synapsexcoder 6.0.0

package/dist/synapsexcoder/worktree-manager.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Worktree Awareness — git worktree lifecycle management
+ */
+export interface WorktreeInfo {
+    path: string;
+    branch: string;
+    head: string;
+    bare: boolean;
+    locked?: boolean;
+}
+export interface CreateWorktreeOptions {
+    branch: string;
+    path?: string;
+    baseBranch?: string;
+    force?: boolean;
+}
+export declare class WorktreeManager {
+    private repoRoot;
+    constructor(repoRoot?: string);
+    private git;
+    isGitRepo(): boolean;
+    list(): WorktreeInfo[];
+    private parsePorcelain;
+    create(options: CreateWorktreeOptions): WorktreeInfo;
+    remove(path: string, force?: boolean): boolean;
+    prune(): string;
+    getPrimary(): WorktreeInfo | undefined;
+    resolvePath(relativePath: string): string;
+}
+export declare function getWorktreeManager(repoRoot?: string): WorktreeManager;
+//# sourceMappingURL=worktree-manager.d.ts.map

package/dist/synapsexcoder/worktree-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-manager.d.ts","sourceRoot":"","sources":["../../src/synapsexcoder/worktree-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,eAAe;IACd,OAAO,CAAC,QAAQ;gBAAR,QAAQ,GAAE,MAAsB;IAEpD,OAAO,CAAC,GAAG;IAQX,SAAS,IAAI,OAAO;IAIpB,IAAI,IAAI,YAAY,EAAE;IAUtB,OAAO,CAAC,cAAc;IAsBtB,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,YAAY;IAoBpD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,UAAQ,GAAG,OAAO;IAU5C,KAAK,IAAI,MAAM;IAIf,UAAU,IAAI,YAAY,GAAG,SAAS;IAItC,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CAK1C;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,eAAe,CAErE"}

package/dist/synapsexcoder/worktree-manager.js

@@ -0,0 +1,100 @@
+/**
+ * Worktree Awareness — git worktree lifecycle management
+ */
+import { execSync } from "child_process";
+import { existsSync } from "fs";
+import { join } from "path";
+export class WorktreeManager {
+    repoRoot;
+    constructor(repoRoot = process.cwd()) {
+        this.repoRoot = repoRoot;
+    }
+    git(args) {
+        return execSync(`git ${args}`, {
+            cwd: this.repoRoot,
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "pipe"],
+        }).trim();
+    }
+    isGitRepo() {
+        return existsSync(join(this.repoRoot, ".git"));
+    }
+    list() {
+        if (!this.isGitRepo())
+            return [];
+        try {
+            const output = this.git('worktree list --porcelain');
+            return this.parsePorcelain(output);
+        }
+        catch {
+            return [];
+        }
+    }
+    parsePorcelain(output) {
+        const worktrees = [];
+        let current = {};
+        for (const line of output.split("\n")) {
+            if (line.startsWith("worktree ")) {
+                if (current.path)
+                    worktrees.push(current);
+                current = { path: line.slice(9), bare: false };
+            }
+            else if (line.startsWith("HEAD ")) {
+                current.head = line.slice(5);
+            }
+            else if (line.startsWith("branch ")) {
+                current.branch = line.slice(7).replace("refs/heads/", "");
+            }
+            else if (line === "bare") {
+                current.bare = true;
+            }
+            else if (line.startsWith("locked")) {
+                current.locked = true;
+            }
+        }
+        if (current.path)
+            worktrees.push(current);
+        return worktrees;
+    }
+    create(options) {
+        if (!this.isGitRepo()) {
+            throw new Error(`Not a git repository: ${this.repoRoot}`);
+        }
+        const wtPath = options.path ??
+            join(this.repoRoot, "..", `${options.branch.replace(/\//g, "-")}-worktree`);
+        if (options.baseBranch) {
+            this.git(`branch ${options.branch} ${options.baseBranch}`);
+        }
+        const forceFlag = options.force ? " --force" : "";
+        this.git(`worktree add${forceFlag} "${wtPath}" ${options.branch}`);
+        const created = this.list().find((w) => w.path === wtPath);
+        if (!created)
+            throw new Error(`Worktree creation failed for ${wtPath}`);
+        return created;
+    }
+    remove(path, force = false) {
+        try {
+            const flag = force ? " --force" : "";
+            this.git(`worktree remove${flag} "${path}"`);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    prune() {
+        return this.git("worktree prune");
+    }
+    getPrimary() {
+        return this.list().find((w) => !w.bare);
+    }
+    resolvePath(relativePath) {
+        const primary = this.getPrimary();
+        const root = primary?.path ?? this.repoRoot;
+        return join(root, relativePath);
+    }
+}
+export function getWorktreeManager(repoRoot) {
+    return new WorktreeManager(repoRoot);
+}
+//# sourceMappingURL=worktree-manager.js.map

