@metamask-previews/tooling-insight 1.0.1-preview-898fae5

package/dist/lib/push.d.mts

@@ -0,0 +1,58 @@
+/** Prometheus remote-write endpoint coordinates. */
+export type PushConfig = {
+    /** Full URL of the remote-write endpoint. */
+    url: string;
+    /** HTTP Basic auth username. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */
+    username?: string;
+    /** HTTP Basic auth password. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */
+    password?: string;
+};
+/** Minimal logger interface used by `pushBatch`. */
+export type Logger = {
+    /** Log an informational message. */
+    info: (message: string, extra?: Record<string, unknown>) => void;
+    /** Log an error message. */
+    error: (message: string, extra?: Record<string, unknown>) => void;
+};
+/** Thrown when the remote-write endpoint returns a non-2xx response. */
+export declare class PushError extends Error {
+    readonly status: number;
+    readonly responseBody: string;
+    /**
+     * Create a `PushError`.
+     *
+     * @param status - HTTP status code returned by the endpoint.
+     * @param responseBody - Response body text returned by the endpoint.
+     */
+    constructor(status: number, responseBody: string);
+}
+/**
+ * Load push credentials from process env, falling back to the repo's `.js.env`.
+ *
+ * @param repoRoot - Absolute path to the repo root where `.js.env` may live.
+ * @returns The resolved push configuration.
+ */
+export declare function loadPushConfig(repoRoot: string): PushConfig;
+/** Options for `pushBatch`. */
+export type PushBatchOptions = {
+    /** Full URL of the remote-write endpoint. */
+    url: string;
+    /** HTTP Basic auth username. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */
+    username?: string;
+    /** HTTP Basic auth password. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */
+    password?: string;
+    /** When true, logs the body but does not POST. */
+    dryRun: boolean;
+    /** Logger instance for success and error messages. */
+    logger: Logger;
+    /** Fetch implementation; defaults to the global `fetch`. */
+    fetchImpl?: typeof fetch;
+};
+/**
+ * POST a remote-write body to the configured Prometheus remote-write endpoint.
+ *
+ * @param body - Snappy-compressed protobuf `WriteRequest` bytes to push.
+ * @param options - Push configuration including URL, credentials, and optional fetch override.
+ */
+export declare function pushBatch(body: Uint8Array, options: PushBatchOptions): Promise<void>;
+//# sourceMappingURL=push.d.mts.map

package/dist/lib/push.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.d.mts","sourceRoot":"","sources":["../../src/lib/push.ts"],"names":[],"mappings":"AAKA,oDAAoD;AACpD,MAAM,MAAM,UAAU,GAAG;IACvB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,oDAAoD;AACpD,MAAM,MAAM,MAAM,GAAG;IACnB,oCAAoC;IACpC,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACjE,4BAA4B;IAC5B,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACnE,CAAC;AAEF,wEAAwE;AACxE,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B;;;;;OAKG;gBACS,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;CAMjD;AAqCD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,CAgB3D;AAED,+BAA+B;AAC/B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oGAAoG;IACpG,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,MAAM,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,SAAS,CAC7B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,IAAI,CAAC,CA0Cf"}

package/dist/lib/push.mjs

@@ -0,0 +1,116 @@
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { ENV_MIMIR_URL, ENV_MIMIR_PASSWORD, ENV_MIMIR_USERNAME } from "./paths.mjs";
+/** Thrown when the remote-write endpoint returns a non-2xx response. */
+export class PushError extends Error {
+    /**
+     * Create a `PushError`.
+     *
+     * @param status - HTTP status code returned by the endpoint.
+     * @param responseBody - Response body text returned by the endpoint.
+     */
+    constructor(status, responseBody) {
+        super(`Push failed with status ${status}`);
+        this.name = 'PushError';
+        this.status = status;
+        this.responseBody = responseBody;
+    }
+}
+/**
+ * Parse the repo's `.js.env` (shell-sourceable: `export KEY="value"`, `#` comments).
+ * Handles the optional `export ` prefix and surrounding single/double quotes.
+ *
+ * @param contents - Shell-sourceable `.js.env` file contents.
+ * @returns A map of environment variable names to their string values.
+ */
+function parseEnvFile(contents) {
+    const entries = {};
+    for (const rawLine of contents.split('\n')) {
+        let line = rawLine.trim();
+        if (!line || line.startsWith('#')) {
+            continue;
+        }
+        if (line.startsWith('export ')) {
+            line = line.slice('export '.length).trim();
+        }
+        const eq = line.indexOf('=');
+        if (eq === -1) {
+            continue;
+        }
+        const key = line.slice(0, eq).trim();
+        let value = line.slice(eq + 1).trim();
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        entries[key] = value;
+    }
+    return entries;
+}
+/**
+ * Load push credentials from process env, falling back to the repo's `.js.env`.
+ *
+ * @param repoRoot - Absolute path to the repo root where `.js.env` may live.
+ * @returns The resolved push configuration.
+ */
+export function loadPushConfig(repoRoot) {
+    // File values are the fallback; env takes precedence for every key.
+    const envPath = join(repoRoot, '.js.env');
+    const file = existsSync(envPath)
+        ? parseEnvFile(readFileSync(envPath, 'utf8'))
+        : {};
+    const url = process.env[ENV_MIMIR_URL] ?? file[ENV_MIMIR_URL] ?? '';
+    const username = process.env[ENV_MIMIR_USERNAME] ?? file[ENV_MIMIR_USERNAME];
+    const password = process.env[ENV_MIMIR_PASSWORD] ?? file[ENV_MIMIR_PASSWORD];
+    return {
+        url,
+        ...(username !== undefined && { username }),
+        ...(password !== undefined && { password }),
+    };
+}
+/**
+ * POST a remote-write body to the configured Prometheus remote-write endpoint.
+ *
+ * @param body - Snappy-compressed protobuf `WriteRequest` bytes to push.
+ * @param options - Push configuration including URL, credentials, and optional fetch override.
+ */
+export async function pushBatch(body, options) {
+    if (options.dryRun) {
+        options.logger.info('dry-run push body', { byteLength: body.byteLength });
+        return;
+    }
+    if (!options.url) {
+        throw new Error('Prometheus push URL is required');
+    }
+    // Basic auth is only needed for authenticated endpoints (e.g. dev). Prod uses Cloudflare WARP.
+    const authHeader = options.username && options.password
+        ? {
+            Authorization: `Basic ${Buffer.from(`${options.username}:${options.password}`).toString('base64')}`,
+        }
+        : {};
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const response = await fetchImpl(options.url, {
+        method: 'POST',
+        headers: {
+            ...authHeader,
+            'Content-Type': 'application/x-protobuf',
+            'X-Prometheus-Remote-Write-Version': '0.1.0',
+        },
+        body,
+    });
+    const responseBody = await response.text();
+    if (!response.ok) {
+        options.logger.error('push failed', {
+            status: response.status,
+            body: responseBody,
+        });
+        throw new PushError(response.status, responseBody);
+    }
+    // Mimir returns HTTP 200 even for partial rejections; warnings appear in the body.
+    options.logger.info('push complete', {
+        status: response.status,
+        ...(responseBody.trim() && { mimirWarning: responseBody.trim() }),
+    });
+}
+//# sourceMappingURL=push.mjs.map

