@peac/capture-node 0.10.12

package/LICENSE

@@ -0,0 +1,190 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+Copyright 2025-2026 PEAC Protocol Contributors
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/README.md

@@ -0,0 +1,97 @@
+# @peac/capture-node
+
+Node.js durable storage for the PEAC capture pipeline. Provides filesystem-backed implementations of the `SpoolStore` and `DedupeIndex` interfaces from `@peac/capture-core`.
+
+## Install
+
+```bash
+npm install @peac/capture-node @peac/capture-core
+```
+
+## Usage
+
+```typescript
+import { createFsSpoolStore, createFsDedupeIndex } from '@peac/capture-node';
+import { createCaptureSession, createHasher } from '@peac/capture-core';
+
+const store = await createFsSpoolStore({
+  filePath: '/var/peac/spool.jsonl',
+  autoCommitIntervalMs: 5000,
+});
+
+const dedupe = await createFsDedupeIndex({
+  filePath: '/var/peac/dedupe.idx',
+});
+
+const session = createCaptureSession({
+  store,
+  dedupe,
+  hasher: createHasher(),
+});
+```
+
+## Durability Contract
+
+- **`append()`** writes to the OS page cache (no fsync). Fast, but not crash-safe on its own.
+- **`commit()`** calls fsync -- the explicit durability point. Entries written before the last `commit()` survive crashes. Entries after may be lost.
+- **Auto-commit timer** (default 5s) calls `commit()` periodically when dirty. Prevents long unflushed windows. Set `autoCommitIntervalMs: 0` to disable.
+
+### Commit Ordering
+
+When used with a dedupe index:
+
+1. Spool `commit()` first (authoritative evidence log)
+2. Dedupe `commit()` second (best-effort optimization index)
+
+If dedupe commit fails after spool commit, worst case is re-emitting some receipts after restart. No evidence is lost. The dedupe index is disposable -- it can be deleted and rebuilt from the spool.
+
+## Corruption Boundaries
+
+- **Incomplete last line** (crash artifact): automatically truncated on startup. `onWarning` callback fired.
+- **Malformed JSON mid-file**: spool marked corrupt. No auto-repair -- mid-file corruption could indicate tampering.
+- **Chain linkage broken**: spool marked corrupt. `prev_entry_digest` chain failed verification.
+- **Oversized line** (exceeds `maxLineBytes`): spool marked corrupt. Line was never materialized as a JS string.
+
+When corrupt, the spool enters **read-only mode**: new captures are blocked, but export/verify/query tools still operate so the operator can recover salvageable data.
+
+### Pre-Materialization Line Guard
+
+The streaming line parser enforces `maxLineBytes` (default 4MB) at the Buffer level, BEFORE converting to a JS string. A single giant line in a spool file cannot cause an OOM crash.
+
+## Diagnostics
+
+```typescript
+import { getFsSpoolDiagnostics } from '@peac/capture-node';
+
+const diag = getFsSpoolDiagnostics(store);
+// {
+//   mode: 'active' | 'read_only',
+//   spoolFull: boolean,
+//   spoolCorrupt: boolean,
+//   corruptReason?: 'CHAIN_BROKEN' | 'MALFORMED_JSON' | 'LINE_TOO_LARGE',
+//   corruptAtSequence?: number,
+//   entryCount, fileBytes, maxEntries, maxFileBytes, filePath
+// }
+```
+
+## Hard-Cap Limits
+
+- `maxEntries` (default: 100,000)
+- `maxFileBytes` (default: 100MB)
+
+When exceeded, `append()` throws `SpoolFullError`. The session returns `E_CAPTURE_STORE_FAILED` with a clear message. The adapter stays running (hooks, tools) -- only new captures are blocked.
+
+## Reset Procedure
+
+1. Export the evidence bundle (if any salvageable data)
+2. Stop the plugin/adapter
+3. Delete: `spool.jsonl`, `spool.jsonl.meta.json`, `dedupe.idx`, `*.lock`
+4. Restart
+
+## Single-Writer Guard
+
+A lockfile (`spool.jsonl.lock`) prevents concurrent writers. Default: fail loudly if lock exists. Stale lock break is opt-in via `lockOptions.allowStaleLockBreak`.
+
+## License
+
+Apache-2.0

