@agentlensai/server 0.10.0 → 0.13.0

package/dist/lib/optimization/engine.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/lib/optimization/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAczD,MAAM,OAAO,kBAAkB;IAEV;IADnB,YACmB,aAAyB,mBAAmB;QAA5C,eAAU,GAAV,UAAU,CAAkC;IAC5D,CAAC;IAEJ,KAAK,CAAC,kBAAkB,CACtB,KAAkB,EAClB,OAIC;QAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE3C,qBAAqB;QACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAE7B,0CAA0C;QAC1C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACzC,SAAS,EAAE,UAAU;YACrB,OAAO;YACP,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;QAErC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,eAAe,EAAE,EAAE;gBACnB,qBAAqB,EAAE,CAAC;gBACxB,MAAM;gBACN,aAAa,EAAE,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YAC7C,SAAS,EAAE,cAAc;YACzB,OAAO;YACP,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAsC,CAAC;YAC3D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;QAEjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAkC,CAAC;YACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;YAClC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAEhC,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,MAAM,eAAe,GAAG,aAAa,EAAE,OAAkD,CAAC;YAE1F,wEAAwE;YACxE,IAAI,CAAC,aAAa;gBAAE,SAAS;YAE7B,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAElE,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG;oBACN,KAAK;oBACL,IAAI;oBACJ,SAAS,EAAE,CAAC;oBACZ,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC;oBACZ,gBAAgB,EAAE,CAAC;oBACnB,iBAAiB,EAAE,CAAC;oBACpB,QAAQ,EAAE,IAAI,GAAG,EAAE;iBACpB,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YAED,KAAK,CAAC,SAAS,EAAE,CAAC;YAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEtC,iDAAiD;YACjD,MAAM,OAAO,GAAG,eAAe,EAAE,YAAY,KAAK,OAAO,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,CAAC;YAED,wCAAwC;YACxC,MAAM,IAAI,GAAG,eAAe,EAAE,OAAO,IAAI,CAAC,CAAC;YAC3C,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;YAExB,oBAAoB;YACpB,MAAM,WAAW,GAAG,eAAe,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,eAAe,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;YAC/D,KAAK,CAAC,gBAAgB,IAAI,WAAW,CAAC;YACtC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC;QAC1C,CAAC;QAED,mDAAmD;QACnD,MAAM,eAAe,GAAyB,EAAE,CAAC;QAEjD,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1F,yCAAyC;YACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,gBAAgB,KAAK,IAAI;gBAAE,SAAS;YAExC,wDAAwD;YACxD,KAAK,MAAM,CAAC,EAAE,cAAc,CAAC,IAAI,MAAM,EAAE,CAAC;gBACxC,IAAI,cAAc,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;oBAAE,SAAS;gBACnD,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBAEjD,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBAChE,IAAI,iBAAiB,KAAK,IAAI;oBAAE,SAAS;gBAEzC,kBAAkB;gBAClB,IAAI,iBAAiB,IAAI,gBAAgB;oBAAE,SAAS;gBAEpD,8BAA8B;gBAC9B,MAAM,oBAAoB,GACxB,cAAc,CAAC,SAAS,GAAG,CAAC;oBAC1B,CAAC,CAAC,cAAc,CAAC,YAAY,GAAG,cAAc,CAAC,SAAS;oBACxD,CAAC,CAAC,CAAC,CAAC;gBACR,IAAI,oBAAoB,GAAG,IAAI;oBAAE,SAAS;gBAE1C,MAAM,sBAAsB,GAC1B,cAAc,CAAC,SAAS,GAAG,CAAC;oBAC1B,CAAC,CAAC,cAAc,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS;oBACrD,CAAC,CAAC,CAAC,CAAC;gBAER,MAAM,cAAc,GAClB,CAAC,kBAAkB,GAAG,sBAAsB,CAAC,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;gBAElF,IAAI,cAAc,IAAI,CAAC;oBAAE,SAAS;gBAElC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAE7D,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAE3D,eAAe,CAAC,IAAI,CAAC;oBACnB,YAAY,EAAE,KAAK,CAAC,KAAK;oBACzB,gBAAgB,EAAE,cAAc,CAAC,KAAK;oBACtC,cAAc,EAAE,KAAK,CAAC,IAAI;oBAC1B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,CAAC;oBACjD,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,CAAC;oBACzD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC;oBACzC,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,CAAC;oBACjD,sBAAsB,EAAE,SAAS,CAAC,oBAAoB,CAAC;oBACvD,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAEpF,OAAO;YACL,eAAe,EAAE,OAAO;YACxB,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,CAAC;YACvD,MAAM;YACN,aAAa,EAAE,UAAU,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,KAAqB;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,SAAS,EAAE,CAAC;YACd,kEAAkE;YAClE,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACrE,IAAI,WAAW,GAAG,IAAI,CAAC,CAAC,qCAAqC;YAC7D,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC;gBACnD,YAAY,GAAG,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACvD,CAAC;YACD,OAAO,SAAS,CAAC,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC;QACzE,CAAC;QAED,2CAA2C;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACrE,IAAI,WAAW,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC3C,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,SAAS,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,UAAkB;QAC5C,IAAI,UAAU,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QACpC,IAAI,UAAU,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;AAC7C,CAAC"}
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/lib/optimization/engine.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACzE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,4DAA4D;AAC5D,MAAM,eAAe,GAA6B;IAChD,iBAAiB,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC;IAC3D,eAAe,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IACzD,mBAAmB,EAAE,CAAC,2BAA2B,CAAC;IAClD,iBAAiB,EAAE,CAAC,2BAA2B,EAAE,kBAAkB,CAAC;IACpE,QAAQ,EAAE,CAAC,aAAa,CAAC;IACzB,SAAS,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;IAC3C,cAAc,EAAE,CAAC,cAAc,CAAC;CACjC,CAAC;AAEF,sEAAsE;AACtE,MAAM,eAAe,GAAG,EAAE,CAAC;AAc3B,MAAM,OAAO,kBAAkB;IAEV;IADnB,YACmB,aAAyB,mBAAmB;QAA5C,eAAU,GAAV,UAAU,CAAkC;IAC5D,CAAC;IAEJ,KAAK,CAAC,kBAAkB,CACtB,KAAkB,EAClB,OAIC;QAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAE3C,qBAAqB;QACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAE7B,0CAA0C;QAC1C,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YACzC,SAAS,EAAE,UAAU;YACrB,OAAO;YACP,