@fabric-harness/sdk 2.1.1 → 2.2.0

package/dist/operational-metrics.js

@@ -0,0 +1,119 @@
+export const FABRIC_OPERATIONAL_METRICS = {
+    requestLatencyMs: 'fabric_harness_request_latency_ms',
+    submissionDurationMs: 'fabric_harness_submission_duration_ms',
+    queueAgeMs: 'fabric_harness_queue_age_ms',
+    errorsTotal: 'fabric_harness_errors_total',
+    approvalWaitMs: 'fabric_harness_approval_wait_ms',
+    recoveryDurationMs: 'fabric_harness_recovery_duration_ms',
+    costUsdTotal: 'fabric_harness_cost_usd_total',
+};
+/** Low-cardinality operational metrics collector suitable for OTel/Prometheus bridging. */
+export function createOperationalMetricsCollector() {
+    const histograms = new Map();
+    const counters = new Map();
+    const accepted = new Map();
+    const approvals = new Map();
+    const observe = (name, value) => {
+        if (!Number.isFinite(value) || value < 0)
+            return;
+        const values = histograms.get(name) ?? [];
+        values.push(value);
+        if (values.length > 10_000)
+            values.splice(0, values.length - 10_000);
+        histograms.set(name, values);
+    };
+    const increment = (name, value = 1) => counters.set(name, (counters.get(name) ?? 0) + value);
+    const approvalKey = (event) => `${event.sessionId ?? ''}:${String(event.data?.approvalId ?? event.data?.id ?? '')}`;
+    const collector = {
+        submissionSink: {
+            record(event) {
+                if (event.type === 'submission_accepted')
+                    accepted.set(event.submissionId, event.at);
+                if (event.type === 'submission_started') {
+                    const acceptedAt = accepted.get(event.submissionId);
+                    if (acceptedAt !== undefined)
+                        observe(FABRIC_OPERATIONAL_METRICS.queueAgeMs, event.at - acceptedAt);
+                    if (event.attemptCount > 1)
+                        increment('fabric_harness_recovery_attempts_total');
+                }
+                if (event.type === 'submission_settled') {
+                    if (event.durationMs !== undefined)
+                        observe(FABRIC_OPERATIONAL_METRICS.submissionDurationMs, event.durationMs);
+                    if (event.outcome === 'failed')
+                        increment(FABRIC_OPERATIONAL_METRICS.errorsTotal);
+                    accepted.delete(event.submissionId);
+                }
+                if (event.type === 'submission_usage' && event.costUsd !== undefined)
+                    increment(FABRIC_OPERATIONAL_METRICS.costUsdTotal, event.costUsd);
+            },
+        },
+        recordEvent(event) {
+            if (event.type === 'approval_requested')
+                approvals.set(approvalKey(event), Date.parse(event.timestamp));
+            if (event.type === 'approval_granted' || event.type === 'approval_denied' || event.type === 'approval_expired') {
+                const key = approvalKey(event);
+                const started = approvals.get(key);
+                if (started !== undefined)
+                    observe(FABRIC_OPERATIONAL_METRICS.approvalWaitMs, Date.parse(event.timestamp) - started);
+                approvals.delete(key);
+            }
+            if (event.type === 'error')
+                increment(FABRIC_OPERATIONAL_METRICS.errorsTotal);
+            if (event.type === 'model_attempt' && typeof event.data?.costUsd === 'number')
+                increment(FABRIC_OPERATIONAL_METRICS.costUsdTotal, event.data.costUsd);
+        },
+        recordRequest(durationMs, outcome = 'ok') {
+            observe(FABRIC_OPERATIONAL_METRICS.requestLatencyMs, durationMs);
+            increment('fabric_harness_requests_total');
+            if (outcome === 'error')
+                increment(FABRIC_OPERATIONAL_METRICS.errorsTotal);
+        },
+        recordRecovery(durationMs, recovered) {
+            observe(FABRIC_OPERATIONAL_METRICS.recoveryDurationMs, durationMs);
+            increment(recovered ? 'fabric_harness_recoveries_total' : 'fabric_harness_recovery_failures_total');
+            if (!recovered)
+                increment(FABRIC_OPERATIONAL_METRICS.errorsTotal);
+        },
+        snapshot() {
+            return {
+                generatedAt: new Date().toISOString(),
+                histograms: Object.fromEntries([...histograms].map(([name, values]) => [name, summarize(values)])),
+                counters: Object.fromEntries(counters),
+            };
+        },
+        openMetrics() {
+            const snapshot = collector.snapshot();
+            const lines = [];
+            for (const [name, values] of Object.entries(snapshot.histograms)) {
+                lines.push(`# TYPE ${name} summary`, `${name}_count ${values.count}`, `${name}_sum ${values.sum}`, `${name}{quantile="0.5"} ${values.p50}`, `${name}{quantile="0.95"} ${values.p95}`, `${name}{quantile="0.99"} ${values.p99}`);
+            }
+            for (const [name, value] of Object.entries(snapshot.counters))
+                lines.push(`# TYPE ${name} counter`, `${name} ${value}`);
+            lines.push('# EOF');
+            return `${lines.join('\n')}\n`;
+        },
+        reset() { histograms.clear(); counters.clear(); accepted.clear(); approvals.clear(); },
+    };
+    return collector;
+}
+export function evaluateOperationalSlos(snapshot, targets) {
+    const checks = [];
+    const add = (metric, actual, target) => { if (actual !== undefined && target !== undefined)
+        checks.push({ metric, actual, target, ok: actual <= target }); };
+    add(FABRIC_OPERATIONAL_METRICS.requestLatencyMs, snapshot.histograms[FABRIC_OPERATIONAL_METRICS.requestLatencyMs]?.p95, targets.requestLatencyP95Ms);
+    add(FABRIC_OPERATIONAL_METRICS.queueAgeMs, snapshot.histograms[FABRIC_OPERATIONAL_METRICS.queueAgeMs]?.p95, targets.queueAgeP95Ms);
+    add(FABRIC_OPERATIONAL_METRICS.approvalWaitMs, snapshot.histograms[FABRIC_OPERATIONAL_METRICS.approvalWaitMs]?.p95, targets.approvalWaitP95Ms);
+    add(FABRIC_OPERATIONAL_METRICS.recoveryDurationMs, snapshot.histograms[FABRIC_OPERATIONAL_METRICS.recoveryDurationMs]?.p95, targets.recoveryP95Ms);
+    const requests = snapshot.counters.fabric_harness_requests_total ?? 0;
+    add('fabric_harness_error_rate', requests > 0 ? (snapshot.counters[FABRIC_OPERATIONAL_METRICS.errorsTotal] ?? 0) / requests : 0, targets.errorRateMax);
+    add(FABRIC_OPERATIONAL_METRICS.costUsdTotal, snapshot.counters[FABRIC_OPERATIONAL_METRICS.costUsdTotal] ?? 0, targets.costUsdMax);
+    return { ok: checks.every((check) => check.ok), checks };
+}
+function summarize(values) {
+    if (values.length === 0)
+        return { count: 0, sum: 0, max: 0, p50: 0, p95: 0, p99: 0 };
+    const sorted = [...values].sort((a, b) => a - b);
+    const percentile = (ratio) => sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * ratio) - 1)] ?? 0;
+    return { count: sorted.length, sum: sorted.reduce((sum, value) => sum + value, 0), max: sorted.at(-1) ?? 0, p50: percentile(.5), p95: percentile(.95), p99: percentile(.99) };
+}
+//# sourceMappingURL=operational-metrics.js.map

