@ironbee-ai/cli 0.13.0 → 0.14.1

package/dist/otel/daemon/ensure.d.ts

@@ -0,0 +1,52 @@
+/**
+ * IronBee — OTEL collector daemon liveness `ensure` (+ version self-replace)
+ *
+ * `ensureOTELCollector` is the fire-and-forget helper hooks call to make sure a
+ * current daemon is running. It probes `/health`, then either uses the running
+ * daemon, spawns one, or replaces a stale-version one. It must never block the
+ * host hook's critical path and never throw.
+ *
+ * Singleton arbitration is the OS port bind (see `collector.ts`); this module
+ * only decides whether to *attempt* a spawn. The version-compare decision is
+ * isolated in {@link decideEnsureAction} for unit testing.
+ */
+import { OTELHealth } from "../types";
+/** Result of probing the daemon's `/health`. */
+export type HealthProbe = {
+    kind: "ok";
+    health: OTELHealth;
+} | {
+    kind: "unreachable";
+} | {
+    kind: "foreign";
+};
+/** What `ensure` should do after probing. */
+export type EnsureDecision = "disabled" | "use-existing" | "spawn" | "replace" | "foreign";
+/**
+ * Pure decision: given whether the feature is enabled, the health probe, and
+ * our own CLI version, decide the action. Isolated for unit testing.
+ *
+ *  - feature off          → `disabled`
+ *  - nothing on the port  → `spawn`
+ *  - a foreign listener   → `foreign` (warn + stand down)
+ *  - running version <  mine → `replace` (newest build wins)
+ *  - running version >= mine → `use-existing`
+ */
+export declare function decideEnsureAction(opts: {
+    enabled: boolean;
+    probe: HealthProbe;
+    myVersion: string;
+}): EnsureDecision;
+/** GET `/health` and classify the response. Never throws / never rejects. */
+export declare function fetchHealth(port: number, host?: string, timeoutMs?: number): Promise<HealthProbe>;
+/** POST `/admin/shutdown` (best-effort; resolves regardless of outcome). */
+export declare function requestShutdown(port: number, host?: string, timeoutMs?: number): Promise<void>;
+/** POST `/admin/reprocess` (best-effort; resolves regardless of outcome). */
+export declare function requestReprocess(port: number, host?: string, timeoutMs?: number): Promise<void>;
+export declare function spawnDaemon(port: number): void;
+/**
+ * Ensure a current OTEL collector daemon is running for this machine.
+ * Fire-and-forget, non-blocking, never throws — safe on a hook's hot path.
+ */
+export declare function ensureOTELCollector(projectDir?: string): Promise<void>;
+//# sourceMappingURL=ensure.d.ts.map

package/dist/otel/daemon/ensure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.d.ts","sourceRoot":"","sources":["../../../src/otel/daemon/ensure.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAUH,OAAO,EAAE,UAAU,EAAqB,MAAM,UAAU,CAAC;AAQzD,gDAAgD;AAChD,MAAM,MAAM,WAAW,GACjB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,GACvB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B,6CAA6C;AAC7C,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAE3F;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,WAAW,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACrB,GAAG,cAAc,CAWjB;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CACvB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAqB,EAC3B,SAAS,GAAE,MAAyB,GACrC,OAAO,CAAC,WAAW,CAAC,CAoCtB;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,CAC3B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAqB,EAC3B,SAAS,GAAE,MAAyB,GACrC,OAAO,CAAC,IAAI,CAAC,CAoBf;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAC5B,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAqB,EAC3B,SAAS,GAAE,MAAyB,GACrC,OAAO,CAAC,IAAI,CAAC,CAoBf;AA2CD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAiB9C;AAMD;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC5E"}

