@shield-agent/kya 0.22.0 → 0.23.1

package/dist/importers/formats.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Foreign trace format mappers for the trace importer.
+ * Sources: LangSmith runs, Langfuse observations, Phoenix spans, OTLP/JSON spans.
+ * Each mapper converts one foreign record into a TrailEvent (mode "observe",
+ * host "import", no packId) or returns a per-record error - it never throws.
+ * Raw input/output values are never copied into the event; summaries render
+ * input key names only, redacted via redactTrailText.
+ */
+import type { TrailEvent } from "../trail.js";
+export type ImportSource = "langsmith" | "langfuse" | "phoenix" | "otel";
+export type MapResult = {
+    readonly ok: true;
+    readonly event: TrailEvent;
+} | {
+    readonly ok: false;
+    readonly error: string;
+};
+/** Map one foreign record to a TrailEvent; returns an error string on bad records. */
+export declare function mapRecord(source: ImportSource, rec: unknown, fallbackSession: string): MapResult;
+/**
+ * Extract the record list from a whole-file JSON document, per source.
+ * Bare arrays are accepted for every source; otherwise the known container
+ * keys are tried. Returns [] when the shape is not recognized.
+ */
+export declare function extractRecords(source: ImportSource, json: unknown): unknown[];
+//# sourceMappingURL=formats.d.ts.map

package/dist/importers/formats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"formats.d.ts","sourceRoot":"","sources":["../../src/importers/formats.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAG9C,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;AAQzE,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAoOnD,sFAAsF;AACtF,wBAAgB,SAAS,CACvB,MAAM,EAAE,YAAY,EACpB,GAAG,EAAE,OAAO,EACZ,eAAe,EAAE,MAAM,GACtB,SAAS,CAeX;AAwBD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,EAAE,CAa7E"}

