@sfdxy/anypoint-connect 0.14.0 → 0.16.2

package/README.md

@@ -63,16 +63,29 @@ release does not support the `client_credentials` grant, and its encrypted token
 
 | Area | Examples |
 | --- | --- |
-| Applications | Status, deployment spec, resources, settings, deploy, redeploy, rollback, restart, scale, stop, start, delete |
-| Logs | Tail, download, error clustering with context, recurring patterns, statistical health |
-| Monitoring | Request metrics, percentiles, time series, per-replica metrics, JVM memory and GC, freeform AMQL |
-| Exchange | Search, asset details, spec download, JAR publication, environment comparison |
-| API Manager | Instances, policies, SLA tiers, alerts |
-| Design Center | Projects, branches, conflict-safe file synchronization, governed publication |
+| Applications | Status with a start-up-aware phase, deployment spec, resources, cross-environment comparison, publish and deploy a JAR, one-call `update_app` (version, runtime, settings and update strategy, in place or stop-then-start), runtime catalogs with retired-runtime refusal, asset naming conventions, rollback, restart, scale, stop, start, delete, and a check of what runs against a repo or JAR |
+| Settings | Add, change, remove and move properties; secret values read from project files or environment variables; secret-looking plain values masked and flagged |
+| Logs | Tail, search over message, logger and stack trace, download with filters, summaries and file output, error clustering with context, recurring patterns, log health statistics |
+| Monitoring | Traffic, failures, and p50–p99 latency per app, worker, or route; heap, old-generation pressure, GC, CPU, and RAM per worker; time series from 1-minute to 1-day buckets; freeform AMQL |
+| Exchange | Search, asset details, spec download, application JAR publication |
+| API Manager and Governance | Instances, policies, SLA tiers, alerts, contracts, client applications with masked credentials, smoke tests with the client's credentials, governance rulesets and conformance |
+| Design Center | Projects, branches, file reads, preview-then-apply file sync, verified Exchange publication |
 | Platform services | Environments, entitlements, audit log, Anypoint MQ, Object Store v2 |
 
+New in 0.16, each with a recipe:
+
+- `update_app` with `mode: "stopStart"`: [deploy a listener-driven app without overlap](https://avinava.github.io/anypoint-connect/recipes/#deploy-a-listener-driven-app-without-overlap)
+- `list_runtime_versions`: [move an app off a retired runtime](https://avinava.github.io/anypoint-connect/recipes/#move-an-app-off-a-retired-runtime)
+- `securePropertiesFrom`: [add or rotate one secret](https://avinava.github.io/anypoint-connect/recipes/#add-or-rotate-one-secret)
+- `moveToSecure`: [move a plain-text secret to secure](https://avinava.github.io/anypoint-connect/recipes/#move-a-plain-text-secret-to-secure)
+- `compare_deployed_artifact`: [check that a repository matches what runs](https://avinava.github.io/anypoint-connect/recipes/#check-that-a-repository-matches-what-runs)
+- `smoke_test_api`: [smoke test an API with its client credentials](https://avinava.github.io/anypoint-connect/recipes/#smoke-test-an-api-with-its-client-credentials)
+- `download_logs` summary and `outputFile`: [keep log downloads small](https://avinava.github.io/anypoint-connect/recipes/#keep-log-downloads-small)
+
 Copyable task flows are in [Common recipes](https://avinava.github.io/anypoint-connect/recipes/); every CLI
-command is in the [CLI reference](https://avinava.github.io/anypoint-connect/cli-reference/).
+command is in the [CLI reference](https://avinava.github.io/anypoint-connect/cli-reference/), every MCP tool
+in the [tool catalog](https://avinava.github.io/anypoint-connect/tools/), and how to read runtime metrics in
+[Monitoring](https://avinava.github.io/anypoint-connect/monitoring/).
 
 ## MCP server
 
@@ -84,7 +97,7 @@ OAuth tokens; it sends tool calls to the local server that owns the session.
   "mcpServers": {
     "anypoint-connect": {
       "command": "npx",
-      "args": ["-y", "@sfdxy/anypoint-connect@0.14.0", "mcp"]
+      "args": ["-y", "@sfdxy/anypoint-connect@0.16.2", "mcp"]
     }
   }
 }
@@ -99,33 +112,43 @@ Example requests use synthetic names:
 ```text
 What applications are visible in Sandbox? Read only.
 Analyze errors for sample-orders-api in Sandbox over the last two hours.
+Is the old generation of sample-orders-api in Production close to its limit?
 Preview a deployment of target/sample-orders-api-1.3.0-mule-application.jar to Sandbox; do not apply it.
 ```
 
