@noodleseed/one 0.13.0 → 0.14.0

package/node_modules/@noodle-borg/service/dist/store/request-event-buffer.js

@@ -0,0 +1,62 @@
+const DEFAULT_CAP = 1024;
+/**
+ * Bounded async write-behind buffer between the transport's synchronous capture hook and a durable
+ * {@link RequestEventSink} (ADR 0121). `capture()` is enqueue-only — it never awaits a store write, so
+ * the MCP response path pays no durable-write latency. Under backpressure the **newest** events drop
+ * (`droppedTotal` counts them); store failures are swallowed and counted (`failedTotal`); `close()`
+ * drains what is queued. Analytics is strictly best-effort by contract.
+ */
+export class RequestEventBuffer {
+    #sink;
+    #cap;
+    #queue = [];
+    #draining = Promise.resolve();
+    #inFlight = false;
+    #closed = false;
+    #dropped = 0;
+    #failed = 0;
+    constructor(sink, options = {}) {
+        this.#sink = sink;
+        this.#cap = options.cap ?? DEFAULT_CAP;
+    }
+    /** Enqueue one event; drops (and counts) when closed or the queue is full. Never throws. */
+    capture(event) {
+        if (this.#closed || this.#queue.length >= this.#cap) {
+            this.#dropped += 1;
+            return;
+        }
+        this.#queue.push(event);
+        if (!this.#inFlight) {
+            this.#inFlight = true;
+            this.#draining = this.#drain();
+        }
+    }
+    async #drain() {
+        while (this.#queue.length > 0) {
+            const event = this.#queue.shift();
+            if (event === undefined)
+                break;
+            try {
+                await this.#sink.emit(event);
+            }
+            catch {
+                this.#failed += 1; // best-effort: a down store must not spill into request handling
+            }
+        }
+        this.#inFlight = false;
+    }
+    /** Events dropped because the buffer was full or closed. */
+    get droppedTotal() {
+        return this.#dropped;
+    }
+    /** Events whose durable write failed (swallowed). */
+    get failedTotal() {
+        return this.#failed;
+    }
+    /** Stop accepting events and wait for the queued ones to flush. */
+    async close() {
+        this.#closed = true;
+        await this.#draining;
+    }
+}
+//# sourceMappingURL=request-event-buffer.js.map

package/node_modules/@noodle-borg/service/dist/store/request-event-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-event-buffer.js","sourceRoot":"","sources":["../../src/store/request-event-buffer.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,GAAG,IAAI,CAAC;AAEzB;;;;;;GAMG;AACH,MAAM,OAAO,kBAAkB;IACpB,KAAK,CAAmB;IACxB,IAAI,CAAS;IACb,MAAM,GAAwB,EAAE,CAAC;IAC1C,SAAS,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,QAAQ,GAAG,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,CAAC;IAEZ,YAAY,IAAsB,EAAE,UAA4B,EAAE;QAChE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC;IACzC,CAAC;IAED,4FAA4F;IAC5F,OAAO,CAAC,KAAwB;QAC9B,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM;YAC/B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,iEAAiE;YACtF,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;IACzB,CAAC;IAED,4DAA4D;IAC5D,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,qDAAqD;IACrD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,SAAS,CAAC;IACvB,CAAC;CACF"}

package/node_modules/@noodle-borg/service/dist/store/request-events-postgres.d.ts

