@codemieai/code 0.15.6 → 0.15.8

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.d.ts

@@ -0,0 +1,39 @@
+import { type SpoolStream } from './spool-paths.js';
+/**
+ * Append spool bytes and make the session discoverable.
+ *
+ * Holds the session lock so an append can never interleave with a forwarder
+ * snapshot (torn record), a cursor advance, or a sweep deletion.
+ */
+export declare function appendSpool(sessionId: string, stream: SpoolStream, data: string | Buffer): Promise<void>;
+export interface PendingBytes {
+    /** Cursor the snapshot was taken from — pass it back when acknowledging. */
+    cursor: number;
+    bytes: Buffer;
+}
+/**
+ * Consistent snapshot of the bytes pending for an OTEL stream.
+ *
+ * The lock guarantees the snapshot never contains a partially written append,
+ * so the protobuf payload handed to the backend is always whole.
+ * Must NOT be called while already holding the session lock.
+ */
+export declare function snapshotPendingBytes(sessionId: string, stream: SpoolStream): Promise<PendingBytes | null>;
+export interface PendingHookBatch {
+    cursor: number;
+    /** Complete, newline-terminated NDJSON records. */
+    records: string[];
+    /** Exact number of source bytes these records occupy, including newlines. */
+    byteLength: number;
+}
+/**
+ * Consistent snapshot of the complete NDJSON records pending for hooks.
+ *
+ * The chunk is cut at the last newline byte, so an incomplete trailing record
+ * stays pending and `byteLength` is a byte-exact acknowledgement amount.
+ * Cutting on a newline is safe for UTF-8: `0x0a` cannot occur inside a
+ * multi-byte sequence.
+ * Must NOT be called while already holding the session lock.
+ */
+export declare function snapshotPendingHookRecords(sessionId: string): Promise<PendingHookBatch | null>;
+//# sourceMappingURL=spool-io.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-io.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.ts"],"names":[],"mappings":"AACA,OAAO,EAAyB,KAAK,WAAW,EAAE,MAAM,kBAAkB,CAAC;AA2C3E;;;;;GAKG;AACH,wBAAsB,WAAW,CAC/B,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,EACnB,IAAI,EAAE,MAAM,GAAG,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAoBf;AAID,MAAM,WAAW,YAAY;IAC3B,4EAA4E;IAC5E,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAQ9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoBlC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.js

