@srouterhq/server 0.0.0-stage → 0.9.0

package/dist/lib/served-model.d.ts

@@ -0,0 +1,16 @@
+export declare function normalizeModelIdForDrift(id: string): string;
+/** Test hook: clear the once-per-tuple warn cache. */
+export declare function resetServedModelObservations(): void;
+/**
+ * Compare the raw upstream-reported model against the routed id.
+ * Returns the raw served id when it GENUINELY differs (persist it), or null
+ * when it matches, differs only cosmetically, or names no model at all
+ * (store NULL — keeps the requests table small). Logs a structured warn once
+ * per (platform, requested, served) tuple per process.
+ */
+export declare function observeServedModel(opts: {
+    platform: string;
+    requestedModel: string;
+    servedModel: string | null | undefined;
+}): string | null;
+//# sourceMappingURL=served-model.d.ts.map

package/dist/lib/served-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-model.d.ts","sourceRoot":"","sources":["../../src/lib/served-model.ts"],"names":[],"mappings":"AA6BA,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAM3D;AAaD,sDAAsD;AACtD,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACxC,GAAG,MAAM,GAAG,IAAI,CAiBhB"}

package/dist/lib/served-model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served-model.js","sourceRoot":"","sources":["../../src/lib/served-model.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,EAAE;AACF,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,sEAAsE;AACtE,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,0BAA0B;AAC1B,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AACrE,4EAA4E;AAE5E,8EAA8E;AAC9E,8EAA8E;AAC9E,+BAA+B;AAC/B,yBAAyB;AACzB,6EAA6E;AAC7E,6DAA6D;AAC7D,2EAA2E;AAC3E,kEAAkE;AAClE,2EAA2E;AAC3E,4EAA4E;AAC5E,gDAAgD;AAChD,MAAM,UAAU,wBAAwB,CAAC,EAAU;IACjD,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,6EAA6E;AAC7E,0EAA0E;AAC1E,kCAAkC;AAClC,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAErE,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACjC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;AAEzC,sDAAsD;AACtD,MAAM,UAAU,4BAA4B;IAC1C,cAAc,CAAC,KAAK,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAIlC;IACC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC;IACvD,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,IAAI,wBAAwB,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/F,MAAM,KAAK,GAAG,GAAG,QAAQ,IAAI,cAAc,IAAI,MAAM,EAAE,CAAC;IACxD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,GAAG,mBAAmB,EAAE,CAAC;QAC5E,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,CAAC,IAAI,CACV,0BAA0B,QAAQ,cAAc,cAAc,WAAW,MAAM,GAAG;YAClF,mEAAmE;YACnE,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/server-logs.d.ts

@@ -0,0 +1,132 @@
+/**
+ * The dashboard's server-log store.
+ *
+ * Operators debugging a routing decision, a benched key or a retired model have
+ * had exactly one place to look: the terminal the process was started from. On
+ * a desktop install, a container, or a systemd unit that is either awkward or
+ * gone entirely. This module keeps the same lines the server already prints and
+ * makes them readable from the dashboard.
+ *
+ * Two tiers, ONE id space:
+ *   - a ring buffer (RING_CAPACITY entries, every level) backs the live view
+ *     and is the only thing the polling endpoint reads;
+ *   - warn/error rows are ALSO written to the `server_logs` table, so the
+ *     lines that matter survive a restart.
+ *
+ * Ids are assigned here, not by SQLite, because the client polls with a
+ * `sinceId` cursor and that cursor has to mean the same thing for a line that
+ * only ever lived in memory and for one that came back from the table. The
+ * counter is seeded from MAX(id) at init, so ids keep increasing across
+ * restarts and a cursor held by an open dashboard tab never goes backwards.
+ *
+ * Capture is a TAP inside lib/log-redaction.ts rather than a second console
+ * wrapper: there is exactly one console patch in this process, it redacts
+ * first, and this store only ever sees the redacted form.
+ */
+/** Levels the store understands. console.log maps to 'info'; debug and trace
+ *  keep their own identity so a noisy trace can be filtered out on its own. */
+export declare const LOG_LEVELS: readonly ["trace", "debug", "info", "warn", "error"];
+export type ServerLogLevel = (typeof LOG_LEVELS)[number];
+/** Live-view depth. A thousand lines is a few minutes of a busy gateway and
+ *  costs well under a megabyte at the message cap below. */
+export declare const RING_CAPACITY = 1000;
+/** How much persisted history is pulled back into the ring at init, so the
+ *  dashboard shows the warnings that preceded the restart instead of an empty
+ *  panel that fills up only if something goes wrong again. */
+export declare const PRELOAD_LIMIT = 200;
+/** A single log line is a diagnostic, not a document. Long provider bodies and
+ *  multi-frame stacks are truncated rather than dropped — the head is where the
+ *  information is. */
+export declare const MAX_MESSAGE_LENGTH = 6000;
+/**
+ * Ceiling on warn/error rows written per second. The table is pruned only on
+ * the request path, so an idle server has no retention at all; a log storm (a
+ * dead stdout feeding the safety net, a provider erroring in a tight loop) must
+ * not be able to grow it without bound. Lines over the cap still reach the live
+ * ring — only the row is skipped — and the next line after the window rolls
+ * writes one summary row saying how many were dropped.
