@newrelic/preflight 0.0.1-pre.1 → 1.0.0

package/dist/tracing/task-span-tracker.js

@@ -0,0 +1,59 @@
+import { SpanStatusCode, trace } from '@opentelemetry/api';
+import { getMcpTracer } from './mcp-tracer.js';
+import { createLogger } from '../shared/index.js';
+const logger = createLogger('task-span-tracker');
+export class TaskSpanTracker {
+    activeTasks = new Map();
+    taskContexts = new Map();
+    openTask(taskId, label, parentContext) {
+        if (this.activeTasks.has(taskId))
+            return;
+        const span = getMcpTracer().startSpan(`ai.task ${label}`, {
+            attributes: {
+                'ai.task.id': taskId,
+                'ai.task.label': label,
+            },
+        }, parentContext);
+        this.activeTasks.set(taskId, span);
+        this.taskContexts.set(taskId, parentContext);
+        logger.debug('Task span opened', { taskId, label });
+    }
+    closeTask(taskId, toolCallCount) {
+        const span = this.activeTasks.get(taskId);
+        if (!span)
+            return;
+        span.setAttributes({ 'ai.task.tool_call_count': toolCallCount });
+        span.setStatus({ code: SpanStatusCode.OK });
+        span.end();
+        this.activeTasks.delete(taskId);
+        this.taskContexts.delete(taskId);
+        logger.debug('Task span closed', { taskId });
+    }
+    getContext(taskId, fallback) {
+        if (!taskId)
+            return fallback;
+        const span = this.activeTasks.get(taskId);
+        if (!span)
+            return fallback;
+        // Use the stored parent context from openTask() rather than context.active() to
+        // avoid attaching the span to an unrelated async frame's context.
+        const parentCtx = this.taskContexts.get(taskId) ?? fallback;
+        return trace.setSpan(parentCtx, span);
+    }
+    closeAll() {
+        for (const [taskId, span] of this.activeTasks) {
+            span.setStatus({
+                code: SpanStatusCode.ERROR,
+                message: 'session ended with task in progress',
+            });
+            span.end();
+            logger.debug('Force-closed task span', { taskId });
+        }
+        this.activeTasks.clear();
+        this.taskContexts.clear();
+    }
+    get size() {
+        return this.activeTasks.size;
+    }
+}
+//# sourceMappingURL=task-span-tracker.js.map

package/dist/tracing/task-span-tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-span-tracker.js","sourceRoot":"","sources":["../../src/tracing/task-span-tracker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,cAAc,EAAW,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,mBAAmB,CAAC,CAAC;AAEjD,MAAM,OAAO,eAAe;IACT,WAAW,GAAsB,IAAI,GAAG,EAAE,CAAC;IAC3C,YAAY,GAAmD,IAAI,GAAG,EAAE,CAAC;IAE1F,QAAQ,CAAC,MAAc,EAAE,KAAa,EAAE,aAAgD;QACtF,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;QACzC,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC,SAAS,CACnC,WAAW,KAAK,EAAE,EAClB;YACE,UAAU,EAAE;gBACV,YAAY,EAAE,MAAM;gBACpB,eAAe,EAAE,KAAK;aACvB;SACF,EACD,aAAa,CACd,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,aAAqB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,CAAC,aAAa,CAAC,EAAE,yBAAyB,EAAE,aAAa,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,UAAU,CACR,MAAqB,EACrB,QAA2C;QAE3C,IAAI,CAAC,MAAM;YAAE,OAAO,QAAQ,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC;QAC3B,gFAAgF;QAChF,kEAAkE;QAClE,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;QAC5D,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ;QACN,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9C,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,cAAc,CAAC,KAAK;gBAC1B,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IAC/B,CAAC;CACF"}

