@sonde/packs 0.1.2 → 0.1.4

package/dist/system/probes/logs-dmesg.js

@@ -0,0 +1,22 @@
+import { platform } from 'node:os';
+/**
+ * Reads the kernel ring buffer via `dmesg`.
+ * On Linux uses `--time-format iso` for readable timestamps.
+ * On macOS uses plain `dmesg` (no --time-format support).
+ */
+export const logsDmesg = async (params, exec) => {
+    const lines = Math.min(Math.max(Number(params?.lines ?? 50), 1), 500);
+    const isMac = platform() === 'darwin';
+    const dmesgArgs = isMac ? [] : ['--time-format', 'iso'];
+    const output = await exec('dmesg', dmesgArgs);
+    return parseDmesgOutput(output, lines);
+};
+export function parseDmesgOutput(raw, lines) {
+    const allLines = raw.trim().split('\n').filter(Boolean);
+    const tailLines = allLines.slice(-lines);
+    return {
+        lines: tailLines,
+        lineCount: tailLines.length,
+    };
+}
+//# sourceMappingURL=logs-dmesg.js.map

package/dist/system/probes/logs-dmesg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-dmesg.js","sourceRoot":"","sources":["../../../src/system/probes/logs-dmesg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAQnC;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAiB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EACxC,GAAG,CACJ,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,EAAE,KAAK,QAAQ,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAC9B,GAAW,EACX,KAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAEzC,OAAO;QACL,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,SAAS,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC"}

package/dist/system/probes/logs-dmesg.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logs-dmesg.test.d.ts.map

package/dist/system/probes/logs-dmesg.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-dmesg.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/logs-dmesg.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/logs-dmesg.test.js

@@ -0,0 +1,55 @@
+import { describe, expect, it } from 'vitest';
+import { logsDmesg, parseDmesgOutput } from './logs-dmesg.js';
+const DMESG_OUTPUT = `[2024-01-15T10:00:01+0000] EXT4-fs (sda1): mounted filesystem
+[2024-01-15T10:00:02+0000] audit: type=1400 msg=avc:
+[2024-01-15T10:00:03+0000] NET: Registered PF_INET6
+[2024-01-15T10:00:04+0000] usb 1-1: new high-speed USB device
+[2024-01-15T10:00:05+0000] e1000: Intel(R) PRO/1000 Network Driver`;
+describe('parseDmesgOutput', () => {
+    it('returns last N lines', () => {
+        const result = parseDmesgOutput(DMESG_OUTPUT, 3);
+        expect(result.lineCount).toBe(3);
+        expect(result.lines).toHaveLength(3);
+        expect(result.lines[0]).toContain('NET: Registered PF_INET6');
+        expect(result.lines[2]).toContain('e1000');
+    });
+    it('returns all lines when lines exceeds total', () => {
+        const result = parseDmesgOutput(DMESG_OUTPUT, 100);
+        expect(result.lineCount).toBe(5);
+        expect(result.lines).toHaveLength(5);
+    });
+    it('handles empty output', () => {
+        const result = parseDmesgOutput('', 50);
+        expect(result.lineCount).toBe(0);
+        expect(result.lines).toHaveLength(0);
+    });
+    it('handles single line', () => {
+        const result = parseDmesgOutput('[0.000000] Linux version 6.1.0', 50);
+        expect(result.lineCount).toBe(1);
+        expect(result.lines[0]).toContain('Linux version');
+    });
+});
+describe('logsDmesg handler', () => {
+    it('passes correct args on Linux', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return DMESG_OUTPUT;
+        };
+        const result = (await logsDmesg(undefined, mockExec));
+        expect(calls).toHaveLength(1);
+        expect(calls[0]?.cmd).toBe('dmesg');
+        // On the CI/test runner platform, args will vary
+        // but the handler should call dmesg
+        expect(result.lineCount).toBeGreaterThan(0);
+    });
+    it('clamps lines to valid range', async () => {
+        const mockExec = async () => DMESG_OUTPUT;
+        const result = (await logsDmesg({ lines: 2 }, mockExec));
+        expect(result.lineCount).toBe(2);
+        const result2 = (await logsDmesg({ lines: 9999 }, mockExec));
+        // 500 clamped but only 5 lines in fixture
+        expect(result2.lineCount).toBe(5);
+    });
+});
+//# sourceMappingURL=logs-dmesg.test.js.map

