@relaycast/engine 10.6.5 → 11.0.0

package/dist/lib/serverTelemetry.js

@@ -1,7 +1,4 @@
-import { TELEMETRY_CLOUD_ID_MAX_LENGTH, } from "@relaycast/types";
-import { eq } from "drizzle-orm";
-import { workspaces } from "../db/schema.js";
-import { extractActorIdentity, extractAgentRelayDistinctId, extractOriginActor, requiredOriginInfo, UNKNOWN_ORIGIN_ACTOR, } from "./origin.js";
+import { extractOriginActor, requiredOriginInfo, UNKNOWN_ORIGIN_ACTOR, } from "./origin.js";
 export function normalizeRoutePathForTelemetry(value) {
     const withoutQuery = value.split(/[?#]/)[0] ?? value;
     const compact = withoutQuery.replace(/\/+/g, "/").trim();
@@ -20,48 +17,6 @@ export function normalizeRoutePathForTelemetry(value) {
     });
     return `/${segments.join("/")}`;
 }
-/**
- * Load the workspace fields that carry its PostHog groups, for emitters that
- * run without an authenticated workspace in context (external webhooks, node
- * sockets). Groups are optional, so a failed lookup yields none rather than
- * dropping the event.
- */
-export async function loadTelemetryWorkspace(db, workspaceId) {
-    try {
-        const [workspace] = await db
-            .select({ id: workspaces.id, metadata: workspaces.metadata })
-            .from(workspaces)
-            .where(eq(workspaces.id, workspaceId));
-        return workspace;
-    }
-    catch (error) {
-        console.warn('[telemetry] workspace lookup failed; event sent without groups', {
-            workspace_id: workspaceId,
-            error: error instanceof Error ? error.message : String(error),
-        });
-        return undefined;
-    }
-}
-/** Sends whose first occurrence is stamped on the person via `$set_once`. */
-const SEND_EVENTS = new Set([
-    "relaycast_server_message_created",
-    "relaycast_server_thread_reply_created",
-    "relaycast_server_dm_sent",
-    "relaycast_server_group_dm_message_sent",
-]);
-/** Distinct id for events with no person; a workspace is never a person. */
-export function workspaceTelemetryDistinctId(workspaceId) {
-    return `relaycast-ws:${workspaceId}`;
-}
-function cloudId(metadata, key) {
-    const value = metadata?.[key];
-    if (typeof value !== "string")
-        return undefined;
-    const trimmed = value.trim();
-    if (!trimmed || trimmed.length > TELEMETRY_CLOUD_ID_MAX_LENGTH)
-        return undefined;
-    return trimmed;
-}
 function senderType(type) {
     if (type === "human")
         return "human";
@@ -69,45 +24,6 @@ function senderType(type) {
         return "system";
     return "agent";
 }
-function senderProperties(actor, cloudUserId) {
-    const type = senderType(actor.type);
-    return {
-        sender_type: type,
-        agent_id: actor.id,
-        agent_name: actor.name,
-        ...(type !== "human" && cloudUserId ? { agent_owner_user_id: cloudUserId } : {}),
-    };
-}
-function workspaceGroups(workspace) {
-    const organization = cloudId(workspace?.metadata, "cloud_org_id");
-    const cloudWorkspace = cloudId(workspace?.metadata, "cloud_workspace_id");
-    if (!organization && !cloudWorkspace)
-        return undefined;
-    return {
-        ...(organization ? { organization } : {}),
-        ...(cloudWorkspace ? { workspace: cloudWorkspace } : {}),
-    };
-}
-function firstSendSetOnce(sender) {
-    const now = new Date().toISOString();
-    if (sender.sender_type === "human")
-        return { first_human_message_at: now };
-    // An agent send counts toward a person only when an owner is known; system
-    // actors are not the person's agents.
-    return sender.sender_type === "agent" && sender.agent_owner_user_id
-        ? { first_agent_message_at: now }
-        : {};
-}
-/**
- * Emit a server-side product-telemetry event through the injected
- * {@link TelemetrySink}. Self-host's default sink is a no-op; cloud injects
- * PostHog. The sink owns batching/background-flush, so this returns immediately.
- *
- * The person is the acting agent's `metadata.cloud_user_id` (a human, or the
- * owner of an agent), else the caller-declared user/client id, else the
- * workspace with person processing off. The workspace's cloud org and
- * workspace ids become PostHog groups.
- */
 export function emitServerEvent(c, workspaceId, event, properties, attribution = {}) {
     const normalizedProperties = { ...properties };
     // The `workspaceId` argument is authoritative; a caller value must not
@@ -120,50 +36,36 @@ export function emitServerEvent(c, workspaceId, event, properties, attribution =
     // header directly so emitters that bypass middleware still get a sane value.
     const originActor = c.get("originActor") ?? extractOriginActor(c.req.raw) ?? UNKNOWN_ORIGIN_ACTOR;
     const origin = requiredOriginInfo(c.req.raw);
-    const clientDistinctId = extractAgentRelayDistinctId(c.req.raw);
-    // Caller-declared user/org. Analytics dimensions only — never authorization.
-    const actor = extractActorIdentity(c.req.raw);
     // Context rows belong to the authenticated token; an event about another
     // workspace (e.g. one just created) must not inherit them.
     const contextAgent = c.get("agent");
-    const contextWorkspace = c.get("workspace");
     const actingAgent = attribution.actor ??
         (contextAgent?.workspaceId === workspaceId ? contextAgent : undefined);
-    const workspace = attribution.workspace ??
-        (contextWorkspace?.id === workspaceId ? contextWorkspace : undefined);
-    const cloudUserId = actingAgent
-        ? cloudId(actingAgent.metadata, "cloud_user_id")
-        : undefined;
-    const sender = actingAgent
-        ? senderProperties(actingAgent, cloudUserId)
-        : undefined;
-    // `client_distinct_id` is already the user id when the CLI is signed in; the
-    // explicit user header covers callers that send only one of the two.
-    const personId = cloudUserId ?? actor.actor_user_id ?? clientDistinctId;
-    const groups = workspaceGroups(workspace);
-    const setOnce = personId && sender && SEND_EVENTS.has(event)
-        ? firstSendSetOnce(sender)
-        : {};
-    c.get("engine").telemetry.capture({
-        name: event,
-        distinctId: personId ?? workspaceTelemetryDistinctId(workspaceId),
-        ...(personId ? {} : { processPersonProfile: false }),
-        ...(groups ? { groups } : {}),
-        ...(Object.keys(setOnce).length > 0 ? { setOnce } : {}),
-        properties: {
-            app: "relaycast-server",
-            surface: "cloud",
-            // Early, so the sink's 64-property cap can never truncate it away.
-            workspace_id: workspaceId,
-            ...(clientDistinctId ? { client_distinct_id: clientDistinctId } : {}),
-            is_authenticated: Boolean(actor.actor_user_id),
-            ...actor,
-            ...sender,
-            origin_actor: originActor,
-            origin_client: origin.origin_client,
-            origin_version: origin.origin_version,
-            ...normalizedProperties,
-        },
-    });
+    const sender = actingAgent ? { id: actingAgent.id, name: actingAgent.name, type: senderType(actingAgent.type) } : undefined;
+    // Only the credential-authenticated agent can establish ownership. A node
+    // may name any workspace agent as `from`; loading that sender's row proves
+    // neither possession of its token nor any external ownership.
+    const scopedActor = contextAgent?.workspaceId === workspaceId ? contextAgent : undefined;
+    // Neither synchronous throws nor asynchronous rejections may change a domain outcome.
+    try {
+        const pending = c.get("engine").telemetry.capture({
+            kind: event,
+            occurredAt: new Date().toISOString(),
+            workspaceId,
+            ...(scopedActor ? { authenticatedActor: {
+                    agentId: scopedActor.id,
+                    credentialHash: c.get('agentCredentialHash'),
+                    type: senderType(scopedActor.type),
+                } } : {}),
+            ...(sender ? { sender } : {}),
+            origin: { actor: originActor, client: origin.origin_client, version: origin.origin_version },
+            facts: normalizedProperties,
+        });
+        if (pending)
+            void Promise.resolve(pending).catch(() => { });
+    }
+    catch {
+        // Host observation is best effort.
+    }
 }
 //# sourceMappingURL=serverTelemetry.js.map

