@vaultcompass/vault-guard-telemetry 1.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Vault & Compass LLC
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export { TelemetryStore, TelemetryUnavailableError, getDefaultDbPath, getDbSidecarPaths, getOrCreateTelemetrySalt, getTelemetryRetentionDays, type UsageRecordInput, type SessionRecordInput, type StatuslineJson, type ModelSuggestion, type DataStatusJson, type UsageEventRow, type SessionEventRow, } from './store';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,yBAAyB,EACzB,gBAAgB,EAChB,iBAAiB,EACjB,wBAAwB,EACxB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,eAAe,GACrB,MAAM,SAAS,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getTelemetryRetentionDays = exports.getOrCreateTelemetrySalt = exports.getDbSidecarPaths = exports.getDefaultDbPath = exports.TelemetryUnavailableError = exports.TelemetryStore = void 0;
+var store_1 = require("./store");
+Object.defineProperty(exports, "TelemetryStore", { enumerable: true, get: function () { return store_1.TelemetryStore; } });
+Object.defineProperty(exports, "TelemetryUnavailableError", { enumerable: true, get: function () { return store_1.TelemetryUnavailableError; } });
+Object.defineProperty(exports, "getDefaultDbPath", { enumerable: true, get: function () { return store_1.getDefaultDbPath; } });
+Object.defineProperty(exports, "getDbSidecarPaths", { enumerable: true, get: function () { return store_1.getDbSidecarPaths; } });
+Object.defineProperty(exports, "getOrCreateTelemetrySalt", { enumerable: true, get: function () { return store_1.getOrCreateTelemetrySalt; } });
+Object.defineProperty(exports, "getTelemetryRetentionDays", { enumerable: true, get: function () { return store_1.getTelemetryRetentionDays; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,iCAciB;AAbf,uGAAA,cAAc,OAAA;AACd,kHAAA,yBAAyB,OAAA;AACzB,yGAAA,gBAAgB,OAAA;AAChB,0GAAA,iBAAiB,OAAA;AACjB,iHAAA,wBAAwB,OAAA;AACxB,kHAAA,yBAAyB,OAAA"}

package/dist/store.d.ts

@@ -0,0 +1,236 @@
+/**
+ * Thrown when `better-sqlite3` native bindings are missing or incompatible.
+ *
+ * This happens when:
+ *   - The package was installed with `--ignore-scripts` (skips node-gyp compile)
+ *   - The Node.js ABI changed after install (e.g. nvm version switch)
+ *   - The pre-built binary is missing for the current platform/arch
+ *
+ * Callers that don't strictly need telemetry should catch this and degrade
+ * gracefully (e.g. `statusline` and `suggest-model`). The `proxy` command
+ * intentionally lets this propagate — it is the primary telemetry writer and
+ * should fail loudly rather than silently discard usage data.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   const store = new TelemetryStore();
+ *   const payload = store.getStatuslinePayload();
+ *   console.log(payload);
+ * } catch (err) {
+ *   if (err instanceof TelemetryUnavailableError) {
+ *     console.error('Telemetry unavailable:', err.message);
+ *   } else {
+ *     throw err;
+ *   }
+ * }
+ * ```
+ */
+export declare class TelemetryUnavailableError extends Error {
+    constructor(cause: unknown);
+}
+export interface UsageRecordInput {
+    createdAt?: Date;
+    provider?: 'anthropic' | 'openai' | 'unknown';
+    model?: string | null;
+    cwd?: string | null;
+    inputTokens: number;
+    outputTokens: number;
+    estCostUsd?: number;
+    source?: string | null;
+}
+export interface SessionRecordInput {
+    createdAt?: Date;
+    eventType: string;
+    model?: string | null;
+    cwd?: string | null;
+    language?: string | null;
+    linesAccepted?: number;
+    linesSuggested?: number;
+    linesReverted?: number;
+    extra?: Record<string, unknown>;
+}
+export interface StatuslineJson {
+    secrets_today: number;
+    tokens_today_input: number;
+    tokens_today_output: number;
+    est_cost_usd: number;
+    model: string | null;
+    window_start_utc: string;
+}
+export interface ModelSuggestion {
+    suggested_model: string | null;
+    reason: string;
+    by_model: Array<{
+        model: string;
+        usage_events: number;
+        revert_rate: number | null;
+        avg_cost_usd: number;
+    }>;
+}
+/**
+ * Per-machine random salt (32 bytes, hex-encoded on disk, mode `0600`).
+ * Used only to hash `cwd` before persistence — not a secret, but treated as
+ * private local state alongside `usage.sqlite`.
+ */
+export declare function getOrCreateTelemetrySalt(): Buffer;
+/**
+ * Default **90** days. Set `VG_TELEMETRY_RETENTION_DAYS=0` to disable automatic
+ * deletion (database still grows unbounded).
+ */
+export declare function getTelemetryRetentionDays(): number;
+/**
+ * Resolve the default `~/.vault-guard/usage.sqlite` path without instantiating
+ * a {@link TelemetryStore}. Useful for `vault-guard data reset` which needs
+ * the path even when telemetry native bindings are unavailable.
+ */
+export declare function getDefaultDbPath(): string;
+/**
+ * SQLite WAL mode produces two sidecar files alongside the main DB. They must
+ * be deleted as a set during `vault-guard data reset`, otherwise the next
+ * reader recovers stale rows from the WAL.
