bashbros 0.1.1 → 0.1.3

package/dist/chunk-JYWQT2B4.js

@@ -0,0 +1,866 @@
+#!/usr/bin/env node
+
+// src/dashboard/db.ts
+import Database from "better-sqlite3";
+import { randomUUID } from "crypto";
+var DashboardDB = class {
+  db;
+  constructor(dbPath = ".bashbros.db") {
+    this.db = new Database(dbPath);
+    this.db.pragma("journal_mode = WAL");
+    this.initTables();
+  }
+  initTables() {
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS events (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        source TEXT NOT NULL,
+        level TEXT NOT NULL,
+        category TEXT NOT NULL,
+        message TEXT NOT NULL,
+        data TEXT
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS connector_events (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        connector TEXT NOT NULL,
+        method TEXT NOT NULL,
+        direction TEXT NOT NULL,
+        payload TEXT NOT NULL,
+        resources_accessed TEXT NOT NULL
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS egress_blocks (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        pattern TEXT NOT NULL,
+        matched_text TEXT NOT NULL,
+        redacted_text TEXT NOT NULL,
+        connector TEXT,
+        destination TEXT,
+        status TEXT NOT NULL DEFAULT 'pending',
+        approved_by TEXT,
+        approved_at TEXT
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS exposure_scans (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        agent TEXT NOT NULL,
+        pid INTEGER,
+        port INTEGER NOT NULL,
+        bind_address TEXT NOT NULL,
+        has_auth TEXT NOT NULL,
+        severity TEXT NOT NULL,
+        action TEXT NOT NULL,
+        message TEXT NOT NULL
+      )
+    `);
+    this.db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_events_source ON events(source);
+      CREATE INDEX IF NOT EXISTS idx_events_level ON events(level);
+      CREATE INDEX IF NOT EXISTS idx_events_timestamp ON events(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_connector_events_connector ON connector_events(connector);
+      CREATE INDEX IF NOT EXISTS idx_egress_blocks_status ON egress_blocks(status);
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS sessions (
+        id TEXT PRIMARY KEY,
+        agent TEXT NOT NULL,
+        pid INTEGER NOT NULL,
+        start_time TEXT NOT NULL,
+        end_time TEXT,
+        status TEXT NOT NULL DEFAULT 'active',
+        command_count INTEGER NOT NULL DEFAULT 0,
+        blocked_count INTEGER NOT NULL DEFAULT 0,
+        avg_risk_score REAL NOT NULL DEFAULT 0,
+        working_dir TEXT NOT NULL
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS commands (
+        id TEXT PRIMARY KEY,
+        session_id TEXT NOT NULL,
+        timestamp TEXT NOT NULL,
+        command TEXT NOT NULL,
+        allowed INTEGER NOT NULL,
+        risk_score INTEGER NOT NULL,
+        risk_level TEXT NOT NULL,
+        risk_factors TEXT NOT NULL,
+        duration_ms INTEGER NOT NULL,
+        violations TEXT NOT NULL,
+        FOREIGN KEY (session_id) REFERENCES sessions(id)
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS bro_events (
+        id TEXT PRIMARY KEY,
+        session_id TEXT,
+        timestamp TEXT NOT NULL,
+        event_type TEXT NOT NULL,
+        input_context TEXT NOT NULL,
+        output_summary TEXT NOT NULL,
+        model_used TEXT NOT NULL,
+        latency_ms INTEGER NOT NULL,
+        success INTEGER NOT NULL,
+        FOREIGN KEY (session_id) REFERENCES sessions(id)
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS bro_status (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        ollama_available INTEGER NOT NULL,
+        ollama_model TEXT NOT NULL,
+        platform TEXT NOT NULL,
+        shell TEXT NOT NULL,
+        project_type TEXT
+      )
+    `);
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS tool_uses (
+        id TEXT PRIMARY KEY,
+        timestamp TEXT NOT NULL,
+        tool_name TEXT NOT NULL,