package/dist/otel/daemon/ensure.js

@@ -0,0 +1,226 @@
+"use strict";
+/**
+ * IronBee — OTEL collector daemon liveness `ensure` (+ version self-replace)
+ *
+ * `ensureOTELCollector` is the fire-and-forget helper hooks call to make sure a
+ * current daemon is running. It probes `/health`, then either uses the running
+ * daemon, spawns one, or replaces a stale-version one. It must never block the
+ * host hook's critical path and never throw.
+ *
+ * Singleton arbitration is the OS port bind (see `collector.ts`); this module
+ * only decides whether to *attempt* a spawn. The version-compare decision is
+ * isolated in {@link decideEnsureAction} for unit testing.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decideEnsureAction = decideEnsureAction;
+exports.fetchHealth = fetchHealth;
+exports.requestShutdown = requestShutdown;
+exports.requestReprocess = requestReprocess;
+exports.spawnDaemon = spawnDaemon;
+exports.ensureOTELCollector = ensureOTELCollector;
+const http_1 = require("http");
+const child_process_1 = require("child_process");
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const config_1 = require("../../lib/config");
+const version_1 = require("../../lib/version");
+const logger_1 = require("../../lib/logger");
+const types_1 = require("../types");
+const DEFAULT_HOST = "127.0.0.1";
+/** Health-probe timeout — tiny so a hook never blocks on it. */
+const PROBE_TIMEOUT_MS = 300;
+/** Brief wait after a stale daemon's shutdown before spawning its replacement. */
+const REPLACE_PORT_RELEASE_MS = 400;
+/**
+ * Pure decision: given whether the feature is enabled, the health probe, and
+ * our own CLI version, decide the action. Isolated for unit testing.
+ *
+ *  - feature off          → `disabled`
+ *  - nothing on the port  → `spawn`
+ *  - a foreign listener   → `foreign` (warn + stand down)
+ *  - running version <  mine → `replace` (newest build wins)
+ *  - running version >= mine → `use-existing`
+ */
+function decideEnsureAction(opts) {
+    if (!opts.enabled) {
+        return "disabled";
+    }
+    if (opts.probe.kind === "unreachable") {
+        return "spawn";
+    }
+    if (opts.probe.kind === "foreign") {
+        return "foreign";
+    }
+    return (0, version_1.compareVersions)(opts.probe.health.version, opts.myVersion) < 0 ? "replace" : "use-existing";
+}
+/** GET `/health` and classify the response. Never throws / never rejects. */
+function fetchHealth(port, host = DEFAULT_HOST, timeoutMs = PROBE_TIMEOUT_MS) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = (p) => {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            resolve(p);
+        };
+        const req = (0, http_1.request)({ host, port, path: "/health", method: "GET", timeout: timeoutMs }, (res) => {
+            let body = "";
+            res.setEncoding("utf-8");
+            res.on("data", (d) => { body += d; });
+            res.on("end", () => {
+                try {
+                    const parsed = JSON.parse(body);
+                    if (parsed !== null && typeof parsed === "object"
+                        && parsed.service === types_1.OTEL_SERVICE_NAME
+                        && typeof parsed.version === "string") {
+                        done({ kind: "ok", health: parsed });
+                        return;
+                    }
+                }
+                catch {
+                    // fall through — not our JSON shape
+                }
+                done({ kind: "foreign" });
+            });
+        });
+        req.on("error", () => { done({ kind: "unreachable" }); });
+        req.on("timeout", () => { req.destroy(); done({ kind: "unreachable" }); });
+        req.end();
+    });
+}
+/** POST `/admin/shutdown` (best-effort; resolves regardless of outcome). */
+function requestShutdown(port, host = DEFAULT_HOST, timeoutMs = PROBE_TIMEOUT_MS) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = () => {
+            if (!settled) {
+                settled = true;
+                resolve();
+            }
+        };
+        const req = (0, http_1.request)({ host, port, path: "/admin/shutdown", method: "POST", timeout: timeoutMs }, (res) => {
+            res.on("data", () => { });
+            res.on("end", done);
+        });
+        req.on("error", done);
+        req.on("timeout", () => { req.destroy(); done(); });
+        req.end();
+    });
+}
+/** POST `/admin/reprocess` (best-effort; resolves regardless of outcome). */
+function requestReprocess(port, host = DEFAULT_HOST, timeoutMs = PROBE_TIMEOUT_MS) {
+    return new Promise((resolve) => {
+        let settled = false;
+        const done = () => {
+            if (!settled) {
+                settled = true;
+                resolve();
+            }
+        };
+        const req = (0, http_1.request)({ host, port, path: "/admin/reprocess", method: "POST", timeout: timeoutMs }, (res) => {
+            res.on("data", () => { });
+            res.on("end", done);
+        });
+        req.on("error", done);
+        req.on("timeout", () => { req.destroy(); done(); });
+        req.end();
+    });
+}
+/** Resolve how to re-invoke the CLI for a detached child (mirrors queue/spawn). */
+function resolveInvocation() {
+    const override = process.env.IRONBEE_BIN;
+    if (override) {
+        return { command: override, args: [] };
+    }
+    const argv0 = process.argv[0];
+    const argv1 = process.argv[1] ?? "";
+    if (argv1.endsWith("index.js") || argv1.endsWith("index.ts")) {
+        return { command: argv0, args: [argv1] };
+    }
+    return { command: "ironbee", args: [] };
+}
+/** Spawn a detached `ironbee otel run --port <port>`. Returns immediately. */
+/** Cap on the daemon log before a startup truncate (single-generation rotation). */
+const DAEMON_LOG_MAX_BYTES = 5 * 1024 * 1024;
+/**
+ * Open `~/.ironbee/otel/daemon.log` for the detached daemon's stdout/stderr, so
+ * the otherwise-invisible daemon (forward results, collector rejections, errors)
+ * is observable. Truncates past {@link DAEMON_LOG_MAX_BYTES}. Returns `"ignore"`
+ * (discard) when the log can't be opened — never blocks the spawn.
+ */
+function openDaemonLogTarget() {
+    try {
+        const dir = (0, path_1.join)((0, os_1.homedir)(), ".ironbee", "otel");
+        (0, fs_1.mkdirSync)(dir, { recursive: true });
+        const logPath = (0, path_1.join)(dir, "daemon.log");
+        let truncate = false;
+        try {
+            truncate = (0, fs_1.statSync)(logPath).size > DAEMON_LOG_MAX_BYTES;
+        }
+        catch {
+            // no existing log — append-open creates it
+        }
+        return (0, fs_1.openSync)(logPath, truncate ? "w" : "a");
+    }
+    catch {
+        return "ignore";
+    }
+}
+function spawnDaemon(port) {
+    const inv = resolveInvocation();
+    const logTarget = openDaemonLogTarget();
+    const child = (0, child_process_1.spawn)(inv.command, [...inv.args, "otel", "run", "--port", String(port)], { detached: true, stdio: ["ignore", logTarget, logTarget], env: process.env });
+    child.unref();
+    if (typeof logTarget === "number") {
+        // The child holds its own dup'd fd; release the parent's copy.
+        try {
+            (0, fs_1.closeSync)(logTarget);
+        }
+        catch {
+            // already closed / race — fine
+        }
+    }
+}
+function delay(ms) {
+    return new Promise((resolve) => { setTimeout(resolve, ms); });
+}
+/**
+ * Ensure a current OTEL collector daemon is running for this machine.
+ * Fire-and-forget, non-blocking, never throws — safe on a hook's hot path.
+ */
+async function ensureOTELCollector(projectDir) {
+    try {
+        const config = (0, config_1.loadConfig)(projectDir);
+        if (!(0, config_1.isOTELEnabled)(config)) {
+            return; // disabled short-circuit — no probe, no spawn
+        }
+        const port = (0, config_1.getOTELPort)(config);
+        const probe = await fetchHealth(port);
+        const decision = decideEnsureAction({
+            enabled: true,
+            probe,
+            myVersion: (0, version_1.getLocalVersion)(),
+        });
+        switch (decision) {
+            case "spawn":
+                spawnDaemon(port);
+                break;
+            case "replace":
+                await requestShutdown(port);
+                await delay(REPLACE_PORT_RELEASE_MS);
+                spawnDaemon(port);
+                break;
+            case "foreign":
+                logger_1.logger.warn(`otel: a non-ironbee service is listening on ${DEFAULT_HOST}:${port}; OTEL collector not started`);
+                break;
+            default:
+                break; // use-existing / disabled → nothing
+        }
+    }
+    catch (e) {
+        logger_1.logger.debug(`otel: ensureOTELCollector failed: ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+//# sourceMappingURL=ensure.js.map