package/dist/operational-metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operational-metrics.js","sourceRoot":"","sources":["../src/operational-metrics.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,gBAAgB,EAAE,mCAAmC;IACrD,oBAAoB,EAAE,uCAAuC;IAC7D,UAAU,EAAE,6BAA6B;IACzC,WAAW,EAAE,6BAA6B;IAC1C,cAAc,EAAE,iCAAiC;IACjD,kBAAkB,EAAE,qCAAqC;IACzD,YAAY,EAAE,+BAA+B;CACrC,CAAC;AAgCX,2FAA2F;AAC3F,MAAM,UAAU,iCAAiC;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO;QACjD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QACrE,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAK,GAAG,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;IACrG,MAAM,WAAW,GAAG,CAAC,KAAkB,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAEjI,MAAM,SAAS,GAAgC;QAC7C,cAAc,EAAE;YACd,MAAM,CAAC,KAA+B;gBACpC,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB;oBAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBACrF,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACpD,IAAI,UAAU,KAAK,SAAS;wBAAE,OAAO,CAAC,0BAA0B,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,GAAG,UAAU,CAAC,CAAC;oBACpG,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC;wBAAE,SAAS,CAAC,wCAAwC,CAAC,CAAC;gBAClF,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;oBACxC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;wBAAE,OAAO,CAAC,0BAA0B,CAAC,oBAAoB,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;oBAC/G,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ;wBAAE,SAAS,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;oBAClF,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;oBAAE,SAAS,CAAC,0BAA0B,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1I,CAAC;SACF;QACD,WAAW,CAAC,KAAK;YACf,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB;gBAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACxG,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;gBAC/G,MAAM,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC/B,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACnC,IAAI,OAAO,KAAK,SAAS;oBAAE,OAAO,CAAC,0BAA0B,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,CAAC;gBACrH,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBAAE,SAAS,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;YAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,OAAO,KAAK,CAAC,IAAI,EAAE,OAAO,KAAK,QAAQ;gBAAE,SAAS,CAAC,0BAA0B,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxJ,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,OAAO,GAAG,IAAI;YACtC,OAAO,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;YACjE,SAAS,CAAC,+BAA+B,CAAC,CAAC;YAC3C,IAAI,OAAO,KAAK,OAAO;gBAAE,SAAS,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QAC7E,CAAC;QACD,cAAc,CAAC,UAAU,EAAE,SAAS;YAClC,OAAO,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;YACnE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;YACpG,IAAI,CAAC,SAAS;gBAAE,SAAS,CAAC,0BAA0B,CAAC,WAAW,CAAC,CAAC;QACpE,CAAC;QACD,QAAQ;YACN,OAAO;gBACL,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACrC,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAClG,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;aACvC,CAAC;QACJ,CAAC;QACD,WAAW;YACT,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE,GAAG,IAAI,UAAU,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,QAAQ,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,oBAAoB,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,qBAAqB,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,qBAAqB,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAClO,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;YACxH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACjC,CAAC;QACD,KAAK,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;KACvF,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,QAAoC,EAAE,OAA8B;IAC1G,MAAM,MAAM,GAAuC,EAAE,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,MAA0B,EAAE,MAA0B,EAAE,EAAE,GAAG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7M,GAAG,CAAC,0BAA0B,CAAC,gBAAgB,EAAE,QAAQ,CAAC,UAAU,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrJ,GAAG,CAAC,0BAA0B,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACnI,GAAG,CAAC,0BAA0B,CAAC,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,0BAA0B,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/I,GAAG,CAAC,0BAA0B,CAAC,kBAAkB,EAAE,QAAQ,CAAC,UAAU,CAAC,0BAA0B,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACnJ,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,6BAA6B,IAAI,CAAC,CAAC;IACtE,GAAG,CAAC,2BAA2B,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACvJ,GAAG,CAAC,0BAA0B,CAAC,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,0BAA0B,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAClI,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,SAAS,CAAC,MAAgB;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACrH,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;AAChL,CAAC"}

