@bli-cockpit/telemetry-core 0.1.6 → 0.1.7

package/dist/evidence-completeness.d.ts

@@ -5,6 +5,7 @@ export declare const EvidenceCompletenessStatusSchema: z.ZodEnum<{
     complete: "complete";
     partial: "partial";
     empty: "empty";
+    unavailable: "unavailable";
 }>;
 export type EvidenceCompletenessStatus = z.infer<typeof EvidenceCompletenessStatusSchema>;
 export declare const EvidenceCompletenessSourceCountSchema: z.ZodObject<{
@@ -15,6 +16,7 @@ export declare const EvidenceCompletenessSourceCountSchema: z.ZodObject<{
     truncated_count: z.ZodNumber;
     deferred_count: z.ZodNumber;
     reused_count: z.ZodNumber;
+    failed_count: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
 export type EvidenceCompletenessSourceCount = z.infer<typeof EvidenceCompletenessSourceCountSchema>;
 export declare const EvidenceCompletenessTotalsSchema: z.ZodObject<{
@@ -24,6 +26,7 @@ export declare const EvidenceCompletenessTotalsSchema: z.ZodObject<{
     truncated_count: z.ZodNumber;
     deferred_count: z.ZodNumber;
     reused_count: z.ZodNumber;
+    failed_count: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
 export type EvidenceCompletenessTotals = z.infer<typeof EvidenceCompletenessTotalsSchema>;
 export declare const EvidenceCompletenessCapSchema: z.ZodObject<{
@@ -40,6 +43,12 @@ export declare const EvidenceCompletenessSkipReasonSchema: z.ZodObject<{
     count: z.ZodNumber;
 }, z.core.$strict>;
 export type EvidenceCompletenessSkipReason = z.infer<typeof EvidenceCompletenessSkipReasonSchema>;
+export declare const EvidenceCompletenessFailureReasonSchema: z.ZodObject<{
+    source: z.ZodString;
+    reason: z.ZodString;
+    count: z.ZodNumber;
+}, z.core.$strict>;
+export type EvidenceCompletenessFailureReason = z.infer<typeof EvidenceCompletenessFailureReasonSchema>;
 export declare const EvidenceCompletenessTruncationMarkerSchema: z.ZodObject<{
     source: z.ZodString;
     reason: z.ZodString;
@@ -57,6 +66,7 @@ export declare const EvidenceCompletenessPayloadSchema: z.ZodObject<{
         complete: "complete";
         partial: "partial";
         empty: "empty";
+        unavailable: "unavailable";
     }>;
     generated_at: z.ZodString;
     scan_window: z.ZodObject<{
@@ -72,6 +82,7 @@ export declare const EvidenceCompletenessPayloadSchema: z.ZodObject<{
         truncated_count: z.ZodNumber;
         deferred_count: z.ZodNumber;
         reused_count: z.ZodNumber;
+        failed_count: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>>;
     totals: z.ZodObject<{
         scanned_count: z.ZodNumber;
@@ -80,6 +91,7 @@ export declare const EvidenceCompletenessPayloadSchema: z.ZodObject<{
         truncated_count: z.ZodNumber;
         deferred_count: z.ZodNumber;
         reused_count: z.ZodNumber;
+        failed_count: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>;
     caps: z.ZodDefault<z.ZodArray<z.ZodObject<{
         source: z.ZodString;
@@ -93,6 +105,11 @@ export declare const EvidenceCompletenessPayloadSchema: z.ZodObject<{
         reason: z.ZodString;
         count: z.ZodNumber;
     }, z.core.$strict>>>;
+    failure_reasons: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        source: z.ZodString;
+        reason: z.ZodString;
+        count: z.ZodNumber;
+    }, z.core.$strict>>>;
     truncation_markers: z.ZodDefault<z.ZodArray<z.ZodObject<{
         source: z.ZodString;
         reason: z.ZodString;