package/dist/otel/daemon/ensure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.js","sourceRoot":"","sources":["../../../src/otel/daemon/ensure.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AAqCH,gDAeC;AAGD,kCAwCC;AAGD,0CAwBC;AAGD,4CAwBC;AA2CD,kCAiBC;AAUD,kDAiCC;AA1PD,+BAA+D;AAC/D,iDAAoD;AACpD,2BAA8D;AAC9D,2BAA6B;AAC7B,+BAA4B;AAC5B,6CAAyF;AACzF,+CAAqE;AACrE,6CAA0C;AAC1C,oCAAyD;AAEzD,MAAM,YAAY,GAAW,WAAW,CAAC;AACzC,gEAAgE;AAChE,MAAM,gBAAgB,GAAW,GAAG,CAAC;AACrC,kFAAkF;AAClF,MAAM,uBAAuB,GAAW,GAAG,CAAC;AAW5C;;;;;;;;;GASG;AACH,SAAgB,kBAAkB,CAAC,IAIlC;IACG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAChB,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,IAAA,yBAAe,EAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC;AACvG,CAAC;AAED,6EAA6E;AAC7E,SAAgB,WAAW,CACvB,IAAY,EACZ,OAAe,YAAY,EAC3B,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAc,CAAC,OAAiC,EAAQ,EAAE;QACxE,IAAI,OAAO,GAAY,KAAK,CAAC;QAC7B,MAAM,IAAI,GAA6B,CAAC,CAAc,EAAQ,EAAE;YAC5D,IAAI,OAAO,EAAE,CAAC;gBACV,OAAO;YACX,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,CAAC,CAAC,CAAC;QACf,CAAC,CAAC;QACF,MAAM,GAAG,GAAmC,IAAA,cAAW,EACnD,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,EAClE,CAAC,GAAoB,EAAQ,EAAE;YAC3B,IAAI,IAAI,GAAW,EAAE,CAAC;YACtB,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACzB,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAQ,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAS,EAAE;gBACrB,IAAI,CAAC;oBACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzC,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ;2BACzC,MAAqB,CAAC,OAAO,KAAK,yBAAiB;2BACpD,OAAQ,MAAqB,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;wBACxD,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAoB,EAAE,CAAC,CAAC;wBACnD,OAAO;oBACX,CAAC;gBACL,CAAC;gBAAC,MAAM,CAAC;oBACL,oCAAoC;gBACxC,CAAC;gBACD,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACP,CAAC,CACJ,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAS,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAS,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC;AAED,4EAA4E;AAC5E,SAAgB,eAAe,CAC3B,IAAY,EACZ,OAAe,YAAY,EAC3B,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;QACnD,IAAI,OAAO,GAAY,KAAK,CAAC;QAC7B,MAAM,IAAI,GAAe,GAAS,EAAE;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;YACd,CAAC;QACL,CAAC,CAAC;QACF,MAAM,GAAG,GAAmC,IAAA,cAAW,EACnD,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAC3E,CAAC,GAAoB,EAAQ,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAS,EAAE,GAAe,CAAC,CAAC,CAAC;YAC5C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC,CACJ,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAS,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC;AAED,6EAA6E;AAC7E,SAAgB,gBAAgB,CAC5B,IAAY,EACZ,OAAe,YAAY,EAC3B,YAAoB,gBAAgB;IAEpC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE;QACnD,IAAI,OAAO,GAAY,KAAK,CAAC;QAC7B,MAAM,IAAI,GAAe,GAAS,EAAE;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACX,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,EAAE,CAAC;YACd,CAAC;QACL,CAAC,CAAC;QACF,MAAM,GAAG,GAAmC,IAAA,cAAW,EACnD,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,EAC5E,CAAC,GAAoB,EAAQ,EAAE;YAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,GAAS,EAAE,GAAe,CAAC,CAAC,CAAC;YAC5C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACxB,CAAC,CACJ,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtB,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAS,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,GAAG,CAAC,GAAG,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACP,CAAC;AAED,mFAAmF;AACnF,SAAS,iBAAiB;IACtB,MAAM,QAAQ,GAAuB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAC7D,IAAI,QAAQ,EAAE,CAAC;QACX,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,KAAK,GAAW,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAW,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5C,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,oFAAoF;AACpF,MAAM,oBAAoB,GAAW,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD;;;;;GAKG;AACH,SAAS,mBAAmB;IACxB,IAAI,CAAC;QACD,MAAM,GAAG,GAAW,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACxD,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAW,IAAA,WAAI,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,QAAQ,GAAY,KAAK,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,IAAA,aAAQ,EAAC,OAAO,CAAC,CAAC,IAAI,GAAG,oBAAoB,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC;YACL,2CAA2C;QAC/C,CAAC;QACD,OAAO,IAAA,aAAQ,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,QAAQ,CAAC;IACpB,CAAC;AACL,CAAC;AAED,SAAgB,WAAW,CAAC,IAAY;IACpC,MAAM,GAAG,GAAwC,iBAAiB,EAAE,CAAC;IACrE,MAAM,SAAS,GAAsB,mBAAmB,EAAE,CAAC;IAC3D,MAAM,KAAK,GAAiB,IAAA,qBAAK,EAC7B,GAAG,CAAC,OAAO,EACX,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EACpD,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAChF,CAAC;IACF,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChC,+DAA+D;QAC/D,IAAI,CAAC;YACD,IAAA,cAAS,EAAC,SAAS,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACL,+BAA+B;QACnC,CAAC;IACL,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,mBAAmB,CAAC,UAAmB;IACzD,IAAI,CAAC;QACD,MAAM,MAAM,GAAkB,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,IAAA,sBAAa,EAAC,MAAM,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,8CAA8C;QAC1D,CAAC;QACD,MAAM,IAAI,GAAW,IAAA,oBAAW,EAAC,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAgB,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAmB,kBAAkB,CAAC;YAChD,OAAO,EAAE,IAAI;YACb,KAAK;YACL,SAAS,EAAE,IAAA,yBAAe,GAAE;SAC/B,CAAC,CAAC;QACH,QAAQ,QAAQ,EAAE,CAAC;YACf,KAAK,OAAO;gBACR,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,MAAM;YACV,KAAK,SAAS;gBACV,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;gBAC5B,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACrC,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,MAAM;YACV,KAAK,SAAS;gBACV,eAAM,CAAC,IAAI,CACP,+CAA+C,YAAY,IAAI,IAAI,8BAA8B,CACpG,CAAC;gBACF,MAAM;YACV;gBACI,MAAM,CAAC,oCAAoC;QACnD,CAAC;IACL,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,eAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC;AACL,CAAC"}