+        tool_input TEXT NOT NULL,
+        tool_output TEXT NOT NULL,
+        exit_code INTEGER,
+        success INTEGER,
+        cwd TEXT NOT NULL,
+        repo_name TEXT,
+        repo_path TEXT
+      )
+    `);
+    this.db.exec(`
+      CREATE INDEX IF NOT EXISTS idx_sessions_status ON sessions(status);
+      CREATE INDEX IF NOT EXISTS idx_sessions_start_time ON sessions(start_time);
+      CREATE INDEX IF NOT EXISTS idx_commands_session_id ON commands(session_id);
+      CREATE INDEX IF NOT EXISTS idx_commands_timestamp ON commands(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_commands_allowed ON commands(allowed);
+      CREATE INDEX IF NOT EXISTS idx_bro_events_session_id ON bro_events(session_id);
+      CREATE INDEX IF NOT EXISTS idx_bro_events_timestamp ON bro_events(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_bro_status_timestamp ON bro_status(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_tool_uses_timestamp ON tool_uses(timestamp);
+      CREATE INDEX IF NOT EXISTS idx_tool_uses_tool_name ON tool_uses(tool_name);
+    `);
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Events
+  // ─────────────────────────────────────────────────────────────
+  insertEvent(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const data = input.data ? JSON.stringify(input.data) : null;
+    const stmt = this.db.prepare(`
+      INSERT INTO events (id, timestamp, source, level, category, message, data)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(id, timestamp, input.source, input.level, input.category, input.message, data);
+    return id;
+  }
+  getEvents(filter = {}) {
+    const conditions = [];
+    const params = [];
+    if (filter.source) {
+      conditions.push("source = ?");
+      params.push(filter.source);
+    }
+    if (filter.level) {
+      conditions.push("level = ?");
+      params.push(filter.level);
+    }
+    if (filter.category) {
+      conditions.push("category = ?");
+      params.push(filter.category);
+    }
+    if (filter.since) {
+      conditions.push("timestamp >= ?");
+      params.push(filter.since.toISOString());
+    }
+    const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+    const limit = filter.limit ?? 100;
+    const offset = filter.offset ?? 0;
+    const stmt = this.db.prepare(`
+      SELECT * FROM events
+      ${whereClause}
+      ORDER BY timestamp DESC
+      LIMIT ? OFFSET ?
+    `);
+    params.push(limit, offset);
+    const rows = stmt.all(...params);
+    return rows.map((row) => ({
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      source: row.source,
+      level: row.level,
+      category: row.category,
+      message: row.message,
+      data: row.data ? JSON.parse(row.data) : void 0
+    }));
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Connector Events
+  // ─────────────────────────────────────────────────────────────
+  insertConnectorEvent(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO connector_events (id, timestamp, connector, method, direction, payload, resources_accessed)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      timestamp,
+      input.connector,
+      input.method,
+      input.direction,
+      JSON.stringify(input.payload),
+      JSON.stringify(input.resourcesAccessed)
+    );
+    return id;
+  }
+  getConnectorEvents(connector, limit = 100) {
+    const stmt = this.db.prepare(`
+      SELECT * FROM connector_events
+      WHERE connector = ?
+      ORDER BY timestamp DESC
+      LIMIT ?
+    `);
+    const rows = stmt.all(connector, limit);
+    return rows.map((row) => ({
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      connector: row.connector,
+      method: row.method,
+      direction: row.direction,
+      payload: JSON.parse(row.payload),
+      resourcesAccessed: JSON.parse(row.resources_accessed)
+    }));
+  }
+  getAllConnectorEvents(limit = 100) {
+    const stmt = this.db.prepare(`
+      SELECT * FROM connector_events
+      ORDER BY timestamp DESC
+      LIMIT ?
