@uptimizr/collector-server 0.1.0

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,aAAa,EACb,cAAc,GACf,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;GAaG;AAEH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;AAEhD,gGAAgG;AAChG,SAAS,YAAY;IACnB,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CAAC,IAAc;IAC7B,OAAO,IAAI;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACzB,IAAI,CAAC,GAAG,CAAC;SACT,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO,GAAG;QACR,oEAAoE;QACpE,kEAAkE;QAClE,EAAE;QACF,uBAAuB,MAAM,EAAE;QAC/B,wBAAwB;QACxB,oCAAoC;QACpC,qBAAqB;KACtB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,mEAAmE;AACnE,SAAS,qBAAqB,CAAC,MAAc,EAAE,SAAkB;IAC/D,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,aAAa,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;QACrC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,aAAa,CAAC,QAAQ,EAAE,GAAG,OAAO,GAAG,GAAG,uBAAuB,MAAM,IAAI,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,IAAY;IACjC,YAAY,EAAE,CAAC;IAEf,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC7C,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,MAAM,CAAC;IAC3C,CAAC;IAED,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IAEjB,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxC,OAAO,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,4CAA4C,CAAC,CAAC;IAC9E,OAAO,CAAC,KAAK,CAAC,gCAAgC,IAAI,SAAS,CAAC,CAAC;IAC7D,OAAO,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,kBAAkB,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IAEjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;IACpE,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,IAAI,CAClF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU;IACvB,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;IACjB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,CAAC,KAAK,CACX;QACE,0EAA0E;QAC1E,EAAE;QACF,QAAQ;QACR,uGAAuG;QACvG,yEAAyE;QACzE,sEAAsE;QACtE,wDAAwD;QACxD,gDAAgD;QAChD,EAAE;QACF,iDAAiD;KAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7C,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,SAAS,CAAC;QACf,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,YAAY,EAAE,CAAC;YACf,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;YAC7C,MAAM,KAAK,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,KAAK,MAAM;YACT,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,CAAC;YAClD,OAAO;QACT,KAAK,aAAa;YAChB,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,CAAC;YAChD,OAAO;QACT,KAAK,SAAS;YACZ,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO;QACT,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI;YACP,UAAU,EAAE,CAAC;YACb,OAAO;QACT;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC;YAC3C,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Collector server configuration, read from the environment (see `.env.example`).
+ * Fails fast when a required secret is missing.
+ */
+export interface CollectorConfig {
+    host: string;
+    port: number;
+    /** Allowed CORS origins. Empty disables cross-origin browser access. */
+    corsOrigins: string[];
+    /** Secret seed for the daily-rotating cookieless visitor hash. */
+    visitorHashSecret: string;
+    /** Opt-in raw per-session retention; gates the replay/timeline endpoint (ADR 0003). */
+    enableRawSessionRetention: boolean;
+    /** Liveness window in ms for live presence/follow (ADR 0032 §1). */
+    liveWindowMs: number;
+    /** Secret for signing short-lived live SSE tokens (ADR 0032 §7). */
+    liveTokenSecret: string;
+    /**
+     * Whether a dedicated `LIVE_TOKEN_SECRET` was supplied. When false the live
+     * token secret falls back to {@link visitorHashSecret}; the server warns at
+     * startup so production deployments give the two secrets independent values.
+     */
+    liveTokenSecretIsDedicated: boolean;
+    /** Live SSE token lifetime in ms (ADR 0032 §7). */
+    liveTokenTtlMs: number;
+    /** Max concurrent live SSE connections per collector (ADR 0032 §6). */
+    liveMaxConnections: number;
+    /** Interval between pushed presence snapshots / SSE heartbeats, in ms. */
+    livePresenceIntervalMs: number;
+    /** Max requests per window per client for rate limiting. */
+    rateLimitMax: number;
+    /** Rate-limit window in ms. */
+    rateLimitWindowMs: number;
+    /** Stricter, dedicated per-client request budget for the public ingest route. */
+    ingestRateLimitMax: number;
+    /** Ingest rate-limit window in ms. */
+    ingestRateLimitWindowMs: number;
+    /**
+     * Trust `X-Forwarded-*` headers from a reverse proxy / load balancer. Required
+     * when the collector runs behind TLS termination so the per-visitor hash and
+     * the rate-limit bucket key on the real client IP rather than the proxy's.
+     * `false` (default) trusts only the direct socket peer. Accepts `true`/`false`,
+     * a hop count, or an IP/subnet/comma-list passed through to Fastify.
+     */
+    trustProxy: boolean | number | string;
+    /** Max accepted request body size in bytes (defends against oversized payloads). */
+    bodyLimit: number;
+    /** Content-Security-Policy for the bundled dashboard: `strict` (default) or `off`. */
+    cspMode: "strict" | "off";
+    /**
+     * Absolute path to a pre-built static dashboard (`out/`) to serve as an
+     * all-in-one bundle. Unset (the default) keeps the collector headless.
+     */
+    dashboardDir?: string;
+}
+type Env = Record<string, string | undefined>;
+export declare function loadConfig(env?: Env): CollectorConfig;
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,kEAAkE;IAClE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,yBAAyB,EAAE,OAAO,CAAC;IACnC,oEAAoE;IACpE,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,eAAe,EAAE,MAAM,CAAC;IACxB;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,mDAAmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB,uEAAuE;IACvE,kBAAkB,EAAE,MAAM,CAAC;IAC3B,0EAA0E;IAC1E,sBAAsB,EAAE,MAAM,CAAC;IAC/B,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sCAAsC;IACtC,uBAAuB,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,UAAU,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;IACtC,oFAAoF;IACpF,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,OAAO,EAAE,QAAQ,GAAG,KAAK,CAAC;IAC1B;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAsB9C,wBAAgB,UAAU,CAAC,GAAG,GAAE,GAAiB,GAAG,eAAe,CAgClE"}

