@codemieai/code 0.15.6 → 0.15.7

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.d.ts

@@ -0,0 +1,40 @@
+import { type SpoolStream } from './spool-paths.js';
+/** Byte offsets that have been acknowledged by the backend, per stream. */
+export type SessionCursors = Record<SpoolStream, number>;
+export interface SessionStatus {
+    /**
+     * Delivery progress. A cursor is a byte offset into the corresponding spool
+     * file and is only advanced after the backend acknowledges those bytes.
+     */
+    cursors: SessionCursors;
+    /** Consecutive ticks a hooks-only session has waited for OTEL data. */
+    waitTicks: number;
+    /**
+     * Time when a successfully forwarded hooks batch contained `SessionEnd`.
+     * Marks *normal completion*, not *delivery completion*: forwarding continues
+     * for any bytes that are still pending or appended afterwards.
+     */
+    endedAt?: number;
+}
+export declare function createStatus(): SessionStatus;
+/** Read and normalize a session status, or `null` when there is no status file. */
+export declare function readStatus(sessionId: string): Promise<SessionStatus | null>;
+export declare function writeStatus(sessionId: string, status: SessionStatus): Promise<void>;
+/**
+ * Read-modify-write a status under the session lock.
+ *
+ * NOTE: the session lock is not reentrant — never call this while already
+ * holding the lock for the same session.
+ */
+export declare function updateStatus(sessionId: string, mutate: (status: SessionStatus) => void): Promise<void>;
+export declare function markSessionEnded(sessionId: string): Promise<void>;
+/** Advance an acknowledged cursor. Monotonic: never moves backwards. */
+export declare function advanceCursor(sessionId: string, stream: SpoolStream, nextOffset: number): Promise<void>;
+/**
+ * Create a default status if the session has none.
+ * Caller MUST already hold the session lock.
+ */
+export declare function ensureStatusLocked(sessionId: string): Promise<void>;
+/** Lock-acquiring variant — never call while holding the session lock. */
+export declare function ensureStatus(sessionId: string): Promise<void>;
+//# sourceMappingURL=session-status.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-status.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.ts"],"names":[],"mappings":"AACA,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG1F,2EAA2E;AAC3E,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AAEzD,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,OAAO,EAAE,cAAc,CAAC;IACxB,uEAAuE;IACvE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,YAAY,IAAI,aAAa,CAE5C;AA0BD,mFAAmF;AACnF,wBAAsB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAOjF;AAED,wBAAsB,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzF;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,GACtC,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,wBAAsB,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIvE;AAED,wEAAwE;AACxE,wBAAsB,aAAa,CACjC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnE"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.js

@@ -0,0 +1,82 @@
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import { SPOOL_STREAMS, spoolRoot, statusFile } from './spool-paths.js';
+import { withSessionLock } from './session-lock.js';
+export function createStatus() {
+    return { cursors: { hooks: 0, logs: 0, metrics: 0, traces: 0 }, waitTicks: 0 };
+}
+function toOffset(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value > 0 ? Math.floor(value) : 0;
+}
+/**
+ * Coerce whatever is on disk into a well-formed status. Unknown fields (e.g.
+ * the removed `*Written` flags, flat cursors, `forwarded`) are dropped.
+ */
+function normalizeStatus(raw) {
+    const status = createStatus();
+    if (typeof raw !== 'object' || raw === null)
+        return status;
+    const source = raw;
+    const cursors = (source['cursors'] ?? {});
+    for (const stream of SPOOL_STREAMS) {
+        status.cursors[stream] = toOffset(cursors[stream]);
+    }
+    status.waitTicks = toOffset(source['waitTicks']);
+    const endedAt = toOffset(source['endedAt']);
+    if (endedAt > 0)
+        status.endedAt = endedAt;
+    return status;
+}
+/** Read and normalize a session status, or `null` when there is no status file. */
+export async function readStatus(sessionId) {
+    try {
+        const raw = await readFile(statusFile(sessionId), 'utf-8');
+        return normalizeStatus(JSON.parse(raw));
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeStatus(sessionId, status) {
+    await mkdir(spoolRoot(), { recursive: true });
+    await writeFile(statusFile(sessionId), JSON.stringify(status), 'utf-8');
+}
+/**
+ * Read-modify-write a status under the session lock.