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC;QAErC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO;gBACL,eAAe,EAAE,EAAE;gBACnB,qBAAqB,EAAE,CAAC;gBACxB,MAAM;gBACN,aAAa,EAAE,CAAC;aACjB,CAAC;QACJ,CAAC;QAED,2CAA2C;QAC3C,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC;YAC7C,SAAS,EAAE,cAAc;YACzB,OAAO;YACP,IAAI;YACJ,EAAE;YACF,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,kCAAkC;QAClC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA0B,CAAC;QACtD,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,GAAG,CAAC,OAAsC,CAAC;YAC3D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;QAEjD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAkC,CAAC;YACjE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;YAClC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;YAEhC,IAAI,CAAC,KAAK;gBAAE,SAAS;YAErB,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACtE,MAAM,eAAe,GAAG,aAAa,EAAE,OAAkD,CAAC;YAE1F,wEAAwE;YACxE,IAAI,CAAC,aAAa;gBAAE,SAAS;YAE7B,MAAM,EAAE,IAAI,EAAE,GAAG,sBAAsB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAElE,MAAM,QAAQ,GAAG,GAAG,KAAK,KAAK,IAAI,EAAE,CAAC;YACrC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,GAAG;oBACN,KAAK;oBACL,IAAI;oBACJ,SAAS,EAAE,CAAC;oBACZ,YAAY,EAAE,CAAC;oBACf,SAAS,EAAE,CAAC;oBACZ,gBAAgB,EAAE,CAAC;oBACnB,iBAAiB,EAAE,CAAC;oBACpB,QAAQ,EAAE,IAAI,GAAG,EAAE;iBACpB,CAAC;gBACF,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;YAED,KAAK,CAAC,SAAS,EAAE,CAAC;YAClB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAEtC,iDAAiD;YACjD,MAAM,OAAO,GAAG,eAAe,EAAE,YAAY,KAAK,OAAO,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,CAAC;YAED,wCAAwC;YACxC,MAAM,IAAI,GAAG,eAAe,EAAE,OAAO,IAAI,CAAC,CAAC;YAC3C,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;YAExB,oBAAoB;YACpB,MAAM,WAAW,GAAG,eAAe,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC;YAC7D,MAAM,YAAY,GAAG,eAAe,EAAE,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC;YAC/D,KAAK,CAAC,gBAAgB,IAAI,WAAW,CAAC;YACtC,KAAK,CAAC,iBAAiB,IAAI,YAAY,CAAC;QAC1C,CAAC;QAED,mDAAmD;QACnD,MAAM,eAAe,GAAyB,EAAE,CAAC;QAEjD,KAAK,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,0CAA0C;YAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAEtC,oDAAoD;YACpD,IAAI,KAAK,CAAC,SAAS,GAAG,eAAe;gBAAE,SAAS;YAEhD,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAE1F,yCAAyC;YACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,gBAAgB,KAAK,IAAI;gBAAE,SAAS;YAExC,+CAA+C;YAC/C,MAAM,cAAc,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,cAAc,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAE7D,wDAAwD;YACxD,KAAK,MAAM,CAAC,EAAE,cAAc,CAAC,IAAI,MAAM,EAAE,CAAC;gBACxC,IAAI,cAAc,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;oBAAE,SAAS;gBACnD,IAAI,cAAc,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;oBAAE,SAAS;gBAEjD,gDAAgD;gBAChD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,CAAC;oBAAE,SAAS;gBAE7D,6DAA6D;gBAC7D,IAAI,cAAc,CAAC,SAAS,GAAG,eAAe;oBAAE,SAAS;gBAEzD,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBAChE,IAAI,iBAAiB,KAAK,IAAI;oBAAE,SAAS;gBAEzC,kBAAkB;gBAClB,IAAI,iBAAiB,IAAI,gBAAgB;oBAAE,SAAS;gBAEpD,8BAA8B;gBAC9B,MAAM,oBAAoB,GACxB,cAAc,CAAC,SAAS,GAAG,CAAC;oBAC1B,CAAC,CAAC,cAAc,CAAC,YAAY,GAAG,cAAc,CAAC,SAAS;oBACxD,CAAC,CAAC,CAAC,CAAC;gBACR,IAAI,oBAAoB,GAAG,IAAI;oBAAE,SAAS;gBAE1C,MAAM,sBAAsB,GAC1B,cAAc,CAAC,SAAS,GAAG,CAAC;oBAC1B,CAAC,CAAC,cAAc,CAAC,SAAS,GAAG,cAAc,CAAC,SAAS;oBACrD,CAAC,CAAC,CAAC,CAAC;gBAER,6CAA6C;gBAC7C,IAAI,cAAsB,CAAC;gBAC3B,IAAI,UAA2B,CAAC;gBAChC,MAAM,gBAAgB,GAAG,CAAC,kBAAkB,GAAG,sBAAsB,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;gBAEzF,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBACf,wEAAwE;oBACxE,cAAc,GAAG,gBAAgB,CAAC;oBAClC,UAAU,GAAG,KAAK,CAAC;gBACrB,CAAC;qBAAM,CAAC;oBACN,cAAc,GAAG,gBAAgB,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;oBAClD,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACzD,CAAC;gBAED,IAAI,cAAc,IAAI,CAAC;oBAAE,SAAS;gBAElC,+CAA+C;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAE3D,eAAe,CAAC,IAAI,CAAC;oBACnB,YAAY,EAAE,KAAK,CAAC,KAAK;oBACzB,gBAAgB,EAAE,cAAc,CAAC,KAAK;oBACtC,cAAc,EAAE,KAAK,CAAC,IAAI;oBAC1B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,CAAC;oBACjD,sBAAsB,EAAE,SAAS,CAAC,sBAAsB,CAAC;oBACzD,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC;oBACzC,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,kBAAkB,EAAE,SAAS,CAAC,kBAAkB,CAAC;oBACjD,sBAAsB,EAAE,SAAS,CAAC,oBAAoB,CAAC;oBACvD,UAAU;oBACV,OAAO;iBACR,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,6CAA6C;QAC7C,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAEhD,MAAM,qBAAqB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;QAEpF,OAAO;YACL,eAAe,EAAE,OAAO;YACxB,qBAAqB,EAAE,SAAS,CAAC,qBAAqB,CAAC;YACvD,MAAM;YACN,aAAa,EAAE,UAAU,CAAC,MAAM;SACjC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,gBAAgB,CAAC,KAAqB;QAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChE,IAAI,SAAS,EAAE,CAAC;YACd,kEAAkE;YAClE,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACrE,IAAI,WAAW,GAAG,IAAI,CAAC,CAAC,qCAAqC;YAC7D,IAAI,YAAY,GAAG,IAAI,CAAC;YACxB,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;gBACpB,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,WAAW,CAAC;gBACnD,YAAY,GAAG,KAAK,CAAC,iBAAiB,GAAG,WAAW,CAAC;YACvD,CAAC;YACD,OAAO,SAAS,CAAC,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC,MAAM,GAAG,YAAY,CAAC;QACzE,CAAC;QAED,2CAA2C;QAC3C,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,GAAG,KAAK,CAAC,iBAAiB,CAAC;QACrE,IAAI,WAAW,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YAC3C,gDAAgD;YAChD,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,SAAS,CAAC;QACrD,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,mBAAmB,CAAC,UAAkB;QAC5C,IAAI,UAAU,GAAG,GAAG;YAAE,OAAO,MAAM,CAAC;QACpC,IAAI,UAAU,IAAI,EAAE;YAAE,OAAO,QAAQ,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;AACnD,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC;AAC7C,CAAC"}