package/dist/importers/formats.js

@@ -0,0 +1,281 @@
+import { redactTrailText } from "../trail-summary.js";
+/** Caps match the lengths the trail uses elsewhere (trail-summary MAX_LEN = 80). */
+const MAX_SUMMARY_LEN = 80;
+const MAX_TOOL_ID_LEN = 160;
+const MAX_SESSION_ID_LEN = 160;
+const MAX_SUMMARY_KEYS = 8;
+function isObj(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function str(v) {
+    return typeof v === "string" && v.trim() ? v.trim() : undefined;
+}
+/** Finite non-negative number, rounded; OTLP intValue may arrive as a string. */
+function num(v) {
+    const n = typeof v === "number" ? v : typeof v === "string" ? Number(v) : NaN;
+    return Number.isFinite(n) && n >= 0 ? Math.round(n) : undefined;
+}
+/** Parse an ISO-ish timestamp; undefined when missing or unparseable. */
+function isoFrom(v) {
+    const s = str(v);
+    if (!s)
+        return undefined;
+    const t = Date.parse(s);
+    return Number.isNaN(t) ? undefined : new Date(t).toISOString();
+}
+/** Whole-millisecond latency between an ISO start and a raw end value. */
+function msBetween(startIso, endRaw) {
+    const s = str(endRaw);
+    if (!s)
+        return undefined;
+    const b = Date.parse(s);
+    const a = Date.parse(startIso);
+    if (Number.isNaN(a) || Number.isNaN(b) || b < a)
+        return undefined;
+    return Math.round(b - a);
+}
+/** OTLP timeUnixNano is a decimal string; BigInt keeps full precision. */
+function nanoToMs(v) {
+    const s = str(v) ?? (typeof v === "number" && Number.isFinite(v) ? String(Math.trunc(v)) : undefined);
+    if (!s)
+        return undefined;
+    try {
+        return Number(BigInt(s) / 1000000n);
+    }
+    catch {
+        return undefined;
+    }
+}
+function capText(v, max) {
+    const s = v.replace(/\s+/g, " ").trim();
+    return s.length <= max ? s : s.slice(0, max);
+}
+/** Redacted "inputs: key1, key2" rendering - key names only, never values. */
+function keysSummary(label, input) {
+    if (!isObj(input))
+        return undefined;
+    const keys = Object.keys(input).slice(0, MAX_SUMMARY_KEYS);
+    if (keys.length === 0)
+        return undefined;
+    const redacted = redactTrailText(`${label}: ${keys.join(", ")}`)
+        .replace(/\r?\n/g, " ")
+        .trim();
+    if (!redacted)
+        return undefined;
+    return redacted.length <= MAX_SUMMARY_LEN
+        ? redacted
+        : `${redacted.slice(0, MAX_SUMMARY_LEN - 1)}…`;
+}
+function buildEvent(seed, fallbackSession) {
+    return {
+        ts: seed.ts ?? new Date().toISOString(),
+        sessionId: capText(seed.sessionId ?? fallbackSession, MAX_SESSION_ID_LEN),
+        host: "import",
+        toolId: capText(seed.toolId, MAX_TOOL_ID_LEN),
+        verdict: seed.deny ? "DENY" : "ALLOW",
+        reasonCode: seed.deny ? "IMPORTED_ERROR" : "IMPORTED",
+        mode: "observe",
+        ...(seed.latencyMs !== undefined ? { latencyMs: seed.latencyMs } : {}),
+        ...(seed.tokensIn !== undefined ? { tokensIn: seed.tokensIn } : {}),
+        ...(seed.tokensOut !== undefined ? { tokensOut: seed.tokensOut } : {}),
+        ...(seed.summary !== undefined ? { summary: seed.summary } : {}),
+    };
+}
+function err(message) {
+    return { ok: false, error: message };
+}
+/** LangSmith run: {name, run_type, inputs, outputs, start_time, end_time, session_name, error, prompt_tokens, completion_tokens}. */
+function mapLangSmith(rec, fallbackSession) {
+    if (!isObj(rec))
+        return err("not an object");
+    const name = str(rec.name);
+    if (!name)
+        return err("missing name");
+    const ts = isoFrom(rec.start_time);
+    return {
+        ok: true,
+        event: buildEvent({
+            toolId: name,
+            ts,
+            sessionId: str(rec.session_name) ?? str(rec.session_id),
+            deny: str(rec.error) !== undefined,
+            latencyMs: ts ? msBetween(ts, rec.end_time) : undefined,
+            tokensIn: num(rec.prompt_tokens),
+            tokensOut: num(rec.completion_tokens),
+            summary: keysSummary("inputs", rec.inputs),
+        }, fallbackSession),
+    };
+}
+/** Langfuse observation/trace: {type, name, startTime, endTime, usage, level, statusMessage}. */
+function mapLangfuse(rec, fallbackSession) {
+    if (!isObj(rec))
+        return err("not an object");
+    const name = str(rec.name);
+    if (!name)
+        return err("missing name");
+    const ts = isoFrom(rec.startTime);
+    const usage = isObj(rec.usage) ? rec.usage : undefined;
+    return {
+        ok: true,
+        event: buildEvent({
+            toolId: name,
+            ts,
+            sessionId: str(rec.sessionId) ?? str(rec.session_id) ?? str(rec.traceId) ?? str(rec.trace_id),
+            deny: str(rec.level)?.toUpperCase() === "ERROR",
+            latencyMs: ts ? msBetween(ts, rec.endTime) : undefined,
+            tokensIn: usage ? (num(usage.input) ?? num(usage.promptTokens)) : undefined,
+            tokensOut: usage ? (num(usage.output) ?? num(usage.completionTokens)) : undefined,
+            summary: keysSummary("input", rec.input),
+        }, fallbackSession),
+    };
+}
+/** Phoenix span: {name, startTime, endTime, statusCode, attributes, context:{trace_id}}. */
+function mapPhoenix(rec, fallbackSession) {
+    if (!isObj(rec))
+        return err("not an object");
