paygate-mcp 10.13.0 → 10.14.0

package/dist/audit-trail.d.ts

@@ -0,0 +1,115 @@
+/**
+ * AuditTrailManager — Compliance-ready audit trail with tamper detection.
+ *
+ * Records every significant action with actor, target, and metadata.
+ * Uses hash chains for tamper detection — each entry's hash includes
+ * the previous entry's hash, creating a verifiable chain of custody.
+ *
+ * @example
+ * ```ts
+ * const audit = new AuditTrailManager();
+ *
+ * audit.record({
+ *   action: 'key.created',
+ *   actor: 'admin_1',
+ *   target: 'key_abc',
+ *   details: { credits: 1000 },
+ * });
+ *
+ * const entries = audit.query({ actor: 'admin_1' });
+ * const valid = audit.verifyChain(); // true if no tampering
+ * ```
+ */
+export interface AuditEntry {
+    id: string;
+    sequence: number;
+    action: string;
+    actor: string;
+    actorType?: string;
+    target: string;
+    targetType?: string;
+    details: Record<string, unknown>;
+    timestamp: number;
+    /** IP address or origin. */
+    source?: string;
+    /** Hash of this entry (includes previous hash for chain). */
+    hash: string;
+    /** Hash of the previous entry. */
+    previousHash: string;
+}
+export interface AuditRecordParams {
+    action: string;
+    actor: string;
+    actorType?: string;
+    target: string;
+    targetType?: string;
+    details?: Record<string, unknown>;
+    source?: string;
+}
+export interface AuditQuery {
+    action?: string;
+    actions?: string[];
+    actor?: string;
+    actorType?: string;
+    target?: string;
+    targetType?: string;
+    startTime?: number;
+    endTime?: number;
+    limit?: number;
+    offset?: number;
+}
+export interface AuditQueryResult {
+    entries: AuditEntry[];
+    total: number;
+    hasMore: boolean;
+}
+export interface ChainVerification {
+    valid: boolean;
+    totalEntries: number;
+    firstBrokenAt?: number;
+    brokenEntry?: string;
+}
+export interface AuditTrailConfig {
+    maxEntries?: number;
+}
+export interface AuditTrailStats {
+    totalEntries: number;
+    totalActors: number;
+    totalActions: number;
+    chainValid: boolean;
+    oldestEntry: number | null;
+    newestEntry: number | null;
+}
+export declare class AuditTrailManager {
+    private entries;
+    private sequence;
+    private maxEntries;
+    private lastHash;
+    constructor(config?: AuditTrailConfig);
+    /** Record an audit entry. Returns the entry ID. */
+    record(params: AuditRecordParams): string;
+    /** Record multiple entries. */
+    recordBatch(params: AuditRecordParams[]): string[];
+    /** Query audit entries with filters. */
+    query(q?: AuditQuery): AuditQueryResult;
+    /** Get a single entry by ID. */
+    getEntry(id: string): AuditEntry | null;
+    /** Get all entries for a specific target. */
+    getTargetHistory(target: string): AuditEntry[];
+    /** Get all entries by a specific actor. */
+    getActorHistory(actor: string): AuditEntry[];
+    /** Verify the integrity of the audit chain. */
+    verifyChain(): ChainVerification;
+    /** Get action frequency counts. */
+    getActionCounts(): Map<string, number>;
+    /** Get unique actors. */
+    getActors(): string[];
+    /** Get unique targets. */
+    getTargets(): string[];
+    getStats(): AuditTrailStats;
+    /** Clear all data. */
+    destroy(): void;
+    /** Simple hash function for chain integrity. Production should use crypto. */
+    private simpleHash;
+}
+//# sourceMappingURL=audit-trail.d.ts.map

package/dist/audit-trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../src/audit-trail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,4BAA4B;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,OAAO,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAID,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,OAAO,CAAoB;IACnC,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,QAAQ,CAAO;gBAEX,MAAM,GAAE,gBAAqB;IAMzC,mDAAmD;IACnD,MAAM,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM;IAuCzC,+BAA+B;IAC/B,WAAW,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,EAAE;IAMlD,wCAAwC;IACxC,KAAK,CAAC,CAAC,GAAE,UAAe,GAAG,gBAAgB;IAwB3C,gCAAgC;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAIvC,6CAA6C;IAC7C,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,EAAE;IAI9C,2CAA2C;IAC3C,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE;IAM5C,+CAA+C;IAC/C,WAAW,IAAI,iBAAiB;IAqChC,mCAAmC;IACnC,eAAe,IAAI,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC;IAQtC,yBAAyB;IACzB,SAAS,IAAI,MAAM,EAAE;IAIrB,0BAA0B;IAC1B,UAAU,IAAI,MAAM,EAAE;IAMtB,QAAQ,IAAI,eAAe;IAc3B,sBAAsB;IACtB,OAAO,IAAI,IAAI;IAQf,8EAA8E;IAC9E,OAAO,CAAC,UAAU;CASnB"}

package/dist/audit-trail.js

@@ -0,0 +1,198 @@
+"use strict";
+/**
+ * AuditTrailManager — Compliance-ready audit trail with tamper detection.