package/dist/otel-observer.d.ts

@@ -1,5 +1,6 @@
 import { type Tracer } from '@opentelemetry/api';
 import type { FabricEvent, FabricEventCallback } from './types.js';
+import type { ObservabilityCorrelation } from './observability.js';
 /**
  * Build a hierarchical OpenTelemetry trace from Fabric's event stream.
  *
@@ -26,6 +27,8 @@ export interface OpenTelemetryObserverOptions {
     tracer?: Tracer;
     /** Attributes added to every emitted span. */
     attributes?: Record<string, string | number | boolean>;
+    /** Stable deployment correlation applied to every span. */
+    correlation?: ObservabilityCorrelation;
     /**
      * Naming/attribute convention. `'fabric'` (default) emits `fabric.*` span
      * names; `'foundry'` emits `gen_ai.*` names + attributes matching Azure AI

package/dist/otel-observer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"otel-observer.d.ts","sourceRoot":"","sources":["../src/otel-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,MAAM,EACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAA+B,MAAM,YAAY,CAAC;AAEhG;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACvD;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,WAAW,CAAC;CAChD;AA8BD,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,4BAAiC,GAAG,mBAAmB,CA4F3G"}
+{"version":3,"file":"otel-observer.d.ts","sourceRoot":"","sources":["../src/otel-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,MAAM,EACZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,mBAAmB,EAA+B,MAAM,YAAY,CAAC;AAEhG,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAEnE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IACvD,2DAA2D;IAC3D,WAAW,CAAC,EAAE,wBAAwB,CAAC;IACvC;;;;OAIG;IACH,WAAW,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,WAAW,CAAC;CAChD;AAsBD,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,4BAAiC,GAAG,mBAAmB,CA+F3G"}

package/dist/otel-observer.js

@@ -1,15 +1,9 @@
 import { context as otelContext, SpanKind, SpanStatusCode, trace, } from '@opentelemetry/api';
-const SENSITIVE_FIELDS = new Set(['text', 'content', 'input', 'output', 'delta', 'result', 'summary']);
+import { sanitizeObservabilityData } from './observability.js';
 function defaultSanitize(event) {
     if (!event.data)
         return event;
-    const sanitized = {};
-    for (const [key, value] of Object.entries(event.data)) {
-        if (!SENSITIVE_FIELDS.has(key)) {
-            sanitized[key] = value;
-        }
-    }
-    return { ...event, data: sanitized };
+    return { ...event, data: sanitizeObservabilityData(event.data) };
 }
 const SHAPES = {
     prompt_start: { ends: new Set(['prompt_end']), fabricName: () => 'fabric.prompt', foundryName: 'gen_ai.agent.run' },
@@ -22,7 +16,10 @@ const SHAPES = {
 export function createOpenTelemetryObserver(options = {}) {
     const tracer = options.tracer ?? trace.getTracer('@fabric-harness/sdk');
     const foundry = options.conventions === 'foundry';
-    const base = options.attributes ?? {};
+    const base = {
+        ...(options.attributes ?? {}),
+        ...correlationAttributes(options.correlation, foundry),
+    };
     // Per-session stack of open spans, with the start event type that opened each.
     const stacks = new Map();
     // Reverse index: end event type -> the start type it closes.
@@ -107,6 +104,21 @@ export function createOpenTelemetryObserver(options = {}) {
         }
     };
 }
+function correlationAttributes(correlation, foundry) {
+    if (!correlation)
+        return {};
+    const output = {};
+    const set = (fabricKey, foundryKey, value) => {
+        if (value)
+            output[foundry ? foundryKey : fabricKey] = value;
+    };
+    set('fabric.job_id', 'gen_ai.job.id', correlation.jobId);
+    set('fabric.agent_id', 'gen_ai.agent.id', correlation.agentId);
+    set('fabric.session_id', 'gen_ai.session.id', correlation.sessionId);
+    set('fabric.submission_id', 'gen_ai.submission.id', correlation.submissionId);
+    set('fabric.tenant_id', 'gen_ai.tenant.id', correlation.tenantId);
+    return output;
+}
 function startAttributes(event, foundry) {
     const attrs = {};
     const set = (fabricKey, foundryKey, value) => {