+    const attrs = isObj(rec.attributes) ? rec.attributes : {};
+    const name = str(attrs["tool.name"]) ?? str(rec.name);
+    if (!name)
+        return err("missing name");
+    const ts = isoFrom(rec.startTime);
+    const ctx = isObj(rec.context) ? rec.context : undefined;
+    return {
+        ok: true,
+        event: buildEvent({
+            toolId: name,
+            ts,
+            sessionId: (ctx ? (str(ctx.trace_id) ?? str(ctx.traceId)) : undefined) ??
+                str(rec.traceId) ??
+                str(rec.trace_id),
+            deny: str(rec.statusCode)?.toUpperCase() === "ERROR",
+            latencyMs: ts ? msBetween(ts, rec.endTime) : undefined,
+            tokensIn: num(attrs["llm.token_count.prompt"]),
+            tokensOut: num(attrs["llm.token_count.completion"]),
+        }, fallbackSession),
+    };
+}
+/** Flatten OTLP KeyValue[] attributes to a plain object (string/int/double/bool only). */
+function otelAttributes(v) {
+    const out = {};
+    if (!Array.isArray(v))
+        return out;
+    for (const item of v) {
+        if (!isObj(item))
+            continue;
+        const key = str(item.key);
+        const value = item.value;
+        if (!key || !isObj(value))
+            continue;
+        if (typeof value.stringValue === "string")
+            out[key] = value.stringValue;
+        else if (value.intValue !== undefined)
+            out[key] = num(value.intValue);
+        else if (typeof value.doubleValue === "number")
+            out[key] = value.doubleValue;
+        else if (typeof value.boolValue === "boolean")
+            out[key] = value.boolValue;
+    }
+    return out;
+}
+/** OTLP Status.code: 0 UNSET, 1 OK, 2 ERROR (string enum also accepted). */
+function otelStatusIsError(status) {
+    if (!isObj(status))
+        return false;
+    const code = status.code;
+    if (typeof code === "number")
+        return code === 2;
+    if (typeof code === "string")
+        return code === "STATUS_CODE_ERROR";
+    return false;
+}
+/** OTLP/JSON span: {traceId, name, startTimeUnixNano, endTimeUnixNano, status, attributes}. */
+function mapOtel(rec, fallbackSession) {
+    if (!isObj(rec))
+        return err("not an object");
+    const attrs = otelAttributes(rec.attributes);
+    const name = str(rec.name) ?? str(attrs["tool.name"]);
+    if (!name)
+        return err("missing name");
+    const startMs = nanoToMs(rec.startTimeUnixNano);
+    const endMs = nanoToMs(rec.endTimeUnixNano);
+    const latencyMs = startMs !== undefined && endMs !== undefined && endMs >= startMs
+        ? Math.round(endMs - startMs)
+        : undefined;
+    return {
+        ok: true,
+        event: buildEvent({
+            toolId: name,
+            ts: startMs !== undefined ? new Date(startMs).toISOString() : undefined,
+            sessionId: str(rec.traceId),
+            deny: otelStatusIsError(rec.status),
+            latencyMs,
+            tokensIn: num(attrs["llm.token_count.prompt"]),
+            tokensOut: num(attrs["llm.token_count.completion"]),
+        }, fallbackSession),
+    };
+}
+/** Map one foreign record to a TrailEvent; returns an error string on bad records. */
+export function mapRecord(source, rec, fallbackSession) {
+    try {
+        switch (source) {
+            case "langsmith":
+                return mapLangSmith(rec, fallbackSession);
+            case "langfuse":
+                return mapLangfuse(rec, fallbackSession);
+            case "phoenix":
+                return mapPhoenix(rec, fallbackSession);
+            case "otel":
+                return mapOtel(rec, fallbackSession);
+        }
+    }
+    catch (e) {
+        return err(e instanceof Error ? e.message : String(e));
+    }
+}
+function arr(v) {
+    return Array.isArray(v) ? v : undefined;
+}
+/** Flatten an OTLP/JSON payload (resourceSpans/scopeSpans/spans) to a span list. */
+function otlpSpans(json) {
+    const resourceSpans = json.resourceSpans;
+    if (!Array.isArray(resourceSpans))
+        return undefined;
+    const out = [];
+    for (const rs of resourceSpans) {
+        if (!isObj(rs))
+            continue;
+        const scopeSpans = rs.scopeSpans ?? rs.instrumentationLibrarySpans;
+        if (!Array.isArray(scopeSpans))
+            continue;
+        for (const ss of scopeSpans) {
+            if (!isObj(ss))
+                continue;
+            const spans = ss.spans;
+            if (Array.isArray(spans))
+                out.push(...spans);
+        }
+    }
+    return out;
+}
+/**
+ * Extract the record list from a whole-file JSON document, per source.
+ * Bare arrays are accepted for every source; otherwise the known container
+ * keys are tried. Returns [] when the shape is not recognized.
+ */
+export function extractRecords(source, json) {
+    if (Array.isArray(json))
+        return json;
+    if (!isObj(json))
+        return [];
+    switch (source) {
+        case "langsmith":
+            return arr(json.runs) ?? arr(json.data) ?? [];
+        case "langfuse":
+            return arr(json.observations) ?? arr(json.traces) ?? arr(json.data) ?? [];
+        case "phoenix":
+            return arr(json.spans) ?? arr(json.data) ?? [];
+        case "otel":
+            return otlpSpans(json) ?? arr(json.spans) ?? arr(json.data) ?? [];
+    }
+}
+//# sourceMappingURL=formats.js.map