package/dist/system/probes/logs-dmesg.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-dmesg.test.js","sourceRoot":"","sources":["../../../src/system/probes/logs-dmesg.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAE9D,MAAM,YAAY,GAAG;;;;mEAI8C,CAAC;AAEpE,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAEjD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEnD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAExC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,MAAM,GAAG,gBAAgB,CAC7B,gCAAgC,EAChC,EAAE,CACH,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAC7B,SAAS,EACT,QAAQ,CACT,CAAgB,CAAC;QAElB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,iDAAiD;QACjD,oCAAoC;QACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,QAAQ,GAAW,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC;QAElD,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAC7B,EAAE,KAAK,EAAE,CAAC,EAAE,EACZ,QAAQ,CACT,CAAgB,CAAC;QAClB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjC,MAAM,OAAO,GAAG,CAAC,MAAM,SAAS,CAC9B,EAAE,KAAK,EAAE,IAAI,EAAE,EACf,QAAQ,CACT,CAAgB,CAAC;QAClB,0CAA0C;QAC1C,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/system/probes/logs-journal.d.ts

@@ -0,0 +1,21 @@
+import type { ProbeHandler } from '../../types.js';
+export interface JournalEntry {
+    timestamp: string;
+    priority: number;
+    message: string;
+    pid: number;
+    uid: number;
+    unit?: string;
+}
+export interface JournalResult {
+    entries: JournalEntry[];
+    entryCount: number;
+    unit?: string;
+}
+/**
+ * Reads recent systemd journal entries via `journalctl -o json`.
+ * Linux only — fails with a clear message on macOS.
+ */
+export declare const logsJournal: ProbeHandler;
+export declare function parseJournalOutput(raw: string, unit?: string): JournalResult;
+//# sourceMappingURL=logs-journal.d.ts.map

package/dist/system/probes/logs-journal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-journal.d.ts","sourceRoot":"","sources":["../../../src/system/probes/logs-journal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,YAAY,EAAE,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,YA+BzB,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,MAAM,GACZ,aAAa,CAsCf"}

package/dist/system/probes/logs-journal.js

@@ -0,0 +1,70 @@
+import { platform } from 'node:os';
+/**
+ * Reads recent systemd journal entries via `journalctl -o json`.
+ * Linux only — fails with a clear message on macOS.
+ */
+export const logsJournal = async (params, exec) => {
+    if (platform() === 'darwin') {
+        throw new Error('system.logs.journal requires systemd (Linux only)');
+    }
+    const lines = Math.min(Math.max(Number(params?.lines ?? 50), 1), 500);
+    const unit = params?.unit;
+    const priority = params?.priority;
+    const args = [
+        '-n',
+        String(lines),
+        '--no-pager',
+        '-o',
+        'json',
+    ];
+    if (unit) {
+        args.push('-u', unit);
+    }
+    if (priority) {
+        args.push('-p', priority);
+    }
+    const output = await exec('journalctl', args);
+    return parseJournalOutput(output, unit);
+};
+export function parseJournalOutput(raw, unit) {
+    const entries = [];
+    for (const line of raw.trim().split('\n')) {
+        if (!line)
+            continue;
+        let obj;
+        try {
+            obj = JSON.parse(line);
+        }
+        catch {
+            continue;
+        }
+        const timestamp = typeof obj.__REALTIME_TIMESTAMP === 'string'
+            ? formatUsecTimestamp(obj.__REALTIME_TIMESTAMP)
+            : String(obj.__REALTIME_TIMESTAMP ?? '');
+        entries.push({
+            timestamp,
+            priority: Number(obj.PRIORITY ?? 6),
+            message: String(obj.MESSAGE ?? ''),
+            pid: Number(obj._PID ?? 0),
+            uid: Number(obj._UID ?? 0),
+            unit: obj._SYSTEMD_UNIT
+                ? String(obj._SYSTEMD_UNIT)
+                : undefined,
+        });
+    }
+    const result = {
+        entries,
+        entryCount: entries.length,
+    };
+    if (unit) {
+        result.unit = unit;
+    }
+    return result;
+}
+function formatUsecTimestamp(usec) {
+    const ms = Math.floor(Number(usec) / 1000);
+    if (Number.isNaN(ms))
+        return usec;
+    return new Date(ms).toISOString();
+}
+//# sourceMappingURL=logs-journal.js.map