package/dist/otel-observer.js.map

@@ -1 +1 @@
-{"version":3,"file":"otel-observer.js","sourceRoot":"","sources":["../src/otel-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,QAAQ,EACR,cAAc,EACd,KAAK,GAGN,MAAM,oBAAoB,CAAC;AAkD5B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEvG,SAAS,eAAe,CAAC,KAAkB;IACzC,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,MAAM,GAAgD;IAC1D,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACnH,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAChJ,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAChH,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC3I,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACtH,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;CAC9K,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,UAAwC,EAAE;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAEtC,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyD,CAAC;IAChF,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC/D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwC,EAAE,CAAC;QAC3F,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjC,uEAAuE;QACvE,MAAM,WAAW,GACf,KAAK,KAAK,SAAS;YACnB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,KAAK,CAAC,IAAI,KAAK,eAAe;YAC9B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;QAEzB,MAAM,cAAc,GAAG,WAAW;YAChC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC,CAAC,KAAK,CAAC;QAEV,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAC3B,IAAI,EACJ;gBACE,IAAI,EAAE,QAAQ,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;gBAC7C,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE;aACrE,EACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CACjE,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACzC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;oBAClC,QAAQ,GAAG,CAAC,CAAC;oBACb,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,OAAO;YAC5B,qEAAqE;YACrE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;YACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAChF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC;YAC7D,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB,EAAE,OAAgB;IAC3D,MAAM,KAAK,GAA8C,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAE,KAA4C,EAAE,EAAE;QAClG,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC3E,CAAC,CAAC;IACF,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,cAAc,EAAE,sBAAsB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,EAAE,QAAiC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9G,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAU,EAAE,KAAkB,EAAE,OAAgB;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrG,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACvG,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACpG,CAAC,CAAE,KAAK,CAAC,IAAI,CAAC,KAAiC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7G,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChH,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,GAAG,CAAC,IAA4B,EAAE,GAAW;IACpD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,MAA0B;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC"}
+{"version":3,"file":"otel-observer.js","sourceRoot":"","sources":["../src/otel-observer.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,IAAI,WAAW,EACtB,QAAQ,EACR,cAAc,EACd,KAAK,GAGN,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAoD/D,SAAS,eAAe,CAAC,KAAkB;IACzC,IAAI,CAAC,KAAK,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,MAAM,GAAgD;IAC1D,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACnH,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAChJ,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,EAAE;IAChH,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC3I,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACtH,UAAU,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE;CAC9K,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,UAAwC,EAAE;IACpF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC7B,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC;KACvD,CAAC;IAEF,+EAA+E;IAC/E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyD,CAAC;IAChF,6DAA6D;IAC7D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC/D,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwC,EAAE,CAAC;QAC3F,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI;YAAE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEjC,uEAAuE;QACvE,MAAM,WAAW,GACf,KAAK,KAAK,SAAS;YACnB,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YAC1B,KAAK,CAAC,IAAI,KAAK,QAAQ;YACvB,KAAK,CAAC,IAAI,KAAK,eAAe;YAC9B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;QAEzB,MAAM,cAAc,GAAG,WAAW;YAChC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YACvE,CAAC,CAAC,KAAK,CAAC;QAEV,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAC3B,IAAI,EACJ;gBACE,IAAI,EAAE,QAAQ,CAAC,QAAQ;gBACvB,SAAS,EAAE,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC;gBAC7C,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,eAAe,CAAC,cAAc,EAAE,OAAO,CAAC,EAAE;aACrE,EACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CACjE,CAAC;YACF,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YACzC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;oBAClC,QAAQ,GAAG,CAAC,CAAC;oBACb,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,KAAK,CAAC,CAAC;gBAAE,OAAO;YAC5B,qEAAqE;YACrE,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC;YACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAChF,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,GAAG;gBAAE,oBAAoB,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QAED,+DAA+D;QAC/D,IAAI,cAAc,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC;YAC7D,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,WAAiD,EAAE,OAAgB;IAChG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAC5B,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAE,KAAyB,EAAE,EAAE;QAC/E,IAAI,KAAK;YAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC9D,CAAC,CAAC;IACF,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;IACzD,GAAG,CAAC,iBAAiB,EAAE,iBAAiB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/D,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IACrE,GAAG,CAAC,sBAAsB,EAAE,sBAAsB,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC9E,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,KAAkB,EAAE,OAAgB;IAC3D,MAAM,KAAK,GAA8C,EAAE,CAAC;IAC5D,MAAM,GAAG,GAAG,CAAC,SAAiB,EAAE,UAAkB,EAAE,KAA4C,EAAE,EAAE;QAClG,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC;IAC3E,CAAC,CAAC;IACF,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/D,GAAG,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5D,GAAG,CAAC,aAAa,EAAE,kBAAkB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,GAAG,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,GAAG,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnE,GAAG,CAAC,cAAc,EAAE,sBAAsB,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IACtE,GAAG,CAAC,iBAAiB,EAAE,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,IAAU,EAAE,QAAiC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,QAAQ,CAAC,IAAI,EAAE,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9G,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAU,EAAE,KAAkB,EAAE,OAAgB;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACrG,IAAI,QAAQ,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACvG,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACpG,CAAC,CAAE,KAAK,CAAC,IAAI,CAAC,KAAiC;QAC/C,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,2BAA2B,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IAC7G,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAChH,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;QAAE,IAAI,CAAC,YAAY,CAAC,uBAAuB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAED,SAAS,GAAG,CAAC,IAA4B,EAAE,GAAW;IACpD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,KAAK,CAAC,MAAc,EAAE,MAA0B;IACvD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC"}

package/dist/persistence-bundle-contract.d.ts

@@ -0,0 +1,7 @@
+import type { PersistenceBundle } from './persistence-bundle.js';
+export interface PersistenceBundleContractHandle {
+    persistence: PersistenceBundle;
+}
+/** Compose all store contracts with bundle health, cost, run, and cascade checks. */
+export declare function definePersistenceBundleContractTests(name: string, factory: () => Promise<PersistenceBundleContractHandle>): void;
+//# sourceMappingURL=persistence-bundle-contract.d.ts.map

package/dist/persistence-bundle-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-bundle-contract.d.ts","sourceRoot":"","sources":["../src/persistence-bundle-contract.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,MAAM,WAAW,+BAA+B;IAC9C,WAAW,EAAE,iBAAiB,CAAC;CAChC;AAED,qFAAqF;AACrF,wBAAgB,oCAAoC,CAClD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,OAAO,CAAC,+BAA+B,CAAC,GACtD,IAAI,CA0FN"}