+ */
+export declare const PERSIST_MAX_PER_SECOND = 50;
+export interface ServerLogMeta {
+    provider?: string;
+    model?: string;
+    event?: string;
+    requestId?: string;
+}
+export interface ServerLogEntry extends ServerLogMeta {
+    id: number;
+    tsMs: number;
+    level: ServerLogLevel;
+    /** The `[Tag]` a line opens with, when it has one ('Health', 'CooldownProbe'…). */
+    source?: string;
+    message: string;
+}
+export declare function formatLogArgs(args: readonly unknown[]): string;
+export interface RecordLogOptions extends ServerLogMeta {
+    level: ServerLogLevel;
+    message: string;
+    source?: string;
+    tsMs?: number;
+}
+/**
+ * The single ingest point. Everything — the console tap, providerLog, the boot
+ * preload's live siblings — arrives here, which is what makes the noise filter,
+ * the length cap and the id counter impossible to bypass.
+ *
+ * Returns the stored entry, or null when the line was filtered out.
+ */
+export declare function recordLogEntry(options: RecordLogOptions): ServerLogEntry | null;
+/**
+ * Called by the console wrapper in lib/log-redaction.ts, AFTER redaction. Never
+ * throws: a log line must not be able to fail the call that emitted it.
+ */
+export declare function recordConsoleLine(level: ServerLogLevel, args: readonly unknown[]): void;
+/**
+ * Emit a structured operational event: recorded with its provider/model/event
+ * metadata for the dashboard AND mirrored to stdout, so nothing an operator
+ * needs exists only behind a login.
+ *
+ * The message is passed through redactSecrets() here because the recording
+ * bypasses the console wrapper; the stdout mirror goes through the wrapped
+ * console (already-redacted text is idempotent under a second pass) so that a
+ * restored console — tests, an embedder — still sees the line.
+ */
+export declare function providerLog(level: ServerLogLevel, message: string, meta?: ServerLogMeta): void;
+/** Force the seed/preload now (the route calls this so an idle server still
+ *  shows persisted history on the first poll). */
+export declare function initServerLogs(): void;
+/** Counts over the CURRENT ring, unfiltered, so the UI can render level badges
+ *  without fetching every entry. Trace is folded into debug: it is a debug-tier
+ *  detail and the dashboard shows four badges. */
+export interface LogLevelCounts {
+    debug: number;
+    info: number;
+    warn: number;
+    error: number;
+}
+export interface LogQuery {
+    levels?: ServerLogLevel[];
+    q?: string;
+    provider?: string;
+    sinceId?: number;
+    limit?: number;
+}
+export declare const DEFAULT_LIMIT = 200;
+export declare const MAX_LIMIT = 500;
+export declare const MIN_LIMIT = 1;
+export declare function clampLimit(raw: number | undefined): number;
+/** Highest id handed out so far — what the client sends back as sinceId, even
+ *  when every entry it would have matched was filtered away. */
+export declare function currentMaxId(): number;
+export declare function levelCounts(): LogLevelCounts;
+/** The newest `limit` entries of the filtered set, oldest→newest. */
+export declare function queryLogs(query?: LogQuery): ServerLogEntry[];
+/** Empty both tiers. The id counter is deliberately NOT reset: a dashboard tab
+ *  holding a cursor would otherwise be handed ids it has already seen. */
+export declare function clearLogs(): void;
+/** Test seam: drop every entry AND the counter/seed state, so a suite can
+ *  simulate a cold start against a database that still holds rows. */
+export declare function resetServerLogsForTest(): void;
+/** Test/introspection seam: the ring exactly as stored. */
+export declare function ringSnapshot(): readonly ServerLogEntry[];
+//# sourceMappingURL=server-logs.d.ts.map

package/dist/lib/server-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-logs.d.ts","sourceRoot":"","sources":["../../src/lib/server-logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH;+EAC+E;AAC/E,eAAO,MAAM,UAAU,sDAAuD,CAAC;AAC/E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAKzD;4DAC4D;AAC5D,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC;;8DAE8D;AAC9D,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC;;sBAEsB;AACtB,eAAO,MAAM,kBAAkB,OAAO,CAAC;AAIvC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,KAAK,CAAC;AAkBzC,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,cAAc,CAAC;IACtB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAmDD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,CAE9D;AAwBD,MAAM,WAAW,gBAAiB,SAAQ,aAAa;IACrD,KAAK,EAAE,cAAc,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,gBAAgB,GAAG,cAAc,GAAG,IAAI,CA2B/E;AAsCD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAOvF;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,cAAc,EACrB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,aAAkB,GACvB,IAAI,CAsBN;AAuID;kDACkD;AAClD,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAID;;kDAEkD;AAClD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,CAAC,EAAE,cAAc,EAAE,CAAC;IAC1B,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,eAAO,MAAM,aAAa,MAAM,CAAC;AACjC,eAAO,MAAM,SAAS,MAAM,CAAC;AAC7B,eAAO,MAAM,SAAS,IAAI,CAAC;AAE3B,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG1D;AAED;gEACgE;AAChE,wBAAgB,YAAY,IAAI,MAAM,CAGrC;AAED,wBAAgB,WAAW,IAAI,cAAc,CAQ5C;AAYD,qEAAqE;AACrE,wBAAgB,SAAS,CAAC,KAAK,GAAE,QAAa,GAAG,cAAc,EAAE,CAmBhE;AAED;0EAC0E;AAC1E,wBAAgB,SAAS,IAAI,IAAI,CAUhC;AAED;sEACsE;AACtE,wBAAgB,sBAAsB,IAAI,IAAI,CAU7C;AAED,2DAA2D;AAC3D,wBAAgB,YAAY,IAAI,SAAS,cAAc,EAAE,CAExD"}

package/dist/lib/server-logs.js

@@ -0,0 +1,473 @@
+/**
+ * The dashboard's server-log store.
+ *
+ * Operators debugging a routing decision, a benched key or a retired model have
+ * had exactly one place to look: the terminal the process was started from. On
+ * a desktop install, a container, or a systemd unit that is either awkward or
+ * gone entirely. This module keeps the same lines the server already prints and
+ * makes them readable from the dashboard.
+ *
+ * Two tiers, ONE id space:
+ *   - a ring buffer (RING_CAPACITY entries, every level) backs the live view
+ *     and is the only thing the polling endpoint reads;
+ *   - warn/error rows are ALSO written to the `server_logs` table, so the
+ *     lines that matter survive a restart.
+ *
+ * Ids are assigned here, not by SQLite, because the client polls with a
+ * `sinceId` cursor and that cursor has to mean the same thing for a line that
+ * only ever lived in memory and for one that came back from the table. The
+ * counter is seeded from MAX(id) at init, so ids keep increasing across
+ * restarts and a cursor held by an open dashboard tab never goes backwards.
+ *
+ * Capture is a TAP inside lib/log-redaction.ts rather than a second console
+ * wrapper: there is exactly one console patch in this process, it redacts
+ * first, and this store only ever sees the redacted form.
+ */
+import { inspect } from 'node:util';
+import { getDb } from '../db/index.js';
+import { redactSecrets } from './log-redaction.js';
+/** Levels the store understands. console.log maps to 'info'; debug and trace
+ *  keep their own identity so a noisy trace can be filtered out on its own. */
+export const LOG_LEVELS = ['trace', 'debug', 'info', 'warn', 'error'];
+/** Levels durable enough to be worth a row. Mirrors the migration's CHECK. */
+const PERSISTED_LEVELS = new Set(['warn', 'error']);
+/** Live-view depth. A thousand lines is a few minutes of a busy gateway and
+ *  costs well under a megabyte at the message cap below. */
+export const RING_CAPACITY = 1000;
+/** How much persisted history is pulled back into the ring at init, so the
+ *  dashboard shows the warnings that preceded the restart instead of an empty
+ *  panel that fills up only if something goes wrong again. */
+export const PRELOAD_LIMIT = 200;
+/** A single log line is a diagnostic, not a document. Long provider bodies and
+ *  multi-frame stacks are truncated rather than dropped — the head is where the
+ *  information is. */
+export const MAX_MESSAGE_LENGTH = 6000;
+const TRUNCATION_SUFFIX = '… [truncated]';
+/**
+ * Ceiling on warn/error rows written per second. The table is pruned only on
+ * the request path, so an idle server has no retention at all; a log storm (a
+ * dead stdout feeding the safety net, a provider erroring in a tight loop) must
+ * not be able to grow it without bound. Lines over the cap still reach the live
+ * ring — only the row is skipped — and the next line after the window rolls
+ * writes one summary row saying how many were dropped.
+ */
+export const PERSIST_MAX_PER_SECOND = 50;
+const PERSIST_WINDOW_MS = 1000;
+/**
+ * The viewer polls GET /api/logs every couple of seconds. If the deployment in
+ * front of us emits access-log lines, those polls would be the loudest thing in
+ * the buffer and every poll would manufacture the content of the next one.