package/dist/config.js

@@ -0,0 +1,55 @@
+import { resolve } from "node:path";
+function bool(value) {
+    return value === "1" || value?.toLowerCase() === "true";
+}
+/**
+ * Parse `COLLECTOR_TRUST_PROXY` into a value Fastify's `trustProxy` accepts:
+ * a boolean, a hop count, or an IP/subnet/comma-separated list passed through
+ * verbatim. Empty/unset means do not trust proxy headers.
+ */
+function parseTrustProxy(value) {
+    if (value == null || value.trim() === "")
+        return false;
+    const trimmed = value.trim();
+    const lower = trimmed.toLowerCase();
+    if (lower === "true")
+        return true;
+    if (lower === "false")
+        return false;
+    const n = Number(trimmed);
+    if (Number.isInteger(n) && String(n) === trimmed)
+        return n;
+    return trimmed;
+}
+export function loadConfig(env = process.env) {
+    const visitorHashSecret = env.VISITOR_HASH_SECRET;
+    if (!visitorHashSecret) {
+        throw new Error("VISITOR_HASH_SECRET is required but was not set");
+    }
+    const liveTokenSecretIsDedicated = Boolean(env.LIVE_TOKEN_SECRET);
+    return {
+        host: env.COLLECTOR_HOST ?? "0.0.0.0",
+        port: Number(env.COLLECTOR_PORT ?? 4318),
+        corsOrigins: (env.COLLECTOR_CORS_ORIGINS ?? "")
+            .split(",")
+            .map((s) => s.trim())
+            .filter(Boolean),
+        visitorHashSecret,
+        enableRawSessionRetention: bool(env.ENABLE_RAW_SESSION_RETENTION),
+        liveWindowMs: Number(env.LIVE_WINDOW_MS ?? 30_000),
+        liveTokenSecret: env.LIVE_TOKEN_SECRET ?? visitorHashSecret,
+        liveTokenSecretIsDedicated,
+        liveTokenTtlMs: Number(env.LIVE_TOKEN_TTL_MS ?? 900_000),
+        liveMaxConnections: Number(env.LIVE_MAX_CONNECTIONS ?? 200),
+        livePresenceIntervalMs: Number(env.LIVE_PRESENCE_INTERVAL_MS ?? 2_000),
+        rateLimitMax: Number(env.COLLECTOR_RATE_LIMIT_MAX ?? 600),
+        rateLimitWindowMs: Number(env.COLLECTOR_RATE_LIMIT_WINDOW_MS ?? 60_000),
+        ingestRateLimitMax: Number(env.COLLECTOR_INGEST_RATE_LIMIT_MAX ?? 300),
+        ingestRateLimitWindowMs: Number(env.COLLECTOR_INGEST_RATE_LIMIT_WINDOW_MS ?? 60_000),
+        trustProxy: parseTrustProxy(env.COLLECTOR_TRUST_PROXY),
+        bodyLimit: Number(env.COLLECTOR_BODY_LIMIT ?? 1_048_576),
+        cspMode: env.COLLECTOR_CSP === "off" ? "off" : "strict",
+        dashboardDir: env.COLLECTOR_DASHBOARD_DIR ? resolve(env.COLLECTOR_DASHBOARD_DIR) : undefined,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4DpC,SAAS,IAAI,CAAC,KAAyB;IACrC,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;AAC1D,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1B,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAC3D,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAW,OAAO,CAAC,GAAG;IAC/C,MAAM,iBAAiB,GAAG,GAAG,CAAC,mBAAmB,CAAC;IAClD,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,0BAA0B,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAElE,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,cAAc,IAAI,SAAS;QACrC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;QACxC,WAAW,EAAE,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC;aAC5C,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QAClB,iBAAiB;QACjB,yBAAyB,EAAE,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC;QACjE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC;QAClD,eAAe,EAAE,GAAG,CAAC,iBAAiB,IAAI,iBAAiB;QAC3D,0BAA0B;QAC1B,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB,IAAI,OAAO,CAAC;QACxD,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC;QAC3D,sBAAsB,EAAE,MAAM,CAAC,GAAG,CAAC,yBAAyB,IAAI,KAAK,CAAC;QACtE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC;QACzD,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,8BAA8B,IAAI,MAAM,CAAC;QACvE,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,+BAA+B,IAAI,GAAG,CAAC;QACtE,uBAAuB,EAAE,MAAM,CAAC,GAAG,CAAC,qCAAqC,IAAI,MAAM,CAAC;QACpF,UAAU,EAAE,eAAe,CAAC,GAAG,CAAC,qBAAqB,CAAC;QACtD,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS,CAAC;QACxD,OAAO,EAAE,GAAG,CAAC,aAAa,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;QACvD,YAAY,EAAE,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;KAC7F,CAAC;AACJ,CAAC"}

