@ryanstark24/sfgraph-core 1.1.0

package/dist/telemetry/__tests__/pipeline.test.js

@@ -0,0 +1,68 @@
+import { describe, expect, it } from "vitest";
+import { TelemetryPipeline } from "../pipeline.js";
+import { Sanitizer } from "../sanitizer.js";
+class CapturingSink {
+    events = [];
+    async emit(e) {
+        this.events.push(e);
+    }
+    async flush() { }
+    async close() { }
+}
+class ThrowingSink {
+    async emit() {
+        throw new Error("boom");
+    }
+    async flush() { }
+    async close() { }
+}
+describe("TelemetryPipeline", () => {
+    it("sanitizes values via sanitizer", async () => {
+        const sink = new CapturingSink();
+        const p = new TelemetryPipeline({
+            sink,
+            sanitizer: new Sanitizer(),
+            getMachineId: () => "mid-1",
+        });
+        await p.record({
+            kind: "ingest_failure",
+            ts: 1,
+            category: "ApexClass",
+            errorCode: "err at /Users/x",
+        });
+        expect(sink.events).toHaveLength(1);
+        expect(sink.events[0]["errorCode"]).toBe("err at <path>");
+        expect(sink.events[0]["machineId"]).toBe("mid-1");
+    });
+    it("skips invalid events without throwing", async () => {
+        const sink = new CapturingSink();
+        const p = new TelemetryPipeline({
+            sink,
+            sanitizer: new Sanitizer(),
+            getMachineId: () => null,
+        });
+        await p.record({ kind: "unknown" });
+        expect(sink.events).toHaveLength(0);
+        expect(p.getFailureCount()).toBe(1);
+    });
+    it("swallows sink failures", async () => {
+        const p = new TelemetryPipeline({
+            sink: new ThrowingSink(),
+            sanitizer: new Sanitizer(),
+            getMachineId: () => null,
+        });
+        await expect(p.record({ kind: "mcp_startup", ts: 1, version: "0.0.0" })).resolves.toBeUndefined();
+        expect(p.getFailureCount()).toBe(1);
+    });
+    it("does not attach machineId when null", async () => {
+        const sink = new CapturingSink();
+        const p = new TelemetryPipeline({
+            sink,
+            sanitizer: new Sanitizer(),
+            getMachineId: () => null,
+        });
+        await p.record({ kind: "mcp_startup", ts: 1, version: "0.0.0" });
+        expect(sink.events[0]).not.toHaveProperty("machineId");
+    });
+});
+//# sourceMappingURL=pipeline.test.js.map

package/dist/telemetry/__tests__/pipeline.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.test.js","sourceRoot":"","sources":["../../../src/telemetry/__tests__/pipeline.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,MAAM,aAAa;IACjB,MAAM,GAA8B,EAAE,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,CAA0B;QACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IACD,KAAK,CAAC,KAAK,KAAmB,CAAC;IAC/B,KAAK,CAAC,KAAK,KAAmB,CAAC;CAChC;AAED,MAAM,YAAY;IAChB,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,KAAK,KAAmB,CAAC;IAC/B,KAAK,CAAC,KAAK,KAAmB,CAAC;CAChC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC;YAC9B,IAAI;YACJ,SAAS,EAAE,IAAI,SAAS,EAAE;YAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,MAAM,CAAC;YACb,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,CAAC;YACL,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,iBAAiB;SAC7B,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC;YAC9B,IAAI;YACJ,SAAS,EAAE,IAAI,SAAS,EAAE;YAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC;YAC9B,IAAI,EAAE,IAAI,YAAY,EAAE;YACxB,SAAS,EAAE,IAAI,SAAS,EAAE;YAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,MAAM,CACV,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAC3D,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC3B,MAAM,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,IAAI,iBAAiB,CAAC;YAC9B,IAAI;YACJ,SAAS,EAAE,IAAI,SAAS,EAAE;YAC1B,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI;SACzB,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/telemetry/__tests__/sanitizer.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sanitizer.test.d.ts.map

package/dist/telemetry/__tests__/sanitizer.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.test.d.ts","sourceRoot":"","sources":["../../../src/telemetry/__tests__/sanitizer.test.ts"],"names":[],"mappings":""}

