@squadrules/mcp 4.8.6

package/dist/utils/space-filter.js

@@ -0,0 +1,35 @@
+/**
+ * Build Qdrant filter for space isolation. Merges space_id constraint with optional existing filter.
+ */
+/**
+ * Build a filter that restricts results to points whose space_id is in allowedSpaceIds.
+ * Merges with existingFilter.must so callers can add domain, adapter.id, etc.
+ */
+export function buildSpaceFilter(allowedSpaceIds, existingFilter) {
+    const spaceCondition = {
+        key: 'space_id',
+        match: { any: allowedSpaceIds }
+    };
+    const existingMust = existingFilter?.must ?? [];
+    return {
+        must: [spaceCondition, ...existingMust]
+    };
+}
+/**
+ * Scroll filter for adapter siblings: same `adapter.id` and either `space_id` in the allowed set
+ * or older rows with no `space_id` payload (Qdrant `match any` does not match missing payload keys).
+ */
+export function buildAdapterSiblingScrollFilter(allowedSpaceIds, adapterId) {
+    return {
+        must: [
+            { key: 'adapter.id', match: { value: adapterId } },
+            {
+                should: [
+                    { key: 'space_id', match: { any: allowedSpaceIds } },
+                    { is_empty: { key: 'space_id' } }
+                ]
+            }
+        ]
+    };
+}
+//# sourceMappingURL=space-filter.js.map

package/dist/utils/space-filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-filter.js","sourceRoot":"","sources":["../../src/utils/space-filter.ts"],"names":[],"mappings":"AAAA;;GAEG;AAOH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,eAAyB,EACzB,cAAiC;IAEjC,MAAM,cAAc,GAAG;QACrB,GAAG,EAAE,UAAU;QACf,KAAK,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE;KAChC,CAAC;IACF,MAAM,YAAY,GAAG,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,CAAC,cAAc,EAAE,GAAG,YAAY,CAAC;KACxC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,eAAyB,EACzB,SAAiB;IAEjB,OAAO;QACL,IAAI,EAAE;YACJ,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YAClD;gBACE,MAAM,EAAE;oBACN,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE,EAAE;oBACpD,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE;iBAClC;aACF;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/structured-logger.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Structured HTTP Access Logging for KAIROS MCP
+ *
+ * Uses shared Pino backend (log-core) for consistent JSON shape.
+ * See the Testing and Observability topic in the project Wiki for levels, standard fields, and usage.
+ *
+ * Features:
+ * - request_id, client_ip, duration_ms, error_code
+ * - child(component, module) for context
+ * - Proxy-safe client IP when TRUSTED_PROXY_CIDRS is set
+ */
+import pino from 'pino';
+import type { Request, Response } from 'express';
+import { buildAuditLine } from './audit-log-events.js';
+declare function getClientIp(req: Request): string;
+/** Sanitize string for safe logging and audit write: neutralize line breaks first (CodeQL log-injection pattern), then other CTL. */
+declare function sanitizeLogMessage(s: string, maxLen?: number): string;
+type SafeAuditPrimitive = string | number | boolean | null;
+interface SafeAuditRecord {
+    [key: string]: SafeAuditValue;
+}
+type SafeAuditValue = SafeAuditPrimitive | SafeAuditRecord;
+/** Convert arbitrary bindings to a safe audit-only shape before any file write. */
+declare function sanitizeBindingsForAudit(bindings: Record<string, unknown>): SafeAuditRecord;
+export declare function writeAuditLine(level: 'info' | 'warn' | 'error', bindings: Record<string, unknown>): void;
+declare const httpLogger: (req: Request, res: Response, next: Function) => void;
+export type ToolOperation = 'search' | 'store' | 'update' | 'delete' | 'retrieve' | 'upsert' | 'rate';
+export interface ErrorLogOptions {
+    error_code?: string;
+    request_id?: string;
+    [key: string]: unknown;
+}
+export interface StructuredLoggerApi {
+    debug(message: string): void;