+    `);
+    const rows = stmt.all(limit);
+    return rows.map((row) => ({
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      connector: row.connector,
+      method: row.method,
+      direction: row.direction,
+      payload: JSON.parse(row.payload),
+      resourcesAccessed: JSON.parse(row.resources_accessed)
+    }));
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Egress Blocks
+  // ─────────────────────────────────────────────────────────────
+  insertEgressBlock(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO egress_blocks (id, timestamp, pattern, matched_text, redacted_text, connector, destination, status)
+      VALUES (?, ?, ?, ?, ?, ?, ?, 'pending')
+    `);
+    stmt.run(
+      id,
+      timestamp,
+      JSON.stringify(input.pattern),
+      input.matchedText,
+      input.redactedText,
+      input.connector ?? null,
+      input.destination ?? null
+    );
+    return id;
+  }
+  getPendingBlocks() {
+    const stmt = this.db.prepare(`
+      SELECT * FROM egress_blocks
+      WHERE status = 'pending'
+      ORDER BY timestamp DESC
+    `);
+    const rows = stmt.all();
+    return rows.map((row) => this.rowToEgressMatch(row));
+  }
+  getBlock(id) {
+    const stmt = this.db.prepare(`
+      SELECT * FROM egress_blocks WHERE id = ?
+    `);
+    const row = stmt.get(id);
+    if (!row) return null;
+    return this.rowToEgressMatch(row);
+  }
+  approveBlock(id, approvedBy) {
+    const stmt = this.db.prepare(`
+      UPDATE egress_blocks
+      SET status = 'approved', approved_by = ?, approved_at = ?
+      WHERE id = ?
+    `);
+    stmt.run(approvedBy, (/* @__PURE__ */ new Date()).toISOString(), id);
+  }
+  denyBlock(id, deniedBy) {
+    const stmt = this.db.prepare(`
+      UPDATE egress_blocks
+      SET status = 'denied', approved_by = ?, approved_at = ?
+      WHERE id = ?
+    `);
+    stmt.run(deniedBy, (/* @__PURE__ */ new Date()).toISOString(), id);
+  }
+  rowToEgressMatch(row) {
+    return {
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      pattern: JSON.parse(row.pattern),
+      matchedText: row.matched_text,
+      redactedText: row.redacted_text,
+      connector: row.connector ?? void 0,
+      destination: row.destination ?? void 0,
+      status: row.status,
+      approvedBy: row.approved_by ?? void 0,
+      approvedAt: row.approved_at ? new Date(row.approved_at) : void 0
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Exposure Scans
+  // ─────────────────────────────────────────────────────────────
+  insertExposureScan(result) {
+    const id = randomUUID();
+    const timestamp = result.timestamp.toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO exposure_scans (id, timestamp, agent, pid, port, bind_address, has_auth, severity, action, message)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      timestamp,
+      result.agent,
+      result.pid ?? null,
+      result.port,
+      result.bindAddress,
+      String(result.hasAuth),
+      result.severity,
+      result.action,
+      result.message
+    );
+    return id;
+  }
+  getRecentExposures(limit = 100) {
+    const stmt = this.db.prepare(`
+      SELECT * FROM exposure_scans
+      ORDER BY timestamp DESC
+      LIMIT ?
+    `);
+    const rows = stmt.all(limit);
+    return rows.map((row) => ({
+      agent: row.agent,
+      pid: row.pid ?? void 0,
+      port: row.port,
+      bindAddress: row.bind_address,
+      hasAuth: row.has_auth === "true" ? true : row.has_auth === "false" ? false : "unknown",
+      severity: row.severity,
+      action: row.action,
+      message: row.message,
+      timestamp: new Date(row.timestamp)
+    }));
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Sessions
+  // ─────────────────────────────────────────────────────────────
+  insertSession(input) {
+    const id = randomUUID();
+    const startTime = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO sessions (id, agent, pid, start_time, status, command_count, blocked_count, avg_risk_score, working_dir)
+      VALUES (?, ?, ?, ?, 'active', 0, 0, 0, ?)