package/dist/csp.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Collect the `'sha256-...'` sources for every inline script in the exported
+ * dashboard's HTML files. Reads `*.html` at the export root (the SPA entry plus
+ * Next's `404.html` / `_not-found.html`), so any page the host might serve is
+ * covered. Best-effort: unreadable files are skipped.
+ */
+export declare function dashboardScriptHashes(dashboardDir: string): string[];
+/**
+ * Build the helmet `contentSecurityPolicy` directives for the bundled dashboard.
+ * `connectOrigins` (the configured CORS origins) are added to `connect-src` so a
+ * dashboard served from a different origin than the collector can still reach the
+ * query + live-SSE API.
+ */
+export declare function buildDashboardCsp(dashboardDir: string, connectOrigins: readonly string[]): {
+    useDefaults: false;
+    directives: Record<string, string[]>;
+};
+//# sourceMappingURL=csp.d.ts.map

package/dist/csp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.ts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAsCA;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBpE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,SAAS,MAAM,EAAE,GAChC;IAAE,WAAW,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;CAAE,CAqB9D"}

package/dist/csp.js

@@ -0,0 +1,91 @@
+import { createHash } from "node:crypto";
+import { readdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * Content-Security-Policy for the bundled static dashboard.
+ *
+ * A Next.js static export (`output: "export"`) ships a handful of **inline**
+ * bootstrap `<script>` tags. A strict CSP normally allows inline scripts with a
+ * per-response *nonce*, but a static export has no server to mint one — the
+ * files are byte-for-byte identical on every request. The serving layer (here,
+ * or the standalone dashboard server) must therefore allow those exact scripts
+ * by their **SHA-256 hash** instead. We enumerate every inline script across the
+ * exported HTML at startup and pin its hash, so `script-src` stays free of the
+ * blanket `'unsafe-inline'` escape hatch while the app still boots.
+ *
+ * Everything else is locked down: no plugins (`object-src 'none'`), no framing
+ * (`frame-ancestors 'none'`), self-only base URI, and same-origin defaults.
+ */
+/** Extract the text of every inline (`src`-less) `<script>` in an HTML document. */
+function inlineScripts(html) {
+    const out = [];
+    const re = /<script(?![^>]*\bsrc=)[^>]*>([\s\S]*?)<\/script>/gi;
+    let match;
+    while ((match = re.exec(html)) !== null) {
+        const body = match[1] ?? "";
+        if (body.length > 0)
+            out.push(body);
+    }
+    return out;
+}
+/** CSP `'sha256-...'` source token for an inline script body. */
+function sha256Source(scriptBody) {
+    const digest = createHash("sha256").update(scriptBody, "utf8").digest("base64");
+    return `'sha256-${digest}'`;
+}
+/**
+ * Collect the `'sha256-...'` sources for every inline script in the exported
+ * dashboard's HTML files. Reads `*.html` at the export root (the SPA entry plus
+ * Next's `404.html` / `_not-found.html`), so any page the host might serve is
+ * covered. Best-effort: unreadable files are skipped.
+ */
+export function dashboardScriptHashes(dashboardDir) {
+    const hashes = new Set();
+    let entries;
+    try {
+        entries = readdirSync(dashboardDir).filter((f) => f.endsWith(".html"));
+    }
+    catch {
+        return [];
+    }
+    for (const file of entries) {
+        try {
+            const html = readFileSync(join(dashboardDir, file), "utf8");
+            for (const body of inlineScripts(html))
+                hashes.add(sha256Source(body));
+        }
+        catch {
+            // Skip files we cannot read; the remaining hashes still apply.
+        }
+    }
+    return [...hashes];
+}
+/**
+ * Build the helmet `contentSecurityPolicy` directives for the bundled dashboard.
+ * `connectOrigins` (the configured CORS origins) are added to `connect-src` so a
+ * dashboard served from a different origin than the collector can still reach the
+ * query + live-SSE API.
+ */
+export function buildDashboardCsp(dashboardDir, connectOrigins) {
+    const scriptSrc = ["'self'", ...dashboardScriptHashes(dashboardDir)];
+    const connectSrc = ["'self'", ...connectOrigins];
+    return {
+        useDefaults: false,
+        directives: {
+            defaultSrc: ["'self'"],
+            baseUri: ["'self'"],
+            objectSrc: ["'none'"],
+            frameAncestors: ["'none'"],
+            formAction: ["'self'"],
+            scriptSrc,
+            // Static export + Babylon panels apply styles the framework injects inline;
+            // inline styles are far lower-risk than scripts, so allow them here.
+            styleSrc: ["'self'", "'unsafe-inline'"],
+            imgSrc: ["'self'", "data:", "blob:"],
+            fontSrc: ["'self'", "data:"],
+            workerSrc: ["'self'", "blob:"],
+            connectSrc,
+        },
+    };
+}
+//# sourceMappingURL=csp.js.map