package/dist/lib/push.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"push.mjs","sourceRoot":"","sources":["../../src/lib/push.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,gBAAgB;AACnD,OAAO,EAAE,IAAI,EAAE,kBAAkB;AAEjC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,oBAAgB;AAoBhF,wEAAwE;AACxE,MAAM,OAAO,SAAU,SAAQ,KAAK;IAKlC;;;;;OAKG;IACH,YAAY,MAAc,EAAE,YAAoB;QAC9C,KAAK,CAAC,2BAA2B,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,QAAgB;IACpC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;YACd,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,oEAAoE;IACpE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC;QAC9B,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IACpE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAE7E,OAAO;QACL,GAAG;QACH,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAkBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAgB,EAChB,OAAyB;IAEzB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IAED,+FAA+F;IAC/F,MAAM,UAAU,GACd,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ;QAClC,CAAC,CAAC;YACE,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SACpG;QACH,CAAC,CAAC,EAAE,CAAC;IAET,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;QAC5C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,GAAG,UAAU;YACb,cAAc,EAAE,wBAAwB;YACxC,mCAAmC,EAAE,OAAO;SAC7C;QACD,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,EAAE;YAClC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACrD,CAAC;IACD,mFAAmF;IACnF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;QACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;KAClE,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { existsSync, readFileSync } from 'node:fs';\nimport { join } from 'node:path';\n\nimport { ENV_MIMIR_URL, ENV_MIMIR_PASSWORD, ENV_MIMIR_USERNAME } from './paths';\n\n/** Prometheus remote-write endpoint coordinates. */\nexport type PushConfig = {\n  /** Full URL of the remote-write endpoint. */\n  url: string;\n  /** HTTP Basic auth username. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */\n  username?: string;\n  /** HTTP Basic auth password. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */\n  password?: string;\n};\n\n/** Minimal logger interface used by `pushBatch`. */\nexport type Logger = {\n  /** Log an informational message. */\n  info: (message: string, extra?: Record<string, unknown>) => void;\n  /** Log an error message. */\n  error: (message: string, extra?: Record<string, unknown>) => void;\n};\n\n/** Thrown when the remote-write endpoint returns a non-2xx response. */\nexport class PushError extends Error {\n  readonly status: number;\n\n  readonly responseBody: string;\n\n  /**\n   * Create a `PushError`.\n   *\n   * @param status - HTTP status code returned by the endpoint.\n   * @param responseBody - Response body text returned by the endpoint.\n   */\n  constructor(status: number, responseBody: string) {\n    super(`Push failed with status ${status}`);\n    this.name = 'PushError';\n    this.status = status;\n    this.responseBody = responseBody;\n  }\n}\n\n/**\n * Parse the repo's `.js.env` (shell-sourceable: `export KEY=\"value\"`, `#` comments).\n * Handles the optional `export ` prefix and surrounding single/double quotes.\n *\n * @param contents - Shell-sourceable `.js.env` file contents.\n * @returns A map of environment variable names to their string values.\n */\nfunction parseEnvFile(contents: string): Record<string, string> {\n  const entries: Record<string, string> = {};\n  for (const rawLine of contents.split('\\n')) {\n    let line = rawLine.trim();\n    if (!line || line.startsWith('#')) {\n      continue;\n    }\n    if (line.startsWith('export ')) {\n      line = line.slice('export '.length).trim();\n    }\n    const eq = line.indexOf('=');\n    if (eq === -1) {\n      continue;\n    }\n    const key = line.slice(0, eq).trim();\n    let value = line.slice(eq + 1).trim();\n    if (\n      value.length >= 2 &&\n      ((value.startsWith('\"') && value.endsWith('\"')) ||\n        (value.startsWith(\"'\") && value.endsWith(\"'\")))\n    ) {\n      value = value.slice(1, -1);\n    }\n    entries[key] = value;\n  }\n  return entries;\n}\n\n/**\n * Load push credentials from process env, falling back to the repo's `.js.env`.\n *\n * @param repoRoot - Absolute path to the repo root where `.js.env` may live.\n * @returns The resolved push configuration.\n */\nexport function loadPushConfig(repoRoot: string): PushConfig {\n  // File values are the fallback; env takes precedence for every key.\n  const envPath = join(repoRoot, '.js.env');\n  const file = existsSync(envPath)\n    ? parseEnvFile(readFileSync(envPath, 'utf8'))\n    : {};\n\n  const url = process.env[ENV_MIMIR_URL] ?? file[ENV_MIMIR_URL] ?? '';\n  const username = process.env[ENV_MIMIR_USERNAME] ?? file[ENV_MIMIR_USERNAME];\n  const password = process.env[ENV_MIMIR_PASSWORD] ?? file[ENV_MIMIR_PASSWORD];\n\n  return {\n    url,\n    ...(username !== undefined && { username }),\n    ...(password !== undefined && { password }),\n  };\n}\n\n/** Options for `pushBatch`. */\nexport type PushBatchOptions = {\n  /** Full URL of the remote-write endpoint. */\n  url: string;\n  /** HTTP Basic auth username. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */\n  username?: string;\n  /** HTTP Basic auth password. Omit for unauthenticated endpoints (e.g. prod via Cloudflare WARP). */\n  password?: string;\n  /** When true, logs the body but does not POST. */\n  dryRun: boolean;\n  /** Logger instance for success and error messages. */\n  logger: Logger;\n  /** Fetch implementation; defaults to the global `fetch`. */\n  fetchImpl?: typeof fetch;\n};\n\n/**\n * POST a remote-write body to the configured Prometheus remote-write endpoint.\n *\n * @param body - Snappy-compressed protobuf `WriteRequest` bytes to push.\n * @param options - Push configuration including URL, credentials, and optional fetch override.\n */\nexport async function pushBatch(\n  body: Uint8Array,\n  options: PushBatchOptions,\n): Promise<void> {\n  if (options.dryRun) {\n    options.logger.info('dry-run push body', { byteLength: body.byteLength });\n    return;\n  }\n\n  if (!options.url) {\n    throw new Error('Prometheus push URL is required');\n  }\n\n  // Basic auth is only needed for authenticated endpoints (e.g. dev). Prod uses Cloudflare WARP.\n  const authHeader =\n    options.username && options.password\n      ? {\n          Authorization: `Basic ${Buffer.from(`${options.username}:${options.password}`).toString('base64')}`,\n        }\n      : {};\n\n  const fetchImpl = options.fetchImpl ?? fetch;\n  const response = await fetchImpl(options.url, {\n    method: 'POST',\n    headers: {\n      ...authHeader,\n      'Content-Type': 'application/x-protobuf',\n      'X-Prometheus-Remote-Write-Version': '0.1.0',\n    },\n    body,\n  });\n\n  const responseBody = await response.text();\n  if (!response.ok) {\n    options.logger.error('push failed', {\n      status: response.status,\n      body: responseBody,\n    });\n    throw new PushError(response.status, responseBody);\n  }\n  // Mimir returns HTTP 200 even for partial rejections; warnings appear in the body.\n  options.logger.info('push complete', {\n    status: response.status,\n    ...(responseBody.trim() && { mimirWarning: responseBody.trim() }),\n  });\n}\n"]}