+    `);
+    stmt.run(id, input.agent, input.pid, startTime, input.workingDir);
+    return id;
+  }
+  updateSession(id, updates) {
+    const setClauses = [];
+    const params = [];
+    if (updates.endTime !== void 0) {
+      setClauses.push("end_time = ?");
+      params.push(updates.endTime.toISOString());
+    }
+    if (updates.status !== void 0) {
+      setClauses.push("status = ?");
+      params.push(updates.status);
+    }
+    if (updates.commandCount !== void 0) {
+      setClauses.push("command_count = ?");
+      params.push(updates.commandCount);
+    }
+    if (updates.blockedCount !== void 0) {
+      setClauses.push("blocked_count = ?");
+      params.push(updates.blockedCount);
+    }
+    if (updates.avgRiskScore !== void 0) {
+      setClauses.push("avg_risk_score = ?");
+      params.push(updates.avgRiskScore);
+    }
+    if (setClauses.length === 0) return;
+    params.push(id);
+    const stmt = this.db.prepare(`
+      UPDATE sessions SET ${setClauses.join(", ")} WHERE id = ?
+    `);
+    stmt.run(...params);
+  }
+  getSession(id) {
+    const stmt = this.db.prepare("SELECT * FROM sessions WHERE id = ?");
+    const row = stmt.get(id);
+    if (!row) return null;
+    return this.rowToSession(row);
+  }
+  getSessions(filter = {}) {
+    const conditions = [];
+    const params = [];
+    if (filter.status) {
+      conditions.push("status = ?");
+      params.push(filter.status);
+    }
+    if (filter.since) {
+      conditions.push("start_time >= ?");
+      params.push(filter.since.toISOString());
+    }
+    if (filter.until) {
+      conditions.push("start_time <= ?");
+      params.push(filter.until.toISOString());
+    }
+    if (filter.agent) {
+      conditions.push("agent = ?");
+      params.push(filter.agent);
+    }
+    const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+    const limit = filter.limit ?? 100;
+    const offset = filter.offset ?? 0;
+    const stmt = this.db.prepare(`
+      SELECT * FROM sessions
+      ${whereClause}
+      ORDER BY start_time DESC
+      LIMIT ? OFFSET ?
+    `);
+    params.push(limit, offset);
+    const rows = stmt.all(...params);
+    return rows.map((row) => this.rowToSession(row));
+  }
+  getActiveSession() {
+    const stmt = this.db.prepare(`
+      SELECT * FROM sessions WHERE status = 'active' ORDER BY start_time DESC LIMIT 1
+    `);
+    const row = stmt.get();
+    if (!row) return null;
+    return this.rowToSession(row);
+  }
+  rowToSession(row) {
+    return {
+      id: row.id,
+      agent: row.agent,
+      pid: row.pid,
+      startTime: new Date(row.start_time),
+      endTime: row.end_time ? new Date(row.end_time) : void 0,
+      status: row.status,
+      commandCount: row.command_count,
+      blockedCount: row.blocked_count,
+      avgRiskScore: row.avg_risk_score,
+      workingDir: row.working_dir
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Commands
+  // ─────────────────────────────────────────────────────────────
+  insertCommand(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO commands (id, session_id, timestamp, command, allowed, risk_score, risk_level, risk_factors, duration_ms, violations)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      input.sessionId,
+      timestamp,
+      input.command,
+      input.allowed ? 1 : 0,
+      input.riskScore,
+      input.riskLevel,
+      JSON.stringify(input.riskFactors),
+      input.durationMs,
+      JSON.stringify(input.violations)
+    );
+    return id;
+  }
+  getCommands(filter = {}) {
+    const conditions = [];
+    const params = [];
+    if (filter.sessionId) {
+      conditions.push("session_id = ?");
+      params.push(filter.sessionId);
+    }
+    if (filter.allowed !== void 0) {
+      conditions.push("allowed = ?");
+      params.push(filter.allowed ? 1 : 0);
+    }
+    if (filter.riskLevel) {
+      conditions.push("risk_level = ?");
+      params.push(filter.riskLevel);
+    }
+    if (filter.since) {
+      conditions.push("timestamp >= ?");
+      params.push(filter.since.toISOString());
+    }
+    if (filter.afterId) {
+      conditions.push("id > ?");
+      params.push(filter.afterId);
+    }
+    const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+    const limit = filter.limit ?? 100;
+    const offset = filter.offset ?? 0;
+    const stmt = this.db.prepare(`
+      SELECT * FROM commands
+      ${whereClause}
+      ORDER BY timestamp DESC
+      LIMIT ? OFFSET ?