+    debug(bindings: Record<string, unknown>, message: string): void;
+    info(message: string): void;
+    info(bindings: Record<string, unknown>, message: string): void;
+    warn(message: string): void;
+    warn(bindings: Record<string, unknown>, message: string): void;
+    error(message: string, error?: Error | unknown): void;
+    error(message: string, error: Error | unknown, options: ErrorLogOptions): void;
+    tool(toolName: string, operation: ToolOperation, details: string): void;
+    success(operation: string, details: string): void;
+    requestTimeout(operation: string, timeoutMs: number): void;
+    getTransportType(): 'stdio' | 'http';
+    getLogFormat(): 'text' | 'json';
+    getPinoLogger(): pino.Logger;
+    child(bindings: Record<string, unknown>): StructuredLoggerApi;
+}
+declare const structuredLogger: StructuredLoggerApi;
+export { structuredLogger, structuredLogger as logger, httpLogger, getClientIp, sanitizeLogMessage, sanitizeBindingsForAudit, buildAuditLine };
+export type { Request, Response };
+//# sourceMappingURL=structured-logger.d.ts.map

package/dist/utils/structured-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-logger.d.ts","sourceRoot":"","sources":["../../src/utils/structured-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AASvD,iBAAS,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAazC;AAiBD,qIAAqI;AACrI,iBAAS,kBAAkB,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,MAAM,CAK9D;AAUD,KAAK,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC3D,UAAU,eAAe;IACvB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAAC;CAC/B;AACD,KAAK,cAAc,GAAG,kBAAkB,GAAG,eAAe,CAAC;AAyC3D,mFAAmF;AACnF,iBAAS,wBAAwB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,eAAe,CAGpF;AAyBD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAGxG;AAED,QAAA,MAAM,UAAU,GAAI,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,QAAQ,KAAG,IAiCjE,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtG,MAAM,WAAW,eAAe;IAC9B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC;IACtD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/E,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACxE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3D,gBAAgB,IAAI,OAAO,GAAG,MAAM,CAAC;IACrC,YAAY,IAAI,MAAM,GAAG,MAAM,CAAC;IAChC,aAAa,IAAI,IAAI,CAAC,MAAM,CAAC;IAC7B,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CAAC;CAC/D;AAiID,QAAA,MAAM,gBAAgB,qBAAuB,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,IAAI,MAAM,EAC1B,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACf,CAAC;AACF,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC"}

package/dist/utils/structured-logger.js

@@ -0,0 +1,297 @@
+/**
+ * Structured HTTP Access Logging for KAIROS MCP
+ *
+ * Uses shared Pino backend (log-core) for consistent JSON shape.
+ * See the Testing and Observability topic in the project Wiki for levels, standard fields, and usage.
+ *
+ * Features:
+ * - request_id, client_ip, duration_ms, error_code
+ * - child(component, module) for context
+ * - Proxy-safe client IP when TRUSTED_PROXY_CIDRS is set
+ */
+import { createWriteStream } from 'node:fs';
+import { buildAuditLine } from './audit-log-events.js';
+import { getBaseLogger } from './log-core.js';
+import { AUDIT_LOG_FILE, LOG_LEVEL, LOG_FORMAT, TRANSPORT_TYPE } from '../config.js';
+const TRUSTED_PROXY_CIDRS = (process.env['TRUSTED_PROXY_CIDRS'] || '')
+    .split(',')
+    .map(s => s.trim())
+    .filter(Boolean);
+function getClientIp(req) {
+    const reqWithSocket = req;
+    const remote = reqWithSocket?.socket?.remoteAddress ?? reqWithSocket?.ip ?? 'unknown';
+    const xff = (req.headers && req.headers['x-forwarded-for'] ? String(req.headers['x-forwarded-for']) : '');
+    if (!xff)
+        return remote;
+    if (TRUSTED_PROXY_CIDRS.length > 0) {
+        const first = xff.split(',')[0];
+        return (first && first.trim()) || remote;
+    }
+    return remote;
+}
+const baseLogger = getBaseLogger();