package/dist/otel/daemon/forward.d.ts

@@ -0,0 +1,47 @@
+/**
+ * IronBee — OTEL forward pipeline.
+ *
+ * Turns submitted body files into `session_context` events and ships them to
+ * the IronBee Collector, grouped per **collector target** (events for different
+ * projects/targets can't share a POST). Delivery is **delete-after-confirm**:
+ * a request file is unlinked only on a 2xx (or a permanent 4xx); a transient
+ * failure keeps it for catch-up retry. Spec: `docs/otel-session-context.md`
+ * §7.1 / §9.
+ */
+import { OTELHealthCounters } from "../types";
+import { ApiRequestBodyMeta } from "../context/extract";
+export declare class ForwardPipeline {
+    private pending;
+    private failed;
+    private dropped;
+    private reprocessing;
+    private flushTimer;
+    private readonly buffers;
+    /** Per-session last-admitted epoch ms — drives the `emitMinIntervalSeconds` throttle. */
+    private readonly lastEmitMs;
+    private readonly flushMs;
+    constructor(flushMs?: number);
+    /** Observability counters for `/health`. */
+    counters(): OTELHealthCounters;
+    /** Submit a body file for async processing + forwarding (fire-and-forget). */
+    submit(meta: ApiRequestBodyMeta): void;
+    private process;
+    /**
+     * Leading-edge per-session throttle for `otel.emitMinIntervalSeconds`.
+     * Returns `true` when this request should be coalesced away (dropped). The
+     * interval is read live per project (config can change between requests);
+     * `0` (the default) disables the throttle entirely.
+     */
+    private shouldThrottle;
+    private scheduleFlush;
+    /**
+     * Flush every per-target buffer. All-or-nothing per batch:
+     *  - 2xx               → unlink all contributing request files (delivered)
+     *  - permanent 4xx     → unlink (retry won't help) + log
+     *  - 429 / 5xx / net   → keep the files (catch-up / `otel retry` re-sends)
+     */
+    flushAll(): Promise<void>;
+    /** Re-scan registry otel dirs and resubmit orphans. Non-reentrant. */
+    reprocess(): void;
+}
+//# sourceMappingURL=forward.d.ts.map

