@backtrack-js/browser 0.5.3 → 0.5.5

package/dist/capturers/browser.d.ts

@@ -0,0 +1,18 @@
+import type { BatchWriter } from '../storage/batch-writer';
+/** Diagnostic URLs never include embedded data or caller overrides that expose query values. */
+export declare function diagnosticUrl(raw: string): string;
+export declare class BrowserCapturer {
+    private writer;
+    private nextSequence;
+    private recording;
+    private removers;
+    private viewportTimer;
+    private pendingViewport?;
+    private lastViewport;
+    constructor(writer: BatchWriter, nextSequence: () => number);
+    private listen;
+    private marker;
+    start(): void;
+    flushViewport(): void;
+    stop(): void;
+}

package/dist/capturers/errors.d.ts

@@ -1,14 +1,16 @@
+import type { PrivacyOptions } from '../types/options';
 import type { BatchWriter } from '../storage/batch-writer';
 import type { IncidentManager } from '../storage/incident-manager';
 import type { ErrorContext } from '../types/options';
 export declare class ErrorCapturer {
+    private privacy?;
     private writer;
     private incidentManager;
     private sequenceProvider;
     private isRecording;
     private errorHandler?;
     private rejectionHandler?;
-    constructor(writer: BatchWriter, incidentManager: IncidentManager, sequenceProvider: () => number);
+    constructor(writer: BatchWriter, incidentManager: IncidentManager, sequenceProvider: () => number, privacy?: PrivacyOptions | undefined);
     start(): void;
     private handleGlobalError;
     private handleUnhandledRejection;

package/dist/capturers/network.d.ts

@@ -5,6 +5,7 @@ export interface NetworkCapturerConfig {
     ignoredUrls?: (string | RegExp)[];
     sanitizeUrlCallback?: (url: URL) => string;
     capturePayloads?: boolean;
+    captureResponseBodies?: boolean;
     maxPayloadSize?: number;
 }
 export declare class NetworkCapturer {
@@ -18,12 +19,21 @@ export declare class NetworkCapturer {
     private originalXHROpen;
     private originalXHRSend;
     private originalXHRSetHeader;
+    private wrappedXHROpen;
+    private wrappedXHRSend;
+    private wrappedXHRSetHeader;
+    private payloadControllers;
+    private pendingEvents;
     private xhrMetadata;
     constructor(writer: BatchWriter, incidentManager: IncidentManager, sequenceProvider: () => number, config?: Partial<NetworkCapturerConfig>);
     start(): void;
     private shouldIgnoreUrl;
     private instrumentFetch;
+    private stopFetchCapture?;
+    private captureResponseBody;
     private instrumentXHR;
+    private stopXHRCapture?;
     private recordNetworkEvent;
-    stop(): void;
+    flush(): Promise<void>;
+    stop(): Promise<void>;
 }

package/dist/capturers/rrweb.d.ts

@@ -13,5 +13,7 @@ export declare class RrwebCapturer {
     constructor(writer: BatchWriter, config?: RrwebCapturerConfig);
     getDroppedEventsCount(): number;
     start(): void;
+    /** Flush pending DOM mutations into a fresh privacy-filtered editing reference. */
+    takeFullSnapshot(): void;
     stop(): void;
 }

package/dist/capturers/sanitizer.d.ts

@@ -17,6 +17,7 @@ export declare function sanitizeUrl(rawUrl: string, customCallback?: (url: URL)
  * Redige padrões reconhecíveis de segredos em texto puro.
  */
 export declare function redactSensitiveString(str: string): string;
+export declare function isSensitiveKey(key: string): boolean;
 /**
  * Serializador e sanitizador universal à prova de falhas:
  * - Detecta ciclos circulares

package/dist/core/flight-recorder.d.ts

@@ -3,8 +3,10 @@ import type { FlightRecorder, FlightRecorderOptions, CaptureOptions, ErrorContex
 import type { RecorderHealth } from '../types/health';
 import type { IncidentSummary } from '../types/incident';
 import type { FlightRecorderArtifact } from '../types/artifact';
+import type { VisualProposal } from '../types/visual-proposal';
 export declare class FlightRecorderImpl implements FlightRecorder {
     private static activeInstance;
+    private static initializingPromise;
     private options;
     private stateMachine;
     private db;
@@ -18,6 +20,8 @@ export declare class FlightRecorderImpl implements FlightRecorder {
     private navigationCapturer;
     private rrwebCapturer;
     private performanceCapturer;
+    private browserCapturer;
+    private deferredVisualIncidents;
     private sequence;
     private retentionIntervalTimer;
     private retentionPromise;
@@ -54,6 +58,10 @@ export declare class FlightRecorderImpl implements FlightRecorder {
     private clearRuntimeReferences;
     stop(): Promise<void>;
     capture(reason?: string, windowSeconds?: number, options?: CaptureOptions): Promise<string>;
+    /** Attach QA intent to the original finalized replay without changing its time range. */
+    saveVisualProposal(incidentId: string, proposal: VisualProposal): Promise<void>;
+    /** Cancellation never deletes a proposal that has already been saved. */
+    discardVisualProposal(incidentId: string): Promise<void>;
     captureException(error: unknown, context?: ErrorContext): Promise<string | undefined> | void;
     listIncidents(): Promise<IncidentSummary[]>;
     getArtifact(incidentId: string): Promise<FlightRecorderArtifact>;
@@ -63,6 +71,7 @@ export declare class FlightRecorderImpl implements FlightRecorder {
     }): Promise<FlightRecorderArtifact>;
     deleteIncident(incidentId: string): Promise<void>;
     clear(): Promise<void>;
+    private getDroppedEventsCount;
     getHealth(): RecorderHealth;
     getSequence(): number;
     flush(): Promise<void>;