 ## Safety
 
-Mutating MCP tools are previews until `confirm: true` is supplied. Artifact updates preserve runtime,
-target, replicas, and settings. Deletion requires the deployment ID returned by the preview, and
-production operations require an additional acknowledgement.
+Every MCP write tool returns a preview first and changes nothing until it is called again with
+`confirm: true`; in production it also needs `confirmProduction: true`. `anc deploy --dry-run` and
+`anc apps update --dry-run` print the same plan.
+Publishing binds the JAR's SHA-256. A change to an existing app is one update that carries only what you
+asked to change, with the runtime checked against the target first. Secret values come from project files
+or environment variables, never the conversation. Deletion requires the deployment ID returned by the
+preview, and Design Center writes require a single-use preview token.
 
 ```jsonc
 // Preview only
-update_app_artifact({
-  "appName": "sample-orders-api",
+update_app({
+  "appName": "orders-sapi",
   "environment": "Sandbox",
-  "version": "1.3.0"
+  "version": "1.3.0",
+  "mode": "stopStart"
 })
 
 // Apply the reviewed change
-update_app_artifact({
-  "appName": "sample-orders-api",
+update_app({
+  "appName": "orders-sapi",
   "environment": "Sandbox",
   "version": "1.3.0",
+  "mode": "stopStart",
   "confirm": true
 })
 ```
 
 The complete contract is in the [safety model](https://avinava.github.io/anypoint-connect/safety/).
+Upgrading from 0.15? The
+[migration tables](https://github.com/Avinava/anypoint-connect/blob/main/CHANGELOG.md#migration-from-015x)
+list every changed tool, command and library call.
 
 ## Library
 

package/dist/analysis/LogAnalyzer.d.ts

@@ -9,18 +9,24 @@
  *  - error-context.ts  — Error context window builder
  *  - error-grouper.ts  — Clusters similar errors
  *  - pattern-detector.ts — Identifies recurring message templates
- *  - stats.ts          — Level distribution, error rate, spike detection
+ *  - stats.ts          — Level distribution, error rate, spike detection, histogram
+ *  - filter.ts         - Time, level, logger and text filters shared by every log surface
  */
 export type { EnrichedLogEntry, ErrorWithContext, ErrorGroup, LogPattern, ErrorSpike, LogStats, AnalysisOptions, AnalysisResult, } from './types.js';
 export { parseRawLogs } from './parser.js';
 export { buildErrorContexts } from './error-context.js';
 export { groupErrors } from './error-grouper.js';
 export { detectPatterns } from './pattern-detector.js';
-export { calculateStats } from './stats.js';
-export { templatize, isNoise, LEVEL_PRIORITY } from './utils.js';
+export { calculateStats, histogram, topCounts, BUCKETS, type Bucket, type HistogramBucket } from './stats.js';
+export { templatize, isNoise, LEVEL_PRIORITY } from './normalize.js';
+export { buildFilter, filterEntries, searchEntries, entryText, clampLimit, MAX_LOG_LINES, type LogFilter, type LogSearchOptions, type LogSearchResult, } from './filter.js';
+export { summarizeEntries, formatEntry, formatEntries, MAX_HISTOGRAM_ROWS, type LogSummary, type SummaryOptions, } from './summary.js';
 import type { AnalysisOptions, AnalysisResult } from './types.js';
 /**
- * Full analysis pipeline: parse → enrich → context → group → pattern → stats.
+ * Full analysis pipeline: parse → filter → context → group → pattern → stats.
+ * The time window applies to everything. Level, logger and search select the entries
+ * that are counted and analyzed as errors; error context still comes from every entry
+ * in the window, so a filtered error keeps the lines that led up to it.
  */
 export declare function analyzeLogs(rawText: string, options?: AnalysisOptions): AnalysisResult;
 //# sourceMappingURL=LogAnalyzer.d.ts.map

package/dist/analysis/LogAnalyzer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LogAnalyzer.d.ts","sourceRoot":"","sources":["../../src/analysis/LogAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,YAAY,EACR,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,cAAc,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjE,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAQlE;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,cAAc,CAsC1F"}
+{"version":3,"file":"LogAnalyzer.d.ts","sourceRoot":"","sources":["../../src/analysis/LogAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,YAAY,EACR,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,UAAU,EACV,QAAQ,EACR,eAAe,EACf,cAAc,GACjB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,eAAe,EAAE,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EACH,WAAW,EACX,aAAa,EACb,aAAa,EACb,SAAS,EACT,UAAU,EACV,aAAa,EACb,KAAK,SAAS,EACd,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACvB,MAAM,aAAa,CAAC;AAErB,OAAO,EACH,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,kBAAkB,EAClB,KAAK,UAAU,EACf,KAAK,cAAc,GACtB,MAAM,cAAc,CAAC;AAGtB,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AASlE;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,cAAc,CA2C1F"}