@@ -0,0 +1,110 @@
+import { appendFile, mkdir, open, stat } from 'node:fs/promises';
+import { spoolRoot, streamFile } from './spool-paths.js';
+import { withSessionLock } from './session-lock.js';
+import { createStatus, readStatus, writeStatus } from './session-status.js';
+const NEWLINE = 0x0a;
+/* ------------------------------------------------------- unlocked internals --- */
+// These assume the caller already holds the session lock.
+async function fileExists(path) {
+    try {
+        await stat(path);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Range-read everything after `cursor`. Never touches the acknowledged prefix. */
+async function readRange(sessionId, stream, cursor) {
+    let handle;
+    try {
+        handle = await open(streamFile(sessionId, stream), 'r');
+    }
+    catch {
+        return null; // missing file => nothing pending
+    }
+    try {
+        const { size } = await handle.stat();
+        if (size <= cursor)
+            return null; // drained
+        const buffer = Buffer.allocUnsafe(size - cursor);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, cursor);
+        return bytesRead > 0 ? buffer.subarray(0, bytesRead) : null;
+    }
+    finally {
+        await handle.close();
+    }
+}
+/* --------------------------------------------------------------- producers --- */
+/**
+ * Append spool bytes and make the session discoverable.
+ *
+ * Holds the session lock so an append can never interleave with a forwarder
+ * snapshot (torn record), a cursor advance, or a sweep deletion.
+ */
+export async function appendSpool(sessionId, stream, data) {
+    await withSessionLock(sessionId, async () => {
+        await mkdir(spoolRoot(), { recursive: true });
+        const path = streamFile(sessionId, stream);
+        const recreated = !(await fileExists(path));
+        await appendFile(path, data);
+        const status = await readStatus(sessionId);
+        if (!status) {
+            await writeStatus(sessionId, createStatus());
+            return;
+        }
+        // A recreated file restarts at offset 0, so a cursor left over from a swept
+        // (or partially deleted) session would otherwise skip these bytes forever.
+        if (recreated && status.cursors[stream] !== 0) {
+            status.cursors[stream] = 0;
+            await writeStatus(sessionId, status);
+        }
+    });
+}
+/**
+ * Consistent snapshot of the bytes pending for an OTEL stream.
+ *
+ * The lock guarantees the snapshot never contains a partially written append,
+ * so the protobuf payload handed to the backend is always whole.
+ * Must NOT be called while already holding the session lock.
+ */
+export async function snapshotPendingBytes(sessionId, stream) {
+    return withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status)
+            return null; // session was swept
+        const cursor = status.cursors[stream];
+        const bytes = await readRange(sessionId, stream, cursor);
+        return bytes ? { cursor, bytes } : null;
+    });
+}
+/**
+ * Consistent snapshot of the complete NDJSON records pending for hooks.
+ *
+ * The chunk is cut at the last newline byte, so an incomplete trailing record
+ * stays pending and `byteLength` is a byte-exact acknowledgement amount.
+ * Cutting on a newline is safe for UTF-8: `0x0a` cannot occur inside a
+ * multi-byte sequence.
+ * Must NOT be called while already holding the session lock.
+ */
+export async function snapshotPendingHookRecords(sessionId) {
+    return withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status)
+            return null;
+        const cursor = status.cursors.hooks;
+        const pending = await readRange(sessionId, 'hooks', cursor);
+        if (!pending)
+            return null;
+        const lastNewline = pending.lastIndexOf(NEWLINE);
+        if (lastNewline < 0)
+            return null; // no complete record yet
+        const complete = pending.subarray(0, lastNewline + 1);
+        const records = complete
+            .toString('utf-8')
+            .split('\n')
+            .filter((line) => line.trim().length > 0);
+        return { cursor, records, byteLength: complete.length };
+    });
+}
+//# sourceMappingURL=spool-io.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-io.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-io.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAoB,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE5E,MAAM,OAAO,GAAG,IAAI,CAAC;AAErB,oFAAoF;AACpF,0DAA0D;AAE1D,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,KAAK,UAAU,SAAS,CACtB,SAAiB,EACjB,MAAmB,EACnB,MAAc;IAEd,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kCAAkC;IACjD,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,UAAU;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,GAAG,MAAM,CAAC,CAAC;QACjD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1E,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,mFAAmF;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAiB,EACjB,MAAmB,EACnB,IAAqB;IAErB,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE9C,MAAM,IAAI,GAAG,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,WAAW,CAAC,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC;YAC7C,OAAO;QACT,CAAC;QACD,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,SAAS,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,MAAmB;IAEnB,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,oBAAoB;QAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAUD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB;IAEjB,OAAO,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAEzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAE1B,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,WAAW,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,yBAAyB;QAE3D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,QAAQ;aACrB,QAAQ,CAAC,OAAO,CAAC;aACjB,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAE5C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Root directory where all OTLP analytics spool files are stored.
+ * Resolves to `~/.codemie/proxy/otlp-spool`.
+ */
+export declare function spoolRoot(): string;
+/** OTEL binary streams (protobuf payloads produced by the agent runtime). */
+export declare const OTEL_STREAMS: readonly ["logs", "metrics", "traces"];
+export type OtelStream = (typeof OTEL_STREAMS)[number];
+/** Every spool stream, in a stable order. */
+export declare const SPOOL_STREAMS: readonly ["hooks", "logs", "metrics", "traces"];
+export type SpoolStream = (typeof SPOOL_STREAMS)[number];
+export declare const STATUS_EXT = ".status";
+/** Spool data file for one stream of a session. */
+export declare function streamFile(sessionId: string, stream: SpoolStream): string;
+/** Delivery bookkeeping file for a session. */
+export declare function statusFile(sessionId: string): string;
+/**
+ * All session ids currently present in the spool root.
+ *
+ * Derived from any spool artifact (data or status) so that a session whose
+ * producer crashed before writing a status file is still discoverable.
+ */
+export declare function listSessionIds(): Promise<string[]>;
+//# sourceMappingURL=spool-paths.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-paths.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,6EAA6E;AAC7E,eAAO,MAAM,YAAY,wCAAyC,CAAC;AACnE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,6CAA6C;AAC7C,eAAO,MAAM,aAAa,iDAAsC,CAAC;AACjE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AASzD,eAAO,MAAM,UAAU,YAAY,CAAC;AAEpC,mDAAmD;AACnD,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAEzE;AAED,+CAA+C;AAC/C,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEpD;AAID;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAcxD"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.js