package/dist/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AAEH,oFAAoF;AACpF,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,oDAAoD,CAAC;IAChE,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,iEAAiE;AACjE,SAAS,YAAY,CAAC,UAAkB;IACtC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChF,OAAO,WAAW,MAAM,GAAG,CAAC;AAC9B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;YAC5D,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,cAAiC;IAEjC,MAAM,SAAS,GAAG,CAAC,QAAQ,EAAE,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,GAAG,cAAc,CAAC,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE;YACV,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,OAAO,EAAE,CAAC,QAAQ,CAAC;YACnB,SAAS,EAAE,CAAC,QAAQ,CAAC;YACrB,cAAc,EAAE,CAAC,QAAQ,CAAC;YAC1B,UAAU,EAAE,CAAC,QAAQ,CAAC;YACtB,SAAS;YACT,4EAA4E;YAC5E,qEAAqE;YACrE,QAAQ,EAAE,CAAC,QAAQ,EAAE,iBAAiB,CAAC;YACvC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC;YACpC,OAAO,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC5B,SAAS,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC9B,UAAU;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/duckdbStore.d.ts

@@ -0,0 +1,14 @@
+import type { CollectorStore } from "./store.js";
+/**
+ * OSS default store (ADR 0020): a single persisted DuckDB file holding both
+ * events and metadata, with the **full** analytics surface — no stubbed
+ * aggregates. In-process and zero-service, so a self-hosted collector needs no
+ * external database. Every aggregation is the dialect-agnostic builder rendered
+ * with {@link duckdbDialect}; metadata (projects, API keys, scene registry) is
+ * re-homed into the same file.
+ *
+ * The schema is migrated on creation (migrations are idempotent), so the store
+ * is usable out of the box. Pass `":memory:"` for an ephemeral store (tests).
+ */
+export declare function createDuckdbStore(path?: string): Promise<CollectorStore>;
+//# sourceMappingURL=duckdbStore.d.ts.map

package/dist/duckdbStore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"duckdbStore.d.ts","sourceRoot":"","sources":["../src/duckdbStore.ts"],"names":[],"mappings":"AA0FA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEjD;;;;;;;;;;GAUG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,CA0H9E"}