package/dist/lib/remoteWrite.cjs

@@ -0,0 +1,177 @@
+"use strict";
+// Prometheus remote_write encoder for the daily anonymizer (MCWP-644 / INFRA-3677).
+//
+// The Mimir remote_write endpoint accepts only snappy-compressed protobuf
+// (`WriteRequest`) with per-sample timestamps. Both the protobuf and the snappy
+// block are hand-rolled here so the tool stays dependency-free:
+//   - protobuf: the WriteRequest schema is four tiny messages, trivially encoded.
+//   - snappy: a valid block can be a single all-literals run (no back-references),
+//     which any snappy decoder accepts. We skip real compression — payloads are
+//     KB-scale, so the ratio is irrelevant — and avoid pulling a snappy library.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeWriteRequest = encodeWriteRequest;
+exports.snappyBlock = snappyBlock;
+exports.encodeRemoteWrite = encodeRemoteWrite;
+const textEncoder = new TextEncoder();
+/**
+ * Concatenate multiple `Uint8Array` chunks into a single array.
+ *
+ * @param chunks - Arrays of bytes to concatenate, in order.
+ * @returns A single `Uint8Array` containing all chunks concatenated.
+ */
+function concat(chunks) {
+    const total = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return out;
+}
+/**
+ * Base-128 varint (protobuf + snappy length preamble). BigInt-safe for int64.
+ *
+ * @param value - The integer to encode as a varint.
+ * @returns Base-128 varint encoding as a `Uint8Array`.
+ */
+function varint(value) {
+    let remaining = typeof value === 'bigint' ? value : BigInt(value);
+    const bytes = [];
+    do {
+        let byte = Number(remaining & 0x7fn);
+        remaining >>= 7n;
+        if (remaining > 0n) {
+            byte |= 0x80;
+        }
+        bytes.push(byte);
+    } while (remaining > 0n);
+    return Uint8Array.from(bytes);
+}
+/**
+ * A length-delimited (wire type 2) field: tag byte, length varint, then the payload.
+ *
+ * @param fieldNumber - The protobuf field number (1-based).
+ * @param payload - Raw bytes of the field value.
+ * @returns Wire-encoded length-delimited field as a `Uint8Array`.
+ */
+function lengthDelimitedField(fieldNumber, payload) {
+    const tag = (fieldNumber << 3) | 2;
+    return concat([varint(tag), varint(payload.length), payload]);
+}
+// Label { name = 1; value = 2; }
+/**
+ * Encode a Prometheus label name/value pair as a protobuf `Label` message.
+ *
+ * @param name - Label name.
+ * @param value - Label value.
+ * @returns Encoded `Label` message as a `Uint8Array`.
+ */
+function encodeLabel(name, value) {
+    return concat([
+        lengthDelimitedField(1, textEncoder.encode(name)),
+        lengthDelimitedField(2, textEncoder.encode(value)),
+    ]);
+}
+// Sample { double value = 1; int64 timestamp = 2; }
+/**
+ * Encode a Prometheus sample value and timestamp as a protobuf `Sample` message.
+ *
+ * @param value - Metric value (float64).
+ * @param timestampMs - Timestamp in milliseconds since epoch.
+ * @returns Encoded `Sample` message as a `Uint8Array`.
+ */
+function encodeSample(value, timestampMs) {
+    const valueBytes = new Uint8Array(8);
+    new DataView(valueBytes.buffer).setFloat64(0, value, true);
+    const valueField = concat([varint((1 << 3) | 1), valueBytes]);
+    const timestampField = concat([
+        varint((2 << 3) | 0),
+        varint(BigInt(timestampMs)),
+    ]);
+    return concat([valueField, timestampField]);
+}
+// TimeSeries { repeated Label labels = 1; repeated Sample samples = 2; }
+/**