package/dist/synapsexcoder/worktree-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-manager.js","sourceRoot":"","sources":["../../src/synapsexcoder/worktree-manager.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAiB5B,MAAM,OAAO,eAAe;IACN;IAApB,YAAoB,WAAmB,OAAO,CAAC,GAAG,EAAE;QAAhC,aAAQ,GAAR,QAAQ,CAAwB;IAAG,CAAC;IAEhD,GAAG,CAAC,IAAY;QACtB,OAAO,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE;YAC7B,GAAG,EAAE,IAAI,CAAC,QAAQ;YAClB,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAED,SAAS;QACP,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,cAAc,CAAC,MAAc;QACnC,MAAM,SAAS,GAAmB,EAAE,CAAC;QACrC,IAAI,OAAO,GAA0B,EAAE,CAAC;QAExC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBACjC,IAAI,OAAO,CAAC,IAAI;oBAAE,SAAS,CAAC,IAAI,CAAC,OAAuB,CAAC,CAAC;gBAC1D,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;YACjD,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC/B,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;iBAAM,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;YACtB,CAAC;iBAAM,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,IAAI;YAAE,SAAS,CAAC,IAAI,CAAC,OAAuB,CAAC,CAAC;QAC1D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,OAA8B;QACnC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,MAAM,GACV,OAAO,CAAC,IAAI;YACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QAE9E,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,UAAU,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,eAAe,SAAS,KAAK,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,KAAK,GAAG,KAAK;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,KAAK,IAAI,GAAG,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACpC,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,WAAW,CAAC,YAAoB;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC;QAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAClC,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAiB;IAClD,OAAO,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;AACvC,CAAC"}

package/dist/team/index.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Team Collaboration Module — Barrel Export
+ *
+ * Combines the base collaboration system with hardened extensions:
+ * - RBAC permission system
+ * - Structured audit logging with hash-chain integrity
+ * - Session token management with expiry & refresh
+ */
+export { TeamCollaborationSystem, createTeamCollaborationSystem } from "./team-collaboration.js";
+export type { User, TeamSession, CollaborationActivity, SharedRepository, Team, } from "./team-collaboration.js";
+export { RBACManager, getDefaultRBAC, PermissionDeniedError } from "./team-rbac.js";
+export type { Permission, BuiltInRole, RoleDefinition, } from "./team-rbac.js";
+export { AuditLogger, createAuditLogger } from "./team-audit.js";
+export type { AuditAction, AuditSeverity, AuditLogEntry, AuditLogQuery, AuditLogStats, AuditExportFormat, } from "./team-audit.js";
+export { SessionManager, createSessionManager } from "./team-session-manager.js";
+export type { SessionToken, TokenValidationResult, SessionManagerConfig, } from "./team-session-manager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/team/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/team/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACjG,YAAY,EACV,IAAI,EACJ,WAAW,EACX,qBAAqB,EACrB,gBAAgB,EAChB,IAAI,GACL,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACpF,YAAY,EACV,UAAU,EACV,WAAW,EACX,cAAc,GACf,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACjE,YAAY,EACV,WAAW,EACX,aAAa,EACb,aAAa,EACb,aAAa,EACb,aAAa,EACb,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjF,YAAY,EACV,YAAY,EACZ,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,2BAA2B,CAAC"}