+ */
+export declare function getDbSidecarPaths(dbPath: string): readonly string[];
+/**
+ * Raw row shape for the `usage_events` table. Returned by
+ * {@link TelemetryStore.exportUsageEvents}. The `cwd` column stores a
+ * **64-char hex HMAC-SHA256** of the original path (see `docs/PRIVACY.md`), not
+ * the plaintext working directory.
+ */
+export interface UsageEventRow {
+    id: number;
+    created_at: string;
+    provider: string | null;
+    model: string | null;
+    cwd: string | null;
+    input_tokens: number;
+    output_tokens: number;
+    est_cost_usd: number;
+    source: string | null;
+}
+/**
+ * Raw row shape for the `session_events` table. Returned by
+ * {@link TelemetryStore.exportSessionEvents}. The `cwd` column is an HMAC digest
+ * (same scheme as {@link UsageEventRow}); `extra_json` is stored as provided.
+ */
+export interface SessionEventRow {
+    id: number;
+    created_at: string;
+    event_type: string;
+    model: string | null;
+    cwd: string | null;
+    language: string | null;
+    lines_accepted: number | null;
+    lines_suggested: number | null;
+    lines_reverted: number | null;
+    extra_json: string | null;
+}
+/**
+ * Privacy-respecting summary of `~/.vault-guard/usage.sqlite`.
+ *
+ * **What this intentionally does NOT expose:** raw `cwd` strings (which
+ * include OS username and project names — see `docs/PRIVACY.md`),
+ * `extra_json` payloads, model prompts, or token totals (those are already
+ * available via `vault-guard statusline --json`).
+ *
+ * Only counts and aggregates land here, so the JSON output is safe to paste
+ * into a support ticket or screenshot.
+ */
+export interface DataStatusJson {
+    /** Absolute path to the SQLite database file. */
+    db_path: string;
+    /** True if the database file exists on disk. */
+    db_exists: boolean;
+    /** File size in bytes (0 when `db_exists` is false). */
+    db_size_bytes: number;
+    /** Last write time of the database file as ISO timestamp, or null. */
+    last_write_iso: string | null;
+    /** Sidecar files (WAL, SHM, journal) that exist alongside the main DB. */
+    sidecars: Array<{
+        path: string;
+        size_bytes: number;
+    }>;
+    /** Row count in `usage_events`. */
+    usage_events: number;
+    /** Row count in `session_events`. */
+    session_events: number;
+    /** Earliest `created_at` across both tables (ISO), or null when empty. */
+    earliest_event_iso: string | null;
+    /** Latest `created_at` across both tables (ISO), or null when empty. */
+    latest_event_iso: string | null;
+    /** Distinct non-null `cwd` values across both tables (count only — never the values). */
+    distinct_cwd_count: number;
+    /** Distinct non-null `model` values across both tables (count only). */
+    distinct_model_count: number;
+    /** Most recently observed model name, or null when no usage rows exist. */
+    last_model: string | null;
+}
+export declare class TelemetryStore {
+    private readonly db;
+    private readonly counter;
+    private readonly saltBuf;
+    private lastRetentionPurgeMs;
+    constructor(dbPath?: string);
+    /**
+     * One-time migration (pragma `user_version` &lt; 2): replace plaintext `cwd`
+     * values with HMAC-SHA256 hex digests using the current salt file.
+     */
+    private applyTelemetryMigrations;
+    /**
+     * Delete rows older than {@link getTelemetryRetentionDays}. Throttled to at
+     * most once per hour per process to avoid hammering SQLite on hot paths.
+     */
+    private maybePurgeStaleRows;
+    private initSchema;
+    close(): void;
+    /**
+     * Force a WAL checkpoint (TRUNCATE) and close the database.
+     *
+     * Why: in WAL mode the main DB file lags behind the `-wal` sidecar until a
+     * checkpoint runs. If the process is killed (SIGINT/SIGTERM during proxy
+     * shutdown) without checkpointing, recent rows live only in the WAL and
+     * survive only as long as that file does. TRUNCATE both checkpoints and
+     * shrinks the WAL to zero so the next reader sees an up-to-date main file
+     * with no recovery surprises.
+     *
+     * Best-effort: if the pragma fails (e.g. handle already closed by another
+     * shutdown path) we still attempt to close the underlying handle.
+     */
+    closeAndCheckpoint(): void;
+    recordUsage(input: UsageRecordInput): void;
+    recordSession(input: SessionRecordInput): void;
+    /** Count session events that represent blocked secrets today (UTC date). */
+    secretsBlockedToday(day?: string): number;
+    getStatuslinePayload(now?: Date): StatuslineJson;
+    /**
+     * Heuristic model hint from the last 7 days of session + usage data.
+     * Prefer models with more usage and lower revert_rate when session metrics exist.
+     */
+    suggestModel(opts?: {
+        cwd?: string;
+        language?: string;
+    }): ModelSuggestion;
+    /**
+     * Read all rows from `usage_events` ordered by `id ASC`.
+     *
+     * Intended for `vault-guard data export`. Returns raw `cwd` strings — see
+     * {@link DataStatusJson} for the privacy-respecting alternative.
+     */
+    exportUsageEvents(): UsageEventRow[];
+    /**
+     * Read all rows from `session_events` ordered by `id ASC`.
+     *
+     * Intended for `vault-guard data export`. Returns raw `cwd` strings and
+     * the `extra_json` payload as stored.
+     */
+    exportSessionEvents(): SessionEventRow[];
+    /**
+     * Compute a privacy-respecting summary of the local telemetry database
+     * (file location, size, row counts, distinct-value *counts*). Never
+     * returns raw `cwd` strings or `extra_json`.
+     *
+     * Used by `vault-guard data status`. Safe to paste into a support ticket.
