anantham-v2 2.0.0-alpha.1

package/dist/domain/observability.d.ts

@@ -0,0 +1,335 @@
+import { z } from "zod";
+/**
+ * Security Event Classifications.
+ * PRD Part 3 Section 85.
+ */
+export declare const SecurityEventClassificationSchema: z.ZodEnum<["AUTHENTICATION_FAILURE", "AUTHORIZATION_DENIED", "POLICY_DENIED", "TOOL_DENIED", "PERMISSION_ESCALATION_ATTEMPT", "PROJECT_ISOLATION_VIOLATION", "SIGNATURE_FAILURE", "REPLAY_ATTEMPT", "SECRET_DETECTION", "INTEGRITY_FAILURE", "FENCING_VIOLATION", "RECOVERY_FAILURE", "RESOURCE_LIMIT", "PROMPT_INJECTION", "INVALID_EXTERNAL_INPUT", "INFORMATIONAL"]>;
+export type SecurityEventClassification = z.infer<typeof SecurityEventClassificationSchema>;
+/**
+ * Authoritative Security & Audit Record.
+ * PRD Part 1 Section 40 / PRD Part 3 Section 85.
+ */
+export declare const SecurityAuditRecordSchema: z.ZodObject<{
+    auditId: z.ZodString;
+    eventId: z.ZodString;
+    schemaVersion: z.ZodDefault<z.ZodNumber>;
+    timestamp: z.ZodString;
+    projectId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    taskId: z.ZodOptional<z.ZodString>;
+    agentId: z.ZodOptional<z.ZodString>;
+    actor: z.ZodString;
+    action: z.ZodString;
+    classification: z.ZodEnum<["AUTHENTICATION_FAILURE", "AUTHORIZATION_DENIED", "POLICY_DENIED", "TOOL_DENIED", "PERMISSION_ESCALATION_ATTEMPT", "PROJECT_ISOLATION_VIOLATION", "SIGNATURE_FAILURE", "REPLAY_ATTEMPT", "SECRET_DETECTION", "INTEGRITY_FAILURE", "FENCING_VIOLATION", "RECOVERY_FAILURE", "RESOURCE_LIMIT", "PROMPT_INJECTION", "INVALID_EXTERNAL_INPUT", "INFORMATIONAL"]>;
+    decision: z.ZodEnum<["PERMIT", "DENY", "MONITOR", "RETRY_EXHAUSTED", "UNKNOWN"]>;
+    reasonCode: z.ZodString;
+    correlationId: z.ZodOptional<z.ZodString>;
+    parentEventId: z.ZodOptional<z.ZodString>;
+    causationId: z.ZodOptional<z.ZodString>;
+    payloadDigest: z.ZodString;
+    previousRecordDigest: z.ZodOptional<z.ZodString>;
+    recordDigest: z.ZodString;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    metadata: Record<string, unknown>;
+    schemaVersion: number;
+    actor: string;
+    timestamp: string;
+    decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+    action: string;
+    classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+    eventId: string;
+    auditId: string;
+    reasonCode: string;
+    payloadDigest: string;
+    recordDigest: string;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    agentId?: string | undefined;
+    correlationId?: string | undefined;
+    parentEventId?: string | undefined;
+    causationId?: string | undefined;
+    previousRecordDigest?: string | undefined;
+}, {
+    actor: string;
+    timestamp: string;
+    decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+    action: string;
+    classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+    eventId: string;
+    auditId: string;
+    reasonCode: string;
+    payloadDigest: string;
+    recordDigest: string;
+    metadata?: Record<string, unknown> | undefined;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+    agentId?: string | undefined;
+    schemaVersion?: number | undefined;
+    correlationId?: string | undefined;
+    parentEventId?: string | undefined;
+    causationId?: string | undefined;
+    previousRecordDigest?: string | undefined;
+}>;
+export type SecurityAuditRecord = z.infer<typeof SecurityAuditRecordSchema>;
+/**
+ * Telemetry Metric Type.
+ */
+export declare const MetricTypeSchema: z.ZodEnum<["COUNTER", "GAUGE", "HISTOGRAM"]>;
+export type MetricType = z.infer<typeof MetricTypeSchema>;
+/**
+ * Structured Telemetry Metric.
