@seamward/collector 0.1.0-alpha.2

package/dist/observe.d.ts

@@ -0,0 +1,110 @@
+import type { DeploymentContext, Json } from "@seamward/contracts";
+import { type ObservationInput, type BuilderDeps } from "./envelope-builder.js";
+import type { RedactionPolicy } from "./redact.js";
+import { type ShipperConfig, type ShipperStats } from "./shipper.js";
+/**
+ * The customer-facing surface. One collector per Integration boundary:
+ *
+ *   const collector = createCollector({ ... });
+ *   fastify.post("/webhooks/candidate", collector.observeWebhook(
+ *     { integrationId: "int_ats", routeTemplate: "/webhooks/candidate" },
+ *     async (payload) => { ...handle...; return { statusCode: 202 }; },
+ *   ));
+ *
+ * Fail-open everywhere: record() and the wrapper never throw Seamward
+ * errors into the host. A handler's own exception is recorded (500, not
+ * accepted) and RETHROWN - the host's error semantics are untouched.
+ */
+export interface CollectorConfig extends Pick<ShipperConfig, "endpoint" | "credentialId" | "secret" | "sourceKey" | "ingestToken" | "maxBatchSize" | "flushIntervalMs" | "maxQueueSize" | "fetchFn" | "nowSec"> {
+    tenantId: string;
+    environmentId: string;
+    policy: RedactionPolicy;
+    /** Explicit values override supported deployment-platform variables. */
+    deployment?: Partial<DeploymentContext>;
+    /** Injected clock/id for tests. */
+    builderDeps?: BuilderDeps;
+    /** Monotonic elapsed-time clock. Defaults to performance.now(). */
+    monotonicNowMs?: () => number;
+}
+export type RecordInput = Omit<ObservationInput, "tenantId" | "environmentId" | "deployment">;
+export interface WebhookMeta {
+    integrationId: string;
+    routeTemplate: string;
+    method?: ObservationInput["method"];
+    attempt?: number;
+    correlation?: ObservationInput["correlation"];
+}
+export interface WebhookResult {
+    statusCode?: number;
+    eventType?: ObservationInput["eventType"];
+    outcome?: ObservationInput["outcome"];
+    correlation?: ObservationInput["correlation"];
+}
+export interface FetchMeta {
+    integrationId: string;
+    /** Stable route template; never pass concrete IDs or query values. */
+    routeTemplate: string;
+    eventType?: ObservationInput["eventType"];
+    /** Overrides the request method when a Request-like input obscures it. */
+    method?: ObservationInput["method"];
+    attempt?: number;
+    correlation?: ObservationInput["correlation"];
+    /** Select request-side contract evidence instead of the response body. */
+    payloadLocation?: "request" | "response";
+    /**
+     * Optional local-only request value for body types that cannot be cloned or
+     * parsed safely. Values are never added to an envelope.
+     */
+    requestPayload?: Json;
+}
+export interface QueueMeta {
+    integrationId: string;
+    /** Stable queue, topic, or subscription label. Never use a message ID. */
+    queueName: string;
+    eventType?: ObservationInput["eventType"];
+    attempt?: number;
+    correlation?: ObservationInput["correlation"];
+}
+export interface QueueResult {
+    disposition?: "acknowledged" | "rejected";
+    eventType?: ObservationInput["eventType"];
+    outcome?: ObservationInput["outcome"];
+    correlation?: ObservationInput["correlation"];
+}
+export interface ScheduledFeedMeta {
+    integrationId: string;
+    /** Stable feed or job label. Never use a run ID or timestamp. */
+    feedName: string;
+    direction: ObservationInput["direction"];
+    eventType?: ObservationInput["eventType"];
+    attempt?: number;
+    correlation?: ObservationInput["correlation"];
+}
+export interface ScheduledFeedResult {
+    disposition?: "completed" | "rejected";
+    eventType?: ObservationInput["eventType"];
+    outcome?: ObservationInput["outcome"];
+    correlation?: ObservationInput["correlation"];
+}
+export type ObservedFetch = (input: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) => Promise<Response>;
+export interface CollectorStats extends ShipperStats {
+    buildErrors: number;
+}
+export interface Collector {
+    /** Record one observation. Never throws. */
+    record(input: RecordInput): void;
+    /** Wrap an inbound webhook handler; observation is recorded around it. */
+    observeWebhook<R extends WebhookResult | void>(meta: WebhookMeta, handler: (payload: Json) => R | Promise<R>): (payload: Json) => Promise<R>;
+    /** Wrap outbound HTTP calls without delaying response-body consumption. */
+    observeFetch(meta: FetchMeta, fetchFn?: typeof fetch): ObservedFetch;