+     */
+    getDataStatus(dbFilePath: string): DataStatusJson;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,KAAK,EAAE,OAAO;CAQ3B;AAyBD,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAC;IAC9C,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,YAAY,EAAE,MAAM,CAAC;KACtB,CAAC,CAAC;CACJ;AAcD;;;;GAIG;AACH,wBAAgB,wBAAwB,IAAI,MAAM,CAYjD;AAWD;;;GAGG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAMlD;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAEnE;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,wDAAwD;IACxD,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,0EAA0E;IAC1E,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,wEAAwE;IACxE,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,yFAAyF;IACzF,kBAAkB,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,2EAA2E;IAC3E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAMD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAe;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,oBAAoB,CAAK;gBAErB,MAAM,CAAC,EAAE,MAAM;IAa3B;;;OAGG;IACH,OAAO,CAAC,wBAAwB;IA0BhC;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAa3B,OAAO,CAAC,UAAU;IAgClB,KAAK,IAAI,IAAI;IAIb;;;;;;;;;;;;OAYG;IACH,kBAAkB,IAAI,IAAI;IAa1B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI;IA4B1C,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAwB9C,4EAA4E;IAC5E,mBAAmB,CAAC,GAAG,SAAgB,GAAG,MAAM;IAUhD,oBAAoB,CAAC,GAAG,OAAa,GAAG,cAAc;IAiCtD;;;OAGG;IACH,YAAY,CAAC,IAAI,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,eAAe;IA2E7E;;;;;OAKG;IACH,iBAAiB,IAAI,aAAa,EAAE;IASpC;;;;;OAKG;IACH,mBAAmB,IAAI,eAAe,EAAE;IAUxC;;;;;;OAMG;IACH,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,cAAc;CA8FlD"}

package/dist/store.js

@@ -0,0 +1,514 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TelemetryStore = exports.TelemetryUnavailableError = void 0;
+exports.getOrCreateTelemetrySalt = getOrCreateTelemetrySalt;
+exports.getTelemetryRetentionDays = getTelemetryRetentionDays;
+exports.getDefaultDbPath = getDefaultDbPath;
+exports.getDbSidecarPaths = getDbSidecarPaths;
+const fs_1 = __importDefault(require("fs"));
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const module_1 = require("module");
+const crypto_1 = require("crypto");
+const vault_guard_core_1 = require("@vaultcompass/vault-guard-core");
+// Lazy native-binding loader uses createRequire so that:
+// (a) the native binding is not loaded at module import time (saves startup
+//     cost and allows graceful degradation on platforms without pre-built binaries)
+// (b) @typescript-eslint/no-require-imports is not violated
+const _require = (0, module_1.createRequire)(__filename);
+// ---------------------------------------------------------------------------
+// TelemetryUnavailableError
+// ---------------------------------------------------------------------------
+/**
+ * Thrown when `better-sqlite3` native bindings are missing or incompatible.
+ *
+ * This happens when:
+ *   - The package was installed with `--ignore-scripts` (skips node-gyp compile)
+ *   - The Node.js ABI changed after install (e.g. nvm version switch)
+ *   - The pre-built binary is missing for the current platform/arch
+ *
+ * Callers that don't strictly need telemetry should catch this and degrade
+ * gracefully (e.g. `statusline` and `suggest-model`). The `proxy` command
+ * intentionally lets this propagate — it is the primary telemetry writer and
+ * should fail loudly rather than silently discard usage data.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   const store = new TelemetryStore();
+ *   const payload = store.getStatuslinePayload();
+ *   console.log(payload);
+ * } catch (err) {
+ *   if (err instanceof TelemetryUnavailableError) {
+ *     console.error('Telemetry unavailable:', err.message);
+ *   } else {
+ *     throw err;
+ *   }
+ * }
+ * ```
+ */
+class TelemetryUnavailableError extends Error {
+    constructor(cause) {
+        const msg = `better-sqlite3 native bindings could not be loaded.\n` +
+            `Re-install to rebuild them: npm install -g @vaultcompass/vault-guard\n` +
+            `Underlying error: ${String(cause)}`;
+        super(msg);
+        this.name = 'TelemetryUnavailableError';
+    }
+}
+exports.TelemetryUnavailableError = TelemetryUnavailableError;
+let _DbClass = null;
+function getDbClass() {
+    if (_DbClass)
+        return _DbClass;
+    try {
+        // Dynamic import to defer native binding load until first use.
+        // We need synchronous access here (TelemetryStore constructor is sync),
+        // so we use createRequire from the module system rather than top-level await.
+        const mod = _require('better-sqlite3');
+        _DbClass = mod;
+        return _DbClass;
+    }
+    catch (err) {
+        throw new TelemetryUnavailableError(err);
+    }
+}
+function defaultDbPath() {
+    const dir = path_1.default.join(os_1.default.homedir(), '.vault-guard');
+    return path_1.default.join(dir, 'usage.sqlite');
+}
+/** 64-char lowercase hex = SHA-256 digest written to the `cwd` column. */
+const HASHED_CWD_RE = /^[a-f0-9]{64}$/;
+function telemetrySaltPath() {
+    return path_1.default.join(os_1.default.homedir(), '.vault-guard', 'salt');
+}
+/**
+ * Per-machine random salt (32 bytes, hex-encoded on disk, mode `0600`).
+ * Used only to hash `cwd` before persistence — not a secret, but treated as
+ * private local state alongside `usage.sqlite`.