package/dist/importers/formats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"formats.js","sourceRoot":"","sources":["../../src/importers/formats.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAItD,oFAAoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,eAAe,GAAG,GAAG,CAAC;AAC5B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAM3B,SAAS,KAAK,CAAC,CAAU;IACvB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,iFAAiF;AACjF,SAAS,GAAG,CAAC,CAAU;IACrB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9E,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,yEAAyE;AACzE,SAAS,OAAO,CAAC,CAAU;IACzB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACjE,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,QAAgB,EAAE,MAAe;IAClD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,0EAA0E;AAC1E,SAAS,QAAQ,CAAC,CAAU;IAC1B,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtG,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAU,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAS,EAAE,GAAW;IACrC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,8EAA8E;AAC9E,SAAS,WAAW,CAAC,KAAa,EAAE,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC7D,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,IAAI,EAAE,CAAC;IACV,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,OAAO,QAAQ,CAAC,MAAM,IAAI,eAAe;QACvC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC;AACnD,CAAC;AAaD,SAAS,UAAU,CAAC,IAAe,EAAE,eAAuB;IAC1D,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,eAAe,EAAE,kBAAkB,CAAC;QACzE,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC7C,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;QACrC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,UAAU;QACrD,IAAI,EAAE,SAAS;QACf,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,OAAe;IAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC;AAED,qIAAqI;AACrI,SAAS,YAAY,CAAC,GAAY,EAAE,eAAuB;IACzD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACnC,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,UAAU,CACf;YACE,MAAM,EAAE,IAAI;YACZ,EAAE;YACF,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC;YACvD,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,SAAS;YAClC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;YACvD,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC;YAChC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC;YACrC,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC;SAC3C,EACD,eAAe,CAChB;KACF,CAAC;AACJ,CAAC;AAED,iGAAiG;AACjG,SAAS,WAAW,CAAC,GAAY,EAAE,eAAuB;IACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,UAAU,CACf;YACE,MAAM,EAAE,IAAI;YACZ,EAAE;YACF,SAAS,EACP,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpF,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,OAAO;YAC/C,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACtD,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3E,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACjF,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC;SACzC,EACD,eAAe,CAChB;KACF,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,UAAU,CAAC,GAAY,EAAE,eAAuB;IACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,UAAU,CACf;YACE,MAAM,EAAE,IAAI;YACZ,EAAE;YACF,SAAS,EACP,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;gBAChB,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,WAAW,EAAE,KAAK,OAAO;YACpD,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;YACtD,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;SACpD,EACD,eAAe,CAChB;KACF,CAAC;AACJ,CAAC;AAED,0FAA0F;AAC1F,SAAS,cAAc,CAAC,CAAU;IAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,SAAS;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,SAAS;QACpC,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;aACnE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;aACjE,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC;aACxE,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAC5E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,SAAS,iBAAiB,CAAC,MAAe;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;IACzB,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,CAAC,CAAC;IAChD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,KAAK,mBAAmB,CAAC;IAClE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+FAA+F;AAC/F,SAAS,OAAO,CAAC,GAAY,EAAE,eAAuB;IACpD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,cAAc,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5C,MAAM,SAAS,GACb,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,OAAO;QAC9D,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC;QAC7B,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,UAAU,CACf;YACE,MAAM,EAAE,IAAI;YACZ,EAAE,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YACvE,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC;YAC3B,IAAI,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC;YACnC,SAAS;YACT,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC9C,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;SACpD,EACD,eAAe,CAChB;KACF,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CACvB,MAAoB,EACpB,GAAY,EACZ,eAAuB;IAEvB,IAAI,CAAC;QACH,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,WAAW;gBACd,OAAO,YAAY,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC5C,KAAK,UAAU;gBACb,OAAO,WAAW,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC3C,KAAK,SAAS;gBACZ,OAAO,UAAU,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;YAC1C,KAAK,MAAM;gBACT,OAAO,OAAO,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,oFAAoF;AACpF,SAAS,SAAS,CAAC,IAA6B;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,KAAK,MAAM,EAAE,IAAI,aAAa,EAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,SAAS;QACzB,MAAM,UAAU,GAAG,EAAE,CAAC,UAAU,IAAI,EAAE,CAAC,2BAA2B,CAAC;QACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,SAAS;QACzC,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,SAAS;YACzB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;YACvB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAoB,EAAE,IAAa;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChD,KAAK,UAAU;YACb,OAAO,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5E,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACjD,KAAK,MAAM;YACT,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACtE,CAAC;AACH,CAAC"}