package/dist/dev-server.cjs

@@ -1,6 +1,3 @@
-"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const e=require("fs"),y=require("path"),I=require("./markdown-Ao5Ah9MF.cjs"),U=/^[a-zA-Z0-9_-]{1,128}$/,W=/^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/i,_=t=>U.test(t)&&!W.test(t),A=t=>["localhost","127.0.0.1","[::1]"].includes(t.toLowerCase()),Q=t=>t==="127.0.0.1"||t==="::1"||t==="::ffff:127.0.0.1";function V(t,o){if(!Q(t.socket.remoteAddress))return!1;try{const S=t.headers.host;if(!S)return!1;const d=new URL(`http://${S}`);if(d.host!==S.toLowerCase()||!A(d.hostname))return!1;const f=t.headers.origin;if(!f)return!(o!=null&&o.length);const h=new URL(f);return!["http:","https:"].includes(h.protocol)||!A(h.hostname)||h.origin!==f?!1:o!=null&&o.length?o.includes(f):h.host===d.host}catch{return!1}}const Z=(t,o)=>t.triggeredAt-o.triggeredAt||(t.id<o.id?-1:t.id>o.id?1:0);function m(t){return e.existsSync(t)&&e.lstatSync(t).isFile()}function G(t){var L;const o=(t==null?void 0:t.directory)??(t==null?void 0:t.outputDir);if(!t||typeof o!="string"||!y.isAbsolute(o))throw new Error('[Backtrack dev-server] A opção "directory" (ou "outputDir") absoluta é obrigatória.');const S=y.resolve(o),d=y.join(S,"incidents"),f=y.join(S,"latest.md"),h=t.maxBodyBytes??50*1024*1024,F=t.maxIncidents??20,v=t.maxStorageBytes??200*1024*1024;for(const i of[h,F,v])if(!Number.isSafeInteger(i)||i<=0)throw new Error("Backtrack limits must be positive safe integers.");if((L=t.allowedOrigins)!=null&&L.some(i=>{try{const r=new URL(i);return!A(r.hostname)||!["http:","https:"].includes(r.protocol)||r.origin!==i}catch{return!0}}))throw new Error("Backtrack origins must be local HTTP(S) origins.");let P=Promise.resolve();function x(){const i=[];for(const r of e.readdirSync(d)){if(!r.endsWith(".json"))continue;const s=r.slice(0,-5);if(!_(s))continue;const n=y.join(d,r),c=y.join(d,`${s}.md`);try{if(!m(n)||!m(c)||e.statSync(n).size>h)continue;const a=I.validateFlightRecorderArtifact(JSON.parse(e.readFileSync(n,"utf8")));if(!a.success||a.data.incident.id!==s||!e.readFileSync(c,"utf8").startsWith(`# Incidente Backtrack
-`))continue;i.push({id:s,jsonPath:n,mdPath:c,triggeredAt:a.data.incident.triggeredAt,size:e.statSync(n).size+e.statSync(c).size})}catch{}}return i.sort(Z)}function D(){const i=x(),r=i[i.length-1];if(!r)throw new Error("No complete incident to publish");const s=`> **Artefato completo:** [\`${r.id}.json\`](incidents/${r.id}.json)
-
-`+e.readFileSync(r.mdPath,"utf8"),n=`${f}.${Date.now()}.tmp`;try{e.writeFileSync(n,s,{encoding:"utf8",flag:"wx"}),e.renameSync(n,f)}finally{m(n)&&e.unlinkSync(n)}return r.id}function E(i){const r=x();let s=r.length,n=r.reduce((c,a)=>c+a.size,e.statSync(f).size);for(const c of r){if(s<=F&&n<=v)break;c.id!==i&&(e.unlinkSync(c.mdPath),e.unlinkSync(c.jsonPath),s--,n-=c.size)}}return(i,r,s)=>{const n=(l,$)=>{!r.destroyed&&!r.headersSent&&(r.writeHead(l,{"Content-Type":"application/json",...l===405?{Allow:"POST"}:{}}),r.end(JSON.stringify($)))};if((i.url||"").split("?")[0]!=="/__backtrack/incident"){s?s():n(404,{error:"Not found"});return}if(i.method!=="POST"){n(405,{error:"Method Not Allowed"});return}if((i.headers["content-type"]||"").split(";")[0].trim().toLowerCase()!=="application/json"){n(415,{error:"Unsupported Media Type: application/json required"});return}if(!V(i,t.allowedOrigins)){n(403,{error:"Forbidden: invalid origin or non-local access"});return}let c=0,a=!1;const p=[];i.on("error",()=>{a=!0,p.length=0}),i.on("aborted",()=>{a=!0,p.length=0}),i.on("data",l=>{a||(c+=l.length,c>h?(a=!0,p.length=0,r.setHeader("Connection","close"),n(413,{error:"Payload Too Large"})):p.push(l))}),i.on("end",()=>{if(a)return;const l=Buffer.concat(p).toString("utf8");p.length=0;let $;try{$=JSON.parse(l)}catch{n(400,{error:"Invalid JSON"});return}const z=I.validateFlightRecorderArtifact($);if(!z.success){n(400,{error:"Invalid artifact schema"});return}const M=z.data,g=M.incident.id;if(!