package/dist/lib/optimization/forecast.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Cost Forecaster (Feature 17 — Story 17.5)
+ *
+ * Projects daily costs forward using linear regression on historical
+ * cost buckets. Integrates with CostOptimizer for savings projections
+ * and BudgetEngine for burn-rate calculation.
+ */
+import type { IEventStore, CostForecast } from '@agentlensai/core';
+import { CostOptimizer } from './cost-optimizer.js';
+export interface ForecastOptions {
+    agentId?: string;
+    days: number;
+    store: IEventStore;
+    budgetStore?: {
+        listBudgets(tenantId: string): {
+            id: string;
+            limitUsd: number;
+            currentSpend: number;
+        }[];
+    };
+    tenantId?: string;
+}
+/**
+ * Simple linear regression: y = slope * x + intercept
+ */
+declare function linearRegression(points: {
+    x: number;
+    y: number;
+}[]): {
+    slope: number;
+    intercept: number;
+};
+export declare class CostForecaster {
+    private readonly optimizer?;
+    constructor(optimizer?: CostOptimizer | undefined);
+    forecast(opts: ForecastOptions): Promise<CostForecast>;
+}
+export { linearRegression };
+//# sourceMappingURL=forecast.d.ts.map

package/dist/lib/optimization/forecast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forecast.d.ts","sourceRoot":"","sources":["../../../src/lib/optimization/forecast.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EAIb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,WAAW,CAAC,EAAE;QACZ,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KACzF,CAAC;IACF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,iBAAS,gBAAgB,CAAC,MAAM,EAAE;IAAE,CAAC,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAYlG;AAED,qBAAa,cAAc;IACb,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAV,SAAS,CAAC,EAAE,aAAa,YAAA;IAEhD,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC;CAyG7D;AAGD,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/lib/optimization/forecast.js