package/dist/errors.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @peac/capture-node - Error Types
+ */
+/**
+ * Why the spool was marked corrupt. Exposed in SpoolDiagnostics.corruptReason.
+ */
+export type CorruptReason = 'CHAIN_BROKEN' | 'MALFORMED_JSON' | 'LINE_TOO_LARGE';
+/**
+ * Thrown when a spool reaches its hard-cap limits (maxEntries or maxFileBytes).
+ *
+ * CaptureSession catches this and returns E_CAPTURE_STORE_FAILED.
+ * The adapter stays running (hooks fire, tools work) -- only new captures are blocked.
+ */
+export declare class SpoolFullError extends Error {
+    readonly current: number;
+    readonly max: number;
+    readonly unit: 'entries' | 'bytes';
+    readonly code: "E_SPOOL_FULL";
+    constructor(current: number, max: number, unit: 'entries' | 'bytes');
+}
+/**
+ * Thrown when spool corruption is detected (linkage, malformed JSON, oversized line).
+ *
+ * Blocks new appends. Tools still work so the user can export/inspect
+ * salvageable data. Operator must take explicit action to clear/reset.
+ */
+export declare class SpoolCorruptError extends Error {
+    readonly reason: CorruptReason;
+    readonly corruptAtSequence?: number | undefined;
+    readonly details?: string | undefined;
+    readonly code: "E_SPOOL_CORRUPT";
+    constructor(reason: CorruptReason, corruptAtSequence?: number | undefined, details?: string | undefined);
+}
+/**
+ * Thrown when a lockfile cannot be acquired (another instance holds it).
+ */
+export declare class LockfileError extends Error {
+    readonly lockPath: string;
+    readonly holderPid?: number | undefined;
+    readonly code: "E_LOCKFILE";
+    constructor(lockPath: string, holderPid?: number | undefined);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAMH;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAMjF;;;;;GAKG;AACH,qBAAa,cAAe,SAAQ,KAAK;IAIrC,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO;IALpC,QAAQ,CAAC,IAAI,EAAG,cAAc,CAAU;gBAG7B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,SAAS,GAAG,OAAO;CAKrC;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAIxC,QAAQ,CAAC,MAAM,EAAE,aAAa;IAC9B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM;IAL3B,QAAQ,CAAC,IAAI,EAAG,iBAAiB,CAAU;gBAGhC,MAAM,EAAE,aAAa,EACrB,iBAAiB,CAAC,EAAE,MAAM,YAAA,EAC1B,OAAO,CAAC,EAAE,MAAM,YAAA;CAS5B;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAIpC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;IAJ7B,QAAQ,CAAC,IAAI,EAAG,YAAY,CAAU;gBAG3B,QAAQ,EAAE,MAAM,EAChB,SAAS,CAAC,EAAE,MAAM,YAAA;CAQ9B"}