package/dist/tracing/tool-call-span.d.ts

@@ -0,0 +1,4 @@
+import { context } from '@opentelemetry/api';
+import type { ToolCallRecord } from '../storage/types.js';
+export declare function emitToolCallSpan(record: ToolCallRecord, parentContext: ReturnType<typeof context.active>, taskId?: string): void;
+//# sourceMappingURL=tool-call-span.d.ts.map

package/dist/tracing/tool-call-span.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-span.d.ts","sourceRoot":"","sources":["../../src/tracing/tool-call-span.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAM1D,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,cAAc,EACtB,aAAa,EAAE,UAAU,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,EAChD,MAAM,CAAC,EAAE,MAAM,GACd,IAAI,CA6DN"}

package/dist/tracing/tool-call-span.js

@@ -0,0 +1,60 @@
+import { SpanStatusCode } from '@opentelemetry/api';
+import { getMcpTracer } from './mcp-tracer.js';
+import { createLogger } from '../shared/index.js';
+const logger = createLogger('tool-call-span');
+export function emitToolCallSpan(record, parentContext, taskId) {
+    const tracer = getMcpTracer();
+    const spanName = `mcp.tool.${record.toolName}`;
+    const isBash = record.toolName === 'Bash';
+    const bashCategory = typeof record.bashCategory === 'string' ? record.bashCategory : undefined;
+    const bashLeading = typeof record.bashLeading === 'string' ? record.bashLeading : undefined;
+    const bashDestructive = typeof record.bashDestructive === 'boolean' ? record.bashDestructive : undefined;
+    const bashNetwork = typeof record.bashNetwork === 'boolean' ? record.bashNetwork : undefined;
+    const span = tracer.startSpan(spanName, {
+        startTime: record.timestamp,
+        attributes: {
+            'mcp.tool.name': record.toolName,
+            'mcp.tool.use_id': record.toolUseId,
+            'ai.session.id': record.sessionId ?? '',
+            'mcp.tool.success': record.success,
+            ...(record.inputSizeBytes !== undefined && {
+                'mcp.tool.input_size_bytes': record.inputSizeBytes,
+            }),
+            ...(record.outputSizeBytes !== undefined && {
+                'mcp.tool.output_size_bytes': record.outputSizeBytes,
+            }),
+            ...(taskId && { 'ai.task.id': taskId }),
+            ...(isBash && bashCategory !== undefined && { 'bash.category': bashCategory }),
+            ...(isBash && bashLeading !== undefined && { 'bash.leading': bashLeading }),
+            ...(isBash && bashDestructive !== undefined && { 'bash.destructive': bashDestructive }),
+            ...(isBash && bashNetwork !== undefined && { 'bash.network': bashNetwork }),
+        },
+    }, parentContext);
+    let ended = false;
+    if (record.durationMs != null && Number.isFinite(record.durationMs)) {
+        const endTime = record.timestamp + record.durationMs;
+        if (!record.success) {
+            span.setStatus({
+                code: SpanStatusCode.ERROR,
+                message: record.error ?? record.errorType ?? 'tool call failed',
+            });
+            if (record.error)
+                span.recordException(new Error(record.error));
+        }
+        else {
+            span.setStatus({ code: SpanStatusCode.OK });
+        }
+        if (!ended) {
+            span.end(endTime);
+            ended = true;
+        }
+    }
+    else if (!ended) {
+        // Orphaned/timeout record — end immediately
+        span.setStatus({ code: SpanStatusCode.ERROR, message: 'orphaned tool call (no post event)' });
+        span.end();
+        ended = true;
+    }
+    logger.debug('Tool call span emitted', { tool: record.toolName, success: record.success });
+}
+//# sourceMappingURL=tool-call-span.js.map