+ */
+function getOrCreateTelemetrySalt() {
+    const p = telemetrySaltPath();
+    fs_1.default.mkdirSync(path_1.default.dirname(p), { recursive: true });
+    if (fs_1.default.existsSync(p)) {
+        const hex = fs_1.default.readFileSync(p, 'utf8').trim();
+        if (/^[a-f0-9]{64}$/i.test(hex)) {
+            return Buffer.from(hex, 'hex');
+        }
+    }
+    const b = (0, crypto_1.randomBytes)(32);
+    fs_1.default.writeFileSync(p, b.toString('hex'), { mode: 0o600 });
+    return b;
+}
+function hashCwdForStore(plain, salt) {
+    if (plain == null || plain === '')
+        return null;
+    return (0, crypto_1.createHmac)('sha256', salt).update(plain, 'utf8').digest('hex');
+}
+function isStoredCwdDigest(v) {
+    return v != null && v !== '' && HASHED_CWD_RE.test(v);
+}
+/**
+ * Default **90** days. Set `VG_TELEMETRY_RETENTION_DAYS=0` to disable automatic
+ * deletion (database still grows unbounded).
+ */
+function getTelemetryRetentionDays() {
+    const raw = process.env.VG_TELEMETRY_RETENTION_DAYS;
+    if (raw === undefined || raw === '')
+        return 90;
+    const n = Number.parseInt(raw, 10);
+    if (!Number.isFinite(n) || n <= 0)
+        return 0;
+    return Math.min(n, 3650);
+}
+const MIN_MS_BETWEEN_RETENTION_PURGES = 3600 * 1000;
+function retentionThrottleMs() {
+    if (process.env.VG_TELEMETRY_RETENTION_TEST_NO_THROTTLE === '1')
+        return 0;
+    return MIN_MS_BETWEEN_RETENTION_PURGES;
+}
+/**
+ * Resolve the default `~/.vault-guard/usage.sqlite` path without instantiating
+ * a {@link TelemetryStore}. Useful for `vault-guard data reset` which needs
+ * the path even when telemetry native bindings are unavailable.
+ */
+function getDefaultDbPath() {
+    return defaultDbPath();
+}
+/**
+ * SQLite WAL mode produces two sidecar files alongside the main DB. They must
+ * be deleted as a set during `vault-guard data reset`, otherwise the next
+ * reader recovers stale rows from the WAL.
+ */
+function getDbSidecarPaths(dbPath) {
+    return [`${dbPath}-wal`, `${dbPath}-shm`, `${dbPath}-journal`];
+}
+function utcDayStart(d = new Date()) {
+    return d.toISOString().slice(0, 10);
+}
+class TelemetryStore {
+    db;
+    counter = new vault_guard_core_1.TokenCounter();
+    saltBuf;
+    lastRetentionPurgeMs = 0;
+    constructor(dbPath) {
+        const resolved = dbPath ?? defaultDbPath();
+        const dir = path_1.default.dirname(resolved);
+        fs_1.default.mkdirSync(dir, { recursive: true });
+        this.saltBuf = getOrCreateTelemetrySalt();
+        // getDbClass() throws TelemetryUnavailableError if bindings missing.
+        this.db = new (getDbClass())(resolved);
+        this.db.pragma('journal_mode = WAL');
+        this.initSchema();
+        this.applyTelemetryMigrations();
+        this.maybePurgeStaleRows();
+    }
+    /**
+     * One-time migration (pragma `user_version` &lt; 2): replace plaintext `cwd`
+     * values with HMAC-SHA256 hex digests using the current salt file.
+     */
+    applyTelemetryMigrations() {
+        const ver = Number(this.db.pragma('user_version', { simple: true }));
+        if (ver >= 2)
+            return;
+        const salt = this.saltBuf;
+        const uRows = this.db
+            .prepare(`SELECT id, cwd FROM usage_events WHERE cwd IS NOT NULL AND cwd != ''`)
+            .all();
+        const uUpd = this.db.prepare(`UPDATE usage_events SET cwd = ? WHERE id = ?`);
+        for (const r of uRows) {
+            if (isStoredCwdDigest(r.cwd))
+                continue;
+            uUpd.run(hashCwdForStore(r.cwd, salt), r.id);
+        }
+        const sRows = this.db
+            .prepare(`SELECT id, cwd FROM session_events WHERE cwd IS NOT NULL AND cwd != ''`)
+            .all();
+        const sUpd = this.db.prepare(`UPDATE session_events SET cwd = ? WHERE id = ?`);
+        for (const r of sRows) {
+            if (isStoredCwdDigest(r.cwd))
+                continue;
+            sUpd.run(hashCwdForStore(r.cwd, salt), r.id);
+        }
+        this.db.pragma('user_version = 2');
+    }
+    /**
+     * Delete rows older than {@link getTelemetryRetentionDays}. Throttled to at
+     * most once per hour per process to avoid hammering SQLite on hot paths.