@@ -0,0 +1,128 @@
+/**
+ * Cost Forecaster (Feature 17 — Story 17.5)
+ *
+ * Projects daily costs forward using linear regression on historical
+ * cost buckets. Integrates with CostOptimizer for savings projections
+ * and BudgetEngine for burn-rate calculation.
+ */
+import { analyzeCosts } from '../analysis/cost-analysis.js';
+import { CostOptimizer } from './cost-optimizer.js';
+/**
+ * Simple linear regression: y = slope * x + intercept
+ */
+function linearRegression(points) {
+    const n = points.length;
+    if (n === 0)
+        return { slope: 0, intercept: 0 };
+    const sumX = points.reduce((s, p) => s + p.x, 0);
+    const sumY = points.reduce((s, p) => s + p.y, 0);
+    const sumXY = points.reduce((s, p) => s + p.x * p.y, 0);
+    const sumX2 = points.reduce((s, p) => s + p.x * p.x, 0);
+    const denom = n * sumX2 - sumX * sumX;
+    if (denom === 0)
+        return { slope: 0, intercept: sumY / n };
+    const slope = (n * sumXY - sumX * sumY) / denom;
+    const intercept = (sumY - slope * sumX) / n;
+    return { slope, intercept };
+}
+export class CostForecaster {
+    optimizer;
+    constructor(optimizer) {
+        this.optimizer = optimizer;
+    }
+    async forecast(opts) {
+        const { agentId, days, store } = opts;
+        // Get historical data (last 30 days)
+        const historyDays = 30;
+        const now = new Date();
+        const from = new Date(now.getTime() - historyDays * 24 * 60 * 60 * 1000).toISOString();
+        const to = now.toISOString();
+        const costResult = await analyzeCosts(store, { agentId, from, to });
+        const buckets = costResult.trend.buckets;
+        // Build regression points from daily buckets
+        const points = buckets.map((bucket, i) => ({
+            x: i,
+            y: bucket.totalCost,
+        }));
+        const { slope, intercept } = linearRegression(points);
+        const lastX = points.length > 0 ? points.length - 1 : 0;
+        // Get potential savings from optimizer
+        let dailySavings = 0;
+        if (this.optimizer) {
+            try {
+                const optResult = await this.optimizer.getRecommendations({
+                    agentId,
+                    period: 14,
+                    limit: 50,
+                });
+                dailySavings = optResult.totalPotentialSavings / 30;
+            }
+            catch {
+                // Optimization unavailable, proceed without
+            }
+        }
+        // Project forward
+        const daily = [];
+        let totalProjected = 0;
+        let totalOptimized = 0;
+        for (let d = 1; d <= days; d++) {
+            const x = lastX + d;
+            const projected = Math.max(0, slope * x + intercept);
+            const optimized = Math.max(0, projected - dailySavings);
+            const date = new Date(now.getTime() + d * 24 * 60 * 60 * 1000)
+                .toISOString()
+                .split('T')[0];
+            daily.push({
+                date,
+                projectedCost: Math.round(projected * 1_000_000) / 1_000_000,
+                projectedCostOptimized: Math.round(optimized * 1_000_000) / 1_000_000,
+            });
+            totalProjected += projected;
+            totalOptimized += optimized;
+        }
+        const withoutOptimizations = {
+            totalProjectedCost: Math.round(totalProjected * 1_000_000) / 1_000_000,
+            avgDailyCost: days > 0 ? Math.round((totalProjected / days) * 1_000_000) / 1_000_000 : 0,
+        };
+        const withOptimizations = {
+            totalProjectedCost: Math.round(totalOptimized * 1_000_000) / 1_000_000,
+            avgDailyCost: days > 0 ? Math.round((totalOptimized / days) * 1_000_000) / 1_000_000 : 0,
+        };
+        // Budget burn rate
+        let budgetBurnRate;
+        if (opts.budgetStore && opts.tenantId) {
+            try {
+                const budgets = opts.budgetStore.listBudgets(opts.tenantId);
+                if (budgets.length > 0) {
+                    const budget = budgets[0];
+                    // Recent week cost from trend
+                    const recentBuckets = buckets.slice(-7);
+                    const recentCost = recentBuckets.reduce((s, b) => s + b.totalCost, 0);
+                    const dailyBurn = recentBuckets.length > 0 ? recentCost / recentBuckets.length : 0;
+                    const remaining = budget.limitUsd - budget.currentSpend;
+                    budgetBurnRate = {
+                        budgetId: budget.id,
+                        limitUsd: budget.limitUsd,
+                        currentSpend: budget.currentSpend,
+                        dailyBurnRate: Math.round(dailyBurn * 1_000_000) / 1_000_000,
+                        daysUntilExhaustion: dailyBurn > 0 ? Math.round(remaining / dailyBurn) : null,
+                    };
+                }
+            }
+            catch {
+                // Budget store unavailable
+            }
+        }
+        return {
+            agentId,
+            days,
+            daily,
+            withOptimizations,
+            withoutOptimizations,
+            budgetBurnRate,
+        };
+    }
+}
+// Export linearRegression for testing
+export { linearRegression };
+//# sourceMappingURL=forecast.js.map

