
+        const result = await logger.verify();
+        if (result.entries === 0) {
+            console.log('No audit log entries to verify');
+            return;
+        }
+        if (result.valid) {
+            console.log(`\x1b[32m✓ Chain intact\x1b[0m`);
+            console.log(`  ${result.entries} entries verified`);
+        }
+        else {
+            console.log(`\x1b[31m✗ Chain broken at entry ${result.brokenAt}\x1b[0m`);
+            console.log(`  ${result.entries} total entries`);
+            console.log('\nThe audit log may have been tampered with or corrupted.');
+            process.exit(1);
+        }
+    });
+    return auditCmd;
+}
+//# sourceMappingURL=audit.js.map

package/dist/commands/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/commands/audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAmB,MAAM,gBAAgB,CAAC;AAE9D,SAAS,WAAW,CAAC,KAAiB;IACpC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAE1C,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,IAAI,OAAO,IAAI,IAAI,KAAK,KAAK,CAAC,KAAK,GAAG,OAAO,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,4BAA4B,CAAC,CAAC;IAEhF,QAAQ;SACL,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,+BAA+B,CAAC;SAC5C,MAAM,CAAC,sBAAsB,EAAE,2BAA2B,EAAE,IAAI,CAAC;SACjE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC,MAAM,uBAAuB,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QAElD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAErC,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;YAC9C,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,QAAQ,SAAS,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,gBAAgB,CAAC,CAAC;YACjD,OAAO,CAAC,GAAG,CACT,2DAA2D,CAC5D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/commands/auth.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function createAuthCommand(): Command;
+//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,wBAAgB,iBAAiB,IAAI,OAAO,CAwJ3C"}

package/dist/commands/auth.js

@@ -0,0 +1,130 @@
+import { Command } from 'commander';
+import { password as passwordPrompt } from '@inquirer/prompts';
+import * as argon2 from 'argon2';
+import jwt from 'jsonwebtoken';
+import * as crypto from 'node:crypto';
+import { loadConfig, saveConfig } from '@auxiora/config';
+import { audit } from '@auxiora/audit';
+export function createAuthCommand() {
+    const authCmd = new Command('auth').description('Manage gateway authentication');
+    authCmd
+        .command('set-password')
+        .description('Set the gateway password for webchat authentication')
+        .action(async () => {
+        const config = await loadConfig();
+        const password = await passwordPrompt({
+            message: 'Enter new gateway password:',
+        });
+        const confirmPassword = await passwordPrompt({
+            message: 'Confirm gateway password:',
+        });
+        if (password !== confirmPassword) {
+            console.error('Passwords do not match');
+            process.exit(1);
+        }
+        if (password.length < 8) {
+            console.error('Password must be at least 8 characters');
+            process.exit(1);
+        }
+        // Hash the password with Argon2id
+        const hash = await argon2.hash(password, {
+            type: argon2.argon2id,
+            memoryCost: 65536, // 64 MB
+            timeCost: 3,
+            parallelism: 1,
+        });
+        config.auth.mode = 'password';
+        config.auth.passwordHash = hash;
+        await saveConfig(config);
+        await audit('auth.password_set', {});
+        console.log('Gateway password set successfully');
+        console.log('Authentication mode set to: password');
+    });
+    authCmd
+        .command('setup-jwt')
+        .description('Configure JWT authentication for the gateway')
+        .option('-s, --secret <secret>', 'JWT secret (min 32 chars, auto-generated if not provided)')
+        .action(async (options) => {
+        const config = await loadConfig();
+        let secret = options.secret;
+        if (!secret) {
+            // Generate a secure random secret
+            secret = crypto.randomBytes(32).toString('base64url');
+            console.log('Generated JWT secret (save this securely):');
+            console.log(`  ${secret}\n`);
+        }
+        else if (secret.length < 32) {
+            console.error('JWT secret must be at least 32 characters');
+            process.exit(1);
+        }
+        config.auth.mode = 'jwt';
+        config.auth.jwtSecret = secret;
+        await saveConfig(config);
+        await audit('auth.jwt_configured', {});
+        console.log('JWT authentication configured successfully');
+        console.log('Authentication mode set to: jwt');
+        console.log('\nGenerate tokens with: auxiora auth generate-token');
+    });
+    authCmd
+        .command('generate-token')
+        .description('Generate a JWT token for authentication')
+        .option('-s, --subject <subject>', 'Token subject/user identifier', 'user')
+        .option('-e, --expires <duration>', 'Token expiration (e.g., 7d, 24h)', '7d')
+        .action(async (options) => {
+        const config = await loadConfig();
+        if (config.auth.mode !== 'jwt') {
+            console.error('JWT mode not configured. Run: auxiora auth setup-jwt');
+            process.exit(1);
+        }
+        if (!config.auth.jwtSecret) {
+            console.error('JWT secret not set. Run: auxiora auth setup-jwt');
+            process.exit(1);
+        }
+        const token = jwt.sign({ sub: options.subject }, config.auth.jwtSecret, { expiresIn: options.expires });
+        await audit('auth.token_generated', { subject: options.subject });
+        console.log('Generated JWT token:\n');
+        console.log(token);
+        console.log(`\nSubject: ${options.subject}`);
+        console.log(`Expires: ${options.expires}`);
+    });
+    authCmd
+        .command('disable')
+        .description('Disable authentication (allow anonymous access)')
+        .action(async () => {
+        const config = await loadConfig();
+        config.auth.mode = 'none';
+        await saveConfig(config);
+        await audit('auth.disabled', {});
+        console.log('Authentication disabled');
+        console.log('Warning: Anyone can access the gateway without authentication');
+    });
+    authCmd
+        .command('status')
+        .description('Show current authentication configuration')
+        .action(async () => {
+        const config = await loadConfig();
+        console.log('\nAuthentication Status\n');
+        console.log(`Mode: ${config.auth.mode}`);
+        switch (config.auth.mode) {
+            case 'none':
+                console.log('Status: No authentication required (open access)');
+                break;
+            case 'password':
+                console.log(`Status: Password authentication ${config.auth.passwordHash ? 'configured' : 'NOT configured'}`);
+                if (!config.auth.passwordHash) {
+                    console.log('\nRun: auxiora auth set-password');
+                }
+                break;
+            case 'jwt':
+                console.log(`Status: JWT authentication ${config.auth.jwtSecret ? 'configured' : 'NOT configured'}`);
+                console.log(`Token expiry: ${config.auth.jwtExpiresIn}`);
+                if (!config.auth.jwtSecret) {
+                    console.log('\nRun: auxiora auth setup-jwt');
+                }
+                break;
+        }
+        console.log('');
+    });
+    return authCmd;
+}
+//# sourceMappingURL=auth.js.map