package/dist/team/index.js

@@ -0,0 +1,13 @@
+/**
+ * Team Collaboration Module — Barrel Export
+ *
+ * Combines the base collaboration system with hardened extensions:
+ * - RBAC permission system
+ * - Structured audit logging with hash-chain integrity
+ * - Session token management with expiry & refresh
+ */
+export { TeamCollaborationSystem, createTeamCollaborationSystem } from "./team-collaboration.js";
+export { RBACManager, getDefaultRBAC, PermissionDeniedError } from "./team-rbac.js";
+export { AuditLogger, createAuditLogger } from "./team-audit.js";
+export { SessionManager, createSessionManager } from "./team-session-manager.js";
+//# sourceMappingURL=index.js.map

package/dist/team/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/team/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AASjG,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAOpF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAUjE,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/team/team-audit.d.ts

@@ -0,0 +1,120 @@
+/**
+ * Team Collaboration — Structured Audit Log
+ *
+ * Immutable audit trail for all team operations.
+ * Entries are append-only with hash chaining for integrity verification.
+ * Supports filtering, pagination, rotation, and export.
+ *
+ * @see team-collaboration.ts for the base collaboration system
+ */
+export type AuditAction = "user.created" | "user.updated" | "user.deleted" | "user.login" | "user.logout" | "session.created" | "session.updated" | "session.deleted" | "session.joined" | "session.left" | "session.locked" | "session.unlocked" | "repository.created" | "repository.updated" | "repository.deleted" | "repository.item_added" | "repository.item_removed" | "repository.shared" | "team.created" | "team.updated" | "team.deleted" | "team.member_added" | "team.member_removed" | "team.role_changed" | "permission.denied" | "config.changed" | "system.startup" | "system.shutdown";
+/** Severity level for audit event classification. */
+export type AuditSeverity = "info" | "warning" | "error" | "critical";
+export interface AuditLogEntry {
+    /** Unique entry ID (uuid v4). */
+    id: string;
+    /** Unix timestamp (ms) of the event. */
+    timestamp: number;
+    /** The user who performed the action. */
+    actorId: string;
+    /** The action performed. */
+    action: AuditAction;
+    /** Severity level. */
+    severity: AuditSeverity;
+    /** Type of resource affected. */
+    resourceType: string;
+    /** ID of the resource affected. */
+    resourceId: string;
+    /** Human-readable description. */
+    description: string;
+    /** Arbitrary structured payload. */
+    details: Record<string, unknown>;
+    /** SHA-256 hash of the previous entry (chain integrity). */
+    previousHash: string;
+    /** SHA-256 hash of this entry's content. */
+    hash: string;
+    /** Whether this entry can be compacted (true = compactable). */
+    compactable: boolean;
+}
+export interface AuditLogQuery {
+    actorId?: string;
+    action?: AuditAction;
+    resourceType?: string;
+    resourceId?: string;
+    severity?: AuditSeverity;
+    startTime?: number;
+    endTime?: number;
+    limit?: number;
+    offset?: number;
+}
+export interface AuditLogStats {
+    totalEntries: number;
+    oldestEntry: number;
+    newestEntry: number;
+    bySeverity: Record<AuditSeverity, number>;
+    byAction: Record<string, number>;
+    diskSizeBytes: number;
+}
+export type AuditExportFormat = "json" | "jsonl" | "csv";
+export declare class AuditLogger {
+    private auditDir;
+    private currentSegment;
+    private entries;
+    private maxSegmentSize;
+    constructor(projectRoot: string, options?: {
+        maxSegmentSize?: number;
+    });
+    private getLatestSegmentFile;
+    private loadCurrentSegment;
+    /**
+     * Append an entry to the audit log.
+     * Returns the created entry for reference.
+     */
+    append(params: {
+        actorId: string;
+        action: AuditAction;
+        severity?: AuditSeverity;
+        resourceType: string;
+        resourceId: string;
+        description: string;
+        details?: Record<string, unknown>;
+        compactable?: boolean;
+    }): AuditLogEntry;
+    private persistEntry;
+    private rotateSegment;
+    /**
+     * Query audit entries with filters and pagination.
+     * Searches across all segment files.
+     */
+    query(query?: AuditLogQuery): AuditLogEntry[];
+    /**
+     * Get the most recent entries (convenience).
+     */
+    recent(limit?: number): AuditLogEntry[];
+    /**
+     * Get entries for a specific actor (convenience).
+     */
+    forActor(actorId: string, limit?: number): AuditLogEntry[];
+    getStats(): AuditLogStats;
+    /**
+     * Verify hash chain integrity across all segments.
+     * Returns list of corrupted entries (empty = all good).
+     */
+    verifyIntegrity(): Array<{
+        id: string;
+        reason: string;
+    }>;
+    /**
+     * Compact old, compactable entries into a summary.
+     * This reduces disk usage for low-value informational entries.
+     * Returns count of removed entries.
+     */
+    compact(beforeTimestamp: number): number;
+    /**
+     * Export audit log to a file.
+     */
+    exportAudit(format: AuditExportFormat, outputPath?: string): string;
+    private loadAllEntries;
+}
+export declare function createAuditLogger(projectRoot: string): AuditLogger;
+//# sourceMappingURL=team-audit.d.ts.map

