@hs-x/checkpoint 0.1.0

package/CONTEXT.md

@@ -0,0 +1,40 @@
+# @hs-x/checkpoint
+
+## Purpose
+
+`@hs-x/checkpoint` provides the runtime-side observability primitives for HS-X: Analytics Engine metric events, D1 exemplar rows, error fingerprinting, redaction, sampling, and bounded error write policy.
+
+## Contracts
+
+- **Produces:** Checkpoint metric events, exemplar records, error fingerprints, redacted payloads, and test/fake writer implementations.
+- **Consumes:** Checkpoint and drift schemas from `@hs-x/types`.
+- **Depended on by:** `@hs-x/runtime` instrumentation, dashboard read surfaces, `hs-x doctor` / `drift` / `repair`, and future MCP tools.
+
+## Key types
+
+- `fingerprintError()` — creates low-cardinality error grouping keys.
+- `redactCheckpointValue()` — recursively redacts common PII and secret-shaped values.
+- `createExemplarPolicy()` — applies success sampling and error write budgets.
+- `createMemoryCheckpointWriter()` — fake writer for unit and contract tests.
+- `createCloudflareCheckpointWriter()` — writes complete metrics to Analytics Engine, sampled exemplars to D1/R2, and queue envelopes for async fanout.
+- `listD1CheckpointExemplars()` — reads D1 exemplar rows with schema validation and bounded filters.
+- `recordCheckpointInvocation()` — writes the metric event and any allowed exemplar through a writer.
+
+## Common edits
+
+- **Adding a write target.** Keep the `CheckpointWriter` contract stable and add a writer implementation behind it. Do not make runtime depend on Cloudflare globals directly; pass minimal binding-shaped interfaces.
+- **Changing redaction.** Add PII-shaped fixtures/tests before changing default behavior.
+- **Changing fingerprinting.** Keep fingerprints low-cardinality; do not include portal ids, object ids, timestamps, request ids, or full stack traces.
+
+## Gotchas
+
+- Analytics Engine metric events are complete and unsampled. D1 exemplar rows are sampled or budgeted.
+- The default D1 writer inserts into `checkpoint_exemplars`; the seed migration lives in `migrations/0001_checkpoint_exemplars.sql`.
+- `unknown` drift is not healthy. Any CLI/dashboard surface must preserve that distinction.
+- Redaction here is the default safety layer; later Schema annotations should make it more precise, not weaker.
+
+## Pointers
+
+- `docs/hs-x-phase-1-plan.md#97-w6--observability-drift-attestation-and-checkpoint`
+- `docs/hs-x-architecture.md#observability--checkpoint`
+- Related packages: `@hs-x/types`, `@hs-x/runtime`, `@hs-x/control-plane`

package/README.md

@@ -0,0 +1,36 @@
+# @hs-x/checkpoint
+
+Checkpoint observability primitives for HS-X runtime instrumentation.
+
+This package defines fingerprinting, redaction, exemplar policy, fake writer behavior, and Cloudflare binding writers against the canonical schemas in `@hs-x/types`.
+
+## Cloudflare writer
+
+`createCloudflareCheckpointWriter()` composes the runtime write targets behind the stable `CheckpointWriter` contract:
+
+- Analytics Engine receives every `CheckpointMetricEvent`.
+- D1 receives sampled or budgeted `CheckpointRunExemplar` rows in `checkpoint_exemplars` by default.
+- Queue receives metric and exemplar envelopes for async fanout.
+- R2 receives error exemplars by default, with optional success exemplar archival.
+
+The D1 table name is configurable but must already exist. The default migration is published at `migrations/0001_checkpoint_exemplars.sql` and creates:
+
+```sql
+CREATE TABLE checkpoint_exemplars (
+  exemplar_id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  hsx_account_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  deploy_id TEXT NOT NULL,
+  worker_name TEXT NOT NULL,
+  capability_id TEXT NOT NULL,
+  portal_id TEXT NOT NULL,
+  outcome TEXT NOT NULL,
+  observed_at TEXT NOT NULL,
+  duration_ms REAL NOT NULL,
+  fingerprint TEXT,
+  value_json TEXT NOT NULL
+);
+```
+
+`listD1CheckpointExemplars()` reads those D1 rows back through the same shared schema with optional project, deploy, outcome, fingerprint, and limit filters.

