@rnsk/toolkits 0.0.10 → 0.0.12

package/dist/toolkits/datadog/tools/index.js

@@ -0,0 +1,450 @@
+// @ts-nocheck
+import { datadogAggregateLogs, datadogSearchLogs, datadogListLogIndexes } from './logs.js';
+import { datadogListMetrics, datadogQueryMetrics, datadogSubmitMetrics } from './metrics.js';
+import { datadogCreateMonitor, datadogGetMonitor, datadogListMonitors, datadogUpdateMonitor, datadogDeleteMonitor, datadogMuteMonitor, datadogUnmuteMonitor, datadogCreateDowntime, } from './monitors.js';
+import { datadogCreateDashboard, datadogGetDashboard, datadogUpdateDashboard, datadogDeleteDashboard, datadogListDashboards, } from './dashboards.js';
+import { datadogCreateEvent, datadogListEvents } from './events.js';
+import { datadogListHosts, datadogGetHostTags, datadogListAllTags, datadogUpdateHostTags, } from './hosts.js';
+import { datadogListApmServices, datadogSearchTraces, datadogSearchSpansAnalytics, } from './apm.js';
+import { datadogCreateSyntheticApiTest, datadogListSynthetics, datadogGetSyntheticsLocations, } from './synthetics.js';
+import { datadogListIncidents } from './incidents.js';
+import { datadogCreateSlo, datadogListSlos } from './slos.js';
+import { datadogListUsers, datadogListRoles } from './users.js';
+import { datadogGetUsageSummary } from './usage.js';
+import { datadogListApiKeys } from './api-keys.js';
+import { datadogListAwsIntegrations, datadogCreateWebhook } from './integrations.js';
+import { datadogCreateEscalationPolicy, datadogGetEscalationPolicy, datadogUpdateEscalationPolicy, datadogDeleteEscalationPolicy, } from './oncall-policies.js';
+import { datadogCreateSchedule, datadogGetSchedule, datadogUpdateSchedule, datadogDeleteSchedule, datadogGetScheduledOnCallUser, } from './oncall-schedules.js';
+import { datadogCreateNotificationChannel, datadogGetNotificationChannel, datadogListNotificationChannels, datadogDeleteNotificationChannel, datadogCreateNotificationRule, datadogGetNotificationRule, datadogListNotificationRules, datadogUpdateNotificationRule, datadogDeleteNotificationRule, } from './oncall-notifications.js';
+import { datadogGetTeamOnCallUsers, datadogGetTeamRoutingRules, datadogSetTeamRoutingRules, } from './oncall-teams.js';
+export { datadogAggregateLogs, datadogSearchLogs, datadogListLogIndexes, datadogListMetrics, datadogQueryMetrics, datadogSubmitMetrics, datadogCreateMonitor, datadogGetMonitor, datadogListMonitors, datadogUpdateMonitor, datadogDeleteMonitor, datadogMuteMonitor, datadogUnmuteMonitor, datadogCreateDowntime, datadogCreateDashboard, datadogGetDashboard, datadogUpdateDashboard, datadogDeleteDashboard, datadogListDashboards, datadogCreateEvent, datadogListEvents, datadogListHosts, datadogGetHostTags, datadogListAllTags, datadogUpdateHostTags, datadogListApmServices, datadogSearchTraces, datadogSearchSpansAnalytics, datadogCreateSyntheticApiTest, datadogListSynthetics, datadogGetSyntheticsLocations, datadogListIncidents, datadogCreateSlo, datadogListSlos, datadogListUsers, datadogListRoles, datadogGetUsageSummary, datadogListApiKeys, datadogListAwsIntegrations, datadogCreateWebhook, datadogCreateEscalationPolicy, datadogGetEscalationPolicy, datadogUpdateEscalationPolicy, datadogDeleteEscalationPolicy, datadogCreateSchedule, datadogGetSchedule, datadogUpdateSchedule, datadogDeleteSchedule, datadogGetScheduledOnCallUser, datadogCreateNotificationChannel, datadogGetNotificationChannel, datadogListNotificationChannels, datadogDeleteNotificationChannel, datadogCreateNotificationRule, datadogGetNotificationRule, datadogListNotificationRules, datadogUpdateNotificationRule, datadogDeleteNotificationRule, datadogGetTeamOnCallUsers, datadogGetTeamRoutingRules, datadogSetTeamRoutingRules, };
+export const datadogTools = [
+    {
+        name: 'datadogAggregateLogs',
+        description: datadogAggregateLogs.description,
+        tool: datadogAggregateLogs,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogSearchLogs',
+        description: datadogSearchLogs.description,
+        tool: datadogSearchLogs,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListLogIndexes',
+        description: datadogListLogIndexes.description,
+        tool: datadogListLogIndexes,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListMetrics',
+        description: datadogListMetrics.description,
+        tool: datadogListMetrics,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogQueryMetrics',
+        description: datadogQueryMetrics.description,
+        tool: datadogQueryMetrics,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogSubmitMetrics',
+        description: datadogSubmitMetrics.description,
+        tool: datadogSubmitMetrics,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogCreateMonitor',