+let auditLogStream = null;
+const MAX_AUDIT_LINE_BYTES = 65_536;
+const MAX_AUDIT_DEPTH = 4;
+const MAX_AUDIT_KEYS = 40;
+const MAX_AUDIT_STRING_LEN = 2_048;
+if (AUDIT_LOG_FILE) {
+    try {
+        auditLogStream = createWriteStream(AUDIT_LOG_FILE, { flags: 'a' });
+    }
+    catch {
+        auditLogStream = null;
+    }
+}
+/** Sanitize string for safe logging and audit write: neutralize line breaks first (CodeQL log-injection pattern), then other CTL. */
+function sanitizeLogMessage(s, maxLen = 32_768) {
+    if (typeof s !== 'string')
+        return '';
+    const safe = s.replace(/[\r\n]/g, ' ').slice(0, maxLen);
+    const noCtl = safe.replace(/[\x00-\x1f]/g, ' ');
+    return noCtl.replace(/\s+/g, ' ').trim() || '(empty)';
+}
+const MAX_BINDING_KEY_LEN = 256;
+/** Sanitize object keys before they appear in log/audit records (keys can carry CR/LF if bindings come from parsed JSON). */
+function sanitizeBindingKey(key) {
+    const k = sanitizeLogMessage(key, MAX_BINDING_KEY_LEN);
+    return k === '(empty)' ? '_key' : k;
+}
+function toSafeAuditValue(value, depth = 0) {
+    if (depth > MAX_AUDIT_DEPTH)
+        return '[max depth]';
+    if (value === null || value === undefined)
+        return null;
+    if (typeof value === 'string')
+        return sanitizeLogMessage(value, MAX_AUDIT_STRING_LEN);
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? value : null;
+    if (typeof value === 'boolean')
+        return value;
+    if (typeof value === 'bigint')
+        return sanitizeLogMessage(value.toString(), 128);
+    if (value instanceof Date)
+        return value.toISOString();
+    if (value instanceof Error) {
+        const out = {
+            name: sanitizeLogMessage(value.name || 'Error', 128),
+            message: sanitizeLogMessage(value.message, MAX_AUDIT_STRING_LEN)
+        };
+        if (typeof value.stack === 'string' && value.stack) {
+            out['stack'] = sanitizeLogMessage(value.stack, MAX_AUDIT_STRING_LEN);
+        }
+        return out;
+    }
+    if (Array.isArray(value)) {
+        const out = { kind: 'array', item_count: value.length };
+        if (value.length > 0)
+            out['first_item'] = toSafeAuditValue(value[0], depth + 1);
+        return out;
+    }
+    if (typeof value === 'object') {
+        const out = {};
+        const entries = Object.entries(value);
+        const limit = Math.min(entries.length, MAX_AUDIT_KEYS);
+        for (let i = 0; i < limit; i++) {
+            const entry = entries[i];
+            if (!entry)
+                continue;
+            const [k, v] = entry;
+            out[sanitizeBindingKey(k)] = toSafeAuditValue(v, depth + 1);
+        }
+        if (entries.length > MAX_AUDIT_KEYS)
+            out['_omitted_key_count'] = entries.length - MAX_AUDIT_KEYS;
+        return out;
+    }
+    return sanitizeLogMessage(String(value), 256);
+}
+/** Convert arbitrary bindings to a safe audit-only shape before any file write. */
+function sanitizeBindingsForAudit(bindings) {
+    const safe = toSafeAuditValue(bindings);
+    return (safe !== null && typeof safe === 'object' && !Array.isArray(safe)) ? safe : {};
+}
+/**
+ * Pino accepts arbitrary objects; JSON round-trip yields a plain data-only payload so no prototype
+ * or unexpected getters reach the serializer (defense-in-depth for structured log sinks).
+ */
+function cloneSafeRecordForPino(record) {
+    try {
+        return JSON.parse(JSON.stringify(record));
+    }
+    catch {
+        return { category: 'error', log_clone_failed: true };
+    }
+}
+function maybeWriteAuditLine(level, bindings) {
+    if (!auditLogStream)
+        return;
+    try {
+        const line = buildAuditLine(level, bindings);
+        if (line && Buffer.byteLength(line, 'utf8') <= MAX_AUDIT_LINE_BYTES)
+            auditLogStream.write(line);
+    }
+    catch {
+        // Never fail request path because audit side-stream write fails.