package/dist/analysis/LogAnalyzer.js

@@ -9,42 +9,53 @@
  *  - error-context.ts  — Error context window builder
  *  - error-grouper.ts  — Clusters similar errors
  *  - pattern-detector.ts — Identifies recurring message templates
- *  - stats.ts          — Level distribution, error rate, spike detection
+ *  - stats.ts          — Level distribution, error rate, spike detection, histogram
+ *  - filter.ts         - Time, level, logger and text filters shared by every log surface
  */
 // Re-export individual modules for direct use
 export { parseRawLogs } from './parser.js';
 export { buildErrorContexts } from './error-context.js';
 export { groupErrors } from './error-grouper.js';
 export { detectPatterns } from './pattern-detector.js';
-export { calculateStats } from './stats.js';
-export { templatize, isNoise, LEVEL_PRIORITY } from './utils.js';
-import { LEVEL_PRIORITY } from './utils.js';
+export { calculateStats, histogram, topCounts, BUCKETS } from './stats.js';
+export { templatize, isNoise, LEVEL_PRIORITY } from './normalize.js';
+export { buildFilter, filterEntries, searchEntries, entryText, clampLimit, MAX_LOG_LINES, } from './filter.js';
+export { summarizeEntries, formatEntry, formatEntries, MAX_HISTOGRAM_ROWS, } from './summary.js';
 import { parseRawLogs } from './parser.js';
 import { buildErrorContexts } from './error-context.js';
 import { groupErrors } from './error-grouper.js';
 import { detectPatterns } from './pattern-detector.js';
 import { calculateStats } from './stats.js';
+import { buildFilter, levelPriority } from './filter.js';
+import { LEVEL_PRIORITY } from './normalize.js';
 /**
- * Full analysis pipeline: parse → enrich → context → group → pattern → stats.
+ * Full analysis pipeline: parse → filter → context → group → pattern → stats.
+ * The time window applies to everything. Level, logger and search select the entries
+ * that are counted and analyzed as errors; error context still comes from every entry
+ * in the window, so a filtered error keeps the lines that led up to it.
  */
 export function analyzeLogs(rawText, options = {}) {
     const totalLines = rawText.split('\n').length;
     // 1. Parse and join multi-line entries
-    let entries = parseRawLogs(rawText);
-    // 2. Filter by time if requested
-    if (options.hoursBack) {
-        const cutoff = Date.now() - options.hoursBack * 60 * 60 * 1000;
-        entries = entries.filter((e) => e.timestamp >= cutoff);
-    }
-    // 3. Filter by level if requested
-    if (options.level) {
-        const minLevel = LEVEL_PRIORITY[options.level.toUpperCase()] ?? 0;
-        entries = entries.filter((e) => (LEVEL_PRIORITY[e.priority] ?? 0) >= minLevel);
-    }
-    // 4. Build error contexts
-    const errorContexts = buildErrorContexts(entries, {
+    const parsed = parseRawLogs(rawText);
+    // 2. Time window
+    const startTime = options.startTime ?? (options.hoursBack ? Date.now() - options.hoursBack * 60 * 60 * 1000 : undefined);
+    const inWindow = buildFilter({ startTime, endTime: options.endTime });
+    const windowed = parsed.filter(inWindow);
+    // 3. Level, logger and search
+    const selected = buildFilter({
+        level: options.level,
+        logger: options.logger,
+        search: options.search,
+        regex: options.regex,
+    });
+    const entries = windowed.filter(selected);
+    // 4. Build error contexts over the whole window
+    const minErrorLevel = levelPriority(options.errorLevel ?? 'ERROR');
+    const errorContexts = buildErrorContexts(windowed, {
         beforeCount: options.contextBefore,
         afterCount: options.contextAfter,
+        isError: (e) => (LEVEL_PRIORITY[e.priority] ?? 0) >= minErrorLevel && selected(e),
     });
     // 5. Group errors
     const errorGroups = groupErrors(errorContexts, {