package/dist/duckdbStore.js

@@ -0,0 +1,69 @@
+import { buildCameraDirectionHeatmap, buildCameraDistance, buildCameraPositionHeatmap, buildClickGazeRay, buildDeadClicks, buildRageClicks, buildHoverDwell, buildCompileStalls, buildResourceSummary, buildCapabilityChanges, buildCameraGestures, buildDistinctScenes, buildEventTypeCounts, buildFlowHeatmap, buildListSessions, buildNavigationStats, buildXrRotationRate, buildXrSourceUsage, buildXrAbandonment, buildInteractionsBySource, buildMeshDwell, buildPerfSummary, buildPerfDistribution, buildFpsHistogram, buildFrameTimePercentiles, buildJankRate, buildPerfByDevice, buildPerfByScene, buildResourcePercentiles, buildStabilityCounts, buildPointerHeatmap, buildSceneCoverage, buildSessionTrajectory, buildTimeseries, buildTopMeshes, buildWorldHeatmap, buildGazeHeatmap, createDuckdbClient, duckdbDialect, duckdbGetSceneRepresentation, duckdbGetSessionEvents, duckdbGetSessionMeta, duckdbGetProject, duckdbInsertEvents, duckdbListSceneRepresentations, duckdbResolveApiKey, duckdbStreamSessionEvents, duckdbUpsertSceneProxy, migrateDuckdb, readDbSettings, runDuckdbQuery, } from "@uptimizr/db";
+/**
+ * OSS default store (ADR 0020): a single persisted DuckDB file holding both
+ * events and metadata, with the **full** analytics surface — no stubbed
+ * aggregates. In-process and zero-service, so a self-hosted collector needs no
+ * external database. Every aggregation is the dialect-agnostic builder rendered
+ * with {@link duckdbDialect}; metadata (projects, API keys, scene registry) is
+ * re-homed into the same file.
+ *
+ * The schema is migrated on creation (migrations are idempotent), so the store
+ * is usable out of the box. Pass `":memory:"` for an ephemeral store (tests).
+ */
+export async function createDuckdbStore(path) {
+    const filePath = path ?? readDbSettings().duckdb.path;
+    const db = await createDuckdbClient(filePath);
+    await migrateDuckdb(db);
+    return {
+        resolveApiKey: (key) => duckdbResolveApiKey(db, key),
+        projectExists: async (projectId) => (await duckdbGetProject(db, projectId)) !== null,
+        insertEvents: (events) => duckdbInsertEvents(db, [...events]),
+        listSessions: (projectId, opts = {}) => runDuckdbQuery(db, buildListSessions(projectId, opts, duckdbDialect)),
+        pointerHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildPointerHeatmap(projectId, opts, duckdbDialect)),
+        worldHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildWorldHeatmap(projectId, opts, duckdbDialect)),
+        gazeHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildGazeHeatmap(projectId, opts, duckdbDialect)),
+        cameraHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildCameraDirectionHeatmap(projectId, opts, duckdbDialect)),
+        cameraPositionHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildCameraPositionHeatmap(projectId, opts, duckdbDialect)),
+        sessionTrajectory: (projectId, sessionId, opts = {}) => runDuckdbQuery(db, buildSessionTrajectory(projectId, { ...opts, session: sessionId }, duckdbDialect)),
+        clickGazeRays: (projectId, opts = {}) => runDuckdbQuery(db, buildClickGazeRay(projectId, opts, duckdbDialect)),
+        flowHeatmap: (projectId, opts = {}) => runDuckdbQuery(db, buildFlowHeatmap(projectId, opts, duckdbDialect)),
+        topMeshes: (projectId, opts = {}) => runDuckdbQuery(db, buildTopMeshes(projectId, opts, duckdbDialect)),
+        meshDwell: (projectId, opts = {}) => runDuckdbQuery(db, buildMeshDwell(projectId, opts, duckdbDialect)),
+        deadClicks: (projectId, opts = {}) => runDuckdbQuery(db, buildDeadClicks(projectId, opts, duckdbDialect)),
+        rageClicks: (projectId, opts = {}) => runDuckdbQuery(db, buildRageClicks(projectId, opts, duckdbDialect)),