+ *
+ * Records every significant action with actor, target, and metadata.
+ * Uses hash chains for tamper detection — each entry's hash includes
+ * the previous entry's hash, creating a verifiable chain of custody.
+ *
+ * @example
+ * ```ts
+ * const audit = new AuditTrailManager();
+ *
+ * audit.record({
+ *   action: 'key.created',
+ *   actor: 'admin_1',
+ *   target: 'key_abc',
+ *   details: { credits: 1000 },
+ * });
+ *
+ * const entries = audit.query({ actor: 'admin_1' });
+ * const valid = audit.verifyChain(); // true if no tampering
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuditTrailManager = void 0;
+// ── Implementation ───────────────────────────────────────────────────
+class AuditTrailManager {
+    entries = [];
+    sequence = 0;
+    maxEntries;
+    lastHash = '0'; // Genesis hash
+    constructor(config = {}) {
+        this.maxEntries = config.maxEntries ?? 100_000;
+    }
+    // ── Recording ─────────────────────────────────────────────────────
+    /** Record an audit entry. Returns the entry ID. */
+    record(params) {
+        if (!params.action)
+            throw new Error('Action is required');
+        if (!params.actor)
+            throw new Error('Actor is required');
+        if (!params.target)
+            throw new Error('Target is required');
+        const id = `audit_${++this.sequence}`;
+        const timestamp = Date.now();
+        const previousHash = this.lastHash;
+        // Compute hash of this entry (simplified — production would use crypto)
+        const hashInput = `${id}|${params.action}|${params.actor}|${params.target}|${timestamp}|${previousHash}`;
+        const hash = this.simpleHash(hashInput);
+        const entry = {
+            id,
+            sequence: this.sequence,
+            action: params.action,
+            actor: params.actor,
+            actorType: params.actorType,
+            target: params.target,
+            targetType: params.targetType,
+            details: { ...(params.details ?? {}) },
+            timestamp,
+            source: params.source,
+            hash,
+            previousHash,
+        };
+        this.entries.push(entry);
+        this.lastHash = hash;
+        // Evict oldest if over limit
+        if (this.entries.length > this.maxEntries) {
+            this.entries.splice(0, this.entries.length - this.maxEntries);
+        }
+        return id;
+    }
+    /** Record multiple entries. */
+    recordBatch(params) {
+        return params.map(p => this.record(p));
+    }
+    // ── Query ─────────────────────────────────────────────────────────
+    /** Query audit entries with filters. */
+    query(q = {}) {
+        let filtered = this.entries;
+        if (q.action)
+            filtered = filtered.filter(e => e.action === q.action);
+        if (q.actions && q.actions.length > 0)
+            filtered = filtered.filter(e => q.actions.includes(e.action));
+        if (q.actor)
+            filtered = filtered.filter(e => e.actor === q.actor);
+        if (q.actorType)
+            filtered = filtered.filter(e => e.actorType === q.actorType);
+        if (q.target)
+            filtered = filtered.filter(e => e.target === q.target);
+        if (q.targetType)
+            filtered = filtered.filter(e => e.targetType === q.targetType);
+        if (q.startTime)
+            filtered = filtered.filter(e => e.timestamp >= q.startTime);
+        if (q.endTime)
+            filtered = filtered.filter(e => e.timestamp <= q.endTime);
+        const total = filtered.length;
+        const limit = q.limit ?? 100;
+        const offset = q.offset ?? 0;
+        filtered = filtered.slice(offset, offset + limit);
+        return {
+            entries: filtered,
+            total,
+            hasMore: offset + limit < total,
+        };
+    }
+    /** Get a single entry by ID. */
+    getEntry(id) {