+ *
+ * NOTE: the session lock is not reentrant — never call this while already
+ * holding the lock for the same session.
+ */
+export async function updateStatus(sessionId, mutate) {
+    await withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status)
+            return; // session was swept — nothing to acknowledge
+        mutate(status);
+        await writeStatus(sessionId, status);
+    });
+}
+export async function markSessionEnded(sessionId) {
+    await updateStatus(sessionId, (status) => {
+        status.endedAt ??= Date.now();
+    });
+}
+/** Advance an acknowledged cursor. Monotonic: never moves backwards. */
+export async function advanceCursor(sessionId, stream, nextOffset) {
+    await updateStatus(sessionId, (status) => {
+        status.cursors[stream] = Math.max(status.cursors[stream], nextOffset);
+    });
+}
+/**
+ * Create a default status if the session has none.
+ * Caller MUST already hold the session lock.
+ */
+export async function ensureStatusLocked(sessionId) {
+    if (await readStatus(sessionId))
+        return;
+    await writeStatus(sessionId, createStatus());
+}
+/** Lock-acquiring variant — never call while holding the session lock. */
+export async function ensureStatus(sessionId) {
+    await withSessionLock(sessionId, () => ensureStatusLocked(sessionId));
+}
+//# sourceMappingURL=session-status.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-status.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/session-status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAqBpD,MAAM,UAAU,YAAY;IAC1B,OAAO,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,GAAY;IACnC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAE3D,MAAM,MAAM,GAAG,GAA8B,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAA4B,CAAC;IACrE,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IAE1C,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,SAAiB;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAiB,EAAE,MAAqB;IACxE,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,MAAuC;IAEvC,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,6CAA6C;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,SAAiB;IACtD,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;QACvC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,MAAmB,EACnB,UAAkB;IAElB,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;QACvC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,IAAI,MAAM,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IACxC,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB;IAClD,MAAM,eAAe,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Env-backed tuning for the OTLP spool. Read lazily on every call so overrides
+ * take effect without a restart.
+ *
+ * Duration knobs are in minutes and accept fractions (`0.5` = 30s). A missing,
+ * unparsable, zero or negative value falls back to the default — notably, a
+ * zero interval would otherwise degenerate into a spin loop.
+ */
+/** How often pending spool bytes are forwarded. */
+export declare function sendIntervalMs(): number;
+/** How often drained, inactive sessions are garbage-collected. */
+export declare function sweepIntervalMs(): number;
+/**
+ * Ticks a hooks-only session waits for OTEL data before being force-forwarded.
+ *
+ * NOTE: this is a tick count, so the effective wait is
+ * `sendIntervalMs() * hooksOnlyWaitTicks()` — currently ~6 minutes, chosen to
+ * out-wait one OTEL exporter flush cycle (~60s) plus a send interval.
+ * Revisit this value whenever OTLP_SEND_INTERVAL_MINUTES changes.
+ */
+export declare function hooksOnlyWaitTicks(): number;
+/** Whether a hooks-only session may be forwarded without any OTEL data. */
+export declare function hooksOnlyForwardAllowed(): boolean;
+/**
+ * Quiet period after a normally ended session (`endedAt`) before its drained
+ * spool may be deleted. Sized to cover a late OTEL export plus the send
+ * interval needed to forward it.
+ */
+export declare function endedSessionGraceMs(): number;
+/**
+ * Inactivity period after which a session that never reported `SessionEnd` is
+ * considered abandoned and its drained spool may be deleted. Measured from the
+ * latest spool-file write, never from session creation or cursor updates.