@@ -0,0 +1,27 @@
+import { type RequestEvent, type RequestEventFilter, type RequestEventInput, type RequestEventStore } from '@noodle-borg/module';
+import type { Pool } from 'pg';
+/**
+ * Create the append-only `request_events` table if absent (idempotent; run once at startup). Like
+ * `audit_events`, it has **no foreign key to `environments`** — the analytics stream carries plain
+ * `org_slug`/`app_slug`/`environment` text so history survives tenant/app/env deletion and is pruned
+ * only by retention (ADR 0121). `seq` (bigserial) gives stable newest-first order and a future cursor;
+ * `details` is `jsonb` holding the already-redacted scalar bag.
+ */
+export declare function ensureRequestEventSchema(pool: Pool): Promise<void>;
+/**
+ * Relational system of record for the tenant-facing analytics stream (parallels
+ * {@link InMemoryRequestEventStore}). The `pg.Pool` is injected; pure SQL, unit-testable against any
+ * local Postgres (`DATABASE_URL_TEST`).
+ */
+export declare class PostgresRequestEventStore implements RequestEventStore {
+    #private;
+    constructor(pool: Pool, options?: {
+        now?: () => Date;
+    });
+    ensureSchema(): Promise<void>;
+    emit(input: RequestEventInput): Promise<void>;
+    list(filter: RequestEventFilter): Promise<readonly RequestEvent[]>;
+    /** Delete events older than the retention window (Stage-A default retention; called by the sweeper). */
+    prune(olderThan: Date): Promise<number>;
+}
+//# sourceMappingURL=request-events-postgres.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/request-events-postgres.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-events-postgres.d.ts","sourceRoot":"","sources":["../../src/store/request-events-postgres.ts"],"names":[],"mappings":"AACA,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAMvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAM/B;;;;;;GAMG;AACH,wBAAsB,wBAAwB,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CA+CxE;AAiCD;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;;gBAIrD,IAAI,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAO;IAK1D,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAIvB,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IA0C7C,IAAI,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAmCxE,wGAAwG;IAClG,KAAK,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC;CAO9C"}