package/dist/lib/optimization/forecast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forecast.js","sourceRoot":"","sources":["../../../src/lib/optimization/forecast.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAYpD;;GAEG;AACH,SAAS,gBAAgB,CAAC,MAAkC;IAC1D,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAChD,MAAM,SAAS,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,OAAO,cAAc;IACI;IAA7B,YAA6B,SAAyB;QAAzB,cAAS,GAAT,SAAS,CAAgB;IAAG,CAAC;IAE1D,KAAK,CAAC,QAAQ,CAAC,IAAqB;QAClC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAEtC,qCAAqC;QACrC,MAAM,WAAW,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,WAAW,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACvF,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAE7B,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QAEzC,6CAA6C;QAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YACzC,CAAC,EAAE,CAAC;YACJ,CAAC,EAAE,MAAM,CAAC,SAAS;SACpB,CAAC,CAAC,CAAC;QAEJ,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAExD,uCAAuC;QACvC,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC;oBACxD,OAAO;oBACP,MAAM,EAAE,EAAE;oBACV,KAAK,EAAE,EAAE;iBACV,CAAC,CAAC;gBACH,YAAY,GAAG,SAAS,CAAC,qBAAqB,GAAG,EAAE,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACP,4CAA4C;YAC9C,CAAC;QACH,CAAC;QAED,kBAAkB;QAClB,MAAM,KAAK,GAAqB,EAAE,CAAC;QACnC,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;YACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC,CAAC;YAExD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;iBAC3D,WAAW,EAAE;iBACb,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAEjB,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI;gBACJ,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS;gBAC5D,sBAAsB,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS;aACtE,CAAC,CAAC;YAEH,cAAc,IAAI,SAAS,CAAC;YAC5B,cAAc,IAAI,SAAS,CAAC;QAC9B,CAAC;QAED,MAAM,oBAAoB,GAAoB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,SAAS;YACtE,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;SACzF,CAAC;QAEF,MAAM,iBAAiB,GAAoB;YACzC,kBAAkB,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC,GAAG,SAAS;YACtE,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;SACzF,CAAC;QAEF,mBAAmB;QACnB,IAAI,cAA0C,CAAC;QAC/C,IAAI,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC1B,8BAA8B;oBAC9B,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBACxC,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;oBACtE,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnF,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC;oBAExD,cAAc,GAAG;wBACf,QAAQ,EAAE,MAAM,CAAC,EAAE;wBACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS;wBAC5D,mBAAmB,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QAED,OAAO;YACL,OAAO;YACP,IAAI;YACJ,KAAK;YACL,iBAAiB;YACjB,oBAAoB;YACpB,cAAc;SACf,CAAC;IACJ,CAAC;CACF;AAED,sCAAsC;AACtC,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/dist/lib/secrets.d.ts

@@ -0,0 +1,30 @@
+/**
+ * SH-7: Secret Management Hardening
+ *
+ * Resolves secrets from 3 tiers:
+ *   1. process.env[name]           — plain env var (default)
+ *   2. process.env[name + '_FILE'] — file path (Docker Secrets / K8s)
+ *   3. process.env[name + '_ARN']  — AWS Secrets Manager ARN
+ */
+export interface SecretSpec {
+    name: string;
+    required?: boolean;
+}
+export interface ResolvedSecrets {
+    [key: string]: string | undefined;
+}
+/**
+ * Resolve a single secret through the 3-tier hierarchy.
+ * Returns the resolved value or undefined.
+ */
+export declare function resolveSecret(name: string): Promise<string | undefined>;
+/** Well-known secret names managed by this module. */
+export declare const MANAGED_SECRETS: SecretSpec[];
+/**
+ * Resolve all managed secrets at startup.
+ * - Sets resolved values back into process.env for downstream consumers.
+ * - Fails fast in production if required secrets are missing.
+ * - Warns in production if all secrets are plain env vars (no file/ARN).
+ */
+export declare function resolveAllSecrets(): Promise<ResolvedSecrets>;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/lib/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAOH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAwB7E;AA+BD,sDAAsD;AACtD,eAAO,MAAM,eAAe,EAAE,UAAU,EAMvC,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,eAAe,CAAC,CAmClE"}