package/dist/telemetry/__tests__/sanitizer.test.js

@@ -0,0 +1,143 @@
+import { describe, expect, it } from "vitest";
+import { Sanitizer } from "../sanitizer.js";
+const s = new Sanitizer();
+describe("Sanitizer", () => {
+    it("redacts Unix /Users path", () => {
+        expect(s.sanitize("see /Users/alice/project")).toBe("see <path>");
+    });
+    it("redacts /home path", () => {
+        expect(s.sanitize("at /home/bob/x.txt here")).toBe("at <path> here");
+    });
+    it("redacts /var path", () => {
+        expect(s.sanitize("/var/log/foo")).toBe("<path>");
+    });
+    it("redacts /tmp path", () => {
+        expect(s.sanitize("/tmp/x")).toBe("<path>");
+    });
+    it("redacts /private path", () => {
+        expect(s.sanitize("/private/etc/foo")).toBe("<path>");
+    });
+    it("redacts Windows path", () => {
+        expect(s.sanitize("C:\\Users\\bob\\file.txt")).toBe("<path>");
+    });
+    it("redacts email", () => {
+        expect(s.sanitize("reach me at user@example.com")).toBe("reach me at <email>");
+    });
+    it("redacts complex email", () => {
+        expect(s.sanitize("a.b+c@sub.example.co.uk")).toBe("<email>");
+    });
+    it("redacts salesforce.com host", () => {
+        expect(s.sanitize("acme.my.salesforce.com")).toBe("<sf-host>");
+    });
+    it("redacts lightning.force.com", () => {
+        expect(s.sanitize("foo.lightning.force.com/bar")).toBe("<sf-host>/bar");
+    });
+    it("redacts force.com", () => {
+        expect(s.sanitize("acme.force.com")).toBe("<sf-host>");
+    });
+    it("redacts visualforce.com", () => {
+        expect(s.sanitize("acme--c.visualforce.com")).toBe("<sf-host>");
+    });
+    it("redacts cloudforce.com", () => {
+        expect(s.sanitize("acme.cloudforce.com")).toBe("<sf-host>");
+    });
+    it("redacts Authorization Bearer header", () => {
+        expect(s.sanitize("Authorization: Bearer abc.def-ghi_jkl")).toBe("<bearer-token>");
+    });
+    it("redacts bare Bearer token", () => {
+        expect(s.sanitize("Bearer eyJhbGciOiJIUzI1NiJ9")).toBe("<bearer-token>");
+    });
+    it("redacts SF session id", () => {
+        expect(s.sanitize("00D0x000000abcd!ARMAQABCDEFghijklmnop")).toBe("<sf-session>");
+    });
+    it("redacts UUID", () => {
+        expect(s.sanitize("550e8400-e29b-41d4-a716-446655440000")).toBe("<uuid>");
+    });
+    it("redacts SF record id 15 char", () => {
+        expect(s.sanitize("Account 001A0000ABCDEFG")).toBe("Account <sf-id>");
+    });
+    it("redacts SF record id 18 char", () => {
+        expect(s.sanitize("User 005A0000ABCDEFG123")).toBe("User <sf-id>");
+    });
+    it("passes through plain non-SF random strings", () => {
+        expect(s.sanitize("zzzzzzzzzzzzzzz")).toBe("zzzzzzzzzzzzzzz");
+    });
+    it("recursively sanitizes object string values", () => {
+        expect(s.sanitize({ path: "/Users/x/y", email: "a@b.com" })).toEqual({
+            path: "<path>",
+            email: "<email>",
+        });
+    });
+    it("recursively sanitizes nested arrays", () => {
+        expect(s.sanitize(["/tmp/x", ["/var/y", "a@b.com"]])).toEqual([
+            "<path>",
+            ["<path>", "<email>"],
+        ]);
+    });
+    it("handles mixed nested objects", () => {
+        expect(s.sanitize({
+            inner: { token: "Bearer xyz123", host: "acme.salesforce.com" },
+            list: ["/tmp/a"],
+        })).toEqual({
+            inner: { token: "<bearer-token>", host: "<sf-host>" },
+            list: ["<path>"],
+        });
+    });
+    it("caps recursion at max depth", () => {
+        let v = "leaf";
+        for (let i = 0; i < 20; i++)
+            v = { nest: v };
+        const out = s.sanitize(v);
+        // Drill down — at some point a string '<max-depth>' must appear
+        let cur = out;
+        let found = false;
+        for (let i = 0; i < 30 && cur != null; i++) {
+            if (cur === "<max-depth>") {
+                found = true;
+                break;
+            }
+            cur = cur.nest;
+        }
+        expect(found).toBe(true);
+    });
+    it("passes through numbers", () => {
+        expect(s.sanitize(42)).toBe(42);
+    });
+    it("passes through booleans", () => {
+        expect(s.sanitize(false)).toBe(false);
+    });
+    it("passes through null", () => {
+        expect(s.sanitize(null)).toBe(null);
+    });
+    it("passes through undefined", () => {
+        expect(s.sanitize(undefined)).toBe(undefined);
+    });
+    it("sanitizes multiple patterns in one string", () => {
+        expect(s.sanitize("user@x.com at /Users/x")).toBe("<email> at <path>");
+    });
+    it("sanitizeEvent strips unknown fields", () => {
+        const out = s.sanitizeEvent({
+            kind: "cli_command",
+            ts: 1,
+            command: "ingest",
+            durationMs: 10,
+            exitCode: 0,
+            extraSecret: "/Users/x",
+        });
+        expect(out).not.toHaveProperty("extraSecret");
+        expect(out["command"]).toBe("ingest");
+    });
+    it("sanitizeEvent returns {} for unknown kind", () => {
+        expect(s.sanitizeEvent({ kind: "no_such_kind", x: 1 })).toEqual({});
+    });
+    it("sanitizeEvent sanitizes allowed string values", () => {
+        const out = s.sanitizeEvent({
+            kind: "ingest_failure",
+            ts: 1,
+            category: "ApexClass",
+            errorCode: "failed at /Users/x",
+        });
+        expect(out["errorCode"]).toBe("failed at <path>");
+    });
+});
+//# sourceMappingURL=sanitizer.test.js.map