package/dist/tracing/tool-call-span.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-call-span.js","sourceRoot":"","sources":["../../src/tracing/tool-call-span.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAW,MAAM,oBAAoB,CAAC;AAE7D,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,MAAM,MAAM,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AAE9C,MAAM,UAAU,gBAAgB,CAC9B,MAAsB,EACtB,aAAgD,EAChD,MAAe;IAEf,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,YAAY,MAAM,CAAC,QAAQ,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC;IAC1C,MAAM,YAAY,GAAG,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/F,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,MAAM,eAAe,GACnB,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7F,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAC3B,QAAQ,EACR;QACE,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,UAAU,EAAE;YACV,eAAe,EAAE,MAAM,CAAC,QAAQ;YAChC,iBAAiB,EAAE,MAAM,CAAC,SAAS;YACnC,eAAe,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;YACvC,kBAAkB,EAAE,MAAM,CAAC,OAAO;YAClC,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI;gBACzC,2BAA2B,EAAE,MAAM,CAAC,cAAc;aACnD,CAAC;YACF,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI;gBAC1C,4BAA4B,EAAE,MAAM,CAAC,eAAe;aACrD,CAAC;YACF,GAAG,CAAC,MAAM,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;YACvC,GAAG,CAAC,MAAM,IAAI,YAAY,KAAK,SAAS,IAAI,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;YAC9E,GAAG,CAAC,MAAM,IAAI,WAAW,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;YAC3E,GAAG,CAAC,MAAM,IAAI,eAAe,KAAK,SAAS,IAAI,EAAE,kBAAkB,EAAE,eAAe,EAAE,CAAC;YACvF,GAAG,CAAC,MAAM,IAAI,WAAW,KAAK,SAAS,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC;SAC5E;KACF,EACD,aAAa,CACd,CAAC;IAEF,IAAI,KAAK,GAAG,KAAK,CAAC;IAElB,IAAI,MAAM,CAAC,UAAU,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,cAAc,CAAC,KAAK;gBAC1B,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,IAAI,kBAAkB;aAChE,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,KAAK;gBAAE,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClB,KAAK,GAAG,IAAI,CAAC;QACf,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAClB,4CAA4C;QAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC;QAC9F,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;AAC7F,CAAC"}

package/dist/transport/index.d.ts

@@ -0,0 +1,3 @@
+export { NrIngestManager, toolCallToNrEvent } from './nr-ingest.js';
+export type { NrIngestOptions } from './nr-ingest.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/transport/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/transport/index.js

@@ -0,0 +1,2 @@
+export { NrIngestManager, toolCallToNrEvent } from './nr-ingest.js';
+//# sourceMappingURL=index.js.map

package/dist/transport/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/transport/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/transport/log-ingest.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Log Ingest — converts AuditRecords into NR Log entries and ships them
+ * via the shared Logs API transport on a harvest interval.
+ */
+import type { NrLogEntry, TransportOptions, TransportResult } from '../shared/index.js';
+import type { AuditRecord } from '../security/audit-trail.js';
+type SendLogsFn = (logs: NrLogEntry[], licenseKey: string, options: TransportOptions) => Promise<TransportResult>;
+export interface LogIngestOptions {
+    licenseKey: string;
+    transportOptions: TransportOptions;
+    developer: string;
+    appName: string;
+    logHarvestIntervalMs?: number;
+    /** Override for testing; defaults to the shared sendLogs transport. */
+    sendLogsFn?: SendLogsFn;
+}
+/**
+ * Convert an AuditRecord into a structured NR Log entry.
+ */
+export declare function auditRecordToLogEntry(record: AuditRecord, appName: string): NrLogEntry;
+export declare class LogIngestManager {
+    private buffer;
+    private readonly maxBufferSize;
+    private readonly licenseKey;
+    private readonly transportOptions;
+    private readonly developer;
+    private readonly appName;
+    private readonly sendLogsFn;
+    private readonly harvestIntervalMs;
+    private intervalId;
+    private running;
+    private inFlightFlush;
+    constructor(options: LogIngestOptions);
+    addLog(entry: NrLogEntry): void;
+    addAuditRecord(record: AuditRecord): void;
+    start(): void;
+    stop(): Promise<void>;
+    flush(): Promise<void>;
+    private requeueBatch;
+}
+export {};
+//# sourceMappingURL=log-ingest.d.ts.map