package/dist/otel/daemon/forward.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.d.ts","sourceRoot":"","sources":["../../../src/otel/daemon/forward.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAkCxD,qBAAa,eAAe;IACxB,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,OAAO,CAAa;IAC5B,OAAO,CAAC,YAAY,CAAkB;IACtC,OAAO,CAAC,UAAU,CAA+B;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAkC;IAC7D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,OAAO,GAAE,MAAyB;IAI9C,4CAA4C;IAC5C,QAAQ,IAAI,kBAAkB;IAS9B,8EAA8E;IAC9E,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI;YAWxB,OAAO;IA8BrB;;;;;OAKG;IACH,OAAO,CAAC,cAAc;IAiBtB,OAAO,CAAC,aAAa;IAWrB;;;;;OAKG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAuC/B,sEAAsE;IACtE,SAAS,IAAI,IAAI;CAapB"}

package/dist/otel/daemon/forward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forward.js","sourceRoot":"","sources":["../../../src/otel/daemon/forward.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAEH,2BAAgC;AAChC,mDAA2F;AAC3F,6CAA6E;AAC7E,6CAA0C;AAI1C,uCAA2D;AAC3D,2CAAiE;AAEjE,0EAA0E;AAC1E,SAAS,YAAY,CAAC,IAAY;IAC9B,MAAM,OAAO,GAAW,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,OAAO,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;AACxE,CAAC;AAED,MAAM,gBAAgB,GAAW,IAAI,CAAC;AACtC,MAAM,wBAAwB,GAAW,KAAK,CAAC;AAC/C;;;;;GAKG;AACH,MAAM,qBAAqB,GAAW,IAAI,CAAC;AAQ3C,SAAS,UAAU,CAAC,IAAY;IAC5B,IAAI,CAAC;QACD,IAAA,eAAU,EAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACL,wBAAwB;IAC5B,CAAC;AACL,CAAC;AAED,MAAa,eAAe;IAWxB,YAAY,UAAkB,gBAAgB;QAVtC,YAAO,GAAW,CAAC,CAAC;QACpB,WAAM,GAAW,CAAC,CAAC;QACnB,YAAO,GAAW,CAAC,CAAC;QACpB,iBAAY,GAAY,KAAK,CAAC;QAC9B,eAAU,GAA0B,IAAI,CAAC;QAChC,YAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;QAC/D,yFAAyF;QACxE,eAAU,GAAwB,IAAI,GAAG,EAAE,CAAC;QAIzD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,CAAC;IAED,4CAA4C;IAC5C,QAAQ;QACJ,OAAO;YACH,YAAY,EAAE,IAAI,CAAC,OAAO;YAC1B,eAAe,EAAE,IAAI,CAAC,MAAM;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,YAAY,EAAE,IAAA,4BAAgB,GAAE;SACnC,CAAC;IACN,CAAC;IAED,8EAA8E;IAC9E,MAAM,CAAC,IAAwB;QAC3B,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QAClB,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;aAClB,KAAK,CAAC,CAAC,CAAU,EAAQ,EAAE;YACxB,eAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC,CAAC;aACD,OAAO,CAAC,GAAS,EAAE;YAChB,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;IACX,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,IAAwB;QAC1C,MAAM,GAAG,GAAyB,MAAM,IAAA,yBAAe,EAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,OAAO;QACX,CAAC;QACD,MAAM,MAAM,GAA2B,IAAA,8BAAkB,EAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,sEAAsE;YACtE,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACX,CAAC;QACD,MAAM,GAAG,GAAW,GAAG,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC3D,uEAAuE;QACvE,wEAAwE;QACxE,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;YAClF,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACX,CAAC;QACD,IAAI,GAAG,GAA4B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,aAAa,EAAE,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACK,cAAc,CAAC,UAAkB,EAAE,SAAiB;QACxD,MAAM,UAAU,GAAW,IAAA,sCAA6B,EAAC,IAAA,mBAAU,EAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC;QACxF,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,MAAM,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAuB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,CAAC,+BAA+B;QAChD,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,qBAAqB,EAAE,CAAC;YAChD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,0CAA0C;QACvE,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QACpC,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,aAAa;QACjB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClB,OAAO;QACX,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAS,EAAE;YACpC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,QAAQ;QACV,MAAM,OAAO,GAAkB,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,SAAS;YACb,CAAC;YACD,MAAM,SAAS,GAAW,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;YACnD,MAAM,SAAS,GAAW,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,wBAAwB,CAAC;YAC3E,IAAI,CAAC;gBACD,MAAM,GAAG,GAAqC,MAAM,IAAA,2BAAe,EAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC3G,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;oBACxC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;wBACxB,UAAU,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBACD,eAAM,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;gBACtG,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACrE,gEAAgE;oBAChE,gEAAgE;oBAChE,+DAA+D;oBAC/D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;wBACxB,UAAU,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBACD,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBACjC,MAAM,MAAM,GAAW,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtE,eAAM,CAAC,IAAI,CAAC,4BAA4B,GAAG,CAAC,KAAK,CAAC,MAAM,uBAAuB,GAAG,CAAC,MAAM,kBAAkB,SAAS,IAAI,MAAM,EAAE,CAAC,CAAC;gBACtI,CAAC;qBAAM,CAAC;oBACJ,sDAAsD;oBACtD,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;oBAChC,eAAM,CAAC,KAAK,CAAC,gCAAgC,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;gBAC1F,CAAC;YACL,CAAC;YAAC,OAAO,CAAU,EAAE,CAAC;gBAClB,iDAAiD;gBACjD,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;gBAChC,eAAM,CAAC,KAAK,CAAC,8BAA8B,GAAG,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACxH,CAAC;QACL,CAAC;IACL,CAAC;IAED,sEAAsE;IACtE,SAAS;QACL,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,OAAO;QACX,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC;YACD,uEAAuE;YACvE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;YAChB,IAAA,4BAAgB,EAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC9B,CAAC;IACL,CAAC;CACJ;AAhKD,0CAgKC"}