package/dist/telemetry/__tests__/sanitizer.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.test.js","sourceRoot":"","sources":["../../../src/telemetry/__tests__/sanitizer.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,MAAM,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;AAE1B,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;QACvB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACnE,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,SAAS;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,QAAQ;YACR,CAAC,QAAQ,EAAE,SAAS,CAAC;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CACJ,CAAC,CAAC,QAAQ,CAAC;YACT,KAAK,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,qBAAqB,EAAE;YAC9D,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,KAAK,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAE;YACrD,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,IAAI,CAAC,GAAQ,MAAM,CAAC;QACpB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,gEAAgE;QAChE,IAAI,GAAG,GAAQ,GAAG,CAAC;QACnB,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,GAAG,KAAK,aAAa,EAAE,CAAC;gBAC1B,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;YACD,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;QACjB,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;YAC1B,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,CAAC;YACL,OAAO,EAAE,QAAQ;YACjB,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,CAAC;YACX,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,CAAC,CAAC,aAAa,CAAC;YAC1B,IAAI,EAAE,gBAAgB;YACtB,EAAE,EAAE,CAAC;YACL,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,oBAAoB;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/telemetry/event-schema.d.ts

@@ -0,0 +1,47 @@
+export declare const EVENT_KINDS: readonly ["cli_command", "tool_invoked", "ingest_failure", "parse_failure", "mcp_startup", "mcp_shutdown"];
+export type EventKind = (typeof EVENT_KINDS)[number];
+export interface BaseEvent {
+    kind: EventKind;
+    ts: number;
+}
+export interface CliCommandEvent extends BaseEvent {
+    kind: "cli_command";
+    command: string;
+    durationMs: number;
+    exitCode: number;
+}
+export interface ToolInvokedEvent extends BaseEvent {
+    kind: "tool_invoked";
+    tool: string;
+    durationMs: number;
+    ok: boolean;
+}
+export interface IngestFailureEvent extends BaseEvent {
+    kind: "ingest_failure";
+    category: string;
+    errorCode: string;
+}
+export interface ParseFailureEvent extends BaseEvent {
+    kind: "parse_failure";
+    category: string;
+    errorCode: string;
+}
+export interface McpStartupEvent extends BaseEvent {
+    kind: "mcp_startup";
+    version: string;
+}
+export interface McpShutdownEvent extends BaseEvent {
+    kind: "mcp_shutdown";
+    reason: string;
+    durationMs: number;
+}
+export type TelemetryEvent = CliCommandEvent | ToolInvokedEvent | IngestFailureEvent | ParseFailureEvent | McpStartupEvent | McpShutdownEvent;
+export declare const ALLOWED_FIELDS_BY_KIND: Record<EventKind, Set<string>>;
+export type ValidationResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare function validateEvent(event: unknown): ValidationResult;
+//# sourceMappingURL=event-schema.d.ts.map