package/dist/team/team-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-audit.d.ts","sourceRoot":"","sources":["../../src/team/team-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,MAAM,MAAM,WAAW,GACnB,cAAc,GACd,cAAc,GACd,cAAc,GACd,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,uBAAuB,GACvB,yBAAyB,GACzB,mBAAmB,GACnB,cAAc,GACd,cAAc,GACd,cAAc,GACd,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,mBAAmB,GACnB,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,CAAC;AAEtB,qDAAqD;AACrD,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,UAAU,CAAC;AAEtE,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,WAAW,CAAC;IACpB,sBAAsB;IACtB,QAAQ,EAAE,aAAa,CAAC;IACxB,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,WAAW,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IAC1C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC;AAoCzD,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,cAAc,CAAS;IAC/B,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,cAAc,CAAS;gBAG7B,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;IAevC,OAAO,CAAC,oBAAoB;IA2B5B,OAAO,CAAC,kBAAkB;IAgB1B;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,WAAW,CAAC;QACpB,QAAQ,CAAC,EAAE,aAAa,CAAC;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB,GAAG,aAAa;IAkCjB,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,aAAa;IAQrB;;;OAGG;IACH,KAAK,CAAC,KAAK,GAAE,aAAkB,GAAG,aAAa,EAAE;IA4CjD;;OAEG;IACH,MAAM,CAAC,KAAK,SAAK,GAAG,aAAa,EAAE;IAInC;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,SAAK,GAAG,aAAa,EAAE;IAMtD,QAAQ,IAAI,aAAa;IAwCzB;;;OAGG;IACH,eAAe,IAAI,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IAkCxD;;;;OAIG;IACH,OAAO,CAAC,eAAe,EAAE,MAAM,GAAG,MAAM;IAgCxC;;OAEG;IACH,WAAW,CAAC,MAAM,EAAE,iBAAiB,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM;IAyCnE,OAAO,CAAC,cAAc;CAuBvB;AAMD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,CAElE"}