package/dist/importers/index.d.ts

@@ -0,0 +1,26 @@
+import { type ImportSource } from "./formats.js";
+export type { ImportSource } from "./formats.js";
+export interface ImportOptions {
+    readonly from: ImportSource;
+    readonly file: string;
+    readonly cwd: string;
+    readonly env?: NodeJS.ProcessEnv;
+}
+export interface ImportResult {
+    readonly imported: number;
+    readonly skipped: number;
+    readonly errors: string[];
+}
+/** Import files larger than 50MB are refused before reading. */
+export declare const MAX_IMPORT_BYTES: number;
+/** Size guard, exported for tests: returns an error message when over the cap. */
+export declare function checkImportSize(sizeBytes: number): string | undefined;
+/**
+ * Import one export file into the trail. Returns counts plus per-record
+ * errors; resolves even when the file is missing, oversized, or every
+ * record is bad.
+ */
+export declare function importTraces(opts: ImportOptions): Promise<ImportResult>;
+/** Two or three plain-text lines for the CLI to print after an import. */
+export declare function renderImportSummary(result: ImportResult): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/importers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/importers/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAGL,KAAK,YAAY,EAClB,MAAM,cAAc,CAAC;AAEtB,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,gEAAgE;AAChE,eAAO,MAAM,gBAAgB,QAAmB,CAAC;AAEjD,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGrE;AA2BD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CA2D7E;AAED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAWhE"}