package/dist/otel/daemon/paths.d.ts

@@ -0,0 +1,24 @@
+/**
+ * IronBee — OTEL body-ref path helpers (pure, path-aware, cross-platform).
+ *
+ * A raw body file lives at `<project_dir>/.ironbee/otel/<uuid>.request.json`.
+ * The daemon derives the project dir from that path (no registry walk), and the
+ * same check is the security gate: the daemon only reads / unlinks files that
+ * actually sit inside a `.ironbee/otel` directory (a loopback POST must not make
+ * it touch arbitrary paths).
+ */
+/**
+ * Derive `<project_dir>` from a `body_ref` of the shape
+ * `<project_dir>/.ironbee/otel/<file>`. Returns `null` when the path is not
+ * inside a `.ironbee/otel` directory — which doubles as the security gate
+ * (reject anything outside). Path-aware: never splits on a hardcoded `/`.
+ */
+export declare function projectDirFromBodyRef(bodyRef: string): string | null;
+/** True when `body_ref` is inside a `.ironbee/otel` dir (the security gate). */
+export declare function isInsideOTELDir(bodyRef: string): boolean;
+/**
+ * The request/response uuid from a body-ref filename:
+ * `<uuid>.request.json` → `<uuid>`, `<request_id>.response.json` → `<request_id>`.
+ */
+export declare function requestUuidFromBodyRef(bodyRef: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/otel/daemon/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../../src/otel/daemon/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAapE;AAED,gFAAgF;AAChF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAExD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D"}

package/dist/otel/daemon/paths.js

@@ -0,0 +1,47 @@
+"use strict";
+/**
+ * IronBee — OTEL body-ref path helpers (pure, path-aware, cross-platform).
+ *
+ * A raw body file lives at `<project_dir>/.ironbee/otel/<uuid>.request.json`.
+ * The daemon derives the project dir from that path (no registry walk), and the
+ * same check is the security gate: the daemon only reads / unlinks files that
+ * actually sit inside a `.ironbee/otel` directory (a loopback POST must not make
+ * it touch arbitrary paths).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.projectDirFromBodyRef = projectDirFromBodyRef;
+exports.isInsideOTELDir = isInsideOTELDir;
+exports.requestUuidFromBodyRef = requestUuidFromBodyRef;
+const path_1 = require("path");
+const OTEL_DIRNAME = "otel";
+const IRONBEE_DIRNAME = ".ironbee";
+/**
+ * Derive `<project_dir>` from a `body_ref` of the shape
+ * `<project_dir>/.ironbee/otel/<file>`. Returns `null` when the path is not
+ * inside a `.ironbee/otel` directory — which doubles as the security gate
+ * (reject anything outside). Path-aware: never splits on a hardcoded `/`.
+ */
+function projectDirFromBodyRef(bodyRef) {
+    const otelDir = (0, path_1.dirname)(bodyRef);
+    const ironbeeDir = (0, path_1.dirname)(otelDir);
+    const projectDir = (0, path_1.dirname)(ironbeeDir);
+    if ((0, path_1.basename)(otelDir) === OTEL_DIRNAME
+        && (0, path_1.basename)(ironbeeDir) === IRONBEE_DIRNAME
+        && projectDir.length > 0
+        && projectDir !== ironbeeDir) {
+        return projectDir;
+    }
+    return null;
+}
+/** True when `body_ref` is inside a `.ironbee/otel` dir (the security gate). */
+function isInsideOTELDir(bodyRef) {
+    return projectDirFromBodyRef(bodyRef) !== null;
+}
+/**
+ * The request/response uuid from a body-ref filename:
+ * `<uuid>.request.json` → `<uuid>`, `<request_id>.response.json` → `<request_id>`.
+ */
+function requestUuidFromBodyRef(bodyRef) {
+    return (0, path_1.basename)(bodyRef).replace(/\.(request|response)\.json$/i, "");
+}
+//# sourceMappingURL=paths.js.map

package/dist/otel/daemon/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../../src/otel/daemon/paths.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;AAaH,sDAaC;AAGD,0CAEC;AAMD,wDAEC;AArCD,+BAAyC;AAEzC,MAAM,YAAY,GAAW,MAAM,CAAC;AACpC,MAAM,eAAe,GAAW,UAAU,CAAC;AAE3C;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,OAAe;IACjD,MAAM,OAAO,GAAW,IAAA,cAAO,EAAC,OAAO,CAAC,CAAC;IACzC,MAAM,UAAU,GAAW,IAAA,cAAO,EAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,UAAU,GAAW,IAAA,cAAO,EAAC,UAAU,CAAC,CAAC;IAC/C,IACI,IAAA,eAAQ,EAAC,OAAO,CAAC,KAAK,YAAY;WAC/B,IAAA,eAAQ,EAAC,UAAU,CAAC,KAAK,eAAe;WACxC,UAAU,CAAC,MAAM,GAAG,CAAC;WACrB,UAAU,KAAK,UAAU,EAC9B,CAAC;QACC,OAAO,UAAU,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,gFAAgF;AAChF,SAAgB,eAAe,CAAC,OAAe;IAC3C,OAAO,qBAAqB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,OAAe;IAClD,OAAO,IAAA,eAAQ,EAAC,OAAO,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/otel/daemon/process.d.ts