+ * Encode a single time series (one set of labels with one sample) as a protobuf `TimeSeries`.
+ *
+ * @param labels - Array of `[name, value]` label pairs.
+ * @param value - Metric value for the single sample.
+ * @param timestampMs - Timestamp in milliseconds since epoch.
+ * @returns Encoded `TimeSeries` message as a `Uint8Array`.
+ */
+function encodeTimeSeries(labels, value, timestampMs) {
+    const labelFields = labels.map(([name, labelValue]) => lengthDelimitedField(1, encodeLabel(name, labelValue)));
+    const sampleField = lengthDelimitedField(2, encodeSample(value, timestampMs));
+    return concat([...labelFields, sampleField]);
+}
+/**
+ * Build the sorted label pairs for a sample point, ready for the protobuf encoder.
+ *
+ * @param sample - The sample point whose labels to extract.
+ * @returns Label pairs sorted lexicographically by name (required by Mimir).
+ */
+function sampleLabels(sample) {
+    // Mimir requires label names sorted lexicographically; `__name__` (ASCII `_` = 95)
+    // precedes all lowercase keys, so the array below is already in order.
+    // `le` sorts between `instance` and `repo` and is only present on _bucket samples.
+    const labels = [
+        ['__name__', sample.metric],
+        ['agent_vendor', sample.labels.agent_vendor],
+        ['event_type', sample.labels.event_type],
+        ['instance', sample.labels.instance],
+    ];
+    if (sample.le !== undefined) {
+        labels.push(['le', sample.le]);
+    }
+    labels.push(['repo', sample.labels.repo], ['tool_name', sample.labels.tool_name], ['tool_type', sample.labels.tool_type]);
+    return labels;
+}
+/**
+ * Encode a batch of samples as an (uncompressed) `WriteRequest` protobuf.
+ *
+ * @param samples - Sample points to encode into `TimeSeries` messages.
+ * @returns Raw protobuf `WriteRequest` bytes.
+ */
+function encodeWriteRequest(samples) {
+    // WriteRequest { repeated TimeSeries timeseries = 1; }
+    const series = samples.map((sample) => lengthDelimitedField(1, encodeTimeSeries(sampleLabels(sample), sample.value, sample.timestampMs)));
+    return concat(series);
+}
+/**
+ * Wrap raw bytes in a snappy block as a single all-literals run.
+ * Format: varint(uncompressedLength) + literal element(s) + raw bytes.
+ *
+ * @param data - The raw bytes to wrap.
+ * @returns A snappy-framed byte array accepted by any snappy decoder.
+ */
+function snappyBlock(data) {
+    if (data.length === 0) {
+        return varint(0); // valid snappy block: uncompressed length 0, no literals
+    }
+    const preamble = varint(data.length);
+    const literalLengthMinusOne = data.length - 1;
+    if (literalLengthMinusOne < 60) {
+        const tag = literalLengthMinusOne << 2; // literal tag, wire type 0b00
+        return concat([preamble, Uint8Array.from([tag]), data]);
+    }
+    // Length needs 1-4 extra little-endian bytes; the 6-bit field holds 59 + count.
+    const extraBytes = [];
+    let remaining = literalLengthMinusOne;
+    while (remaining > 0) {
+        extraBytes.push(remaining & 0xff);
+        remaining >>>= 8;
+    }
+    const tag = (59 + extraBytes.length) << 2;
+    return concat([preamble, Uint8Array.from([tag, ...extraBytes]), data]);
+}
+/**
+ * Encode samples into the exact body posted to the remote_write endpoint.
+ *
+ * @param samples - The sample points to encode.
+ * @returns A snappy-wrapped protobuf `WriteRequest`.
+ */
+function encodeRemoteWrite(samples) {
+    return snappyBlock(encodeWriteRequest(samples));
+}
+//# sourceMappingURL=remoteWrite.cjs.map