package/node_modules/@noodle-borg/service/dist/store/request-events-postgres.js

@@ -0,0 +1,188 @@
+import { randomUUID } from 'node:crypto';
+import { REQUEST_EVENT_SCHEMA_VERSION, redactDetails, } from '@noodle-borg/module';
+/** Reads are always bounded: the metrics scan is the largest sanctioned window. */
+const MAX_LIST_LIMIT = 50_000;
+const DEFAULT_LIST_LIMIT = 10_000;
+/**
+ * Create the append-only `request_events` table if absent (idempotent; run once at startup). Like
+ * `audit_events`, it has **no foreign key to `environments`** — the analytics stream carries plain
+ * `org_slug`/`app_slug`/`environment` text so history survives tenant/app/env deletion and is pruned
+ * only by retention (ADR 0121). `seq` (bigserial) gives stable newest-first order and a future cursor;
+ * `details` is `jsonb` holding the already-redacted scalar bag.
+ */
+export async function ensureRequestEventSchema(pool) {
+    await pool.query(`
+    CREATE TABLE IF NOT EXISTS request_events (
+      seq                  bigserial PRIMARY KEY,
+      id                   uuid NOT NULL,
+      schema_version       int NOT NULL,
+      created_at           timestamptz NOT NULL,
+      org_slug             text NOT NULL,
+      app_slug             text,
+      environment          text,
+      deployment_id        text,
+      server_version       text,
+      sdk_protocol_version text,
+      request_id           text NOT NULL,
+      session_id           text,
+      session_source       text NOT NULL,
+      client_name          text,
+      client_version       text,
+      access_mode          text,
+      subject_kind         text NOT NULL,
+      method               text NOT NULL,
+      kind                 text NOT NULL,
+      tool_name            text,
+      resource_name        text,
+      prompt_name          text,
+      outcome              text NOT NULL,
+      error_kind           text,
+      duration_ms          double precision NOT NULL,
+      output_tokens_est    int,
+      country              text,
+      details              jsonb
+    )
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS request_events_tenant_time_idx
+      ON request_events (org_slug, app_slug, environment, seq DESC)
+  `);
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS request_events_session_idx
+      ON request_events (org_slug, session_id)
+      WHERE session_id IS NOT NULL
+  `);
+    // Retention prune deletes by `created_at < cutoff`; without this index every sweep is a full scan.
+    await pool.query(`
+    CREATE INDEX IF NOT EXISTS request_events_created_at_idx
+      ON request_events (created_at)
+  `);
+}
+/**
+ * Relational system of record for the tenant-facing analytics stream (parallels
+ * {@link InMemoryRequestEventStore}). The `pg.Pool` is injected; pure SQL, unit-testable against any
+ * local Postgres (`DATABASE_URL_TEST`).
+ */
+export class PostgresRequestEventStore {
+    #pool;
+    #now;
+    constructor(pool, options = {}) {
+        this.#pool = pool;
+        this.#now = options.now ?? (() => new Date());
+    }
+    ensureSchema() {
+        return ensureRequestEventSchema(this.#pool);
+    }
+    async emit(input) {
+        const details = redactDetails(input.details);
+        await this.#pool.query(`INSERT INTO request_events
+        (id, schema_version, created_at, org_slug, app_slug, environment, deployment_id,
+         server_version, sdk_protocol_version, request_id, session_id, session_source,
+         client_name, client_version, access_mode, subject_kind, method, kind,
+         tool_name, resource_name, prompt_name, outcome, error_kind, duration_ms,
+         output_tokens_est, country, details)
+       VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19,$20,$21,$22,$23,$24,$25,$26,$27)`, [
+            randomUUID(),
+            REQUEST_EVENT_SCHEMA_VERSION,
+            this.#now(),
+            input.org,
+            input.app ?? null,
+            input.env ?? null,
+            input.deploymentId ?? null,
+            input.serverVersion ?? null,
+            input.sdkProtocolVersion ?? null,
+            input.requestId,
+            input.sessionId ?? null,
+            input.sessionSource,
+            input.clientName ?? null,
+            input.clientVersion ?? null,