+    /** Wrap an outbound queue publish. Host errors are recorded and rethrown. */
+    observeQueuePublish<R extends QueueResult | void>(meta: QueueMeta, publisher: (message: Json) => R | Promise<R>): (message: Json) => Promise<R>;
+    /** Wrap an inbound queue consumer. Rejections may be returned explicitly. */
+    observeQueueConsumer<R extends QueueResult | void>(meta: QueueMeta, consumer: (message: Json) => R | Promise<R>): (message: Json) => Promise<R>;
+    /** Wrap one scheduled import or export run. */
+    observeScheduledFeed<R extends ScheduledFeedResult | void>(meta: ScheduledFeedMeta, handler: (payload: Json) => R | Promise<R>): (payload: Json) => Promise<R>;
+    flush(): Promise<void>;
+    stop(): Promise<void>;
+    stats(): CollectorStats;
+}
+export declare function createCollector(config: CollectorConfig): Collector;

package/dist/observe.js

@@ -0,0 +1,294 @@
+import { resolveDeploymentContext } from "./deployment-context.js";
+import { buildEnvelope, } from "./envelope-builder.js";
+import { createShipper, } from "./shipper.js";
+export function createCollector(config) {
+    const { tenantId, environmentId, policy, deployment: explicitDeployment, builderDeps, monotonicNowMs: configuredMonotonicNowMs, ...shipperConfig } = config;
+    const deployment = resolveDeploymentContext(explicitDeployment);
+    const shipper = createShipper(shipperConfig);
+    let buildErrors = 0;
+    const pendingInspections = new Set();
+    const monotonicNowMs = configuredMonotonicNowMs ?? (() => performance.now());
+    function buildAndEnqueue(input) {
+        try {
+            shipper.enqueue(buildEnvelope({
+                ...input,
+                tenantId,
+                environmentId,
+                ...(deployment ? { deployment } : {}),
+            }, policy, builderDeps));
+        }
+        catch {
+            // Fail-open: a malformed observation must never break the host app.
+            buildErrors += 1;
+        }
+    }
+    function record(input) {
+        trackInspection(new Promise((resolve) => {
+            setTimeout(() => {
+                buildAndEnqueue(input);
+                resolve();
+            }, 0);
+        }));
+    }
+    function observeWebhook(meta, handler) {
+        return async (payload) => {
+            const startedAt = monotonicNowMs();
+            const base = {
+                integrationId: meta.integrationId,
+                direction: "inbound",
+                protocol: "http-webhook",
+                method: meta.method ?? "POST",
+                routeTemplate: meta.routeTemplate,
+                payload,
+                ...(meta.attempt !== undefined ? { attempt: meta.attempt } : {}),
+                ...(meta.correlation ? { correlation: meta.correlation } : {}),
+            };
+            try {
+                const result = await handler(payload);
+                record({
+                    ...base,
+                    statusCode: result?.statusCode ?? 200,
+                    durationMs: monotonicNowMs() - startedAt,
+                    ...(result?.eventType ? { eventType: result.eventType } : {}),
+                    ...(result?.outcome ? { outcome: result.outcome } : {}),
+                    ...(result?.correlation ? { correlation: result.correlation } : {}),
+                });
+                return result;
+            }
+            catch (error) {
+                record({
+                    ...base,
+                    statusCode: 500,
+                    durationMs: monotonicNowMs() - startedAt,
+                    outcome: { accepted: false },
+                });
+                throw error; // host error semantics untouched
+            }
+        };
+    }
+    function trackInspection(inspection) {
+        let tracked;
+        tracked = inspection
+            .catch(() => { })
+            .finally(() => {
+            pendingInspections.delete(tracked);
+        });
+        pendingInspections.add(tracked);
+    }
+    async function waitForInspections() {
+        while (pendingInspections.size > 0) {
+            await Promise.all([...pendingInspections]);
+        }
+    }
+    function observeFetch(meta, providerFetch = fetch) {
+        return async (input, init) => {
+            const startedAt = monotonicNowMs();
+            const payloadLocation = meta.payloadLocation ?? "response";
+            const requestInspection = payloadLocation === "request"
+                ? prepareRequestPayloadInspection(input, init, meta.requestPayload)
+                : undefined;
+            const requestedMethod = meta.method ??