package/dist/telemetry/event-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schema.d.ts","sourceRoot":"","sources":["../../src/telemetry/event-schema.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,4GAOd,CAAC;AAEX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,MAAM,WAAW,kBAAmB,SAAQ,SAAS;IACnD,IAAI,EAAE,gBAAgB,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAkB,SAAQ,SAAS;IAClD,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAgB,SAAQ,SAAS;IAChD,IAAI,EAAE,aAAa,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IACjD,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,cAAc,GACtB,eAAe,GACf,gBAAgB,GAChB,kBAAkB,GAClB,iBAAiB,GACjB,eAAe,GACf,gBAAgB,CAAC;AAErB,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAOjE,CAAC;AAuBF,MAAM,MAAM,gBAAgB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CA0B9D"}

package/dist/telemetry/event-schema.js

@@ -0,0 +1,64 @@
+export const EVENT_KINDS = [
+    "cli_command",
+    "tool_invoked",
+    "ingest_failure",
+    "parse_failure",
+    "mcp_startup",
+    "mcp_shutdown",
+];
+export const ALLOWED_FIELDS_BY_KIND = {
+    cli_command: new Set(["kind", "ts", "command", "durationMs", "exitCode"]),
+    tool_invoked: new Set(["kind", "ts", "tool", "durationMs", "ok"]),
+    ingest_failure: new Set(["kind", "ts", "category", "errorCode"]),
+    parse_failure: new Set(["kind", "ts", "category", "errorCode"]),
+    mcp_startup: new Set(["kind", "ts", "version"]),
+    mcp_shutdown: new Set(["kind", "ts", "reason", "durationMs"]),
+};
+const FIELD_TYPES = {
+    cli_command: {
+        kind: "string",
+        ts: "number",
+        command: "string",
+        durationMs: "number",
+        exitCode: "number",
+    },
+    tool_invoked: {
+        kind: "string",
+        ts: "number",
+        tool: "string",
+        durationMs: "number",
+        ok: "boolean",
+    },
+    ingest_failure: { kind: "string", ts: "number", category: "string", errorCode: "string" },
+    parse_failure: { kind: "string", ts: "number", category: "string", errorCode: "string" },
+    mcp_startup: { kind: "string", ts: "number", version: "string" },
+    mcp_shutdown: { kind: "string", ts: "number", reason: "string", durationMs: "number" },
+};
+export function validateEvent(event) {
+    if (typeof event !== "object" || event === null) {
+        return { ok: false, reason: "event must be an object" };
+    }
+    const e = event;
+    const kind = e["kind"];
+    if (typeof kind !== "string" || !EVENT_KINDS.includes(kind)) {
+        return { ok: false, reason: `unknown kind: ${String(kind)}` };
+    }
+    const allowed = ALLOWED_FIELDS_BY_KIND[kind];
+    const types = FIELD_TYPES[kind];
+    for (const key of Object.keys(e)) {
+        if (!allowed.has(key)) {
+            return { ok: false, reason: `unknown field '${key}' for kind ${kind}` };
+        }
+        const expectedType = types[key];
+        if (expectedType && typeof e[key] !== expectedType) {
+            return { ok: false, reason: `field '${key}' must be ${expectedType}` };
+        }
+    }
+    for (const required of allowed) {
+        if (!(required in e)) {
+            return { ok: false, reason: `missing required field '${required}'` };
+        }
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=event-schema.js.map

package/dist/telemetry/event-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-schema.js","sourceRoot":"","sources":["../../src/telemetry/event-schema.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,eAAe;IACf,aAAa;IACb,cAAc;CACN,CAAC;AAsDX,MAAM,CAAC,MAAM,sBAAsB,GAAmC;IACpE,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC;IACzE,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;IACjE,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAChE,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IAC/D,WAAW,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAC/C,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;CAC9D,CAAC;AAEF,MAAM,WAAW,GAAuE;IACtF,WAAW,EAAE;QACX,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,QAAQ;QACjB,UAAU,EAAE,QAAQ;QACpB,QAAQ,EAAE,QAAQ;KACnB;IACD,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,QAAQ;QACd,UAAU,EAAE,QAAQ;QACpB,EAAE,EAAE,SAAS;KACd;IACD,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACzF,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE;IACxF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;IAChE,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE;CACvF,CAAC;AAIF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAiB,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,IAAiB,CAAC,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,GAAG,cAAc,IAAI,EAAE,EAAE,CAAC;QAC1E,CAAC;QACD,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,YAAY,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,YAAY,EAAE,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,GAAG,aAAa,YAAY,EAAE,EAAE,CAAC;QACzE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,QAAQ,GAAG,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/telemetry/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./event-schema.js";
+export * from "./sanitizer.js";
+export * from "./sinks.js";
+export * from "./machine-id.js";
+export * from "./pipeline.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/telemetry/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/telemetry/index.js