package/dist/fs-dedupe-index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @peac/capture-node - Filesystem Dedupe Index
+ *
+ * Map-backed deduplication index with append-only file persistence.
+ * Last-write-wins on reload (tolerates duplicate lines from crash replay).
+ */
+import type { DedupeIndex, DedupeEntry } from '@peac/capture-core';
+export interface FsDedupeIndexOptions {
+    /** Path to dedupe.idx file. */
+    filePath: string;
+}
+/**
+ * Create a filesystem-backed dedupe index.
+ */
+export declare function createFsDedupeIndex(options: FsDedupeIndexOptions): Promise<FsDedupeIndex>;
+export declare class FsDedupeIndex implements DedupeIndex {
+    private readonly filePath;
+    private readonly entries;
+    private fd;
+    private closed;
+    private firstCreate;
+    constructor(options: FsDedupeIndexOptions);
+    /**
+     * Initialize: load existing entries from file.
+     */
+    init(): Promise<void>;
+    get(actionId: string): Promise<DedupeEntry | undefined>;
+    set(actionId: string, entry: DedupeEntry): Promise<void>;
+    has(actionId: string): Promise<boolean>;
+    markEmitted(actionId: string): Promise<boolean>;
+    delete(actionId: string): Promise<boolean>;
+    size(): Promise<number>;
+    clear(): Promise<void>;
+    /**
+     * Flush pending writes to durable storage.
+     *
+     * Not part of the DedupeIndex interface (capture-core stays stable).
+     * Callers use type guard to detect this method on the concrete type.
+     */
+    commit(): Promise<void>;
+    close(): Promise<void>;
+    /**
+     * Load entries from the dedupe file.
+     * Last-write-wins for duplicate actionIds (handles crash replay).
+     */
+    private loadFromFile;
+    /**
+     * Append an operation to the dedupe file (no fsync).
+     */
+    private appendOp;
+    /**
+     * fsync the parent directory for directory entry durability on first creation.
+     * Best-effort: not all platforms support this (e.g. Windows).
+     */
+    private fsyncDir;
+    private assertNotClosed;
+}
+//# sourceMappingURL=fs-dedupe-index.d.ts.map

package/dist/fs-dedupe-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-dedupe-index.d.ts","sourceRoot":"","sources":["../src/fs-dedupe-index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAMnE,MAAM,WAAW,oBAAoB;IACnC,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAeD;;GAEG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CAI/F;AAMD,qBAAa,aAAc,YAAW,WAAW;IAC/C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAuC;IAC/D,OAAO,CAAC,EAAE,CAA8B;IACxC,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,WAAW,CAAkB;gBAEzB,OAAO,EAAE,oBAAoB;IAIzC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAuBrB,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAKvD,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKvC,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAa/C,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAW1C,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;IAKvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB5B;;;;;OAKG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAoBvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB5B;;;OAGG;YACW,YAAY;IAkD1B;;OAEG;YACW,QAAQ;IAMtB;;;OAGG;YACW,QAAQ;IAUtB,OAAO,CAAC,eAAe;CAKxB"}