@@ -0,0 +1,53 @@
+import { readdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { getCodemiePath } from '../../../../../../utils/paths.js';
+/**
+ * Root directory where all OTLP analytics spool files are stored.
+ * Resolves to `~/.codemie/proxy/otlp-spool`.
+ */
+export function spoolRoot() {
+    return getCodemiePath('proxy', 'otlp-spool');
+}
+/** OTEL binary streams (protobuf payloads produced by the agent runtime). */
+export const OTEL_STREAMS = ['logs', 'metrics', 'traces'];
+/** Every spool stream, in a stable order. */
+export const SPOOL_STREAMS = ['hooks', ...OTEL_STREAMS];
+const STREAM_EXT = {
+    hooks: '.hooks.ndjson',
+    logs: '.otel_logs.bin',
+    metrics: '.otel_metrics.bin',
+    traces: '.otel_traces.bin',
+};
+export const STATUS_EXT = '.status';
+/** Spool data file for one stream of a session. */
+export function streamFile(sessionId, stream) {
+    return join(spoolRoot(), sessionId + STREAM_EXT[stream]);
+}
+/** Delivery bookkeeping file for a session. */
+export function statusFile(sessionId) {
+    return join(spoolRoot(), sessionId + STATUS_EXT);
+}
+const ALL_SUFFIXES = [STATUS_EXT, ...Object.values(STREAM_EXT)];
+/**
+ * All session ids currently present in the spool root.
+ *
+ * Derived from any spool artifact (data or status) so that a session whose
+ * producer crashed before writing a status file is still discoverable.
+ */
+export async function listSessionIds() {
+    let entries;
+    try {
+        entries = await readdir(spoolRoot());
+    }
+    catch {
+        return []; // spool root may not exist yet
+    }
+    const ids = new Set();
+    for (const entry of entries) {
+        const suffix = ALL_SUFFIXES.find((suffix) => entry.length > suffix.length && entry.endsWith(suffix));
+        if (suffix)
+            ids.add(entry.slice(0, -suffix.length));
+    }
+    return [...ids];
+}
+//# sourceMappingURL=spool-paths.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-paths.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAU,CAAC;AAGnE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,GAAG,YAAY,CAAU,CAAC;AAGjE,MAAM,UAAU,GAAgC;IAC9C,KAAK,EAAE,eAAe;IACtB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,mBAAmB;IAC5B,MAAM,EAAE,kBAAkB;CAC3B,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC;AAEpC,mDAAmD;AACnD,MAAM,UAAU,UAAU,CAAC,SAAiB,EAAE,MAAmB;IAC/D,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,UAAU,CAAC,SAAiB;IAC1C,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,GAAG,UAAU,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,YAAY,GAAsB,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,+BAA+B;IAC5C,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrG,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.d.ts