@@ -0,0 +1,6 @@
+export * from "./event-schema.js";
+export * from "./sanitizer.js";
+export * from "./sinks.js";
+export * from "./machine-id.js";
+export * from "./pipeline.js";
+//# sourceMappingURL=index.js.map

package/dist/telemetry/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/telemetry/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC"}

package/dist/telemetry/machine-id.d.ts

@@ -0,0 +1,7 @@
+export interface MachineIdOpts {
+    telemetryEnabled: boolean;
+    configDir: string;
+}
+export declare function getOrCreateMachineId(opts: MachineIdOpts): string | null;
+export declare function resetMachineId(opts: MachineIdOpts): string | null;
+//# sourceMappingURL=machine-id.d.ts.map

package/dist/telemetry/machine-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-id.d.ts","sourceRoot":"","sources":["../../src/telemetry/machine-id.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,aAAa;IAC5B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAavE;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,GAAG,IAAI,CAOjE"}

package/dist/telemetry/machine-id.js

@@ -0,0 +1,30 @@
+import { randomUUID } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+export function getOrCreateMachineId(opts) {
+    if (!opts.telemetryEnabled)
+        return null;
+    const path = join(opts.configDir, "machine-id");
+    try {
+        const existing = readFileSync(path, "utf8").trim();
+        if (existing)
+            return existing;
+    }
+    catch {
+        // fall through to create
+    }
+    mkdirSync(opts.configDir, { recursive: true });
+    const id = randomUUID();
+    writeFileSync(path, id, "utf8");
+    return id;
+}
+export function resetMachineId(opts) {
+    if (!opts.telemetryEnabled)
+        return null;
+    const path = join(opts.configDir, "machine-id");
+    mkdirSync(opts.configDir, { recursive: true });
+    const id = randomUUID();
+    writeFileSync(path, id, "utf8");
+    return id;
+}
+//# sourceMappingURL=machine-id.js.map

package/dist/telemetry/machine-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-id.js","sourceRoot":"","sources":["../../src/telemetry/machine-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAOjC,MAAM,UAAU,oBAAoB,CAAC,IAAmB;IACtD,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,yBAAyB;IAC3B,CAAC;IACD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,CAAC,IAAI,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAChD,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;IACxB,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;IAChC,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/telemetry/pipeline.d.ts

@@ -0,0 +1,17 @@
+import type { Sanitizer } from "./sanitizer.js";
+import type { TelemetrySink } from "./sinks.js";
+export interface TelemetryPipelineOpts {
+    sink: TelemetrySink;
+    sanitizer: Sanitizer;
+    getMachineId: () => string | null;
+}
+export declare class TelemetryPipeline {
+    private readonly sink;
+    private readonly sanitizer;
+    private readonly getMachineId;
+    private failureCount;
+    constructor(opts: TelemetryPipelineOpts);
+    record(event: Record<string, unknown>): Promise<void>;
+    getFailureCount(): number;
+}
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/telemetry/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/telemetry/pipeline.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,aAAa,CAAC;IACpB,SAAS,EAAE,SAAS,CAAC;IACrB,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CACnC;AAED,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,YAAY,CAAK;gBAEb,IAAI,EAAE,qBAAqB;IAMjC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB3D,eAAe,IAAI,MAAM;CAG1B"}