+                init?.method ??
+                (typeof Request !== "undefined" && input instanceof Request
+                    ? input.method
+                    : "GET");
+            const method = requestedMethod.toUpperCase();
+            const base = {
+                integrationId: meta.integrationId,
+                direction: "outbound",
+                protocol: "http-api",
+                method,
+                routeTemplate: meta.routeTemplate,
+                ...(meta.eventType ? { eventType: meta.eventType } : {}),
+                ...(meta.attempt !== undefined ? { attempt: meta.attempt } : {}),
+                ...(meta.correlation ? { correlation: meta.correlation } : {}),
+            };
+            let response;
+            try {
+                response = await providerFetch(input, init);
+            }
+            catch (error) {
+                const durationMs = monotonicNowMs() - startedAt;
+                if (requestInspection) {
+                    trackInspection(requestInspection.then((payload) => {
+                        record({
+                            ...base,
+                            payloadLocation,
+                            statusCode: 0,
+                            durationMs,
+                            ...(payload !== undefined ? { payload } : {}),
+                            outcome: { accepted: false },
+                        });
+                    }));
+                }
+                else {
+                    record({
+                        ...base,
+                        payloadLocation,
+                        statusCode: 0,
+                        durationMs,
+                        outcome: { accepted: false },
+                    });
+                }
+                throw error;
+            }
+            const durationMs = monotonicNowMs() - startedAt;
+            // Clone and inspect asynchronously. The original response is returned as
+            // soon as the provider fetch resolves, preserving host response timing.
+            trackInspection(Promise.resolve().then(async () => {
+                let payload;
+                try {
+                    payload =
+                        payloadLocation === "request"
+                            ? await requestInspection
+                            : (await response.clone().json());
+                }
+                catch {
+                    // Empty or non-JSON responses still produce transport evidence.
+                }
+                record({
+                    ...base,
+                    payloadLocation,
+                    statusCode: response.status,
+                    durationMs,
+                    ...(payload !== undefined ? { payload } : {}),
+                    outcome: { accepted: response.ok },
+                });
+            }));
+            return response;
+        };
+    }
+    function observeQueue(direction, meta, handler) {
+        return async (message) => {
+            const startedAt = monotonicNowMs();
+            const base = {
+                integrationId: meta.integrationId,
+                direction,
+                protocol: "queue",
+                method: "POST",
+                routeTemplate: meta.queueName,
+                payloadLocation: "message",
+                payload: message,
+                ...(meta.eventType ? { eventType: meta.eventType } : {}),
+                ...(meta.attempt !== undefined ? { attempt: meta.attempt } : {}),
+                ...(meta.correlation ? { correlation: meta.correlation } : {}),
+            };
+            try {
+                const result = await handler(message);
+                const rejected = result?.disposition === "rejected";
+                record({
+                    ...base,
+                    statusCode: rejected ? 422 : 202,
+                    durationMs: monotonicNowMs() - startedAt,
+                    ...(result?.eventType ? { eventType: result.eventType } : {}),
+                    ...(result?.correlation ? { correlation: result.correlation } : {}),
+                    outcome: result?.outcome ?? { accepted: !rejected },
+                });
+                return result;
+            }
+            catch (error) {
+                record({
+                    ...base,
+                    statusCode: 500,
+                    durationMs: monotonicNowMs() - startedAt,
+                    outcome: { accepted: false },
+                });
+                throw error;
+            }
+        };
+    }
+    function observeQueuePublish(meta, publisher) {
+        return observeQueue("outbound", meta, publisher);
+    }
+    function observeQueueConsumer(meta, consumer) {
+        return observeQueue("inbound", meta, consumer);
+    }
+    function observeScheduledFeed(meta, handler) {
+        return async (payload) => {