package/dist/importers/index.js

@@ -0,0 +1,122 @@
+/**
+ * Trace importer: reads a foreign trace export (LangSmith, Langfuse, Phoenix,
+ * OTLP/JSON) and appends each span/run to the local KYA trail via appendTrail.
+ *
+ * JSON vs JSONL is detected by content: a whole-file JSON.parse that succeeds
+ * wins; otherwise the file is processed line by line. The file is capped at
+ * MAX_IMPORT_BYTES (50MB) - an oversized file returns an error entry instead
+ * of reading. Bad records never throw: they are skipped and collected in
+ * `errors`, and the import continues.
+ */
+import { readFileSync, statSync } from "node:fs";
+import { appendTrail } from "../trail.js";
+import { extractRecords, mapRecord, } from "./formats.js";
+/** Import files larger than 50MB are refused before reading. */
+export const MAX_IMPORT_BYTES = 50 * 1024 * 1024;
+/** Size guard, exported for tests: returns an error message when over the cap. */
+export function checkImportSize(sizeBytes) {
+    if (sizeBytes <= MAX_IMPORT_BYTES)
+        return undefined;
+    return `file is ${sizeBytes} bytes, over the ${MAX_IMPORT_BYTES} byte (50MB) import cap`;
+}
+function errMsg(e) {
+    return e instanceof Error ? e.message : String(e);
+}
+/** Split a JSONL body into records; bad lines become errors + skips. */
+function jsonlRecords(text, errors) {
+    const records = [];
+    let skipped = 0;
+    const lines = text.split("\n");
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i].trim();
+        if (!line)
+            continue;
+        try {
+            records.push(JSON.parse(line));
+        }
+        catch (e) {
+            skipped++;
+            errors.push(`line ${i + 1}: invalid JSON - ${errMsg(e)}`);
+        }
+    }
+    return { records, skipped };
+}
+/**
+ * Import one export file into the trail. Returns counts plus per-record
+ * errors; resolves even when the file is missing, oversized, or every
+ * record is bad.
+ */
+export async function importTraces(opts) {
+    const { from, file, cwd } = opts;
+    const env = opts.env ?? process.env;
+    const errors = [];
+    let imported = 0;
+    let skipped = 0;
+    let size;
+    try {
+        size = statSync(file).size;
+    }
+    catch (e) {
+        return { imported, skipped, errors: [`cannot read ${file} - ${errMsg(e)}`] };
+    }
+    const sizeError = checkImportSize(size);
+    if (sizeError)
+        return { imported, skipped, errors: [sizeError] };
+    let text;
+    try {
+        text = readFileSync(file, "utf8");
+    }
+    catch (e) {
+        return { imported, skipped, errors: [`cannot read ${file} - ${errMsg(e)}`] };
+    }
+    let records;
+    const trimmed = text.trim();
+    if (trimmed.startsWith("[") || trimmed.startsWith("{")) {
+        try {
+            records = extractRecords(from, JSON.parse(trimmed));
+        }
+        catch {
+            // Not one JSON document - fall back to JSONL line by line.
+            const parsed = jsonlRecords(text, errors);
+            records = parsed.records;
+            skipped += parsed.skipped;
+        }
+    }
+    else {
+        const parsed = jsonlRecords(text, errors);
+        records = parsed.records;
+        skipped += parsed.skipped;
+    }
+    const fallbackSession = `import-${from}-${new Date().toISOString().slice(0, 10)}`;
+    for (let i = 0; i < records.length; i++) {
+        const mapped = mapRecord(from, records[i], fallbackSession);
+        if (!mapped.ok) {
+            skipped++;
+            errors.push(`record ${i + 1}: ${mapped.error}`);
+            continue;
+        }
+        try {
+            appendTrail(cwd, mapped.event, env);
+            imported++;
+        }
+        catch (e) {
+            skipped++;
+            errors.push(`record ${i + 1}: trail append failed - ${errMsg(e)}`);
+        }
+    }
+    return { imported, skipped, errors };
+}
+/** Two or three plain-text lines for the CLI to print after an import. */
+export function renderImportSummary(result) {
+    const lines = [
+        `imported ${result.imported} trace record(s) into the KYA trail`,
+        `skipped ${result.skipped} record(s)`,
+    ];
+    if (result.errors.length > 0) {
+        const first = result.errors[0];
+        const clipped = first.length > 120 ? `${first.slice(0, 119)}…` : first;
+        lines.push(`errors: ${result.errors.length} (first: ${clipped})`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=index.js.map