+    `);
+    params.push(limit, offset);
+    const rows = stmt.all(...params);
+    return rows.map((row) => this.rowToCommand(row));
+  }
+  getCommandsBySession(sessionId, limit = 100) {
+    return this.getCommands({ sessionId, limit });
+  }
+  getLiveCommands(limit = 20) {
+    const stmt = this.db.prepare(`
+      SELECT * FROM commands
+      ORDER BY timestamp DESC
+      LIMIT ?
+    `);
+    const rows = stmt.all(limit);
+    return rows.map((row) => this.rowToCommand(row));
+  }
+  rowToCommand(row) {
+    return {
+      id: row.id,
+      sessionId: row.session_id,
+      timestamp: new Date(row.timestamp),
+      command: row.command,
+      allowed: row.allowed === 1,
+      riskScore: row.risk_score,
+      riskLevel: row.risk_level,
+      riskFactors: JSON.parse(row.risk_factors),
+      durationMs: row.duration_ms,
+      violations: JSON.parse(row.violations)
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Bro Events
+  // ─────────────────────────────────────────────────────────────
+  insertBroEvent(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO bro_events (id, session_id, timestamp, event_type, input_context, output_summary, model_used, latency_ms, success)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      input.sessionId ?? null,
+      timestamp,
+      input.eventType,
+      input.inputContext,
+      input.outputSummary,
+      input.modelUsed,
+      input.latencyMs,
+      input.success ? 1 : 0
+    );
+    return id;
+  }
+  getBroEvents(limit = 100, sessionId) {
+    let stmt;
+    let rows;
+    if (sessionId) {
+      stmt = this.db.prepare(`
+        SELECT * FROM bro_events
+        WHERE session_id = ?
+        ORDER BY timestamp DESC
+        LIMIT ?
+      `);
+      rows = stmt.all(sessionId, limit);
+    } else {
+      stmt = this.db.prepare(`
+        SELECT * FROM bro_events
+        ORDER BY timestamp DESC
+        LIMIT ?
+      `);
+      rows = stmt.all(limit);
+    }
+    return rows.map((row) => ({
+      id: row.id,
+      sessionId: row.session_id,
+      timestamp: new Date(row.timestamp),
+      eventType: row.event_type,
+      inputContext: row.input_context,
+      outputSummary: row.output_summary,
+      modelUsed: row.model_used,
+      latencyMs: row.latency_ms,
+      success: row.success === 1
+    }));
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Bro Status
+  // ─────────────────────────────────────────────────────────────
+  updateBroStatus(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO bro_status (id, timestamp, ollama_available, ollama_model, platform, shell, project_type)
+      VALUES (?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      timestamp,
+      input.ollamaAvailable ? 1 : 0,
+      input.ollamaModel,
+      input.platform,
+      input.shell,
+      input.projectType ?? null
+    );
+    return id;
+  }
+  getLatestBroStatus() {
+    const stmt = this.db.prepare(`
+      SELECT * FROM bro_status
+      ORDER BY timestamp DESC
+      LIMIT 1
+    `);
+    const row = stmt.get();
+    if (!row) return null;
+    return {
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      ollamaAvailable: row.ollama_available === 1,
+      ollamaModel: row.ollama_model,
+      platform: row.platform,
+      shell: row.shell,
+      projectType: row.project_type
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Tool Uses
+  // ─────────────────────────────────────────────────────────────
+  insertToolUse(input) {
+    const id = randomUUID();
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString();
+    const stmt = this.db.prepare(`
+      INSERT INTO tool_uses (id, timestamp, tool_name, tool_input, tool_output, exit_code, success, cwd, repo_name, repo_path)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+    stmt.run(
+      id,
+      timestamp,
+      input.toolName,
+      input.toolInput.substring(0, 5e4),
+      // Truncate very long inputs
+      input.toolOutput.substring(0, 5e4),
+      // Truncate very long outputs
+      input.exitCode ?? null,
+      input.success === void 0 ? null : input.success ? 1 : 0,
+      input.cwd,
+      input.repoName ?? null,
+      input.repoPath ?? null
+    );
+    return id;
+  }
+  getToolUses(filter = {}) {
+    const conditions = [];
+    const params = [];
+    if (filter.toolName) {
+      conditions.push("tool_name = ?");
+      params.push(filter.toolName);
+    }
+    if (filter.since) {
+      conditions.push("timestamp >= ?");
+      params.push(filter.since.toISOString());
+    }
+    const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+    const limit = filter.limit ?? 100;
+    const offset = filter.offset ?? 0;
+    const stmt = this.db.prepare(`
+      SELECT * FROM tool_uses
+      ${whereClause}
+      ORDER BY timestamp DESC
+      LIMIT ? OFFSET ?