package/dist/analysis/LogAnalyzer.js.map

@@ -1 +1 @@
-{"version":3,"file":"LogAnalyzer.js","sourceRoot":"","sources":["../../src/analysis/LogAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAcH,8CAA8C;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAIjE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,UAA2B,EAAE;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAE9C,uCAAuC;IACvC,IAAI,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEpC,iCAAiC;IACjC,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAC/D,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC;QAClE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC;IACnF,CAAC;IAED,0BAA0B;IAC1B,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,EAAE;QAC9C,WAAW,EAAE,OAAO,CAAC,aAAa;QAClC,UAAU,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,EAAE;QAC3C,SAAS,EAAE,OAAO,CAAC,cAAc;KACpC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE;QACrC,IAAI,EAAE,OAAO,CAAC,WAAW;KAC5B,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEzE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC"}
+{"version":3,"file":"LogAnalyzer.js","sourceRoot":"","sources":["../../src/analysis/LogAnalyzer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAcH,8CAA8C;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAqC,MAAM,YAAY,CAAC;AAC9G,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EACH,WAAW,EACX,aAAa,EACb,aAAa,EACb,SAAS,EACT,UAAU,EACV,aAAa,GAIhB,MAAM,aAAa,CAAC;AAErB,OAAO,EACH,gBAAgB,EAChB,WAAW,EACX,aAAa,EACb,kBAAkB,GAGrB,MAAM,cAAc,CAAC;AAItB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,OAAe,EAAE,UAA2B,EAAE;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAE9C,uCAAuC;IACvC,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,iBAAiB;IACjB,MAAM,SAAS,GACX,OAAO,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEzC,8BAA8B;IAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE1C,gDAAgD;IAChD,MAAM,aAAa,GAAG,aAAa,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC;IACnE,MAAM,aAAa,GAAG,kBAAkB,CAAC,QAAQ,EAAE;QAC/C,WAAW,EAAE,OAAO,CAAC,aAAa;QAClC,UAAU,EAAE,OAAO,CAAC,YAAY;QAChC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,aAAa,IAAI,QAAQ,CAAC,CAAC,CAAC;KACpF,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,WAAW,GAAG,WAAW,CAAC,aAAa,EAAE;QAC3C,SAAS,EAAE,OAAO,CAAC,cAAc;KACpC,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE;QACrC,IAAI,EAAE,OAAO,CAAC,WAAW;KAC5B,CAAC,CAAC;IAEH,qBAAqB;IACrB,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEzE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AACpE,CAAC"}

package/dist/analysis/error-context.d.ts

@@ -11,6 +11,8 @@ export interface ErrorContextOptions {
     afterCount?: number;
     /** Time window in ms for fallback mode (default: 30000) */
     timeWindowMs?: number;
+    /** Which entries count as errors (default: ERROR and FATAL) */
+    isError?: (entry: EnrichedLogEntry) => boolean;
 }
 /**
  * Build error context for all ERROR entries.

package/dist/analysis/error-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-context.d.ts","sourceRoot":"","sources":["../../src/analysis/error-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAChC,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,OAAO,GAAE,mBAAwB,GAAG,gBAAgB,EAAE,CAiDrH"}
+{"version":3,"file":"error-context.d.ts","sourceRoot":"","sources":["../../src/analysis/error-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,WAAW,mBAAmB;IAChC,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAAC;CAClD;AAID;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,OAAO,GAAE,mBAAwB,GAAG,gBAAgB,EAAE,CAiDrH"}

package/dist/analysis/error-context.js

@@ -3,6 +3,7 @@
  * Builds before/after context windows for ERROR entries.
  * Uses correlation-based context when available, time-window fallback otherwise.
  */
+const isErrorLevel = (entry) => entry.priority === 'ERROR' || entry.priority === 'FATAL';
 /**
  * Build error context for all ERROR entries.
  */
@@ -10,7 +11,7 @@ export function buildErrorContexts(entries, options = {}) {
     const beforeCount = options.beforeCount ?? 15;
     const afterCount = options.afterCount ?? 10;
     const timeWindowMs = options.timeWindowMs ?? 30000;
-    const errorEntries = entries.filter((e) => e.priority === 'ERROR');
+    const errorEntries = entries.filter(options.isError ?? isErrorLevel);
     const contexts = [];
     // Build correlation index for fast lookup
     const correlationIndex = new Map();

package/dist/analysis/error-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-context.js","sourceRoot":"","sources":["../../src/analysis/error-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAaH;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B,EAAE,UAA+B,EAAE;IAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IAEnD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,KAAK,GAAG,EAAE,CAAC;gBACX,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,MAA0B,CAAC;QAC/B,IAAI,KAAyB,CAAC;QAC9B,IAAI,aAAiC,CAAC;QAEtC,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,gEAAgE;YAChE,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACpC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;YACzE,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACJ,uBAAuB;YACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,GAAG,OAAO;iBACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC;iBACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;YAClE,KAAK,GAAG,OAAO;iBACV,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC;iBAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAA0B,EAAE,KAAuB;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC5B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC"}
+{"version":3,"file":"error-context.js","sourceRoot":"","sources":["../../src/analysis/error-context.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,MAAM,YAAY,GAAG,CAAC,KAAuB,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE3G;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAA2B,EAAE,UAA+B,EAAE;IAC7F,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC5C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;IAEnD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,0CAA0C;IAC1C,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAA8B,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;YACtB,IAAI,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,KAAK,GAAG,EAAE,CAAC;gBACX,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,MAA0B,CAAC;QAC/B,IAAI,KAAyB,CAAC;QAC9B,IAAI,aAAiC,CAAC;QAEtC,IAAI,KAAK,CAAC,aAAa,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YACnE,gEAAgE;YAChE,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;YACpC,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;YACzE,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACJ,uBAAuB;YACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,GAAG,OAAO;iBACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC,EAAE,QAAQ,CAAC;iBACpD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;YAClE,KAAK,GAAG,OAAO;iBACV,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC;iBAC9C,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,MAA0B,EAAE,KAAuB;IACvE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC;QAC5B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/analysis/error-grouper.js