package/dist/system/probes/logs-journal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-journal.js","sourceRoot":"","sources":["../../../src/system/probes/logs-journal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAkBnC;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAC9D,IAAI,QAAQ,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EACxC,GAAG,CACJ,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,EAAE,IAA0B,CAAC;IAChD,MAAM,QAAQ,GAAG,MAAM,EAAE,QAA8B,CAAC;IAExD,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,MAAM,CAAC,KAAK,CAAC;QACb,YAAY;QACZ,IAAI;QACJ,MAAM;KACP,CAAC;IAEF,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,IAAa;IAEb,MAAM,OAAO,GAAmB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,IAAI,GAA4B,CAAC;QACjC,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GACb,OAAO,GAAG,CAAC,oBAAoB,KAAK,QAAQ;YAC1C,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC/C,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;QAE7C,OAAO,CAAC,IAAI,CAAC;YACX,SAAS;YACT,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;YACnC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;YAClC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;YAC1B,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;YAC1B,IAAI,EAAE,GAAG,CAAC,aAAa;gBACrB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC3B,CAAC,CAAC,SAAS;SACd,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAkB;QAC5B,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,MAAM;KAC3B,CAAC;IACF,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACpC,CAAC"}

package/dist/system/probes/logs-journal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logs-journal.test.d.ts.map

package/dist/system/probes/logs-journal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-journal.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/logs-journal.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/logs-journal.test.js

@@ -0,0 +1,113 @@
+import { describe, expect, it, vi } from 'vitest';
+import { logsJournal, parseJournalOutput } from './logs-journal.js';
+vi.mock('node:os', () => ({ platform: () => 'linux' }));
+const JOURNAL_JSON_OUTPUT = [
+    JSON.stringify({
+        __REALTIME_TIMESTAMP: '1700000000000000',
+        PRIORITY: '6',
+        MESSAGE: 'Started Session 42 of User root.',
+        _PID: '1',
+        _UID: '0',
+        _SYSTEMD_UNIT: 'session-42.scope',
+    }),
+    JSON.stringify({
+        __REALTIME_TIMESTAMP: '1700000001000000',
+        PRIORITY: '3',
+        MESSAGE: 'Failed to start nginx.service',
+        _PID: '512',
+        _UID: '0',
+        _SYSTEMD_UNIT: 'nginx.service',
+    }),
+].join('\n');
+const SINGLE_ENTRY = JSON.stringify({
+    __REALTIME_TIMESTAMP: '1700000000000000',
+    PRIORITY: '4',
+    MESSAGE: 'Warning from sshd',
+    _PID: '100',
+    _UID: '0',
+});
+describe('parseJournalOutput', () => {
+    it('parses multiple JSON journal entries', () => {
+        const result = parseJournalOutput(JOURNAL_JSON_OUTPUT);
+        expect(result.entries).toHaveLength(2);
+        expect(result.entryCount).toBe(2);
+        expect(result.unit).toBeUndefined();
+        expect(result.entries[0]).toEqual({
+            timestamp: '2023-11-14T22:13:20.000Z',
+            priority: 6,
+            message: 'Started Session 42 of User root.',
+            pid: 1,
+            uid: 0,
+            unit: 'session-42.scope',
+        });
+        expect(result.entries[1]).toEqual({
+            timestamp: '2023-11-14T22:13:21.000Z',
+            priority: 3,
+            message: 'Failed to start nginx.service',
+            pid: 512,
+            uid: 0,
+            unit: 'nginx.service',
+        });
+    });
+    it('sets unit in result when filtering by unit', () => {
+        const result = parseJournalOutput(SINGLE_ENTRY, 'sshd');
+        expect(result.unit).toBe('sshd');
+        expect(result.entries).toHaveLength(1);
+    });
+    it('skips malformed JSON lines', () => {
+        const input = `not json at all\n${SINGLE_ENTRY}\n{broken`;
+        const result = parseJournalOutput(input);
+        expect(result.entries).toHaveLength(1);
+        expect(result.entries[0]?.message).toBe('Warning from sshd');
+    });
+    it('handles empty output', () => {
+        const result = parseJournalOutput('');
+        expect(result.entries).toHaveLength(0);
+        expect(result.entryCount).toBe(0);
+    });
+    it('handles entry without _SYSTEMD_UNIT', () => {
+        const result = parseJournalOutput(SINGLE_ENTRY);
+        expect(result.entries[0]?.unit).toBeUndefined();
+    });
+});
+describe('logsJournal handler', () => {
+    it('passes correct args to exec with defaults', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return SINGLE_ENTRY;
+        };
+        const result = (await logsJournal(undefined, mockExec));
+        expect(calls).toHaveLength(1);
+        expect(calls[0]?.cmd).toBe('journalctl');
+        expect(calls[0]?.args).toEqual([
+            '-n', '50', '--no-pager', '-o', 'json',
+        ]);
+        expect(result.entryCount).toBe(1);
+    });
+    it('passes unit and priority params', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return SINGLE_ENTRY;
+        };
+        await logsJournal({ unit: 'nginx', priority: 'err', lines: 100 }, mockExec);
+        expect(calls[0]?.args).toEqual([
+            '-n', '100', '--no-pager', '-o', 'json',
+            '-u', 'nginx',
+            '-p', 'err',
+        ]);
+    });
+    it('clamps lines to valid range', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return SINGLE_ENTRY;
+        };
+        await logsJournal({ lines: 9999 }, mockExec);
+        expect(calls[0]?.args).toContain('500');
+        await logsJournal({ lines: 0 }, mockExec);
+        expect(calls[1]?.args).toContain('1');
+    });
+});
+//# sourceMappingURL=logs-journal.test.js.map

