Agent Police Department v1.0.0 MVP

lib/audit.js

@@ -0,0 +1,115 @@
+// lib/audit.js — Tamper-evident audit log storage
+
+import { hashChain, hashEvent } from './hash.js';
+
+const MAX_EVENTS = 1000;
+const MAX_VIOLATIONS = 500;
+
+export async function addEvent(event) {
+  const { auditLog = [] } = await chrome.storage.local.get(['auditLog']);
+  auditLog.push(event);
+  if (auditLog.length > MAX_EVENTS) {
+    auditLog.splice(0, auditLog.length - MAX_EVENTS);
+  }
+  await chrome.storage.local.set({ auditLog });
+}
+
+export async function addViolation(violation) {
+  const { violations = [] } = await chrome.storage.local.get(['violations']);
+  violations.push(violation);
+  if (violations.length > MAX_VIOLATIONS) {
+    violations.splice(0, violations.length - MAX_VIOLATIONS);
+  }
+  await chrome.storage.local.set({ violations });
+}
+
+export async function getAuditLog(limit = 100) {
+  const { auditLog = [] } = await chrome.storage.local.get(['auditLog']);
+  return auditLog.slice(-limit).reverse();
+}
+
+export async function getViolations(limit = 100) {
+  const { violations = [] } = await chrome.storage.local.get(['violations']);
+  return violations.slice(-limit).reverse();
+}
+
+export async function getStats() {
+  const { auditLog = [], violations = [], activeAgents = {} } = await chrome.storage.local.get([
+    'auditLog', 'violations', 'activeAgents'
+  ]);
+
+  const totalEvents = auditLog.length;
+  const totalViolations = violations.length;
+  const activeCount = Object.keys(activeAgents).length;
+
+  const severityCounts = { info: 0, low: 0, medium: 0, high: 0, critical: 0 };
+  for (const v of violations) {
+    severityCounts[v.severity] = (severityCounts[v.severity] || 0) + 1;
+  }
+
+  const last24h = Date.now() - 24 * 60 * 60 * 1000;
+  const recentEvents = auditLog.filter(e => new Date(e.timestamp).getTime() > last24h).length;
+  const recentViolations = violations.filter(v => new Date(v.timestamp).getTime() > last24h).length;
+
+  const detectorCounts = {};
+  for (const v of violations) {
+    detectorCounts[v.detector] = (detectorCounts[v.detector] || 0) + 1;
+  }
+
+  const riskScore = Math.min(100, Math.round(
+    (severityCounts.critical * 25) +
+    (severityCounts.high * 10) +
+    (severityCounts.medium * 5) +
+    (severityCounts.low * 1) +
+    (totalEvents > 0 ? (totalViolations / totalEvents) * 20 : 0)
+  ));
+
+  const complianceStatus = riskScore < 20 ? 'compliant' : riskScore < 50 ? 'at-risk' : 'non-compliant';
+
+  return {
+    totalEvents,
+    totalViolations,
+    activeCount,
+    severityCounts,
+    recentEvents,
+    recentViolations,
+    detectorCounts,
+    riskScore,
+    complianceStatus,
+    lastUpdated: new Date().toISOString()
+  };
+}
+
+export async function exportAuditLog() {
+  const { auditLog = [], violations = [] } = await chrome.storage.local.get(['auditLog', 'violations']);
+  return {
+    exportDate: new Date().toISOString(),
+    totalEvents: auditLog.length,
+    totalViolations: violations.length,
+    events: auditLog,
+    violations: violations,
+    integrity: hashChain(auditLog)
+  };
+}
+
+export async function searchAuditLog(query) {
+  const { auditLog = [] } = await chrome.storage.local.get(['auditLog']);
+  const q = query.toLowerCase();
+  return auditLog.filter(e =>
+    (e.agent || '').toLowerCase().includes(q) ||
+    (e.type || '').toLowerCase().includes(q) ||
+    (e.tool || '').toLowerCase().includes(q) ||
+    (e.target || '').toLowerCase().includes(q) ||
+    (e.url || '').toLowerCase().includes(q)
+  ).reverse().slice(0, 100);
+}
+
+export async function verifyIntegrity() {
+  const { auditLog = [] } = await chrome.storage.local.get(['auditLog']);
+  if (auditLog.length === 0) return { valid: true, eventsChecked: 0 };
+  const expected = hashChain(auditLog);
+  const stored = (await chrome.storage.local.get(['auditChainHash'])).auditChainHash;
+  const valid = stored === expected;
+  await chrome.storage.local.set({ auditChainHash: expected });
+  return { valid, eventsChecked: auditLog.length, expected };
+}