@@ -2,7 +2,7 @@
  * Log Analysis — Error Grouper
  * Clusters similar errors by (errorType + message template).
  */
-import { templatize } from './utils.js';
+import { templatize } from './normalize.js';
 /**
  * Group similar errors by error type and message pattern.
  */

package/dist/analysis/error-grouper.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-grouper.js","sourceRoot":"","sources":["../../src/analysis/error-grouper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AASxC;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA4B,EAAE,UAA+B,EAAE;IACvF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgE,CAAC;IAEvF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC;QAExC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC3D,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvE,OAAO;YACH,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,QAAQ,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACnE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5C,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;SAClC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"error-grouper.js","sourceRoot":"","sources":["../../src/analysis/error-grouper.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAS5C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,QAA4B,EAAE,UAA+B,EAAE;IACvF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IAE1C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgE,CAAC;IAEvF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;QACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,GAAG,SAAS,KAAK,QAAQ,EAAE,CAAC;QAExC,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,KAAK,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;SAC/B,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC3D,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;QAC/B,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAEvE,OAAO;YACH,SAAS;YACT,QAAQ;YACR,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YAChD,QAAQ,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;YACnE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;YAC5C,aAAa,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;SAClC,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/analysis/filter.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Log Analysis - Filter
+ * One filter for every log surface: time window, minimum level, logger and text search.
+ * Search covers the whole entry (logger, thread, message, stack trace and JSON payload),
+ * so text on continuation lines is found on the entry it belongs to.
+ */
+import type { EnrichedLogEntry } from './types.js';
+/** Hard cap on the lines a single search returns. */
+export declare const MAX_LOG_LINES = 1000;
+export interface LogFilter {
+    /** Inclusive start, epoch milliseconds */
+    startTime?: number;
+    /** Inclusive end, epoch milliseconds */
+    endTime?: number;
+    /** Minimum level: TRACE, DEBUG, INFO, WARN, ERROR or FATAL */
+    level?: string;
+    /** Case-insensitive substring of the logger name */
+    logger?: string;
+    /** Text to find anywhere in the entry */
+    search?: string;
+    /** Treat `search` as a case-insensitive regular expression */
+    regex?: boolean;
+}
+export interface LogSearchOptions extends LogFilter {
+    /** Most entries to return, newest first (default 100, capped at MAX_LOG_LINES) */
+    limit?: number;
+}
+export interface LogSearchResult {
+    /** Matches before `limit` was applied */
+    total: number;
+    /** Entries in this response */
+    returned: number;
+    truncated: boolean;
+    /** Newest first */
+    entries: EnrichedLogEntry[];
+}
+/** Validate a level name, returning its numeric priority. */
+export declare function levelPriority(level: string): number;
+/** Build the text matcher for a search term, or null when there is none. */
+export declare function buildMatcher(search?: string, regex?: boolean): ((text: string) => boolean) | null;
+/** The searchable text of an entry, in log line order. */
+export declare function entryText(entry: EnrichedLogEntry): string;
+/** Build a predicate for a filter. Validates the level and regex up front. */
+export declare function buildFilter(filter: LogFilter): (entry: EnrichedLogEntry) => boolean;
+/** Keep the entries that pass a filter, in their original order. */
+export declare function filterEntries(entries: EnrichedLogEntry[], filter: LogFilter): EnrichedLogEntry[];
+/** Clamp a requested line count to 1..MAX_LOG_LINES. */
+export declare function clampLimit(limit: number | undefined, fallback?: number): number;
+/**
+ * Filter entries and return the newest `limit` matches.
+ * `total` counts every match, so callers can tell when the result was cut.
+ */
+export declare function searchEntries(entries: EnrichedLogEntry[], options?: LogSearchOptions): LogSearchResult;
+//# sourceMappingURL=filter.d.ts.map