+    }
+}
+// Public audit write API for modules outside this file. No-ops when AUDIT_LOG_FILE is unset.
+export function writeAuditLine(level, bindings) {
+    if (!auditLogStream)
+        return;
+    maybeWriteAuditLine(level, sanitizeBindingsForAudit(bindings));
+}
+// HTTP logging middleware
+const httpLogger = (req, res, next) => {
+    const start = Date.now();
+    const startTime = new Date().toISOString();
+    const requestId = req.headers['x-request-id'] || `req-${Date.now()}-${Math.random().toString(36).slice(2, 11)}`;
+    req.requestId = requestId;
+    const startBindings = sanitizeBindingsForAudit({
+        time: startTime,
+        http: { method: req.method, path: req.url, protocol: `HTTP/${req.httpVersion}` },
+        client: { ip: getClientIp(req) },
+        user_agent: req.headers['user-agent'],
+        request_id: requestId
+    });
+    baseLogger.info(cloneSafeRecordForPino(startBindings), 'HTTP request received');
+    res.on('finish', () => {
+        const duration = Date.now() - start;
+        const statusCode = res.statusCode ?? 500;
+        const methodName = statusCode >= 500 ? 'error' : statusCode >= 400 ? 'warn' : 'info';
+        const rid = req.requestId ?? req.headers['x-request-id'];
+        const finishBindings = sanitizeBindingsForAudit({
+            time: new Date().toISOString(),
+            http: { method: req.method, path: req.url, protocol: `HTTP/${req.httpVersion}` },
+            status: statusCode,
+            response_time_ms: duration,
+            client: { ip: getClientIp(req) },
+            user_agent: req.headers['user-agent'],
+            request_id: rid
+        });
+        baseLogger[methodName](cloneSafeRecordForPino(finishBindings), 'HTTP request completed');
+    });
+    next();
+};
+function wrapPino(pinoInstance) {
+    const includeStack = LOG_LEVEL === 'debug' || process.env['NODE_ENV'] === 'development';
+    return {
+        // Keep free-form log text on one auditable sanitization path for every sink.
+        debug(msgOrBindings, message) {
+            if (typeof msgOrBindings === 'string') {
+                const bindings = sanitizeBindingsForAudit({ category: 'debug' });
+                const safeMsg = sanitizeLogMessage(msgOrBindings);
+                pinoInstance.debug(cloneSafeRecordForPino(bindings), safeMsg.replace(/[\r\n]/g, ''));
+                return;
+            }
+            const existingCategory = typeof msgOrBindings['category'] === 'string'
+                ? msgOrBindings['category']
+                : undefined;
+            const rawBindings = existingCategory
+                ? { ...msgOrBindings }
+                : { ...msgOrBindings, category: 'debug' };
+            const safeBindings = sanitizeBindingsForAudit(rawBindings);
+            const safeMsg = sanitizeLogMessage(message ?? '');
+            pinoInstance.debug(cloneSafeRecordForPino(safeBindings), safeMsg.replace(/[\r\n]/g, ''));
+        },
+        info(msgOrBindings, message) {
+            if (typeof msgOrBindings === 'string') {
+                const bindings = sanitizeBindingsForAudit({ category: 'info' });
+                const safeMsg = sanitizeLogMessage(msgOrBindings);
+                pinoInstance.info(cloneSafeRecordForPino(bindings), safeMsg.replace(/[\r\n]/g, ''));
+                maybeWriteAuditLine('info', bindings);
+            }
+            else {
+                const existingCategory = typeof msgOrBindings['category'] === 'string'
+                    ? msgOrBindings['category']
+                    : undefined;
+                const rawBindings = existingCategory
+                    ? { ...msgOrBindings }
+                    : { ...msgOrBindings, category: 'info' };
+                const bindings = sanitizeBindingsForAudit(rawBindings);
+                const finalMessage = sanitizeLogMessage(message ?? '');
+                pinoInstance.info(cloneSafeRecordForPino(bindings), finalMessage.replace(/[\r\n]/g, ''));
+                maybeWriteAuditLine('info', bindings);
+            }
+        },
+        warn(msgOrBindings, message) {
+            if (typeof msgOrBindings === 'string') {
+                const bindings = sanitizeBindingsForAudit({ category: 'warning' });
+                const safeMsg = sanitizeLogMessage(msgOrBindings);
+                pinoInstance.warn(cloneSafeRecordForPino(bindings), safeMsg.replace(/[\r\n]/g, ''));
+                maybeWriteAuditLine('warn', bindings);
+                return;
+            }
+            const existingCategory = typeof msgOrBindings['category'] === 'string'