+        hoverDwell: (projectId, opts = {}) => runDuckdbQuery(db, buildHoverDwell(projectId, opts, duckdbDialect)),
+        compileStalls: (projectId, opts = {}) => runDuckdbQuery(db, buildCompileStalls(projectId, opts, duckdbDialect)),
+        resourceSummary: (projectId, opts = {}) => runDuckdbQuery(db, buildResourceSummary(projectId, opts, duckdbDialect)),
+        capabilityChanges: (projectId, opts = {}) => runDuckdbQuery(db, buildCapabilityChanges(projectId, opts, duckdbDialect)),
+        cameraGestures: (projectId, opts = {}) => runDuckdbQuery(db, buildCameraGestures(projectId, opts, duckdbDialect)),
+        perfSummary: (projectId, opts = {}) => runDuckdbQuery(db, buildPerfSummary(projectId, opts, duckdbDialect)),
+        perfDistribution: (projectId, opts = {}) => runDuckdbQuery(db, buildPerfDistribution(projectId, opts, duckdbDialect)),
+        fpsHistogram: (projectId, opts = {}) => runDuckdbQuery(db, buildFpsHistogram(projectId, opts, duckdbDialect)),
+        frameTimePercentiles: (projectId, opts = {}) => runDuckdbQuery(db, buildFrameTimePercentiles(projectId, opts, duckdbDialect)),
+        jankRate: (projectId, opts = {}) => runDuckdbQuery(db, buildJankRate(projectId, opts, duckdbDialect)),
+        perfByDevice: (projectId, opts = {}) => runDuckdbQuery(db, buildPerfByDevice(projectId, opts, duckdbDialect)),
+        perfByScene: (projectId, opts = {}) => runDuckdbQuery(db, buildPerfByScene(projectId, opts, duckdbDialect)),
+        resourcePercentiles: (projectId, opts = {}) => runDuckdbQuery(db, buildResourcePercentiles(projectId, opts, duckdbDialect)),
+        stabilityCounts: (projectId, opts = {}) => runDuckdbQuery(db, buildStabilityCounts(projectId, opts, duckdbDialect)),
+        sceneCoverage: (projectId, opts = {}) => runDuckdbQuery(db, buildSceneCoverage(projectId, opts, duckdbDialect)),
+        cameraDistance: (projectId, opts = {}) => runDuckdbQuery(db, buildCameraDistance(projectId, opts, duckdbDialect)),
+        navigationStats: (projectId, opts = {}) => runDuckdbQuery(db, buildNavigationStats(projectId, opts, duckdbDialect)),
+        xrRotationRate: (projectId, opts = {}) => runDuckdbQuery(db, buildXrRotationRate(projectId, opts, duckdbDialect)),
+        xrSourceUsage: (projectId, opts = {}) => runDuckdbQuery(db, buildXrSourceUsage(projectId, opts, duckdbDialect)),
+        xrAbandonment: (projectId, opts = {}) => runDuckdbQuery(db, buildXrAbandonment(projectId, opts, duckdbDialect)),
+        interactionsBySource: (projectId, opts = {}) => runDuckdbQuery(db, buildInteractionsBySource(projectId, opts, duckdbDialect)),
+        scenes: (projectId, opts = {}) => runDuckdbQuery(db, buildDistinctScenes(projectId, opts, duckdbDialect)),
+        timeseries: (projectId, opts = {}) => runDuckdbQuery(db, buildTimeseries(projectId, opts, duckdbDialect)),
+        eventTypeCounts: (projectId, opts = {}) => runDuckdbQuery(db, buildEventTypeCounts(projectId, opts, duckdbDialect)),
+        getSessionEvents: (projectId, sessionId) => duckdbGetSessionEvents(db, projectId, sessionId),
+        streamSessionEvents: (projectId, sessionId) => duckdbStreamSessionEvents(db, projectId, sessionId),
+        getSessionMeta: (projectId, sessionId) => duckdbGetSessionMeta(db, projectId, sessionId),
+        putSceneProxy: (projectId, proxy, label) => duckdbUpsertSceneProxy(db, projectId, proxy, label),
+        getSceneRepresentation: (projectId, sceneId) => duckdbGetSceneRepresentation(db, projectId, sceneId),
+        listSceneRepresentations: (projectId) => duckdbListSceneRepresentations(db, projectId),
+        async close() {
+            await db.close();
+        },
+    };
+}
+//# sourceMappingURL=duckdbStore.js.map