package/dist/persistence-bundle-contract.js

@@ -0,0 +1,86 @@
+import { afterEach, describe, expect, it } from 'vitest';
+import { createAttachmentRef } from './attachment-store.js';
+import { conversationStreamPath } from './conversation-stream.js';
+import { defineAttachmentStoreContractTests } from './attachment-store-contract.js';
+import { defineConversationStreamStoreContractTests } from './conversation-stream-contract.js';
+import { defineSubmissionStoreContractTests } from './submission-store-contract.js';
+/** Compose all store contracts with bundle health, cost, run, and cascade checks. */
+export function definePersistenceBundleContractTests(name, factory) {
+    defineSubmissionStoreContractTests(`${name}: submissions`, async () => {
+        const handle = await factory();
+        return { store: handle.persistence.submissionStore, close: () => handle.persistence.close() };
+    });
+    defineConversationStreamStoreContractTests(`${name}: conversation streams`, async () => {
+        const handle = await factory();
+        return { store: handle.persistence.conversationStreamStore, close: () => handle.persistence.close() };
+    });
+    defineAttachmentStoreContractTests(`${name}: attachments`, async () => {
+        const handle = await factory();
+        return { store: handle.persistence.attachmentStore, close: () => handle.persistence.close() };
+    });
+    describe(`${name}: bundle`, () => {
+        let active;
+        async function create() {
+            active = (await factory()).persistence;
+            return active;
+        }
+        afterEach(async () => {
+            await active?.close();
+            active = undefined;
+        });
+        it('migrates, reports health, and exposes the same server stores', async () => {
+            const persistence = await create();
+            await persistence.migrate();
+            expect(await persistence.health()).toMatchObject({ ok: true, backend: persistence.backend });
+            expect(await persistence.serverOptions()).toMatchObject({
+                sessionStore: persistence.sessionStore,
+                submissionStore: persistence.submissionStore,
+                conversationStreamStore: persistence.conversationStreamStore,
+                attachmentStore: persistence.attachmentStore,
+            });
+        });
+        it('atomically aggregates concurrent cost increments', async () => {
+            const persistence = await create();
+            const totals = await Promise.all(Array.from({ length: 20 }, () => persistence.costBudgetStore.incrementUsd('tenant:contract', 0.25)));
+            expect(await persistence.costBudgetStore.getUsd('tenant:contract')).toBe(5);
+            expect(new Set(totals).size).toBe(20);
+        });
+        it('round-trips workflow runs and rejects duplicate event indexes', async () => {
+            const persistence = await create();
+            await persistence.runStore.saveRun({ runId: 'bundle-run', status: 'running' });
+            await persistence.runStore.appendRunEvent?.('bundle-run', {
+                runId: 'bundle-run',
+                eventIndex: 0,
+                type: 'started',
+                timestamp: new Date().toISOString(),
+            });
+            await expect(persistence.runStore.appendRunEvent?.('bundle-run', {
+                runId: 'bundle-run',
+                eventIndex: 0,
+                type: 'duplicate',
+                timestamp: new Date().toISOString(),
+            })).rejects.toThrow(/already exists/i);
+        });
+        it('cascades session, stream, and attachment deletion', async () => {
+            const persistence = await create();
+            const sessionId = 'agent:contract:instance:default';
+            const now = new Date().toISOString();
+            await persistence.sessionStore.save({ id: sessionId, createdAt: now, updatedAt: now, entries: [], events: [] });
+            const streamPath = conversationStreamPath(sessionId);
+            await persistence.conversationStreamStore.createStream(streamPath, { storeSessionId: sessionId });
+            const bytes = new TextEncoder().encode('bundle attachment');
+            const ref = await createAttachmentRef({ id: 'attachment-1', mimeType: 'text/plain', bytes });
+            await persistence.attachmentStore.put({ scope: sessionId, ref, bytes });
+            const deleted = await persistence.deleteSession(sessionId);
+            expect(deleted).toMatchObject({
+                sessionId,
+                deletedAttachments: 1,
+                deletedConversationStream: true,
+            });
+            expect(await persistence.sessionStore.load(sessionId)).toBeUndefined();
+            expect(await persistence.conversationStreamStore.getMeta(streamPath)).toBeNull();
+            expect(await persistence.attachmentStore.list(sessionId)).toEqual([]);
+        });
+    });
+}
+//# sourceMappingURL=persistence-bundle-contract.js.map

package/dist/persistence-bundle-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-bundle-contract.js","sourceRoot":"","sources":["../src/persistence-bundle-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AACpF,OAAO,EAAE,0CAA0C,EAAE,MAAM,mCAAmC,CAAC;AAC/F,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AAOpF,qFAAqF;AACrF,MAAM,UAAU,oCAAoC,CAClD,IAAY,EACZ,OAAuD;IAEvD,kCAAkC,CAAC,GAAG,IAAI,eAAe,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,0CAA0C,CAAC,GAAG,IAAI,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,kCAAkC,CAAC,GAAG,IAAI,eAAe,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,MAAM,GAAG,MAAM,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,IAAI,UAAU,EAAE,GAAG,EAAE;QAC/B,IAAI,MAAqC,CAAC;QAE1C,KAAK,UAAU,MAAM;YACnB,MAAM,GAAG,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,WAAW,CAAC;YACvC,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,SAAS,CAAC,KAAK,IAAI,EAAE;YACnB,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC;YACtB,MAAM,GAAG,SAAS,CAAC;QACrB,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,WAAW,GAAG,MAAM,MAAM,EAAE,CAAC;YACnC,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,MAAM,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7F,MAAM,CAAC,MAAM,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC;gBACtD,YAAY,EAAE,WAAW,CAAC,YAAY;gBACtC,eAAe,EAAE,WAAW,CAAC,eAAe;gBAC5C,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;gBAC5D,eAAe,EAAE,WAAW,CAAC,eAAe;aAC7C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAChE,MAAM,WAAW,GAAG,MAAM,MAAM,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,YAAY,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC,CACpG,CAAC;YACF,MAAM,CAAC,MAAM,WAAW,CAAC,eAAe,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;YAC7E,MAAM,WAAW,GAAG,MAAM,MAAM,EAAE,CAAC;YACnC,MAAM,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/E,MAAM,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,YAAY,EAAE;gBACxD,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,CAAC;gBACb,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,CACV,WAAW,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,YAAY,EAAE;gBAClD,KAAK,EAAE,YAAY;gBACnB,UAAU,EAAE,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,WAAW,GAAG,MAAM,MAAM,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,iCAAiC,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACrC,MAAM,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;YAEhH,MAAM,UAAU,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,WAAW,CAAC,uBAAuB,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC;YAClG,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YAC7F,MAAM,WAAW,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YAExE,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;YAC3D,MAAM,CAAC,OAAO,CAAC,CAAC,aAAa,CAAC;gBAC5B,SAAS;gBACT,kBAAkB,EAAE,CAAC;gBACrB,yBAAyB,EAAE,IAAI;aAChC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACvE,MAAM,CAAC,MAAM,WAAW,CAAC,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACjF,MAAM,CAAC,MAAM,WAAW,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/persistence-bundle.d.ts