package/dist/lib/secrets.js

@@ -0,0 +1,103 @@
+/**
+ * SH-7: Secret Management Hardening
+ *
+ * Resolves secrets from 3 tiers:
+ *   1. process.env[name]           — plain env var (default)
+ *   2. process.env[name + '_FILE'] — file path (Docker Secrets / K8s)
+ *   3. process.env[name + '_ARN']  — AWS Secrets Manager ARN
+ */
+import { readFileSync } from 'node:fs';
+import { createLogger } from './logger.js';
+const log = createLogger('Secrets');
+/**
+ * Resolve a single secret through the 3-tier hierarchy.
+ * Returns the resolved value or undefined.
+ */
+export async function resolveSecret(name) {
+    // Tier 1: plain env var
+    const plain = process.env[name];
+    if (plain !== undefined)
+        return plain;
+    // Tier 2: file-based (_FILE suffix)
+    const filePath = process.env[`${name}_FILE`];
+    if (filePath) {
+        try {
+            return readFileSync(filePath, 'utf-8').trim();
+        }
+        catch (err) {
+            throw new Error(`Secret ${name}: failed to read file "${filePath}": ${err instanceof Error ? err.message : err}`);
+        }
+    }
+    // Tier 3: AWS Secrets Manager (_ARN suffix)
+    const arn = process.env[`${name}_ARN`];
+    if (arn) {
+        return fetchFromAwsSecretsManager(arn, name);
+    }
+    return undefined;
+}
+/**
+ * Lazy-import AWS SDK and fetch secret value.
+ */
+async function fetchFromAwsSecretsManager(arn, name) {
+    try {
+        // @ts-ignore — optional dependency; fails gracefully at runtime
+        const mod = await import('@aws-sdk/client-secrets-manager').catch(() => {
+            throw new Error(`Secret ${name}: install @aws-sdk/client-secrets-manager to use ARN-based secrets`);
+        });
+        const { SecretsManagerClient, GetSecretValueCommand } = mod;
+        const client = new SecretsManagerClient({});
+        const response = await client.send(new GetSecretValueCommand({ SecretId: arn }));
+        const value = response.SecretString;
+        if (!value) {
+            throw new Error(`Secret ${name}: ARN "${arn}" returned no SecretString`);
+        }
+        return value;
+    }
+    catch (err) {
+        if (err instanceof Error && err.message.startsWith(`Secret ${name}:`))
+            throw err;
+        throw new Error(`Secret ${name}: AWS Secrets Manager fetch failed for "${arn}": ${err instanceof Error ? err.message : err}`);
+    }
+}
+/** Well-known secret names managed by this module. */
+export const MANAGED_SECRETS = [
+    { name: 'JWT_SECRET', required: true },
+    { name: 'OIDC_CLIENT_SECRET' },
+    { name: 'DATABASE_URL' },
+    { name: 'AGENTGATE_WEBHOOK_SECRET' },
+    { name: 'FORMBRIDGE_WEBHOOK_SECRET' },
+];
+/**
+ * Resolve all managed secrets at startup.
+ * - Sets resolved values back into process.env for downstream consumers.
+ * - Fails fast in production if required secrets are missing.
+ * - Warns in production if all secrets are plain env vars (no file/ARN).
+ */
+export async function resolveAllSecrets() {
+    const isProduction = process.env['NODE_ENV'] === 'production';
+    const resolved = {};
+    let allPlainEnv = true;
+    for (const spec of MANAGED_SECRETS) {
+        const { name } = spec;
+        // Track whether any secret uses file or ARN tier
+        if (process.env[`${name}_FILE`] || process.env[`${name}_ARN`]) {
+            allPlainEnv = false;
+        }
+        const value = await resolveSecret(name);
+        if (value !== undefined) {
+            resolved[name] = value;
+            // Inject into process.env so downstream code (config.ts, middleware) just reads env
+            process.env[name] = value;
+        }
+        else if (spec.required && isProduction) {
+            throw new Error(`FATAL: Required secret "${name}" is not set. ` +
+                `Provide ${name}, ${name}_FILE, or ${name}_ARN.`);
+        }
+    }
+    if (isProduction && allPlainEnv) {
+        log.warn('⚠️  All secrets are plain environment variables. ' +
+            'Consider using _FILE (Docker/K8s) or _ARN (AWS) for production hardening.');
+    }
+    return resolved;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/lib/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/lib/secrets.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AAWpC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,wBAAwB;IACxB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEtC,oCAAoC;IACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IAC7C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,0BAA0B,QAAQ,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CACjG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;IACvC,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,0BAA0B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,0BAA0B,CAAC,GAAW,EAAE,IAAY;IACjE,IAAI,CAAC;QACH,gEAAgE;QAChE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YACrE,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,oEAAoE,CACnF,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,GAAG,GAAG,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAChC,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAC7C,CAAC;QACF,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,UAAU,GAAG,4BAA4B,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,IAAI,GAAG,CAAC;YAAE,MAAM,GAAG,CAAC;QACjF,MAAM,IAAI,KAAK,CACb,UAAU,IAAI,2CAA2C,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAC7G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,eAAe,GAAiB;IAC3C,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE;IACtC,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC9B,EAAE,IAAI,EAAE,cAAc,EAAE;IACxB,EAAE,IAAI,EAAE,0BAA0B,EAAE;IACpC,EAAE,IAAI,EAAE,2BAA2B,EAAE;CACtC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,YAAY,CAAC;IAC9D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,WAAW,GAAG,IAAI,CAAC;IAEvB,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC;QAEtB,iDAAiD;QACjD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,CAAC;YAC9D,WAAW,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;QAExC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;YACvB,oFAAoF;YACpF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,gBAAgB;gBAC/C,WAAW,IAAI,KAAK,IAAI,aAAa,IAAI,OAAO,CACjD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CACN,mDAAmD;YACnD,2EAA2E,CAC5E,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/threshold-monitor.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Threshold Monitor — detects metric breaches and fires webhooks.
+ *
+ * Part of the Proactive Guardrails feature (Batch 1, Story 1.2).
+ * Monitors configurable metric thresholds and fires webhooks on state transitions
+ * (ok→breached or breached→ok) to enable downstream systems (e.g. AgentGate)
+ * to tighten/relax approval policies automatically.
+ */
+export type MetricType = 'error_rate' | 'cost' | 'latency';
+export type WindowSize = '5m' | '15m' | '1h';
+export type ThresholdState = 'ok' | 'breached';
+export interface ThresholdConfig {
+    metric: MetricType;
+    value: number;
+    window: WindowSize;
+    webhookUrl: string;
+    agentId?: string;
+}
+export interface WebhookPayload {
+    event: 'breach' | 'recovery';
+    metric: MetricType;
+    currentValue: number;
+    threshold: number;
+    agentId: string | null;
+    timestamp: string;
+}
+/** Function signature for fetching current metric values */
+export type MetricsFetcher = (metric: MetricType, window: WindowSize, agentId?: string) => Promise<number>;
+export declare class ThresholdMonitor {
+    private thresholds;
+    private fetchMetric;
+    private states;
+    private timer;
+    private readonly checkIntervalMs;
+    constructor(thresholds: ThresholdConfig[], fetchMetric: MetricsFetcher, options?: {
+        checkIntervalMs?: number;
+    });
+    /** Unique key for a threshold config */
+    private key;
+    /** Start periodic checking */
+    start(): void;
+    /** Stop periodic checking */
+    stop(): void;
+    /** Get current state for a threshold */
+    getState(t: ThresholdConfig): ThresholdState;
+    /** Check all thresholds once */
+    checkAll(): Promise<void>;
+    /** Check a single threshold */
+    private checkOne;
+    /** Fire webhook with 3x retry and exponential backoff */
+    fireWebhook(url: string, payload: WebhookPayload): Promise<void>;
+}
+//# sourceMappingURL=threshold-monitor.d.ts.map