package/dist/lib/serverTelemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"serverTelemetry.js","sourceRoot":"","sources":["../../src/lib/serverTelemetry.ts"],"names":[],"mappings":"AACA,OAAO,EACL,6BAA6B,GAO9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,UAAU,EAAe,MAAM,iBAAiB,CAAC;AAG1D,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAqBrB,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IACE,4EAA4E,CAAC,IAAI,CAC/E,OAAO,CACR;YAED,OAAO,KAAK,CAAC;QACf,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC;AAwBD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,EAAY,EACZ,WAAmB;IAEnB,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,EAAE;aACzB,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;aAC5D,IAAI,CAAC,UAAU,CAAC;aAChB,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CAAC,gEAAgE,EAAE;YAC7E,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,WAAW,GAA0C,IAAI,GAAG,CAAC;IACjE,kCAAkC;IAClC,uCAAuC;IACvC,0BAA0B;IAC1B,wCAAwC;CACzC,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,OAAO,gBAAgB,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CACd,QAAoD,EACpD,GAAW;IAEX,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,6BAA6B;QAAE,OAAO,SAAS,CAAC;IACjF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAqB,EACrB,WAA+B;IAE/B,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,KAAK,CAAC,EAAE;QAClB,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,SAAyC;IAEzC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC1E,IAAI,CAAC,YAAY,IAAI,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACvD,OAAO;QACL,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAiC;IAEjC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,MAAM,CAAC,WAAW,KAAK,OAAO;QAAE,OAAO,EAAE,sBAAsB,EAAE,GAAG,EAAE,CAAC;IAC3E,2EAA2E;IAC3E,sCAAsC;IACtC,OAAO,MAAM,CAAC,WAAW,KAAK,OAAO,IAAI,MAAM,CAAC,mBAAmB;QACjE,CAAC,CAAC,EAAE,sBAAsB,EAAE,GAAG,EAAE;QACjC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAC7B,CAAkB,EAClB,WAAmB,EACnB,KAAQ,EACR,UAAoC,EACpC,cAAsC,EAAE;IAExC,MAAM,oBAAoB,GAA4B,EAAE,GAAG,UAAU,EAAE,CAAC;IACxE,uEAAuE;IACvE,cAAc;IACd,OAAO,oBAAoB,CAAC,YAAY,CAAC;IACzC,IAAI,OAAO,oBAAoB,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACxD,oBAAoB,CAAC,UAAU,GAAG,8BAA8B,CAC9D,oBAAoB,CAAC,UAAU,CAChC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,WAAW,GACf,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC;IAEhF,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChE,6EAA6E;IAC7E,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE9C,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,gBAAgB,GAAG,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,WAAW,GACf,WAAW,CAAC,KAAK;QACjB,CAAC,YAAY,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzE,MAAM,SAAS,GACb,WAAW,CAAC,SAAS;QACrB,CAAC,gBAAgB,EAAE,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAExE,MAAM,WAAW,GAAG,WAAW;QAC7B,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,EAAE,eAAe,CAAC;QAChD,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,WAAW;QACxB,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IACd,6EAA6E;IAC7E,qEAAqE;IACrE,MAAM,QAAQ,GAAG,WAAW,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC;IACxE,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,OAAO,GACX,QAAQ,IAAI,MAAM,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAC1C,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAC1B,CAAC,CAAC,EAAE,CAAC;IAET,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;QAChC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,QAAQ,IAAI,4BAA4B,CAAC,WAAW,CAAC;QACjE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,UAAU,EAAE;YACV,GAAG,EAAE,kBAAkB;YACvB,OAAO,EAAE,OAAO;YAChB,mEAAmE;YACnE,YAAY,EAAE,WAAW;YACzB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,gBAAgB,EAAE,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;YAC9C,GAAG,KAAK;YACR,GAAG,MAAM;YACT,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,GAAG,oBAAoB;SACxB;KACF,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"serverTelemetry.js","sourceRoot":"","sources":["../../src/lib/serverTelemetry.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AAErB,MAAM,UAAU,8BAA8B,CAAC,KAAa;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACrD,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,MAAM,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,EAAE,CAAC;IAC3E,MAAM,QAAQ,GAAG,gBAAgB;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACf,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3C,IACE,4EAA4E,CAAC,IAAI,CAC/E,OAAO,CACR;YAED,OAAO,KAAK,CAAC;QACf,IAAI,0CAA0C,CAAC,IAAI,CAAC,OAAO,CAAC;YAC1D,OAAO,KAAK,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAClC,CAAC;AAaD,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,CAAkB,EAClB,WAAmB,EACnB,KAAQ,EACR,UAAqC,EACrC,cAAsC,EAAE;IAExC,MAAM,oBAAoB,GAA4B,EAAE,GAAG,UAAU,EAAE,CAAC;IACxE,uEAAuE;IACvE,cAAc;IACd,OAAO,oBAAoB,CAAC,YAAY,CAAC;IACzC,IAAI,OAAO,oBAAoB,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QACxD,oBAAoB,CAAC,UAAU,GAAG,8BAA8B,CAC9D,oBAAoB,CAAC,UAAU,CAChC,CAAC;IACJ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,MAAM,WAAW,GACf,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC;IAEhF,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAE7C,yEAAyE;IACzE,2DAA2D;IAC3D,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,WAAW,GACf,WAAW,CAAC,KAAK;QACjB,CAAC,YAAY,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAGzE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5H,0EAA0E;IAC1E,2EAA2E;IAC3E,8DAA8D;IAC9D,MAAM,WAAW,GAAG,YAAY,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,sFAAsF;IACtF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC;YAChD,IAAI,EAAE,KAAK;YACX,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,WAAW;YACX,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE;oBACtC,OAAO,EAAE,WAAW,CAAC,EAAE;oBACvB,cAAc,EAAE,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC;oBAC5C,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;iBACnC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,cAAc,EAAE;YAE5F,KAAK,EAAE,oBAAiD;SACpC,CAAC,CAAC;QACxB,IAAI,OAAO;YAAE,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;AACH,CAAC"}