@@ -0,0 +1,39 @@
+import { type SpoolStream } from './spool-paths.js';
+import type { SessionStatus } from './session-status.js';
+export interface StreamState {
+    exists: boolean;
+    /** Current file size in bytes (0 when missing). */
+    size: number;
+    /** Acknowledged byte offset from the status file. */
+    cursor: number;
+    /** Last write time of the spool file, or `null` when missing. */
+    mtimeMs: number | null;
+}
+export interface SpoolState {
+    sessionId: string;
+    streams: Record<SpoolStream, StreamState>;
+    /** Latest mtime across existing spool data files — i.e. last producer write. */
+    latestWriteMs: number | null;
+}
+/**
+ * Snapshot the filesystem truth for a session: spool files are the source of
+ * truth for *what was written*, cursors for *what was delivered*.
+ */
+export declare function readSpoolState(sessionId: string, status: SessionStatus): Promise<SpoolState>;
+/** The stream was written at some point (sticky, survives the cursor reaching EOF). */
+export declare const hasData: (state: StreamState) => boolean;
+/** Bytes exist after the cursor and still need to be delivered. */
+export declare const hasPending: (state: StreamState) => boolean;
+/** Everything written has been acknowledged (missing/empty files are drained). */
+export declare const isDrained: (state: StreamState) => boolean;
+export declare function hooksGroupPresent(spool: SpoolState): boolean;
+export declare function otelGroupPresent(spool: SpoolState): boolean;
+export declare function hasPendingData(spool: SpoolState): boolean;
+export declare function isSessionDrained(spool: SpoolState): boolean;
+/**
+ * Last producer activity. Spool appends bump spool-file mtimes; forwarding and
+ * cursor writes only touch the status file, so the status mtime is a fallback
+ * used solely when no spool data file exists.
+ */
+export declare function lastActivityMs(spool: SpoolState): Promise<number | null>;
+//# sourceMappingURL=spool-state.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-state.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IACf,iEAAiE;IACjE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1C,gFAAgF;IAChF,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,UAAU,CAAC,CAqBrB;AAED,uFAAuF;AACvF,eAAO,MAAM,OAAO,GAAI,OAAO,WAAW,KAAG,OAAyB,CAAC;AAEvE,mEAAmE;AACnE,eAAO,MAAM,UAAU,GAAI,OAAO,WAAW,KAAG,OAAoC,CAAC;AAErF,kFAAkF;AAClF,eAAO,MAAM,SAAS,GAAI,OAAO,WAAW,KAAG,OAAqC,CAAC;AAErF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAEzD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAE3D;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ9E"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.js

@@ -0,0 +1,61 @@
+import { stat } from 'node:fs/promises';
+import { OTEL_STREAMS, SPOOL_STREAMS, statusFile, streamFile, } from './spool-paths.js';
+/**
+ * Snapshot the filesystem truth for a session: spool files are the source of
+ * truth for *what was written*, cursors for *what was delivered*.
+ */
+export async function readSpoolState(sessionId, status) {
+    const entries = await Promise.all(SPOOL_STREAMS.map(async (stream) => {
+        const cursor = status.cursors[stream];
+        try {
+            const info = await stat(streamFile(sessionId, stream));
+            return [stream, { exists: true, size: info.size, cursor, mtimeMs: info.mtimeMs }];
+        }
+        catch {
+            return [stream, { exists: false, size: 0, cursor, mtimeMs: null }];
+        }
+    }));
+    const streams = Object.fromEntries(entries);
+    const latestWriteMs = SPOOL_STREAMS.reduce((latest, stream) => {
+        const mtimeMs = streams[stream].mtimeMs;
+        if (mtimeMs === null)
+            return latest;
+        return latest === null ? mtimeMs : Math.max(latest, mtimeMs);
+    }, null);
+    return { sessionId, streams, latestWriteMs };
+}
+/** The stream was written at some point (sticky, survives the cursor reaching EOF). */