+    `);
+    params.push(limit, offset);
+    const rows = stmt.all(...params);
+    return rows.map((row) => ({
+      id: row.id,
+      timestamp: new Date(row.timestamp),
+      toolName: row.tool_name,
+      toolInput: row.tool_input,
+      toolOutput: row.tool_output,
+      exitCode: row.exit_code,
+      success: row.success === null ? null : row.success === 1,
+      cwd: row.cwd,
+      repoName: row.repo_name,
+      repoPath: row.repo_path
+    }));
+  }
+  getLiveToolUses(limit = 50) {
+    return this.getToolUses({ limit });
+  }
+  getToolUseStats() {
+    const totalRow = this.db.prepare("SELECT COUNT(*) as count FROM tool_uses").get();
+    const toolRows = this.db.prepare(`
+      SELECT tool_name, COUNT(*) as count FROM tool_uses GROUP BY tool_name ORDER BY count DESC
+    `).all();
+    const byTool = {};
+    for (const row of toolRows) {
+      byTool[row.tool_name] = row.count;
+    }
+    const oneDayAgo = new Date(Date.now() - 24 * 60 * 60 * 1e3).toISOString();
+    const last24hRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM tool_uses WHERE timestamp >= ?
+    `).get(oneDayAgo);
+    return {
+      totalUses: totalRow.count,
+      byTool,
+      last24h: last24hRow.count
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Session Metrics
+  // ─────────────────────────────────────────────────────────────
+  getSessionMetrics(sessionId) {
+    const totalRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM commands WHERE session_id = ?
+    `).get(sessionId);
+    const allowedRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM commands WHERE session_id = ? AND allowed = 1
+    `).get(sessionId);
+    const blockedRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM commands WHERE session_id = ? AND allowed = 0
+    `).get(sessionId);
+    const avgRow = this.db.prepare(`
+      SELECT AVG(risk_score) as avg FROM commands WHERE session_id = ?
+    `).get(sessionId);
+    const riskRows = this.db.prepare(`
+      SELECT risk_level, COUNT(*) as count FROM commands WHERE session_id = ? GROUP BY risk_level
+    `).all(sessionId);
+    const riskDistribution = {};
+    for (const row of riskRows) {
+      riskDistribution[row.risk_level] = row.count;
+    }
+    const cmdRows = this.db.prepare(`
+      SELECT command, COUNT(*) as count FROM commands WHERE session_id = ?
+      GROUP BY command ORDER BY count DESC LIMIT 10
+    `).all(sessionId);
+    return {
+      totalCommands: totalRow.count,
+      allowedCommands: allowedRow.count,
+      blockedCommands: blockedRow.count,
+      avgRiskScore: avgRow.avg ?? 0,
+      riskDistribution,
+      topCommands: cmdRows
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Stats
+  // ─────────────────────────────────────────────────────────────
+  getStats() {
+    const totalEventsRow = this.db.prepare("SELECT COUNT(*) as count FROM events").get();
+    const sourceRows = this.db.prepare(`
+      SELECT source, COUNT(*) as count FROM events GROUP BY source
+    `).all();
+    const eventsBySource = {};
+    for (const row of sourceRows) {
+      eventsBySource[row.source] = row.count;
+    }
+    const levelRows = this.db.prepare(`
+      SELECT level, COUNT(*) as count FROM events GROUP BY level
+    `).all();
+    const eventsByLevel = {};
+    for (const row of levelRows) {
+      eventsByLevel[row.level] = row.count;
+    }
+    const pendingBlocksRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM egress_blocks WHERE status = 'pending'
+    `).get();
+    const connectorCountRow = this.db.prepare(`
+      SELECT COUNT(DISTINCT connector) as count FROM connector_events
+    `).get();
+    const oneDayAgo = new Date(Date.now() - 24 * 60 * 60 * 1e3).toISOString();
+    const recentExposuresRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM exposure_scans WHERE timestamp >= ?