_(g)){n(400,{error:"Invalid incident ID format"});return}P=P.then(()=>{try{for(const u of[S,d]){if(e.existsSync(u)&&!e.lstatSync(u).isDirectory())throw new Error("Invalid output directory");e.mkdirSync(u,{recursive:!0})}const w=y.join(d,`${g}.json`),k=y.join(d,`${g}.md`),j=e.existsSync(w),O=e.existsSync(k);if(j&&(!m(w)||e.readFileSync(w,"utf8")!==l)||O&&(!m(k)||!j)){n(409,{error:"Conflict: incident ID exists with different content"});return}if(j&&O){const u=D();E(u),n(200,{id:g,status:"already_persisted"});return}const N=I.formatIncidentMarkdown(M),H=`> **Artefato completo:** [\`${g}.json\`](incidents/${g}.json)
-
-`;if(Buffer.byteLength(l)+2*Buffer.byteLength(N)+Buffer.byteLength(H)>v){n(413,{error:"Incident size exceeds maxStorageBytes limit"});return}const R=`${Date.now()}-${Math.random().toString(36).slice(2)}`,B=`${w}.${R}.tmp`,b=`${k}.${R}.tmp`;let T=!1,C=!1;try{j||e.writeFileSync(B,l,{encoding:"utf8",flag:"wx"}),e.writeFileSync(b,N,{encoding:"utf8",flag:"wx"}),j||(e.renameSync(B,w),T=!0),e.renameSync(b,k),C=!0,D()}catch(u){throw C&&m(k)&&e.unlinkSync(k),T&&m(w)&&e.unlinkSync(w),u}finally{for(const u of[B,b])m(u)&&e.unlinkSync(u)}const J=x();E(J[J.length-1].id),n(201,{id:g,status:"saved"})}catch{n(500,{error:"Failed to persist incident"})}})})}}exports.createBacktrackMiddleware=G;
+"use strict";Object.defineProperty(exports,Symbol.toStringTag,{value:"Module"});const t=require("fs"),f=require("path"),b=require("./incident-reports-Cjos7N-u.cjs"),rt=/^[a-zA-Z0-9_-]{1,128}$/,it=/^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/i,q=e=>rt.test(e)&&!it.test(e),N=e=>["localhost","127.0.0.1","[::1]"].includes(e.toLowerCase()),ot=e=>e==="127.0.0.1"||e==="::1"||e==="::ffff:127.0.0.1";function ct(e,i){if(!ot(e.socket.remoteAddress))return!1;try{const s=e.headers.host;if(!s)return!1;const l=new URL(`http://${s}`);if(l.host!==s.toLowerCase()||!N(l.hostname))return!1;const S=e.headers.origin;if(!S)return!(i!=null&&i.length);const g=new URL(S);return!["http:","https:"].includes(g.protocol)||!N(g.hostname)||g.origin!==S?!1:i!=null&&i.length?i.includes(S):g.host===l.host}catch{return!1}}const E=`<!-- backtrack:context:1 -->
+`,tt=["incident.md","logs.md","timeline.md","replay.md","agent-instructions.md"];function M(e){if(!t.existsSync(e))return[];if(!t.lstatSync(e).isDirectory())throw new Error("Invalid context directory");return tt.map(i=>{const s=f.join(e,i);if(!h(s)||t.statSync(s).size>1024*1024||!t.readFileSync(s,"utf8").startsWith(E))throw new Error("Invalid context report");return s})}function C(e,i){for(const s of e)h(s)&&t.unlinkSync(s);t.existsSync(i)&&t.lstatSync(i).isDirectory()&&!t.readdirSync(i).length&&t.rmdirSync(i)}const st=(e,i)=>e.triggeredAt-i.triggeredAt||(e.id<i.id?-1:e.id>i.id?1:0);function h(e){return t.existsSync(e)&&t.lstatSync(e).isFile()}function at(e){var U;const i=(e==null?void 0:e.directory)??(e==null?void 0:e.outputDir);if(!e||typeof i!="string"||!f.isAbsolute(i))throw new Error('[Backtrack dev-server] A opção "directory" (ou "outputDir") absoluta é obrigatória.');const s=f.resolve(i),l=f.join(s,"incidents"),S=f.join(s,"latest.md"),g=e.maxBodyBytes??50*1024*1024,T=e.maxIncidents??20,R=e.maxStorageBytes??200*1024*1024;for(const o of[g,T,R])if(!Number.isSafeInteger(o)||o<=0)throw new Error("Backtrack limits must be positive safe integers.");if((U=e.allowedOrigins)!=null&&U.some(o=>{try{const r=new URL(o);return!N(r.hostname)||!["http:","https:"].includes(r.protocol)||r.origin!==o}catch{return!0}}))throw new Error("Backtrack origins must be local HTTP(S) origins.");let _=Promise.resolve();function A(){const o=[];for(const r of t.readdirSync(l)){if(!r.endsWith(".json"))continue;const d=r.slice(0,-5);if(!q(d))continue;const n=f.join(l,r),c=f.join(l,`${d}.md`);try{if(!h(n)||!h(c)||t.statSync(n).size>g)continue;const y=b.validateFlightRecorderArtifact(JSON.parse(t.readFileSync(n,"utf8")));if(!y.success||y.data.incident.id!==d||!t.readFileSync(c,"utf8").startsWith(`# Incidente Backtrack