+export const hasData = (state) => state.size > 0;
+/** Bytes exist after the cursor and still need to be delivered. */
+export const hasPending = (state) => state.size > state.cursor;
+/** Everything written has been acknowledged (missing/empty files are drained). */
+export const isDrained = (state) => state.size <= state.cursor;
+export function hooksGroupPresent(spool) {
+    return hasData(spool.streams.hooks);
+}
+export function otelGroupPresent(spool) {
+    return OTEL_STREAMS.some((stream) => hasData(spool.streams[stream]));
+}
+export function hasPendingData(spool) {
+    return SPOOL_STREAMS.some((stream) => hasPending(spool.streams[stream]));
+}
+export function isSessionDrained(spool) {
+    return SPOOL_STREAMS.every((stream) => isDrained(spool.streams[stream]));
+}
+/**
+ * Last producer activity. Spool appends bump spool-file mtimes; forwarding and
+ * cursor writes only touch the status file, so the status mtime is a fallback
+ * used solely when no spool data file exists.
+ */
+export async function lastActivityMs(spool) {
+    if (spool.latestWriteMs !== null)
+        return spool.latestWriteMs;
+    try {
+        const info = await stat(statusFile(spool.sessionId));
+        return info.mtimeMs;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=spool-state.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spool-state.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/spool-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EACL,YAAY,EACZ,aAAa,EACb,UAAU,EACV,UAAU,GAEX,MAAM,kBAAkB,CAAC;AAoB1B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,SAAiB,EACjB,MAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAC/B,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAuC,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACpF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAqC,CAAC;IAChF,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE;QAC3E,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QACxC,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QACpC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,CAAC,EAAE,IAAI,CAAC,CAAC;IAET,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;AAEvE,mEAAmE;AACnE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;AAErF,kFAAkF;AAClF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAkB,EAAW,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;AAErF,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC9C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAiB;IACpD,IAAI,KAAK,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,aAAa,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Lightweight garbage collection for the OTLP spool.
+ *
+ * Two cleanup paths, both of which require every stream to be drained
+ * (`fileSize === cursor`) so no undelivered bytes are ever destroyed:
+ *
+ * 1. Normally ended sessions (`endedAt` set): deleted once the end grace period
+ *    has elapsed since the later of `endedAt` and the last spool-file write, so
+ *    late hook/OTEL writes postpone cleanup.
+ * 2. Abandoned sessions (no `endedAt`): deleted once the abandonment timeout has
+ *    elapsed since the last spool-file write. Activity is read from spool-file
+ *    mtimes, never from the status file, because cursor updates rewrite the
+ *    status file without any new data arriving.
+ *
+ * Consequence: a live session that stays quiet (and fully drained) for longer
+ * than the abandonment timeout may have its spool removed. That is safe — the
+ * next producer write recreates the status and spool files from scratch.
+ */
+export declare function sweepSpool(): Promise<void>;
+//# sourceMappingURL=sweep.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.ts"],"names":[],"mappings":"AAcA;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAShD"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.js