package/dist/analysis/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/analysis/filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAGnD,qDAAqD;AACrD,eAAO,MAAM,aAAa,OAAO,CAAC;AAKlC,MAAM,WAAW,SAAS;IACtB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,SAAS;IAC/C,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC5B,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,mBAAmB;IACnB,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC/B;AAED,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOnD;AAED,4EAA4E;AAC5E,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,CAgBjG;AAED,0DAA0D;AAC1D,wBAAgB,SAAS,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAazD;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,KAAK,EAAE,gBAAgB,KAAK,OAAO,CAcnF;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,SAAS,GAAG,gBAAgB,EAAE,CAGhG;AAED,wDAAwD;AACxD,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,SAAM,GAAG,MAAM,CAG5E;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,OAAO,GAAE,gBAAqB,GAAG,eAAe,CAO1G"}

package/dist/analysis/filter.js

@@ -0,0 +1,100 @@
+/**
+ * Log Analysis - Filter
+ * One filter for every log surface: time window, minimum level, logger and text search.
+ * Search covers the whole entry (logger, thread, message, stack trace and JSON payload),
+ * so text on continuation lines is found on the entry it belongs to.
+ */
+import { LEVEL_PRIORITY } from './normalize.js';
+/** Hard cap on the lines a single search returns. */
+export const MAX_LOG_LINES = 1000;
+/** Longest regex pattern accepted for search. */
+const MAX_PATTERN_LENGTH = 500;
+/** Validate a level name, returning its numeric priority. */
+export function levelPriority(level) {
+    const name = level.toUpperCase();
+    const priority = LEVEL_PRIORITY[name === 'WARNING' ? 'WARN' : name];
+    if (priority === undefined) {
+        throw new Error(`Unknown log level "${level}". Use one of ${Object.keys(LEVEL_PRIORITY).join(', ')}`);
+    }
+    return priority;
+}
+/** Build the text matcher for a search term, or null when there is none. */
+export function buildMatcher(search, regex) {
+    if (!search)
+        return null;
+    if (regex) {
+        if (search.length > MAX_PATTERN_LENGTH) {
+            throw new Error(`Search regex is longer than ${MAX_PATTERN_LENGTH} characters`);
+        }
+        let pattern;
+        try {
+            pattern = new RegExp(search, 'i');
+        }
+        catch (error) {
+            throw new Error(`Invalid search regex: ${error.message}`);
+        }
+        return (text) => pattern.test(text);
+    }
+    const needle = search.toLowerCase();
+    return (text) => text.toLowerCase().includes(needle);
+}
+/** The searchable text of an entry, in log line order. */
+export function entryText(entry) {
+    const header = [
+        entry.loggerName,
+        entry.eventId ? `event:${entry.eventId}` : undefined,
+        entry.threadName !== undefined ? `${entry.threadName} -` : undefined,
+        entry.message,
+    ]
+        .filter((part) => part !== undefined && part !== '')
+        .join(' ');
+    const parts = [header];
+    if (entry.stackTrace)
+        parts.push(entry.stackTrace);
+    if (entry.jsonPayload)
+        parts.push(JSON.stringify(entry.jsonPayload));
+    return parts.join('\n');
+}
+/** Build a predicate for a filter. Validates the level and regex up front. */
+export function buildFilter(filter) {
+    const minLevel = filter.level ? levelPriority(filter.level) : undefined;
+    const logger = filter.logger?.toLowerCase();
+    const matches = buildMatcher(filter.search, filter.regex);
+    return (entry) => {
+        if (filter.startTime !== undefined && entry.timestamp < filter.startTime)
+            return false;
+        if (filter.endTime !== undefined && entry.timestamp > filter.endTime)
+            return false;
+        if (minLevel !== undefined && (LEVEL_PRIORITY[entry.priority] ?? 0) < minLevel)
+            return false;
+        if (logger && !(entry.loggerName ?? '').toLowerCase().includes(logger))
+            return false;
+        // The message alone first, so a regex anchored with ^ or $ means the message.
+        if (matches && !matches(entry.message ?? '') && !matches(entryText(entry)))
+            return false;
+        return true;
+    };
+}
+/** Keep the entries that pass a filter, in their original order. */
+export function filterEntries(entries, filter) {
+    const keep = buildFilter(filter);
+    return entries.filter(keep);
+}
+/** Clamp a requested line count to 1..MAX_LOG_LINES. */
+export function clampLimit(limit, fallback = 100) {
+    const value = limit === undefined || !Number.isFinite(limit) ? fallback : Math.floor(limit);
+    return Math.min(Math.max(value, 1), MAX_LOG_LINES);
+}
+/**
+ * Filter entries and return the newest `limit` matches.
+ * `total` counts every match, so callers can tell when the result was cut.
+ */
+export function searchEntries(entries, options = {}) {
+    const limit = clampLimit(options.limit);
+    const matched = filterEntries(entries, options);
+    // Reverse, then a stable sort: entries that share a timestamp stay newest first.
+    const newestFirst = [...matched].reverse().sort((a, b) => b.timestamp - a.timestamp);
+    const page = newestFirst.slice(0, limit);
+    return { total: matched.length, returned: page.length, truncated: matched.length > page.length, entries: page };
+}
+//# sourceMappingURL=filter.js.map