+`))continue;const m=M(f.join(l,d));o.push({id:d,jsonPath:n,mdPath:c,reportFiles:m,triggeredAt:y.data.incident.triggeredAt,size:t.statSync(n).size+t.statSync(c).size+m.reduce((u,j)=>u+t.statSync(j).size,0)})}catch{}}return o.sort(st)}function J(){const o=A(),r=o[o.length-1];if(!r)throw new Error("No complete incident to publish");const d=JSON.parse(t.readFileSync(r.jsonPath,"utf8")),n=b.formatLatestIncidentMarkdown(d,r.reportFiles.length?"incidents/"+r.id:void 0),c=`${S}.${Date.now()}.tmp`;try{t.writeFileSync(c,n,{encoding:"utf8",flag:"wx"}),t.renameSync(c,S)}finally{h(c)&&t.unlinkSync(c)}return r.id}function H(o){const r=A();let d=r.length,n=r.reduce((c,y)=>c+y.size,t.statSync(S).size);for(const c of r){if(d<=T&&n<=R)break;c.id!==o&&(C(c.reportFiles,f.join(l,c.id)),t.unlinkSync(c.mdPath),t.unlinkSync(c.jsonPath),d--,n-=c.size)}}return(o,r,d)=>{const n=(u,j)=>{!r.destroyed&&!r.headersSent&&(r.writeHead(u,{"Content-Type":"application/json",...u===405?{Allow:"POST"}:{}}),r.end(JSON.stringify(j)))};if((o.url||"").split("?")[0]!=="/__backtrack/incident"){d?d():n(404,{error:"Not found"});return}if(o.method!=="POST"){n(405,{error:"Method Not Allowed"});return}if((o.headers["content-type"]||"").split(";")[0].trim().toLowerCase()!=="application/json"){n(415,{error:"Unsupported Media Type: application/json required"});return}if(!ct(o,e.allowedOrigins)){n(403,{error:"Forbidden: invalid origin or non-local access"});return}let c=0,y=!1;const m=[];o.on("error",()=>{y=!0,m.length=0}),o.on("aborted",()=>{y=!0,m.length=0}),o.on("data",u=>{y||(c+=u.length,c>g?(y=!0,m.length=0,r.setHeader("Connection","close"),n(413,{error:"Payload Too Large"})):m.push(u))}),o.on("end",()=>{if(y)return;const u=Buffer.concat(m).toString("utf8");m.length=0;let j;try{j=JSON.parse(u)}catch{n(400,{error:"Invalid JSON"});return}const W=b.validateFlightRecorderArtifact(j);if(!W.success){n(400,{error:"Invalid artifact schema"});return}const $=W.data,w=$.incident.id;if(!q(w)){n(400,{error:"Invalid incident ID format"});return}_=_.then(()=>{try{for(const a of[s,l]){if(t.existsSync(a)&&!t.lstatSync(a).isDirectory())throw new Error("Invalid output directory");t.mkdirSync(a,{recursive:!0})}const x=f.join(l,`${w}.json`),v=f.join(l,`${w}.md`),p=t.existsSync(x),k=t.existsSync(v);if(p&&(!h(x)||t.readFileSync(x,"utf8")!==u)||k&&(!h(v)||!p)){n(409,{error:"Conflict: incident ID exists with different content"});return}const B=f.join(l,w);let D;try{D=M(B)}catch{n(409,{error:"Conflict: context directory contains unrecognized reports"});return}if(D.length&&(!p||!k)){n(409,{error:"Conflict: incomplete incident with existing context"});return}if(p&&k&&D.length){const a=J();H(a),n(200,{id:w,status:"already_persisted"});return}const L=b.generateIncidentReports($,{maxSizeBytes:32*1024-Buffer.byteLength(E)}),K=L.files["incident.md"],Q={...L.files,"agent-instructions.md":L.agentInstructions},et=b.formatLatestIncidentMarkdown($,"incidents/"+w),nt=Object.values(Q).reduce((a,F)=>a+Buffer.byteLength(E+F),0);if(Buffer.byteLength(u)+Buffer.byteLength(K)+nt+Buffer.byteLength(et)>R){n(413,{error:"Incident size exceeds maxStorageBytes limit"});return}const P=`${Date.now()}-${Math.random().toString(36).slice(2)}`,z=`${x}.${P}.tmp`,O=`${v}.${P}.tmp`,I=`${B}.${P}.tmp`;let V=!1,X=!1,Z=!1;const G=[];try{p||t.writeFileSync(z,u,{encoding:"utf8",flag:"wx"}),k||t.writeFileSync(O,K,{encoding:"utf8",flag:"wx"}),t.mkdirSync(I);for(const a of tt){const F=f.join(I,a);G.push(F),t.writeFileSync(F,E+Q[a],{encoding:"utf8",flag:"wx"})}p||(t.renameSync(z,x),V=!0),k||(t.renameSync(O,v),X=!0),t.renameSync(I,B),Z=!0,J()}catch(a){throw Z&&C(M(B),B),X&&h(v)&&t.unlinkSync(v),V&&h(x)&&t.unlinkSync(x),a}finally{t.existsSync(I)&&C(G,I);for(const a of[z,O])h(a)&&t.unlinkSync(a)}const Y=A();H(Y[Y.length-1].id),n(p&&k?200:201,{id:w,status:p&&k?"already_persisted":"saved"})}catch{n(500,{error:"Failed to persist incident"})}})})}}exports.createBacktrackMiddleware=at;