+ *
+ * NOTE (verified in this tree): this server installs NO access-log middleware —
+ * there is no morgan/pino/winston dependency and no request-logging middleware
+ * in app.ts or src/middleware/. So today nothing matches this filter. It stays
+ * because the cost is one regex test at ingest and the failure mode it prevents
+ * (a self-feeding buffer) is one an operator cannot work around; a reverse
+ * proxy, a future middleware, or a debug line added during triage all produce
+ * exactly these lines.
+ */
+const NOISE_RE = /\b(?:GET|HEAD)\s+\/api\/(?:logs|ping)\b/i;
+// ── State ────────────────────────────────────────────────────────────────────
+let ring = [];
+let lastId = 0;
+let seeded = false;
+/**
+ * Set while providerLog() mirrors its message to stdout. The console it calls
+ * is the WRAPPED one (that is the point — the redaction wrapper must still see
+ * it), and the wrapper taps back into this module, so without this flag every
+ * structured event would land in the ring twice.
+ */
+let mirroring = false;
+/**
+ * Set while a persist is in flight. The DB layer can log — a busy-timeout
+ * warning, a permissions warning from db/index.ts — and that log would come
+ * straight back here and try to insert again. The ring still accepts the line;
+ * only the write is skipped.
+ */
+let persisting = false;
+/** Reentrancy guard for the boot seed, for the same reason as `persisting`. */
+let seeding = false;
+/** Persist rate-cap window (see PERSIST_MAX_PER_SECOND). */
+let persistWindowStartMs = 0;
+let persistWindowCount = 0;
+let persistSuppressed = 0;
+// ── Formatting ───────────────────────────────────────────────────────────────
+/** One console argument, rendered the way it reaches stdout: strings verbatim,
+ *  Errors with their stack, everything else inspected at bounded depth. */
+function formatArg(arg) {
+    if (typeof arg === 'string')
+        return arg;
+    if (arg instanceof Error)
+        return arg.stack ?? `${arg.name}: ${arg.message}`;
+    if (arg === null)
+        return 'null';
+    if (arg === undefined)
+        return 'undefined';
+    if (typeof arg === 'object') {
+        try {
+            return inspect(arg, { depth: 2, breakLength: Infinity, maxStringLength: 1000 });
+        }
+        catch {
+            return String(arg);
+        }
+    }
+    return String(arg);
+}
+export function formatLogArgs(args) {
+    return args.map(formatArg).join(' ');
+}
+function truncate(message) {
+    if (message.length <= MAX_MESSAGE_LENGTH)
+        return message;
+    return message.slice(0, MAX_MESSAGE_LENGTH - TRUNCATION_SUFFIX.length) + TRUNCATION_SUFFIX;
+}
+/** The subsystem tag the codebase already prefixes its lines with. Deriving it
+ *  instead of asking every call site for one is what makes the `source` column
+ *  useful for lines nobody edited. */
+const SOURCE_RE = /^\s*\[([A-Za-z][\w .:/-]{0,39})\]/;
+function deriveSource(message) {
+    return SOURCE_RE.exec(message)?.[1];
+}
+// ── Ingest ───────────────────────────────────────────────────────────────────
+function trimField(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    return trimmed === '' ? undefined : trimmed.slice(0, 200);
+}
+/**
+ * The single ingest point. Everything — the console tap, providerLog, the boot
+ * preload's live siblings — arrives here, which is what makes the noise filter,
+ * the length cap and the id counter impossible to bypass.
+ *
+ * Returns the stored entry, or null when the line was filtered out.
+ */
+export function recordLogEntry(options) {
+    const message = truncate(options.message);
+    if (message.trim() === '')
+        return null;
+    if (NOISE_RE.test(message))
+        return null;
+    ensureSeeded();
+    const entry = {
+        id: ++lastId,
+        tsMs: options.tsMs ?? Date.now(),
+        level: options.level,
+        message,
+    };
+    const source = trimField(options.source) ?? deriveSource(message);
+    if (source)
+        entry.source = source;
+    const provider = trimField(options.provider);
+    if (provider)
+        entry.provider = provider;
+    const model = trimField(options.model);
+    if (model)
+        entry.model = model;
+    const event = trimField(options.event);
+    if (event)
+        entry.event = event;
+    const requestId = trimField(options.requestId);
+    if (requestId)
+        entry.requestId = requestId;
+    push(entry);
+    if (PERSISTED_LEVELS.has(entry.level))
+        persistCapped(entry);
+    return entry;
+}
+function persistCapped(entry) {
+    if (entry.tsMs - persistWindowStartMs >= PERSIST_WINDOW_MS || entry.tsMs < persistWindowStartMs) {
+        const dropped = persistSuppressed;
+        persistWindowStartMs = entry.tsMs;
+        persistWindowCount = 0;
+        persistSuppressed = 0;
+        if (dropped > 0) {
+            const summary = {
+                id: ++lastId,
+                tsMs: entry.tsMs,
+                level: 'warn',
+                source: 'server-logs',
+                message: `[server-logs] ${dropped} warn/error lines not persisted (over ${PERSIST_MAX_PER_SECOND}/s); they reached the live view only`,
+            };
+            // Keep ids increasing in arrival order: the summary takes the next id and
+            // the line that rolled the window is re-stamped after it.