package/dist/evidence-completeness.js

@@ -6,6 +6,7 @@ export const EvidenceCompletenessStatusSchema = z.enum([
     "partial",
     "empty",
     "failed",
+    "unavailable",
     "unknown",
 ]);
 export const EvidenceCompletenessSourceCountSchema = z
@@ -17,6 +18,7 @@ export const EvidenceCompletenessSourceCountSchema = z
     truncated_count: EvidenceCountSchema,
     deferred_count: EvidenceCountSchema,
     reused_count: EvidenceCountSchema,
+    failed_count: EvidenceCountSchema.default(0),
 })
     .strict();
 export const EvidenceCompletenessTotalsSchema = EvidenceCompletenessSourceCountSchema.omit({ source: true }).strict();
@@ -36,6 +38,7 @@ export const EvidenceCompletenessSkipReasonSchema = z
     count: EvidenceCountSchema,
 })
     .strict();
+export const EvidenceCompletenessFailureReasonSchema = EvidenceCompletenessSkipReasonSchema;
 export const EvidenceCompletenessTruncationMarkerSchema = z
     .object({
     source: NonEmptyStringSchema,
@@ -62,9 +65,38 @@ export const EvidenceCompletenessPayloadSchema = z
     totals: EvidenceCompletenessTotalsSchema,
     caps: z.array(EvidenceCompletenessCapSchema).default([]),
     skip_reasons: z.array(EvidenceCompletenessSkipReasonSchema).default([]),
+    failure_reasons: z
+        .array(EvidenceCompletenessFailureReasonSchema)
+        .default([]),
     truncation_markers: z
         .array(EvidenceCompletenessTruncationMarkerSchema)
         .default([]),
     notes: z.array(NonEmptyStringSchema.max(160)).default([]),
 })
-    .strict();
+    .strict()
+    .superRefine((payload, context) => {
+    const hasGap = payload.totals.skipped_count > 0 ||
+        payload.totals.truncated_count > 0 ||
+        payload.totals.deferred_count > 0 ||
+        payload.totals.failed_count > 0 ||
+        payload.caps.some((cap) => cap.applied) ||
+        payload.skip_reasons.length > 0 ||
+        payload.failure_reasons.length > 0 ||
+        payload.truncation_markers.length > 0;
+    if (payload.status === "complete" && hasGap) {
+        context.addIssue({
+            code: "custom",
+            message: "complete evidence completeness cannot include skips, caps, truncations, deferrals, or failures",
+            path: ["status"],
+        });
+    }
+    if (payload.status === "failed" &&
+        payload.totals.failed_count === 0 &&
+        payload.failure_reasons.length === 0) {
+        context.addIssue({
+            code: "custom",
+            message: "failed evidence completeness must include a failed count or failure reason",
+            path: ["failure_reasons"],
+        });
+    }
+});

package/dist/ingest-dto.d.ts

@@ -96,6 +96,7 @@ export declare const TelemetryIngestEventDtoSchema: z.ZodObject<{
             complete: "complete";
             partial: "partial";
             empty: "empty";
+            unavailable: "unavailable";
         }>;
         generated_at: z.ZodString;
         scan_window: z.ZodObject<{
@@ -111,6 +112,7 @@ export declare const TelemetryIngestEventDtoSchema: z.ZodObject<{
             truncated_count: z.ZodNumber;
             deferred_count: z.ZodNumber;
             reused_count: z.ZodNumber;
+            failed_count: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>>>;
         totals: z.ZodObject<{
             scanned_count: z.ZodNumber;
@@ -119,6 +121,7 @@ export declare const TelemetryIngestEventDtoSchema: z.ZodObject<{
             truncated_count: z.ZodNumber;
             deferred_count: z.ZodNumber;
             reused_count: z.ZodNumber;
+            failed_count: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strict>;
         caps: z.ZodDefault<z.ZodArray<z.ZodObject<{
             source: z.ZodString;
@@ -132,6 +135,11 @@ export declare const TelemetryIngestEventDtoSchema: z.ZodObject<{
             reason: z.ZodString;
             count: z.ZodNumber;
         }, z.core.$strict>>>;
+        failure_reasons: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            source: z.ZodString;
+            reason: z.ZodString;
+            count: z.ZodNumber;
+        }, z.core.$strict>>>;
         truncation_markers: z.ZodDefault<z.ZodArray<z.ZodObject<{
             source: z.ZodString;
             reason: z.ZodString;
@@ -517,6 +525,7 @@ export declare const TelemetryIngestEnvelopeSchema: z.ZodObject<{
                 complete: "complete";
                 partial: "partial";
                 empty: "empty";
+                unavailable: "unavailable";
             }>;
             generated_at: z.ZodString;
             scan_window: z.ZodObject<{
@@ -532,6 +541,7 @@ export declare const TelemetryIngestEnvelopeSchema: z.ZodObject<{
                 truncated_count: z.ZodNumber;
                 deferred_count: z.ZodNumber;
                 reused_count: z.ZodNumber;
+                failed_count: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>>>;
             totals: z.ZodObject<{
                 scanned_count: z.ZodNumber;
@@ -540,6 +550,7 @@ export declare const TelemetryIngestEnvelopeSchema: z.ZodObject<{
                 truncated_count: z.ZodNumber;
                 deferred_count: z.ZodNumber;
                 reused_count: z.ZodNumber;
+                failed_count: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strict>;
             caps: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 source: z.ZodString;
@@ -553,6 +564,11 @@ export declare const TelemetryIngestEnvelopeSchema: z.ZodObject<{
                 reason: z.ZodString;
                 count: z.ZodNumber;
             }, z.core.$strict>>>;
+            failure_reasons: z.ZodDefault<z.ZodArray<z.ZodObject<{
+                source: z.ZodString;
+                reason: z.ZodString;
+                count: z.ZodNumber;
+            }, z.core.$strict>>>;
             truncation_markers: z.ZodDefault<z.ZodArray<z.ZodObject<{
                 source: z.ZodString;
                 reason: z.ZodString;