+     */
+    maybePurgeStaleRows() {
+        const days = getTelemetryRetentionDays();
+        if (days <= 0)
+            return;
+        const now = Date.now();
+        if (now - this.lastRetentionPurgeMs < retentionThrottleMs())
+            return;
+        this.lastRetentionPurgeMs = now;
+        const cutoff = new Date(Date.now() - days * 86400000).toISOString();
+        this.db.prepare(`DELETE FROM usage_events WHERE created_at < ?`).run(cutoff);
+        this.db.prepare(`DELETE FROM session_events WHERE created_at < ?`).run(cutoff);
+    }
+    initSchema() {
+        this.db.exec(`
+      CREATE TABLE IF NOT EXISTS usage_events (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        created_at TEXT NOT NULL,
+        provider TEXT,
+        model TEXT,
+        cwd TEXT,
+        input_tokens INTEGER NOT NULL DEFAULT 0,
+        output_tokens INTEGER NOT NULL DEFAULT 0,
+        est_cost_usd REAL NOT NULL DEFAULT 0,
+        source TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_usage_created ON usage_events(created_at);
+
+      CREATE TABLE IF NOT EXISTS session_events (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        created_at TEXT NOT NULL,
+        event_type TEXT NOT NULL,
+        model TEXT,
+        cwd TEXT,
+        language TEXT,
+        lines_accepted INTEGER,
+        lines_suggested INTEGER,
+        lines_reverted INTEGER,
+        extra_json TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_session_created ON session_events(created_at);
+      CREATE INDEX IF NOT EXISTS idx_session_type ON session_events(event_type);
+    `);
+    }
+    close() {
+        this.db.close();
+    }
+    /**
+     * Force a WAL checkpoint (TRUNCATE) and close the database.
+     *
+     * Why: in WAL mode the main DB file lags behind the `-wal` sidecar until a
+     * checkpoint runs. If the process is killed (SIGINT/SIGTERM during proxy
+     * shutdown) without checkpointing, recent rows live only in the WAL and
+     * survive only as long as that file does. TRUNCATE both checkpoints and
+     * shrinks the WAL to zero so the next reader sees an up-to-date main file
+     * with no recovery surprises.
+     *
+     * Best-effort: if the pragma fails (e.g. handle already closed by another
+     * shutdown path) we still attempt to close the underlying handle.
+     */
+    closeAndCheckpoint() {
+        try {
+            this.db.pragma('wal_checkpoint(TRUNCATE)');
+        }
+        catch {
+            // Handle may already be in a shutting-down state; safe to ignore.
+        }
+        try {
+            this.db.close();
+        }
+        catch {
+            // Best-effort: nothing useful we can do on shutdown if close throws.
+        }
+    }
+    recordUsage(input) {
+        this.maybePurgeStaleRows();
+        const created = (input.createdAt ?? new Date()).toISOString();
+        let cost = input.estCostUsd;
+        if (cost === undefined) {
+            const p = input.provider ?? 'anthropic';
+            if (p === 'anthropic' || p === 'openai') {
+                cost = this.counter.calculateCost(p, input.inputTokens, input.outputTokens);
+            }
+            else {
+                cost = 0;
+            }
+        }
+        const stmt = this.db.prepare(`
+      INSERT INTO usage_events (created_at, provider, model, cwd, input_tokens, output_tokens, est_cost_usd, source)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(created, input.provider ?? 'unknown', input.model ?? null, hashCwdForStore(input.cwd, this.saltBuf), input.inputTokens, input.outputTokens, cost, input.source ?? null);
+    }
+    recordSession(input) {
+        this.maybePurgeStaleRows();
+        const created = (input.createdAt ?? new Date()).toISOString();
+        const extra = input.extra && Object.keys(input.extra).length > 0 ? JSON.stringify(input.extra) : null;
+        const stmt = this.db.prepare(`
+      INSERT INTO session_events (
+        created_at, event_type, model, cwd, language,
+        lines_accepted, lines_suggested, lines_reverted, extra_json
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(created, input.eventType, input.model ?? null, hashCwdForStore(input.cwd, this.saltBuf), input.language ?? null, input.linesAccepted ?? null, input.linesSuggested ?? null, input.linesReverted ?? null, extra);
+    }
+    /** Count session events that represent blocked secrets today (UTC date). */
+    secretsBlockedToday(day = utcDayStart()) {
+        const row = this.db
+            .prepare(`SELECT COUNT(*) AS c FROM session_events
+         WHERE event_type = 'secret_blocked' AND substr(created_at, 1, 10) = ?`)
+            .get(day);
+        return row.c;
+    }
+    getStatuslinePayload(now = new Date()) {
+        const day = utcDayStart(now);
+        const windowStart = `${day}T00:00:00.000Z`;
+        const usage = this.db
+            .prepare(`SELECT
+           COALESCE(SUM(input_tokens), 0) AS tin,
+           COALESCE(SUM(output_tokens), 0) AS tout,
+           COALESCE(SUM(est_cost_usd), 0) AS cost
+         FROM usage_events
+         WHERE substr(created_at, 1, 10) = ?`)
+            .get(day);
+        const lastModel = this.db
+            .prepare(`SELECT model FROM usage_events
+         WHERE substr(created_at, 1, 10) = ? AND model IS NOT NULL AND model != ''
+         ORDER BY created_at DESC LIMIT 1`)
+            .get(day);
+        return {
+            secrets_today: this.secretsBlockedToday(day),
+            tokens_today_input: usage.tin,
+            tokens_today_output: usage.tout,
+            est_cost_usd: Math.round(usage.cost * 10_000) / 10_000,
+            model: lastModel?.model ?? null,
+            window_start_utc: windowStart,
+        };
+    }
+    /**
+     * Heuristic model hint from the last 7 days of session + usage data.
+     * Prefer models with more usage and lower revert_rate when session metrics exist.