+            entry.id = ++lastId;
+            ring.splice(ring.length - 1, 0, summary);
+            if (ring.length > RING_CAPACITY)
+                ring.shift();
+            persist(summary);
+            persistWindowCount++;
+        }
+    }
+    if (persistWindowCount >= PERSIST_MAX_PER_SECOND) {
+        persistSuppressed++;
+        return;
+    }
+    persistWindowCount++;
+    persist(entry);
+}
+function push(entry) {
+    ring.push(entry);
+    if (ring.length > RING_CAPACITY)
+        ring.splice(0, ring.length - RING_CAPACITY);
+}
+/**
+ * Called by the console wrapper in lib/log-redaction.ts, AFTER redaction. Never
+ * throws: a log line must not be able to fail the call that emitted it.
+ */
+export function recordConsoleLine(level, args) {
+    if (mirroring)
+        return;
+    try {
+        recordLogEntry({ level, message: formatLogArgs(args) });
+    }
+    catch {
+        // Swallowed on purpose — see above.
+    }
+}
+/**
+ * Emit a structured operational event: recorded with its provider/model/event
+ * metadata for the dashboard AND mirrored to stdout, so nothing an operator
+ * needs exists only behind a login.
+ *
+ * The message is passed through redactSecrets() here because the recording
+ * bypasses the console wrapper; the stdout mirror goes through the wrapped
+ * console (already-redacted text is idempotent under a second pass) so that a
+ * restored console — tests, an embedder — still sees the line.
+ */
+export function providerLog(level, message, meta = {}) {
+    const redacted = redactSecrets(message);
+    try {
+        recordLogEntry({ level, message: redacted, ...meta });
+    }
+    catch {
+        // Never let the store break the caller's control flow.
+    }
+    mirroring = true;
+    try {
+        const write = level === 'error' ? console.error
+            : level === 'warn' ? console.warn
+                : level === 'debug' ? console.debug
+                    : level === 'trace' ? console.trace
+                        : console.log;
+        write(redacted);
+    }
+    catch {
+        // A console that throws is not this module's problem to solve.
+    }
+    finally {
+        mirroring = false;
+    }
+}
+function tryDb() {
+    try {
+        return getDb();
+    }
+    catch {
+        // Pre-initDb boot lines, and tests that never open a database.
+        return null;
+    }
+}
+function hasTable(db) {
+    try {
+        return !!db
+            .prepare("SELECT name FROM sqlite_master WHERE type='table' AND name='server_logs'")
+            .get();
+    }
+    catch {
+        return false;
+    }
+}
+function persist(entry) {
+    if (persisting)
+        return;
+    persisting = true;
+    try {
+        const db = tryDb();
+        if (!db)
+            return;
+        db.prepare(`
+      INSERT INTO server_logs (id, level, source, provider, model, event, request_id, message, created_at_ms)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(entry.id, entry.level, entry.source ?? null, entry.provider ?? null, entry.model ?? null, entry.event ?? null, entry.requestId ?? null, entry.message, entry.tsMs);
+    }
+    catch {
+        // Best effort by design: the table may not exist yet (a boot line racing
+        // the migration), the DB may be locked, the disk may be full. None of that
+        // is worth losing the live line — or crashing the caller — over.
+    }
+    finally {
+        persisting = false;
+    }
+}
+function rowToEntry(row) {
+    const entry = {
+        id: row.id,
+        tsMs: row.created_at_ms,
+        level: LOG_LEVELS.includes(row.level)
+            ? row.level
+            : 'error',
+        message: row.message,
+    };
+    if (row.source)
+        entry.source = row.source;
+    if (row.provider)
+        entry.provider = row.provider;
+    if (row.model)
+        entry.model = row.model;
+    if (row.event)
+        entry.event = row.event;
+    if (row.request_id)
+        entry.requestId = row.request_id;
+    return entry;
+}
+/**
+ * Seed the id counter and preload recent history. Idempotent, and safe to call
+ * before the database exists — it simply stays unseeded and tries again on the
+ * next line, which is what covers the handful of boot logs emitted between
+ * installLogRedaction() and initDb().