+            const startedAt = monotonicNowMs();
+            const base = {
+                integrationId: meta.integrationId,
+                direction: meta.direction,
+                protocol: "scheduled-feed",
+                method: "POST",
+                routeTemplate: meta.feedName,
+                payloadLocation: "message",
+                payload,
+                ...(meta.eventType ? { eventType: meta.eventType } : {}),
+                ...(meta.attempt !== undefined ? { attempt: meta.attempt } : {}),
+                ...(meta.correlation ? { correlation: meta.correlation } : {}),
+            };
+            try {
+                const result = await handler(payload);
+                const rejected = result?.disposition === "rejected";
+                record({
+                    ...base,
+                    statusCode: rejected ? 422 : 200,
+                    durationMs: monotonicNowMs() - startedAt,
+                    ...(result?.eventType ? { eventType: result.eventType } : {}),
+                    ...(result?.correlation ? { correlation: result.correlation } : {}),
+                    outcome: result?.outcome ?? { accepted: !rejected },
+                });
+                return result;
+            }
+            catch (error) {
+                record({
+                    ...base,
+                    statusCode: 500,
+                    durationMs: monotonicNowMs() - startedAt,
+                    outcome: { accepted: false },
+                });
+                throw error;
+            }
+        };
+    }
+    return {
+        record,
+        observeWebhook,
+        observeFetch,
+        observeQueuePublish,
+        observeQueueConsumer,
+        observeScheduledFeed,
+        async flush() {
+            await waitForInspections();
+            await shipper.flush();
+        },
+        async stop() {
+            await waitForInspections();
+            await shipper.stop();
+        },
+        stats: () => ({ ...shipper.stats(), buildErrors }),
+    };
+}
+function prepareRequestPayloadInspection(input, init, explicitPayload) {
+    if (explicitPayload !== undefined)
+        return Promise.resolve(explicitPayload);
+    if (typeof init?.body === "string") {
+        return Promise.resolve().then(() => {
+            try {
+                return JSON.parse(init.body);
+            }
+            catch {
+                return undefined;
+            }
+        });
+    }
+    if (typeof Request !== "undefined" && input instanceof Request) {
+        try {
+            const requestClone = input.clone();
+            return Promise.resolve().then(async () => {
+                try {
+                    return (await requestClone.json());
+                }
+                catch {
+                    return undefined;
+                }
+            });
+        }
+        catch {
+            return Promise.resolve(undefined);
+        }
+    }
+    return Promise.resolve(undefined);
+}
+//# sourceMappingURL=observe.js.map

package/dist/observe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observe.js","sourceRoot":"","sources":["../src/observe.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,aAAa,GAGd,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,aAAa,GAGd,MAAM,cAAc,CAAC;AAsJtB,MAAM,UAAU,eAAe,CAAC,MAAuB;IACrD,MAAM,EACJ,QAAQ,EACR,aAAa,EACb,MAAM,EACN,UAAU,EAAE,kBAAkB,EAC9B,WAAW,EACX,cAAc,EAAE,wBAAwB,EACxC,GAAG,aAAa,EACjB,GAAG,MAAM,CAAC;IACX,MAAM,UAAU,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IAC7C,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEpD,MAAM,cAAc,GAAG,wBAAwB,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAE7E,SAAS,eAAe,CAAC,KAAkB;QACzC,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CACb,aAAa,CACX;gBACE,GAAG,KAAK;gBACR,QAAQ;gBACR,aAAa;gBACb,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtC,EACD,MAAM,EACN,WAAW,CACZ,CACF,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,WAAW,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,SAAS,MAAM,CAAC,KAAkB;QAChC,eAAe,CACb,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5B,UAAU,CAAC,GAAG,EAAE;gBACd,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvB,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,SAAS,cAAc,CACrB,IAAiB,EACjB,OAA0C;QAE1C,OAAO,KAAK,EAAE,OAAa,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,SAAS,EAAE,SAAkB;gBAC7B,QAAQ,EAAE,cAAuB;gBACjC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAK,MAAgB;gBACxC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,OAAO;gBACP,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,MAAM,EAAE,UAAU,IAAI,GAAG;oBACrC,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvD,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpE,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAC7B,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC,CAAC,iCAAiC;YAChD,