package/dist/dev-server.js

@@ -1,88 +1,109 @@
-import e from "fs";
-import y from "path";
-import { v as J, f as U } from "./markdown-D3C94OlY.js";
-const W = /^[a-zA-Z0-9_-]{1,128}$/, Q = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/i, _ = (t) => W.test(t) && !Q.test(t), b = (t) => ["localhost", "127.0.0.1", "[::1]"].includes(t.toLowerCase()), V = (t) => t === "127.0.0.1" || t === "::1" || t === "::ffff:127.0.0.1";
-function Z(t, i) {
-  if (!V(t.socket.remoteAddress)) return !1;
+import t from "fs";
+import f from "path";
+import { v as Y, g as it, f as q } from "./incident-reports-9iXHIaBD.js";
+const ot = /^[a-zA-Z0-9_-]{1,128}$/, st = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/i, tt = (e) => ot.test(e) && !st.test(e), N = (e) => ["localhost", "127.0.0.1", "[::1]"].includes(e.toLowerCase()), ct = (e) => e === "127.0.0.1" || e === "::1" || e === "::ffff:127.0.0.1";
+function at(e, i) {
+  if (!ct(e.socket.remoteAddress)) return !1;
   try {
-    const S = t.headers.host;
-    if (!S) return !1;
-    const d = new URL(`http://${S}`);
-    if (d.host !== S.toLowerCase() || !b(d.hostname)) return !1;
-    const u = t.headers.origin;
-    if (!u) return !(i != null && i.length);
-    const h = new URL(u);
-    return !["http:", "https:"].includes(h.protocol) || !b(h.hostname) || h.origin !== u ? !1 : i != null && i.length ? i.includes(u) : h.host === d.host;
+    const c = e.headers.host;
+    if (!c) return !1;
+    const l = new URL(`http://${c}`);
+    if (l.host !== c.toLowerCase() || !N(l.hostname)) return !1;
+    const S = e.headers.origin;
+    if (!S) return !(i != null && i.length);
+    const p = new URL(S);
+    return !["http:", "https:"].includes(p.protocol) || !N(p.hostname) || p.origin !== S ? !1 : i != null && i.length ? i.includes(S) : p.host === l.host;
   } catch {
     return !1;
   }
 }
-const G = (t, i) => t.triggeredAt - i.triggeredAt || (t.id < i.id ? -1 : t.id > i.id ? 1 : 0);
-function m(t) {
-  return e.existsSync(t) && e.lstatSync(t).isFile();
+const F = `<!-- backtrack:context:1 -->
+`, et = ["incident.md", "logs.md", "timeline.md", "replay.md", "agent-instructions.md"];
+function O(e) {
+  if (!t.existsSync(e)) return [];
+  if (!t.lstatSync(e).isDirectory()) throw new Error("Invalid context directory");
+  return et.map((i) => {
+    const c = f.join(e, i);
+    if (!h(c) || t.statSync(c).size > 1024 * 1024 || !t.readFileSync(c, "utf8").startsWith(F)) throw new Error("Invalid context report");
+    return c;
+  });
 }
-function q(t) {
-  var E;
-  const i = (t == null ? void 0 : t.directory) ?? (t == null ? void 0 : t.outputDir);
-  if (!t || typeof i != "string" || !y.isAbsolute(i))
+function C(e, i) {
+  for (const c of e) h(c) && t.unlinkSync(c);
+  t.existsSync(i) && t.lstatSync(i).isDirectory() && !t.readdirSync(i).length && t.rmdirSync(i);
+}
+const lt = (e, i) => e.triggeredAt - i.triggeredAt || (e.id < i.id ? -1 : e.id > i.id ? 1 : 0);
+function h(e) {
+  return t.existsSync(e) && t.lstatSync(e).isFile();
+}
+function yt(e) {
+  var H;
+  const i = (e == null ? void 0 : e.directory) ?? (e == null ? void 0 : e.outputDir);
+  if (!e || typeof i != "string" || !f.isAbsolute(i))
     throw new Error('[Backtrack dev-server] A opção "directory" (ou "outputDir") absoluta é obrigatória.');
-  const S = y.resolve(i), d = y.join(S, "incidents"), u = y.join(S, "latest.md"), h = t.maxBodyBytes ?? 50 * 1024 * 1024, A = t.maxIncidents ?? 20, $ = t.maxStorageBytes ?? 200 * 1024 * 1024;