+ *
+ * Lines already buffered when the database appears keep their order but are
+ * re-stamped ABOVE the persisted maximum, because ids have to be unique across
+ * both tiers and a pre-DB line was numbered from a counter that started at zero.
+ */
+function ensureSeeded() {
+    if (seeded || seeding)
+        return;
+    // Same reasoning as `persisting`: the two probes below touch the DB layer,
+    // which can log, and that log comes straight back into recordLogEntry.
+    seeding = true;
+    try {
+        seedNow();
+    }
+    finally {
+        seeding = false;
+    }
+}
+function seedNow() {
+    const db = tryDb();
+    if (!db || !hasTable(db))
+        return;
+    seeded = true;
+    try {
+        const pending = ring.splice(0, ring.length);
+        const max = db.prepare('SELECT MAX(id) AS maxId FROM server_logs').get();
+        lastId = Math.max(lastId, max?.maxId ?? 0);
+        const rows = db.prepare(`
+      SELECT id, level, source, provider, model, event, request_id, message, created_at_ms
+        FROM server_logs
+       ORDER BY created_at_ms DESC, id DESC
+       LIMIT ?
+    `).all(PRELOAD_LIMIT);
+        // Read newest-first so LIMIT keeps the recent end; the ring is oldest-first.
+        for (const row of rows.reverse())
+            push(rowToEntry(row));
+        for (const entry of pending) {
+            entry.id = ++lastId;
+            push(entry);
+            if (PERSISTED_LEVELS.has(entry.level))
+                persist(entry);
+        }
+    }
+    catch {
+        // A seed that fails leaves the counter where it was; ids stay increasing
+        // within this process, which is the guarantee the cursor actually needs.
+    }
+}
+/** Force the seed/preload now (the route calls this so an idle server still
+ *  shows persisted history on the first poll). */
+export function initServerLogs() {
+    ensureSeeded();
+}
+export const DEFAULT_LIMIT = 200;
+export const MAX_LIMIT = 500;
+export const MIN_LIMIT = 1;
+export function clampLimit(raw) {
+    if (raw === undefined || !Number.isFinite(raw))
+        return DEFAULT_LIMIT;
+    return Math.min(MAX_LIMIT, Math.max(MIN_LIMIT, Math.trunc(raw)));
+}
+/** Highest id handed out so far — what the client sends back as sinceId, even
+ *  when every entry it would have matched was filtered away. */
+export function currentMaxId() {
+    ensureSeeded();
+    return lastId;
+}
+export function levelCounts() {
+    ensureSeeded();
+    const counts = { debug: 0, info: 0, warn: 0, error: 0 };
+    for (const entry of ring) {
+        if (entry.level === 'trace' || entry.level === 'debug')
+            counts.debug++;
+        else
+            counts[entry.level]++;
+    }
+    return counts;
+}
+function matches(entry, levels, needle, provider) {
+    if (levels && !levels.has(entry.level))
+        return false;
+    if (provider !== null && entry.provider !== provider)
+        return false;
+    if (needle !== null) {
+        const haystack = `${entry.message} ${entry.provider ?? ''} ${entry.source ?? ''} ${entry.event ?? ''}`.toLowerCase();
+        if (!haystack.includes(needle))
+            return false;
+    }
+    return true;
+}
+/** The newest `limit` entries of the filtered set, oldest→newest. */
+export function queryLogs(query = {}) {
+    ensureSeeded();
+    const sinceId = query.sinceId;
+    // A caller already caught up costs one comparison, not a scan.
+    if (sinceId !== undefined && sinceId >= lastId)
+        return [];
+    const levels = query.levels && query.levels.length > 0 ? new Set(query.levels) : null;
+    const needle = query.q && query.q.trim() !== '' ? query.q.trim().toLowerCase() : null;
+    const provider = query.provider && query.provider.trim() !== '' ? query.provider.trim() : null;
+    const limit = clampLimit(query.limit);
+    const out = [];
+    // Walk backwards so `limit` bounds the work, not just the result.
+    for (let i = ring.length - 1; i >= 0 && out.length < limit; i--) {
+        const entry = ring[i];
+        if (sinceId !== undefined && entry.id <= sinceId)
+            break;
+        if (matches(entry, levels, needle, provider))
+            out.push(entry);
+    }
+    return out.reverse();
+}
+/** Empty both tiers. The id counter is deliberately NOT reset: a dashboard tab
+ *  holding a cursor would otherwise be handed ids it has already seen. */
+export function clearLogs() {
+    ensureSeeded();
+    ring = [];
+    const db = tryDb();
+    if (!db)
+        return;
+    try {
+        db.prepare('DELETE FROM server_logs').run();
+    }
+    catch {
+        // Same best-effort contract as persist().