@@ -0,0 +1,73 @@
+import { unlink } from 'node:fs/promises';
+import { logger } from '../../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../../utils/security.js';
+import { SPOOL_STREAMS, listSessionIds, statusFile, streamFile, } from './spool-paths.js';
+import { withSessionLock } from './session-lock.js';
+import { createStatus, readStatus } from './session-status.js';
+import { isSessionDrained, lastActivityMs, readSpoolState } from './spool-state.js';
+import { abandonedSessionGraceMs, endedSessionGraceMs } from './spool-config.js';
+/**
+ * Lightweight garbage collection for the OTLP spool.
+ *
+ * Two cleanup paths, both of which require every stream to be drained
+ * (`fileSize === cursor`) so no undelivered bytes are ever destroyed:
+ *
+ * 1. Normally ended sessions (`endedAt` set): deleted once the end grace period
+ *    has elapsed since the later of `endedAt` and the last spool-file write, so
+ *    late hook/OTEL writes postpone cleanup.
+ * 2. Abandoned sessions (no `endedAt`): deleted once the abandonment timeout has
+ *    elapsed since the last spool-file write. Activity is read from spool-file
+ *    mtimes, never from the status file, because cursor updates rewrite the
+ *    status file without any new data arriving.
+ *
+ * Consequence: a live session that stays quiet (and fully drained) for longer
+ * than the abandonment timeout may have its spool removed. That is safe — the
+ * next producer write recreates the status and spool files from scratch.
+ */
+export async function sweepSpool() {
+    for (const sessionId of await listSessionIds()) {
+        try {
+            await sweepSession(sessionId);
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            logger.debug('[otlp-sweep] per-session error', ...sanitizeLogArgs({ sessionId, err: msg }));
+        }
+    }
+}
+async function sweepSession(sessionId) {
+    // Cheap unlocked pre-scan to keep the sweep off the hot path...
+    if (!(await isDeletable(sessionId)))
+        return;
+    await withSessionLock(sessionId, async () => {
+        // ...then re-read status, sizes and mtimes under the lock before deleting.
+        if (!(await isDeletable(sessionId)))
+            return;
+        await deleteSession(sessionId);
+    });
+}
+async function isDeletable(sessionId) {
+    const status = (await readStatus(sessionId)) ?? createStatus();
+    const spool = await readSpoolState(sessionId, status);
+    if (!isSessionDrained(spool))
+        return false;
+    const activityMs = await lastActivityMs(spool);
+    if (activityMs === null)
+        return false; // nothing on disk to clean up
+    const idleSince = status.endedAt !== undefined ? Math.max(status.endedAt, activityMs) : activityMs;
+    const timeoutMs = status.endedAt !== undefined ? endedSessionGraceMs() : abandonedSessionGraceMs();
+    return Date.now() - idleSince >= timeoutMs;
+}
+async function deleteSession(sessionId) {
+    const paths = [...SPOOL_STREAMS.map((s) => streamFile(sessionId, s)), statusFile(sessionId)];
+    for (const path of paths) {
+        try {
+            await unlink(path);
+        }
+        catch {
+            // File may already be gone
+        }
+    }
+    logger.debug('[otlp-sweep] swept session', ...sanitizeLogArgs({ sessionId }));
+}
+//# sourceMappingURL=sweep.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sweep.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/sweep.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EACL,aAAa,EACb,cAAc,EACd,UAAU,EACV,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEjF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,KAAK,MAAM,SAAS,IAAI,MAAM,cAAc,EAAE,EAAE,CAAC;QAC/C,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,SAAiB;IAC3C,gEAAgE;IAChE,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;QAAE,OAAO;IAE5C,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,2EAA2E;QAC3E,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO;QAC5C,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;IAC/D,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEtD,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE3C,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,CAAC,8BAA8B;IAErE,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IACnF,MAAM,SAAS,GACb,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC;IAEnF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,SAAS,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,2BAA2B;QAC7B,CAAC;IACH,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.d.ts