+                ? msgOrBindings['category']
+                : undefined;
+            const rawBindings = existingCategory
+                ? { ...msgOrBindings }
+                : { ...msgOrBindings, category: 'warning' };
+            const bindings = sanitizeBindingsForAudit(rawBindings);
+            const finalMessage = sanitizeLogMessage(message ?? '');
+            pinoInstance.warn(cloneSafeRecordForPino(bindings), finalMessage.replace(/[\r\n]/g, ''));
+            maybeWriteAuditLine('warn', bindings);
+        },
+        error(message, error, options) {
+            const rawBindings = { category: 'error' };
+            if (options && options['error_code'])
+                rawBindings['error_code'] = options['error_code'];
+            if (options && options['request_id'])
+                rawBindings['request_id'] = options['request_id'];
+            if (options) {
+                Object.keys(options).forEach(k => {
+                    if (k !== 'error_code' && k !== 'request_id')
+                        rawBindings[k] = options[k];
+                });
+            }
+            if (error) {
+                rawBindings['error'] = error instanceof Error
+                    ? { message: error.message, stack: includeStack ? error.stack : undefined }
+                    : error;
+            }
+            const bindings = sanitizeBindingsForAudit(rawBindings);
+            const safeMessage = sanitizeLogMessage(message);
+            pinoInstance.error(cloneSafeRecordForPino(bindings), safeMessage.replace(/[\r\n]/g, ''));
+            maybeWriteAuditLine('error', bindings);
+        },
+        tool(toolName, operation, details) {
+            const msg = sanitizeLogMessage(`[${toolName}] ${operation.toUpperCase()} ${details}`);
+            const bindings = sanitizeBindingsForAudit({
+                tool: toolName,
+                operation: operation.toUpperCase(),
+                details,
+                category: 'tool_operation'
+            });
+            pinoInstance.info(cloneSafeRecordForPino(bindings), msg.replace(/[\r\n]/g, ''));
+        },
+        success(operation, details) {
+            const bindings = sanitizeBindingsForAudit({ operation, details, category: 'success' });
+            const msg = sanitizeLogMessage(`[${operation}] ${details}`);
+            pinoInstance.info(cloneSafeRecordForPino(bindings), msg.replace(/[\r\n]/g, ''));
+        },
+        requestTimeout(operation, timeoutMs) {
+            const bindings = sanitizeBindingsForAudit({
+                operation,
+                timeoutMs,
+                category: 'timeout',
+                note: 'Client did not receive response'
+            });
+            pinoInstance.error(cloneSafeRecordForPino(bindings), 'Request timeout');
+        },
+        getTransportType() {
+            return TRANSPORT_TYPE;
+        },
+        getLogFormat() {
+            return LOG_FORMAT === 'json' ? 'json' : 'text';
+        },
+        getPinoLogger() {
+            return pinoInstance;
+        },
+        child(bindings) {
+            return wrapPino(pinoInstance.child(bindings));
+        }
+    };
+}
+const structuredLogger = wrapPino(baseLogger);
+export { structuredLogger, structuredLogger as logger, httpLogger, getClientIp, sanitizeLogMessage, sanitizeBindingsForAudit, buildAuditLine };
+//# sourceMappingURL=structured-logger.js.map

package/dist/utils/structured-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"structured-logger.js","sourceRoot":"","sources":["../../src/utils/structured-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAErF,MAAM,mBAAmB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC;KACnE,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KAClB,MAAM,CAAC,OAAO,CAAC,CAAC;AAEnB,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,aAAa,GAAG,GAAqE,CAAC;IAC5F,MAAM,MAAM,GAAG,aAAa,EAAE,MAAM,EAAE,aAAa,IAAI,aAAa,EAAE,EAAE,IAAI,SAAS,CAAC;IACtF,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE1G,IAAI,CAAC,GAAG;QAAE,OAAO,MAAM,CAAC;IAExB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,MAAM,CAAC;IAC3C,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;AACnC,IAAI,cAAc,GAAuB,IAAI,CAAC;AAC9C,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,eAAe,GAAG,CAAC,CAAC;AAC1B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAEnC,IAAI,cAAc,EAAE,CAAC;IACnB,IAAI,CAAC;QACH,cAAc,GAAG,iBAAiB,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,IAAI,CAAC;IACxB,CAAC;AACH,CAAC;AAED,qIAAqI;AACrI,SAAS,kBAAkB,CAAC,CAAS,EAAE,MAAM,GAAG,MAAM;IACpD,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;AACxD,CAAC;AAED,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,6HAA6H;AAC7H,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,CAAC,GAAG,kBAAkB,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACvD,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAQD,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IACjD,IAAI,KAAK,GAAG,eAAe;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACtF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IAChF,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAoB;YAC3B,IAAI,EAAE,kBAAkB,CAAC,KAAK,CAAC,IAAI,IAAI,OAAO,EAAE,GAAG,CAAC;YACpD,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC;SACjE,CAAC;QACF,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACnD,GAAG,CAAC,OAAO,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACzE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChF,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAoB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK;gBAAE,SAAS;YACrB,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;YACrB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc;YAAE,GAAG,CAAC,oBAAoB,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC;QACjG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC;AAED,mFAAmF;AACnF,SAAS,wBAAwB,CAAC,QAAiC;IACjE,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAuB,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5G,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,MAAuB;IACrD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAA4B,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAgC,EAAE,QAAyB;IACtF,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC7C,IAAI,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,oBAAoB;YAAE,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,iEAAiE;IACnE,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,cAAc,CAAC,KAAgC,EAAE,QAAiC;IAChG,IAAI,CAAC,cAAc;QAAE,OAAO;IAC5B,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjE,CAAC;AACD,0BAA0B;AAC1B,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,GAAa,EAAE,IAAc,EAAQ,EAAE;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAY,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAC3H,GAAwC,CAAC,SAAS,GAAG,SAAS,CAAC;IAEhE,MAAM,aAAa,GAAG,wBAAwB,CAAC;QAC7C,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE;QAChF,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE;QAChC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;QACrC,UAAU,EAAE,SAAS;KACtB,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAEhF,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;QACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACpC,MAAM,UAAU,GAAI,GAA0C,CAAC,UAAU,IAAI,GAAG,CAAC;QACjF,MAAM,UAAU,GAAG,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACrF,MAAM,GAAG,GAAI,GAAwC,CAAC,SAAS,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/F,MAAM,cAAc,GAAG,wBAAwB,CAAC;YAC9C,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE;YAChF,MAAM,EAAE,UAAU;YAClB,gBAAgB,EAAE,QAAQ;YAC1B,MAAM,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE;YAChC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;YACrC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QACF,UAA0B,CAAC,UAAU,CAAC,CAAC,sBAAsB,CAAC,cAAc,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC,CAAC;AA4BF,SAAS,QAAQ,CAAC,YAAyB;IACzC,MAAM,YAAY,GAAG,SAAS,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,aAAa,CAAC;IACxF,OAAO;QACL,6EAA6E;QAC7E,KAAK,CAAC,aAA+C,EAAE,OAAgB;YACrE,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBACjE,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;gBAClD,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,MAAM,gBAAgB,GAAG,OAAO,aAAa,CAAC,UAAU,CAAC,KAAK,QAAQ;gBACpE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;gBAC3B,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,WAAW,GAAG,gBAAgB;gBAClC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;gBACtB,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAC5C,MAAM,YAAY,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YAClD,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,aAA+C,EAAE,OAAgB;YACpE,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;gBAChE,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;gBACpF,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,gBAAgB,GAAG,OAAO,aAAa,CAAC,UAAU,CAAC,KAAK,QAAQ;oBACpE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;oBAC3B,CAAC,CAAC,SAAS,CAAC;gBACd,MAAM,WAAW,GAAG,gBAAgB;oBAClC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;oBACtB,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