+        return this.entries.find(e => e.id === id) ?? null;
+    }
+    /** Get all entries for a specific target. */
+    getTargetHistory(target) {
+        return this.entries.filter(e => e.target === target);
+    }
+    /** Get all entries by a specific actor. */
+    getActorHistory(actor) {
+        return this.entries.filter(e => e.actor === actor);
+    }
+    // ── Chain Verification ────────────────────────────────────────────
+    /** Verify the integrity of the audit chain. */
+    verifyChain() {
+        if (this.entries.length === 0) {
+            return { valid: true, totalEntries: 0 };
+        }
+        for (let i = 0; i < this.entries.length; i++) {
+            const entry = this.entries[i];
+            // Verify hash
+            const hashInput = `${entry.id}|${entry.action}|${entry.actor}|${entry.target}|${entry.timestamp}|${entry.previousHash}`;
+            const expectedHash = this.simpleHash(hashInput);
+            if (entry.hash !== expectedHash) {
+                return {
+                    valid: false,
+                    totalEntries: this.entries.length,
+                    firstBrokenAt: i,
+                    brokenEntry: entry.id,
+                };
+            }
+            // Verify chain link (except first entry in current window — may have been evicted)
+            if (i > 0 && entry.previousHash !== this.entries[i - 1].hash) {
+                return {
+                    valid: false,
+                    totalEntries: this.entries.length,
+                    firstBrokenAt: i,
+                    brokenEntry: entry.id,
+                };
+            }
+        }
+        return { valid: true, totalEntries: this.entries.length };
+    }
+    // ── Analytics ─────────────────────────────────────────────────────
+    /** Get action frequency counts. */
+    getActionCounts() {
+        const counts = new Map();
+        for (const e of this.entries) {
+            counts.set(e.action, (counts.get(e.action) ?? 0) + 1);
+        }
+        return counts;
+    }
+    /** Get unique actors. */
+    getActors() {
+        return [...new Set(this.entries.map(e => e.actor))];
+    }
+    /** Get unique targets. */
+    getTargets() {
+        return [...new Set(this.entries.map(e => e.target))];
+    }
+    // ── Stats ─────────────────────────────────────────────────────────
+    getStats() {
+        const actors = new Set(this.entries.map(e => e.actor));
+        const actions = new Set(this.entries.map(e => e.action));
+        return {
+            totalEntries: this.entries.length,
+            totalActors: actors.size,
+            totalActions: actions.size,
+            chainValid: this.verifyChain().valid,
+            oldestEntry: this.entries.length > 0 ? this.entries[0].timestamp : null,
+            newestEntry: this.entries.length > 0 ? this.entries[this.entries.length - 1].timestamp : null,
+        };
+    }
+    /** Clear all data. */
+    destroy() {
+        this.entries = [];
+        this.sequence = 0;
+        this.lastHash = '0';
+    }
+    // ── Private ───────────────────────────────────────────────────────
+    /** Simple hash function for chain integrity. Production should use crypto. */
+    simpleHash(input) {
+        let hash = 0;
+        for (let i = 0; i < input.length; i++) {
+            const char = input.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash = hash & hash;
+        }
+        return `h_${Math.abs(hash).toString(36)}`;
+    }
+}
+exports.AuditTrailManager = AuditTrailManager;
+//# sourceMappingURL=audit-trail.js.map