+    }
+}
+/** Test seam: drop every entry AND the counter/seed state, so a suite can
+ *  simulate a cold start against a database that still holds rows. */
+export function resetServerLogsForTest() {
+    ring = [];
+    lastId = 0;
+    seeded = false;
+    seeding = false;
+    mirroring = false;
+    persisting = false;
+    persistWindowStartMs = 0;
+    persistWindowCount = 0;
+    persistSuppressed = 0;
+}
+/** Test/introspection seam: the ring exactly as stored. */
+export function ringSnapshot() {
+    return ring;
+}
+//# sourceMappingURL=server-logs.js.map

package/dist/lib/server-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-logs.js","sourceRoot":"","sources":["../../src/lib/server-logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAGnD;+EAC+E;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAU,CAAC;AAG/E,8EAA8E;AAC9E,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEpE;4DAC4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAElC;;8DAE8D;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC;;sBAEsB;AACtB,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAEvC,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC;AACzC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B;;;;;;;;;;;;GAYG;AACH,MAAM,QAAQ,GAAG,0CAA0C,CAAC;AAkB5D,gFAAgF;AAEhF,IAAI,IAAI,GAAqB,EAAE,CAAC;AAChC,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB;;;;;GAKG;AACH,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;;GAKG;AACH,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,+EAA+E;AAC/E,IAAI,OAAO,GAAG,KAAK,CAAC;AAEpB,4DAA4D;AAC5D,IAAI,oBAAoB,GAAG,CAAC,CAAC;AAC7B,IAAI,kBAAkB,GAAG,CAAC,CAAC;AAC3B,IAAI,iBAAiB,GAAG,CAAC,CAAC;AAE1B,gFAAgF;AAEhF;2EAC2E;AAC3E,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAwB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,OAAe;IAC/B,IAAI,OAAO,CAAC,MAAM,IAAI,kBAAkB;QAAE,OAAO,OAAO,CAAC;IACzD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC;AAC7F,CAAC;AAED;;sCAEsC;AACtC,MAAM,SAAS,GAAG,mCAAmC,CAAC;AAEtD,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,gFAAgF;AAEhF,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC5D,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAyB;IACtD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAExC,YAAY,EAAE,CAAC;IAEf,MAAM,KAAK,GAAmB;QAC5B,EAAE,EAAE,EAAE,MAAM;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO;KACR,CAAC;IACF,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC,CAAC;IAClE,IAAI,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAClC,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACxC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;IAC/B,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/C,IAAI,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAE3C,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,aAAa,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAqB;IAC1C,IAAI,KAAK,CAAC,IAAI,GAAG,oBAAoB,IAAI,iBAAiB,IAAI,KAAK,CAAC,IAAI,GAAG,oBAAoB,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,iBAAiB,CAAC;QAClC,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC;QAClC,kBAAkB,GAAG,CAAC,CAAC;QACvB,iBAAiB,GAAG,CAAC,CAAC;QACtB,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,MAAM,OAAO,GAAmB;gBAC9B,EAAE,EAAE,EAAE,MAAM;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,MAAM;gBACb,MAAM,EAAE,aAAa;gBACrB,OAAO,EAAE,iBAAiB,OAAO,yCAAyC,sBAAsB,sCAAsC;aACvI,CAAC;YACF,0EAA0E;YAC1E,0DAA0D;YAC1D,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC;YACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;gBAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9C,OAAO,CAAC,OAAO,CAAC,CAAC;YACjB,kBAAkB,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,kBAAkB,IAAI,sBAAsB,EAAE,CAAC;QACjD,iBAAiB,EAAE,CAAC;QACpB,OAAO;IACT,CAAC;IACD,kBAAkB,EAAE,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,KAAqB;IACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjB,IAAI,IAAI,CAAC,MAAM,GAAG,aAAa;QAAE,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC;AAC/E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAqB,EAAE,IAAwB;IAC/E,IAAI,SAAS;QAAE,OAAO;IACtB,IAAI,CAAC;QACH,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,oCAAoC;IACtC,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,KAAqB,EACrB,OAAe,EACf,OAAsB,EAAE;IAExB,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,cAAc,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;IAED,SAAS,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,GACT,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;YACjC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;gBACjC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;oBACnC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK;wBACnC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAChB,KAAK,CAAC,QAAQ,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;IACjE,CAAC;YAAS,CAAC;QACT,SAAS,GAAG,KAAK,CAAC;IACpB,CAAC;AACH,CAAC;AAgBD,SAAS,KAAK;IACZ,IAAI,CAAC;QACH,OAAO,KAAK,EAAE,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACP,+DAA+D;QAC/D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