package/dist/middleware/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAKxC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAyC7C,UAAU,oBAAoB;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAMD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,aAAa,GAAG,aAAa,EAAE,EACvC,OAAO,GAAE,oBAAyB,kEAuDnC;AAED,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,gEAAkC,CAAC;AAEnE,wDAAwD;AACxD,eAAO,MAAM,WAAW,gEAA4B,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,aAAa,gEAA+B,CAAC;AAE1D,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB,gEAA8B,CAAC;AAE7D,6CAA6C;AAC7C,eAAO,MAAM,gBAAgB,gEAA6B,CAAC"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAMxC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AAIpC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAgD7C,UAAU,oBAAoB;IAC5B,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAMD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,aAAa,GAAG,aAAa,EAAE,EACvC,OAAO,GAAE,oBAAyB,kEAyDnC;AAED,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,gEAAkC,CAAC;AAEnE,wDAAwD;AACxD,eAAO,MAAM,WAAW,gEAA4B,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,aAAa,gEAA+B,CAAC;AAE1D,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB,gEAA8B,CAAC;AAE7D,6CAA6C;AAC7C,eAAO,MAAM,gBAAgB,gEAA6B,CAAC"}

package/dist/middleware/auth.js

@@ -3,6 +3,7 @@ import { touchLastSeen } from '../engine/agent.js';
 import { getAuthTokenKind } from '../auth/tokenKind.js';
 import { authenticateUnexpired } from '../auth/workspaceExpiry.js';
 import { jsonError } from '../lib/httpResponse.js';
+import { sha256Hex } from '../lib/crypto.js';
 import { hasAnyObserverScope, } from '../engine/observerToken.js';
 // Re-exported for the WS upgrade, which looks tokens up
 // directly. The active provider's `hashToken` is preferred at those call sites.
@@ -13,6 +14,16 @@ function extractToken(authHeader) {
         return null;
     return authHeader.slice(7);
 }
+async function presentedCredentialHash(token) {
+    // AuthProvider.hashToken describes storage, and may return a raw token.
+    // Telemetry provenance always uses its own irreversible SHA-256 digest.
+    try {
+        return await sha256Hex(token);
+    }
+    catch {
+        return undefined;
+    }
+}
 function makeAuthMiddleware(require) {
     return createMiddleware(async (c, next) => {
         const token = extractToken(c.req.header('Authorization'));
@@ -25,6 +36,7 @@ function makeAuthMiddleware(require) {
             return jsonError(c, result.code, result.message, result.status);
         }
         c.set('workspace', result.workspace);
+        c.set('agentCredentialHash', result.agent ? await presentedCredentialHash(token) : undefined);
         if (result.agent) {
             c.set('agent', result.agent);
             // Touch lastSeen (debounced, fire-and-forget)
@@ -69,6 +81,7 @@ export function requireWorkspaceRead(scopes, options = {}) {
             }
             c.set('workspace', result.workspace);
             c.set('agent', undefined);
+            c.set('agentCredentialHash', undefined);
             c.set('node', undefined);
             c.set('observerToken', result.observerToken);
             await next();
@@ -81,6 +94,7 @@ export function requireWorkspaceRead(scopes, options = {}) {
             return jsonError(c, 'forbidden', 'Node token cannot access this resource', 403);
         }
         c.set('workspace', result.workspace);
+        c.set('agentCredentialHash', result.agent ? await presentedCredentialHash(token) : undefined);
         if (result.agent) {
             c.set('agent', result.agent);
             if (Date.now() - result.agent.lastSeen.getTime() > LAST_SEEN_DEBOUNCE_MS) {

package/dist/middleware/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EACL,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AAEpC,wDAAwD;AACxD,gFAAgF;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,qBAAqB,GAAG,MAAM,CAAC,CAAC,aAAa;AAEnD,SAAS,YAAY,CAAC,UAA8B;IAClD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAoB;IAC9C,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAA8B,CAAC,CAAC;QAC1F,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,8CAA8C;YAC9C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;gBACzE,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,SAAS,WAAW,CAAC,MAAuC;IAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAuC,EACvC,UAAgC,EAAE;IAElC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAE5C,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,OAAO,GAAgB,gBAAgB,CAAC,KAAK,CAAC,KAAK,UAAU;YACjE,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU,IAAI,SAAS;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAA8B,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC/D,OAAO,SAAS,CAAC,CAAC,EAAE,oBAAoB,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC5F,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;gBACzE,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;AAEnE,wDAAwD;AACxD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAE1D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAE7D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EACL,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AAEpC,wDAAwD;AACxD,gFAAgF;AAChF,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,qBAAqB,GAAG,MAAM,CAAC,CAAC,aAAa;AAEnD,SAAS,YAAY,CAAC,UAA8B;IAClD,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,KAAa;IAClD,wEAAwE;IACxE,wEAAwE;IACxE,IAAI,CAAC;QAAC,OAAO,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAoB;IAC9C,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAA8B,CAAC,CAAC;QAC1F,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,8CAA8C;YAC9C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;gBACzE,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAOD,SAAS,WAAW,CAAC,MAAuC;IAC1D,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAuC,EACvC,UAAgC,EAAE;IAElC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;IAE5C,OAAO,gBAAgB,CAAS,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,SAAS,CAAC,CAAC,EAAE,cAAc,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,OAAO,GAAgB,gBAAgB,CAAC,KAAK,CAAC,KAAK,UAAU;YACjE,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU,IAAI,SAAS;gBACvB,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,WAAW,CAAC;QAClB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAA8B,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACzB,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC/D,OAAO,SAAS,CAAC,CAAC,EAAE,oBAAoB,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAC5F,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACzB,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,IAAI,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YAChC,OAAO,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,yCAAyC,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,OAAO,SAAS,CAAC,CAAC,EAAE,WAAW,EAAE,wCAAwC,EAAE,GAAG,CAAC,CAAC;QAClF,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACrC,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAC;gBACzE,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YAChB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;AAEnE,wDAAwD;AACxD,MAAM,CAAC,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAErD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAE1D,+CAA+C;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAE7D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC"}

package/dist/ports/index.d.ts

@@ -22,7 +22,9 @@ export type { KeyValueStore } from './kv.js';
 export type { EventQueue, QueuedEvent } from './event-queue.js';
 export type { AuthProvider, AuthResult, AuthRequire, Workspace, Agent, } from './auth.js';
 export type { EntitlementsProvider, PlanLimits, UsageMetric, } from './entitlements.js';
-export type { TelemetrySink, TelemetryEvent } from './telemetry.js';
+export { ENGINE_OBSERVATION_FACTS } from './telemetry.js';
+export type { TelemetrySink, TelemetryEvent, EngineObservation, EngineObservationKind, EngineObservationFacts } from './telemetry.js';
+export type { EngineLogRecord, EngineLogExport } from './logging.js';
 import type { EngineDb } from './database.js';
 import type { RealtimeBus, ConnectionRegistry, NodeConnectionRegistry } from './realtime.js';
 import type { PresenceTracker } from './presence.js';
@@ -33,6 +35,7 @@ import type { EventQueue } from './event-queue.js';
 import type { AuthProvider } from './auth.js';
 import type { EntitlementsProvider } from './entitlements.js';
 import type { TelemetrySink } from './telemetry.js';
+import type { EngineLogExport } from './logging.js';
 /** Infrastructure ports the engine reads off the request context. */
 export interface EnginePorts {
     db: EngineDb;
@@ -49,7 +52,7 @@ export interface EnginePorts {
 export interface EngineProviders {
     auth: AuthProvider;
     entitlements: EntitlementsProvider;
-    telemetry: TelemetrySink;
+    telemetry?: TelemetrySink;
 }
 /** Everything `createEngine` needs. */
 export interface EngineDeps extends EnginePorts, EngineProviders {
@@ -124,15 +127,8 @@ export interface EngineConfig {
         url?: string;
         secret?: string;
     };
-    /**
-     * When set, the structured logger exports prod logs to a PostHog OTLP endpoint
-     * via plain fetch (no posthog-node dependency). Self-host leaves this unset and
-     * logs to the console only; cloud wires it from its secrets.
-     */
-    logExport?: {
-        posthogApiKey?: string;
-        posthogHost?: string;
-    };
+    /** Optional host-owned log transport. Console output remains enabled. */
+    logExport?: EngineLogExport;
     /**
      * Bounded durable mailbox tuning. Hosted adapters may provide workspace
      * overrides; self-host defaults to one hour TTL and 1000 in-flight deliveries