package/dist/lib/remoteWrite.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteWrite.cjs","sourceRoot":"","sources":["../../src/lib/remoteWrite.ts"],"names":[],"mappings":";AAAA,oFAAoF;AACpF,EAAE;AACF,0EAA0E;AAC1E,gFAAgF;AAChF,gEAAgE;AAChE,kFAAkF;AAClF,mFAAmF;AACnF,gFAAgF;AAChF,iFAAiF;;AAkJjF,gDASC;AASD,kCAsBC;AAQD,8CAEC;AAhMD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC;;;;;GAKG;AACH,SAAS,MAAM,CAAC,MAAoB;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,MAAM,CAAC,KAAsB;IACpC,IAAI,SAAS,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC;QACrC,SAAS,KAAK,EAAE,CAAC;QACjB,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YACnB,IAAI,IAAI,IAAI,CAAC;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,QAAQ,SAAS,GAAG,EAAE,EAAE;IACzB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,oBAAoB,CAC3B,WAAmB,EACnB,OAAmB;IAEnB,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,iCAAiC;AACjC;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,MAAM,CAAC;QACZ,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjD,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,KAAa,EAAE,WAAmB;IACtD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,MAAM,CAAC;QAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACpB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,yEAAyE;AACzE;;;;;;;GAOG;AACH,SAAS,gBAAgB,CACvB,MAA8C,EAC9C,KAAa,EACb,WAAmB;IAEnB,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CACpD,oBAAoB,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CACvD,CAAC;IACF,MAAM,WAAW,GAAG,oBAAoB,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,OAAO,MAAM,CAAC,CAAC,GAAG,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,MAAmB;IACvC,mFAAmF;IACnF,uEAAuE;IACvE,mFAAmF;IACnF,MAAM,MAAM,GAAuB;QACjC,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;QAC3B,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QAC5C,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KACrC,CAAC;IACF,IAAI,MAAM,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,IAAI,CACT,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAC5B,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EACtC,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CACvC,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,OAAsB;IACvD,uDAAuD;IACvD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CACpC,oBAAoB,CAClB,CAAC,EACD,gBAAgB,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CACzE,CACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,IAAgB;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,yDAAyD;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAE9C,IAAI,qBAAqB,GAAG,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,qBAAqB,IAAI,CAAC,CAAC,CAAC,8BAA8B;QACtE,OAAO,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,gFAAgF;IAChF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,SAAS,GAAG,qBAAqB,CAAC;IACtC,OAAO,SAAS,GAAG,CAAC,EAAE,CAAC;QACrB,UAAU,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAClC,SAAS,MAAM,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,OAAsB;IACtD,OAAO,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AAClD,CAAC","sourcesContent":["// Prometheus remote_write encoder for the daily anonymizer (MCWP-644 / INFRA-3677).\n//\n// The Mimir remote_write endpoint accepts only snappy-compressed protobuf\n// (`WriteRequest`) with per-sample timestamps. Both the protobuf and the snappy\n// block are hand-rolled here so the tool stays dependency-free:\n//   - protobuf: the WriteRequest schema is four tiny messages, trivially encoded.\n//   - snappy: a valid block can be a single all-literals run (no back-references),\n//     which any snappy decoder accepts. We skip real compression — payloads are\n//     KB-scale, so the ratio is irrelevant — and avoid pulling a snappy library.\n\nimport type { SamplePoint } from './types';\n\nconst textEncoder = new TextEncoder();\n\n/**\n * Concatenate multiple `Uint8Array` chunks into a single array.\n *\n * @param chunks - Arrays of bytes to concatenate, in order.\n * @returns A single `Uint8Array` containing all chunks concatenated.\n */\nfunction concat(chunks: Uint8Array[]): Uint8Array {\n  const total = chunks.reduce((sum, chunk) => sum + chunk.length, 0);\n  const out = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.length;\n  }\n  return out;\n}\n\n/**\n * Base-128 varint (protobuf + snappy length preamble). BigInt-safe for int64.\n *\n * @param value - The integer to encode as a varint.\n * @returns Base-128 varint encoding as a `Uint8Array`.\n */\nfunction varint(value: number | bigint): Uint8Array {\n  let remaining = typeof value === 'bigint' ? value : BigInt(value);\n  const bytes: number[] = [];\n  do {\n    let byte = Number(remaining & 0x7fn);\n    remaining >>= 7n;\n    if (remaining > 0n) {\n      byte |= 0x80;\n    }\n    bytes.push(byte);\n  } while (remaining > 0n);\n  return Uint8Array.from(bytes);\n}\n\n/**\n * A length-delimited (wire type 2) field: tag byte, length varint, then the payload.\n *\n * @param fieldNumber - The protobuf field number (1-based).\n * @param payload - Raw bytes of the field value.\n * @returns Wire-encoded length-delimited field as a `Uint8Array`.