package/dist/team/team-audit.js

@@ -0,0 +1,357 @@
+/**
+ * Team Collaboration — Structured Audit Log
+ *
+ * Immutable audit trail for all team operations.
+ * Entries are append-only with hash chaining for integrity verification.
+ * Supports filtering, pagination, rotation, and export.
+ *
+ * @see team-collaboration.ts for the base collaboration system
+ */
+import { v4 as uuidv4 } from "uuid";
+import { writeFileSync, readFileSync, existsSync, mkdirSync, readdirSync, } from "fs";
+import { join } from "path";
+import { createHash } from "crypto";
+// ========================================================================
+// Hash Chain Utilities
+// ========================================================================
+function hashEntry(entry) {
+    const { hash: _hash, ...rest } = entry;
+    const canonical = JSON.stringify(rest, Object.keys(rest).sort());
+    return createHash("sha256").update(canonical).digest("hex");
+}
+function computePreviousHash(entriesDir, segmentFile) {
+    // Look at the last entry in the current segment
+    const segmentPath = join(entriesDir, segmentFile);
+    if (!existsSync(segmentPath))
+        return "0".repeat(64);
+    try {
+        const content = readFileSync(segmentPath, "utf-8").trim();
+        if (!content)
+            return "0".repeat(64);
+        const lines = content.split("\n").filter(Boolean);
+        if (lines.length === 0)
+            return "0".repeat(64);
+        const lastEntry = JSON.parse(lines[lines.length - 1]);
+        return lastEntry.hash;
+    }
+    catch {
+        return "0".repeat(64);
+    }
+}
+// ========================================================================
+// Audit Logger
+// ========================================================================
+export class AuditLogger {
+    auditDir;
+    currentSegment;
+    entries = [];
+    maxSegmentSize;
+    constructor(projectRoot, options) {
+        this.auditDir = join(projectRoot, ".synapsexcoder", "team", "audit");
+        this.maxSegmentSize = options?.maxSegmentSize ?? 10_000;
+        // Ensure directory exists
+        if (!existsSync(this.auditDir)) {
+            mkdirSync(this.auditDir, { recursive: true });
+        }
+        // Create or load current segment
+        this.currentSegment = this.getLatestSegmentFile();
+        this.loadCurrentSegment();
+    }
+    getLatestSegmentFile() {
+        const files = readdirSync(this.auditDir)
+            .filter((f) => f.startsWith("audit-") && f.endsWith(".jsonl"))
+            .sort()
+            .reverse();
+        const now = new Date();
+        const dateStr = `${now.getUTCFullYear()}-${String(now.getUTCMonth() + 1).padStart(2, "0")}-` +
+            `${String(now.getUTCDate()).padStart(2, "0")}`;
+        if (files.length > 0) {
+            const latest = files[0];
+            // If latest segment is from today and under size limit, reuse it
+            const segDate = latest.replace("audit-", "").replace(".jsonl", "");
+            if (segDate === dateStr)
+                return latest;
+        }
+        // Create new segment
+        const newFile = `audit-${dateStr}.jsonl`;
+        const newPath = join(this.auditDir, newFile);
+        if (!existsSync(newPath)) {
+            writeFileSync(newPath, "", "utf-8");
+        }
+        return newFile;
+    }
+    loadCurrentSegment() {
+        const segPath = join(this.auditDir, this.currentSegment);
+        if (!existsSync(segPath))
+            return;
+        try {
+            const content = readFileSync(segPath, "utf-8").trim();
+            if (!content)
+                return;
+            this.entries = content
+                .split("\n")
+                .filter(Boolean)
+                .map((line) => JSON.parse(line));
+        }
+        catch {
+            this.entries = [];
+        }
+    }
+    /**
+     * Append an entry to the audit log.
+     * Returns the created entry for reference.
+     */
+    append(params) {
+        const previousHash = this.entries.length > 0
+            ? this.entries[this.entries.length - 1].hash
+            : computePreviousHash(this.auditDir, this.currentSegment);
+        const entryBase = {
+            id: uuidv4(),
+            timestamp: Date.now(),
+            actorId: params.actorId,
+            action: params.action,
+            severity: params.severity ?? "info",
+            resourceType: params.resourceType,
+            resourceId: params.resourceId,
+            description: params.description,
+            details: params.details ?? {},