+     */
+    suggestModel(opts = {}) {
+        const since = new Date();
+        since.setUTCDate(since.getUTCDate() - 7);
+        const sinceIso = since.toISOString();
+        const usageByModel = this.db
+            .prepare(`SELECT model AS m,
+                COUNT(*) AS n,
+                AVG(est_cost_usd) AS avg_cost
+         FROM usage_events
+         WHERE created_at >= ? AND model IS NOT NULL AND model != ''
+         GROUP BY model`)
+            .all(sinceIso);
+        const revertRows = this.db
+            .prepare(`SELECT model AS m,
+                SUM(COALESCE(lines_reverted, 0)) AS rev,
+                SUM(COALESCE(lines_suggested, 0)) AS sug
+         FROM session_events
+         WHERE created_at >= ?
+           AND event_type IN ('apply', 'completion', 'revert')
+           AND model IS NOT NULL AND model != ''
+         GROUP BY model`)
+            .all(sinceIso);
+        const revertMap = new Map();
+        for (const r of revertRows) {
+            revertMap.set(r.m, { rev: r.rev, sug: r.sug });
+        }
+        const by_model = usageByModel.map(u => {
+            const rr = revertMap.get(u.m);
+            let revert_rate = null;
+            if (rr && rr.sug > 0) {
+                revert_rate = rr.rev / rr.sug;
+            }
+            return {
+                model: u.m,
+                usage_events: u.n,
+                revert_rate,
+                avg_cost_usd: Math.round((u.avg_cost ?? 0) * 10_000) / 10_000,
+            };
+        });
+        if (by_model.length === 0) {
+            return {
+                suggested_model: null,
+                reason: 'No recent usage with a model label. Use the proxy or MCP report_token_usage first.',
+                by_model: [],
+            };
+        }
+        by_model.sort((a, b) => {
+            const ar = a.revert_rate ?? 0.5;
+            const br = b.revert_rate ?? 0.5;
+            if (ar !== br)
+                return ar - br;
+            return b.usage_events - a.usage_events;
+        });
+        const best = by_model[0];
+        let reason = `Lowest observed revert pressure among recent models (${best.usage_events} logged usage row(s)).`;
+        if (opts.language)
+            reason += ` Context: language=${opts.language}.`;
+        if (opts.cwd)
+            reason += ` cwd hint recorded.`;
+        return {
+            suggested_model: best.model,
+            reason,
+            by_model,
+        };
+    }
+    /**
+     * Read all rows from `usage_events` ordered by `id ASC`.
+     *
+     * Intended for `vault-guard data export`. Returns raw `cwd` strings — see
+     * {@link DataStatusJson} for the privacy-respecting alternative.
+     */
+    exportUsageEvents() {
+        return this.db
+            .prepare(`SELECT id, created_at, provider, model, cwd, input_tokens, output_tokens, est_cost_usd, source
+         FROM usage_events ORDER BY id ASC`)
+            .all();
+    }
+    /**
+     * Read all rows from `session_events` ordered by `id ASC`.
+     *
+     * Intended for `vault-guard data export`. Returns raw `cwd` strings and
+     * the `extra_json` payload as stored.
+     */
+    exportSessionEvents() {
+        return this.db
+            .prepare(`SELECT id, created_at, event_type, model, cwd, language,
+                lines_accepted, lines_suggested, lines_reverted, extra_json
+         FROM session_events ORDER BY id ASC`)
+            .all();
+    }
+    /**
+     * Compute a privacy-respecting summary of the local telemetry database
+     * (file location, size, row counts, distinct-value *counts*). Never
+     * returns raw `cwd` strings or `extra_json`.
+     *
+     * Used by `vault-guard data status`. Safe to paste into a support ticket.
+     */
+    getDataStatus(dbFilePath) {
+        let dbExists = false;
+        let dbSize = 0;
+        let lastWriteIso = null;
+        try {
+            const stat = fs_1.default.statSync(dbFilePath);
+            dbExists = true;
+            dbSize = stat.size;
+            lastWriteIso = stat.mtime.toISOString();
+        }
+        catch {
+            // File missing is a valid state — open() can create it; status reports it.
+        }
+        const sidecars = getDbSidecarPaths(dbFilePath)
+            .map(p => {
+            try {
+                const s = fs_1.default.statSync(p);
+                return { path: p, size_bytes: s.size };
+            }
+            catch {
+                return null;
+            }
+        })
+            .filter((x) => x !== null);
+        // COUNT(*) on indexed tables is cheap; we don't need to bound it.
+        const usageEvents = this.db.prepare('SELECT COUNT(*) AS n FROM usage_events').get().n;
+        const sessionEvents = this.db.prepare('SELECT COUNT(*) AS n FROM session_events').get().n;
+        // Earliest / latest across the union of both tables. NULL when both tables
+        // are empty, in which case MIN/MAX return NULL on the union.