package/dist/index.d.ts

@@ -0,0 +1,122 @@
+import type { CheckpointErrorFingerprint, CheckpointMetricEvent, CheckpointRunExemplar } from '@hs-x/types';
+import { Effect } from 'effect';
+export declare const CHECKPOINT_VERSION = "0.1.0";
+export declare const REDACTED = "[redacted]";
+export interface FingerprintErrorOptions {
+    readonly capabilityId: string;
+    readonly error: unknown;
+}
+export interface RedactionOptions {
+    readonly maxDepth?: number;
+}
+export interface ExemplarPolicyOptions {
+    readonly successSampleRate?: number;
+    readonly errorWindowMs?: number;
+    readonly maxExemplarsPerFingerprint?: number;
+    readonly maxErrorExemplarsPerWorkerWindow?: number;
+}
+export interface ExemplarPolicy {
+    shouldPersistSuccess(exemplar: CheckpointRunExemplar): boolean;
+    shouldPersistError(exemplar: CheckpointRunExemplar): boolean;
+}
+export interface CheckpointWriter {
+    writeMetric(event: CheckpointMetricEvent): Promise<void> | void;
+    writeExemplar(exemplar: CheckpointRunExemplar): Promise<void> | void;
+}
+export interface AnalyticsEngineDatasetLike {
+    writeDataPoint(dataPoint: {
+        readonly blobs?: readonly string[];
+        readonly doubles?: readonly number[];
+        readonly indexes?: readonly string[];
+    }): void;
+}
+export interface D1DatabaseLike {
+    prepare(query: string): D1PreparedStatementLike;
+}
+export interface D1PreparedStatementLike {
+    bind(...values: readonly unknown[]): D1PreparedStatementLike;
+    run(): Promise<unknown>;
+}
+export interface D1ReadableDatabaseLike {
+    prepare(query: string): D1ReadablePreparedStatementLike;
+}
+export interface D1ReadablePreparedStatementLike extends D1PreparedStatementLike {
+    bind(...values: readonly unknown[]): D1ReadablePreparedStatementLike;
+    all<T = unknown>(): Promise<{
+        readonly results: readonly T[];
+    }>;
+}
+export interface QueueLike {
+    send(message: unknown): Promise<void> | void;
+}
+export interface R2BucketLike {
+    put(key: string, value: string, options?: R2PutOptionsLike): Promise<unknown>;
+}
+export interface R2PutOptionsLike {
+    readonly httpMetadata?: {
+        readonly contentType?: string;
+    };
+    readonly customMetadata?: Record<string, string>;
+}
+export interface CloudflareCheckpointWriterOptions {
+    readonly analyticsEngine?: AnalyticsEngineDatasetLike;
+    readonly d1?: D1DatabaseLike;
+    readonly queue?: QueueLike;
+    readonly r2?: R2BucketLike;
+    readonly d1TableName?: string;
+    readonly r2Prefix?: string;
+    readonly queueMetricEvents?: boolean;
+    readonly queueExemplarEvents?: boolean;
+    readonly writeR2SuccessExemplars?: boolean;
+}
+export interface ListD1CheckpointExemplarsOptions {
+    readonly d1: D1ReadableDatabaseLike;
+    readonly d1TableName?: string;
+    /**
+     * Required: scopes the read to a single tenant. Without this filter a
+     * caller who knows another account's `projectId` could read its
+     * exemplars (cross-tenant IDOR). Must be the authenticated caller's
+     * account, never a value derived from the request path.
+     */
+    readonly accountId: string;
+    readonly projectId?: string;
+    readonly deployId?: string;
+    readonly outcome?: CheckpointMetricEvent['outcome'];
+    readonly fingerprint?: string;
+    readonly limit?: number;
+}
+export type CheckpointQueueEvent = {
+    readonly type: 'checkpoint.metric';
+    readonly version: typeof CHECKPOINT_VERSION;
+    readonly event: CheckpointMetricEvent;
+} | {
+    readonly type: 'checkpoint.exemplar';
+    readonly version: typeof CHECKPOINT_VERSION;
+    readonly exemplar: CheckpointRunExemplar;
+};
+export interface RecordCheckpointInvocationOptions {
+    readonly writer: CheckpointWriter;
+    readonly policy?: ExemplarPolicy;
+    readonly metric: CheckpointMetricEvent;
+    readonly input?: unknown;
+    readonly output?: unknown;
+    readonly error?: unknown;
+}
+export interface RecordCheckpointInvocationResult {
+    readonly metric: CheckpointMetricEvent;
+    readonly exemplar?: CheckpointRunExemplar;
+}
+export declare function fingerprintError({ capabilityId, error, }: FingerprintErrorOptions): CheckpointErrorFingerprint;
+export declare function redactCheckpointValue(value: unknown, options?: RedactionOptions): unknown;
+export declare function createExemplarPolicy(options?: ExemplarPolicyOptions): ExemplarPolicy;
+export declare function recordCheckpointInvocation({ writer, policy, metric, input, output, error, }: RecordCheckpointInvocationOptions): Promise<RecordCheckpointInvocationResult>;
+export declare function recordCheckpointInvocationEffect({ writer, policy, metric, input, output, error, }: RecordCheckpointInvocationOptions): Effect.Effect<RecordCheckpointInvocationResult, unknown>;
+export declare function createCloudflareCheckpointWriter({ analyticsEngine, d1, queue, r2, d1TableName, r2Prefix, queueMetricEvents, queueExemplarEvents, writeR2SuccessExemplars, }: CloudflareCheckpointWriterOptions): CheckpointWriter;
+export declare function metricDataPoint(event: CheckpointMetricEvent): {
+    readonly blobs: readonly string[];
+    readonly doubles: readonly number[];
+    readonly indexes: readonly string[];
+};
+export declare function checkpointExemplarId(exemplar: CheckpointRunExemplar): string;
+export declare function listD1CheckpointExemplars({ d1, d1TableName, accountId, projectId, deployId, outcome, fingerprint, limit, }: ListD1CheckpointExemplarsOptions): Promise<readonly CheckpointRunExemplar[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,0BAA0B,EAC1B,qBAAqB,EACrB,qBAAqB,EACtB,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AAExC,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAC1C,eAAO,MAAM,QAAQ,eAAe,CAAC;AAErC,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;IAC7C,QAAQ,CAAC,gCAAgC,CAAC,EAAE,MAAM,CAAC;CACpD;AAED,MAAM,WAAW,cAAc;IAC7B,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC;IAC/D,kBAAkB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC;CAC9D;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAChE,aAAa,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACtE;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,SAAS,EAAE;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;KACtC,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,CAAC;CACjD;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,uBAAuB,CAAC;IAC7D,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,+BAA+B,CAAC;CACzD;AAED,MAAM,WAAW,+BAAgC,SAAQ,uBAAuB;IAC9E,IAAI,CAAC,GAAG,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,+BAA+B,CAAC;IACrE,GAAG,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9C;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;IACF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,eAAe,CAAC,EAAE,0BAA0B,CAAC;IACtD,QAAQ,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,EAAE,EAAE,sBAAsB,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC,SAAS,CAAC,CAAC;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,oBAAoB,GAC5B;IACE,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,OAAO,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,OAAO,kBAAkB,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,CAAC;CAC1C,CAAC;AAEN,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAID,wBAAgB,gBAAgB,CAAC,EAC/B,YAAY,EACZ,KAAK,GACN,EAAE,uBAAuB,GAAG,0BAA0B,CAWtD;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAE7F;AAED,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CAgDxF;AAED,wBAAsB,0BAA0B,CAAC,EAC/C,MAAM,EACN,MAAsB,EACtB,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,GACN,EAAE,iCAAiC,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAI/E;AAED,wBAAgB,gCAAgC,CAAC,EAC/C,MAAM,EACN,MAAsB,EACtB,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,GACN,EAAE,iCAAiC,GAAG,MAAM,CAAC,MAAM,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAc9F;AAmCD,wBAAgB,gCAAgC,CAAC,EAC/C,eAAe,EACf,EAAE,EACF,KAAK,EACL,EAAE,EACF,WAAoC,EACpC,QAAiC,EACjC,iBAAwB,EACxB,mBAA0B,EAC1B,uBAA+B,GAChC,EAAE,iCAAiC,GAAG,gBAAgB,CA0FtD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,qBAAqB,GAAG;IAC7D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAsBA;AAED,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,CAqB5E;AAED,wBAAsB,yBAAyB,CAAC,EAC9C,EAAE,EACF,WAAoC,EACpC,SAAS,EACT,SAAS,EACT,QAAQ,EACR,OAAO,EACP,WAAW,EACX,KAAU,GACX,EAAE,gCAAgC,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CA0C9E"}