package/dist/ports/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,YAAY,EACV,QAAQ,EACR,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EACV,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,QAAQ,EAAE,WAAW,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,eAAe,EAAE,sBAAsB,CAAC;IACxC,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,EAAE,EAAE,aAAa,CAAC;IAClB,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,oBAAoB,CAAC;IACnC,SAAS,EAAE,aAAa,CAAC;CAC1B;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAW,SAAQ,WAAW,EAAE,eAAe;IAC9D;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF;;;;OAIG;IACH,SAAS,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;IACF;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;SAC3B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,wBAAwB,EAAE,6BAA6B,CAAC;CACpF;AAED,YAAY,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,YAAY,EACV,QAAQ,EACR,qBAAqB,EACrB,eAAe,EACf,WAAW,EACX,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC3D,YAAY,EACV,WAAW,EACX,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACpE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EACV,YAAY,EACZ,UAAU,EACV,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,oBAAoB,EACpB,UAAU,EACV,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACtI,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAErE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAEpD,qEAAqE;AACrE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,QAAQ,CAAC;IACb,QAAQ,EAAE,WAAW,CAAC;IACtB,WAAW,EAAE,kBAAkB,CAAC;IAChC,eAAe,EAAE,sBAAsB,CAAC;IACxC,QAAQ,EAAE,eAAe,CAAC;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,EAAE,EAAE,aAAa,CAAC;IAClB,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,YAAY,CAAC;IACnB,YAAY,EAAE,oBAAoB,CAAC;IACnC,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAW,SAAQ,WAAW,EAAE,eAAe;IAC9D;;;;OAIG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC/C;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;IACF;;;;OAIG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C;;;;;;;;;;OAUG;IACH,yBAAyB,CAAC,EAAE,OAAO,CAAC;IACpC;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE;QACd,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,yEAAyE;IACzE,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B;;;;OAIG;IACH,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB;;;;WAIG;QACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;YAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;YACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;SAC3B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,OAAO,wBAAwB,EAAE,6BAA6B,CAAC;CACpF;AAED,YAAY,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/ports/index.js

@@ -1,3 +1,4 @@
 export { runAtomic, runAtomicWrites } from './database.js';
 export { isProviderAgentDeliveryReady } from './realtime.js';
+export { ENGINE_OBSERVATION_FACTS } from './telemetry.js';
 //# sourceMappingURL=index.js.map

package/dist/ports/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAS3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ports/index.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAS3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,eAAe,CAAC;AAkB7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/ports/logging.d.ts

@@ -0,0 +1,10 @@
+/** A structured log record emitted by the engine. */
+export interface EngineLogRecord {
+    level: 'debug' | 'info' | 'warn' | 'error';
+    message: string;
+    fields: Record<string, unknown>;
+    occurredAt: string;
+}
+/** Optional host-owned transport for engine log records. */
+export type EngineLogExport = (record: EngineLogRecord) => void | Promise<void>;
+//# sourceMappingURL=logging.d.ts.map

package/dist/ports/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../../src/ports/logging.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,4DAA4D;AAC5D,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,eAAe,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/ports/logging.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logging.js.map

package/dist/ports/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../../src/ports/logging.ts"],"names":[],"mappings":""}