+ */
+export declare function abandonedSessionGraceMs(): number;
+//# sourceMappingURL=spool-config.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-config.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAoBH,mDAAmD;AACnD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,kEAAkE;AAClE,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED,2EAA2E;AAC3E,wBAAgB,uBAAuB,IAAI,OAAO,CAEjD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,CAEhD"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.js

@@ -0,0 +1,62 @@
+/**
+ * Env-backed tuning for the OTLP spool. Read lazily on every call so overrides
+ * take effect without a restart.
+ *
+ * Duration knobs are in minutes and accept fractions (`0.5` = 30s). A missing,
+ * unparsable, zero or negative value falls back to the default — notably, a
+ * zero interval would otherwise degenerate into a spin loop.
+ */
+const MINUTE_MS = 60_000;
+function envMinutesMs(name, fallbackMinutes) {
+    const parsed = Number(process.env[name]);
+    const minutes = Number.isFinite(parsed) && parsed > 0 ? parsed : fallbackMinutes;
+    return minutes * MINUTE_MS;
+}
+function envCount(name, fallbackValue) {
+    const parsed = Number(process.env[name]);
+    return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallbackValue;
+}
+function envBoolean(name, fallbackValue) {
+    const raw = process.env[name];
+    return raw === undefined ? fallbackValue : raw === 'true';
+}
+/** How often pending spool bytes are forwarded. */
+export function sendIntervalMs() {
+    return envMinutesMs('OTLP_SEND_INTERVAL_MINUTES', 2);
+}
+/** How often drained, inactive sessions are garbage-collected. */
+export function sweepIntervalMs() {
+    return envMinutesMs('OTLP_SWEEP_INTERVAL_MINUTES', 15);
+}
+/**
+ * Ticks a hooks-only session waits for OTEL data before being force-forwarded.
+ *
+ * NOTE: this is a tick count, so the effective wait is
+ * `sendIntervalMs() * hooksOnlyWaitTicks()` — currently ~6 minutes, chosen to
+ * out-wait one OTEL exporter flush cycle (~60s) plus a send interval.
+ * Revisit this value whenever OTLP_SEND_INTERVAL_MINUTES changes.
+ */
+export function hooksOnlyWaitTicks() {
+    return envCount('OTLP_SEND_MAX_ATTEMPTS', 3);
+}
+/** Whether a hooks-only session may be forwarded without any OTEL data. */
+export function hooksOnlyForwardAllowed() {
+    return envBoolean('OTLP_ALLOW_HOOKS_ONLY_FORWARD', true);
+}
+/**
+ * Quiet period after a normally ended session (`endedAt`) before its drained
+ * spool may be deleted. Sized to cover a late OTEL export plus the send
+ * interval needed to forward it.
+ */
+export function endedSessionGraceMs() {
+    return envMinutesMs('OTLP_ENDED_SESSION_GRACE_MINUTES', 15);
+}
+/**
+ * Inactivity period after which a session that never reported `SessionEnd` is
+ * considered abandoned and its drained spool may be deleted. Measured from the
+ * latest spool-file write, never from session creation or cursor updates.
+ */
+export function abandonedSessionGraceMs() {
+    return envMinutesMs('OTLP_ABANDONED_SESSION_GRACE_MINUTES', 60);
+}
+//# sourceMappingURL=spool-config.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-config.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-config.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,SAAS,GAAG,MAAM,CAAC;AAEzB,SAAS,YAAY,CAAC,IAAY,EAAE,eAAuB;IACzD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;IACjF,OAAO,OAAO,GAAG,SAAS,CAAC;AAC7B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,aAAqB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,aAAsB;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC;AAC5D,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,cAAc;IAC5B,OAAO,YAAY,CAAC,4BAA4B,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,eAAe;IAC7B,OAAO,YAAY,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,QAAQ,CAAC,wBAAwB,EAAE,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB;IACrC,OAAO,UAAU,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB;IACjC,OAAO,YAAY,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,YAAY,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;AAClE,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.d.ts

@@ -0,0 +1,39 @@
+import { type SpoolStream } from './spool-paths.js';
+/**
+ * Append spool bytes and make the session discoverable.
+ *
+ * Holds the session lock so an append can never interleave with a forwarder
+ * snapshot (torn record), a cursor advance, or a sweep deletion.