package/dist/transport/log-ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-ingest.d.ts","sourceRoot":"","sources":["../../src/transport/log-ingest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGxF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAQ9D,KAAK,UAAU,GAAG,CAChB,IAAI,EAAE,UAAU,EAAE,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAMD;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,CA2BtF;AAQD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAmB;IACpD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,UAAU,CAA+C;IACjE,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,aAAa,CAA8B;gBAEvC,OAAO,EAAE,gBAAgB;IASrC,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI;IAI/B,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAIzC,KAAK,IAAI,IAAI;IAYP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAerB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAwC5B,OAAO,CAAC,YAAY;CAarB"}

package/dist/transport/log-ingest.js

@@ -0,0 +1,151 @@
+/**
+ * Log Ingest — converts AuditRecords into NR Log entries and ships them
+ * via the shared Logs API transport on a harvest interval.
+ */
+import { createLogger } from '../shared/index.js';
+import { sendLogs } from '../shared/index.js';
+import { redactSensitive } from '../config.js';
+const logger = createLogger('log-ingest');
+// ---------------------------------------------------------------------------
+// Conversion
+// ---------------------------------------------------------------------------
+/**
+ * Convert an AuditRecord into a structured NR Log entry.
+ */
+export function auditRecordToLogEntry(record, appName) {
+    const attributes = {
+        tool: record.tool,
+        developer: record.developer,
+        app_name: appName,
+        'audit.action': record.action,
+        'audit.security_alert': !!record.securityAlert,
+    };
+    if (record.sessionId != null)
+        attributes.session_id = record.sessionId;
+    // Defense-in-depth: AuditRecord is already constructed with redacted
+    // filePath/command/detail (see audit-trail.ts), but apply redactSensitive
+    // again here so a future caller that bypasses the AuditTrailManager
+    // constructor cannot leak secrets via the NR Logs egress channel.
+    if (record.filePath != null)
+        attributes['audit.file_path'] = redactSensitive(record.filePath);
+    if (record.command != null)
+        attributes['audit.command'] = redactSensitive(record.command);
+    if (record.securityAlert) {
+        attributes['audit.severity'] = record.securityAlert.severity;
+        attributes['audit.alert_type'] = record.securityAlert.alertType;
+    }
+    return {
+        timestamp: record.timestamp,
+        message: redactSensitive(record.detail),
+        attributes,
+    };
+}
+// ---------------------------------------------------------------------------
+// LogIngestManager
+// ---------------------------------------------------------------------------
+const DEFAULT_LOG_HARVEST_MS = 5_000;
+export class LogIngestManager {
+    buffer = [];
+    maxBufferSize = 1_000;
+    licenseKey;
+    transportOptions;
+    developer;
+    appName;
+    sendLogsFn;
+    harvestIntervalMs;
+    intervalId = null;
+    running = false;
+    inFlightFlush = null;
+    constructor(options) {
+        this.licenseKey = options.licenseKey;
+        this.transportOptions = options.transportOptions;
+        this.developer = options.developer;
+        this.appName = options.appName;
+        this.sendLogsFn = options.sendLogsFn ?? sendLogs;
+        this.harvestIntervalMs = options.logHarvestIntervalMs ?? DEFAULT_LOG_HARVEST_MS;
+    }
+    addLog(entry) {
+        this.buffer.push(entry);
+    }
+    addAuditRecord(record) {
+        this.addLog(auditRecordToLogEntry(record, this.appName));
+    }
+    start() {
+        if (this.running)
+            return;
+        this.running = true;
+        this.intervalId = setInterval(() => {
+            this.inFlightFlush = this.flush().finally(() => {
+                this.inFlightFlush = null;
+            });
+        }, this.harvestIntervalMs);
+        this.intervalId.unref();
+    }
+    async stop() {
+        if (!this.running)
+            return;
+        this.running = false;
+        if (this.intervalId !== null) {
+            clearInterval(this.intervalId);
+            this.intervalId = null;
+        }
+        // Wait for any in-flight periodic flush to finish before draining the
+        // final batch, so a concurrent requeueBatch() doesn't lose entries.
+        if (this.inFlightFlush)
+            await this.inFlightFlush.catch(() => { });
+        await this.flush();
+    }
+    async flush() {
+        if (this.buffer.length === 0)
+            return;
+        const batch = this.buffer;
+        this.buffer = [];
+        try {
+            const result = await this.sendLogsFn(batch, this.licenseKey, this.transportOptions);
+            if (!result.success) {
+                // Drop non-retryable 4xx (auth failure, bad payload) — re-queuing
+                // would fill the buffer indefinitely with entries that will never succeed.
+                const isNonRetryable = result.statusCode !== null &&
+                    result.statusCode >= 400 &&
+                    result.statusCode < 500 &&
+                    result.statusCode !== 408 &&
+                    result.statusCode !== 429;
+                if (isNonRetryable) {
+                    logger.warn('Dropping non-retryable log batch', {
+                        statusCode: result.statusCode,
+                        batchSize: batch.length,
+                    });
+                }
+                else {
+                    logger.warn('Failed to send logs — re-queuing batch for retry', {
+                        batchSize: batch.length,
+                        error: result.error,
+                    });
+                    this.requeueBatch(batch);
+                }
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            logger.warn('Unexpected error sending logs — re-queuing batch for retry', {
+                batchSize: batch.length,
+                error: message,
+            });
+            this.requeueBatch(batch);
+        }
+    }
+    requeueBatch(batch) {
+        // Trim new entries first so the failed batch (higher retry priority) is preserved.
+        // If the batch itself exceeds the cap, keep its most-recent entries.
+        const maxNew = Math.max(0, this.maxBufferSize - batch.length);
+        // Guard: slice(-0) === slice(0) returns the full array in JS; use [] when maxNew is 0.
+        const trimmedNew = maxNew === 0 ? [] : this.buffer.slice(-maxNew);
+        const trimmedBatch = batch.slice(-this.maxBufferSize);
+        const dropped = this.buffer.length - trimmedNew.length + (batch.length - trimmedBatch.length);
+        this.buffer = [...trimmedBatch, ...trimmedNew];
+        if (dropped > 0) {
+            logger.warn('Log buffer overflow — entries dropped', { dropped });
+        }
+    }
+}
+//# sourceMappingURL=log-ingest.js.map