package/dist/duckdbStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"duckdbStore.js","sourceRoot":"","sources":["../src/duckdbStore.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,2BAA2B,EAC3B,mBAAmB,EACnB,0BAA0B,EAC1B,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,sBAAsB,EACtB,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,4BAA4B,EAC5B,sBAAsB,EACtB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,8BAA8B,EAC9B,mBAAmB,EACnB,yBAAyB,EACzB,sBAAsB,EACtB,aAAa,EACb,cAAc,EACd,cAAc,GAsCf,MAAM,cAAc,CAAC;AAGtB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAa;IACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,cAAc,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;IACtD,MAAM,EAAE,GAAiB,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,aAAa,CAAC,EAAE,CAAC,CAAC;IAExB,OAAO;QACL,aAAa,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,mBAAmB,CAAC,EAAE,EAAE,GAAG,CAAC;QACpD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,MAAM,gBAAgB,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,KAAK,IAAI;QACpF,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC;QAC7D,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACrC,cAAc,CAAoB,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,cAAc,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACvC,cAAc,CAAgB,EAAE,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACxF,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACrC,cAAc,CAAqB,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3F,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACpC,cAAc,CAAqB,EAAE,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CACZ,EAAE,EACF,2BAA2B,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAC5D;QACH,qBAAqB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC9C,cAAc,CACZ,EAAE,EACF,0BAA0B,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAC3D;QACH,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACrD,cAAc,CACZ,EAAE,EACF,sBAAsB,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,aAAa,CAAC,CAClF;QACH,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CAAkB,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACxF,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACpC,cAAc,CAAc,EAAE,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACnF,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAClC,cAAc,CAAe,EAAE,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAClF,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAClC,cAAc,CAAe,EAAE,EAAE,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAClF,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACnC,cAAc,CAAe,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACnF,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACnC,cAAc,CAAe,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACnF,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACnC,cAAc,CAAgB,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACpF,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CAAkB,EAAE,EAAE,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACzF,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACxC,cAAc,CAAqB,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9F,iBAAiB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC1C,cAAc,CACZ,EAAE,EACF,sBAAsB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CACvD;QACH,cAAc,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACvC,cAAc,CAAmB,EAAE,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC3F,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACpC,cAAc,CAAiB,EAAE,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACtF,gBAAgB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACzC,cAAc,CACZ,EAAE,EACF,qBAAqB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CACtD;QACH,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACrC,cAAc,CAAkB,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACxF,oBAAoB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC7C,cAAc,CACZ,EAAE,EACF,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAC1D;QACH,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACjC,cAAc,CAAc,EAAE,EAAE,aAAa,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAChF,YAAY,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACrC,cAAc,CAAkB,EAAE,EAAE,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACxF,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACpC,cAAc,CAAiB,EAAE,EAAE,gBAAgB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACtF,mBAAmB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC5C,cAAc,CACZ,EAAE,EACF,wBAAwB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CACzD;QACH,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACxC,cAAc,CAAoB,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7F,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CAAmB,EAAE,EAAE,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,cAAc,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACvC,cAAc,CACZ,EAAE,EACF,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CACpD;QACH,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACxC,cAAc,CAAqB,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC9F,cAAc,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACvC,cAAc,CAAoB,EAAE,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC5F,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CAAmB,EAAE,EAAE,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,aAAa,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACtC,cAAc,CAAmB,EAAE,EAAE,kBAAkB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,oBAAoB,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC7C,cAAc,CACZ,EAAE,EACF,yBAAyB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAC1D;QACH,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CAC/B,cAAc,CAAW,EAAE,EAAE,mBAAmB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QACnF,UAAU,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACnC,cAAc,CAAsB,EAAE,EAAE,eAAe,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC1F,eAAe,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE,CACxC,cAAc,CAAoB,EAAE,EAAE,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7F,gBAAgB,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC;QAC5F,mBAAmB,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAC5C,yBAAyB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC;QACrD,cAAc,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC;QACxF,aAAa,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC;QAC/F,sBAAsB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAC7C,4BAA4B,CAAC,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC;QACtD,wBAAwB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,8BAA8B,CAAC,EAAE,EAAE,SAAS,CAAC;QACtF,KAAK,CAAC,KAAK;YACT,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/enrich.d.ts