package/dist/fs-spool-store.d.ts

@@ -0,0 +1,167 @@
+/**
+ * @peac/capture-node - Filesystem Spool Store
+ *
+ * Append-only JSONL spool with tamper-evident chaining.
+ * Production-grade: crash recovery, hard-cap limits, streaming reads,
+ * single-writer lockfile, meta file for fast startup, max line guard.
+ *
+ * Durability model:
+ *   append() writes without fsync (throughput).
+ *   commit() fsyncs (durability).
+ *   Auto-commit timer (default 5s) prevents unflushed windows.
+ *
+ * Commit ordering (when used with dedupe):
+ *   Spool commit first, dedupe commit second (best-effort).
+ *   Spool is the authoritative evidence log; dedupe is an optimization index.
+ *   If dedupe.commit() fails after spool.commit(), worst case is re-emitting
+ *   some receipts after restart -- no evidence is lost.
+ */
+import type { SpoolStore, SpoolEntry } from '@peac/capture-core';
+import type { CorruptReason } from './errors.js';
+import { type LockOptions } from './lockfile.js';
+export interface FsSpoolStoreOptions {
+    /** Path to spool.jsonl. */
+    filePath: string;
+    /** Maximum entries before spool is full. Default: 100_000. */
+    maxEntries?: number;
+    /** Maximum file size in bytes before spool is full. Default: 100MB. */
+    maxFileBytes?: number;
+    /** Maximum allowed line length in bytes during read(). Default: 4MB. */
+    maxLineBytes?: number;
+    /** Auto-commit interval in ms. Default: 5000 (5s). 0 = disabled. */
+    autoCommitIntervalMs?: number;
+    /** Lockfile options. */
+    lockOptions?: LockOptions;
+    /** Warning callback (crash recovery, stale lock, etc.). */
+    onWarning?: (msg: string) => void;
+}
+/**
+ * Diagnostic snapshot for operator tooling (e.g. /peac-status).
+ *
+ * Queryable without parsing error strings. Use `getFsSpoolDiagnostics()`
+ * or access `store.diagnostics()` on the concrete type.
+ */
+export interface SpoolDiagnostics {
+    /** Operational mode: 'active' = capturing, 'read_only' = full/corrupt. */
+    mode: 'active' | 'read_only';
+    /** Whether the spool has reached its hard-cap limit. */
+    spoolFull: boolean;
+    /** Whether linkage corruption was detected on load. */
+    spoolCorrupt: boolean;
+    /** Why the spool was marked corrupt. Only set when spoolCorrupt is true. */
+    corruptReason?: CorruptReason;
+    /** Sequence number where corruption was detected. */
+    corruptAtSequence?: number;
+    /** Current entry count. */
+    entryCount: number;
+    /** Current file size in bytes. */
+    fileBytes: number;
+    /** Configured max entries. */
+    maxEntries: number;
+    /** Configured max file bytes. */
+    maxFileBytes: number;
+    /** Path to the spool file. */
+    filePath: string;
+}
+/**
+ * Create a filesystem-backed spool store.
+ *
+ * Acquires a single-writer lockfile, loads existing data (or recovers from
+ * crash), and returns a SpoolStore ready for use.
+ */
+export declare function createFsSpoolStore(options: FsSpoolStoreOptions): Promise<FsSpoolStore>;
+/**
+ * Get spool diagnostics from a SpoolStore via type guard.
+ *
+ * Usage:
+ *   const diag = getFsSpoolDiagnostics(store);
+ *   if (diag) { // store is FsSpoolStore }
+ */
+export declare function getFsSpoolDiagnostics(store: SpoolStore): SpoolDiagnostics | undefined;
+export declare class FsSpoolStore implements SpoolStore {
+    private readonly filePath;
+    private readonly metaPath;
+    private readonly maxEntries;
+    private readonly maxFileBytes;
+    private readonly maxLineBytes;
+    private readonly autoCommitIntervalMs;
+    private readonly lockOptions;
+    private readonly onWarning;
+    private sequence;
+    private headDigest;
+    private entryCount;
+    private fileBytes;
+    private fd;
+    private lock;
+    private closed;
+    private corrupt;
+    private corruptReason;
+    private corruptAtSequence;
+    private firstCreate;
+    private dirty;
+    private autoCommitTimer;
+    constructor(options: FsSpoolStoreOptions);
+    /**
+     * Initialize: acquire lock, load or recover state, open file handle.
+     */
+    init(): Promise<void>;
+    append(entry: SpoolEntry): Promise<number>;
+    commit(): Promise<void>;
+    read(fromSequence: number, limit?: number): Promise<SpoolEntry[]>;
+    getHeadDigest(): Promise<string>;
+    getSequence(): Promise<number>;
+    close(): Promise<void>;
+    /**
+     * Get a diagnostic snapshot for operator tooling.
+     *
+     * Use `getFsSpoolDiagnostics(store)` if you have a generic SpoolStore
+     * reference and need to probe for this method via type guard.
+     */
+    diagnostics(): SpoolDiagnostics;
+    /** Whether the spool has reached its hard-cap limit. */
+    get isFull(): boolean;
+    /** Whether linkage corruption was detected on load. */
+    get isCorrupt(): boolean;
+    /** Current entry count. */
+    get currentEntryCount(): number;
+    /** Current file size in bytes. */
+    get currentFileBytes(): number;
+    /** Configured max entries. */
+    get maxEntryLimit(): number;
+    /** Configured max file bytes. */
+    get maxBytesLimit(): number;
+    /**
+     * Try to load state from meta file (fast path).
+     * Returns true if meta was valid and loaded.
+     */
+    private tryLoadMeta;
+    /**
+     * Full JSONL scan: stream line by line, verify linkage, recover from crash.
+     *
+     * Uses the custom streaming line parser (streamLines) which enforces
+     * maxLineBytes BEFORE materializing the line as a JS string. This prevents
+     * memory blowup from a single giant line -- the primary "local file DoS" vector.
+     *
+     * Crash recovery rules:
+     * - Incomplete last line (no trailing newline + invalid JSON): truncate tail only.
+     * - Invalid JSON mid-file (before the last line): mark spool_corrupt, do NOT auto-repair.
+     *   Auto-repair mid-file would mask real tampering.
+     */
+    private fullScan;
+    /**
+     * Write meta file for fast startup.
+     */
+    private writeMeta;
+    /**
+     * fsync the parent directory for directory entry durability on first creation.
+     * Best-effort: not all platforms support this (e.g. Windows).
+     */
+    private fsyncDir;
+    /**
+     * Mark the spool as corrupt with a specific reason.
+     */
+    private setCorrupt;
+    private assertNotClosed;
+    private assertWritable;
+}
+//# sourceMappingURL=fs-spool-store.d.ts.map