package/dist/index.js

@@ -0,0 +1,395 @@
+import { schemas } from '@hs-x/types';
+import { Effect, Schema } from 'effect';
+export const CHECKPOINT_VERSION = '0.1.0';
+export const REDACTED = '[redacted]';
+const defaultPolicy = createExemplarPolicy();
+export function fingerprintError({ capabilityId, error, }) {
+    const errorClass = errorClassFor(error);
+    const stackSignature = stackSignatureFor(errorClass, error);
+    const fingerprint = `${capabilityId}:${errorClass}:${hash(`${capabilityId}:${errorClass}:${stackSignature}`)}`;
+    return {
+        capabilityId: Schema.decodeSync(schemas.CapabilityId)(capabilityId),
+        errorClass,
+        stackSignature,
+        fingerprint,
+    };
+}
+export function redactCheckpointValue(value, options = {}) {
+    return redact(value, options.maxDepth ?? 8, new WeakSet());
+}
+export function createExemplarPolicy(options = {}) {
+    const successSampleRate = clamp(options.successSampleRate ?? 0.01, 0, 1);
+    const errorWindowMs = options.errorWindowMs ?? 60_000;
+    const maxExemplarsPerFingerprint = options.maxExemplarsPerFingerprint ?? 10;
+    const maxErrorExemplarsPerWorkerWindow = options.maxErrorExemplarsPerWorkerWindow ?? 100;
+    const fingerprintCounts = new Map();
+    const workerCounts = new Map();
+    return {
+        shouldPersistSuccess(exemplar) {
+            if (exemplar.outcome !== 'success') {
+                return false;
+            }
+            if (successSampleRate <= 0) {
+                return false;
+            }
+            if (successSampleRate >= 1) {
+                return true;
+            }
+            const key = `${exemplar.deployId}:${exemplar.workerName}:${exemplar.capabilityId}:${exemplar.portalId}:${exemplar.observedAt}`;
+            return hashToUnit(key) < successSampleRate;
+        },
+        shouldPersistError(exemplar) {
+            if (exemplar.outcome !== 'error' || !exemplar.fingerprint) {
+                return false;
+            }
+            const window = windowStart(exemplar.observedAt, errorWindowMs);
+            const fingerprintKey = `${exemplar.fingerprint.fingerprint}:${window}`;
+            const workerKey = `${exemplar.deployId}:${exemplar.workerName}:${window}`;
+            const fingerprintCount = fingerprintCounts.get(fingerprintKey) ?? 0;
+            const workerCount = workerCounts.get(workerKey) ?? 0;
+            if (fingerprintCount >= maxExemplarsPerFingerprint ||
+                workerCount >= maxErrorExemplarsPerWorkerWindow) {
+                return false;
+            }
+            fingerprintCounts.set(fingerprintKey, fingerprintCount + 1);
+            workerCounts.set(workerKey, workerCount + 1);
+            return true;
+        },
+    };
+}
+export async function recordCheckpointInvocation({ writer, policy = defaultPolicy, metric, input, output, error, }) {
+    return Effect.runPromise(recordCheckpointInvocationEffect({ writer, policy, metric, input, output, error }));
+}
+export function recordCheckpointInvocationEffect({ writer, policy = defaultPolicy, metric, input, output, error, }) {
+    return Effect.gen(function* () {
+        yield* writeMetricEffect(writer, metric);
+        const exemplar = buildExemplar({ metric, input, output, error });
+        const shouldWrite = yield* shouldPersistExemplarEffect(policy, exemplar);
+        if (!shouldWrite) {
+            return { metric };
+        }
+        yield* writeExemplarEffect(writer, exemplar);
+        return { metric, exemplar };
+    });
+}
+function shouldPersistExemplarEffect(policy, exemplar) {
+    return Effect.try({
+        try: () => exemplar.outcome === 'success'
+            ? policy.shouldPersistSuccess(exemplar)
+            : policy.shouldPersistError(exemplar),
+        catch: (cause) => cause,
+    });
+}
+function writeMetricEffect(writer, metric) {
+    return Effect.tryPromise({
+        try: () => Promise.resolve(writer.writeMetric(metric)),
+        catch: (cause) => cause,
+    });
+}
+function writeExemplarEffect(writer, exemplar) {
+    return Effect.tryPromise({
+        try: () => Promise.resolve(writer.writeExemplar(exemplar)),
+        catch: (cause) => cause,
+    });
+}
+export function createCloudflareCheckpointWriter({ analyticsEngine, d1, queue, r2, d1TableName = 'checkpoint_exemplars', r2Prefix = 'checkpoint/exemplars', queueMetricEvents = true, queueExemplarEvents = true, writeR2SuccessExemplars = false, }) {
+    assertSafeSqlIdentifier(d1TableName, 'd1TableName');
+    const normalizedR2Prefix = r2Prefix.replace(/^\/+|\/+$/g, '');
+    return {
+        async writeMetric(event) {
+            analyticsEngine?.writeDataPoint(metricDataPoint(event));
+            if (queue && queueMetricEvents) {
+                await queue.send({
+                    type: 'checkpoint.metric',
+                    version: CHECKPOINT_VERSION,
+                    event,
+                });
+            }
+        },