package/dist/analysis/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../src/analysis/filter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,qDAAqD;AACrD,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC,iDAAiD;AACjD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAgC/B,6DAA6D;AAC7D,MAAM,UAAU,aAAa,CAAC,KAAa;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,iBAAiB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,YAAY,CAAC,MAAe,EAAE,KAAe;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,KAAK,EAAE,CAAC;QACR,IAAI,MAAM,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,+BAA+B,kBAAkB,aAAa,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,yBAA0B,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,SAAS,CAAC,KAAuB;IAC7C,MAAM,MAAM,GAAG;QACX,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;QACpD,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,SAAS;QACpE,KAAK,CAAC,OAAO;KAChB;SACI,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,CAAC;SACnD,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,KAAK,CAAC,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,WAAW,CAAC,MAAiB;IACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;IAC5C,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAE1D,OAAO,CAAC,KAAK,EAAE,EAAE;QACb,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QACvF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACnF,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC7F,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACrF,8EAA8E;QAC9E,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACzF,OAAO,IAAI,CAAC;IAChB,CAAC,CAAC;AACN,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,OAA2B,EAAE,MAAiB;IACxE,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,KAAyB,EAAE,QAAQ,GAAG,GAAG;IAChE,MAAM,KAAK,GAAG,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5F,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAA2B,EAAE,UAA4B,EAAE;IACrF,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,iFAAiF;IACjF,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACpH,CAAC"}

package/dist/analysis/{utils.d.ts → normalize.d.ts}

@@ -13,4 +13,4 @@ export declare function templatize(message: string): string;
  * Check if an entry is HTTP listener noise.
  */
 export declare function isNoise(entry: EnrichedLogEntry): boolean;
-//# sourceMappingURL=utils.d.ts.map
+//# sourceMappingURL=normalize.d.ts.map

package/dist/analysis/normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../src/analysis/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAgBnD,+CAA+C;AAC/C,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAOjD,CAAC;AAEF;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED;;GAEG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CASxD"}

package/dist/analysis/{utils.js → normalize.js}

@@ -5,7 +5,7 @@
 /** Variable-like tokens to replace with <*> in pattern detection */
 const VARIABLE_PATTERNS = [
     /\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi, // UUIDs
-    /\b[a-zA-Z0-9]{15,18}\b/g, // Salesforce IDs
+    /\b[a-zA-Z0-9]{15,18}\b/g, // Opaque 15-18 character record IDs
     /\b\d{4}-\d{2}-\d{2}T[\d:.]+Z?\b/g, // ISO timestamps
     /\b\d+\.\d+\.\d+\.\d+\b/g, // IP addresses
     /\b\d{5,}\b/g, // Long numbers (5+ digits)
@@ -52,4 +52,4 @@ export function isNoise(entry) {
     }
     return false;
 }
-//# sourceMappingURL=utils.js.map
+//# sourceMappingURL=normalize.js.map

package/dist/analysis/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize.js","sourceRoot":"","sources":["../../src/analysis/normalize.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,oEAAoE;AACpE,MAAM,iBAAiB,GAAG;IACtB,oEAAoE,EAAE,QAAQ;IAC9E,yBAAyB,EAAE,oCAAoC;IAC/D,kCAAkC,EAAE,iBAAiB;IACrD,yBAAyB,EAAE,eAAe;IAC1C,aAAa,EAAE,2BAA2B;IAC1C,qBAAqB,EAAE,gBAAgB;IACvC,qBAAqB,EAAE,wCAAwC;CAClE,CAAC;AAEF,kCAAkC;AAClC,MAAM,qBAAqB,GAAG,iCAAiC,CAAC;AAEhE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,cAAc,GAA2B;IAClD,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;CACX,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACtC,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,KAAK,MAAM,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QACtB,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,KAAuB;IAC3C,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;QACjD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YAAE,OAAO,IAAI,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC"}

package/dist/analysis/parser.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AASnD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAoFhE"}
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/analysis/parser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAuCnD;;GAEG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAkFhE"}