-  for (const o of [h, A, $])
+  const c = f.resolve(i), l = f.join(c, "incidents"), S = f.join(c, "latest.md"), p = e.maxBodyBytes ?? 50 * 1024 * 1024, T = e.maxIncidents ?? 20, E = e.maxStorageBytes ?? 200 * 1024 * 1024;
+  for (const o of [p, T, E])
     if (!Number.isSafeInteger(o) || o <= 0) throw new Error("Backtrack limits must be positive safe integers.");
-  if ((E = t.allowedOrigins) != null && E.some((o) => {
+  if ((H = e.allowedOrigins) != null && H.some((o) => {
     try {
       const r = new URL(o);
-      return !b(r.hostname) || !["http:", "https:"].includes(r.protocol) || r.origin !== o;
+      return !N(r.hostname) || !["http:", "https:"].includes(r.protocol) || r.origin !== o;
     } catch {
       return !0;
     }
   })) throw new Error("Backtrack origins must be local HTTP(S) origins.");
-  let F = Promise.resolve();
-  function v() {
+  let M = Promise.resolve();
+  function $() {
     const o = [];
-    for (const r of e.readdirSync(d)) {
+    for (const r of t.readdirSync(l)) {
       if (!r.endsWith(".json")) continue;
-      const c = r.slice(0, -5);
-      if (!_(c)) continue;
-      const n = y.join(d, r), s = y.join(d, `${c}.md`);
+      const d = r.slice(0, -5);
+      if (!tt(d)) continue;
+      const n = f.join(l, r), s = f.join(l, `${d}.md`);
       try {
-        if (!m(n) || !m(s) || e.statSync(n).size > h) continue;
-        const a = J(JSON.parse(e.readFileSync(n, "utf8")));
-        if (!a.success || a.data.incident.id !== c || !e.readFileSync(s, "utf8").startsWith(`# Incidente Backtrack
+        if (!h(n) || !h(s) || t.statSync(n).size > p) continue;
+        const y = Y(JSON.parse(t.readFileSync(n, "utf8")));
+        if (!y.success || y.data.incident.id !== d || !t.readFileSync(s, "utf8").startsWith(`# Incidente Backtrack
 `)) continue;
-        o.push({ id: c, jsonPath: n, mdPath: s, triggeredAt: a.data.incident.triggeredAt, size: e.statSync(n).size + e.statSync(s).size });
+        const m = O(f.join(l, d));
+        o.push({
+          id: d,
+          jsonPath: n,
+          mdPath: s,
+          reportFiles: m,
+          triggeredAt: y.data.incident.triggeredAt,
+          size: t.statSync(n).size + t.statSync(s).size + m.reduce((u, j) => u + t.statSync(j).size, 0)
+        });
       } catch {
       }
     }
-    return o.sort(G);
+    return o.sort(lt);
   }
-  function P() {
-    const o = v(), r = o[o.length - 1];
+  function _() {
+    const o = $(), r = o[o.length - 1];
     if (!r) throw new Error("No complete incident to publish");
-    const c = `> **Artefato completo:** [\`${r.id}.json\`](incidents/${r.id}.json)
-
-` + e.readFileSync(r.mdPath, "utf8"), n = `${u}.${Date.now()}.tmp`;
+    const d = JSON.parse(t.readFileSync(r.jsonPath, "utf8")), n = q(d, r.reportFiles.length ? "incidents/" + r.id : void 0), s = `${S}.${Date.now()}.tmp`;
     try {
-      e.writeFileSync(n, c, { encoding: "utf8", flag: "wx" }), e.renameSync(n, u);
+      t.writeFileSync(s, n, { encoding: "utf8", flag: "wx" }), t.renameSync(s, S);
     } finally {
-      m(n) && e.unlinkSync(n);
+      h(s) && t.unlinkSync(s);
     }
     return r.id;
   }
-  function D(o) {
-    const r = v();
-    let c = r.length, n = r.reduce((s, a) => s + a.size, e.statSync(u).size);
+  function J(o) {
+    const r = $();
+    let d = r.length, n = r.reduce((s, y) => s + y.size, t.statSync(S).size);
     for (const s of r) {
-      if (c <= A && n <= $) break;