+        async writeExemplar(exemplar) {
+            if (d1) {
+                await d1
+                    .prepare(`INSERT INTO ${d1TableName} (
+              exemplar_id,
+              account_id,
+              hsx_account_id,
+              project_id,
+              deploy_id,
+              worker_name,
+              capability_id,
+              portal_id,
+              outcome,
+              observed_at,
+              duration_ms,
+              fingerprint,
+              value_json
+            ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`)
+                    .bind(checkpointExemplarId(exemplar), exemplar.accountId, exemplar.hsXAccountId, exemplar.projectId, exemplar.deployId, exemplar.workerName, exemplar.capabilityId, exemplar.portalId, exemplar.outcome, exemplar.observedAt, exemplar.durationMs, exemplar.fingerprint?.fingerprint ?? null, JSON.stringify(exemplar))
+                    .run();
+            }
+            if (r2 && (writeR2SuccessExemplars || exemplar.outcome === 'error')) {
+                // Encode accountId as a prefix segment so R2 keys are namespaced
+                // per tenant. Defense-in-depth against cross-account projectId
+                // collisions and enumeration via shared `<prefix>/<projectId>/...`
+                // paths. Existing data written before this change lives under
+                // `<prefix>/<projectId>/...` and is not rewritten — readers that
+                // need pre-migration objects must check both layouts.
+                const key = [
+                    normalizedR2Prefix,
+                    exemplar.accountId,
+                    exemplar.projectId,
+                    checkpointExemplarId(exemplar),
+                ]
+                    .filter((part) => part.length > 0)
+                    .join('/');
+                await r2.put(key, JSON.stringify(exemplar), {
+                    httpMetadata: { contentType: 'application/json' },
+                    customMetadata: {
+                        accountId: exemplar.accountId,
+                        projectId: exemplar.projectId,
+                        deployId: exemplar.deployId,
+                        capabilityId: exemplar.capabilityId,
+                        outcome: exemplar.outcome,
+                    },
+                });
+            }
+            if (queue && queueExemplarEvents) {
+                await queue.send({
+                    type: 'checkpoint.exemplar',
+                    version: CHECKPOINT_VERSION,
+                    exemplar,
+                });
+            }
+        },
+    };
+}
+export function metricDataPoint(event) {
+    return {
+        blobs: [
+            event.accountId,
+            event.hsXAccountId,
+            event.projectId,
+            event.deployId,
+            event.workerName,
+            event.capabilityId,
+            event.portalId,
+            event.outcome,
+            event.observedAt,
+        ],
+        doubles: [event.durationMs, event.outcome === 'error' ? 1 : 0],
+        indexes: [
+            event.hsXAccountId,
+            event.projectId,
+            event.deployId,
+            event.capabilityId,
+            event.portalId,
+        ],
+    };
+}
+export function checkpointExemplarId(exemplar) {
+    return [
+        exemplar.observedAt.replace(/[^0-9A-Za-z.-]/g, '_'),
+        exemplar.deployId,
+        exemplar.workerName,
+        exemplar.capabilityId,
+        exemplar.portalId,
+        hash(JSON.stringify({
+            observedAt: exemplar.observedAt,
+            deployId: exemplar.deployId,
+            workerName: exemplar.workerName,
+            capabilityId: exemplar.capabilityId,
+            portalId: exemplar.portalId,
+            outcome: exemplar.outcome,
+            fingerprint: exemplar.fingerprint?.fingerprint ?? '',
+        })),
+    ]
+        .map((part) => sanitizePathPart(part))
+        .join('__');
+}
+export async function listD1CheckpointExemplars({ d1, d1TableName = 'checkpoint_exemplars', accountId, projectId, deployId, outcome, fingerprint, limit = 50, }) {
+    assertSafeSqlIdentifier(d1TableName, 'd1TableName');
+    if (!accountId) {
+        throw new Error('listD1CheckpointExemplars requires accountId for tenant isolation.');
+    }
+    const clauses = ['account_id = ?'];
+    const values = [accountId];
+    if (projectId) {
+        clauses.push('project_id = ?');
+        values.push(projectId);
+    }
+    if (deployId) {
+        clauses.push('deploy_id = ?');
+        values.push(deployId);
+    }
+    if (outcome) {
+        clauses.push('outcome = ?');
+        values.push(outcome);
+    }
+    if (fingerprint) {
+        clauses.push('fingerprint = ?');
+        values.push(fingerprint);
+    }
+    const safeLimit = Math.max(1, Math.min(500, Math.floor(limit)));
+    values.push(safeLimit);
+    const where = clauses.length > 0 ? `WHERE ${clauses.join(' AND ')}` : '';