+            input.accessMode ?? null,
+            input.subjectKind,
+            input.method,
+            input.kind,
+            input.toolName ?? null,
+            input.resourceName ?? null,
+            input.promptName ?? null,
+            input.outcome,
+            input.errorKind ?? null,
+            input.durationMs,
+            input.outputTokensEst ?? null,
+            input.country ?? null,
+            details !== undefined ? JSON.stringify(details) : null,
+        ]);
+    }
+    async list(filter) {
+        const clauses = ['org_slug = $1'];
+        const values = [filter.org];
+        const add = (column, value) => {
+            values.push(value);
+            clauses.push(`${column} = $${values.length}`);
+        };
+        if (filter.app !== undefined)
+            add('app_slug', filter.app);
+        if (filter.env !== undefined)
+            add('environment', filter.env);
+        if (filter.outcome !== undefined)
+            add('outcome', filter.outcome);
+        if (filter.toolName !== undefined)
+            add('tool_name', filter.toolName);
+        if (filter.clientName !== undefined)
+            add('client_name', filter.clientName);
+        if (filter.sessionId !== undefined)
+            add('session_id', filter.sessionId);
+        if (filter.since !== undefined) {
+            values.push(filter.since);
+            clauses.push(`created_at >= $${values.length}`);
+        }
+        if (filter.until !== undefined) {
+            values.push(filter.until);
+            clauses.push(`created_at <= $${values.length}`);
+        }
+        // Always bounded: a missing limit gets the server-side default, and a malformed one can never
+        // reach the SQL text (a raw `Number(...)` here would produce `LIMIT NaN`).
+        const requested = Math.floor(Number(filter.limit));
+        const limit = Number.isFinite(requested) && requested >= 0
+            ? Math.min(requested, MAX_LIST_LIMIT)
+            : DEFAULT_LIST_LIMIT;
+        const { rows } = await this.#pool.query(`SELECT * FROM request_events WHERE ${clauses.join(' AND ')} ORDER BY seq DESC LIMIT ${limit}`, values);
+        return rows.map(rowToEvent);
+    }
+    /** Delete events older than the retention window (Stage-A default retention; called by the sweeper). */
+    async prune(olderThan) {
+        const { rowCount } = await this.#pool.query('DELETE FROM request_events WHERE created_at < $1', [olderThan]);
+        return rowCount ?? 0;
+    }
+}
+function rowToEvent(row) {
+    return {
+        seq: Number(row.seq),
+        id: row.id,
+        schemaVersion: row.schema_version,
+        createdAt: row.created_at.toISOString(),
+        org: row.org_slug,
+        requestId: row.request_id,
+        sessionSource: row.session_source,
+        subjectKind: row.subject_kind,
+        method: row.method,
+        kind: row.kind,
+        outcome: row.outcome,
+        durationMs: row.duration_ms,
+        ...(row.app_slug !== null ? { app: row.app_slug } : {}),
+        ...(row.environment !== null ? { env: row.environment } : {}),
+        ...(row.deployment_id !== null ? { deploymentId: row.deployment_id } : {}),
+        ...(row.server_version !== null ? { serverVersion: row.server_version } : {}),
+        ...(row.sdk_protocol_version !== null ? { sdkProtocolVersion: row.sdk_protocol_version } : {}),
+        ...(row.session_id !== null ? { sessionId: row.session_id } : {}),
+        ...(row.client_name !== null ? { clientName: row.client_name } : {}),
+        ...(row.client_version !== null ? { clientVersion: row.client_version } : {}),
+        ...(row.access_mode !== null ? { accessMode: row.access_mode } : {}),
+        ...(row.tool_name !== null ? { toolName: row.tool_name } : {}),
+        ...(row.resource_name !== null ? { resourceName: row.resource_name } : {}),
+        ...(row.prompt_name !== null ? { promptName: row.prompt_name } : {}),
+        ...(row.error_kind !== null ? { errorKind: row.error_kind } : {}),
+        ...(row.output_tokens_est !== null ? { outputTokensEst: row.output_tokens_est } : {}),
+        ...(row.country !== null ? { country: row.country } : {}),
+        ...(row.details !== null ? { details: row.details } : {}),
+    };
+}
+//# sourceMappingURL=request-events-postgres.js.map