package/dist/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAEvC,MAAM,UAAU,iBAAiB;IAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,+BAA+B,CAAC,CAAC;IAEjF,OAAO;SACJ,OAAO,CAAC,cAAc,CAAC;SACvB,WAAW,CAAC,qDAAqD,CAAC;SAClE,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAElC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;YACpC,OAAO,EAAE,6BAA6B;SACvC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,MAAM,cAAc,CAAC;YAC3C,OAAO,EAAE,2BAA2B;SACrC,CAAC,CAAC;QAEH,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE;YACvC,IAAI,EAAE,MAAM,CAAC,QAAQ;YACrB,UAAU,EAAE,KAAK,EAAE,QAAQ;YAC3B,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEhC,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAErC,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CAAC,8CAA8C,CAAC;SAC3D,MAAM,CAAC,uBAAuB,EAAE,2DAA2D,CAAC;SAC5F,MAAM,CAAC,KAAK,EAAE,OAA4B,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAElC,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,kCAAkC;YAClC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;QAE/B,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;QAEvC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QAC/C,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,gBAAgB,CAAC;SACzB,WAAW,CAAC,yCAAyC,CAAC;SACtD,MAAM,CAAC,yBAAyB,EAAE,+BAA+B,EAAE,MAAM,CAAC;SAC1E,MAAM,CAAC,0BAA0B,EAAE,kCAAkC,EAAE,IAAI,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,OAA6C,EAAE,EAAE;QAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAElC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CACpB,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,EACxB,MAAM,CAAC,IAAI,CAAC,SAAS,EACrB,EAAE,SAAS,EAAE,OAAO,CAAC,OAAuC,EAAE,CAC/D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAElE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,cAAc,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAElC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC;QAE1B,MAAM,UAAU,CAAC,MAAM,CAAC,CAAC;QACzB,MAAM,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;QAEjC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAElC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAEzC,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,MAAM;gBACT,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;gBAChE,MAAM;YACR,KAAK,UAAU;gBACb,OAAO,CAAC,GAAG,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC7G,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC9B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM;YACR,KAAK,KAAK;gBACR,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBACrG,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;gBACzD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;oBAC3B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM;QACV,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEL,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/commands/cloud.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function createCloudCommand(): Command;
+//# sourceMappingURL=cloud.d.ts.map

package/dist/commands/cloud.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../src/commands/cloud.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAsBpC,wBAAgB,kBAAkB,IAAI,OAAO,CA8F5C"}