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,eAAe,CAAC,UAAyB;QAChD,IAAI,OAAsB,CAAC;QAC3B,OAAO,GAAG,UAAU;aACjB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,OAAO,CAAC,GAAG,EAAE;YACZ,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;QACL,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,KAAK,UAAU,kBAAkB;QAC/B,OAAO,kBAAkB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,SAAS,YAAY,CACnB,IAAe,EACf,gBAA8B,KAAK;QAEnC,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC3B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,UAAU,CAAC;YAC3D,MAAM,iBAAiB,GACrB,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,+BAA+B,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,cAAc,CAAC;gBACnE,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,eAAe,GACnB,IAAI,CAAC,MAAM;gBACX,IAAI,EAAE,MAAM;gBACZ,CAAC,OAAO,OAAO,KAAK,WAAW,IAAI,KAAK,YAAY,OAAO;oBACzD,CAAC,CAAC,KAAK,CAAC,MAAM;oBACd,CAAC,CAAC,KAAK,CAAC,CAAC;YACb,MAAM,MAAM,GACV,eAAe,CAAC,WAAW,EAAgC,CAAC;YAC9D,MAAM,IAAI,GAAG;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,SAAS,EAAE,UAAmB;gBAC9B,QAAQ,EAAE,UAAmB;gBAC7B,MAAM;gBACN,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;YAEF,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,UAAU,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC;gBAChD,IAAI,iBAAiB,EAAE,CAAC;oBACtB,eAAe,CACb,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;wBACjC,MAAM,CAAC;4BACL,GAAG,IAAI;4BACP,eAAe;4BACf,UAAU,EAAE,CAAC;4BACb,UAAU;4BACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;yBAC7B,CAAC,CAAC;oBACL,CAAC,CAAC,CACH,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC;wBACL,GAAG,IAAI;wBACP,eAAe;wBACf,UAAU,EAAE,CAAC;wBACb,UAAU;wBACV,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;qBAC7B,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YAED,MAAM,UAAU,GAAG,cAAc,EAAE,GAAG,SAAS,CAAC;YAChD,yEAAyE;YACzE,wEAAwE;YACxE,eAAe,CACb,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBAChC,IAAI,OAAyB,CAAC;gBAC9B,IAAI,CAAC;oBACH,OAAO;wBACL,eAAe,KAAK,SAAS;4BAC3B,CAAC,CAAC,MAAM,iBAAiB;4BACzB,CAAC,CAAE,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAU,CAAC;gBAClD,CAAC;gBAAC,MAAM,CAAC;oBACP,gEAAgE;gBAClE,CAAC;gBACD,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,eAAe;oBACf,UAAU,EAAE,QAAQ,CAAC,MAAM;oBAC3B,UAAU;oBACV,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC;YAEF,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,YAAY,CACnB,SAAiC,EACjC,IAAe,EACf,OAA0C;QAE1C,OAAO,KAAK,EAAE,OAAa,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,SAAS;gBACT,QAAQ,EAAE,OAAgB;gBAC1B,MAAM,EAAE,MAAe;gBACvB,aAAa,EAAE,IAAI,CAAC,SAAS;gBAC7B,eAAe,EAAE,SAAkB;gBACnC,OAAO,EAAE,OAAO;gBAChB,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,WAAW,KAAK,UAAU,CAAC;gBACpD,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAChC,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAC7B,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,mBAAmB,CAC1B,IAAe,EACf,SAA4C;QAE5C,OAAO,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACnD,CAAC;IAED,SAAS,oBAAoB,CAC3B,IAAe,EACf,QAA2C;QAE3C,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,SAAS,oBAAoB,CAC3B,IAAuB,EACvB,OAA0C;QAE1C,OAAO,KAAK,EAAE,OAAa,EAAE,EAAE;YAC7B,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG;gBACX,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,gBAAyB;gBACnC,MAAM,EAAE,MAAe;gBACvB,aAAa,EAAE,IAAI,CAAC,QAAQ;gBAC5B,eAAe,EAAE,SAAkB;gBACnC,OAAO;gBACP,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,QAAQ,GAAG,MAAM,EAAE,WAAW,KAAK,UAAU,CAAC;gBACpD,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;oBAChC,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC7D,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnE,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE;iBACpD,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC;oBACL,GAAG,IAAI;oBACP,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,cAAc,EAAE,GAAG,SAAS;oBACxC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;iBAC7B,CAAC,CAAC;gBACH,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,cAAc;QACd,YAAY;QACZ,mBAAmB;QACnB,oBAAoB;QACpB,oBAAoB;QACpB,KAAK,CAAC,KAAK;YACT,MAAM,kBAAkB,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,kBAAkB,EAAE,CAAC;YAC3B,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,WAAW,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,KAAkC,EAClC,IAAiC,EACjC,eAAiC;IAEjC,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAE3E,IAAI,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAS,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,KAAK,YAAY,OAAO,EAAE,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YACnC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;gBACvC,IAAI,CAAC;oBACH,OAAO,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,CAAS,CAAC;gBAC7C,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,31 @@
+import type { Json } from "@seamward/contracts";
+/**
+ * Collector-side redaction - runs BEFORE anything leaves the customer process.