package/dist/ports/telemetry.d.ts

@@ -1,27 +1,99 @@
-import type { TelemetryGroups, TelemetryPersonSetOnce } from '@relaycast/types';
-/**
- * Pluggable telemetry sink — the observability seam.
- *
- * Self-host uses `NoopTelemetrySink` (honors `DO_NOT_TRACK` / explicit disable).
- * The cloud product injects a PostHog-backed sink. All methods are
- * fire-and-forget from the engine's perspective; the sink decides batching and
- * background flushing.
- */
-export interface TelemetryEvent {
-    /** Event name, e.g. `relaycast_server_message_posted`. */
-    name: string;
-    /** The person the event belongs to, or `relaycast-ws:<workspace_id>` when none is known. */
-    distinctId: string;
-    properties: Record<string, unknown>;
-    /** PostHog groups (`$groups`); absent when the workspace carries no cloud ids. */
-    groups?: TelemetryGroups;
-    /** Person properties written once (`$set_once`). */
-    setOnce?: TelemetryPersonSetOnce;
-    /** `false` when `distinctId` is not a person (`$process_person_profile`). */
-    processPersonProfile?: boolean;
+/** Engine domain observations. Hosts decide whether and how to consume them. */
+export declare const ENGINE_OBSERVATION_FACTS: {
+    readonly 'workspace.created': readonly [];
+    readonly 'workspace.updated': readonly [];
+    readonly 'workspace.deleted': readonly [];
+    readonly 'workspace.stream.updated': readonly ["stream_mode"];
+    readonly 'workspace.key.rotated': readonly ["grace_seconds"];
+    readonly 'agent.registered': readonly ["agent_id"];
+    readonly 'agent.updated': readonly ["agent_name"];
+    readonly 'legacy.identity.claimed': readonly ["agent_name"];
+    readonly 'agent.deleted': readonly ["agent_name"];
+    readonly 'agent.token.rotated': readonly ["agent_name"];
+    readonly 'agent.identity.taken.over': readonly ["agent_id", "agent_name", "audit_id"];
+    readonly 'agent.token.revoked': readonly ["agent_id", "agent_name", "audit_id"];
+    readonly 'channel.created': readonly ["channel_id", "channel_name"];
+    readonly 'channel.updated': readonly ["channel_id", "channel_name"];
+    readonly 'channel.topic.updated': readonly ["channel_id", "channel_name"];
+    readonly 'channel.archived': readonly ["channel_name"];
+    readonly 'channel.joined': readonly ["channel_name", "agent_id"];
+    readonly 'channel.left': readonly ["channel_name", "agent_id"];
+    readonly 'channel.invited': readonly ["channel_name", "invited_agent_name"];
+    readonly 'channel.muted': readonly ["channel_name", "agent_id"];
+    readonly 'channel.unmuted': readonly ["channel_name", "agent_id"];
+    readonly 'message.created': readonly ["channel_id", "message_id"];
+    readonly 'thread.reply.created': readonly ["message_id", "parent_message_id"];
+    readonly 'file.upload.requested': readonly ["file_id", "size_bytes"];
+    readonly 'file.upload.completed': readonly ["file_id", "size_bytes"];
+    readonly 'dm.sent': readonly ["conversation_id", "message_id"];
+    readonly 'group.dm.created': readonly ["conversation_id"];
+    readonly 'group.dm.message.sent': readonly ["conversation_id", "message_id"];
+    readonly 'group.dm.participant.added': readonly ["conversation_id", "agent_name"];
+    readonly 'group.dm.participant.removed': readonly ["conversation_id", "agent_id"];
+    readonly 'reaction.added': readonly ["message_id", "emoji"];
+    readonly 'reaction.removed': readonly ["message_id", "emoji"];
+    readonly 'search.executed': readonly ["query_length", "result_count"];
+    readonly 'command.registered': readonly ["command"];
+    readonly 'command.deleted': readonly ["command"];
+    readonly 'command.invoked': readonly ["command", "invocation_id"];
+    readonly 'subscription.created': readonly ["subscription_id"];
+    readonly 'subscription.deleted': readonly ["subscription_id"];
+    readonly 'inbound.webhook.created': readonly ["webhook_id"];
+    readonly 'inbound.webhook.deleted': readonly ["webhook_id"];
+    readonly 'inbound.webhook.triggered': readonly ["webhook_id"];
+    readonly 'message.read.marked': readonly ["message_id", "agent_id"];
+    readonly 'presence.heartbeat': readonly ["agent_id"];
+    readonly 'presence.disconnected': readonly ["agent_id"];
+    readonly 'system.prompt.updated': readonly ["operation"];
+    readonly 'ws.session.started': readonly ["session_scope"];
+    readonly 'ws.session.ended': readonly ["session_scope", "duration_ms"];
+    readonly 'action.registered': readonly ["action_name"];
+    readonly 'action.deleted': readonly ["action_name"];
+    readonly 'action.invoked': readonly ["action_name", "invocation_id"];
+    readonly 'directory.agent.created': readonly [];
+    readonly 'directory.agent.updated': readonly ["slug"];
+    readonly 'directory.agent.deleted': readonly ["slug"];
+    readonly 'directory.rating.upserted': readonly ["slug", "score"];
+    readonly 'directory.search.executed': readonly ["result_count"];
+    readonly 'route.resolved': readonly ["skill"];
+    readonly 'route.feedback.recorded': readonly ["agent_name", "success"];
+    readonly 'routing.config.updated': readonly [];
+    readonly 'relayfile.inbound.delivered': readonly ["provider"];
+};
+export type EngineObservationKind = keyof typeof ENGINE_OBSERVATION_FACTS;
+export type EngineObservationFacts<K extends EngineObservationKind> = Record<string, unknown> & {
+    [F in (typeof ENGINE_OBSERVATION_FACTS)[K][number]]: string | number | boolean | null;
+};
+interface ObservationFor<K extends EngineObservationKind> {
+    kind: K;
+    occurredAt: string;
+    workspaceId: string;
+    /** Credential-authenticated principal only. Internal proof: never export this hash. */
+    authenticatedActor?: {
+        agentId: string;
+        credentialHash?: string;
+        type: 'human' | 'agent' | 'system';
+    };
+    /** Domain sender, which may differ from the authenticated principal (node posting as). */
+    sender?: {
+        id: string;
+        name: string;
+        type: 'human' | 'agent' | 'system';
+    };
+    origin: {
+        actor: string;
+        client: string;
+        version: string;
+    };
+    facts: EngineObservationFacts<K>;
 }
+export type EngineObservation<K extends EngineObservationKind = EngineObservationKind> = K extends EngineObservationKind ? ObservationFor<K> : never;
+export type TelemetryEvent = EngineObservation;
 export interface TelemetrySink {
-    capture(event: TelemetryEvent): void;
-    captureException(err: unknown, context?: Record<string, unknown>): void;
+    capture(event: EngineObservation): void | Promise<void>;
+    captureException(err: unknown, context?: Record<string, unknown>): void | Promise<void>;
 }
+/** Isolate every host callback, including error reporting and maintenance paths. */
+export declare function safeTelemetrySink(sink: TelemetrySink): TelemetrySink;
+export {};
 //# sourceMappingURL=telemetry.d.ts.map