+ */
+export declare function appendSpool(sessionId: string, stream: SpoolStream, data: string | Buffer): Promise<void>;
+export interface PendingBytes {
+    /** Cursor the snapshot was taken from — pass it back when acknowledging. */
+    cursor: number;
+    bytes: Buffer;
+}
+/**
+ * Consistent snapshot of the bytes pending for an OTEL stream.
+ *
+ * The lock guarantees the snapshot never contains a partially written append,
+ * so the protobuf payload handed to the backend is always whole.
+ * Must NOT be called while already holding the session lock.
+ */
+export declare function snapshotPendingBytes(sessionId: string, stream: SpoolStream): Promise<PendingBytes | null>;
+export interface PendingHookBatch {
+    cursor: number;
+    /** Complete, newline-terminated NDJSON records. */
+    records: string[];
+    /** Exact number of source bytes these records occupy, including newlines. */
+    byteLength: number;
+}
+/**
+ * Consistent snapshot of the complete NDJSON records pending for hooks.
+ *
+ * The chunk is cut at the last newline byte, so an incomplete trailing record
+ * stays pending and `byteLength` is a byte-exact acknowledgement amount.
+ * Cutting on a newline is safe for UTF-8: `0x0a` cannot occur inside a
+ * multi-byte sequence.
+ * Must NOT be called while already holding the session lock.
+ */
+export declare function snapshotPendingHookRecords(sessionId: string): Promise<PendingHookBatch | null>;
+//# sourceMappingURL=spool-io.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-io.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA2C3E;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,GAAG,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAID,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAQ9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoBlC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.js

@@ -0,0 +1,110 @@
+import { appendFile, mkdir, open, stat } from 'node:fs/promises';
+import { spoolRoot, streamFile } from './spool-paths.js';
+import { withSessionLock } from './session-lock.js';
+import { createStatus, readStatus, writeStatus } from './session-status.js';
+const NEWLINE = 0x0a;
+/* ------------------------------------------------------- unlocked internals --- */
+// These assume the caller already holds the session lock.
+async function fileExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Range-read everything after `cursor`. Never touches the acknowledged prefix. */
+async function readRange(sessionId, stream, cursor) {
+    let handle;
+    try {
+        handle = await open(streamFile(sessionId, stream), 'r');
+    }
+    catch {
+        return null; // missing file => nothing pending
+    }
+    try {
+        const { size } = await handle.stat();
+        if (size <= cursor)
+            return null; // drained
+        const buffer = Buffer.allocUnsafe(size - cursor);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, cursor);
+        return bytesRead > 0 ? buffer.subarray(0, bytesRead) : null;
+    }
+    finally {
+        await handle.close();
+    }
+}
+/* --------------------------------------------------------------- producers --- */
+/**
+ * Append spool bytes and make the session discoverable.
+ *
+ * Holds the session lock so an append can never interleave with a forwarder
+ * snapshot (torn record), a cursor advance, or a sweep deletion.
+ */
+export async function appendSpool(sessionId, stream, data) {
+    await withSessionLock(sessionId, async () => {
+        await mkdir(spoolRoot(), { recursive: true });
+        const path = streamFile(sessionId, stream);
+        const recreated = !(await fileExists(path));
+        await appendFile(path, data);
+        const status = await readStatus(sessionId);
+        if (!status) {
+            await writeStatus(sessionId, createStatus());
+            return;
+        }
+        // A recreated file restarts at offset 0, so a cursor left over from a swept
+        // (or partially deleted) session would otherwise skip these bytes forever.
+        if (recreated && status.cursors[stream] !== 0) {
+            status.cursors[stream] = 0;
+            await writeStatus(sessionId, status);
+        }
+    });
+}
+/**
+ * Consistent snapshot of the bytes pending for an OTEL stream.
+ *
+ * The lock guarantees the snapshot never contains a partially written append,
+ * so the protobuf payload handed to the backend is always whole.
+ * Must NOT be called while already holding the session lock.