package/dist/system/probes/logs-journal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-journal.test.js","sourceRoot":"","sources":["../../../src/system/probes/logs-journal.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEpE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;AAExD,MAAM,mBAAmB,GAAG;IAC1B,IAAI,CAAC,SAAS,CAAC;QACb,oBAAoB,EAAE,kBAAkB;QACxC,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,kCAAkC;QAC3C,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,GAAG;QACT,aAAa,EAAE,kBAAkB;KAClC,CAAC;IACF,IAAI,CAAC,SAAS,CAAC;QACb,oBAAoB,EAAE,kBAAkB;QACxC,QAAQ,EAAE,GAAG;QACb,OAAO,EAAE,+BAA+B;QACxC,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,GAAG;QACT,aAAa,EAAE,eAAe;KAC/B,CAAC;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC;IAClC,oBAAoB,EAAE,kBAAkB;IACxC,QAAQ,EAAE,GAAG;IACb,OAAO,EAAE,mBAAmB;IAC5B,IAAI,EAAE,KAAK;IACX,IAAI,EAAE,GAAG;CACV,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,MAAM,GAAG,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QAEvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAEpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAChC,SAAS,EAAE,0BAA0B;YACrC,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,kCAAkC;YAC3C,GAAG,EAAE,CAAC;YACN,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,kBAAkB;SACzB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAChC,SAAS,EAAE,0BAA0B;YACrC,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,+BAA+B;YACxC,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,CAAC;YACN,IAAI,EAAE,eAAe;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAExD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,oBAAoB,YAAY,WAAW,CAAC;QAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAEzC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,WAAW,CAC/B,SAAS,EACT,QAAQ,CACT,CAAkB,CAAC;QAEpB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM;SACvC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,WAAW,CACf,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAC9C,QAAQ,CACT,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM;YACvC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,KAAK;SACZ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC;QAEF,MAAM,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,WAAW,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/system/probes/logs-tail.d.ts

@@ -0,0 +1,14 @@
+import type { ProbeHandler } from '../../types.js';
+export interface LogTailResult {
+    logPath: string;
+    lines: string[];
+    lineCount: number;
+}
+export declare function validateLogPath(path: string): void;
+/**
+ * Tails a log file at a given absolute path.
+ * Restricted to /var/log/ and /tmp/ for security.
+ */
+export declare const logsTail: ProbeHandler;
+export declare function parseLogTailOutput(raw: string, logPath: string): LogTailResult;
+//# sourceMappingURL=logs-tail.d.ts.map

package/dist/system/probes/logs-tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-tail.d.ts","sourceRoot":"","sources":["../../../src/system/probes/logs-tail.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAqBlD;AAED;;;GAGG;AACH,eAAO,MAAM,QAAQ,EAAE,YAoBtB,CAAC;AAEF,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,GACd,aAAa,CAOf"}