+            previousHash,
+            hash: "", // computed below
+            compactable: params.compactable ?? false,
+        };
+        entryBase.hash = hashEntry(entryBase);
+        const entry = entryBase;
+        this.entries.push(entry);
+        this.persistEntry(entry);
+        // Roll to new segment if current is full
+        if (this.entries.length >= this.maxSegmentSize) {
+            this.rotateSegment();
+        }
+        return entry;
+    }
+    persistEntry(entry) {
+        const segPath = join(this.auditDir, this.currentSegment);
+        const line = JSON.stringify(entry) + "\n";
+        try {
+            writeFileSync(segPath, line, { flag: "a" });
+        }
+        catch (error) {
+            console.warn("Audit: failed to persist entry:", error);
+        }
+    }
+    rotateSegment() {
+        this.currentSegment = this.getLatestSegmentFile();
+        this.entries = [];
+        this.loadCurrentSegment();
+    }
+    // ── Querying ───────────────────────────────────────────────────────
+    /**
+     * Query audit entries with filters and pagination.
+     * Searches across all segment files.
+     */
+    query(query = {}) {
+        const allEntries = this.loadAllEntries();
+        const { actorId, action, resourceType, resourceId, severity, startTime, endTime, limit = 100, offset = 0, } = query;
+        let filtered = allEntries;
+        if (actorId) {
+            filtered = filtered.filter((e) => e.actorId === actorId);
+        }
+        if (action) {
+            filtered = filtered.filter((e) => e.action === action);
+        }
+        if (resourceType) {
+            filtered = filtered.filter((e) => e.resourceType === resourceType);
+        }
+        if (resourceId) {
+            filtered = filtered.filter((e) => e.resourceId === resourceId);
+        }
+        if (severity) {
+            filtered = filtered.filter((e) => e.severity === severity);
+        }
+        if (startTime) {
+            filtered = filtered.filter((e) => e.timestamp >= startTime);
+        }
+        if (endTime) {
+            filtered = filtered.filter((e) => e.timestamp <= endTime);
+        }
+        // Most recent first
+        filtered.sort((a, b) => b.timestamp - a.timestamp);
+        return filtered.slice(offset, offset + limit);
+    }
+    /**
+     * Get the most recent entries (convenience).
+     */
+    recent(limit = 50) {
+        return this.query({ limit });
+    }
+    /**
+     * Get entries for a specific actor (convenience).
+     */
+    forActor(actorId, limit = 50) {
+        return this.query({ actorId, limit });
+    }
+    // ── Statistics ─────────────────────────────────────────────────────
+    getStats() {
+        const allEntries = this.loadAllEntries();
+        const bySeverity = {
+            info: 0, warning: 0, error: 0, critical: 0,
+        };
+        const byAction = {};
+        for (const entry of allEntries) {
+            bySeverity[entry.severity]++;
+            byAction[entry.action] = (byAction[entry.action] ?? 0) + 1;
+        }
+        const timestamps = allEntries.map((e) => e.timestamp);
+        let diskSizeBytes = 0;
+        try {
+            const files = readdirSync(this.auditDir);
+            for (const file of files) {
+                if (file.startsWith("audit-")) {
+                    const stat = existsSync(join(this.auditDir, file))
+                        ? readFileSync(join(this.auditDir, file)).length
+                        : 0;
+                    diskSizeBytes += stat;
+                }
+            }
+        }
+        catch { /* best effort */ }
+        return {
+            totalEntries: allEntries.length,
+            oldestEntry: timestamps.length > 0 ? Math.min(...timestamps) : 0,
+            newestEntry: timestamps.length > 0 ? Math.max(...timestamps) : 0,
+            bySeverity,
+            byAction,
+            diskSizeBytes,
+        };
+    }
+    // ── Integrity ──────────────────────────────────────────────────────
+    /**
+     * Verify hash chain integrity across all segments.
+     * Returns list of corrupted entries (empty = all good).
+     */
+    verifyIntegrity() {
+        const allEntries = this.loadAllEntries();
+        const corrupted = [];
+        for (let i = 0; i < allEntries.length; i++) {
+            const entry = allEntries[i];
+            // Verify the hash of this entry
+            const { hash, ...rest } = entry;
+            const computed = hashEntry(rest);
+            if (computed !== entry.hash) {