@@ -0,0 +1,56 @@
+import type { AttachmentStore } from './attachment-store.js';
+import type { ConversationStreamStore } from './conversation-stream.js';
+import type { CostBudgetStore } from './cost-budget.js';
+import type { RunStore } from './persistence.js';
+import type { AgentSubmissionStore } from './submission-store.js';
+import type { SessionStore } from './types.js';
+export interface PersistenceHealth {
+    ok: boolean;
+    latencyMs: number;
+    backend: string;
+}
+export interface PersistenceDeleteResult {
+    sessionId: string;
+    deletedSubmissions: number;
+    deletedAttachments: number;
+    deletedConversationStream: boolean;
+    /** Signed, content-free evidence when deletion recording is configured. */
+    deletionRecord?: DeletionCompletionRecord;
+}
+export interface DeletionCompletionRecord {
+    version: 1;
+    deletionId: string;
+    /** HMAC pseudonym of the deleted session id; the id itself is not retained. */
+    subjectDigest: string;
+    tenantDigest?: string;
+    completedAt: string;
+    deletedSubmissions: number;
+    deletedAttachments: number;
+    deletedConversationStream: boolean;
+    previousRecordDigest?: string;
+    recordDigest: string;
+    algorithm: 'hmac-sha256' | 'ed25519';
+    keyId: string;
+    signature: string;
+}
+/** Complete persistence surface consumed by a Fabric host. */
+export interface PersistenceBundle {
+    readonly backend: string;
+    readonly sessionStore: SessionStore;
+    readonly submissionStore: AgentSubmissionStore;
+    readonly conversationStreamStore: ConversationStreamStore;
+    readonly attachmentStore: AttachmentStore;
+    readonly runStore: RunStore;
+    readonly costBudgetStore: CostBudgetStore;
+    migrate(): Promise<void>;
+    health(): Promise<PersistenceHealth>;
+    serverOptions(): Promise<{
+        sessionStore: SessionStore;
+        submissionStore: AgentSubmissionStore;
+        conversationStreamStore: ConversationStreamStore;
+        attachmentStore: AttachmentStore;
+    }>;
+    deleteSession(sessionId: string): Promise<PersistenceDeleteResult>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=persistence-bundle.d.ts.map

package/dist/persistence-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-bundle.d.ts","sourceRoot":"","sources":["../src/persistence-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,EAAE,OAAO,CAAC;IACnC,2EAA2E;IAC3E,cAAc,CAAC,EAAE,wBAAwB,CAAC;CAC3C;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,CAAC,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yBAAyB,EAAE,OAAO,CAAC;IACnC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,aAAa,GAAG,SAAS,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8DAA8D;AAC9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;IAC/C,QAAQ,CAAC,uBAAuB,EAAE,uBAAuB,CAAC;IAC1D,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrC,aAAa,IAAI,OAAO,CAAC;QACvB,YAAY,EAAE,YAAY,CAAC;QAC3B,eAAe,EAAE,oBAAoB,CAAC;QACtC,uBAAuB,EAAE,uBAAuB,CAAC;QACjD,eAAe,EAAE,eAAe,CAAC;KAClC,CAAC,CAAC;IACH,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACnE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB"}

package/dist/persistence-bundle.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=persistence-bundle.js.map

package/dist/persistence-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"persistence-bundle.js","sourceRoot":"","sources":["../src/persistence-bundle.ts"],"names":[],"mappings":""}

package/dist/persistent-agent.d.ts

@@ -44,7 +44,7 @@ export interface CreatedAgent<TEnv = Record<string, string | undefined>> {
  */
 export declare function createAgent<TEnv = Record<string, string | undefined>>(initialize: (context: PersistentAgentContext<TEnv>) => PersistentAgentConfig | Promise<PersistentAgentConfig>): CreatedAgent<TEnv>;
 /**
- * Canonical v2 name for {@link createAgent} (flue-aligned): persistent,
+ * Canonical v2 name for {@link createAgent}: persistent,
  * URL-addressable agents are *defined*, and the runtime instantiates them
  * per addressed id. `createAgent` remains supported as an alias.
  */

package/dist/persistent-agent.js

@@ -12,7 +12,7 @@ export function createAgent(initialize) {
     return Object.freeze({ [persistentAgentSymbol]: true, initialize });
 }
 /**
- * Canonical v2 name for {@link createAgent} (flue-aligned): persistent,
+ * Canonical v2 name for {@link createAgent}: persistent,
  * URL-addressable agents are *defined*, and the runtime instantiates them
  * per addressed id. `createAgent` remains supported as an alias.
  */

package/dist/policied-sandbox.d.ts

@@ -1,5 +1,6 @@
 import type { CapabilityPolicy } from './policy.js';
 import type { SandboxEnv } from './sandbox.js';
+import type { ToolCall } from './tools.js';
 /**
  * Wrap a `SandboxEnv` with `CapabilityPolicy` enforcement at the sandbox layer.
  *
@@ -21,4 +22,6 @@ import type { SandboxEnv } from './sandbox.js';
  * Pass-through: `snapshot`, `restore`, `fork`, `suspend`, `resume`, `cleanup`.
  */
 export declare function policiedSandboxEnv(inner: SandboxEnv, policy: CapabilityPolicy | undefined): SandboxEnv;
+/** @internal Run one approved tool operation through the sandbox policy layer. */
+export declare function runWithSandboxPolicyApproval<T>(sandbox: SandboxEnv, call: ToolCall, operation: () => Promise<T>): Promise<T>;
 //# sourceMappingURL=policied-sandbox.d.ts.map