package/dist/transport/log-ingest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-ingest.js","sourceRoot":"","sources":["../../src/transport/log-ingest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;AAsB1C,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAmB,EAAE,OAAe;IACxE,MAAM,UAAU,GAA8C;QAC5D,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,OAAO;QACjB,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa;KAC/C,CAAC;IAEF,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI;QAAE,UAAU,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;IACvE,qEAAqE;IACrE,0EAA0E;IAC1E,oEAAoE;IACpE,kEAAkE;IAClE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI;QAAE,UAAU,CAAC,iBAAiB,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9F,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI;QAAE,UAAU,CAAC,eAAe,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE1F,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,UAAU,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC;QAC7D,UAAU,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC;IAClE,CAAC;IAED,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;QACvC,UAAU;KACX,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC,MAAM,OAAO,gBAAgB;IACnB,MAAM,GAAiB,EAAE,CAAC;IACjB,aAAa,GAAG,KAAK,CAAC;IACtB,UAAU,CAAS;IACnB,gBAAgB,CAAmB;IACnC,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,UAAU,CAAa;IACvB,iBAAiB,CAAS;IACnC,UAAU,GAA0C,IAAI,CAAC;IACzD,OAAO,GAAG,KAAK,CAAC;IAChB,aAAa,GAAyB,IAAI,CAAC;IAEnD,YAAY,OAAyB;QACnC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,IAAI,sBAAsB,CAAC;IAClF,CAAC;IAED,MAAM,CAAC,KAAiB;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAED,cAAc,CAAC,MAAmB;QAChC,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;gBAC7C,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,sEAAsE;QACtE,oEAAoE;QACpE,IAAI,IAAI,CAAC,aAAa;YAAE,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACjE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAEjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,kEAAkE;gBAClE,2EAA2E;gBAC3E,MAAM,cAAc,GAClB,MAAM,CAAC,UAAU,KAAK,IAAI;oBAC1B,MAAM,CAAC,UAAU,IAAI,GAAG;oBACxB,MAAM,CAAC,UAAU,GAAG,GAAG;oBACvB,MAAM,CAAC,UAAU,KAAK,GAAG;oBACzB,MAAM,CAAC,UAAU,KAAK,GAAG,CAAC;gBAC5B,IAAI,cAAc,EAAE,CAAC;oBACnB,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE;wBAC9C,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,SAAS,EAAE,KAAK,CAAC,MAAM;qBACxB,CAAC,CAAC;gBACL,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CAAC,kDAAkD,EAAE;wBAC9D,SAAS,EAAE,KAAK,CAAC,MAAM;wBACvB,KAAK,EAAE,MAAM,CAAC,KAAK;qBACpB,CAAC,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC,4DAA4D,EAAE;gBACxE,SAAS,EAAE,KAAK,CAAC,MAAM;gBACvB,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;YACH,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,KAAmB;QACtC,mFAAmF;QACnF,qEAAqE;QACrE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,uFAAuF;QACvF,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QAC9F,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,UAAU,CAAC,CAAC;QAC/C,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;CACF"}