package/node_modules/@noodle-borg/service/dist/store/request-events-postgres.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-events-postgres.js","sourceRoot":"","sources":["../../src/store/request-events-postgres.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAGL,4BAA4B,EAO5B,aAAa,GAGd,MAAM,qBAAqB,CAAC;AAG7B,mFAAmF;AACnF,MAAM,cAAc,GAAG,MAAM,CAAC;AAC9B,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAU;IACvD,MAAM,IAAI,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,KAAK,CAAC;;;;GAIhB,CAAC,CAAC;IACH,mGAAmG;IACnG,MAAM,IAAI,CAAC,KAAK,CAAC;;;GAGhB,CAAC,CAAC;AACL,CAAC;AAiCD;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAC3B,KAAK,CAAO;IACZ,IAAI,CAAa;IAE1B,YAAY,IAAU,EAAE,UAAgC,EAAE;QACxD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,YAAY;QACV,OAAO,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAwB;QACjC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACpB;;;;;;mHAM6G,EAC7G;YACE,UAAU,EAAE;YACZ,4BAA4B;YAC5B,IAAI,CAAC,IAAI,EAAE;YACX,KAAK,CAAC,GAAG;YACT,KAAK,CAAC,GAAG,IAAI,IAAI;YACjB,KAAK,CAAC,GAAG,IAAI,IAAI;YACjB,KAAK,CAAC,YAAY,IAAI,IAAI;YAC1B,KAAK,CAAC,aAAa,IAAI,IAAI;YAC3B,KAAK,CAAC,kBAAkB,IAAI,IAAI;YAChC,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,SAAS,IAAI,IAAI;YACvB,KAAK,CAAC,aAAa;YACnB,KAAK,CAAC,UAAU,IAAI,IAAI;YACxB,KAAK,CAAC,aAAa,IAAI,IAAI;YAC3B,KAAK,CAAC,UAAU,IAAI,IAAI;YACxB,KAAK,CAAC,WAAW;YACjB,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,IAAI;YACV,KAAK,CAAC,QAAQ,IAAI,IAAI;YACtB,KAAK,CAAC,YAAY,IAAI,IAAI;YAC1B,KAAK,CAAC,UAAU,IAAI,IAAI;YACxB,KAAK,CAAC,OAAO;YACb,KAAK,CAAC,SAAS,IAAI,IAAI;YACvB,KAAK,CAAC,UAAU;YAChB,KAAK,CAAC,eAAe,IAAI,IAAI;YAC7B,KAAK,CAAC,OAAO,IAAI,IAAI;YACrB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;SACvD,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA0B;QACnC,MAAM,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;QAClC,MAAM,MAAM,GAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,KAAc,EAAQ,EAAE;YACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,8FAA8F;QAC9F,2EAA2E;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,MAAM,KAAK,GACT,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC;YAC1C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,cAAc,CAAC;YACrC,CAAC,CAAC,kBAAkB,CAAC;QACzB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACrC,sCAAsC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,4BAA4B,KAAK,EAAE,EAC9F,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,KAAK,CAAC,SAAe;QACzB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CACzC,kDAAkD,EAClD,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,OAAO,QAAQ,IAAI,CAAC,CAAC;IACvB,CAAC;CACF;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;QACpB,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE;QACvC,GAAG,EAAE,GAAG,CAAC,QAAQ;QACjB,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,aAAa,EAAE,GAAG,CAAC,cAA+B;QAClD,WAAW,EAAE,GAAG,CAAC,YAA2B;QAC5C,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAmB;QAC7B,OAAO,EAAE,GAAG,CAAC,OAAyB;QACtC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,GAAG,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9F,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,GAAG,CAAC,GAAG,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC"}