;gBAC3C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;gBACvD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBACvD,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;gBACzF,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAA+C,EAAE,OAAgB;YACpE,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;gBACnE,MAAM,OAAO,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;gBAClD,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;gBACpF,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,MAAM,gBAAgB,GAAG,OAAO,aAAa,CAAC,UAAU,CAAC,KAAK,QAAQ;gBACpE,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC;gBAC3B,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,WAAW,GAAG,gBAAgB;gBAClC,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;gBACtB,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,kBAAkB,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACvD,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;YACzF,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,OAAe,EAAE,KAAuB,EAAE,OAAyB;YACvE,MAAM,WAAW,GAA4B,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACnE,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;gBAAE,WAAW,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACxF,IAAI,OAAO,IAAI,OAAO,CAAC,YAAY,CAAC;gBAAE,WAAW,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACxF,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;oBAC/B,IAAI,CAAC,KAAK,YAAY,IAAI,CAAC,KAAK,YAAY;wBAAE,WAAW,CAAC,CAAC,CAAC,GAAI,OAAmC,CAAC,CAAC,CAAC,CAAC;gBACzG,CAAC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACV,WAAW,CAAC,OAAO,CAAC,GAAG,KAAK,YAAY,KAAK;oBAC3C,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE;oBAC3E,CAAC,CAAC,KAAK,CAAC;YACZ,CAAC;YACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAChD,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;YACzF,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,CAAC,QAAgB,EAAE,SAAwB,EAAE,OAAe;YAC9D,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,QAAQ,KAAK,SAAS,CAAC,WAAW,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;YACtF,MAAM,QAAQ,GAAG,wBAAwB,CAAC;gBACxC,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;gBAClC,OAAO;gBACP,QAAQ,EAAE,gBAAgB;aAC3B,CAAC,CAAC;YACH,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,CAAC,SAAiB,EAAE,OAAe;YACxC,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;YACvF,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC,CAAC;YAC5D,YAAY,CAAC,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;QAED,cAAc,CAAC,SAAiB,EAAE,SAAiB;YACjD,MAAM,QAAQ,GAAG,wBAAwB,CAAC;gBACxC,SAAS;gBACT,SAAS;gBACT,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,iCAAiC;aACxC,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAC1E,CAAC;QAED,gBAAgB;YACd,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,YAAY;YACV,OAAO,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACjD,CAAC;QAED,aAAa;YACX,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,QAAiC;YACrC,OAAO,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,gBAAgB,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;AAE9C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,IAAI,MAAM,EAC1B,UAAU,EACV,WAAW,EACX,kBAAkB,EAClB,wBAAwB,EACxB,cAAc,EACf,CAAC"}

package/dist/utils/tenant-context.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Space and tenant context for multitenancy.
+ * SpaceContext is derived from Keycloak (sub + groups); getTenantId() remains for metrics.
+ * AsyncLocalStorage allows Redis and other services to get current space without request reference.
+ * When AUTH_ENABLED, default space is disabled for strict isolation; unauthenticated/no-context
+ * uses a sentinel space so no tenant data is shared.
+ */
+/** Sentinel space when AUTH is on but no auth context (strict isolation; not shared with tenants). */
+export declare const NO_AUTH_SPACE_ID = "space:no-auth";
+export interface SpaceContext {
+    userId: string;
+    groupIds: string[];
+    allowedSpaceIds: string[];
+    defaultWriteSpaceId: string;
+    /**
+     * User personal space id (`user:…`) from JWT, unchanged when `?space=` narrows
+     * `allowedSpaceIds` / `defaultWriteSpaceId` to a group. Used to resolve explicit
+     * `space: "personal"` on train/tune so it cannot alias to the query-scoped group.
+     */
+    personalSpaceId: string;
+    /** Human labels for currently allowed spaces (token/session-derived only). */
+    spaceNamesById?: Record<string, string>;
+    requestId?: string;
+    /**
+     * When set (e.g. activate/search space parameter), vector search uses exactly these IDs — no implicit merge of Kairos app.