+        description: datadogCreateMonitor.description,
+        tool: datadogCreateMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetMonitor',
+        description: datadogGetMonitor.description,
+        tool: datadogGetMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListMonitors',
+        description: datadogListMonitors.description,
+        tool: datadogListMonitors,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateMonitor',
+        description: datadogUpdateMonitor.description,
+        tool: datadogUpdateMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogDeleteMonitor',
+        description: datadogDeleteMonitor.description,
+        tool: datadogDeleteMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogMuteMonitor',
+        description: datadogMuteMonitor.description,
+        tool: datadogMuteMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogUnmuteMonitor',
+        description: datadogUnmuteMonitor.description,
+        tool: datadogUnmuteMonitor,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogCreateDowntime',
+        description: datadogCreateDowntime.description,
+        tool: datadogCreateDowntime,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogCreateDashboard',
+        description: datadogCreateDashboard.description,
+        tool: datadogCreateDashboard,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetDashboard',
+        description: datadogGetDashboard.description,
+        tool: datadogGetDashboard,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateDashboard',
+        description: datadogUpdateDashboard.description,
+        tool: datadogUpdateDashboard,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogDeleteDashboard',
+        description: datadogDeleteDashboard.description,
+        tool: datadogDeleteDashboard,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogListDashboards',
+        description: datadogListDashboards.description,
+        tool: datadogListDashboards,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogCreateEvent',
+        description: datadogCreateEvent.description,
+        tool: datadogCreateEvent,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogListEvents',
+        description: datadogListEvents.description,
+        tool: datadogListEvents,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListHosts',
+        description: datadogListHosts.description,
+        tool: datadogListHosts,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogGetHostTags',
+        description: datadogGetHostTags.description,
+        tool: datadogGetHostTags,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListAllTags',
+        description: datadogListAllTags.description,
+        tool: datadogListAllTags,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateHostTags',
+        description: datadogUpdateHostTags.description,
+        tool: datadogUpdateHostTags,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogListApmServices',
+        description: datadogListApmServices.description,
+        tool: datadogListApmServices,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogSearchTraces',
+        description: datadogSearchTraces.description,
+        tool: datadogSearchTraces,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogSearchSpansAnalytics',
+        description: datadogSearchSpansAnalytics.description,
+        tool: datadogSearchSpansAnalytics,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogCreateSyntheticApiTest',
+        description: datadogCreateSyntheticApiTest.description,
+        tool: datadogCreateSyntheticApiTest,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogListSynthetics',
+        description: datadogListSynthetics.description,
+        tool: datadogListSynthetics,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogGetSyntheticsLocations',
+        description: datadogGetSyntheticsLocations.description,
+        tool: datadogGetSyntheticsLocations,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListIncidents',
+        description: datadogListIncidents.description,
+        tool: datadogListIncidents,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogCreateSlo',
+        description: datadogCreateSlo.description,
+        tool: datadogCreateSlo,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogListSlos',
+        description: datadogListSlos.description,
+        tool: datadogListSlos,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListUsers',
+        description: datadogListUsers.description,
+        tool: datadogListUsers,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListRoles',
+        description: datadogListRoles.description,