-      s.id !== o && (e.unlinkSync(s.mdPath), e.unlinkSync(s.jsonPath), c--, n -= s.size);
+      if (d <= T && n <= E) break;
+      s.id !== o && (C(s.reportFiles, f.join(l, s.id)), t.unlinkSync(s.mdPath), t.unlinkSync(s.jsonPath), d--, n -= s.size);
     }
   }
-  return (o, r, c) => {
-    const n = (l, x) => {
-      !r.destroyed && !r.headersSent && (r.writeHead(l, { "Content-Type": "application/json", ...l === 405 ? { Allow: "POST" } : {} }), r.end(JSON.stringify(x)));
+  return (o, r, d) => {
+    const n = (u, j) => {
+      !r.destroyed && !r.headersSent && (r.writeHead(u, { "Content-Type": "application/json", ...u === 405 ? { Allow: "POST" } : {} }), r.end(JSON.stringify(j)));
     };
     if ((o.url || "").split("?")[0] !== "/__backtrack/incident") {
-      c ? c() : n(404, { error: "Not found" });
+      d ? d() : n(404, { error: "Not found" });
       return;
     }
     if (o.method !== "POST") {
@@ -93,73 +114,90 @@ function q(t) {
       n(415, { error: "Unsupported Media Type: application/json required" });
       return;
     }
-    if (!Z(o, t.allowedOrigins)) {
+    if (!at(o, e.allowedOrigins)) {
       n(403, { error: "Forbidden: invalid origin or non-local access" });
       return;
     }
-    let s = 0, a = !1;
-    const w = [];
+    let s = 0, y = !1;
+    const m = [];
     o.on("error", () => {
-      a = !0, w.length = 0;
+      y = !0, m.length = 0;
     }), o.on("aborted", () => {
-      a = !0, w.length = 0;
-    }), o.on("data", (l) => {
-      a || (s += l.length, s > h ? (a = !0, w.length = 0, r.setHeader("Connection", "close"), n(413, { error: "Payload Too Large" })) : w.push(l));
+      y = !0, m.length = 0;
+    }), o.on("data", (u) => {
+      y || (s += u.length, s > p ? (y = !0, m.length = 0, r.setHeader("Connection", "close"), n(413, { error: "Payload Too Large" })) : m.push(u));
     }), o.on("end", () => {
-      if (a) return;
-      const l = Buffer.concat(w).toString("utf8");
-      w.length = 0;
-      let x;
+      if (y) return;
+      const u = Buffer.concat(m).toString("utf8");
+      m.length = 0;
+      let j;
       try {
-        x = JSON.parse(l);
+        j = JSON.parse(u);
       } catch {
         n(400, { error: "Invalid JSON" });
         return;
       }
-      const L = J(x);
-      if (!L.success) {
+      const U = Y(j);
+      if (!U.success) {
         n(400, { error: "Invalid artifact schema" });
         return;
       }
-      const z = L.data, g = z.incident.id;
-      if (!_(g)) {
+      const A = U.data, w = A.incident.id;
+      if (!tt(w)) {
         n(400, { error: "Invalid incident ID format" });
         return;
       }
-      F = F.then(() => {
+      M = M.then(() => {
         try {
-          for (const f of [S, d]) {
-            if (e.existsSync(f) && !e.lstatSync(f).isDirectory()) throw new Error("Invalid output directory");
-            e.mkdirSync(f, { recursive: !0 });
+          for (const a of [c, l]) {
+            if (t.existsSync(a) && !t.lstatSync(a).isDirectory()) throw new Error("Invalid output directory");
+            t.mkdirSync(a, { recursive: !0 });
           }
-          const p = y.join(d, `${g}.json`), k = y.join(d, `${g}.md`), j = e.existsSync(p), N = e.existsSync(k);
-          if (j && (!m(p) || e.readFileSync(p, "utf8") !== l) || N && (!m(k) || !j)) {
+          const x = f.join(l, `${w}.json`), v = f.join(l, `${w}.md`), g = t.existsSync(x), k = t.existsSync(v);