+     * Writes should still use defaultWriteSpaceId when the scope is read-only (app space).
+     */
+    activateSpaceScope?: string[];
+}
+/**
+ * Run a function with the given space context stored in AsyncLocalStorage.
+ * Used by HTTP auth middleware so Redis and Qdrant helpers can read space without request.
+ * For sync callbacks the context is preserved. For async callbacks use runWithSpaceContextAsync
+ * so the context persists across await boundaries (run() loses context after the callback returns a Promise).
+ */
+export declare function runWithSpaceContext<T>(ctx: SpaceContext, fn: () => T): T;
+/**
+ * Run an async function with the given space context. Uses enterWith so the context
+ * persists for the entire async execution (including all await continuations).
+ * Use this when the callback does async work (e.g. storeChain) and getSpaceContext()
+ * must see the context inside that work.
+ */
+export declare function runWithSpaceContextAsync<T>(ctx: SpaceContext, fn: () => Promise<T>): Promise<T>;
+/**
+ * Get space context from AsyncLocalStorage (set by auth middleware via runWithSpaceContext).
+ * When not in a request: if AUTH_ENABLED, returns no-default context (strict isolation);
+ * otherwise returns default single-tenant context.
+ */
+export declare function getSpaceContextFromStorage(): SpaceContext;
+/** Current space id for Redis key prefix and similar; uses storage or KAIROS_APP_SPACE_ID when auth off. */
+export declare function getSpaceIdFromStorage(): string;
+/** Correlation id propagated through AsyncLocalStorage for forensic tracing. */
+export declare function getRequestIdFromStorage(): string;
+/**
+ * Space IDs to use for search only: allowedSpaceIds plus Kairos app space (deduped).
+ * Writes (train, tune, delete) continue to use allowedSpaceIds only.
+ */
+export declare function getSearchSpaceIds(): string[];
+/**
+ * Async variant: run fn in narrowed space context so context persists across await.
+ * Use when the callback does async work (for example search) and getSpaceContext() must see the context.
+ */
+export declare function runWithOptionalSpaceAsync<T>(spaceParam: string | undefined, fn: () => Promise<T>): Promise<T>;
+/**
+ * Get space context from request. Uses req.auth (set by auth middleware) when AUTH_ENABLED.
+ * When AUTH_ENABLED and no auth, returns no-default context (strict isolation).
+ * When AUTH_ENABLED=false, returns default single-tenant context.
+ * If no request is passed, falls back to AsyncLocalStorage (e.g. from runWithSpaceContext).
+ */
+export declare function getSpaceContext(request?: {
+    auth?: {
+        sub: string;
+        groups: string[];
+        realm?: string;
+        iss?: string;
+    };
+    spaceContext?: SpaceContext;
+    requestId?: string;
+    headers?: {
+        [key: string]: unknown;
+    };
+}): SpaceContext;
+/**
+ * Persist request-derived space context across async HTTP route handlers.
+ * Auth middleware sets `req.spaceContext` using synchronous `spaceStorage.run`, which does not
+ * keep AsyncLocalStorage active after the handler awaits; wrap the tool body with this helper.
+ */
+export declare function runHttpApiWithSpaceContext<T>(request: Parameters<typeof getSpaceContext>[0], fn: () => Promise<T>): Promise<T>;
+/**
+ * Get tenant ID for metrics. Returns default write space id or first allowed space.
+ */
+export declare function getTenantId(request?: any): string;
+//# sourceMappingURL=tenant-context.d.ts.map

package/dist/utils/tenant-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/utils/tenant-context.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAaH,sGAAsG;AACtG,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AA0CD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAExE;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAQrG;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,IAAI,YAAY,CAIzD;AAED,4GAA4G;AAC5G,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,gFAAgF;AAChF,wBAAgB,uBAAuB,IAAI,MAAM,CAGhD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAS5C;AAED;;;GAGG;AACH,wBAAsB,yBAAyB,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAuBnH;AAuED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE;IACxC,IAAI,CAAC,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;CACtC,GAAG,YAAY,CA8Bf;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,EAChD,OAAO,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,EAC9C,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,GAAG,MAAM,CAGjD"}