package/dist/lib/threshold-monitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-monitor.d.ts","sourceRoot":"","sources":["../../src/lib/threshold-monitor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH,MAAM,MAAM,UAAU,GAAG,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;AAC3D,MAAM,MAAM,UAAU,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,UAAU,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC7B,MAAM,EAAE,UAAU,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4DAA4D;AAC5D,MAAM,MAAM,cAAc,GAAG,CAC3B,MAAM,EAAE,UAAU,EAClB,MAAM,EAAE,UAAU,EAClB,OAAO,CAAC,EAAE,MAAM,KACb,OAAO,CAAC,MAAM,CAAC,CAAC;AAQrB,qBAAa,gBAAgB;IAMzB,OAAO,CAAC,UAAU;IAClB,OAAO,CAAC,WAAW;IANrB,OAAO,CAAC,MAAM,CAA0C;IACxD,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAG/B,UAAU,EAAE,eAAe,EAAE,EAC7B,WAAW,EAAE,cAAc,EACnC,OAAO,CAAC,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE;IAUxC,wCAAwC;IACxC,OAAO,CAAC,GAAG;IAIX,8BAA8B;IAC9B,KAAK,IAAI,IAAI;IAOb,6BAA6B;IAC7B,IAAI,IAAI,IAAI;IAOZ,wCAAwC;IACxC,QAAQ,CAAC,CAAC,EAAE,eAAe,GAAG,cAAc;IAI5C,gCAAgC;IAC1B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAI/B,+BAA+B;YACjB,QAAQ;IA0BtB,yDAAyD;IACnD,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;CA+BvE"}

package/dist/lib/threshold-monitor.js

@@ -0,0 +1,112 @@
+/**
+ * Threshold Monitor — detects metric breaches and fires webhooks.
+ *
+ * Part of the Proactive Guardrails feature (Batch 1, Story 1.2).
+ * Monitors configurable metric thresholds and fires webhooks on state transitions
+ * (ok→breached or breached→ok) to enable downstream systems (e.g. AgentGate)
+ * to tighten/relax approval policies automatically.
+ */
+import { createLogger } from './logger.js';
+import { isWebhookUrlAllowed } from './alert-engine.js';
+const log = createLogger('ThresholdMonitor');
+// ─── ThresholdMonitor ───────────────────────────────────────────────
+const DEFAULT_CHECK_INTERVAL_MS = 60_000;
+const MAX_RETRIES = 3;
+const BASE_RETRY_DELAY_MS = 1_000;
+export class ThresholdMonitor {
+    thresholds;
+    fetchMetric;
+    states = new Map();
+    timer = null;
+    checkIntervalMs;
+    constructor(thresholds, fetchMetric, options) {
+        this.thresholds = thresholds;
+        this.fetchMetric = fetchMetric;
+        this.checkIntervalMs = options?.checkIntervalMs ?? DEFAULT_CHECK_INTERVAL_MS;
+        // Initialize all thresholds to 'ok'
+        for (const t of thresholds) {
+            this.states.set(this.key(t), 'ok');
+        }
+    }
+    /** Unique key for a threshold config */
+    key(t) {
+        return `${t.metric}:${t.window}:${t.agentId ?? '*'}`;
+    }
+    /** Start periodic checking */
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => this.checkAll(), this.checkIntervalMs);
+        this.timer.unref();
+        log.info(`ThresholdMonitor started (${this.thresholds.length} thresholds, ${this.checkIntervalMs}ms interval)`);
+    }
+    /** Stop periodic checking */
+    stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = null;
+        }
+    }
+    /** Get current state for a threshold */
+    getState(t) {
+        return this.states.get(this.key(t)) ?? 'ok';
+    }
+    /** Check all thresholds once */
+    async checkAll() {
+        await Promise.allSettled(this.thresholds.map((t) => this.checkOne(t)));
+    }
+    /** Check a single threshold */
+    async checkOne(t) {
+        try {
+            const currentValue = await this.fetchMetric(t.metric, t.window, t.agentId);
+            const k = this.key(t);
+            const prevState = this.states.get(k) ?? 'ok';
+            const newState = currentValue > t.value ? 'breached' : 'ok';
+            if (prevState !== newState) {
+                this.states.set(k, newState);
+                const payload = {
+                    event: newState === 'breached' ? 'breach' : 'recovery',
+                    metric: t.metric,
+                    currentValue,
+                    threshold: t.value,
+                    agentId: t.agentId ?? null,
+                    timestamp: new Date().toISOString(),
+                };
+                log.info(`Threshold ${newState}: ${t.metric} = ${currentValue} (threshold: ${t.value})`);
+                await this.fireWebhook(t.webhookUrl, payload);
+            }
+        }
+        catch (err) {
+            log.error(`Failed to check threshold ${t.metric}: ${err}`);
+        }
+    }
+    /** Fire webhook with 3x retry and exponential backoff */
+    async fireWebhook(url, payload) {
+        if (!isWebhookUrlAllowed(url)) {
+            log.error(`Webhook URL blocked by SSRF protection: ${url}`);
+            return;
+        }
+        for (let attempt = 0; attempt < MAX_RETRIES; attempt++) {
+            try {
+                const res = await fetch(url, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify(payload),
+                });
+                if (res.ok) {
+                    return;
+                }
+                log.warn(`Webhook attempt ${attempt + 1} failed: HTTP ${res.status}`);
+            }
+            catch (err) {
+                log.warn(`Webhook attempt ${attempt + 1} error: ${err}`);
+            }
+            if (attempt < MAX_RETRIES - 1) {
+                const delay = BASE_RETRY_DELAY_MS * Math.pow(2, attempt);
+                await new Promise((r) => setTimeout(r, delay));
+            }
+        }
+        log.error(`Webhook delivery failed after ${MAX_RETRIES} attempts: ${url}`);
+    }
+}
+//# sourceMappingURL=threshold-monitor.js.map