+ *
+ * Invariant (grep-provable across the codebase): raw payload bodies, credential
+ * headers, and configured sensitive fields never appear in an envelope. The
+ * collector transmits structure and keyed hashes, not content.
+ */
+/** Headers dropped unconditionally, whatever the policy says. */
+export declare const ALWAYS_DROPPED_HEADERS: readonly ["authorization", "proxy-authorization", "cookie", "set-cookie", "x-api-key"];
+export interface RedactionPolicy {
+    /** Policy identifier stamped into every envelope for auditability. */
+    version: string;
+    /** Non-secret key generation identifier. Derived from hashKey when omitted. */
+    hashNamespace?: string;
+    /** Case-insensitive field names whose values are dropped entirely. */
+    dropFields: string[];
+    /** Case-insensitive field names whose values are replaced by keyed hashes. */
+    hashFields: string[];
+    /** Key for hashing identifiers (NOT a secret shared with Seamward). */
+    hashKey: string;
+}
+export declare function keyedHash(value: string, key: string): string;
+/** Drop always-dropped + policy headers from a header map (case-insensitive). */
+export declare function redactHeaders(headers: Record<string, string>, policy: RedactionPolicy): Record<string, string>;
+/**
+ * Apply a redaction policy to a JSON payload, recursively:
+ * - dropFields are removed wherever they appear
+ * - hashFields are replaced with keyed hashes of their string form
+ */
+export declare function redactPayload(value: Json, policy: RedactionPolicy): Json;

package/dist/redact.js

@@ -0,0 +1,61 @@
+import { createHash } from "node:crypto";
+/**
+ * Collector-side redaction - runs BEFORE anything leaves the customer process.
+ *
+ * Invariant (grep-provable across the codebase): raw payload bodies, credential
+ * headers, and configured sensitive fields never appear in an envelope. The
+ * collector transmits structure and keyed hashes, not content.