@@ -0,0 +1,12 @@
+import type { SSOCredentials, JWTCredentials } from '../../../../../core/types.js';
+/**
+ * Process one tick for a single session: evaluate the completeness gate and,
+ * when it permits forwarding, dispatch a forward pass for the streams that
+ * actually have bytes after their cursor.
+ *
+ * A session stays gate-eligible for as long as its spool files are non-empty,
+ * so the pending-data check is what keeps a fully drained tick from issuing
+ * any HTTP requests.
+ */
+export declare function processSessionTick(sessionId: string, credentials: SSOCredentials | JWTCredentials): Promise<void>;
+//# sourceMappingURL=tick-processor.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tick-processor.d.ts","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAWnF;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CACtC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,cAAc,GAAG,cAAc,GAC3C,OAAO,CAAC,IAAI,CAAC,CA2Df"}

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.js

@@ -0,0 +1,73 @@
+import { logger } from '../../../../../../utils/logger.js';
+import { sanitizeLogArgs } from '../../../../../../utils/security.js';
+import { withSessionLock } from './session-lock.js';
+import { readStatus, writeStatus } from './session-status.js';
+import { OTEL_STREAMS } from './spool-paths.js';
+import { hasPendingData, readSpoolState } from './spool-state.js';
+import { gateDecision } from './completeness-gate.js';
+import { forwardSession } from './forwarder.js';
+import { areCredentialsStale } from './auth-state.js';
+const currentlyForwarding = new Set();
+/**
+ * Process one tick for a single session: evaluate the completeness gate and,
+ * when it permits forwarding, dispatch a forward pass for the streams that
+ * actually have bytes after their cursor.
+ *
+ * A session stays gate-eligible for as long as its spool files are non-empty,
+ * so the pending-data check is what keeps a fully drained tick from issuing
+ * any HTTP requests.
+ */
+export async function processSessionTick(sessionId, credentials) {
+    let shouldForward = false;
+    let hooksOnly = false;
+    await withSessionLock(sessionId, async () => {
+        const status = await readStatus(sessionId);
+        if (!status) {
+            return;
+        }
+        if (areCredentialsStale()) {
+            return;
+        }
+        const spool = await readSpoolState(sessionId, status);
+        const decision = gateDecision(spool, status);
+        const pending = hasPendingData(spool);
+        logger.debug('[otlp-tick] gate decision', ...sanitizeLogArgs({ sessionId, decision, pending, waitTicks: status.waitTicks }));
+        if (decision === 'send' || decision === 'hooks-only-force') {
+            shouldForward = pending;
+            hooksOnly = decision === 'hooks-only-force';
+        }
+        else if (decision === 'wait') {
+            status.waitTicks += 1;
+            await writeStatus(sessionId, status);
+        }
+        else if (decision === 'skip') {
+            // INVARIANT: OTEL-only sessions are never forwarded (per-project allowlist,
+            // see completeness-gate.ts). Advance cursors to EOF so the session counts
+            // as drained and the sweeper deletes it.
+            // Pure in-place mutation: the session lock is not reentrant, so do NOT call
+            // advanceCursor/updateStatus/ensureStatus here.
+            // Without valid credentials the tick returns before the gate, so skipping
+            // resumes after a proxy restart with valid credentials.
+            // Accepted trade-off: a tracked session whose first hook arrives after the
+            // wait limit loses the OTEL bytes received before that.
+            if (pending) {
+                for (const stream of OTEL_STREAMS) {
+                    status.cursors[stream] = Math.max(status.cursors[stream], spool.streams[stream].size);
+                }
+                await writeStatus(sessionId, status);
+            }
+        }
+        // 'noop': nothing written yet
+    });
+    if (!shouldForward || currentlyForwarding.has(sessionId)) {
+        return;
+    }
+    currentlyForwarding.add(sessionId);
+    try {
+        await forwardSession(sessionId, hooksOnly, credentials);
+    }
+    finally {
+        currentlyForwarding.delete(sessionId);
+    }
+}
+//# sourceMappingURL=tick-processor.js.map

package/dist/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tick-processor.js","sourceRoot":"","sources":["../../../../../../../src/providers/plugins/sso/proxy/plugins/otlp-spool/tick-processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE9C;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAiB,EACjB,WAA4C;IAE5C,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IAEtB,MAAM,eAAe,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,mBAAmB,EAAE,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;QAEtC,MAAM,CAAC,KAAK,CACV,2BAA2B,EAC3B,GAAG,eAAe,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAClF,CAAC;QAEF,IAAI,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;YAC3D,aAAa,GAAG,OAAO,CAAC;YACxB,SAAS,GAAG,QAAQ,KAAK,kBAAkB,CAAC;QAC9C,CAAC;aAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;YACtB,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YAC/B,4EAA4E;YAC5E,0EAA0E;YAC1E,yCAAyC;YACzC,4EAA4E;YAC5E,gDAAgD;YAChD,0EAA0E;YAC1E,wDAAwD;YACxD,2EAA2E;YAC3E,wDAAwD;YACxD,IAAI,OAAO,EAAE,CAAC;gBACZ,KAAK,MAAM,MAAM,IAAI,YAAY,EAAE,CAAC;oBAClC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QACD,8BAA8B;IAChC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,OAAO;IACT,CAAC;IAED,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IAC1D,CAAC;YAAS,CAAC;QACT,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;AACH,CAAC"}

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.d.ts

@@ -0,0 +1,14 @@
+import type { ProxyPlugin, PluginContext, ProxyInterceptor } from './types.js';
+export interface OtlpHookSpoolData {
+    agentName: string;
+    raw: string;
+    timestamp: number;
+}
+export declare class OtlpPlugin implements ProxyPlugin {
+    id: string;
+    name: string;
+    version: string;
+    priority: number;
+    createInterceptor(context: PluginContext): ProxyInterceptor;
+}
+//# sourceMappingURL=otlp.plugin.d.ts.map

package/dist/providers/plugins/sso/proxy/plugins/otlp.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp.plugin.d.ts","sourceRoot":"","sources":["../../../../../../src/providers/plugins/sso/proxy/plugins/otlp.plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuB/E,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAuOD,qBAAa,UAAW,YAAW,WAAW;IAC5C,EAAE,SAAmB;IACrB,IAAI,SAAoB;IACxB,OAAO,SAAW;IAClB,QAAQ,SAAM;IAEd,iBAAiB,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB;CAK5D"}