+    const rows = await d1
+        .prepare(`SELECT value_json
+       FROM ${d1TableName}
+       ${where}
+       ORDER BY observed_at DESC, exemplar_id DESC
+       LIMIT ?`)
+        .bind(...values)
+        .all();
+    return rows.results.map((row) => Schema.decodeUnknownSync(schemas.CheckpointRunExemplar)(JSON.parse(row.value_json)));
+}
+function buildExemplar({ metric, input, output, error, }) {
+    const base = {
+        accountId: metric.accountId,
+        hsXAccountId: metric.hsXAccountId,
+        projectId: metric.projectId,
+        deployId: metric.deployId,
+        workerName: metric.workerName,
+        capabilityId: metric.capabilityId,
+        portalId: metric.portalId,
+        outcome: metric.outcome,
+        observedAt: metric.observedAt,
+        durationMs: metric.durationMs,
+        redactedInput: redactCheckpointValue(input ?? {}),
+    };
+    if (metric.outcome === 'success') {
+        return output === undefined ? base : { ...base, redactedOutput: redactCheckpointValue(output) };
+    }
+    const redactedError = redactError(error);
+    return {
+        ...base,
+        fingerprint: fingerprintError({ capabilityId: metric.capabilityId, error }),
+        redactedError,
+    };
+}
+function redactError(error) {
+    if (error instanceof Error) {
+        return redactCheckpointValue({
+            name: error.name,
+            message: error.message,
+            stack: error.stack,
+        });
+    }
+    return redactCheckpointValue(error ?? { message: 'Unknown error' });
+}
+function errorClassFor(error) {
+    if (error instanceof Error && error.name.length > 0) {
+        return sanitizeToken(error.name);
+    }
+    if (isRecord(error) && typeof error.code === 'string' && error.code.length > 0) {
+        return sanitizeToken(error.code);
+    }
+    if (isRecord(error) && typeof error._tag === 'string' && error._tag.length > 0) {
+        return sanitizeToken(error._tag);
+    }
+    return 'UnknownError';
+}
+function stackSignatureFor(errorClass, error) {
+    if (error instanceof Error && typeof error.stack === 'string') {
+        const frame = error.stack
+            .split('\n')
+            .map((line) => normalizeStackLine(line))
+            .find((line) => line.length > 0 && !line.includes('node:internal'));
+        if (frame) {
+            return `${errorClass}:${frame}`;
+        }
+    }
+    if (isRecord(error) && typeof error.message === 'string' && error.message.length > 0) {
+        return `${errorClass}:${normalizeMessage(error.message)}`;
+    }
+    return `${errorClass}:unknown`;
+}
+function normalizeStackLine(line) {
+    return line
+        .trim()
+        .replace(/\((?:file:\/\/)?[^)]*\)/g, '()')
+        .replace(/(?:file:\/\/)?\/[^\s)]+/g, '<path>')
+        .replace(/:\d+:\d+/g, ':<line>:<col>')
+        .replace(/\b\d{4,}\b/g, '<number>')
+        .replace(/\s+/g, ' ');
+}
+function normalizeMessage(message) {
+    return message
+        .replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, '<email>')
+        .replace(/\b\d{4,}\b/g, '<number>')
+        .replace(/\s+/g, ' ')
+        .trim()
+        .slice(0, 160);
+}
+function redact(value, depth, seen) {
+    if (depth < 0) {
+        return '[truncated]';
+    }
+    if (typeof value === 'string') {
+        return redactString(value);
+    }
+    if (typeof value !== 'object' || value === null) {
+        return value;
+    }
+    if (seen.has(value)) {
+        return '[circular]';
+    }
+    seen.add(value);
+    if (Array.isArray(value)) {
+        return value.map((item) => redact(item, depth - 1, seen));
+    }
+    const output = {};
+    for (const [key, nested] of Object.entries(value)) {
+        if (key === '__proto__' || key === 'constructor' || key === 'prototype')
+            continue;
+        output[key] = sensitiveKey(key) ? REDACTED : redact(nested, depth - 1, seen);
+    }
+    return output;
+}
+function redactString(value) {
+    const fullySensitive = /^Bearer\s+[A-Za-z0-9._~+/-]+=*$/i.test(value) ||
+        /^pat-[A-Za-z0-9_-]{12,}$/i.test(value) ||
+        /^hsx_[A-Za-z0-9_-]{16,}$/i.test(value);
+    if (fullySensitive) {
+        return REDACTED;
+    }
+    return value
+        .replace(/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, REDACTED)
+        .replace(/\+?\d[\d\s().-]{8,}\d/g, REDACTED);
+}
+function sensitiveKey(key) {
+    return /(^|_|-)(authorization|password|secret|token|api[-_]?key|pak|refresh[-_]?token|access[-_]?token|email|phone)(_|-|$)/i.test(key);
+}
+function assertSafeSqlIdentifier(value, name) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(value)) {
+        throw new Error(`${name} must be a safe SQL identifier.`);
+    }
+}
+function sanitizeToken(value) {
+    return value.replace(/[^a-zA-Z0-9_.-]/g, '_') || 'UnknownError';
+}
+function sanitizePathPart(value) {
+    return value.replace(/[^A-Za-z0-9_.-]+/g, '_') || 'unknown';
+}