+          if (g && (!h(x) || t.readFileSync(x, "utf8") !== u) || k && (!h(v) || !g)) {
             n(409, { error: "Conflict: incident ID exists with different content" });
             return;
           }
-          if (j && N) {
-            const f = P();
-            D(f), n(200, { id: g, status: "already_persisted" });
+          const B = f.join(l, w);
+          let D;
+          try {
+            D = O(B);
+          } catch {
+            n(409, { error: "Conflict: context directory contains unrecognized reports" });
+            return;
+          }
+          if (D.length && (!g || !k)) {
+            n(409, { error: "Conflict: incomplete incident with existing context" });
+            return;
+          }
+          if (g && k && D.length) {
+            const a = _();
+            J(a), n(200, { id: w, status: "already_persisted" });
             return;
           }
-          const O = U(z), H = `> **Artefato completo:** [\`${g}.json\`](incidents/${g}.json)
-
-`;
-          if (Buffer.byteLength(l) + 2 * Buffer.byteLength(O) + Buffer.byteLength(H) > $) {
+          const R = it(A, { maxSizeBytes: 32 * 1024 - Buffer.byteLength(F) }), W = R.files["incident.md"], K = { ...R.files, "agent-instructions.md": R.agentInstructions }, nt = q(A, "incidents/" + w), rt = Object.values(K).reduce((a, b) => a + Buffer.byteLength(F + b), 0);
+          if (Buffer.byteLength(u) + Buffer.byteLength(W) + rt + Buffer.byteLength(nt) > E) {
             n(413, { error: "Incident size exceeds maxStorageBytes limit" });
             return;
           }
-          const M = `${Date.now()}-${Math.random().toString(36).slice(2)}`, B = `${p}.${M}.tmp`, I = `${k}.${M}.tmp`;
-          let R = !1, T = !1;
+          const z = `${Date.now()}-${Math.random().toString(36).slice(2)}`, L = `${x}.${z}.tmp`, P = `${v}.${z}.tmp`, I = `${B}.${z}.tmp`;
+          let Q = !1, V = !1, X = !1;
+          const Z = [];
           try {
-            j || e.writeFileSync(B, l, { encoding: "utf8", flag: "wx" }), e.writeFileSync(I, O, { encoding: "utf8", flag: "wx" }), j || (e.renameSync(B, p), R = !0), e.renameSync(I, k), T = !0, P();
-          } catch (f) {
-            throw T && m(k) && e.unlinkSync(k), R && m(p) && e.unlinkSync(p), f;
+            g || t.writeFileSync(L, u, { encoding: "utf8", flag: "wx" }), k || t.writeFileSync(P, W, { encoding: "utf8", flag: "wx" }), t.mkdirSync(I);
+            for (const a of et) {
+              const b = f.join(I, a);
+              Z.push(b), t.writeFileSync(b, F + K[a], { encoding: "utf8", flag: "wx" });
+            }
+            g || (t.renameSync(L, x), Q = !0), k || (t.renameSync(P, v), V = !0), t.renameSync(I, B), X = !0, _();
+          } catch (a) {
+            throw X && C(O(B), B), V && h(v) && t.unlinkSync(v), Q && h(x) && t.unlinkSync(x), a;
           } finally {
-            for (const f of [B, I]) m(f) && e.unlinkSync(f);
+            t.existsSync(I) && C(Z, I);
+            for (const a of [L, P]) h(a) && t.unlinkSync(a);
           }
-          const C = v();
-          D(C[C.length - 1].id), n(201, { id: g, status: "saved" });
+          const G = $();
+          J(G[G.length - 1].id), n(g && k ? 200 : 201, { id: w, status: g && k ? "already_persisted" : "saved" });
         } catch {
           n(500, { error: "Failed to persist incident" });
         }
@@ -168,5 +206,5 @@ function q(t) {
   };
 }
 export {
-  q as createBacktrackMiddleware
+  yt as createBacktrackMiddleware
 };