+ */
+export async function snapshotPendingBytes(sessionId, stream) {
+    return withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status)
+            return null; // session was swept
+        const cursor = status.cursors[stream];
+        const bytes = await readRange(sessionId, stream, cursor);
+        return bytes ? { cursor, bytes } : null;
+    });
+}
+/**
+ * Consistent snapshot of the complete NDJSON records pending for hooks.
+ *
+ * The chunk is cut at the last newline byte, so an incomplete trailing record
+ * stays pending and `byteLength` is a byte-exact acknowledgement amount.
+ * Cutting on a newline is safe for UTF-8: `0x0a` cannot occur inside a
+ * multi-byte sequence.
+ * Must NOT be called while already holding the session lock.
+ */
+export async function snapshotPendingHookRecords(sessionId) {
+    return withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status)
+            return null;
+        const cursor = status.cursors.hooks;
+        const pending = await readRange(sessionId, 'hooks', cursor);
+        if (!pending)
+            return null;
+        const lastNewline = pending.lastIndexOf(NEWLINE);
+        if (lastNewline < 0)
+            return null; // no complete record yet
+        const complete = pending.subarray(0, lastNewline + 1);
+        const records = complete
+            .toString('utf-8')
+            .split('\n')
+            .filter((line) => line.trim().length > 0);
+        return { cursor, records, byteLength: complete.length };
+    });
+}
+//# sourceMappingURL=spool-io.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-io.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE5E,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,oFAAoF;AACpF,0DAA0D;AAE1D,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,MAAmB,EACnB,MAAc;IAEd,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;QACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,mFAAmF;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,MAAmB,EACnB,IAAqB;IAErB,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,MAAmB;IAEnB,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB;IAEjB,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,WAAW,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;QAE3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ;aACrB,QAAQ,CAAC,OAAO,CAAC;aACjB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE5C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Root directory where all OTLP analytics spool files are stored.
+ * Resolves to `~/.codemie/proxy/otlp-spool`.
+ */
+export declare function spoolRoot(): string;
+/** OTEL binary streams (protobuf payloads produced by the agent runtime). */
+export declare const OTEL_STREAMS: readonly ["logs", "metrics", "traces"];
+export type OtelStream = (typeof OTEL_STREAMS)[number];
+/** Every spool stream, in a stable order. */
+export declare const SPOOL_STREAMS: readonly ["hooks", "logs", "metrics", "traces"];
+export type SpoolStream = (typeof SPOOL_STREAMS)[number];
+export declare const STATUS_EXT = ".status";
+/** Spool data file for one stream of a session. */
+export declare function streamFile(sessionId: string, stream: SpoolStream): string;
+/** Delivery bookkeeping file for a session. */
+export declare function statusFile(sessionId: string): string;
+/**
+ * All session ids currently present in the spool root.
+ *
+ * Derived from any spool artifact (data or status) so that a session whose
+ * producer crashed before writing a status file is still discoverable.
+ */
+export declare function listSessionIds(): Promise<string[]>;
+//# sourceMappingURL=spool-paths.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-paths.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,6EAA6E;AAC7E,eAAO,MAAM,YAAY,wCAAyC,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,6CAA6C;AAC7C,eAAO,MAAM,aAAa,iDAAsC,CAAC;AACjE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AASzD,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAEzE;AAED,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAcxD"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.js

@@ -0,0 +1,53 @@
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { getCodemiePath } from '../../../../../../utils/paths.js';
+/**
+ * Root directory where all OTLP analytics spool files are stored.
+ * Resolves to `~/.codemie/proxy/otlp-spool`.