@@ -0,0 +1,8 @@
+import type { AnyEvent } from "@uptimizr/schema";
+/**
+ * Server-authoritative enrichment: stamp every event with the derived cookieless
+ * `visitorId`, overriding anything the client may have sent. Order is preserved
+ * so the stored stream stays replay-complete.
+ */
+export declare function enrichEvents(events: readonly AnyEvent[], visitorId: string): AnyEvent[];
+//# sourceMappingURL=enrich.d.ts.map

package/dist/enrich.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrich.d.ts","sourceRoot":"","sources":["../src/enrich.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAEjD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE,CAEvF"}

package/dist/enrich.js

@@ -0,0 +1,9 @@
+/**
+ * Server-authoritative enrichment: stamp every event with the derived cookieless
+ * `visitorId`, overriding anything the client may have sent. Order is preserved
+ * so the stored stream stays replay-complete.
+ */
+export function enrichEvents(events, visitorId) {
+    return events.map((event) => ({ ...event, visitorId }));
+}
+//# sourceMappingURL=enrich.js.map

package/dist/enrich.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrich.js","sourceRoot":"","sources":["../src/enrich.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,MAA2B,EAAE,SAAiB;IACzE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/liveBus.d.ts

@@ -0,0 +1,86 @@
+import type { AnyEvent } from "@uptimizr/schema";
+/**
+ * In-process live event bus + presence tracker (ADR 0032 §1, §2, §3a, §6).
+ *
+ * The collector is a single process (DuckDB single-writer, ADR 0020), so every
+ * ingested event passes through one place. The ingest route publishes each
+ * enriched, validated event here; live consumers (SSE endpoints, ADR §3) read
+ * from it. This is the OSS fan-out source — a multi-instance scale tier
+ * supplies its own shared-bus implementation behind the same interface
+ * (ADR 0004/0020) without touching `oss/**`.
+ *
+ * Nothing here is persisted: presence is a rolling in-memory view and the
+ * per-session backfill ring is bounded. Privacy: the roster exposed to clients
+ * is non-identifying (no geo/UA/visitorId — ADR §3a); `visitorId` is used only
+ * internally to count distinct active visitors.
+ */
+/** Coarse, non-identifying recency bucket for a live session (ADR §3a). */
+export type ActivityLevel = "active" | "recent" | "idle";
+/** A single non-identifying roster entry surfaced to clients (ADR §3a). */
+export interface PresenceRosterItem {
+    sessionId: string;
+    sceneId: string;
+    /** Server receive time of the session's first seen event (epoch ms). */
+    startedAt: number;
+    /** Server receive time of the session's most recent event (epoch ms). */
+    lastSeen: number;
+    /** Coarse recency bucket derived from `lastSeen`. */
+    activity: ActivityLevel;
+}
+/** Aggregate live snapshot for a project (ADR §3). */
+export interface PresenceSnapshot {
+    /** Distinct live sessions within the window. */
+    activeSessions: number;
+    /** Distinct live visitors within the window. */
+    activeVisitors: number;
+    /** Non-identifying roster, most-recently-active first. */
+    sessions: PresenceRosterItem[];
+}
+/** Options for a live subscription (used by the SSE endpoints — ADR §3). */
+export interface LiveSubscribeOptions {
+    projectId: string;
+    /** Restrict to one session (live-follow tail); omit for the project firehose. */
+    sessionId?: string;
+    /** Optional event-type allow-list. */
+    types?: ReadonlySet<string>;
+    /** Per-subscriber bounded queue size; overrides the bus default. */
+    queueLimit?: number;
+}
+/**
+ * A bounded, drop-oldest async stream of events (ADR §6). A slow consumer loses
+ * its oldest buffered events (counted in {@link dropped}); it never back-pressures
+ * ingest or grows memory without bound.
+ */
+export interface LiveSubscriber extends AsyncIterable<AnyEvent> {
+    /** Close the subscription and release it from the bus. Idempotent. */
+    close(): void;
+    /** Count of events dropped due to a full queue. */
+    readonly dropped: number;
+}
+export interface LiveBus {
+    /** Publish enriched, validated events (called from the ingest route). */
+    publish(events: readonly AnyEvent[]): void;
+    /** Current aggregate + roster snapshot for a project (ADR §3). */
+    presence(projectId: string): PresenceSnapshot;
+    /** Recent buffered events for one session, oldest first (connect-time backfill). */
+    recentForSession(projectId: string, sessionId: string): AnyEvent[];
+    /** Open a bounded live subscription (ADR §6). */
+    subscribe(options: LiveSubscribeOptions): LiveSubscriber;
+    /** Number of open subscriptions (for connection caps — ADR §6). */
+    readonly subscriberCount: number;
+    /** Release timers/subscribers. */
+    stop(): void;
+}
+export interface CreateLiveBusOptions {
+    /** Liveness window in ms (ADR §1, default 30_000). Must be ≥ SDK flush cadence. */
+    windowMs?: number;
+    /** Per-session backfill ring size (ADR §3, default 200). */
+    backfillRingSize?: number;
+    /** Default per-subscriber queue size (ADR §6, default 1_000). */
+    subscriberQueueLimit?: number;
+    /** Clock injection for tests; defaults to `Date.now`. */
+    now?: () => number;
+}
+/** Create the default in-process live bus (ADR 0032 §2). */
+export declare function createLiveBus(options?: CreateLiveBusOptions): LiveBus;
+//# sourceMappingURL=liveBus.d.ts.map

package/dist/liveBus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"liveBus.d.ts","sourceRoot":"","sources":["../src/liveBus.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAGjD;;;;;;;;;;;;;;GAcG;AAEH,2EAA2E;AAC3E,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEzD,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,QAAQ,EAAE,aAAa,CAAC;CACzB;AAED,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,gDAAgD;IAChD,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;CAChC;AAED,4EAA4E;AAC5E,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC5B,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAe,SAAQ,aAAa,CAAC,QAAQ,CAAC;IAC7D,sEAAsE;IACtE,KAAK,IAAI,IAAI,CAAC;IACd,mDAAmD;IACnD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,OAAO;IACtB,yEAAyE;IACzE,OAAO,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,gBAAgB,CAAC;IAC9C,oFAAoF;IACpF,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,QAAQ,EAAE,CAAC;IACnE,iDAAiD;IACjD,SAAS,CAAC,OAAO,EAAE,oBAAoB,GAAG,cAAc,CAAC;IACzD,mEAAmE;IACnE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,kCAAkC;IAClC,IAAI,IAAI,IAAI,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,yDAAyD;IACzD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAsED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,OAAO,CAsIzE"}