@@ -0,0 +1,21 @@
+/**
+ * IronBee — read a raw `*.request.json` body file and build its
+ * `session_context` event. Handles the security gate (path must be inside
+ * `.ironbee/otel`), the partial-write guard (size vs `body_length`), and
+ * identity resolution (session_id / project_name / model / base fields). Returns
+ * the built event + the owning project dir, or `null` to skip.
+ */
+import { SessionContextEvent } from "../../lib/event";
+import { ApiRequestBodyMeta } from "../context/extract";
+export interface ProcessedBody {
+    event: SessionContextEvent;
+    projectDir: string;
+    bodyRef: string;
+}
+/**
+ * Read + build. Returns `null` (skip) on: a path outside `.ironbee/otel`
+ * (security gate), a missing / unreadable file, unparseable JSON, or no
+ * resolvable session_id.
+ */
+export declare function processBodyFile(meta: ApiRequestBodyMeta): Promise<ProcessedBody | null>;
+//# sourceMappingURL=process.d.ts.map

package/dist/otel/daemon/process.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.d.ts","sourceRoot":"","sources":["../../../src/otel/daemon/process.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH,OAAO,EAAE,mBAAmB,EAAa,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAMxD,MAAM,WAAW,aAAa;IAC1B,KAAK,EAAE,mBAAmB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACnB;AAmFD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CA0D7F"}

package/dist/otel/daemon/process.js

@@ -0,0 +1,149 @@
+"use strict";
+/**
+ * IronBee — read a raw `*.request.json` body file and build its
+ * `session_context` event. Handles the security gate (path must be inside
+ * `.ironbee/otel`), the partial-write guard (size vs `body_length`), and
+ * identity resolution (session_id / project_name / model / base fields). Returns
+ * the built event + the owning project dir, or `null` to skip.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.processBodyFile = processBodyFile;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const logger_1 = require("../../lib/logger");
+const util_1 = require("../context/util");
+const classify_1 = require("../context/classify");
+const build_1 = require("../context/build");
+const paths_1 = require("./paths");
+const PARTIAL_WRITE_RETRIES = 3;
+const PARTIAL_WRITE_DELAY_MS = 50;
+function delay(ms) {
+    return new Promise((resolve) => { setTimeout(resolve, ms); });
+}
+function isObject(v) {
+    return v !== null && typeof v === "object" && !Array.isArray(v);
+}
+function readJsonObject(path) {
+    try {
+        const parsed = JSON.parse((0, fs_1.readFileSync)(path, "utf8"));
+        return isObject(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The model the request was actually sent with — `body.model` is the ground
+ * truth and is always present on a real Messages request. Preferred over the
+ * OTLP event's `model` attribute, which is empty on the catch-up path
+ * (`orphanMeta`) and which the collector rejects (empty `model` → HTTP 400).
+ */
+function modelFromBody(body) {
+    if (isObject(body) && typeof body.model === "string" && body.model.length > 0) {
+        return body.model;
+    }
+    return null;
+}
+/** Recover `session_id` from the body's double-encoded `metadata.user_id` (catch-up fallback). */
+function sessionIdFromBody(body) {
+    if (!isObject(body) || !isObject(body.metadata)) {
+        return null;
+    }
+    const userId = body.metadata.user_id;
+    if (typeof userId !== "string") {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(userId);
+        if (isObject(parsed) && typeof parsed.session_id === "string") {
+            return parsed.session_id;
+        }
+    }
+    catch {
+        // malformed → no fallback
+    }
+    return null;
+}
+/** Best-effort read of base fields from the session's state.json (may be absent). */
+function readSessionState(projectDir, sessionId) {
+    const j = readJsonObject((0, path_1.join)(projectDir, ".ironbee", "sessions", sessionId, "state.json"));
+    if (!j) {
+        return {};
+    }
+    const out = {};
+    if (typeof j.userEmail === "string") {
+        out.user_email = j.userEmail;
+    }
+    if (j.usageType === "api" || j.usageType === "subscription") {
+        out.usage_type = j.usageType;
+    }
+    if (typeof j.usagePlan === "string") {
+        out.usage_plan = j.usagePlan;
+    }
+    if (typeof j.projectName === "string") {
+        out.projectName = j.projectName;
+    }
+    return out;
+}
+/**
+ * Read + build. Returns `null` (skip) on: a path outside `.ironbee/otel`
+ * (security gate), a missing / unreadable file, unparseable JSON, or no
+ * resolvable session_id.
+ */
+async function processBodyFile(meta) {
+    const projectDir = (0, paths_1.projectDirFromBodyRef)(meta.body_ref);
+    if (projectDir === null) {
+        logger_1.logger.warn(`otel: refusing body_ref outside a .ironbee/otel dir: ${meta.body_ref}`);
+        return null;
+    }
+    // Read with a partial-write guard: a size mismatch vs body_length means the
+    // write was still in flight when the event fired → brief retry.
+    let content = null;
+    for (let attempt = 0; attempt < PARTIAL_WRITE_RETRIES; attempt++) {
+        try {
+            content = (0, fs_1.readFileSync)(meta.body_ref, "utf8");
+        }
+        catch {
+            return null; // gone / unreadable
+        }
+        if (meta.body_length === null || (0, util_1.byteLen)(content) === meta.body_length || attempt === PARTIAL_WRITE_RETRIES - 1) {
+            break;
+        }
+        await delay(PARTIAL_WRITE_DELAY_MS);
+    }
+    if (content === null) {
+        return null;
+    }
+    let body;
+    try {
+        body = JSON.parse(content);
+    }
+    catch {
+        logger_1.logger.debug(`otel: unparseable body file ${meta.body_ref}`);
+        return null;
+    }
+    const sessionId = meta.session_id ?? sessionIdFromBody(body);
+    if (!sessionId) {
+        logger_1.logger.debug(`otel: no session_id for ${meta.body_ref}; skipping`);
+        return null;
+    }
+    const state = readSessionState(projectDir, sessionId);
+    const projectName = meta.project_name ?? state.projectName ?? (0, path_1.basename)(projectDir);
+    const classification = (0, classify_1.classifyRequestBody)(body);
+    const scMeta = {
+        session_id: sessionId,
+        project_name: projectName,
+        // Prefer the body's authoritative model; the event attr is "" on catch-up.
+        model: modelFromBody(body) ?? meta.model,
+        query_source: meta.query_source,
+        sequence_number: meta.sequence_number,
+        timestamp: meta.timestamp,
+        request_uuid: (0, paths_1.requestUuidFromBodyRef)(meta.body_ref),
+        user_email: state.user_email,
+        usage_type: state.usage_type,
+        usage_plan: state.usage_plan,
+    };
+    const event = (0, build_1.buildSessionContextEvent)(scMeta, classification);
+    return { event, projectDir, bodyRef: meta.body_ref };
+}
+//# sourceMappingURL=process.js.map