package/dist/audit-trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../src/audit-trail.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAuEH,wEAAwE;AAExE,MAAa,iBAAiB;IACpB,OAAO,GAAiB,EAAE,CAAC;IAC3B,QAAQ,GAAG,CAAC,CAAC;IACb,UAAU,CAAS;IACnB,QAAQ,GAAG,GAAG,CAAC,CAAC,eAAe;IAEvC,YAAY,SAA2B,EAAE;QACvC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC;IACjD,CAAC;IAED,qEAAqE;IAErE,mDAAmD;IACnD,MAAM,CAAC,MAAyB;QAC9B,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAE1D,MAAM,EAAE,GAAG,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QAEnC,wEAAwE;QACxE,MAAM,SAAS,GAAG,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAExC,MAAM,KAAK,GAAe;YACxB,EAAE;YACF,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE;YACtC,SAAS;YACT,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,IAAI;YACJ,YAAY;SACb,CAAC;QAEF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,6BAA6B;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;QAED,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,+BAA+B;IAC/B,WAAW,CAAC,MAA2B;QACrC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IAErE,wCAAwC;IACxC,KAAK,CAAC,IAAgB,EAAE;QACtB,IAAI,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5B,IAAI,CAAC,CAAC,MAAM;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACtG,IAAI,CAAC,CAAC,KAAK;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,CAAC,SAAS;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,MAAM;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,CAAC,UAAU;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC;QACjF,IAAI,CAAC,CAAC,SAAS;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAU,CAAC,CAAC;QAC9E,IAAI,CAAC,CAAC,OAAO;YAAE,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,OAAQ,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC7B,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QAElD,OAAO;YACL,OAAO,EAAE,QAAQ;YACjB,KAAK;YACL,OAAO,EAAE,MAAM,GAAG,KAAK,GAAG,KAAK;SAChC,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,QAAQ,CAAC,EAAU;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,IAAI,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,gBAAgB,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,2CAA2C;IAC3C,eAAe,CAAC,KAAa;QAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IACrD,CAAC;IAED,qEAAqE;IAErE,+CAA+C;IAC/C,WAAW;QACT,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC1C,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAE9B,cAAc;YACd,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACxH,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAEhD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;oBACjC,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,KAAK,CAAC,EAAE;iBACtB,CAAC;YACJ,CAAC;YAED,mFAAmF;YACnF,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC7D,OAAO;oBACL,KAAK,EAAE,KAAK;oBACZ,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;oBACjC,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,KAAK,CAAC,EAAE;iBACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;IAED,qEAAqE;IAErE,mCAAmC;IACnC,eAAe;QACb,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,yBAAyB;IACzB,SAAS;QACP,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,0BAA0B;IAC1B,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,qEAAqE;IAErE,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAEzD,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YACjC,WAAW,EAAE,MAAM,CAAC,IAAI;YACxB,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,KAAK;YACpC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACvE,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;SAC9F,CAAC;IACJ,CAAC;IAED,sBAAsB;IACtB,OAAO;QACL,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;IACtB,CAAC;IAED,qEAAqE;IAErE,8EAA8E;IACtE,UAAU,CAAC,KAAa;QAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;YACnC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,OAAO,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;CACF;AAjMD,8CAiMC"}

package/dist/feature-flags.d.ts

@@ -0,0 +1,111 @@
+/**
+ * FeatureFlagManager — Toggle features per key with rollouts and scheduling.
+ *
+ * Control feature visibility per API key with percentage-based rollouts,
+ * A/B groups, and time-based scheduling. Useful for gradual feature
+ * launches, beta testing, and kill switches.