package/dist/system/probes/logs-tail.js

@@ -0,0 +1,40 @@
+const ALLOWED_PREFIXES = ['/var/log/', '/tmp/'];
+export function validateLogPath(path) {
+    if (!path.startsWith('/')) {
+        throw new Error(`Path must be absolute (start with /): ${path}`);
+    }
+    if (path.includes('..')) {
+        throw new Error(`Path must not contain '..': ${path}`);
+    }
+    const allowed = ALLOWED_PREFIXES.some((prefix) => path.startsWith(prefix));
+    if (!allowed) {
+        throw new Error(`Path must start with one of: ${ALLOWED_PREFIXES.join(', ')} — got: ${path}`);
+    }
+}
+/**
+ * Tails a log file at a given absolute path.
+ * Restricted to /var/log/ and /tmp/ for security.
+ */
+export const logsTail = async (params, exec) => {
+    const path = params?.path;
+    if (!path) {
+        throw new Error('Missing required parameter: path');
+    }
+    validateLogPath(path);
+    const lines = Math.min(Math.max(Number(params?.lines ?? 50), 1), 500);
+    const output = await exec('tail', [
+        '-n',
+        String(lines),
+        path,
+    ]);
+    return parseLogTailOutput(output, path);
+};
+export function parseLogTailOutput(raw, logPath) {
+    const lines = raw.split('\n').filter(Boolean);
+    return {
+        logPath,
+        lines,
+        lineCount: lines.length,
+    };
+}
+//# sourceMappingURL=logs-tail.js.map

package/dist/system/probes/logs-tail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-tail.js","sourceRoot":"","sources":["../../../src/system/probes/logs-tail.ts"],"names":[],"mappings":"AAQA,MAAM,gBAAgB,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,yCAAyC,IAAI,EAAE,CAChD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,EAAE,CACtC,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CACxB,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gCAAgC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAiB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAC3D,MAAM,IAAI,GAAG,MAAM,EAAE,IAA0B,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,eAAe,CAAC,IAAI,CAAC,CAAC;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EACxC,GAAG,CACJ,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE;QAChC,IAAI;QACJ,MAAM,CAAC,KAAK,CAAC;QACb,IAAI;KACL,CAAC,CAAC;IAEH,OAAO,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,UAAU,kBAAkB,CAChC,GAAW,EACX,OAAe;IAEf,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO;QACL,OAAO;QACP,KAAK;QACL,SAAS,EAAE,KAAK,CAAC,MAAM;KACxB,CAAC;AACJ,CAAC"}

package/dist/system/probes/logs-tail.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=logs-tail.test.d.ts.map

package/dist/system/probes/logs-tail.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-tail.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/logs-tail.test.ts"],"names":[],"mappings":""}