package/node_modules/@noodle-borg/service/dist/store/request-events.d.ts

@@ -0,0 +1,14 @@
+import { type RequestEvent, type RequestEventFilter, type RequestEventInput, type RequestEventStore } from '@noodle-borg/module';
+/**
+ * In-memory {@link RequestEventStore} for local dev and tests: one **global** bounded drop-oldest
+ * ring (a busy tenant can evict another's events — acceptable for a dev/test-only store; the durable
+ * Postgres store is the real system of record with per-window retention). Mirrors the audit store's
+ * redaction discipline (scalar-only `details`).
+ */
+export declare class InMemoryRequestEventStore implements RequestEventStore {
+    #private;
+    constructor(cap?: number);
+    emit(input: RequestEventInput): Promise<void>;
+    list(filter: RequestEventFilter): Promise<readonly RequestEvent[]>;
+}
+//# sourceMappingURL=request-events.d.ts.map

package/node_modules/@noodle-borg/service/dist/store/request-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-events.d.ts","sourceRoot":"","sources":["../../src/store/request-events.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAEvB,MAAM,qBAAqB,CAAC;AAmD7B;;;;;GAKG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;;gBAIrD,GAAG,GAAE,MAAoB;IAIrC,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,IAAI,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;CAQnE"}

package/node_modules/@noodle-borg/service/dist/store/request-events.js

@@ -0,0 +1,85 @@
+import { randomUUID } from 'node:crypto';
+import { REQUEST_EVENT_SCHEMA_VERSION, redactDetails, } from '@noodle-borg/module';
+const DEFAULT_CAP = 10_000;
+function toRequestEvent(input) {
+    const details = redactDetails(input.details);
+    return {
+        id: randomUUID(),
+        schemaVersion: REQUEST_EVENT_SCHEMA_VERSION,
+        createdAt: new Date().toISOString(),
+        org: input.org,
+        requestId: input.requestId,
+        sessionSource: input.sessionSource,
+        subjectKind: input.subjectKind,
+        method: input.method,
+        kind: input.kind,
+        outcome: input.outcome,
+        durationMs: input.durationMs,
+        ...(input.app !== undefined ? { app: input.app } : {}),
+        ...(input.env !== undefined ? { env: input.env } : {}),
+        ...(input.deploymentId !== undefined ? { deploymentId: input.deploymentId } : {}),
+        ...(input.serverVersion !== undefined ? { serverVersion: input.serverVersion } : {}),
+        ...(input.sdkProtocolVersion !== undefined
+            ? { sdkProtocolVersion: input.sdkProtocolVersion }
+            : {}),
+        ...(input.sessionId !== undefined ? { sessionId: input.sessionId } : {}),
+        ...(input.clientName !== undefined ? { clientName: input.clientName } : {}),
+        ...(input.clientVersion !== undefined ? { clientVersion: input.clientVersion } : {}),
+        ...(input.accessMode !== undefined ? { accessMode: input.accessMode } : {}),
+        ...(input.toolName !== undefined ? { toolName: input.toolName } : {}),
+        ...(input.resourceName !== undefined ? { resourceName: input.resourceName } : {}),
+        ...(input.promptName !== undefined ? { promptName: input.promptName } : {}),
+        ...(input.errorKind !== undefined ? { errorKind: input.errorKind } : {}),
+        ...(input.outputTokensEst !== undefined ? { outputTokensEst: input.outputTokensEst } : {}),
+        ...(input.country !== undefined ? { country: input.country } : {}),
+        ...(details !== undefined ? { details } : {}),
+    };
+}
+function matches(event, filter) {
+    if (filter.app !== undefined && event.app !== filter.app)
+        return false;
+    if (filter.env !== undefined && event.env !== filter.env)
+        return false;
+    if (filter.outcome !== undefined && event.outcome !== filter.outcome)
+        return false;
+    if (filter.toolName !== undefined && event.toolName !== filter.toolName)
+        return false;
+    if (filter.clientName !== undefined && event.clientName !== filter.clientName)
+        return false;
+    if (filter.sessionId !== undefined && event.sessionId !== filter.sessionId)
+        return false;
+    if (filter.since !== undefined && event.createdAt < filter.since)
+        return false;
+    if (filter.until !== undefined && event.createdAt > filter.until)
+        return false;
+    return true;
+}
+/**
+ * In-memory {@link RequestEventStore} for local dev and tests: one **global** bounded drop-oldest
+ * ring (a busy tenant can evict another's events — acceptable for a dev/test-only store; the durable
+ * Postgres store is the real system of record with per-window retention). Mirrors the audit store's
+ * redaction discipline (scalar-only `details`).
+ */
+export class InMemoryRequestEventStore {
+    #events = [];
+    #cap;
+    constructor(cap = DEFAULT_CAP) {
+        this.#cap = cap;
+    }
+    emit(input) {
+        this.#events.push(toRequestEvent(input));
+        if (this.#events.length > this.#cap) {
+            this.#events.splice(0, this.#events.length - this.#cap);
+        }
+        return Promise.resolve();
+    }
+    list(filter) {
+        const matched = this.#events.filter((e) => e.org === filter.org && matches(e, filter));
+        matched.reverse(); // newest-first
+        // Guard malformed limits (NaN would make slice() silently return []).
+        const raw = filter.limit !== undefined ? Math.floor(filter.limit) : undefined;
+        const limit = raw !== undefined && Number.isFinite(raw) ? Math.max(0, raw) : undefined;
+        return Promise.resolve(limit !== undefined ? matched.slice(0, limit) : matched);
+    }
+}
+//# sourceMappingURL=request-events.js.map

package/node_modules/@noodle-borg/service/dist/store/request-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-events.js","sourceRoot":"","sources":["../../src/store/request-events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,4BAA4B,EAK5B,aAAa,GACd,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,GAAG,MAAM,CAAC;AAE3B,SAAS,cAAc,CAAC,KAAwB;IAC9C,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,UAAU,EAAE;QAChB,aAAa,EAAE,4BAA4B;QAC3C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS;YACxC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,KAAmB,EAAE,MAA0B;IAC9D,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACnF,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC5F,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACzF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,OAAO,GAAmB,EAAE,CAAC;IAC7B,IAAI,CAAS;IAEtB,YAAY,MAAc,WAAW;QACnC,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,IAAI,CAAC,KAAwB;QAC3B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,CAAC,MAA0B;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACvF,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,eAAe;QAClC,sEAAsE;QACtE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClF,CAAC;CACF"}