+        const range = this.db
+            .prepare(`SELECT MIN(created_at) AS earliest, MAX(created_at) AS latest
+         FROM (
+           SELECT created_at FROM usage_events
+           UNION ALL
+           SELECT created_at FROM session_events
+         )`)
+            .get();
+        const distinctCwd = this.db
+            .prepare(`SELECT COUNT(DISTINCT cwd) AS n FROM (
+             SELECT cwd FROM usage_events WHERE cwd IS NOT NULL AND cwd != ''
+             UNION
+             SELECT cwd FROM session_events WHERE cwd IS NOT NULL AND cwd != ''
+           )`)
+            .get().n;
+        const distinctModel = this.db
+            .prepare(`SELECT COUNT(DISTINCT model) AS n FROM (
+             SELECT model FROM usage_events WHERE model IS NOT NULL AND model != ''
+             UNION
+             SELECT model FROM session_events WHERE model IS NOT NULL AND model != ''
+           )`)
+            .get().n;
+        const lastModelRow = this.db
+            .prepare(`SELECT model FROM usage_events
+         WHERE model IS NOT NULL AND model != ''
+         ORDER BY created_at DESC
+         LIMIT 1`)
+            .get();
+        return {
+            db_path: dbFilePath,
+            db_exists: dbExists,
+            db_size_bytes: dbSize,
+            last_write_iso: lastWriteIso,
+            sidecars,
+            usage_events: usageEvents,
+            session_events: sessionEvents,
+            earliest_event_iso: range.earliest,
+            latest_event_iso: range.latest,
+            distinct_cwd_count: distinctCwd,
+            distinct_model_count: distinctModel,
+            last_model: lastModelRow?.model ?? null,
+        };
+    }
+}
+exports.TelemetryStore = TelemetryStore;
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":";;;;;;AA2IA,4DAYC;AAeD,8DAMC;AAcD,4CAEC;AAOD,8CAEC;AArMD,4CAAoB;AACpB,4CAAoB;AACpB,gDAAwB;AACxB,mCAAuC;AACvC,mCAAiD;AACjD,qEAA8D;AAE9D,yDAAyD;AACzD,4EAA4E;AAC5E,oFAAoF;AACpF,4DAA4D;AAC5D,MAAM,QAAQ,GAAG,IAAA,sBAAa,EAAC,UAAU,CAAC,CAAC;AAE3C,8EAA8E;AAC9E,4BAA4B;AAC5B,8EAA8E;AAE9E;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAa,yBAA0B,SAAQ,KAAK;IAClD,YAAY,KAAc;QACxB,MAAM,GAAG,GACP,uDAAuD;YACvD,wEAAwE;YACxE,qBAAqB,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,GAAG,CAAC,CAAC;QACX,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AATD,8DASC;AASD,IAAI,QAAQ,GAA+B,IAAI,CAAC;AAEhD,SAAS,UAAU;IACjB,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,IAAI,CAAC;QACH,+DAA+D;QAC/D,wEAAwE;QACxE,8EAA8E;QAC9E,MAAM,GAAG,GAAG,QAAQ,CAAC,gBAAgB,CAAwB,CAAC;QAC9D,QAAQ,GAAG,GAAG,CAAC;QACf,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AA6CD,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC;IACpD,OAAO,cAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;AACxC,CAAC;AAED,0EAA0E;AAC1E,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAEvC,SAAS,iBAAiB;IACxB,OAAO,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB;IACtC,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;IAC9B,YAAE,CAAC,SAAS,CAAC,cAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,YAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC1B,YAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,KAAgC,EAAE,IAAY;IACrE,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/C,OAAO,IAAA,mBAAU,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAgB;IACzC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB;IACvC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,+BAA+B,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,SAAS,mBAAmB;IAC1B,IAAI,OAAO,CAAC,GAAG,CAAC,uCAAuC,KAAK,GAAG;QAAE,OAAO,CAAC,CAAC;IAC1E,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAgB,gBAAgB;IAC9B,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,SAAgB,iBAAiB,CAAC,MAAc;IAC9C,OAAO,CAAC,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,CAAC;AACjE,CAAC;AA4ED,SAAS,WAAW,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE;IACjC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAa,cAAc;IACR,EAAE,CAAe;IACjB,OAAO,GAAG,IAAI,+BAAY,EAAE,CAAC;IAC7B,OAAO,CAAS;IACzB,oBAAoB,GAAG,CAAC,CAAC;IAEjC,YAAY,MAAe;QACzB,MAAM,QAAQ,GAAG,MAAM,IAAI,aAAa,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,GAAG,wBAAwB,EAAE,CAAC;QAC1C,qEAAqE;QACrE,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACK,wBAAwB;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO;QAErB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,sEAAsE,CAAC;aAC/E,GAAG,EAAwC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC;QAC7E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CAAC,wEAAwE,CAAC;aACjF,GAAG,EAAwC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC;QAC/E,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,SAAS;YACvC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACrC,CAAC;IAED;;;OAGG;IACK,mBAAmB;QACzB,MAAM,IAAI,GAAG,yBAAyB,EAAE,CAAC;QACzC,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO;QAEtB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,oBAAoB,GAAG,mBAAmB,EAAE;YAAE,OAAO;QACpE,IAAI,CAAC,oBAAoB,GAAG,GAAG,CAAC;QAEhC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7E,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACjF,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4BZ,CAAC,CAAC;IACL,CAAC;IAED,KAAK;QACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,kBAAkB;QAChB,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;QACD,IAAI,CAAC;YACH,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,WAAW,CAAC,KAAuB;QACjC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,IAAI,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC;QAC5B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC;YACxC,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;gBACxC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YAC9E,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;KAG5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CACN,OAAO,EACP,KAAK,CAAC,QAAQ,IAAI,SAAS,EAC3B,