+ */
+/** Headers dropped unconditionally, whatever the policy says. */
+export const ALWAYS_DROPPED_HEADERS = [
+    "authorization",
+    "proxy-authorization",
+    "cookie",
+    "set-cookie",
+    "x-api-key",
+];
+export function keyedHash(value, key) {
+    return `sha256:${createHash("sha256").update(`${key}:${value}`, "utf8").digest("hex")}`;
+}
+/** Drop always-dropped + policy headers from a header map (case-insensitive). */
+export function redactHeaders(headers, policy) {
+    const dropped = new Set([
+        ...ALWAYS_DROPPED_HEADERS,
+        ...policy.dropFields.map((f) => f.toLowerCase()),
+    ]);
+    const out = {};
+    for (const [k, v] of Object.entries(headers)) {
+        if (!dropped.has(k.toLowerCase()))
+            out[k] = v;
+    }
+    return out;
+}
+/**
+ * Apply a redaction policy to a JSON payload, recursively:
+ * - dropFields are removed wherever they appear
+ * - hashFields are replaced with keyed hashes of their string form
+ */
+export function redactPayload(value, policy) {
+    const drop = new Set(policy.dropFields.map((f) => f.toLowerCase()));
+    const hash = new Set(policy.hashFields.map((f) => f.toLowerCase()));
+    const walk = (v) => {
+        if (v === null || typeof v !== "object")
+            return v;
+        if (Array.isArray(v))
+            return v.map(walk);
+        const out = {};
+        for (const [k, child] of Object.entries(v)) {
+            const key = k.toLowerCase();
+            if (drop.has(key))
+                continue;
+            if (hash.has(key)) {
+                out[k] = keyedHash(typeof child === "string" ? child : JSON.stringify(child), policy.hashKey);
+                continue;
+            }
+            out[k] = walk(child);
+        }
+        return out;
+    };
+    return walk(value);
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC;;;;;;GAMG;AAEH,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,eAAe;IACf,qBAAqB;IACrB,QAAQ;IACR,YAAY;IACZ,WAAW;CACH,CAAC;AAeX,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,GAAW;IAClD,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAC3B,OAA+B,EAC/B,MAAuB;IAEvB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAS;QAC9B,GAAG,sBAAsB;QACzB,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KACjD,CAAC,CAAC;IACH,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAW,EAAE,MAAuB;IAChE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAEpE,MAAM,IAAI,GAAG,CAAC,CAAO,EAAQ,EAAE;QAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAChB,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EACzD,MAAM,CAAC,OAAO,CACf,CAAC;gBACF,SAAS;YACX,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAa,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;AACrB,CAAC"}

package/dist/shipper.d.ts

@@ -0,0 +1,48 @@
+import { type ObservationEnvelope } from "@seamward/contracts";
+/**
+ * Batched, signed, FAIL-OPEN envelope shipping.
+ *
+ * The collector runs inside the CUSTOMER'S process. The prime directive is
+ * that Seamward being slow, down, or misconfigured must never affect the
+ * host application:
+ * - enqueue() never throws and never blocks.
+ * - Shipping failures are counted and retried on the next flush - never
+ *   surfaced as exceptions to the host.
+ * - Bounded memory: when the queue exceeds maxQueueSize, the OLDEST
+ *   envelopes are dropped (drop-oldest) and counted. Losing telemetry is
+ *   acceptable; growing the customer's heap is not.
+ *
+ * Batches are signed with the collector credential (t=,v1= HMAC scheme from
+ * @seamward/contracts) so ingest can authenticate and replay-protect.
+ */
+export interface ShipperConfig {
+    endpoint: string;
+    /** Current write-only ingestion authentication. */
+    sourceKey?: string;
+    ingestToken?: string;
+    /** Legacy connection-bundle authentication. */
+    credentialId?: string;
+    secret?: string;
+    maxBatchSize?: number;
+    flushIntervalMs?: number;
+    maxQueueSize?: number;
+    /** Injected for tests. Defaults: globalThis.fetch / Date.now. */
+    fetchFn?: typeof fetch;
+    nowSec?: () => number;
+}
+export interface ShipperStats {
+    enqueued: number;
+    shipped: number;
+    dropped: number;
+    failedBatches: number;
+    queueLength: number;
+}
+export interface Shipper {
+    enqueue(envelope: ObservationEnvelope): void;
+    /** Ship everything currently queued. Resolves when done; never rejects. */
+    flush(): Promise<void>;
+    /** Stop the interval timer and flush once. Never rejects. */
+    stop(): Promise<void>;
+    stats(): ShipperStats;
+}
+export declare function createShipper(config: ShipperConfig): Shipper;

package/dist/shipper.js

@@ -0,0 +1,79 @@
+import { signBody } from "@seamward/contracts";
+export function createShipper(config) {
+    const fetchFn = config.fetchFn ?? fetch;
+    const nowSec = config.nowSec ?? (() => Math.floor(Date.now() / 1000));
+    const maxBatchSize = config.maxBatchSize ?? 50;
+    const maxQueueSize = config.maxQueueSize ?? 1000;
+    const flushIntervalMs = config.flushIntervalMs ?? 5_000;
+    let queue = [];
+    const stats = { enqueued: 0, shipped: 0, dropped: 0, failedBatches: 0 };
+    // Serialise flushes: concurrent callers await the same chain, batches
+    // never interleave, and a rejection can never escape (fail-open).