+    `).get(oneDayAgo);
+    const activeSessionsRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM sessions WHERE status = 'active'
+    `).get();
+    const todayStart = /* @__PURE__ */ new Date();
+    todayStart.setHours(0, 0, 0, 0);
+    const todayCommandsRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM commands WHERE timestamp >= ?
+    `).get(todayStart.toISOString());
+    const todayViolationsRow = this.db.prepare(`
+      SELECT COUNT(*) as count FROM commands WHERE timestamp >= ? AND allowed = 0
+    `).get(todayStart.toISOString());
+    const avgRiskRow = this.db.prepare(`
+      SELECT AVG(risk_score) as avg FROM commands WHERE timestamp >= ?
+    `).get(oneDayAgo);
+    const latestStatus = this.getLatestBroStatus();
+    let ollamaStatus = "unknown";
+    if (latestStatus) {
+      ollamaStatus = latestStatus.ollamaAvailable ? "connected" : "disconnected";
+    }
+    return {
+      totalEvents: totalEventsRow.count,
+      eventsBySource,
+      eventsByLevel,
+      pendingBlocks: pendingBlocksRow.count,
+      connectorCount: connectorCountRow.count,
+      recentExposures: recentExposuresRow.count,
+      activeSessions: activeSessionsRow.count,
+      todayCommands: todayCommandsRow.count,
+      todayViolations: todayViolationsRow.count,
+      avgRiskScore24h: avgRiskRow.avg ?? 0,
+      ollamaStatus
+    };
+  }
+  // ─────────────────────────────────────────────────────────────
+  // Maintenance
+  // ─────────────────────────────────────────────────────────────
+  cleanup(olderThanDays = 30) {
+    const cutoff = new Date(Date.now() - olderThanDays * 24 * 60 * 60 * 1e3).toISOString();
+    const eventsDeleted = this.db.prepare("DELETE FROM events WHERE timestamp < ?").run(cutoff).changes;
+    const connectorDeleted = this.db.prepare("DELETE FROM connector_events WHERE timestamp < ?").run(cutoff).changes;
+    const blocksDeleted = this.db.prepare(`
+      DELETE FROM egress_blocks WHERE timestamp < ? AND status != 'pending'
+    `).run(cutoff).changes;
+    const exposuresDeleted = this.db.prepare("DELETE FROM exposure_scans WHERE timestamp < ?").run(cutoff).changes;
+    const commandsDeleted = this.db.prepare("DELETE FROM commands WHERE timestamp < ?").run(cutoff).changes;
+    const sessionsDeleted = this.db.prepare(`
+      DELETE FROM sessions WHERE start_time < ? AND status != 'active'
+    `).run(cutoff).changes;
+    const broEventsDeleted = this.db.prepare("DELETE FROM bro_events WHERE timestamp < ?").run(cutoff).changes;
+    const broStatusDeleted = this.db.prepare("DELETE FROM bro_status WHERE timestamp < ?").run(cutoff).changes;
+    const toolUsesDeleted = this.db.prepare("DELETE FROM tool_uses WHERE timestamp < ?").run(cutoff).changes;
+    return eventsDeleted + connectorDeleted + blocksDeleted + exposuresDeleted + commandsDeleted + sessionsDeleted + broEventsDeleted + broStatusDeleted + toolUsesDeleted;
+  }
+  close() {
+    this.db.close();
+  }
+};
+var db_default = DashboardDB;
+
+export {
+  DashboardDB,
+  db_default
+};
+//# sourceMappingURL=chunk-JYWQT2B4.js.map