+                corrupted.push({
+                    id: entry.id,
+                    reason: `Hash mismatch: expected ${entry.hash}, computed ${computed}`,
+                });
+            }
+            // Verify chain link (skip genesis)
+            if (i > 0) {
+                const prev = allEntries[i - 1];
+                if (entry.previousHash !== prev.hash) {
+                    corrupted.push({
+                        id: entry.id,
+                        reason: `Chain break: expected previous ${prev.hash}, got ${entry.previousHash}`,
+                    });
+                }
+            }
+        }
+        return corrupted;
+    }
+    // ── Maintenance ────────────────────────────────────────────────────
+    /**
+     * Compact old, compactable entries into a summary.
+     * This reduces disk usage for low-value informational entries.
+     * Returns count of removed entries.
+     */
+    compact(beforeTimestamp) {
+        let removed = 0;
+        const files = readdirSync(this.auditDir)
+            .filter((f) => f.startsWith("audit-") && f.endsWith(".jsonl"))
+            .sort();
+        for (const file of files) {
+            const filePath = join(this.auditDir, file);
+            try {
+                const content = readFileSync(filePath, "utf-8");
+                const lines = content.split("\n").filter(Boolean);
+                const kept = [];
+                for (const line of lines) {
+                    const entry = JSON.parse(line);
+                    if (entry.compactable && entry.timestamp < beforeTimestamp) {
+                        removed++;
+                    }
+                    else {
+                        kept.push(line);
+                    }
+                }
+                writeFileSync(filePath, kept.join("\n") + (kept.length > 0 ? "\n" : ""), "utf-8");
+            }
+            catch {
+                // Skip unreadable files
+            }
+        }
+        return removed;
+    }
+    /**
+     * Export audit log to a file.
+     */
+    exportAudit(format, outputPath) {
+        const allEntries = this.loadAllEntries();
+        const outPath = outputPath ?? join(this.auditDir, `export-${Date.now()}`);
+        let content = "";
+        switch (format) {
+            case "json":
+                content = JSON.stringify(allEntries, null, 2);
+                break;
+            case "jsonl":
+                content = allEntries.map((e) => JSON.stringify(e)).join("\n") + "\n";
+                break;
+            case "csv": {
+                const headers = [
+                    "id", "timestamp", "actorId", "action", "severity",
+                    "resourceType", "resourceId", "description", "previousHash", "hash",
+                ];
+                const rows = allEntries.map((e) => headers.map((h) => {
+                    const val = e[h];
+                    return typeof val === "string" ? `"${val.replace(/"/g, '""')}"` : String(val ?? "");
+                }).join(","));
+                content = [headers.join(","), ...rows].join("\n") + "\n";
+                break;
+            }
+        }
+        const ext = format === "csv" ? "csv" : "jsonl";
+        const finalPath = outPath.endsWith(`.${ext}`) ? outPath : `${outPath}.${ext}`;
+        if (!outputPath) {
+            writeFileSync(finalPath, content, "utf-8");
+        }
+        return finalPath;
+    }
+    // ── Internal ───────────────────────────────────────────────────────
+    loadAllEntries() {
+        const files = readdirSync(this.auditDir)
+            .filter((f) => f.startsWith("audit-") && f.endsWith(".jsonl"))
+            .sort();
+        const all = [];
+        for (const file of files) {
+            try {
+                const content = readFileSync(join(this.auditDir, file), "utf-8").trim();
+                if (!content)
+                    continue;
+                const entries = content
+                    .split("\n")
+                    .filter(Boolean)
+                    .map((line) => JSON.parse(line));
+                all.push(...entries);
+            }
+            catch {
+                // Skip corrupt segments
+            }
+        }
+        return all;
+    }
+}
+// ========================================================================
+// Factory
+// ========================================================================
+export function createAuditLogger(projectRoot) {
+    return new AuditLogger(projectRoot);
+}
+//# sourceMappingURL=team-audit.js.map