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,EACxC,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,YAAY,EAClB,IAAI,EACJ,KAAK,CAAC,MAAM,IAAI,IAAI,CACrB,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,KAAyB;QACrC,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9D,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1F,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;;;;;KAK5B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CACN,OAAO,EACP,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,KAAK,IAAI,IAAI,EACnB,eAAe,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,EACxC,KAAK,CAAC,QAAQ,IAAI,IAAI,EACtB,KAAK,CAAC,aAAa,IAAI,IAAI,EAC3B,KAAK,CAAC,cAAc,IAAI,IAAI,EAC5B,KAAK,CAAC,aAAa,IAAI,IAAI,EAC3B,KAAK,CACN,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,mBAAmB,CAAC,GAAG,GAAG,WAAW,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE;aAChB,OAAO,CACN;+EACuE,CACxE;aACA,GAAG,CAAC,GAAG,CAAkB,CAAC;QAC7B,OAAO,GAAG,CAAC,CAAC,CAAC;IACf,CAAC;IAED,oBAAoB,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;QACnC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,GAAG,GAAG,gBAAgB,CAAC;QAE3C,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CACN;;;;;6CAKqC,CACtC;aACA,GAAG,CAAC,GAAG,CAAgD,CAAC;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE;aACtB,OAAO,CACN;;0CAEkC,CACnC;aACA,GAAG,CAAC,GAAG,CAAkC,CAAC;QAE7C,OAAO;YACL,aAAa,EAAE,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC;YAC5C,kBAAkB,EAAE,KAAK,CAAC,GAAG;YAC7B,mBAAmB,EAAE,KAAK,CAAC,IAAI;YAC/B,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,CAAC,GAAG,MAAM;YACtD,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI;YAC/B,gBAAgB,EAAE,WAAW;SAC9B,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,YAAY,CAAC,OAA4C,EAAE;QACzD,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC;QACzB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAErC,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;;;;;wBAKgB,CACjB;aACA,GAAG,CAAC,QAAQ,CAAsD,CAAC;QAEtE,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE;aACvB,OAAO,CACN;;;;;;;wBAOgB,CACjB;aACA,GAAG,CAAC,QAAQ,CAAmD,CAAC;QAEnE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwC,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;YACpC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,WAAW,GAAkB,IAAI,CAAC;YACtC,IAAI,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;gBACrB,WAAW,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC;YAChC,CAAC;YACD,OAAO;gBACL,KAAK,EAAE,CAAC,CAAC,CAAC;gBACV,YAAY,EAAE,CAAC,CAAC,CAAC;gBACjB,WAAW;gBACX,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM;aAC9D,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,eAAe,EAAE,IAAI;gBACrB,MAAM,EAAE,oFAAoF;gBAC5F,QAAQ,EAAE,EAAE;aACb,CAAC;QACJ,CAAC;QAED,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACrB,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YAChC,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,IAAI,GAAG,CAAC;YAChC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,GAAG,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,MAAM,GAAG,wDAAwD,IAAI,CAAC,YAAY,wBAAwB,CAAC;QAC/G,IAAI,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,sBAAsB,IAAI,CAAC,QAAQ,GAAG,CAAC;QACpE,IAAI,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,qBAAqB,CAAC;QAE9C,OAAO;YACL,eAAe,EAAE,IAAI,CAAC,KAAK;YAC3B,MAAM;YACN,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;2CACmC,CACpC;aACA,GAAG,EAAqB,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CACN;;6CAEqC,CACtC;aACA,GAAG,EAAuB,CAAC;IAChC,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,UAAkB;QAC9B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,YAAY,GAAkB,IAAI,CAAC;QAEvC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,YAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC;YACnB,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACP,2EAA2E;QAC7E,CAAC;QAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC;aAC3C,GAAG,CAAC,CAAC,CAAC,EAAE;YACP,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,YAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;gBACzB,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAA6C,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QAExE,kEAAkE;QAClE,MAAM,WAAW,GACf,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,EAC9D,CAAC,CAAC,CAAC;QACJ,MAAM,aAAa,GACjB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,EAChE,CAAC,CAAC,CAAC;QAEJ,2EAA2E;QAC3E,6DAA6D;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE;aAClB,OAAO,CACN;;;;;WAKG,CACJ;aACA,GAAG,EAAwD,CAAC;QAE/D,MAAM,WAAW,GACf,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;aAIG,CACJ;aACA,GAAG,EACP,CAAC,CAAC,CAAC;QAEJ,MAAM,aAAa,GACjB,IAAI,CAAC,EAAE;aACJ,OAAO,CACN;;;;aAIG,CACJ;aACA,GAAG,EACP,CAAC,CAAC,CAAC;QAEJ,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE;aACzB,OAAO,CACN;;;iBAGS,CACV;aACA,GAAG,EAAmC,CAAC;QAE1C,OAAO;YACL,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,YAAY;YAC5B,QAAQ;YACR,YAAY,EAAE,WAAW;YACzB,cAAc,EAAE,aAAa;YAC7B,kBAAkB,EAAE,KAAK,CAAC,QAAQ;YAClC,gBAAgB,EAAE,KAAK,CAAC,MAAM;YAC9B,kBAAkB,EAAE,WAAW;YAC/B,oBAAoB,EAAE,aAAa;YACnC,UAAU,EAAE,YAAY,EAAE,KAAK,IAAI,IAAI;SACxC,CAAC;IACJ,CAAC;CACF;AAnbD,wCAmbC"}

package/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@vaultcompass/vault-guard-telemetry",
+  "version": "1.0.0",
+  "description": "Opt-in local telemetry store for Vault Guard (usage + session events)",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/vaultcompasshq/vault-guard.git",
+    "directory": "packages/telemetry"
+  },
+  "engines": {
+    "node": ">=22.0.0",
+    "npm": ">=9.0.0",
+    "pnpm": ">=9.0.0"
+  },
+  "license": "MIT",
+  "dependencies": {
+    "better-sqlite3": "^12.9.0",
+    "@vaultcompass/vault-guard-core": "1.0.0"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^25.9.1",
+    "jest": "^30.4.2",
+    "ts-jest": "^29.4.11",
+    "typescript": "^5.3.3"
+  },
+  "scripts": {
+    "build": "tsc",
+    "test": "jest",
+    "test:coverage": "jest --coverage"
+  }
+}