+ *
+ * @example
+ * ```ts
+ * const flags = new FeatureFlagManager();
+ *
+ * flags.createFlag({
+ *   name: 'new_search_v2',
+ *   rolloutPercent: 50,    // 50% of keys get this
+ *   enabledKeys: ['key_beta'],
+ * });
+ *
+ * flags.isEnabled('new_search_v2', 'key_abc'); // depends on hash
+ * flags.isEnabled('new_search_v2', 'key_beta'); // always true
+ * ```
+ */
+export interface FeatureFlag {
+    name: string;
+    description?: string;
+    /** Global enable/disable. If false, flag is off for everyone. */
+    enabled: boolean;
+    /** Percentage of keys that get this feature (0-100). */
+    rolloutPercent: number;
+    /** Keys that always have this feature, regardless of rollout. */
+    enabledKeys: Set<string>;
+    /** Keys that never have this feature, regardless of rollout. */
+    disabledKeys: Set<string>;
+    /** A/B group name. Keys are consistently assigned to the same group. */
+    group?: string;
+    /** Schedule: only active between these times (ISO strings). */
+    activeFrom?: number;
+    activeUntil?: number;
+    createdAt: number;
+    updatedAt: number;
+}
+export interface FlagCreateParams {
+    name: string;
+    description?: string;
+    enabled?: boolean;
+    rolloutPercent?: number;
+    enabledKeys?: string[];
+    disabledKeys?: string[];
+    group?: string;
+    activeFrom?: string;
+    activeUntil?: string;
+}
+export interface FlagEvaluation {
+    flag: string;
+    key: string;
+    enabled: boolean;
+    reason: 'flag_disabled' | 'key_allowlist' | 'key_blocklist' | 'schedule_inactive' | 'rollout_included' | 'rollout_excluded' | 'flag_not_found';
+}
+export interface FeatureFlagConfig {
+    /** Default rollout percent for new flags. Default 100 (enabled for all). */
+    defaultRolloutPercent?: number;
+}
+export interface FeatureFlagStats {
+    totalFlags: number;
+    enabledFlags: number;
+    disabledFlags: number;
+    totalEvaluations: number;
+    totalEnabled: number;
+    totalDisabled: number;
+}
+export declare class FeatureFlagManager {
+    private flags;
+    private defaultRolloutPercent;
+    private totalEvaluations;
+    private totalEnabled;
+    private totalDisabled;
+    constructor(config?: FeatureFlagConfig);
+    /** Create a new feature flag. */
+    createFlag(params: FlagCreateParams): FeatureFlag;
+    /** Remove a flag. */
+    removeFlag(name: string): boolean;
+    /** Get a flag definition. */
+    getFlag(name: string): FeatureFlag | null;
+    /** List all flags. */
+    listFlags(): FeatureFlag[];
+    /** Enable or disable a flag globally. */
+    setEnabled(name: string, enabled: boolean): boolean;
+    /** Update rollout percentage. */
+    setRolloutPercent(name: string, percent: number): boolean;
+    /** Add a key to the allowlist. */
+    addToAllowlist(name: string, key: string): boolean;
+    /** Add a key to the blocklist. */
+    addToBlocklist(name: string, key: string): boolean;
+    /** Remove a key from both lists. */
+    removeFromLists(name: string, key: string): boolean;
+    /** Set schedule window. */
+    setSchedule(name: string, activeFrom?: string, activeUntil?: string): boolean;
+    /** Check if a flag is enabled for a specific key. */
+    isEnabled(name: string, key: string): boolean;
+    /** Evaluate a flag for a key with full details. */
+    evaluate(name: string, key: string): FlagEvaluation;
+    /** Evaluate all flags for a key. Returns map of flag name → enabled. */
+    evaluateAll(key: string): Map<string, boolean>;
+    /** Get all keys that would have a flag enabled (from allowlist + rollout sampling). */
+    getEnabledKeys(name: string, sampleKeys: string[]): string[];
+    getStats(): FeatureFlagStats;
+    /** Clear all data. */
+    destroy(): void;
+    /** Simple deterministic hash for consistent rollout bucketing. */
+    private hashKey;
+}
+//# sourceMappingURL=feature-flags.d.ts.map

package/dist/feature-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-flags.d.ts","sourceRoot":"","sources":["../src/feature-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAIH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,OAAO,EAAE,OAAO,CAAC;IACjB,wDAAwD;IACxD,cAAc,EAAE,MAAM,CAAC;IACvB,iEAAiE;IACjE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,gEAAgE;IAChE,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,wEAAwE;IACxE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,eAAe,GAAG,eAAe,GAAG,eAAe,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;CAChJ;AAED,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAID,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,KAAK,CAAkC;IAC/C,OAAO,CAAC,qBAAqB,CAAS;IAGtC,OAAO,CAAC,gBAAgB,CAAK;IAC7B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,aAAa,CAAK;gBAEd,MAAM,GAAE,iBAAsB;IAM1C,iCAAiC;IACjC,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,WAAW;IAwBjD,qBAAqB;IACrB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIjC,6BAA6B;IAC7B,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAIzC,sBAAsB;IACtB,SAAS,IAAI,WAAW,EAAE;IAI1B,yCAAyC;IACzC,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO;IAQnD,iCAAiC;IACjC,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO;IAQzD,kCAAkC;IAClC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IASlD,kCAAkC;IAClC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IASlD,oCAAoC;IACpC,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IASnD,2BAA2B;IAC3B,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO;IAW7E,qDAAqD;IACrD,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;IAI7C,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,cAAc;IAkDnD,wEAAwE;IACxE,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ9C,uFAAuF;IACvF,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE;IAM5D,QAAQ,IAAI,gBAAgB;IAgB5B,sBAAsB;IACtB,OAAO,IAAI,IAAI;IASf,kEAAkE;IAClE,OAAO,CAAC,OAAO;CAUhB"}

package/dist/feature-flags.js

@@ -0,0 +1,228 @@
+"use strict";
+/**
+ * FeatureFlagManager — Toggle features per key with rollouts and scheduling.