package/dist/telemetry/pipeline.js

@@ -0,0 +1,33 @@
+import { validateEvent } from "./event-schema.js";
+export class TelemetryPipeline {
+    sink;
+    sanitizer;
+    getMachineId;
+    failureCount = 0;
+    constructor(opts) {
+        this.sink = opts.sink;
+        this.sanitizer = opts.sanitizer;
+        this.getMachineId = opts.getMachineId;
+    }
+    async record(event) {
+        try {
+            const validation = validateEvent(event);
+            if (!validation.ok) {
+                this.failureCount++;
+                return;
+            }
+            const sanitized = this.sanitizer.sanitizeEvent(event);
+            const mid = this.getMachineId();
+            if (mid)
+                sanitized["machineId"] = mid;
+            await this.sink.emit(sanitized);
+        }
+        catch {
+            this.failureCount++;
+        }
+    }
+    getFailureCount() {
+        return this.failureCount;
+    }
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/telemetry/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/telemetry/pipeline.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAUlD,MAAM,OAAO,iBAAiB;IACX,IAAI,CAAgB;IACpB,SAAS,CAAY;IACrB,YAAY,CAAsB;IAC3C,YAAY,GAAG,CAAC,CAAC;IAEzB,YAAY,IAA2B;QACrC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA8B;QACzC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;gBACnB,IAAI,CAAC,YAAY,EAAE,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YAChC,IAAI,GAAG;gBAAE,SAAS,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC;YACtC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/dist/telemetry/sanitizer.d.ts

@@ -0,0 +1,9 @@
+export declare class Sanitizer {
+    sanitize(value: unknown): unknown;
+    private walk;
+    /**
+     * Strip event fields not in the allowlist for its kind, then sanitize remaining values.
+     */
+    sanitizeEvent(event: Record<string, unknown>): Record<string, unknown>;
+}
+//# sourceMappingURL=sanitizer.d.ts.map

package/dist/telemetry/sanitizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.d.ts","sourceRoot":"","sources":["../../src/telemetry/sanitizer.ts"],"names":[],"mappings":"AA8CA,qBAAa,SAAS;IACpB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO;IAIjC,OAAO,CAAC,IAAI;IAoBZ;;OAEG;IACH,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAcvE"}

package/dist/telemetry/sanitizer.js

@@ -0,0 +1,87 @@
+import { ALLOWED_FIELDS_BY_KIND } from "./event-schema.js";
+const MAX_DEPTH = 10;
+// Order matters: more specific patterns first.
+const PATTERNS = [
+    // Bearer tokens (Authorization header or bare)
+    { re: /Authorization:\s*Bearer\s+[A-Za-z0-9._\-+/=]+/gi, replacement: "<bearer-token>" },
+    { re: /\bBearer\s+[A-Za-z0-9._\-+/=]+/g, replacement: "<bearer-token>" },
+    // Salesforce session ids: 00D org prefix + ! + body
+    { re: /\b00D[0-9A-Za-z]{12,15}![A-Za-z0-9._\-+/=]+/g, replacement: "<sf-session>" },
+    // Email addresses
+    { re: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/g, replacement: "<email>" },
+    // Salesforce hosts
+    {
+        re: /\b[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*\.(?:my\.salesforce\.com|lightning\.force\.com|visualforce\.com|cloudforce\.com|salesforce\.com|force\.com)\b/g,
+        replacement: "<sf-host>",
+    },
+    // UUIDs
+    {
+        re: /\b[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\b/g,
+        replacement: "<uuid>",
+    },
+    // Windows paths
+    { re: /\b[A-Za-z]:\\[^\s"']*/g, replacement: "<path>" },
+    // Unix absolute paths
+    {
+        re: /(?:\/Users|\/home|\/var|\/tmp|\/private|\/opt|\/etc)\/[^\s"':,]*/g,
+        replacement: "<path>",
+    },
+    // Salesforce record ids - require known key prefixes to reduce false positives.
+    // SF Id is 15 or 18 chars alphanumeric. We require a 3-char prefix from a known list.
+    {
+        re: /\b(?:001|003|005|006|00D|00e|00G|00Q|00T|00U|01p|a00|a01|a02|a03|a04|a05|a06|a07|a08|a09|0WO|0WP)[A-Za-z0-9]{12}(?:[A-Za-z0-9]{3})?\b/g,
+        replacement: "<sf-id>",
+    },
+];
+function scrubString(s) {
+    let out = s;
+    for (const { re, replacement } of PATTERNS) {
+        out = out.replace(re, replacement);
+    }
+    return out;
+}
+export class Sanitizer {
+    sanitize(value) {
+        return this.walk(value, 0);
+    }
+    walk(value, depth) {
+        if (depth > MAX_DEPTH)
+            return "<max-depth>";
+        if (value === null || value === undefined)
+            return value;
+        if (typeof value === "string")
+            return scrubString(value);
+        if (typeof value === "number" || typeof value === "boolean" || typeof value === "bigint") {
+            return value;
+        }
+        if (Array.isArray(value)) {
+            return value.map((v) => this.walk(v, depth + 1));
+        }
+        if (typeof value === "object") {
+            const out = {};
+            for (const [k, v] of Object.entries(value)) {
+                out[k] = this.walk(v, depth + 1);
+            }
+            return out;
+        }
+        return value;
+    }
+    /**
+     * Strip event fields not in the allowlist for its kind, then sanitize remaining values.
+     */
+    sanitizeEvent(event) {
+        const kind = event["kind"];
+        if (typeof kind !== "string" || !(kind in ALLOWED_FIELDS_BY_KIND)) {
+            return {};
+        }
+        const allowed = ALLOWED_FIELDS_BY_KIND[kind];
+        const out = {};
+        for (const [k, v] of Object.entries(event)) {
+            if (allowed.has(k)) {
+                out[k] = this.walk(v, 0);
+            }
+        }
+        return out;
+    }
+}
+//# sourceMappingURL=sanitizer.js.map