package/dist/ports/telemetry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAEhF;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,kFAAkF;IAClF,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,6EAA6E;IAC7E,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;IACrC,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACzE"}
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4D3B,CAAC;AACX,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,wBAAwB,CAAC;AAC1E,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,qBAAqB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;KAC7F,CAAC,IAAI,CAAC,OAAO,wBAAwB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI;CACtF,CAAC;AACF,UAAU,cAAc,CAAC,CAAC,SAAS,qBAAqB;IACtD,IAAI,EAAE,CAAC,CAAC;IACR,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,kBAAkB,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;KAAE,CAAC;IACtG,0FAA0F;IAC1F,MAAM,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAA;KAAE,CAAC;IAC1E,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;CAClC;AACD,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,qBAAqB,GAAG,qBAAqB,IAAI,CAAC,SAAS,qBAAqB,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AACrJ,MAAM,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAC/C,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,gBAAgB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzF;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,aAAa,GAAG,aAAa,CAQpE"}

package/dist/ports/telemetry.js

@@ -1,2 +1,78 @@
-export {};
+/** Engine domain observations. Hosts decide whether and how to consume them. */
+export const ENGINE_OBSERVATION_FACTS = {
+    'workspace.created': [],
+    'workspace.updated': [],
+    'workspace.deleted': [],
+    'workspace.stream.updated': ['stream_mode'],
+    'workspace.key.rotated': ['grace_seconds'],
+    'agent.registered': ['agent_id'],
+    'agent.updated': ['agent_name'],
+    'legacy.identity.claimed': ['agent_name'],
+    'agent.deleted': ['agent_name'],
+    'agent.token.rotated': ['agent_name'],
+    'agent.identity.taken.over': ['agent_id', 'agent_name', 'audit_id'],
+    'agent.token.revoked': ['agent_id', 'agent_name', 'audit_id'],
+    'channel.created': ['channel_id', 'channel_name'],
+    'channel.updated': ['channel_id', 'channel_name'],
+    'channel.topic.updated': ['channel_id', 'channel_name'],
+    'channel.archived': ['channel_name'],
+    'channel.joined': ['channel_name', 'agent_id'],
+    'channel.left': ['channel_name', 'agent_id'],
+    'channel.invited': ['channel_name', 'invited_agent_name'],
+    'channel.muted': ['channel_name', 'agent_id'],
+    'channel.unmuted': ['channel_name', 'agent_id'],
+    'message.created': ['channel_id', 'message_id'],
+    'thread.reply.created': ['message_id', 'parent_message_id'],
+    'file.upload.requested': ['file_id', 'size_bytes'],
+    'file.upload.completed': ['file_id', 'size_bytes'],
+    'dm.sent': ['conversation_id', 'message_id'],
+    'group.dm.created': ['conversation_id'],
+    'group.dm.message.sent': ['conversation_id', 'message_id'],
+    'group.dm.participant.added': ['conversation_id', 'agent_name'],
+    'group.dm.participant.removed': ['conversation_id', 'agent_id'],
+    'reaction.added': ['message_id', 'emoji'],
+    'reaction.removed': ['message_id', 'emoji'],
+    'search.executed': ['query_length', 'result_count'],
+    'command.registered': ['command'],
+    'command.deleted': ['command'],
+    'command.invoked': ['command', 'invocation_id'],
+    'subscription.created': ['subscription_id'],
+    'subscription.deleted': ['subscription_id'],
+    'inbound.webhook.created': ['webhook_id'],
+    'inbound.webhook.deleted': ['webhook_id'],
+    'inbound.webhook.triggered': ['webhook_id'],
+    'message.read.marked': ['message_id', 'agent_id'],
+    'presence.heartbeat': ['agent_id'],
+    'presence.disconnected': ['agent_id'],
+    'system.prompt.updated': ['operation'],
+    'ws.session.started': ['session_scope'],
+    'ws.session.ended': ['session_scope', 'duration_ms'],
+    'action.registered': ['action_name'],
+    'action.deleted': ['action_name'],
+    'action.invoked': ['action_name', 'invocation_id'],
+    'directory.agent.created': [],
+    'directory.agent.updated': ['slug'],
+    'directory.agent.deleted': ['slug'],
+    'directory.rating.upserted': ['slug', 'score'],
+    'directory.search.executed': ['result_count'],
+    'route.resolved': ['skill'],
+    'route.feedback.recorded': ['agent_name', 'success'],
+    'routing.config.updated': [],
+    'relayfile.inbound.delivered': ['provider'],
+};
+/** Isolate every host callback, including error reporting and maintenance paths. */
+export function safeTelemetrySink(sink) {
+    const invoke = (callback) => {
+        try {
+            const pending = callback();
+            if (pending)
+                void Promise.resolve(pending).catch(() => { });
+        }
+        catch { /* best effort */ }
+    };
+    return {
+        capture: (event) => invoke(() => sink.capture(event)),
+        captureException: (error, context) => invoke(() => sink.captureException(error, context)),
+    };
+}
 //# sourceMappingURL=telemetry.js.map