package/dist/lib/threshold-monitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"threshold-monitor.js","sourceRoot":"","sources":["../../src/lib/threshold-monitor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,GAAG,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;AAgC7C,uEAAuE;AAEvE,MAAM,yBAAyB,GAAG,MAAM,CAAC;AACzC,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,MAAM,OAAO,gBAAgB;IAMjB;IACA;IANF,MAAM,GAAgC,IAAI,GAAG,EAAE,CAAC;IAChD,KAAK,GAA0C,IAAI,CAAC;IAC3C,eAAe,CAAS;IAEzC,YACU,UAA6B,EAC7B,WAA2B,EACnC,OAAsC;QAF9B,eAAU,GAAV,UAAU,CAAmB;QAC7B,gBAAW,GAAX,WAAW,CAAgB;QAGnC,IAAI,CAAC,eAAe,GAAG,OAAO,EAAE,eAAe,IAAI,yBAAyB,CAAC;QAE7E,oCAAoC;QACpC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,wCAAwC;IAChC,GAAG,CAAC,CAAkB;QAC5B,OAAO,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,CAAC;IACvD,CAAC;IAED,8BAA8B;IAC9B,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,6BAA6B,IAAI,CAAC,UAAU,CAAC,MAAM,gBAAgB,IAAI,CAAC,eAAe,cAAc,CAAC,CAAC;IAClH,CAAC;IAED,6BAA6B;IAC7B,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,QAAQ,CAAC,CAAkB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC9C,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,QAAQ;QACZ,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,+BAA+B;IACvB,KAAK,CAAC,QAAQ,CAAC,CAAkB;QACvC,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAC7C,MAAM,QAAQ,GAAmB,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;YAE5E,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAmB;oBAC9B,KAAK,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU;oBACtD,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,YAAY;oBACZ,SAAS,EAAE,CAAC,CAAC,KAAK;oBAClB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;oBAC1B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;iBACpC,CAAC;gBAEF,GAAG,CAAC,IAAI,CAAC,aAAa,QAAQ,KAAK,CAAC,CAAC,MAAM,MAAM,YAAY,gBAAgB,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;gBACzF,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,WAAW,CAAC,GAAW,EAAE,OAAuB;QACpD,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,KAAK,CAAC,2CAA2C,GAAG,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,WAAW,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAC3B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;iBAC9B,CAAC,CAAC;gBAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,OAAO;gBACT,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC,mBAAmB,OAAO,GAAG,CAAC,iBAAiB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,mBAAmB,OAAO,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,OAAO,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;gBAC9B,MAAM,KAAK,GAAG,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBACzD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,GAAG,CAAC,KAAK,CAAC,iCAAiC,WAAW,cAAc,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;CACF"}

package/dist/middleware/audit.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Audit Logger Middleware (SH-2)
+ *
+ * Injects the audit logger into Hono context as `c.get('audit')`.
+ */
+import type { AuditLogger } from '../lib/audit.js';
+export type AuditVariables = {
+    audit: AuditLogger;
+};
+/**
+ * Create middleware that injects the audit logger into context.
+ */
+export declare function auditMiddleware(auditLogger: AuditLogger): import("hono").MiddlewareHandler<{
+    Variables: AuditVariables;
+}, string, {}, Response>;
+//# sourceMappingURL=audit.d.ts.map

package/dist/middleware/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,MAAM,MAAM,cAAc,GAAG;IAC3B,KAAK,EAAE,WAAW,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,WAAW;eACjB,cAAc;yBAIpD"}

package/dist/middleware/audit.js

@@ -0,0 +1,16 @@
+/**
+ * Audit Logger Middleware (SH-2)
+ *
+ * Injects the audit logger into Hono context as `c.get('audit')`.
+ */
+import { createMiddleware } from 'hono/factory';
+/**
+ * Create middleware that injects the audit logger into context.
+ */
+export function auditMiddleware(auditLogger) {
+    return createMiddleware(async (c, next) => {
+        c.set('audit', auditLogger);
+        return next();
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/middleware/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/middleware/audit.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAOhD;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,WAAwB;IACtD,OAAO,gBAAgB,CAAgC,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAC5B,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/auth-errors.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Standardized auth error response builders (Story 6 / PRD §R5).
+ *
+ * All 401/403 responses share a consistent JSON structure with
+ * actionable `hint` fields. No stack traces or internals leaked.
+ */
+import type { Context } from 'hono';
+export declare function missingCredentials(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    docs: string;
+    status: number;
+}, 401, "json">;
+export declare function invalidApiKey(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function expiredApiKey(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function expiredJwt(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function invalidJwt(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    docs: string;
+    status: number;
+}, 401, "json">;
+export declare function invalidCloudKey(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function authRequired(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function otlpAuthRequired(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    docs: string;
+    status: number;
+}, 401, "json">;
+export declare function otlpInvalidToken(c: Context): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    status: number;
+}, 401, "json">;
+export declare function insufficientPermissions(c: Context, opts: {
+    required: string;
+    current: string;
+    hint?: string;
+}): Response & import("hono").TypedResponse<{
+    error: string;
+    hint: string;
+    required: string;
+    current: string;
+    status: number;
+}, 403, "json">;
+//# sourceMappingURL=auth-errors.d.ts.map