package/dist/telemetry/sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizer.js","sourceRoot":"","sources":["../../src/telemetry/sanitizer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAkB,MAAM,mBAAmB,CAAC;AAE3E,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,+CAA+C;AAC/C,MAAM,QAAQ,GAA+C;IAC3D,+CAA+C;IAC/C,EAAE,EAAE,EAAE,iDAAiD,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACxF,EAAE,EAAE,EAAE,iCAAiC,EAAE,WAAW,EAAE,gBAAgB,EAAE;IACxE,oDAAoD;IACpD,EAAE,EAAE,EAAE,8CAA8C,EAAE,WAAW,EAAE,cAAc,EAAE;IACnF,kBAAkB;IAClB,EAAE,EAAE,EAAE,iDAAiD,EAAE,WAAW,EAAE,SAAS,EAAE;IACjF,mBAAmB;IACnB;QACE,EAAE,EAAE,mJAAmJ;QACvJ,WAAW,EAAE,WAAW;KACzB;IACD,QAAQ;IACR;QACE,EAAE,EAAE,kFAAkF;QACtF,WAAW,EAAE,QAAQ;KACtB;IACD,gBAAgB;IAChB,EAAE,EAAE,EAAE,wBAAwB,EAAE,WAAW,EAAE,QAAQ,EAAE;IACvD,sBAAsB;IACtB;QACE,EAAE,EAAE,mEAAmE;QACvE,WAAW,EAAE,QAAQ;KACtB;IACD,gFAAgF;IAChF,sFAAsF;IACtF;QACE,EAAE,EAAE,wIAAwI;QAC5I,WAAW,EAAE,SAAS;KACvB;CACF,CAAC;AAEF,SAAS,WAAW,CAAC,CAAS;IAC5B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC3C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,SAAS;IACpB,QAAQ,CAAC,KAAc;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAEO,IAAI,CAAC,KAAc,EAAE,KAAa;QACxC,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO,aAAa,CAAC;QAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACtE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,KAA8B;QAC1C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,sBAAsB,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAiB,CAAC,CAAC;QAC1D,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnB,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/telemetry/sinks.d.ts

@@ -0,0 +1,22 @@
+export interface TelemetrySink {
+    emit(event: Record<string, unknown>): Promise<void>;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare class NullSink implements TelemetrySink {
+    emit(): Promise<void>;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+}
+export declare class LocalFileSink implements TelemetrySink {
+    private readonly path;
+    private inited;
+    constructor(path: string);
+    private init;
+    emit(event: Record<string, unknown>): Promise<void>;
+    flush(): Promise<void>;
+    close(): Promise<void>;
+    purge(): Promise<void>;
+    getPath(): string;
+}
+//# sourceMappingURL=sinks.d.ts.map

package/dist/telemetry/sinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sinks.d.ts","sourceRoot":"","sources":["../../src/telemetry/sinks.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,qBAAa,QAAS,YAAW,aAAa;IACtC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAC7B;AAED,qBAAa,aAAc,YAAW,aAAa;IACjD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAS;IAC9B,OAAO,CAAC,MAAM,CAAS;gBAEX,IAAI,EAAE,MAAM;YAIV,IAAI;IAMZ,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAEtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAEtB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ5B,OAAO,IAAI,MAAM;CAGlB"}