+function windowStart(observedAt, windowMs) {
+    const time = Date.parse(observedAt);
+    const safeTime = Number.isFinite(time) ? time : 0;
+    return Math.floor(safeTime / windowMs) * windowMs;
+}
+function clamp(value, min, max) {
+    return Math.min(max, Math.max(min, value));
+}
+function hashToUnit(value) {
+    return Number.parseInt(hash(value).slice(0, 8), 16) / 0xffffffff;
+}
+function hash(value) {
+    let hashValue = 0x811c9dc5;
+    for (let index = 0; index < value.length; index += 1) {
+        hashValue ^= value.charCodeAt(index);
+        hashValue = Math.imul(hashValue, 0x01000193);
+    }
+    return (hashValue >>> 0).toString(16).padStart(8, '0');
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAExC,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAC1C,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AA4HrC,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;AAE7C,MAAM,UAAU,gBAAgB,CAAC,EAC/B,YAAY,EACZ,KAAK,GACmB;IACxB,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,iBAAiB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,GAAG,YAAY,IAAI,UAAU,IAAI,IAAI,CAAC,GAAG,YAAY,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC,EAAE,CAAC;IAE/G,OAAO;QACL,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC;QACnE,UAAU;QACV,cAAc;QACd,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,UAA4B,EAAE;IAClF,OAAO,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,EAAE,IAAI,OAAO,EAAU,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,MAAM,iBAAiB,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,MAAM,CAAC;IACtD,MAAM,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,IAAI,EAAE,CAAC;IAC5E,MAAM,gCAAgC,GAAG,OAAO,CAAC,gCAAgC,IAAI,GAAG,CAAC;IACzF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE/C,OAAO;QACL,oBAAoB,CAAC,QAAQ;YAC3B,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,iBAAiB,IAAI,CAAC,EAAE,CAAC;gBAC3B,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,YAAY,IAAI,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC/H,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC;QAC7C,CAAC;QACD,kBAAkB,CAAC,QAAQ;YACzB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;YAC/D,MAAM,cAAc,GAAG,GAAG,QAAQ,CAAC,WAAW,CAAC,WAAW,IAAI,MAAM,EAAE,CAAC;YACvE,MAAM,SAAS,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;YAC1E,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAErD,IACE,gBAAgB,IAAI,0BAA0B;gBAC9C,WAAW,IAAI,gCAAgC,EAC/C,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,iBAAiB,CAAC,GAAG,CAAC,cAAc,EAAE,gBAAgB,GAAG,CAAC,CAAC,CAAC;YAC5D,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,EAC/C,MAAM,EACN,MAAM,GAAG,aAAa,EACtB,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,GAC6B;IAClC,OAAO,MAAM,CAAC,UAAU,CACtB,gCAAgC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,EAC/C,MAAM,EACN,MAAM,GAAG,aAAa,EACtB,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,GAC6B;IAClC,OAAO,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzB,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAEzE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,CAAC;QAED,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,MAAsB,EACtB,QAA+B;IAE/B,OAAO,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CACR,QAAQ,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACzC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAwB,EACxB,MAA6B;IAE7B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACtD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;KACxB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAAwB,EACxB,QAA+B;IAE/B,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC1D,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;KACxB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,EAC/C,eAAe,EACf,EAAE,EACF,KAAK,EACL,EAAE,EACF,WAAW,GAAG,sBAAsB,EACpC,QAAQ,GAAG,sBAAsB,EACjC,iBAAiB,GAAG,IAAI,EACxB,mBAAmB,GAAG,IAAI,EAC1B,uBAAuB,GAAG,KAAK,GACG;IAClC,uBAAuB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,kBAAkB,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAE9D,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAK;YACrB,eAAe,EAAE,cAAc,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YAExD,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;gBAC/B,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,mBAAmB;oBACzB,OAAO,EAAE,kBAAkB;oBAC3B,KAAK;iBACyB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,QAAQ;YAC1B,IAAI,EAAE,EAAE,CAAC;gBACP,MAAM,EAAE;qBACL,OAAO,CACN,eAAe,WAAW;;;;;;;;;;;;;;6DAcuB,CAClD;qBACA,IAAI,CACH,oBAAoB,CAAC,QAAQ,CAAC,EAC9B,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,SAAS,EAClB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,YAAY,EACrB,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,WAAW,EAAE,WAAW,IAAI,IAAI,EACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CACzB;qBACA,GAAG,EAAE,CAAC;YACX,CAAC;YAED,IAAI,EAAE,IAAI,CAAC,uBAAuB,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;gBACpE,iEAAiE;gBACjE,+DAA+D;gBAC/D,mEAAmE;gBACnE,8DAA8D;gBAC9D,iEAAiE;gBACjE,sDAAsD;gBACtD,MAAM,GAAG,GAAG;oBACV,kBAAkB;oBAClB,QAAQ,CAAC,SAAS;oBAClB,QAAQ,CAAC,SAAS;oBAClB,oBAAoB,CAAC,QAAQ,CAAC;iBAC/B;qBACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;qBACjC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACb,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;oBAC1C,YAAY,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE;oBACjD,cAAc,EAAE;wBACd,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;wBAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;wBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;wBACnC,OAAO,EAAE,QAAQ,CAAC,OAAO;qBAC1B;iBACF,CAAC,CAAC;YACL,CAAC;YAED,IAAI,KAAK,IAAI,mBAAmB,EAAE,CAAC;gBACjC,MAAM,KAAK,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,qBAAqB;oBAC3B,OAAO,EAAE,kBAAkB;oBAC3B,QAAQ;iBACsB,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAA4B;IAK1D,OAAO;QACL,KAAK,EAAE;YACL,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,UAAU;SACjB;QACD,OAAO,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,OAAO,EAAE;YACP,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,YAAY;YAClB,KAAK,CAAC,QAAQ;SACf;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAA+B;IAClE,OAAO;QACL,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;QACnD,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,UAAU;QACnB,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,QAAQ;QACjB,IAAI,CACF,IAAI,CAAC,SAAS,CAAC;YACb,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,YAAY,EAAE,QAAQ,CAAC,YAAY;YACnC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,OAAO,EAAE,QAAQ,CAAC,OAAO;YACzB,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,WAAW,IAAI,EAAE;SACrD,CAAC,CACH;KACF;SACE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;SACrC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC9C,EAAE,EACF,WAAW,GAAG,sBAAsB,EACpC,SAAS,EACT,SAAS,EACT,QAAQ,EACR,OAAO,EACP,WAAW,EACX,KAAK,GAAG,EAAE,GACuB;IACjC,uBAAuB,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACpD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,OAAO,GAAa,CAAC,gBAAgB,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAc,CAAC,SAAS,CAAC,CAAC;IAEtC,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvB,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,OAAO,CACN;cACQ,WAAW;SAChB,KAAK;;eAEC,CACV;SACA,IAAI,CAAC,GAAG,MAAM,CAAC;SACf,GAAG,EAAmC,CAAC;IAE1C,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC9B,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACpF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,EACrB,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,GAMN;IACC,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,aAAa,EAAE,qBAAqB,CAAC,KAAK,IAAI,EAAE,CAAC;KAClD,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;IAClG,CAAC;IAED,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,IAAI;QACP,WAAW,EAAE,gBAAgB,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC;QAC3E,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,qBAAqB,CAAC;YAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpD,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,UAAkB,EAAE,KAAc;IAC3D,IAAI,KAAK,YAAY,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;aACtB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;aACvC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;QAEtE,IAAI,KAAK,EAAE,CAAC;YACV,OAAO,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC;QAClC,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrF,OAAO,GAAG,UAAU,IAAI,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO,GAAG,UAAU,UAAU,CAAC;AACjC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,IAAI;SACR,IAAI,EAAE;SACN,OAAO,CAAC,0BAA0B,EAAE,IAAI,CAAC;SACzC,OAAO,CAAC,0BAA0B,EAAE,QAAQ,CAAC;SAC7C,OAAO,CAAC,WAAW,EAAE,eAAe,CAAC;SACrC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC;SAClC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe;IACvC,OAAO,OAAO;SACX,OAAO,CAAC,iDAAiD,EAAE,SAAS,CAAC;SACrE,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC;SAClC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,IAAI,EAAE;SACN,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;IAClE,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,aAAa,IAAI,GAAG,KAAK,WAAW;YAAE,SAAS;QAClF,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,cAAc,GAClB,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9C,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC;QACvC,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE1C,IAAI,cAAc,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK;SACT,OAAO,CAAC,iDAAiD,EAAE,QAAQ,CAAC;SACpE,OAAO,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,qHAAqH,CAAC,IAAI,CAC/H,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,IAAY;IAC1D,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,QAAgB;IACvD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC,GAAG,QAAQ,CAAC;AACpD,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC;AACnE,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,IAAI,SAAS,GAAG,UAAU,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC"}