package/dist/ports/telemetry.js.map

@@ -1 +1 @@
-{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":""}
+{"version":3,"file":"telemetry.js","sourceRoot":"","sources":["../../src/ports/telemetry.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,mBAAmB,EAAE,EAAE;IACvB,mBAAmB,EAAE,EAAE;IACvB,mBAAmB,EAAE,EAAE;IACvB,0BAA0B,EAAE,CAAC,aAAa,CAAC;IAC3C,uBAAuB,EAAE,CAAC,eAAe,CAAC;IAC1C,kBAAkB,EAAE,CAAC,UAAU,CAAC;IAChC,eAAe,EAAE,CAAC,YAAY,CAAC;IAC/B,yBAAyB,EAAE,CAAC,YAAY,CAAC;IACzC,eAAe,EAAE,CAAC,YAAY,CAAC;IAC/B,qBAAqB,EAAE,CAAC,YAAY,CAAC;IACrC,2BAA2B,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;IACnE,qBAAqB,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC;IAC7D,iBAAiB,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;IACjD,iBAAiB,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;IACjD,uBAAuB,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;IACvD,kBAAkB,EAAE,CAAC,cAAc,CAAC;IACpC,gBAAgB,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IAC9C,cAAc,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IAC5C,iBAAiB,EAAE,CAAC,cAAc,EAAE,oBAAoB,CAAC;IACzD,eAAe,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IAC7C,iBAAiB,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC;IAC/C,iBAAiB,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;IAC/C,sBAAsB,EAAE,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3D,uBAAuB,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;IAClD,uBAAuB,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC;IAClD,SAAS,EAAE,CAAC,iBAAiB,EAAE,YAAY,CAAC;IAC5C,kBAAkB,EAAE,CAAC,iBAAiB,CAAC;IACvC,uBAAuB,EAAE,CAAC,iBAAiB,EAAE,YAAY,CAAC;IAC1D,4BAA4B,EAAE,CAAC,iBAAiB,EAAE,YAAY,CAAC;IAC/D,8BAA8B,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;IAC/D,gBAAgB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;IACzC,kBAAkB,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;IAC3C,iBAAiB,EAAE,CAAC,cAAc,EAAE,cAAc,CAAC;IACnD,oBAAoB,EAAE,CAAC,SAAS,CAAC;IACjC,iBAAiB,EAAE,CAAC,SAAS,CAAC;IAC9B,iBAAiB,EAAE,CAAC,SAAS,EAAE,eAAe,CAAC;IAC/C,sBAAsB,EAAE,CAAC,iBAAiB,CAAC;IAC3C,sBAAsB,EAAE,CAAC,iBAAiB,CAAC;IAC3C,yBAAyB,EAAE,CAAC,YAAY,CAAC;IACzC,yBAAyB,EAAE,CAAC,YAAY,CAAC;IACzC,2BAA2B,EAAE,CAAC,YAAY,CAAC;IAC3C,qBAAqB,EAAE,CAAC,YAAY,EAAE,UAAU,CAAC;IACjD,oBAAoB,EAAE,CAAC,UAAU,CAAC;IAClC,uBAAuB,EAAE,CAAC,UAAU,CAAC;IACrC,uBAAuB,EAAE,CAAC,WAAW,CAAC;IACtC,oBAAoB,EAAE,CAAC,eAAe,CAAC;IACvC,kBAAkB,EAAE,CAAC,eAAe,EAAE,aAAa,CAAC;IACpD,mBAAmB,EAAE,CAAC,aAAa,CAAC;IACpC,gBAAgB,EAAE,CAAC,aAAa,CAAC;IACjC,gBAAgB,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC;IAClD,yBAAyB,EAAE,EAAE;IAC7B,yBAAyB,EAAE,CAAC,MAAM,CAAC;IACnC,yBAAyB,EAAE,CAAC,MAAM,CAAC;IACnC,2BAA2B,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IAC9C,2BAA2B,EAAE,CAAC,cAAc,CAAC;IAC7C,gBAAgB,EAAE,CAAC,OAAO,CAAC;IAC3B,yBAAyB,EAAE,CAAC,YAAY,EAAE,SAAS,CAAC;IACpD,wBAAwB,EAAE,EAAE;IAC5B,6BAA6B,EAAE,CAAC,UAAU,CAAC;CACnC,CAAC;AAuBX,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,IAAmB;IACnD,MAAM,MAAM,GAAG,CAAC,QAAoC,EAAE,EAAE;QACtD,IAAI,CAAC;YAAC,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;YAAC,IAAI,OAAO;gBAAE,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC7H,CAAC,CAAC;IACF,OAAO;QACL,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACrD,gBAAgB,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;KAC1F,CAAC;AACJ,CAAC"}

package/dist/providers/noop-telemetry.d.ts

@@ -1,11 +1,5 @@
 import type { TelemetrySink, TelemetryEvent } from '../ports/telemetry.js';
-/**
- * No-op telemetry — the self-host default. Captures nothing; honors the intent
- * of `DO_NOT_TRACK`. The cloud product injects a PostHog-backed sink.
- *
- * `captureException` still logs to the console so self-host operators see server
- * errors without any external service.
- */
+/** Self-host default: no outbound observation transport. */
 export declare class NoopTelemetrySink implements TelemetrySink {
     capture(_event: TelemetryEvent): void;
     captureException(err: unknown, context?: Record<string, unknown>): void;