+    let chain = Promise.resolve();
+    const timer = setInterval(() => {
+        void flush();
+    }, flushIntervalMs);
+    // Never keep the customer's process alive just for telemetry.
+    timer.unref?.();
+    async function shipQueued() {
+        while (queue.length > 0) {
+            const batch = queue.slice(0, maxBatchSize);
+            const body = JSON.stringify({ envelopes: batch });
+            try {
+                const signingSecret = config.ingestToken ?? config.secret;
+                if (!signingSecret)
+                    throw new Error("collector authentication is required");
+                const response = await fetchFn(config.endpoint, {
+                    method: "POST",
+                    headers: {
+                        "content-type": "application/json",
+                        ...(config.sourceKey && config.ingestToken
+                            ? {
+                                authorization: `Bearer ${config.ingestToken}`,
+                                "x-seamward-source": config.sourceKey,
+                            }
+                            : config.credentialId
+                                ? { "x-seamward-credential": config.credentialId }
+                                : {}),
+                        "x-seamward-signature": signBody(body, signingSecret, nowSec()),
+                    },
+                    body,
+                });
+                if (!response.ok) {
+                    stats.failedBatches += 1;
+                    return; // keep the batch queued; retry on next flush
+                }
+                queue = queue.slice(batch.length);
+                stats.shipped += batch.length;
+            }
+            catch {
+                stats.failedBatches += 1;
+                return; // fail-open: never throw into the host app
+            }
+        }
+    }
+    function flush() {
+        chain = chain.then(shipQueued).catch(() => { });
+        return chain;
+    }
+    return {
+        enqueue(envelope) {
+            stats.enqueued += 1;
+            queue.push(envelope);
+            const overflow = queue.length - maxQueueSize;
+            if (overflow > 0) {
+                queue.splice(0, overflow);
+                stats.dropped += overflow;
+            }
+        },
+        flush,
+        async stop() {
+            clearInterval(timer);
+            await flush();
+        },
+        stats() {
+            return { ...stats, queueLength: queue.length };
+        },
+    };
+}
+//# sourceMappingURL=shipper.js.map

package/dist/shipper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipper.js","sourceRoot":"","sources":["../src/shipper.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA4B,MAAM,qBAAqB,CAAC;AAoDzE,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,IAAI,IAAI,CAAC;IACjD,MAAM,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,KAAK,CAAC;IAExD,IAAI,KAAK,GAA0B,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAExE,sEAAsE;IACtE,kEAAkE;IAClE,IAAI,KAAK,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAE7C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC7B,KAAK,KAAK,EAAE,CAAC;IACf,CAAC,EAAE,eAAe,CAAC,CAAC;IACpB,8DAA8D;IAC7D,KAA2C,CAAC,KAAK,EAAE,EAAE,CAAC;IAEvD,KAAK,UAAU,UAAU;QACvB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;YAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC;gBAC1D,IAAI,CAAC,aAAa;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC5E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAC9C,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW;4BACxC,CAAC,CAAC;gCACE,aAAa,EAAE,UAAU,MAAM,CAAC,WAAW,EAAE;gCAC7C,mBAAmB,EAAE,MAAM,CAAC,SAAS;6BACtC;4BACH,CAAC,CAAC,MAAM,CAAC,YAAY;gCACnB,CAAC,CAAC,EAAE,uBAAuB,EAAE,MAAM,CAAC,YAAY,EAAE;gCAClD,CAAC,CAAC,EAAE,CAAC;wBACT,sBAAsB,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;qBAChE;oBACD,IAAI;iBACL,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;oBACzB,OAAO,CAAC,6CAA6C;gBACvD,CAAC;gBACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAClC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;gBACzB,OAAO,CAAC,2CAA2C;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED,SAAS,KAAK;QACZ,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO;QACL,OAAO,CAAC,QAAQ;YACd,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACpB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC;YAC7C,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACjB,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBAC1B,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,KAAK;QACL,KAAK,CAAC,IAAI;YACR,aAAa,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,KAAK;YACH,OAAO,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC"}