package/dist/otel/daemon/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../../src/otel/daemon/process.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;AA2GH,0CA0DC;AAnKD,2BAAkC;AAClC,+BAAsC;AACtC,6CAA0C;AAC1C,0CAA0C;AAC1C,kDAAiF;AACjF,4CAAgF;AAGhF,mCAAwE;AAExE,MAAM,qBAAqB,GAAW,CAAC,CAAC;AACxC,MAAM,sBAAsB,GAAW,EAAE,CAAC;AAe1C,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAmB,EAAQ,EAAE,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IACxB,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAChC,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAa;IAChC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,kGAAkG;AAClG,SAAS,iBAAiB,CAAC,IAAa;IACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAY,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,IAAI,CAAC;QACD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5D,OAAO,MAAM,CAAC,UAAU,CAAC;QAC7B,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,0BAA0B;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,SAAS,gBAAgB,CAAC,UAAkB,EAAE,SAAiB;IAC3D,MAAM,CAAC,GAAmC,cAAc,CACpD,IAAA,WAAI,EAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC,CACpE,CAAC;IACF,IAAI,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,IAAI,CAAC,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QAC1D,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,SAAS,CAAC;IACjC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CAAC,IAAwB;IAC1D,MAAM,UAAU,GAAkB,IAAA,6BAAqB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvE,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,eAAM,CAAC,IAAI,CAAC,wDAAwD,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,4EAA4E;IAC5E,gEAAgE;IAChE,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,KAAK,IAAI,OAAO,GAAW,CAAC,EAAE,OAAO,GAAG,qBAAqB,EAAE,OAAO,EAAE,EAAE,CAAC;QACvE,IAAI,CAAC;YACD,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,CAAC,oBAAoB;QACrC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAA,cAAO,EAAC,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,IAAI,OAAO,KAAK,qBAAqB,GAAG,CAAC,EAAE,CAAC;YAC9G,MAAM;QACV,CAAC;QACD,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACL,eAAM,CAAC,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAkB,IAAI,CAAC,UAAU,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5E,IAAI,CAAC,SAAS,EAAE,CAAC;QACb,eAAM,CAAC,KAAK,CAAC,2BAA2B,IAAI,CAAC,QAAQ,YAAY,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,GAAsB,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACzE,MAAM,WAAW,GAAW,IAAI,CAAC,YAAY,IAAI,KAAK,CAAC,WAAW,IAAI,IAAA,eAAQ,EAAC,UAAU,CAAC,CAAC;IAC3F,MAAM,cAAc,GAA0B,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;IAExE,MAAM,MAAM,GAAuB;QAC/B,UAAU,EAAE,SAAS;QACrB,YAAY,EAAE,WAAW;QACzB,2EAA2E;QAC3E,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;QACxC,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,YAAY,EAAE,IAAA,8BAAsB,EAAC,IAAI,CAAC,QAAQ,CAAC;QACnD,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC/B,CAAC;IACF,MAAM,KAAK,GAAwB,IAAA,gCAAwB,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACpF,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzD,CAAC"}