package/dist/policied-sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policied-sandbox.d.ts","sourceRoot":"","sources":["../src/policied-sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAGV,UAAU,EAGX,MAAM,cAAc,CAAC;AAGtB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,UAAU,CAGtG"}
+{"version":3,"file":"policied-sandbox.d.ts","sourceRoot":"","sources":["../src/policied-sandbox.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAGV,UAAU,EAGX,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,GAAG,SAAS,GAAG,UAAU,CAGtG;AA8GD,kFAAkF;AAClF,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAE5H"}

package/dist/policied-sandbox.js

@@ -30,6 +30,7 @@ class PoliciedSandboxEnv {
     policy;
     cwd;
     capabilities;
+    approvedCalls = [];
     constructor(inner, policy) {
         this.inner = inner;
         this.policy = policy;
@@ -40,13 +41,7 @@ class PoliciedSandboxEnv {
     resolvePath(filePath) { return this.inner.resolvePath(filePath); }
     async exec(command, options) {
         const decision = evaluateCommandPolicy(command, this.policy);
-        // Only enforce hard denials at this layer. `requireApproval` patterns
-        // are tool/command-layer concerns — `session.shell()` and tool dispatch
-        // gate them through the full approval machinery (callbacks, store-backed
-        // waits, escalation). At the sandbox layer we can't tell the difference
-        // between "approved by an upstream tool call" and "raw bypass", so we
-        // pass them through. Block only on deny.
-        if (!decision.allowed && !decision.approvalRequired) {
+        if (!decision.allowed && (!decision.approvalRequired || !this.isApproved({ tool: 'bash', input: { command } }))) {
             throw new FabricError({
                 code: 'COMMAND_DENIED',
                 message: decision.reason ?? `Command denied by policy: ${command}`,
@@ -92,26 +87,33 @@ class PoliciedSandboxEnv {
             throw new Error('Sandbox does not support resume.');
         await this.inner.resume();
     }
+    encodeRef() {
+        return this.inner.encodeRef?.();
+    }
     cleanup() { return this.inner.cleanup(); }
+    async __runWithPolicyApproval(call, operation) {
+        this.approvedCalls.push(call);
+        try {
+            return await operation();
+        }
+        finally {
+            this.approvedCalls.pop();
+        }
+    }
     async gateRead(path, op) {
         const decision = evaluateToolCallPolicy({ tool: 'read', input: { path } }, this.policy);
-        this.throwIfHardDenied(decision.allowed, decision.approvalRequired, decision.reason, path, 'read', decision.matchedPattern);
+        this.throwIfDenied(decision.allowed, decision.approvalRequired, decision.reason, path, 'read', decision.matchedPattern);
         return op();
     }
     async gateWrite(path, op) {
         const decision = evaluateToolCallPolicy({ tool: 'write', input: { path } }, this.policy);
-        this.throwIfHardDenied(decision.allowed, decision.approvalRequired, decision.reason, path, 'write', decision.matchedPattern);
+        this.throwIfDenied(decision.allowed, decision.approvalRequired, decision.reason, path, 'write', decision.matchedPattern);
         return op();
     }
-    /**
-     * Hard-deny only. `requireApproval` patterns pass through at the sandbox
-     * layer because they're a tool/command-layer concept — see the comment on
-     * `exec()` above.
-     */
-    throwIfHardDenied(allowed, approvalRequired, reason, path, kind, matchedPattern) {
+    throwIfDenied(allowed, approvalRequired, reason, path, kind, matchedPattern) {
         if (allowed)
             return;
-        if (approvalRequired)
+        if (approvalRequired && this.isApproved({ tool: kind, input: { path } }))
             return;
         throw new FabricError({
             code: 'POLICY_DENIED',
@@ -123,5 +125,12 @@ class PoliciedSandboxEnv {
             },
         });
     }
+    isApproved(requested) {
+        return this.approvedCalls.some((approved) => approved.tool === requested.tool);
+    }
+}
+/** @internal Run one approved tool operation through the sandbox policy layer. */
+export function runWithSandboxPolicyApproval(sandbox, call, operation) {
+    return sandbox.__runWithPolicyApproval ? sandbox.__runWithPolicyApproval(call, operation) : operation();
 }
 //# sourceMappingURL=policied-sandbox.js.map