package/dist/analysis/parser.js

@@ -3,16 +3,34 @@
  * Parses raw CloudHub log text into enriched entries, joining multi-line blocks.
  * Handles: JSON Logger blocks, stack traces, HTTP dumps, continuation lines.
  */
+/** ISO timestamp, level and replica: the prefix every new entry starts with. */
+const HEADER_PREFIX = String.raw `^(\d{4}-\d{2}-\d{2}T[\d:.]+(?:Z|[+-]\d{2}:?\d{2}))\s+(TRACE|DEBUG|INFO|WARN|ERROR|FATAL)\s+\[([^\]]*)\]`;
 /**
- * Enhanced log line regex that captures:
- *  - timestamp, level, instanceId, loggerName, eventId, thread, message
+ * Full Mule line: timestamp, level, instanceId, loggerName, optional eventId, thread, message.
+ * The first " - " separates the thread from the message.
  */
-const LOG_LINE_REGEX = /^(\d{4}-\d{2}-\d{2}T[\d:.]+Z)\s+(TRACE|DEBUG|INFO|WARN|ERROR|FATAL)\s+\[([^\]]*)\]\s+(\S+)\s+(?:event:(\S+)\s+)?(.+?)(?:\s+-\s+(.*))?$/;
+const LOG_LINE_REGEX = new RegExp(HEADER_PREFIX + String.raw `\s+(\S+)\s+(?:event:(\S+)\s+)?(.+?)\s+-(?:\s(.*))?$`);
+/** Any other line with the header prefix: the rest of the line is the message. */
+const LOOSE_LINE_REGEX = new RegExp(HEADER_PREFIX + String.raw `\s*(.*)$`);
+/** Parse the first line of an entry, or return null for a continuation line. */
+function parseHeader(line) {
+    const full = line.match(LOG_LINE_REGEX);
+    if (full) {
+        const [, timestamp, level, instanceId, loggerName, eventId, threadName, message] = full;
+        return { timestamp, level, instanceId, loggerName, eventId, threadName, message: message ?? '' };
+    }
+    const loose = line.match(LOOSE_LINE_REGEX);
+    if (loose) {
+        const [, timestamp, level, instanceId, message] = loose;
+        return { timestamp, level, instanceId, message };
+    }
+    return null;
+}
 /**
  * Parse raw log text into enriched entries, joining multi-line blocks.
  */
 export function parseRawLogs(rawText) {
-    const lines = rawText.split('\n');
+    const lines = rawText.split(/\r?\n/);
     const entries = [];
     let current = null;
     let jsonBuffer = null;
@@ -20,8 +38,8 @@ export function parseRawLogs(rawText) {
     for (const line of lines) {
         if (!line.trim())
             continue;
-        const match = line.match(LOG_LINE_REGEX);
-        if (match) {
+        const header = parseHeader(line);
+        if (header) {
             // Flush any pending entry
             if (current) {
                 if (jsonBuffer) {
@@ -31,15 +49,14 @@ export function parseRawLogs(rawText) {
                 }
                 entries.push(current);
             }
-            const [, timestamp, level, instanceId, loggerName, eventId, threadOrMessage, messageAfterDash] = match;
             current = {
-                timestamp: new Date(timestamp).getTime(),
-                priority: level,
-                instanceId,
-                loggerName,
-                eventId,
-                threadName: messageAfterDash !== undefined ? threadOrMessage : undefined,
-                message: messageAfterDash !== undefined ? messageAfterDash : threadOrMessage,
+                timestamp: new Date(header.timestamp.replace(/([+-]\d{2})(\d{2})$/, '$1:$2')).getTime(),
+                priority: header.level,
+                instanceId: header.instanceId,
+                loggerName: header.loggerName,
+                eventId: header.eventId,
+                threadName: header.threadName,
+                message: header.message,
             };
             // Check if this is a JSON Logger entry starting with "{"
             if (current.message !== undefined) {
@@ -96,6 +113,17 @@ export function parseRawLogs(rawText) {
     }
     return entries;
 }
+/** Logger payloads name the stack trace field differently (stackTrace, stacktrace, stack_trace, …). */
+const STACK_TRACE_KEY = /^stack_?trace/i;
+function findStackTrace(payload) {
+    if (!payload || typeof payload !== 'object')
+        return undefined;
+    for (const [key, value] of Object.entries(payload)) {
+        if (STACK_TRACE_KEY.test(key) && typeof value === 'string' && value.trim())
+            return value;
+    }
+    return undefined;
+}
 /**
  * Parse accumulated JSON lines and enrich the log entry with structured fields.
  */
@@ -112,9 +140,9 @@ function finalizeJsonEntry(entry, jsonLines) {
         if (parsed.message && (!entry.message || entry.message.trim() === '')) {
             entry.message = parsed.message;
         }
-        if (parsed.Stacktrace__c || parsed.content?.Stacktrace__c) {
-            entry.stackTrace = parsed.Stacktrace__c || parsed.content?.Stacktrace__c;
-        }
+        const stackTrace = findStackTrace(parsed) ?? findStackTrace(parsed.content);
+        if (stackTrace)
+            entry.stackTrace = stackTrace;
     }
     catch {
         entry.message = (entry.message || '') + '\n' + jsonText;