package/dist/system/probes/logs-tail.test.js

@@ -0,0 +1,82 @@
+import { describe, expect, it } from 'vitest';
+import { logsTail, parseLogTailOutput, validateLogPath, } from './logs-tail.js';
+const SYSLOG_OUTPUT = `Jan 15 10:00:01 host systemd[1]: Started Session 1
+Jan 15 10:00:02 host sshd[512]: Accepted publickey
+Jan 15 10:00:03 host kernel: audit: type=1400`;
+describe('validateLogPath', () => {
+    it('accepts valid /var/log/ paths', () => {
+        expect(() => validateLogPath('/var/log/syslog')).not.toThrow();
+        expect(() => validateLogPath('/var/log/nginx/access.log')).not.toThrow();
+    });
+    it('accepts valid /tmp/ paths', () => {
+        expect(() => validateLogPath('/tmp/debug.log')).not.toThrow();
+    });
+    it('rejects relative paths', () => {
+        expect(() => validateLogPath('var/log/syslog')).toThrow('Path must be absolute');
+    });
+    it('rejects paths with ..', () => {
+        expect(() => validateLogPath('/var/log/../../etc/shadow')).toThrow("must not contain '..'");
+    });
+    it('rejects paths outside allowed prefixes', () => {
+        expect(() => validateLogPath('/etc/shadow')).toThrow('must start with one of');
+        expect(() => validateLogPath('/home/user/.bash_history')).toThrow('must start with one of');
+        expect(() => validateLogPath('/root/.ssh/id_rsa')).toThrow('must start with one of');
+    });
+});
+describe('parseLogTailOutput', () => {
+    it('parses multi-line log output', () => {
+        const result = parseLogTailOutput(SYSLOG_OUTPUT, '/var/log/syslog');
+        expect(result.logPath).toBe('/var/log/syslog');
+        expect(result.lineCount).toBe(3);
+        expect(result.lines[0]).toContain('Started Session');
+        expect(result.lines[2]).toContain('audit');
+    });
+    it('handles empty output', () => {
+        const result = parseLogTailOutput('', '/var/log/empty.log');
+        expect(result.lineCount).toBe(0);
+        expect(result.lines).toHaveLength(0);
+    });
+});
+describe('logsTail handler', () => {
+    it('throws when path is missing', async () => {
+        const mockExec = async () => '';
+        await expect(logsTail(undefined, mockExec)).rejects.toThrow('Missing required parameter: path');
+        await expect(logsTail({}, mockExec)).rejects.toThrow('Missing required parameter: path');
+    });
+    it('throws for invalid paths before calling exec', async () => {
+        const calls = [];
+        const mockExec = async (cmd) => {
+            calls.push(cmd);
+            return '';
+        };
+        await expect(logsTail({ path: '/etc/shadow' }, mockExec)).rejects.toThrow('must start with one of');
+        expect(calls).toHaveLength(0);
+    });
+    it('passes correct args with defaults', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return SYSLOG_OUTPUT;
+        };
+        const result = (await logsTail({ path: '/var/log/syslog' }, mockExec));
+        expect(calls).toHaveLength(1);
+        expect(calls[0]?.cmd).toBe('tail');
+        expect(calls[0]?.args).toEqual([
+            '-n', '50', '/var/log/syslog',
+        ]);
+        expect(result.logPath).toBe('/var/log/syslog');
+        expect(result.lineCount).toBe(3);
+    });
+    it('clamps lines to valid range', async () => {
+        const calls = [];
+        const mockExec = async (cmd, args) => {
+            calls.push({ cmd, args });
+            return '';
+        };
+        await logsTail({ path: '/var/log/syslog', lines: 9999 }, mockExec);
+        expect(calls[0]?.args).toContain('500');
+        await logsTail({ path: '/var/log/syslog', lines: 0 }, mockExec);
+        expect(calls[1]?.args).toContain('1');
+    });
+});
+//# sourceMappingURL=logs-tail.test.js.map

package/dist/system/probes/logs-tail.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs-tail.test.js","sourceRoot":"","sources":["../../../src/system/probes/logs-tail.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAG9C,OAAO,EACL,QAAQ,EACR,kBAAkB,EAClB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,MAAM,aAAa,GAAG;;8CAEwB,CAAC;AAE/C,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,iBAAiB,CAAC,CACnC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,2BAA2B,CAAC,CAC7C,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,gBAAgB,CAAC,CAClC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,gBAAgB,CAAC,CAClC,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,2BAA2B,CAAC,CAC7C,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,aAAa,CAAC,CAC/B,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,0BAA0B,CAAC,CAC5C,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,eAAe,CAAC,mBAAmB,CAAC,CACrC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAC/B,aAAa,EACb,iBAAiB,CAClB,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAE5D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,QAAQ,GAAW,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,CACV,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAC9B,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;QACtD,MAAM,MAAM,CACV,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CACvB,CAAC,OAAO,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,EAAE;YACrC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,MAAM,CACV,QAAQ,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,QAAQ,CAAC,CAC5C,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,aAAa,CAAC;QACvB,CAAC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAC5B,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAC3B,QAAQ,CACT,CAAkB,CAAC;QAEpB,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC;YAC7B,IAAI,EAAE,IAAI,EAAE,iBAAiB;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,KAAK,GAA2C,EAAE,CAAC;QACzD,MAAM,QAAQ,GAAW,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1B,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,MAAM,QAAQ,CACZ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,IAAI,EAAE,EACxC,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAExC,MAAM,QAAQ,CACZ,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EACrC,QAAQ,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/system/probes/traceroute.d.ts