+        tool: datadogListRoles,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogGetUsageSummary',
+        description: datadogGetUsageSummary.description,
+        tool: datadogGetUsageSummary,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListApiKeys',
+        description: datadogListApiKeys.description,
+        tool: datadogListApiKeys,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListAwsIntegrations',
+        description: datadogListAwsIntegrations.description,
+        tool: datadogListAwsIntegrations,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogCreateWebhook',
+        description: datadogCreateWebhook.description,
+        tool: datadogCreateWebhook,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogCreateEscalationPolicy',
+        description: datadogCreateEscalationPolicy.description,
+        tool: datadogCreateEscalationPolicy,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetEscalationPolicy',
+        description: datadogGetEscalationPolicy.description,
+        tool: datadogGetEscalationPolicy,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateEscalationPolicy',
+        description: datadogUpdateEscalationPolicy.description,
+        tool: datadogUpdateEscalationPolicy,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogDeleteEscalationPolicy',
+        description: datadogDeleteEscalationPolicy.description,
+        tool: datadogDeleteEscalationPolicy,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogCreateSchedule',
+        description: datadogCreateSchedule.description,
+        tool: datadogCreateSchedule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetSchedule',
+        description: datadogGetSchedule.description,
+        tool: datadogGetSchedule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateSchedule',
+        description: datadogUpdateSchedule.description,
+        tool: datadogUpdateSchedule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogDeleteSchedule',
+        description: datadogDeleteSchedule.description,
+        tool: datadogDeleteSchedule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogGetScheduledOnCallUser',
+        description: datadogGetScheduledOnCallUser.description,
+        tool: datadogGetScheduledOnCallUser,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogCreateNotificationChannel',
+        description: datadogCreateNotificationChannel.description,
+        tool: datadogCreateNotificationChannel,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetNotificationChannel',
+        description: datadogGetNotificationChannel.description,
+        tool: datadogGetNotificationChannel,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListNotificationChannels',
+        description: datadogListNotificationChannels.description,
+        tool: datadogListNotificationChannels,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogDeleteNotificationChannel',
+        description: datadogDeleteNotificationChannel.description,
+        tool: datadogDeleteNotificationChannel,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogCreateNotificationRule',
+        description: datadogCreateNotificationRule.description,
+        tool: datadogCreateNotificationRule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogGetNotificationRule',
+        description: datadogGetNotificationRule.description,
+        tool: datadogGetNotificationRule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogListNotificationRules',
+        description: datadogListNotificationRules.description,
+        tool: datadogListNotificationRules,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogUpdateNotificationRule',
+        description: datadogUpdateNotificationRule.description,
+        tool: datadogUpdateNotificationRule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+    {
+        name: 'datadogDeleteNotificationRule',
+        description: datadogDeleteNotificationRule.description,
+        tool: datadogDeleteNotificationRule,
+        requiredAuth: 'datadogCredentials',
+        scope: 'delete',
+    },
+    {
+        name: 'datadogGetTeamOnCallUsers',
+        description: datadogGetTeamOnCallUsers.description,
+        tool: datadogGetTeamOnCallUsers,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogGetTeamRoutingRules',
+        description: datadogGetTeamRoutingRules.description,
+        tool: datadogGetTeamRoutingRules,
+        requiredAuth: 'datadogCredentials',
+        scope: 'read',
+    },
+    {
+        name: 'datadogSetTeamRoutingRules',
+        description: datadogSetTeamRoutingRules.description,
+        tool: datadogSetTeamRoutingRules,
+        requiredAuth: 'datadogCredentials',
+        scope: 'write',
+    },
+];
+//# sourceMappingURL=index.js.map