\n */\nfunction lengthDelimitedField(\n  fieldNumber: number,\n  payload: Uint8Array,\n): Uint8Array {\n  const tag = (fieldNumber << 3) | 2;\n  return concat([varint(tag), varint(payload.length), payload]);\n}\n\n// Label { name = 1; value = 2; }\n/**\n * Encode a Prometheus label name/value pair as a protobuf `Label` message.\n *\n * @param name - Label name.\n * @param value - Label value.\n * @returns Encoded `Label` message as a `Uint8Array`.\n */\nfunction encodeLabel(name: string, value: string): Uint8Array {\n  return concat([\n    lengthDelimitedField(1, textEncoder.encode(name)),\n    lengthDelimitedField(2, textEncoder.encode(value)),\n  ]);\n}\n\n// Sample { double value = 1; int64 timestamp = 2; }\n/**\n * Encode a Prometheus sample value and timestamp as a protobuf `Sample` message.\n *\n * @param value - Metric value (float64).\n * @param timestampMs - Timestamp in milliseconds since epoch.\n * @returns Encoded `Sample` message as a `Uint8Array`.\n */\nfunction encodeSample(value: number, timestampMs: number): Uint8Array {\n  const valueBytes = new Uint8Array(8);\n  new DataView(valueBytes.buffer).setFloat64(0, value, true);\n  const valueField = concat([varint((1 << 3) | 1), valueBytes]);\n  const timestampField = concat([\n    varint((2 << 3) | 0),\n    varint(BigInt(timestampMs)),\n  ]);\n  return concat([valueField, timestampField]);\n}\n\n// TimeSeries { repeated Label labels = 1; repeated Sample samples = 2; }\n/**\n * Encode a single time series (one set of labels with one sample) as a protobuf `TimeSeries`.\n *\n * @param labels - Array of `[name, value]` label pairs.\n * @param value - Metric value for the single sample.\n * @param timestampMs - Timestamp in milliseconds since epoch.\n * @returns Encoded `TimeSeries` message as a `Uint8Array`.\n */\nfunction encodeTimeSeries(\n  labels: readonly (readonly [string, string])[],\n  value: number,\n  timestampMs: number,\n): Uint8Array {\n  const labelFields = labels.map(([name, labelValue]) =>\n    lengthDelimitedField(1, encodeLabel(name, labelValue)),\n  );\n  const sampleField = lengthDelimitedField(2, encodeSample(value, timestampMs));\n  return concat([...labelFields, sampleField]);\n}\n\n/**\n * Build the sorted label pairs for a sample point, ready for the protobuf encoder.\n *\n * @param sample - The sample point whose labels to extract.\n * @returns Label pairs sorted lexicographically by name (required by Mimir).\n */\nfunction sampleLabels(sample: SamplePoint): [string, string][] {\n  // Mimir requires label names sorted lexicographically; `__name__` (ASCII `_` = 95)\n  // precedes all lowercase keys, so the array below is already in order.\n  // `le` sorts between `instance` and `repo` and is only present on _bucket samples.\n  const labels: [string, string][] = [\n    ['__name__', sample.metric],\n    ['agent_vendor', sample.labels.agent_vendor],\n    ['event_type', sample.labels.event_type],\n    ['instance', sample.labels.instance],\n  ];\n  if (sample.le !== undefined) {\n    labels.push(['le', sample.le]);\n  }\n  labels.push(\n    ['repo', sample.labels.repo],\n    ['tool_name', sample.labels.tool_name],\n    ['tool_type', sample.labels.tool_type],\n  );\n  return labels;\n}\n\n/**\n * Encode a batch of samples as an (uncompressed) `WriteRequest` protobuf.\n *\n * @param samples - Sample points to encode into `TimeSeries` messages.\n * @returns Raw protobuf `WriteRequest` bytes.\n */\nexport function encodeWriteRequest(samples: SamplePoint[]): Uint8Array {\n  // WriteRequest { repeated TimeSeries timeseries = 1; }\n  const series = samples.map((sample) =>\n    lengthDelimitedField(\n      1,\n      encodeTimeSeries(sampleLabels(sample), sample.value, sample.timestampMs),\n    ),\n  );\n  return concat(series);\n}\n\n/**\n * Wrap raw bytes in a snappy block as a single all-literals run.\n * Format: varint(uncompressedLength) + literal element(s) + raw bytes.\n *\n * @param data - The raw bytes to wrap.\n * @returns A snappy-framed byte array accepted by any snappy decoder.\n */\nexport function snappyBlock(data: Uint8Array): Uint8Array {\n  if (data.length === 0) {\n    return varint(0); // valid snappy block: uncompressed length 0, no literals\n  }\n\n  const preamble = varint(data.length);\n  const literalLengthMinusOne = data.length - 1;\n\n  if (literalLengthMinusOne < 60) {\n    const tag = literalLengthMinusOne << 2; // literal tag, wire type 0b00\n    return concat([preamble, Uint8Array.from([tag]), data]);\n  }\n\n  // Length needs 1-4 extra little-endian bytes; the 6-bit field holds 59 + count.\n  const extraBytes: number[] = [];\n  let remaining = literalLengthMinusOne;\n  while (remaining > 0) {\n    extraBytes.push(remaining & 0xff);\n    remaining >>>= 8;\n  }\n  const tag = (59 + extraBytes.length) << 2;\n  return concat([preamble, Uint8Array.from([tag, ...extraBytes]), data]);\n}\n\n/**\n * Encode samples into the exact body posted to the remote_write endpoint.\n *\n * @param samples - The sample points to encode.\n * @returns A snappy-wrapped protobuf `WriteRequest`.\n */\nexport function encodeRemoteWrite(samples: SamplePoint[]): Uint8Array {\n  return snappyBlock(encodeWriteRequest(samples));\n}\n"]}