,EAAM;IACtB,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,EAAE;aACR,OAAO,CAAC,0EAA0E,CAAC;aACnF,GAAG,EAAE,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,KAAqB;IACpC,IAAI,UAAU;QAAE,OAAO;IACvB,UAAU,GAAG,IAAI,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,EAAE;YAAE,OAAO;QAChB,EAAE,CAAC,OAAO,CAAC;;;KAGV,CAAC,CAAC,GAAG,CACJ,KAAK,CAAC,EAAE,EACR,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,QAAQ,IAAI,IAAI,EACtB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,KAAK,CAAC,SAAS,IAAI,IAAI,EACvB,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,IAAI,CACX,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,2EAA2E;QAC3E,iEAAiE;IACnE,CAAC;YAAS,CAAC;QACT,UAAU,GAAG,KAAK,CAAC;IACrB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAiB;IACnC,MAAM,KAAK,GAAmB;QAC5B,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,aAAa;QACvB,KAAK,EAAG,UAAgC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAC1D,CAAC,CAAE,GAAG,CAAC,KAAwB;YAC/B,CAAC,CAAC,OAAO;QACX,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IACF,IAAI,GAAG,CAAC,MAAM;QAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1C,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAChD,IAAI,GAAG,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,KAAK;QAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;IACvC,IAAI,GAAG,CAAC,UAAU;QAAE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC;IACrD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY;IACnB,IAAI,MAAM,IAAI,OAAO;QAAE,OAAO;IAC9B,2EAA2E;IAC3E,uEAAuE;IACvE,OAAO,GAAG,IAAI,CAAC;IACf,IAAI,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;YAAS,CAAC;QACT,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,OAAO;IACd,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO;IACjC,MAAM,GAAG,IAAI,CAAC;IAEd,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAEzD,CAAC;QACd,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;QAE3C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;KAKvB,CAAC,CAAC,GAAG,CAAC,aAAa,CAAmB,CAAC;QACxC,6EAA6E;QAC7E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,OAAO,EAAE;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAExD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,KAAK,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC;YACpB,IAAI,CAAC,KAAK,CAAC,CAAC;YACZ,IAAI,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,yEAAyE;IAC3E,CAAC;AACH,CAAC;AAED;kDACkD;AAClD,MAAM,UAAU,cAAc;IAC5B,YAAY,EAAE,CAAC;AACjB,CAAC;AAsBD,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AACjC,MAAM,CAAC,MAAM,SAAS,GAAG,GAAG,CAAC;AAC7B,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,UAAU,CAAC,GAAuB;IAChD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACnE,CAAC;AAED;gEACgE;AAChE,MAAM,UAAU,YAAY;IAC1B,YAAY,EAAE,CAAC;IACf,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,YAAY,EAAE,CAAC;IACf,MAAM,MAAM,GAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACxE,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO;YAAE,MAAM,CAAC,KAAK,EAAE,CAAC;;YAClE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,KAAqB,EAAE,MAAkC,EAAE,MAAqB,EAAE,QAAuB;IACxH,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC;QACrH,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,SAAS,CAAC,QAAkB,EAAE;IAC5C,YAAY,EAAE,CAAC;IACf,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,+DAA+D;IAC/D,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,CAAC;IAE1D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAEtC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,kEAAkE;IAClE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACvB,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,IAAI,OAAO;YAAE,MAAM;QACxD,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,EAAE,CAAC;AACvB,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,SAAS;IACvB,YAAY,EAAE,CAAC;IACf,IAAI,GAAG,EAAE,CAAC;IACV,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IACnB,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,IAAI,CAAC;QACH,EAAE,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,GAAG,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;AACH,CAAC;AAED;sEACsE;AACtE,MAAM,UAAU,sBAAsB;IACpC,IAAI,GAAG,EAAE,CAAC;IACV,MAAM,GAAG,CAAC,CAAC;IACX,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAG,KAAK,CAAC;IAClB,UAAU,GAAG,KAAK,CAAC;IACnB,oBAAoB,GAAG,CAAC,CAAC;IACzB,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/setup-code.d.ts

@@ -0,0 +1,5 @@
+export declare function generateSetupCode(): string;
+export declare function getSetupCode(): string | null;
+export declare function clearSetupCode(): void;
+export declare function setupCodeMatches(provided: unknown): boolean;
+//# sourceMappingURL=setup-code.d.ts.map

package/dist/lib/setup-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-code.d.ts","sourceRoot":"","sources":["../../src/lib/setup-code.ts"],"names":[],"mappings":"AAiBA,wBAAgB,iBAAiB,IAAI,MAAM,CAQ1C;AAED,wBAAgB,YAAY,IAAI,MAAM,GAAG,IAAI,CAE5C;AAED,wBAAgB,cAAc,IAAI,IAAI,CAErC;AAID,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAE3D"}