package/dist/toolkits/datadog/tools/integrations.d.ts

@@ -0,0 +1,32 @@
+export declare const datadogListAwsIntegrations: import("ai").Tool<{
+    datadogCredentials: string;
+    account_id?: string | undefined;
+    role_name?: string | undefined;
+    access_key_id?: string | undefined;
+}, {
+    error: string;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+} | {
+    accounts: any;
+    total_count: any;
+}>;
+export declare const datadogCreateWebhook: import("ai").Tool<{
+    name: string;
+    url: string;
+    datadogCredentials: string;
+    payload?: string | undefined;
+    encode_as?: string | undefined;
+    custom_headers?: string | undefined;
+}, {
+    error: string;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+} | {
+    success: boolean;
+}>;
+//# sourceMappingURL=integrations.d.ts.map

package/dist/toolkits/datadog/tools/integrations.js

@@ -0,0 +1,47 @@
+// @ts-nocheck
+import { tool } from 'ai';
+import { z } from 'zod';
+import { ddApi, toDatadogError } from './client.js';
+const credsField = z.string().describe('Datadog credentials JSON with apiKey and appKey (injected by system)');
+export const datadogListAwsIntegrations = tool({
+    description: 'List configured AWS account integrations with roles and collection settings. Filter by account ID or IAM role name. Use to verify monitoring coverage.',
+    inputSchema: z.object({
+        datadogCredentials: credsField,
+        account_id: z.string().optional().describe('Filter by AWS account ID'),
+        role_name: z.string().optional().describe('Filter by IAM role name'),
+        access_key_id: z.string().optional().describe('Filter by access key ID'),
+    }),
+    execute: async ({ datadogCredentials, ...query }) => {
+        try {
+            const data = await ddApi(datadogCredentials, 'GET', '/api/v1/integration/aws', { query });
+            const accounts = data?.accounts ?? (Array.isArray(data) ? data : []);
+            return { accounts, total_count: data?.total_count ?? accounts.length };
+        }
+        catch (error) {
+            return toDatadogError(error, 'Failed to list AWS integrations');
+        }
+    },
+});
+export const datadogCreateWebhook = tool({
+    description: 'Register a named HTTPS destination for monitor alerts. Monitors must reference the webhook by name in their message/notification settings to deliver alerts.',
+    inputSchema: z.object({
+        datadogCredentials: credsField,
+        name: z.string().min(1).max(100).describe('Webhook name'),
+        url: z.string().describe('Reachable HTTPS endpoint'),
+        payload: z.string().optional().describe('Custom payload template'),
+        encode_as: z.string().optional().describe("Encoding: 'json' (default) or 'form'"),
+        custom_headers: z.string().optional().describe('Custom headers as a JSON string'),
+    }),
+    execute: async ({ datadogCredentials, ...body }) => {
+        try {
+            const data = await ddApi(datadogCredentials, 'POST', '/api/v1/integration/webhooks/configuration/webhooks', {
+                body,
+            });
+            return { ...data, success: true };
+        }
+        catch (error) {
+            return toDatadogError(error, 'Failed to create webhook');
+        }
+    },
+});
+//# sourceMappingURL=integrations.js.map

package/dist/toolkits/datadog/tools/logs.d.ts

@@ -0,0 +1,39 @@
+export declare const datadogAggregateLogs: import("ai").Tool<{
+    datadogCredentials: string;
+    filter?: {
+        query?: string | undefined;
+        indexes?: string[] | undefined;
+        from_time?: string | undefined;
+        to_time?: string | undefined;
+        storage_tier?: "indexes" | "online-archives" | "flex" | undefined;
+    } | undefined;
+    page?: {
+        cursor: string;
+    } | undefined;
+    compute?: Record<string, any>[] | undefined;
+    group_by?: Record<string, any>[] | undefined;
+}, any>;
+export declare const datadogSearchLogs: import("ai").Tool<{
+    query: string;
+    limit: number;
+    datadogCredentials: string;
+    time_from: number;
+    time_to: number;
+    index?: string | undefined;
+    start_at?: string | undefined;
+}, {
+    error: string;
+    message?: undefined;
+} | {
+    error: string;
+    message: string;
+} | {
+    logs: any;
+    total: any;
+    status: any;
+    nextLogId: any;
+}>;
+export declare const datadogListLogIndexes: import("ai").Tool<{
+    datadogCredentials: string;
+}, any>;
+//# sourceMappingURL=logs.d.ts.map