package/dist/test.d.ts

@@ -0,0 +1,9 @@
+import type { CheckpointMetricEvent, CheckpointRunExemplar } from '@hs-x/types';
+import type { CheckpointWriter } from './index.js';
+export interface MemoryCheckpointWriter extends CheckpointWriter {
+    readonly metrics: readonly CheckpointMetricEvent[];
+    readonly exemplars: readonly CheckpointRunExemplar[];
+    reset(): void;
+}
+export declare function createMemoryCheckpointWriter(): MemoryCheckpointWriter;
+//# sourceMappingURL=test.d.ts.map

package/dist/test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.d.ts","sourceRoot":"","sources":["../src/test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACnD,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACrD,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,4BAA4B,IAAI,sBAAsB,CAsBrE"}

package/dist/test.js

@@ -0,0 +1,23 @@
+export function createMemoryCheckpointWriter() {
+    const metrics = [];
+    const exemplars = [];
+    return {
+        get metrics() {
+            return metrics;
+        },
+        get exemplars() {
+            return exemplars;
+        },
+        writeMetric(event) {
+            metrics.push(event);
+        },
+        writeExemplar(exemplar) {
+            exemplars.push(exemplar);
+        },
+        reset() {
+            metrics.length = 0;
+            exemplars.length = 0;
+        },
+    };
+}
+//# sourceMappingURL=test.js.map

package/dist/test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test.js","sourceRoot":"","sources":["../src/test.ts"],"names":[],"mappings":"AASA,MAAM,UAAU,4BAA4B;IAC1C,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,OAAO;QACL,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,SAAS;YACX,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,WAAW,CAAC,KAAK;YACf,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,aAAa,CAAC,QAAQ;YACpB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK;YACH,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACnB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/migrations/0001_checkpoint_exemplars.sql

@@ -0,0 +1,22 @@
+CREATE TABLE IF NOT EXISTS checkpoint_exemplars (
+  exemplar_id TEXT PRIMARY KEY,
+  account_id TEXT NOT NULL,
+  hsx_account_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  deploy_id TEXT NOT NULL,
+  worker_name TEXT NOT NULL,
+  capability_id TEXT NOT NULL,
+  portal_id TEXT NOT NULL,
+  outcome TEXT NOT NULL,
+  observed_at TEXT NOT NULL,
+  duration_ms REAL NOT NULL,
+  fingerprint TEXT,
+  value_json TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_checkpoint_exemplars_project_time
+  ON checkpoint_exemplars (project_id, observed_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_checkpoint_exemplars_fingerprint_time
+  ON checkpoint_exemplars (fingerprint, observed_at DESC)
+  WHERE fingerprint IS NOT NULL;

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@hs-x/checkpoint",
+  "version": "0.1.0",
+  "description": "HS-X Checkpoint observability primitives — metrics, exemplars, fingerprinting, and redaction.",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./test": {
+      "types": "./dist/test.d.ts",
+      "default": "./dist/test.js"
+    }
+  },
+  "files": [
+    "dist",
+    "migrations",
+    "README.md",
+    "CONTEXT.md"
+  ],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@hs-x/types": "0.1.0",
+    "effect": "^3.10.19"
+  },
+  "devDependencies": {
+    "@hs-x/fixtures": "0.1.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}