package/dist/importers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/importers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EACL,cAAc,EACd,SAAS,GAEV,MAAM,cAAc,CAAC;AAiBtB,gEAAgE;AAChE,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEjD,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,IAAI,SAAS,IAAI,gBAAgB;QAAE,OAAO,SAAS,CAAC;IACpD,OAAO,WAAW,SAAS,oBAAoB,gBAAgB,yBAAyB,CAAC;AAC3F,CAAC;AAED,SAAS,MAAM,CAAC,CAAU;IACxB,OAAO,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CACnB,IAAY,EACZ,MAAgB;IAEhB,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,eAAe,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IACD,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IAEjE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,eAAe,IAAI,MAAM,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,OAAkB,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,2DAA2D;YAC3D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC1C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QACzB,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IAC5B,CAAC;IAED,MAAM,eAAe,GAAG,UAAU,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAElF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAChD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpC,QAAQ,EAAE,CAAC;QACb,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,2BAA2B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,MAAM,KAAK,GAAG;QACZ,YAAY,MAAM,CAAC,QAAQ,qCAAqC;QAChE,WAAW,MAAM,CAAC,OAAO,YAAY;KACtC,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,YAAY,OAAO,GAAG,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 /**
- * @shield-agent/kya — light install library surface + CLI helpers.
+ * @shield-agent/kya - light install library surface + CLI helpers.
  * Zero vertical packs required (R8). Provider-agnostic MCP / HTTP path.
  */
 export { runCli, type CliIo } from "./cli.js";

package/dist/index.js

@@ -1,5 +1,5 @@
 /**
- * @shield-agent/kya — light install library surface + CLI helpers.
+ * @shield-agent/kya - light install library surface + CLI helpers.
  * Zero vertical packs required (R8). Provider-agnostic MCP / HTTP path.
  */
 export { runCli } from "./cli.js";

package/dist/investigate/detectors.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Deterministic trail detectors. Pure local analysis over TrailEvent rows -
+ * no LLM calls, no IO. Each detector emits zero or more findings carrying the
+ * indices of the offending events in the input array.
+ */
+import type { TrailEvent } from "../trail.js";
+export type Severity = "low" | "medium" | "high" | "critical";
+export type DetectorId = "pii-in-summary" | "deny-spike" | "approval-loop" | "never-repeat" | "unknown-tool-hold" | "slow-calls";
+export interface Finding {
+    readonly detectorId: DetectorId;
+    readonly severity: Severity;
+    /** Indices into the events array passed to the detector. */
+    readonly eventIdx: number[];
+    readonly summary: string;
+    /** Structured detail for grouping and brief rendering. Never raw secrets. */
+    readonly evidence: Record<string, unknown>;
+}
+export interface Detector {
+    readonly id: DetectorId;
+    run(events: readonly TrailEvent[]): Finding[];
+}
+/** deny-spike: more than this many DENY events inside the window. */
+export declare const DENY_SPIKE_THRESHOLD = 3;
+export declare const DENY_SPIKE_WINDOW_MS: number;
+/** approval-loop: consecutive REQUIRE_APPROVE on one session+tool. */
+export declare const APPROVAL_LOOP_MIN = 3;
+/** slow-calls: p95 above this with at least MIN_SAMPLES per tool. */
+export declare const SLOW_CALL_P95_MS = 5000;
+export declare const SLOW_CALL_MIN_SAMPLES = 5;
+/** Standard Luhn checksum for card-shaped digit strings. */
+export declare function luhnValid(digits: string): boolean;
+export declare const DETECTORS: readonly Detector[];
+/** Run every detector over the same events array; findings keep input indices. */
+export declare function runDetectors(events: readonly TrailEvent[]): Finding[];
+//# sourceMappingURL=detectors.d.ts.map

package/dist/investigate/detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detectors.d.ts","sourceRoot":"","sources":["../../src/investigate/detectors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9D,MAAM,MAAM,UAAU,GAClB,gBAAgB,GAChB,YAAY,GACZ,eAAe,GACf,cAAc,GACd,mBAAmB,GACnB,YAAY,CAAC;AAEjB,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC;IACxB,GAAG,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,EAAE,CAAC;CAC/C;AAED,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,oBAAoB,QAAc,CAAC;AAChD,sEAAsE;AACtE,eAAO,MAAM,iBAAiB,IAAI,CAAC;AACnC,qEAAqE;AACrE,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAcvC,4DAA4D;AAC5D,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAcjD;AA6OD,eAAO,MAAM,SAAS,EAAE,SAAS,QAAQ,EAOxC,CAAC;AAEF,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,EAAE,CAErE"}