package/dist/transport/nr-ingest.d.ts

@@ -0,0 +1,171 @@
+/**
+ * New Relic Event Ingestion — converts ToolCallRecords into NR events and
+ * metrics, then ships them via the shared HarvestScheduler.
+ */
+import type { NrEventData, NrMetric, NrLogEntry, TransportOptions, TransportResult } from '../shared/index.js';
+import type { ToolCallRecord } from '../storage/types.js';
+import type { ProxyToolCallRecord, ProxyRequestRecord } from '../proxy/types.js';
+import type { AiCodingTask } from '../metrics/task-detector.js';
+import type { AntiPattern } from '../metrics/anti-patterns.js';
+import type { SessionTracker } from '../metrics/session-tracker.js';
+import type { CostTracker } from '../metrics/cost-tracker.js';
+import type { EfficiencyScorer } from '../metrics/efficiency-score.js';
+import type { BudgetThresholdEvent } from '../metrics/budget-tracker.js';
+import type { ContextTurnSnapshot, ToolContextContribution } from '../metrics/context-tracker.js';
+import { AuditTrailManager } from '../security/index.js';
+import type { AuditRecord } from '../security/index.js';
+import type { TurnCostAttributor } from '../metrics/turn-cost-attributor.js';
+import type { LocalStore } from '../storage/index.js';
+type SendEventsFn = (events: NrEventData[], licenseKey: string, options: TransportOptions) => Promise<TransportResult>;
+type SendMetricsFn = (metrics: NrMetric[], licenseKey: string, options: TransportOptions) => Promise<TransportResult>;
+type SendLogsFn = (logs: NrLogEntry[], licenseKey: string, options: TransportOptions) => Promise<TransportResult>;
+export interface NrIngestOptions {
+    licenseKey: string;
+    transportOptions: TransportOptions;
+    developer: string;
+    appName: string;
+    sessionTracker: SessionTracker;
+    eventHarvestIntervalMs?: number;
+    metricHarvestIntervalMs?: number;
+    /** Session ID for audit trail context. */
+    sessionId?: string | null;
+    /** Trace ID generated at server startup — threaded through all NR events and metrics. */
+    sessionTraceId?: string;
+    /** LocalStore for persisting audit entries to disk. */
+    localStore?: LocalStore;
+    /**
+     * Optional pre-constructed AuditTrailManager. When provided, NrIngestManager
+     * uses it instead of constructing its own — lets the dashboard share the
+     * same audit log instance in both `local` and `cloud`/`both` modes.
+     */
+    auditTrail?: AuditTrailManager;
+    /** Override for testing; defaults to the shared sendEvents transport. */
+    sendEventsFn?: SendEventsFn;
+    /** Override for testing; defaults to the shared sendMetrics transport. */
+    sendMetricsFn?: SendMetricsFn;
+    /** Harvest interval for NR Logs API delivery. Default: 5000ms. */
+    logHarvestIntervalMs?: number;
+    /** Override for testing; defaults to the shared sendLogs transport. */
+    sendLogsFn?: SendLogsFn;
+    /** Cost tracker for emitting ai.cost.* metrics. */
+    costTracker?: CostTracker;
+    /** Efficiency scorer for emitting ai.efficiency.* metrics. */
+    efficiencyScorer?: EfficiencyScorer;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+    /** OTLP/HTTP endpoint URL. When set, telemetry is also exported via OTLP. */
+    otlpEndpoint?: string | null;
+    /** Additional HTTP headers for the OTLP exporter. */
+    otlpHeaders?: Record<string, string>;
+    /** Transport mode: 'nr-events-api', 'otlp', or 'both'. */
+    transport?: 'nr-events-api' | 'otlp' | 'both';
+    /** Turn cost attributor for enriching AiToolCall events with cost data. */
+    turnCostAttributor?: TurnCostAttributor;
+}
+/**