+ *
+ * Control feature visibility per API key with percentage-based rollouts,
+ * A/B groups, and time-based scheduling. Useful for gradual feature
+ * launches, beta testing, and kill switches.
+ *
+ * @example
+ * ```ts
+ * const flags = new FeatureFlagManager();
+ *
+ * flags.createFlag({
+ *   name: 'new_search_v2',
+ *   rolloutPercent: 50,    // 50% of keys get this
+ *   enabledKeys: ['key_beta'],
+ * });
+ *
+ * flags.isEnabled('new_search_v2', 'key_abc'); // depends on hash
+ * flags.isEnabled('new_search_v2', 'key_beta'); // always true
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FeatureFlagManager = void 0;
+// ── Implementation ───────────────────────────────────────────────────
+class FeatureFlagManager {
+    flags = new Map();
+    defaultRolloutPercent;
+    // Stats
+    totalEvaluations = 0;
+    totalEnabled = 0;
+    totalDisabled = 0;
+    constructor(config = {}) {
+        this.defaultRolloutPercent = config.defaultRolloutPercent ?? 100;
+    }
+    // ── Flag Management ───────────────────────────────────────────────
+    /** Create a new feature flag. */
+    createFlag(params) {
+        if (this.flags.has(params.name)) {
+            throw new Error(`Flag already exists: ${params.name}`);
+        }
+        const now = Date.now();
+        const flag = {
+            name: params.name,
+            description: params.description,
+            enabled: params.enabled ?? true,
+            rolloutPercent: Math.min(100, Math.max(0, params.rolloutPercent ?? this.defaultRolloutPercent)),
+            enabledKeys: new Set(params.enabledKeys ?? []),
+            disabledKeys: new Set(params.disabledKeys ?? []),
+            group: params.group,
+            activeFrom: params.activeFrom ? new Date(params.activeFrom).getTime() : undefined,
+            activeUntil: params.activeUntil ? new Date(params.activeUntil).getTime() : undefined,
+            createdAt: now,
+            updatedAt: now,
+        };
+        this.flags.set(params.name, flag);
+        return flag;
+    }
+    /** Remove a flag. */
+    removeFlag(name) {
+        return this.flags.delete(name);
+    }
+    /** Get a flag definition. */
+    getFlag(name) {
+        return this.flags.get(name) ?? null;
+    }
+    /** List all flags. */
+    listFlags() {
+        return [...this.flags.values()];
+    }
+    /** Enable or disable a flag globally. */
+    setEnabled(name, enabled) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.enabled = enabled;
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    /** Update rollout percentage. */
+    setRolloutPercent(name, percent) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.rolloutPercent = Math.min(100, Math.max(0, percent));
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    /** Add a key to the allowlist. */
+    addToAllowlist(name, key) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.enabledKeys.add(key);
+        flag.disabledKeys.delete(key);
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    /** Add a key to the blocklist. */
+    addToBlocklist(name, key) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.disabledKeys.add(key);
+        flag.enabledKeys.delete(key);
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    /** Remove a key from both lists. */
+    removeFromLists(name, key) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.enabledKeys.delete(key);
+        flag.disabledKeys.delete(key);
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    /** Set schedule window. */
+    setSchedule(name, activeFrom, activeUntil) {
+        const flag = this.flags.get(name);
+        if (!flag)
+            return false;
+        flag.activeFrom = activeFrom ? new Date(activeFrom).getTime() : undefined;
+        flag.activeUntil = activeUntil ? new Date(activeUntil).getTime() : undefined;
+        flag.updatedAt = Date.now();