+ */
+export function spoolRoot() {
+    return getCodemiePath('proxy', 'otlp-spool');
+}
+/** OTEL binary streams (protobuf payloads produced by the agent runtime). */
+export const OTEL_STREAMS = ['logs', 'metrics', 'traces'];
+/** Every spool stream, in a stable order. */
+export const SPOOL_STREAMS = ['hooks', ...OTEL_STREAMS];
+const STREAM_EXT = {
+    hooks: '.hooks.ndjson',
+    logs: '.otel_logs.bin',
+    metrics: '.otel_metrics.bin',
+    traces: '.otel_traces.bin',
+};
+export const STATUS_EXT = '.status';
+/** Spool data file for one stream of a session. */
+export function streamFile(sessionId, stream) {
+    return join(spoolRoot(), sessionId + STREAM_EXT[stream]);
+}
+/** Delivery bookkeeping file for a session. */
+export function statusFile(sessionId) {
+    return join(spoolRoot(), sessionId + STATUS_EXT);
+}
+const ALL_SUFFIXES = [STATUS_EXT, ...Object.values(STREAM_EXT)];
+/**
+ * All session ids currently present in the spool root.
+ *
+ * Derived from any spool artifact (data or status) so that a session whose
+ * producer crashed before writing a status file is still discoverable.
+ */
+export async function listSessionIds() {
+    let entries;
+    try {
+        entries = await readdir(spoolRoot());
+    }
+    catch {
+        return []; // spool root may not exist yet
+    }
+    const ids = new Set();
+    for (const entry of entries) {
+        const suffix = ALL_SUFFIXES.find((suffix) => entry.length > suffix.length && entry.endsWith(suffix));
+        if (suffix)
+            ids.add(entry.slice(0, -suffix.length));
+    }
+    return [...ids];
+}
+//# sourceMappingURL=spool-paths.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-paths.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAGnE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAU,CAAC;AAGjE,MAAM,UAAU,GAAgC;IAC9C,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAmB;IAC/D,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,YAAY,GAAsB,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,+BAA+B;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.d.ts

@@ -0,0 +1,39 @@
+import { type SpoolStream } from './spool-paths.js';
+import type { SessionStatus } from './session-status.js';
+export interface StreamState {
+    exists: boolean;
+    /** Current file size in bytes (0 when missing). */
+    size: number;
+    /** Acknowledged byte offset from the status file. */
+    cursor: number;
+    /** Last write time of the spool file, or `null` when missing. */
+    mtimeMs: number | null;
+}
+export interface SpoolState {
+    sessionId: string;
+    streams: Record<SpoolStream, StreamState>;
+    /** Latest mtime across existing spool data files — i.e. last producer write. */
+    latestWriteMs: number | null;
+}
+/**
+ * Snapshot the filesystem truth for a session: spool files are the source of
+ * truth for *what was written*, cursors for *what was delivered*.
+ */
+export declare function readSpoolState(sessionId: string, status: SessionStatus): Promise<SpoolState>;
+/** The stream was written at some point (sticky, survives the cursor reaching EOF). */
+export declare const hasData: (state: StreamState) => boolean;
+/** Bytes exist after the cursor and still need to be delivered. */
+export declare const hasPending: (state: StreamState) => boolean;
+/** Everything written has been acknowledged (missing/empty files are drained). */
+export declare const isDrained: (state: StreamState) => boolean;
+export declare function hooksGroupPresent(spool: SpoolState): boolean;
+export declare function otelGroupPresent(spool: SpoolState): boolean;
+export declare function hasPendingData(spool: SpoolState): boolean;
+export declare function isSessionDrained(spool: SpoolState): boolean;
+/**
+ * Last producer activity. Spool appends bump spool-file mtimes; forwarding and
+ * cursor writes only touch the status file, so the status mtime is a fallback
+ * used solely when no spool data file exists.
+ */
+export declare function lastActivityMs(spool: SpoolState): Promise<number | null>;
+//# sourceMappingURL=spool-state.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-state.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1C,gFAAgF;IAChF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,UAAU,CAAC,CAqBrB;AAED,uFAAuF;AACvF,eAAO,MAAM,OAAO,GAAI,OAAO,WAAW,KAAG,OAAyB,CAAC;AAEvE,mEAAmE;AACnE,eAAO,MAAM,UAAU,GAAI,OAAO,WAAW,KAAG,OAAoC,CAAC;AAErF,kFAAkF;AAClF,eAAO,MAAM,SAAS,GAAI,OAAO,WAAW,KAAG,OAAqC,CAAC;AAErF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ9E"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.js

@@ -0,0 +1,61 @@
+import { stat } from 'node:fs/promises';
+import { OTEL_STREAMS, SPOOL_STREAMS, statusFile, streamFile, } from './spool-paths.js';
+/**
+ * Snapshot the filesystem truth for a session: spool files are the source of
+ * truth for *what was written*, cursors for *what was delivered*.