+ * Convert a ToolCallRecord into a flat NR event object.
+ *
+ * Standard fields are mapped to snake_case NR attributes; any extra
+ * tool-specific fields (string | number | boolean) are included as-is.
+ */
+export declare function toolCallToNrEvent(record: ToolCallRecord, attrs: {
+    developer: string;
+    appName: string;
+    sessionTraceId?: string;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+/** Type guard for ProxyToolCallRecord (has serverName and upstreamLatencyMs with correct types). */
+export declare function isProxyToolCall(record: ToolCallRecord): record is ProxyToolCallRecord;
+/**
+ * Convert a ProxyToolCallRecord into an NR event with proxy-specific attributes.
+ */
+export declare function proxyToolCallToNrEvent(record: ProxyToolCallRecord, attrs: {
+    developer: string;
+    appName: string;
+    sessionTraceId?: string;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+/**
+ * Convert a ProxyRequestRecord (discovery methods like tools/list) into an NR event.
+ */
+export declare function proxyRequestToNrEvent(record: ProxyRequestRecord, attrs: {
+    developer: string;
+    appName: string;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+/**
+ * Convert an AiCodingTask into a flat NR event object.
+ *
+ * All fields use snake_case to match the convention of AiToolCall/AiAuditEvent.
+ * File path arrays are emitted as counts to keep event size small.
+ */
+export declare function codingTaskToNrEvent(task: AiCodingTask, attrs: {
+    developer: string;
+    appName: string;
+    sessionTraceId?: string;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+}): NrEventData;
+/**
+ * Convert an AntiPattern into a flat NR event object.
+ *
+ * Optional fields are only included when defined on the source pattern.
+ */
+export declare function antiPatternToNrEvent(pattern: AntiPattern, attrs: {
+    developer: string;
+    appName: string;
+    sessionId?: string;
+    platform?: string;
+    taskId: string;
+    teamId?: string | null;
+    projectId?: string | null;
+    orgId?: string | null;
+    /** Detection wall-clock time in ms. Defaults to now if not provided. */
+    detectedAt?: number;
+}): NrEventData;
+export declare class NrIngestManager {
+    private readonly scheduler;
+    private readonly logIngest;
+    private readonly sessionTracker;
+    private readonly proxyMetrics;
+    private readonly costTracker?;
+    private readonly efficiencyScorer?;
+    readonly auditTrail: AuditTrailManager;
+    private readonly developer;
+    private readonly appName;
+    private readonly sessionTraceId;
+    private readonly teamId;
+    private readonly projectId;
+    private readonly orgId;
+    private readonly metricHarvestIntervalMs;
+    private readonly turnCostAttributor?;
+    private readonly otlpTransport;
+    private readonly otlpEventBridge;
+    private sessionGaugeIntervalId;
+    private running;
+    constructor(options: NrIngestOptions);
+    ingestProxyRequest(record: ProxyRequestRecord): void;
+    ingestToolCall(record: ToolCallRecord, auditRecord?: AuditRecord): void;
+    ingestCodingTask(task: AiCodingTask): void;
+    ingestAntiPattern(pattern: AntiPattern, context: {
+        sessionId?: string;
+        platform?: string;
+        taskId: string;
+        detectedAt?: number;
+    }): void;
+    ingestContextSnapshot(snapshot: ContextTurnSnapshot, topTools: readonly ToolContextContribution[]): void;
+    ingestBudgetWarning(event: BudgetThresholdEvent): void;
+    start(): void;
+    stop(): Promise<void>;
+    private emitSessionGauges;
+}
+export {};
+//# sourceMappingURL=nr-ingest.d.ts.map