+        return true;
+    }
+    // ── Evaluation ────────────────────────────────────────────────────
+    /** Check if a flag is enabled for a specific key. */
+    isEnabled(name, key) {
+        return this.evaluate(name, key).enabled;
+    }
+    /** Evaluate a flag for a key with full details. */
+    evaluate(name, key) {
+        this.totalEvaluations++;
+        const flag = this.flags.get(name);
+        if (!flag) {
+            this.totalDisabled++;
+            return { flag: name, key, enabled: false, reason: 'flag_not_found' };
+        }
+        // Global disable
+        if (!flag.enabled) {
+            this.totalDisabled++;
+            return { flag: name, key, enabled: false, reason: 'flag_disabled' };
+        }
+        // Blocklist takes precedence
+        if (flag.disabledKeys.has(key)) {
+            this.totalDisabled++;
+            return { flag: name, key, enabled: false, reason: 'key_blocklist' };
+        }
+        // Allowlist
+        if (flag.enabledKeys.has(key)) {
+            this.totalEnabled++;
+            return { flag: name, key, enabled: true, reason: 'key_allowlist' };
+        }
+        // Schedule check
+        const now = Date.now();
+        if (flag.activeFrom && now < flag.activeFrom) {
+            this.totalDisabled++;
+            return { flag: name, key, enabled: false, reason: 'schedule_inactive' };
+        }
+        if (flag.activeUntil && now > flag.activeUntil) {
+            this.totalDisabled++;
+            return { flag: name, key, enabled: false, reason: 'schedule_inactive' };
+        }
+        // Rollout: deterministic hash-based assignment
+        const hash = this.hashKey(key, flag.group ?? name);
+        const bucket = hash % 100;
+        if (bucket < flag.rolloutPercent) {
+            this.totalEnabled++;
+            return { flag: name, key, enabled: true, reason: 'rollout_included' };
+        }
+        this.totalDisabled++;
+        return { flag: name, key, enabled: false, reason: 'rollout_excluded' };
+    }
+    /** Evaluate all flags for a key. Returns map of flag name → enabled. */
+    evaluateAll(key) {
+        const result = new Map();
+        for (const flag of this.flags.values()) {
+            result.set(flag.name, this.isEnabled(flag.name, key));
+        }
+        return result;
+    }
+    /** Get all keys that would have a flag enabled (from allowlist + rollout sampling). */
+    getEnabledKeys(name, sampleKeys) {
+        return sampleKeys.filter(key => this.isEnabled(name, key));
+    }
+    // ── Stats ─────────────────────────────────────────────────────────
+    getStats() {
+        let enabled = 0, disabled = 0;
+        for (const flag of this.flags.values()) {
+            if (flag.enabled)
+                enabled++;
+            else
+                disabled++;
+        }
+        return {
+            totalFlags: this.flags.size,
+            enabledFlags: enabled,
+            disabledFlags: disabled,
+            totalEvaluations: this.totalEvaluations,
+            totalEnabled: this.totalEnabled,
+            totalDisabled: this.totalDisabled,
+        };
+    }
+    /** Clear all data. */
+    destroy() {
+        this.flags.clear();
+        this.totalEvaluations = 0;
+        this.totalEnabled = 0;
+        this.totalDisabled = 0;
+    }
+    // ── Private ───────────────────────────────────────────────────────
+    /** Simple deterministic hash for consistent rollout bucketing. */
+    hashKey(key, salt) {
+        const str = `${key}:${salt}`;
+        let hash = 0;
+        for (let i = 0; i < str.length; i++) {
+            const char = str.charCodeAt(i);
+            hash = ((hash << 5) - hash) + char;
+            hash = hash & hash; // Convert to 32-bit integer
+        }
+        return Math.abs(hash);
+    }
+}
+exports.FeatureFlagManager = FeatureFlagManager;
+//# sourceMappingURL=feature-flags.js.map