package/dist/lib/remoteWrite.d.cts

@@ -0,0 +1,24 @@
+import type { SamplePoint } from "./types.cjs";
+/**
+ * Encode a batch of samples as an (uncompressed) `WriteRequest` protobuf.
+ *
+ * @param samples - Sample points to encode into `TimeSeries` messages.
+ * @returns Raw protobuf `WriteRequest` bytes.
+ */
+export declare function encodeWriteRequest(samples: SamplePoint[]): Uint8Array;
+/**
+ * Wrap raw bytes in a snappy block as a single all-literals run.
+ * Format: varint(uncompressedLength) + literal element(s) + raw bytes.
+ *
+ * @param data - The raw bytes to wrap.
+ * @returns A snappy-framed byte array accepted by any snappy decoder.
+ */
+export declare function snappyBlock(data: Uint8Array): Uint8Array;
+/**
+ * Encode samples into the exact body posted to the remote_write endpoint.
+ *
+ * @param samples - The sample points to encode.
+ * @returns A snappy-wrapped protobuf `WriteRequest`.
+ */
+export declare function encodeRemoteWrite(samples: SamplePoint[]): Uint8Array;
+//# sourceMappingURL=remoteWrite.d.cts.map

package/dist/lib/remoteWrite.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteWrite.d.cts","sourceRoot":"","sources":["../../src/lib/remoteWrite.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAgB;AA0I3C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CASrE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAsBxD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAEpE"}

package/dist/lib/remoteWrite.d.mts

@@ -0,0 +1,24 @@
+import type { SamplePoint } from "./types.mjs";
+/**
+ * Encode a batch of samples as an (uncompressed) `WriteRequest` protobuf.
+ *
+ * @param samples - Sample points to encode into `TimeSeries` messages.
+ * @returns Raw protobuf `WriteRequest` bytes.
+ */
+export declare function encodeWriteRequest(samples: SamplePoint[]): Uint8Array;
+/**
+ * Wrap raw bytes in a snappy block as a single all-literals run.
+ * Format: varint(uncompressedLength) + literal element(s) + raw bytes.
+ *
+ * @param data - The raw bytes to wrap.
+ * @returns A snappy-framed byte array accepted by any snappy decoder.
+ */
+export declare function snappyBlock(data: Uint8Array): Uint8Array;
+/**
+ * Encode samples into the exact body posted to the remote_write endpoint.
+ *
+ * @param samples - The sample points to encode.
+ * @returns A snappy-wrapped protobuf `WriteRequest`.
+ */
+export declare function encodeRemoteWrite(samples: SamplePoint[]): Uint8Array;
+//# sourceMappingURL=remoteWrite.d.mts.map

package/dist/lib/remoteWrite.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteWrite.d.mts","sourceRoot":"","sources":["../../src/lib/remoteWrite.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,WAAW,EAAE,oBAAgB;AA0I3C;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CASrE;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,CAsBxD;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,UAAU,CAEpE"}