package/dist/toolkits/datadog/tools/logs.js

@@ -0,0 +1,121 @@
+// @ts-nocheck
+import { tool } from 'ai';
+import { z } from 'zod';
+import { ddApi, toDatadogError } from './client.js';
+const credsField = z.string().describe('Datadog credentials JSON with apiKey and appKey (injected by system)');
+function toIso(value, fallback) {
+    if (value === undefined)
+        return fallback;
+    if (typeof value === 'number')
+        return new Date(value).toISOString();
+    if (/^\d{13}$/.test(value))
+        return new Date(Number(value)).toISOString();
+    return value;
+}
+export const datadogAggregateLogs = tool({
+    description: 'Aggregate logs server-side without downloading raw events: counts, unique values, percentiles, stats, grouped breakdowns, or timeseries. Use datadogSearchLogs only when individual messages are needed.',
+    inputSchema: z.object({
+        datadogCredentials: credsField,
+        filter: z
+            .object({
+            query: z.string().optional().describe("Log query, e.g. 'service:api status:error' ('*' for all)"),
+            indexes: z.array(z.string()).optional().describe("Indexes to search (omit for all)"),
+            from_time: z.string().optional().describe("Range start: date math, ms epoch, or ISO (default 'now-15m')"),
+            to_time: z.string().optional().describe("Range end: date math, ms epoch, or ISO (default 'now')"),
+            storage_tier: z.enum(['indexes', 'online-archives', 'flex']).optional().describe('Storage tier'),
+        })
+            .optional()
+            .describe('Query, time range, indexes, and tier'),
+        compute: z
+            .array(z.record(z.any()))
+            .optional()
+            .describe("Calculations, e.g. [{aggregation:'count'}] (only count works without metric)"),
+        group_by: z
+            .array(z.record(z.any()))
+            .optional()
+            .describe("Facets to bucket by, e.g. [{facet:'service',limit:10}]"),
+        page: z.object({ cursor: z.string() }).optional().describe('Continue with the previous next_cursor'),
+    }),
+    execute: async ({ datadogCredentials, filter, compute, group_by, page }) => {
+        try {
+            return await ddApi(datadogCredentials, 'POST', '/api/v2/logs/analytics/aggregate', {
+                body: {
+                    filter: {
+                        query: filter?.query ?? '*',
+                        indexes: filter?.indexes,
+                        from: toIso(filter?.from_time, 'now-15m'),
+                        to: toIso(filter?.to_time, 'now'),
+                        storage_tier: filter?.storage_tier,
+                    },
+                    compute: compute ?? [{ aggregation: 'count' }],
+                    group_by,
+                    page,
+                },
+            });
+        }
+        catch (error) {
+            return toDatadogError(error, 'Failed to aggregate logs');
+        }
+    },
+});
+export const datadogSearchLogs = tool({
+    description: 'Search individual log messages with a query and millisecond time range. List indexes with datadogListLogIndexes first — a wrong or missing index silently hides logs. Paginate with the returned nextLogId.',
+    inputSchema: z.object({
+        datadogCredentials: credsField,
+        query: z.string().describe("Log query, e.g. 'status:error' or '*'"),
+        time_from: z.number().describe('Range start as ms epoch (13-digit, max 15-day window)'),
+        time_to: z.number().describe('Range end as ms epoch (13-digit)'),
+        index: z.string().optional().describe('Index to search (discover via datadogListLogIndexes)'),
+        limit: z.number().min(1).max(1000).optional().default(50).describe('Max logs per page'),
+        start_at: z.string().optional().describe('Pagination cursor (nextLogId); same query/time required'),
+    }),
+    execute: async ({ datadogCredentials, query, time_from, time_to, index, limit = 50, start_at }) => {
+        try {
+            const data = await ddApi(datadogCredentials, 'POST', '/api/v2/logs/events/search', {
+                body: {
+                    filter: {
+                        from: new Date(time_from).toISOString(),
+                        to: new Date(time_to).toISOString(),
+                        query,
+                        indexes: index ? [index] : undefined,
+                    },
+                    page: { limit, cursor: start_at },
+                },
+            });
+            const entries = Array.isArray(data?.data) ? data.data : [];
+            return {
+                logs: entries.map((e) => ({
+                    id: e.id,
+                    timestamp: e.attributes?.timestamp,
+                    host: e.attributes?.host,
+                    service: e.attributes?.service,
+                    message: e.attributes?.message,
+                    tags: e.attributes?.tags,
+                    attributes: e.attributes,
+                })),
+                total: entries.length,
+                status: data?.meta?.status,
+                nextLogId: data?.meta?.page?.after,
+            };
+        }
+        catch (error) {
+            return toDatadogError(error, 'Failed to search logs');
+        }
+    },
+});
+export const datadogListLogIndexes = tool({
+    description: 'List log index names and configs. Call before datadogSearchLogs to pick the right index and avoid hidden results or excess usage.',
+    inputSchema: z.object({
+        datadogCredentials: credsField,
+    }),
+    execute: async ({ datadogCredentials }) => {
+        try {
+            const data = await ddApi(datadogCredentials, 'GET', '/api/v1/logs/config/indexes');
+            return Array.isArray(data) ? { indexes: data } : data;
+        }
+        catch (error) {
+            return toDatadogError(error, 'Failed to list log indexes');
+        }
+    },
+});
+//# sourceMappingURL=logs.js.map