package/dist/fs-spool-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-spool-store.d.ts","sourceRoot":"","sources":["../src/fs-spool-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAGjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAe,KAAK,WAAW,EAAmB,MAAM,eAAe,CAAC;AAiB/E,MAAM,WAAW,mBAAmB;IAClC,2BAA2B;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oEAAoE;IACpE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wBAAwB;IACxB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,2DAA2D;IAC3D,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAWD;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC7B,wDAAwD;IACxD,SAAS,EAAE,OAAO,CAAC;IACnB,uDAAuD;IACvD,YAAY,EAAE,OAAO,CAAC;IACtB,4EAA4E;IAC5E,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,qDAAqD;IACrD,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAI5F;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,GAAG,SAAS,CAUrF;AAMD,qBAAa,YAAa,YAAW,UAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAS;IAC9C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA0B;IACtD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwB;IAGlD,OAAO,CAAC,QAAQ,CAAa;IAC7B,OAAO,CAAC,UAAU,CAA0B;IAC5C,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,SAAS,CAAa;IAG9B,OAAO,CAAC,EAAE,CAA8B;IACxC,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,OAAO,CAAkB;IACjC,OAAO,CAAC,aAAa,CAA4B;IACjD,OAAO,CAAC,iBAAiB,CAAqB;IAC9C,OAAO,CAAC,WAAW,CAAkB;IAGrC,OAAO,CAAC,KAAK,CAAkB;IAC/B,OAAO,CAAC,eAAe,CAA+C;gBAE1D,OAAO,EAAE,mBAAmB;IAWxC;;OAEG;IACG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAyDrB,MAAM,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IA0C1C,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAwBvB,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IA4CjE,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC;IAKhC,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAoC5B;;;;;OAKG;IACH,WAAW,IAAI,gBAAgB;IAgB/B,wDAAwD;IACxD,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,uDAAuD;IACvD,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED,2BAA2B;IAC3B,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,kCAAkC;IAClC,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,8BAA8B;IAC9B,IAAI,aAAa,IAAI,MAAM,CAE1B;IAED,iCAAiC;IACjC,IAAI,aAAa,IAAI,MAAM,CAE1B;IAMD;;;OAGG;YACW,WAAW;IAoDzB;;;;;;;;;;;OAWG;YACW,QAAQ;IAuEtB;;OAEG;YACW,SAAS;IAgBvB;;;OAGG;YACW,QAAQ;IActB;;OAEG;IACH,OAAO,CAAC,UAAU;IAMlB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,cAAc;CAMvB"}