package/dist/lib/remoteWrite.mjs

@@ -0,0 +1,172 @@
+// Prometheus remote_write encoder for the daily anonymizer (MCWP-644 / INFRA-3677).
+//
+// The Mimir remote_write endpoint accepts only snappy-compressed protobuf
+// (`WriteRequest`) with per-sample timestamps. Both the protobuf and the snappy
+// block are hand-rolled here so the tool stays dependency-free:
+//   - protobuf: the WriteRequest schema is four tiny messages, trivially encoded.
+//   - snappy: a valid block can be a single all-literals run (no back-references),
+//     which any snappy decoder accepts. We skip real compression — payloads are
+//     KB-scale, so the ratio is irrelevant — and avoid pulling a snappy library.
+const textEncoder = new TextEncoder();
+/**
+ * Concatenate multiple `Uint8Array` chunks into a single array.
+ *
+ * @param chunks - Arrays of bytes to concatenate, in order.
+ * @returns A single `Uint8Array` containing all chunks concatenated.
+ */
+function concat(chunks) {
+    const total = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        out.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return out;
+}
+/**
+ * Base-128 varint (protobuf + snappy length preamble). BigInt-safe for int64.
+ *
+ * @param value - The integer to encode as a varint.
+ * @returns Base-128 varint encoding as a `Uint8Array`.
+ */
+function varint(value) {
+    let remaining = typeof value === 'bigint' ? value : BigInt(value);
+    const bytes = [];
+    do {
+        let byte = Number(remaining & 0x7fn);
+        remaining >>= 7n;
+        if (remaining > 0n) {
+            byte |= 0x80;
+        }
+        bytes.push(byte);
+    } while (remaining > 0n);
+    return Uint8Array.from(bytes);
+}
+/**
+ * A length-delimited (wire type 2) field: tag byte, length varint, then the payload.
+ *
+ * @param fieldNumber - The protobuf field number (1-based).
+ * @param payload - Raw bytes of the field value.
+ * @returns Wire-encoded length-delimited field as a `Uint8Array`.
+ */
+function lengthDelimitedField(fieldNumber, payload) {
+    const tag = (fieldNumber << 3) | 2;
+    return concat([varint(tag), varint(payload.length), payload]);
+}
+// Label { name = 1; value = 2; }
+/**
+ * Encode a Prometheus label name/value pair as a protobuf `Label` message.
+ *
+ * @param name - Label name.
+ * @param value - Label value.
+ * @returns Encoded `Label` message as a `Uint8Array`.
+ */
+function encodeLabel(name, value) {
+    return concat([
+        lengthDelimitedField(1, textEncoder.encode(name)),
+        lengthDelimitedField(2, textEncoder.encode(value)),
+    ]);
+}
+// Sample { double value = 1; int64 timestamp = 2; }
+/**
+ * Encode a Prometheus sample value and timestamp as a protobuf `Sample` message.
+ *
+ * @param value - Metric value (float64).
+ * @param timestampMs - Timestamp in milliseconds since epoch.
+ * @returns Encoded `Sample` message as a `Uint8Array`.
+ */
+function encodeSample(value, timestampMs) {
+    const valueBytes = new Uint8Array(8);
+    new DataView(valueBytes.buffer).setFloat64(0, value, true);
+    const valueField = concat([varint((1 << 3) | 1), valueBytes]);
+    const timestampField = concat([
+        varint((2 << 3) | 0),
+        varint(BigInt(timestampMs)),
+    ]);
+    return concat([valueField, timestampField]);
+}
+// TimeSeries { repeated Label labels = 1; repeated Sample samples = 2; }
+/**
+ * Encode a single time series (one set of labels with one sample) as a protobuf `TimeSeries`.
+ *
+ * @param labels - Array of `[name, value]` label pairs.
+ * @param value - Metric value for the single sample.
+ * @param timestampMs - Timestamp in milliseconds since epoch.
+ * @returns Encoded `TimeSeries` message as a `Uint8Array`.
+ */
+function encodeTimeSeries(labels, value, timestampMs) {
+    const labelFields = labels.map(([name, labelValue]) => lengthDelimitedField(1, encodeLabel(name, labelValue)));
+    const sampleField = lengthDelimitedField(2, encodeSample(value, timestampMs));
+    return concat([...labelFields, sampleField]);
+}
+/**
+ * Build the sorted label pairs for a sample point, ready for the protobuf encoder.
+ *
+ * @param sample - The sample point whose labels to extract.
+ * @returns Label pairs sorted lexicographically by name (required by Mimir).
+ */
+function sampleLabels(sample) {
+    // Mimir requires label names sorted lexicographically; `__name__` (ASCII `_` = 95)
+    // precedes all lowercase keys, so the array below is already in order.
+    // `le` sorts between `instance` and `repo` and is only present on _bucket samples.
+    const labels = [
+        ['__name__', sample.metric],
+        ['agent_vendor', sample.labels.agent_vendor],
+        ['event_type', sample.labels.event_type],
+        ['instance', sample.labels.instance],
+    ];
+    if (sample.le !== undefined) {
+        labels.push(['le', sample.le]);
+    }
+    labels.push(['repo', sample.labels.repo], ['tool_name', sample.labels.tool_name], ['tool_type', sample.labels.tool_type]);
+    return labels;
+}
+/**
+ * Encode a batch of samples as an (uncompressed) `WriteRequest` protobuf.
+ *
+ * @param samples - Sample points to encode into `TimeSeries` messages.
+ * @returns Raw protobuf `WriteRequest` bytes.
+ */
+export function encodeWriteRequest(samples) {
+    // WriteRequest { repeated TimeSeries timeseries = 1; }
+    const series = samples.map((sample) => lengthDelimitedField(1, encodeTimeSeries(sampleLabels(sample), sample.value, sample.timestampMs)));
+    return concat(series);
+}
+/**
+ * Wrap raw bytes in a snappy block as a single all-literals run.
+ * Format: varint(uncompressedLength) + literal element(s) + raw bytes.
+ *
+ * @param data - The raw bytes to wrap.
+ * @returns A snappy-framed byte array accepted by any snappy decoder.
+ */
+export function snappyBlock(data) {
+    if (data.length === 0) {
+        return varint(0); // valid snappy block: uncompressed length 0, no literals
+    }
+    const preamble = varint(data.length);
+    const literalLengthMinusOne = data.length - 1;
+    if (literalLengthMinusOne < 60) {
+        const tag = literalLengthMinusOne << 2; // literal tag, wire type 0b00
+        return concat([preamble, Uint8Array.from([tag]), data]);
+    }
+    // Length needs 1-4 extra little-endian bytes; the 6-bit field holds 59 + count.
+    const extraBytes = [];
+    let remaining = literalLengthMinusOne;
+    while (remaining > 0) {
+        extraBytes.push(remaining & 0xff);
+        remaining >>>= 8;
+    }
+    const tag = (59 + extraBytes.length) << 2;
+    return concat([preamble, Uint8Array.from([tag, ...extraBytes]), data]);
+}
+/**
+ * Encode samples into the exact body posted to the remote_write endpoint.
+ *
+ * @param samples - The sample points to encode.
+ * @returns A snappy-wrapped protobuf `WriteRequest`.
+ */
+export function encodeRemoteWrite(samples) {
+    return snappyBlock(encodeWriteRequest(samples));
+}
+//# sourceMappingURL=remoteWrite.mjs.map