package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts

@@ -1,5 +1,5 @@
 import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { AccessMode, AdmissionGate, DataPlaneIdentityAuthorizer, OrgMembershipSource, OwnerTokenVerifier } from '@noodle-borg/module';
+import type { AccessMode, AdmissionGate, DataPlaneIdentityAuthorizer, OrgMembershipSource, OwnerTokenVerifier, RequestEventInput } from '@noodle-borg/module';
 import { type ServedArtifact } from '@noodle-borg/protocol';
 import { type TlsPosture } from './front-door.js';
 import { type Logger } from './logging.js';
@@ -41,6 +41,13 @@ export interface HttpHandlerOptions {
      * execution. The default is allow; injected policy can log, suspend, quota, or deny per request.
      */
     readonly admissionGate?: AdmissionGate;
+    /**
+     * Analytics capture hook (ADR 0121): called with one scalar-only {@link RequestEventInput} per served
+     * MCP request, after the response is written — so it can never add latency to the response path. The
+     * callback must be synchronous enqueue-only (the service wraps a buffered sink); throws are swallowed.
+     * Requests without a tenant org (single/local dev targets) are not captured.
+     */
+    readonly captureRequestEvent?: (event: RequestEventInput) => void;
 }
 export interface TenantRouteRef {
     readonly org: string;

package/node_modules/@noodle-borg/transport-http/dist/handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EACV,UAAU,EAGV,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,cAAc,CAAC;AAEvD,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,qGAAqG;AACrG,MAAM,MAAM,YAAY,GAAG,SAAS,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAE7E,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC;IACvC,yDAAyD;IACzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,2BAA2B,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAKD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,kBAAuB,GAC/B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CA2CrD;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,4FAA4F;IAC5F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,yGAAyG;IACzG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,sFAAsF;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AACtF,MAAM,MAAM,gBAAgB,GAAG,CAC7B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAAC;AAQtF;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,kBAAkB,GAAG;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACzC,GACL,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CA+DrD"}
+{"version":3,"file":"handler.d.ts","sourceRoot":"","sources":["../src/handler.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EACV,UAAU,EAGV,aAAa,EACb,2BAA2B,EAC3B,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAIL,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,KAAK,MAAM,EAAc,MAAM,cAAc,CAAC;AASvD,YAAY,EACV,UAAU,EACV,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,2BAA2B,EAC3B,kBAAkB,GACnB,MAAM,qBAAqB,CAAC;AAE7B,qGAAqG;AACrG,MAAM,MAAM,YAAY,GAAG,SAAS,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC;AAE7E,MAAM,WAAW,kBAAkB;IACjC,oDAAoD;IACpD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC;IACvC,yDAAyD;IACzD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,kBAAkB,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,2BAA2B,CAAC;IAClE;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;CACnE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAKD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,GAAE,kBAAuB,GAC/B,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CA4CrD;AAED,kFAAkF;AAClF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,4FAA4F;IAC5F,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,2DAA2D;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,yGAAyG;IACzG,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IACnD,kGAAkG;IAClG,QAAQ,CAAC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IAC1C,sFAAsF;IACtF,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AACvF,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AACtF,MAAM,MAAM,gBAAgB,GAAG,CAC7B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAAC;AAQtF;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,kBAAkB,GAAG;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;CACzC,GACL,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,CAgErD"}