package/dist/policied-sandbox.js.map

@@ -1 +1 @@
-{"version":3,"file":"policied-sandbox.js","sourceRoot":"","sources":["../src/policied-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAWrB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,MAAoC;IACxF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,kBAAkB;IAIO;IAAoC;IAHxD,GAAG,CAAS;IACZ,YAAY,CAAuB;IAE5C,YAA6B,KAAiB,EAAmB,MAAwB;QAA5D,UAAK,GAAL,KAAK,CAAY;QAAmB,WAAM,GAAN,MAAM,CAAkB;QACvF,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACrB,IAAI,KAAK,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACjE,CAAC;IAED,WAAW,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAElF,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA4B;QACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,sEAAsE;QACtE,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yCAAyC;QACzC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,IAAI,WAAW,CAAC;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,6BAA6B,OAAO,EAAE;gBAClE,OAAO,EAAE;oBACP,OAAO;oBACP,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,QAAQ,CAAC,IAAY,IAAqB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,cAAc,CAAC,IAAY,IAAyB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,IAAY,IAAuB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,CAAC,IAAY,IAAuB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,CAAC,IAAY,IAAsB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,SAAS,CAAC,IAAY,EAAE,OAA4B,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,KAAK,CAAC,IAAY,EAAE,OAAiC,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,EAAE,CAAC,IAAY,EAAE,OAAkD,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAExJ,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAyB;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAyB;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACxE,4EAA4E;QAC5E,OAAO,kBAAkB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO,KAAoB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEjD,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,EAAoB;QAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC5H,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,IAAY,EAAE,EAAoB;QAC3D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC7H,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,OAAgB,EAAE,gBAAqC,EAAE,MAA0B,EAAE,IAAY,EAAE,IAAsB,EAAE,cAAkC;QACrL,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,gBAAgB;YAAE,OAAO;QAC7B,MAAM,IAAI,WAAW,CAAC;YACpB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,sBAAsB,IAAI,EAAE;YACpF,OAAO,EAAE;gBACP,IAAI;gBACJ,IAAI;gBACJ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C;SACF,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"policied-sandbox.js","sourceRoot":"","sources":["../src/policied-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EACL,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAYrB;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,MAAoC;IACxF,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,OAAO,IAAI,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,kBAAkB;IAKO;IAAoC;IAJxD,GAAG,CAAS;IACZ,YAAY,CAAuB;IAC3B,aAAa,GAAe,EAAE,CAAC;IAEhD,YAA6B,KAAiB,EAAmB,MAAwB;QAA5D,UAAK,GAAL,KAAK,CAAY;QAAmB,WAAM,GAAN,MAAM,CAAkB;QACvF,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACrB,IAAI,KAAK,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IACjE,CAAC;IAED,WAAW,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAElF,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAA4B;QACtD,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;YAChH,MAAM,IAAI,WAAW,CAAC;gBACpB,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,QAAQ,CAAC,MAAM,IAAI,6BAA6B,OAAO,EAAE;gBAClE,OAAO,EAAE;oBACP,OAAO;oBACP,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF;aACF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,QAAQ,CAAC,IAAY,IAAqB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,cAAc,CAAC,IAAY,IAAyB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxH,IAAI,CAAC,IAAY,IAAuB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,CAAC,IAAY,IAAuB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACxG,MAAM,CAAC,IAAY,IAAsB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,SAAS,CAAC,IAAY,EAAE,OAA4B,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAChJ,KAAK,CAAC,IAAY,EAAE,OAAiC,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7I,EAAE,CAAC,IAAY,EAAE,OAAkD,IAAmB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAExJ,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAyB;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAyB;QAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACxE,4EAA4E;QAC5E,OAAO,kBAAkB,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC5E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,KAAoB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAEzD,KAAK,CAAC,uBAAuB,CAAI,IAAc,EAAE,SAA2B;QAC1E,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAI,IAAY,EAAE,EAAoB;QAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QACxH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,SAAS,CAAI,IAAY,EAAE,EAAoB;QAC3D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzF,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;QACzH,OAAO,EAAE,EAAE,CAAC;IACd,CAAC;IAEO,aAAa,CAAC,OAAgB,EAAE,gBAAqC,EAAE,MAA0B,EAAE,IAAY,EAAE,IAAsB,EAAE,cAAkC;QACjL,IAAI,OAAO;YAAE,OAAO;QACpB,IAAI,gBAAgB,IAAI,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;YAAE,OAAO;QACjF,MAAM,IAAI,WAAW,CAAC;YACpB,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,MAAM,IAAI,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,sBAAsB,IAAI,EAAE;YACpF,OAAO,EAAE;gBACP,IAAI;gBACJ,IAAI;gBACJ,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9C;SACF,CAAC,CAAC;IACL,CAAC;IAEO,UAAU,CAAC,SAAmB;QACpC,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;IACjF,CAAC;CACF;AAED,kFAAkF;AAClF,MAAM,UAAU,4BAA4B,CAAI,OAAmB,EAAE,IAAc,EAAE,SAA2B;IAC9G,OAAO,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC1G,CAAC"}

package/dist/policy.d.ts

@@ -64,6 +64,10 @@ export interface NetworkPolicy {
      * `http:` and `https:` only.
      */
     protocols?: string[];
+    /** Allow loopback, RFC1918, link-local, and unique-local destinations. Defaults to false. */
+    allowPrivateNetwork?: boolean;
+    /** Resolve hostnames before each request/redirect and reject private answers. Node uses dns.lookup by default. */
+    resolveDns?: boolean;
 }
 export interface CapabilityPolicy {
     filesystem?: FilesystemPolicy;
@@ -109,6 +113,9 @@ export declare function evaluateNetworkPolicy(input: string | URL | Request, pol
  * Throws a `FabricError` (`POLICY_DENIED`) when a request violates the policy;
  * never sends a forbidden request.
  */
-export declare function policiedFetch(fetchImpl: typeof fetch, policy?: CapabilityPolicy): typeof fetch;
+export interface PoliciedFetchOptions {
+    resolveHostname?: (hostname: string) => Promise<string[]>;
+}
+export declare function policiedFetch(fetchImpl: typeof fetch, policy?: CapabilityPolicy, options?: PoliciedFetchOptions): typeof fetch;
 export declare function clampCommandTimeout(timeout: number | undefined, policy?: CapabilityPolicy): number | undefined;
 //# sourceMappingURL=policy.d.ts.map

package/dist/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,2FAA2F;QAC3F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,YAAY,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,wBAAwB,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CA8BhG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAoB5G;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAiC9G;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,OAAO,KAAK,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,KAAK,CAa9F;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAI9G"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,aAAa,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;IACzC;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,6FAA6F;IAC7F,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,kHAAkH;IAClH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,SAAS,CAAC,EAAE;QACV,2FAA2F;QAC3F,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;QACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,IAAI,CAAC,EAAE,YAAY,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,UAAU,CAAC,EAAE,wBAAwB,CAAC;KACvC,CAAC;CACH;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,yFAAyF;IACzF,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wDAAwD;IACxD,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CA8BhG;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CA8B5G;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,cAAc,CAqC9G;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,eAAe,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC3D;AAED,wBAAgB,aAAa,CAAC,SAAS,EAAE,OAAO,KAAK,EAAE,MAAM,CAAC,EAAE,gBAAgB,EAAE,OAAO,GAAE,oBAAyB,GAAG,OAAO,KAAK,CAsBlI;AAsED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAI9G"}