package/dist/ingest-dto.js

@@ -47,6 +47,34 @@ export const TelemetryIngestEventDtoSchema = z
             path: ["redaction", "privacy_classification"],
         });
     }
+    const summaryStatus = event.attributes["evidence_completeness_status"];
+    const summarySchemaVersion = event.attributes["evidence_completeness_schema_version"];
+    if (event.evidence_completeness) {
+        if (summaryStatus !== undefined &&
+            summaryStatus !== event.evidence_completeness.status) {
+            context.addIssue({
+                code: "custom",
+                message: "evidence completeness status attribute must match payload",
+                path: ["attributes", "evidence_completeness_status"],
+            });
+        }
+        if (summarySchemaVersion !== undefined &&
+            summarySchemaVersion !== event.evidence_completeness.schema_version) {
+            context.addIssue({
+                code: "custom",
+                message: "evidence completeness schema version attribute must match payload",
+                path: ["attributes", "evidence_completeness_schema_version"],
+            });
+        }
+    }
+    else if (typeof summaryStatus === "string" &&
+        summaryStatus !== "unknown") {
+        context.addIssue({
+            code: "custom",
+            message: "typed evidence completeness payload is required when status is known",
+            path: ["evidence_completeness"],
+        });
+    }
 });
 export const TelemetryIngestEnvelopeSchema = z
     .object({

package/dist/secret-guards.js

@@ -29,6 +29,9 @@ export function isSecretLikePathSegment(value) {
 // this source file (the public-package pack scanner bans it as a content
 // pattern, just as the original guard did).
 const PRIVILEGED_SUPABASE_KEY_NAME = ["SUPABASE", "SERVICE", "ROLE", "KEY"].join("_");
+const SUPABASE_SERVICE_ROLE_NAME = ["SUPABASE", "SERVICE", "ROLE"].join("_");
+const OPENAI_KEY_NAME = ["OPENAI", "API", "KEY"].join("_");
+const MEM0_KEY_NAME = ["MEM0", "API", "KEY"].join("_");
 /**
  * Credential names that are only a leak when assigned a value (D13). The value
  * shape mirrors the long-standing generic pattern: an assignment operator
@@ -39,6 +42,9 @@ const PRIVILEGED_SUPABASE_KEY_NAME = ["SUPABASE", "SERVICE", "ROLE", "KEY"].join
 const SECRET_NAME_WITH_VALUE_PATTERN = new RegExp(`\\b(?:${[
     "(?:NEXT_PUBLIC_)?SUPABASE_ANON_KEY",
     PRIVILEGED_SUPABASE_KEY_NAME,
+    SUPABASE_SERVICE_ROLE_NAME,
+    OPENAI_KEY_NAME,
+    MEM0_KEY_NAME,
     "SERVICE[_\\s-]?ROLE(?:[_\\s-]?KEY)?",
     "LANGFUSE_(?:PUBLIC|SECRET)_KEY",
     "api[_-]?key",
@@ -65,6 +71,7 @@ const SECRET_VALUE_PATTERNS = [
     /\bxox[baprs]-[A-Za-z0-9-]{16,}/,
     /\b(?:AKIA|ASIA)[A-Z0-9]{16}\b/,
     /\b(?:pk|sk)-lf-[A-Za-z0-9_-]{16,}\b/i,
+    /\bm0[-_][A-Za-z0-9_-]{16,}\b/i,
 ];
 const SECRET_LIKE_CONTENT_PATTERNS = [
     SECRET_NAME_WITH_VALUE_PATTERN,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/telemetry-core",
-  "version": "0.1.6",
+  "version": "0.1.7",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",