package/node_modules/@noodle-borg/transport-http/dist/handler.js

@@ -2,6 +2,7 @@ import { serverVersionFromPathSegment } from '@noodle-borg/module';
 import { handleStatelessHttp, JSON_RPC, } from '@noodle-borg/protocol';
 import { applySecurityHeaders, effectiveProto, enforceHttps, } from './front-door.js';
 import { noopLogger } from './logging.js';
+import { emitRequestEvent, header, rpcMethod, rpcTargetName, safeRpcId, } from './request-capture.js';
 const DEFAULT_ENDPOINT = '/mcp';
 const DEFAULT_MAX_BODY = 1 << 20;
 /**
@@ -39,6 +40,7 @@ export function createMcpHttpHandler(target, options = {}) {
             verifyOwnerToken: options.verifyOwnerToken,
             authorizeDataPlaneIdentity: options.authorizeDataPlaneIdentity,
             admissionGate: options.admissionGate,
+            captureRequestEvent: options.captureRequestEvent,
             logger,
             trustProxy: tls.trustProxy ?? false,
         }, 'single', maxBody, options.allowedOrigins)).then(() => logRequest(logger, 'single', req, res, start));
@@ -97,6 +99,7 @@ export function createMcpRouter(lookup, options = {}) {
                 verifyOwnerToken: resolvedTarget.verifyToken ?? options.verifyOwnerToken,
                 authorizeDataPlaneIdentity: options.authorizeDataPlaneIdentity,
                 admissionGate: options.admissionGate,
+                captureRequestEvent: options.captureRequestEvent,
                 logger,
                 trustProxy: tls.trustProxy ?? false,
             }, routeId, maxBody, options.allowedOrigins, tenant);
@@ -195,6 +198,7 @@ function guard(res, fn) {
  * the full response (including `202` for a notification). Path matching is done by the caller.
  */
 async function serveRequest(req, res, target, auth, routeId, maxBody, allowed, tenant) {
+    const startedAt = Date.now();
     const origin = header(req, 'origin');
     if (origin !== undefined && !originAllowed(origin, allowed)) {
         return sendJson(res, 403, rpcError(JSON_RPC.INVALID_REQUEST, 'origin not allowed'));
@@ -276,7 +280,19 @@ async function serveRequest(req, res, target, auth, routeId, maxBody, allowed, t
     }
     // The SDK stateless transport owns JSON-RPC framing, version negotiation, and the response (200 for a
     // request, 202 for a notification). We pass the already-read body so the body-size guard still applies.
+    // The analytics observation hook is only attached when capture is configured, so the open loopback path
+    // is untouched; the event is emitted after the response is written (zero response-path latency).
+    let observed;
+    if (auth.captureRequestEvent !== undefined) {
+        protocolContext = {
+            ...protocolContext,
+            observe: (observation) => {
+                observed = observation;
+            },
+        };
+    }
     await handleStatelessHttp(target, req, res, parsed, protocolContext);
+    emitRequestEvent({ req, res, target, auth, tenant, parsed, subject, observed, startedAt });
 }
 function admissionContexts(parsed, base) {
     const items = Array.isArray(parsed) ? parsed : [parsed];
@@ -292,34 +308,6 @@ function admissionContexts(parsed, base) {
         };
     });
 }
-function safeRpcId(value) {
-    if (typeof value !== 'object' || value === null)
-        return {};
-    if (!Object.hasOwn(value, 'id'))
-        return {};
-    const id = value.id;
-    if (typeof id === 'string' || typeof id === 'number' || id === null)
-        return { requestId: id };
-    return {};
-}
-function rpcMethod(value) {
-    if (typeof value !== 'object' || value === null)
-        return 'unknown';
-    const method = value.method;
-    return typeof method === 'string' ? method : 'unknown';
-}
-function rpcTargetName(value, method) {
-    if (typeof value !== 'object' || value === null)
-        return undefined;
-    const params = value.params;
-    if (typeof params !== 'object' || params === null)
-        return undefined;
-    const name = params.name;
-    if (typeof name === 'string')
-        return name;
-    const uri = params.uri;
-    return typeof uri === 'string' && method.startsWith('resources/') ? uri : undefined;
-}
 function admissionCategory(method) {
     if (method === 'tools/list' ||
         method === 'resources/list' ||
@@ -334,10 +322,6 @@ function admissionCategory(method) {
         return 'execute';
     return 'protocol';
 }
-function header(req, name) {
-    const value = req.headers[name];
-    return Array.isArray(value) ? value[0] : value;
-}
 function bearerToken(req) {
     const auth = header(req, 'authorization');
     if (!auth)