package/dist/transport/nr-ingest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nr-ingest.d.ts","sourceRoot":"","sources":["../../src/transport/nr-ingest.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,WAAW,EACX,QAAQ,EACR,UAAU,EACV,gBAAgB,EAChB,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAa5B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAElG,OAAO,EACL,iBAAiB,EAGlB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOtD,KAAK,YAAY,GAAG,CAClB,MAAM,EAAE,WAAW,EAAE,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,KAAK,aAAa,GAAG,CACnB,OAAO,EAAE,QAAQ,EAAE,EACnB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,KAAK,UAAU,GAAG,CAChB,IAAI,EAAE,UAAU,EAAE,EAClB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,gBAAgB,KACtB,OAAO,CAAC,eAAe,CAAC,CAAC;AAE9B,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,gBAAgB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,yFAAyF;IACzF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,yEAAyE;IACzE,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,0EAA0E;IAC1E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,uEAAuE;IACvE,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,mDAAmD;IACnD,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,0DAA0D;IAC1D,SAAS,CAAC,EAAE,eAAe,GAAG,MAAM,GAAG,MAAM,CAAC;IAC9C,2EAA2E;IAC3E,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACzC;AAyCD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GACA,WAAW,CA2Cb;AAED,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,IAAI,mBAAmB,CAOrF;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,mBAAmB,EAC3B,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GACA,WAAW,CAwBb;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GACA,WAAW,CAqBb;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,GACA,WAAW,CA2Cb;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE;IACL,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GACA,WAAW,CA+Bb;AAkBD,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAc;IAC3C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAmB;IACrD,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAqB;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAS;IACjD,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAqB;IACzD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAyB;IACzD,OAAO,CAAC,sBAAsB,CAA+C;IAC7E,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,EAAE,eAAe;IAmGpC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAsBpD,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,EAAE,WAAW,GAAG,IAAI;IAqFvE,gBAAgB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IAY1C,iBAAiB,CACf,OAAO,EAAE,WAAW,EACpB,OAAO,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GACtF,IAAI;IAeP,qBAAqB,CACnB,QAAQ,EAAE,mBAAmB,EAC7B,QAAQ,EAAE,SAAS,uBAAuB,EAAE,GAC3C,IAAI;IA6BP,mBAAmB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI;IAmBtD,KAAK,IAAI,IAAI;IAaP,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IA6B3B,OAAO,CAAC,iBAAiB;CAkF1B"}