+ */
+export async function readSpoolState(sessionId, status) {
+    const entries = await Promise.all(SPOOL_STREAMS.map(async (stream) => {
+        const cursor = status.cursors[stream];
+        try {
+            const info = await stat(streamFile(sessionId, stream));
+            return [stream, { exists: true, size: info.size, cursor, mtimeMs: info.mtimeMs }];
+        }
+        catch {
+            return [stream, { exists: false, size: 0, cursor, mtimeMs: null }];
+        }
+    }));
+    const streams = Object.fromEntries(entries);
+    const latestWriteMs = SPOOL_STREAMS.reduce((latest, stream) => {
+        const mtimeMs = streams[stream].mtimeMs;
+        if (mtimeMs === null)
+            return latest;
+        return latest === null ? mtimeMs : Math.max(latest, mtimeMs);
+    }, null);
+    return { sessionId, streams, latestWriteMs };
+}
+/** The stream was written at some point (sticky, survives the cursor reaching EOF). */
+export const hasData = (state) => state.size > 0;
+/** Bytes exist after the cursor and still need to be delivered. */
+export const hasPending = (state) => state.size > state.cursor;
+/** Everything written has been acknowledged (missing/empty files are drained). */
+export const isDrained = (state) => state.size <= state.cursor;
+export function hooksGroupPresent(spool) {
+    return hasData(spool.streams.hooks);
+}
+export function otelGroupPresent(spool) {
+    return OTEL_STREAMS.some((stream) => hasData(spool.streams[stream]));
+}
+export function hasPendingData(spool) {
+    return SPOOL_STREAMS.some((stream) => hasPending(spool.streams[stream]));
+}
+export function isSessionDrained(spool) {
+    return SPOOL_STREAMS.every((stream) => isDrained(spool.streams[stream]));
+}
+/**
+ * Last producer activity. Spool appends bump spool-file mtimes; forwarding and
+ * cursor writes only touch the status file, so the status mtime is a fallback
+ * used solely when no spool data file exists.
+ */
+export async function lastActivityMs(spool) {
+    if (spool.latestWriteMs !== null)
+        return spool.latestWriteMs;
+    try {
+        const info = await stat(statusFile(spool.sessionId));
+        return info.mtimeMs;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=spool-state.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-state.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,GAEX,MAAM,kBAAkB,CAAC;AAoB1B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAuC,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAqC,CAAC;IAChF,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACpC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC,EAAE,IAAI,CAAC,CAAC;IAET,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;AAEvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;AAErF,kFAAkF;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;AAErF,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB;IACpD,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,aAAa,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Lightweight garbage collection for the OTLP spool.
+ *
+ * Two cleanup paths, both of which require every stream to be drained
+ * (`fileSize === cursor`) so no undelivered bytes are ever destroyed:
+ *
+ * 1. Normally ended sessions (`endedAt` set): deleted once the end grace period
+ *    has elapsed since the later of `endedAt` and the last spool-file write, so
+ *    late hook/OTEL writes postpone cleanup.
+ * 2. Abandoned sessions (no `endedAt`): deleted once the abandonment timeout has
+ *    elapsed since the last spool-file write. Activity is read from spool-file
+ *    mtimes, never from the status file, because cursor updates rewrite the
+ *    status file without any new data arriving.
+ *
+ * Consequence: a live session that stays quiet (and fully drained) for longer
+ * than the abandonment timeout may have its spool removed. That is safe — the
+ * next producer write recreates the status and spool files from scratch.
+ */
+export declare function sweepSpool(): Promise<void>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAShD"}