@@ -0,0 +1,17 @@
+import type { ProbeHandler } from '../../types.js';
+export interface TracerouteHop {
+    hop: number;
+    ip: string | null;
+    rttMs: (number | null)[];
+}
+export interface TracerouteResult {
+    host: string;
+    hops: TracerouteHop[];
+}
+/**
+ * Traces the network path to a host via `traceroute -n`.
+ * Works on both Linux and macOS.
+ */
+export declare const traceroute: ProbeHandler;
+export declare function parseTracerouteOutput(raw: string, host: string): TracerouteResult;
+//# sourceMappingURL=traceroute.d.ts.map

package/dist/system/probes/traceroute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceroute.d.ts","sourceRoot":"","sources":["../../../src/system/probes/traceroute.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,EAAE,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,aAAa,EAAE,CAAC;CACvB;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,YAqBxB,CAAC;AAEF,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,gBAAgB,CAuBlB"}

package/dist/system/probes/traceroute.js

@@ -0,0 +1,72 @@
+/**
+ * Traces the network path to a host via `traceroute -n`.
+ * Works on both Linux and macOS.
+ */
+export const traceroute = async (params, exec) => {
+    const host = params?.host;
+    if (!host) {
+        throw new Error('Missing required parameter: host');
+    }
+    const maxHops = Math.min(Math.max(Number(params?.maxHops ?? 30), 1), 64);
+    const output = await exec('traceroute', [
+        '-n',
+        '-m',
+        String(maxHops),
+        '-w',
+        '2',
+        host,
+    ]);
+    return parseTracerouteOutput(output, host);
+};
+export function parseTracerouteOutput(raw, host) {
+    const hops = [];
+    const lines = raw.trim().split('\n');
+    for (const line of lines) {
+        // Skip the header line ("traceroute to ...")
+        const hopMatch = line.match(/^\s*(\d+)\s+(.+)/);
+        if (!hopMatch)
+            continue;
+        const hopNum = Number(hopMatch[1]);
+        const rest = hopMatch[2] ?? '';
+        // All probes timed out: "* * *"
+        if (/^\*\s+\*\s+\*\s*$/.test(rest)) {
+            hops.push({ hop: hopNum, ip: null, rttMs: [null, null, null] });
+            continue;
+        }
+        const hop = parseHopLine(hopNum, rest);
+        hops.push(hop);
+    }
+    return { host, hops };
+}
+function parseHopLine(hopNum, rest) {
+    let ip = null;
+    const rttMs = [];
+    // Tokenize the rest of the line
+    const tokens = rest.trim().split(/\s+/);
+    let i = 0;
+    while (i < tokens.length) {
+        const token = tokens[i];
+        if (!token || token === '*') {
+            rttMs.push(null);
+            i++;
+        }
+        else if (token === 'ms') {
+            // Skip "ms" — already consumed the number
+            i++;
+        }
+        else if (/^\d+\.\d+\.\d+\.\d+$/.test(token) || token.includes(':')) {
+            // IPv4 or IPv6 address
+            ip = token;
+            i++;
+        }
+        else {
+            const num = Number.parseFloat(token);
+            if (!Number.isNaN(num)) {
+                rttMs.push(num);
+            }
+            i++;
+        }
+    }
+    return { hop: hopNum, ip, rttMs };
+}
+//# sourceMappingURL=traceroute.js.map

package/dist/system/probes/traceroute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceroute.js","sourceRoot":"","sources":["../../../src/system/probes/traceroute.ts"],"names":[],"mappings":"AAaA;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAiB,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IAC7D,MAAM,IAAI,GAAG,MAAM,EAAE,IAA0B,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAC1C,EAAE,CACH,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE;QACtC,IAAI;QACJ,IAAI;QACJ,MAAM,CAAC,OAAO,CAAC;QACf,IAAI;QACJ,GAAG;QACH,IAAI;KACL,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,GAAW,EACX,IAAY;IAEZ,MAAM,IAAI,GAAoB,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAErC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,6CAA6C;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,SAAS;QAExB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE/B,gCAAgC;QAChC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAY;IAChD,IAAI,EAAE,GAAkB,IAAI,CAAC;IAC7B,MAAM,KAAK,GAAsB,EAAE,CAAC;IAEpC,gCAAgC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QAExB,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1B,0CAA0C;YAC1C,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrE,uBAAuB;YACvB,EAAE,GAAG,KAAK,CAAC;YACX,CAAC,EAAE,CAAC;QACN,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,CAAC;YACD,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACpC,CAAC"}

package/dist/system/probes/traceroute.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=traceroute.test.d.ts.map

package/dist/system/probes/traceroute.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traceroute.test.d.ts","sourceRoot":"","sources":["../../../src/system/probes/traceroute.test.ts"],"names":[],"mappings":""}