+ */
+export declare const TelemetryMetricSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodEnum<["COUNTER", "GAUGE", "HISTOGRAM"]>;
+    value: z.ZodNumber;
+    unit: z.ZodDefault<z.ZodString>;
+    timestamp: z.ZodString;
+    projectId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    tags: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    value: number;
+    type: "COUNTER" | "GAUGE" | "HISTOGRAM";
+    name: string;
+    tags: Record<string, string>;
+    timestamp: string;
+    unit: string;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+}, {
+    value: number;
+    type: "COUNTER" | "GAUGE" | "HISTOGRAM";
+    name: string;
+    timestamp: string;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    tags?: Record<string, string> | undefined;
+    unit?: string | undefined;
+}>;
+export type TelemetryMetric = z.infer<typeof TelemetryMetricSchema>;
+/**
+ * Telemetry Execution Span.
+ */
+export declare const TelemetrySpanSchema: z.ZodObject<{
+    spanId: z.ZodString;
+    parentSpanId: z.ZodOptional<z.ZodString>;
+    traceId: z.ZodString;
+    name: z.ZodString;
+    startTime: z.ZodString;
+    endTime: z.ZodOptional<z.ZodString>;
+    durationMs: z.ZodOptional<z.ZodNumber>;
+    projectId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    status: z.ZodDefault<z.ZodEnum<["OK", "ERROR", "CANCELLED"]>>;
+    attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    status: "CANCELLED" | "ERROR" | "OK";
+    name: string;
+    spanId: string;
+    traceId: string;
+    startTime: string;
+    attributes: Record<string, unknown>;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    durationMs?: number | undefined;
+    parentSpanId?: string | undefined;
+    endTime?: string | undefined;
+}, {
+    name: string;
+    spanId: string;
+    traceId: string;
+    startTime: string;
+    status?: "CANCELLED" | "ERROR" | "OK" | undefined;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    durationMs?: number | undefined;
+    parentSpanId?: string | undefined;
+    endTime?: string | undefined;
+    attributes?: Record<string, unknown> | undefined;
+}>;
+export type TelemetrySpan = z.infer<typeof TelemetrySpanSchema>;
+/**
+ * System Diagnostic Report.
+ * PRD Part 2 Section 170.
+ */
+export declare const DiagnosticReportSchema: z.ZodObject<{
+    reportId: z.ZodString;
+    timestamp: z.ZodString;
+    status: z.ZodEnum<["HEALTHY", "DEGRADED", "UNHEALTHY"]>;
+    sqliteIntegrity: z.ZodBoolean;
+    migrationsApplied: z.ZodNumber;
+    activeLeasesCount: z.ZodNumber;
+    orphanedTasksCount: z.ZodNumber;
+    crashedJobsCount: z.ZodNumber;
+    unresolvedAnomalies: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    checks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    status: "HEALTHY" | "DEGRADED" | "UNHEALTHY";
+    checks: Record<string, boolean>;
+    timestamp: string;
+    reportId: string;
+    sqliteIntegrity: boolean;
+    migrationsApplied: number;
+    activeLeasesCount: number;
+    orphanedTasksCount: number;
+    crashedJobsCount: number;
+    unresolvedAnomalies: string[];
+}, {
+    status: "HEALTHY" | "DEGRADED" | "UNHEALTHY";
+    timestamp: string;
+    reportId: string;
+    sqliteIntegrity: boolean;
+    migrationsApplied: number;
+    activeLeasesCount: number;
+    orphanedTasksCount: number;
+    crashedJobsCount: number;
+    checks?: Record<string, boolean> | undefined;
+    unresolvedAnomalies?: string[] | undefined;
+}>;
+export type DiagnosticReport = z.infer<typeof DiagnosticReportSchema>;
+/**
+ * Compliance Audit Report Bundle.
+ * PRD Part 3 Section 100.
+ */
+export declare const ComplianceReportSchema: z.ZodObject<{
+    reportId: z.ZodString;
+    generatedAt: z.ZodString;
+    projectId: z.ZodString;
+    totalAuditEvents: z.ZodNumber;
+    chainIntegrityVerified: z.ZodBoolean;
+    policyDenialsCount: z.ZodNumber;
+    securityAnomaliesCount: z.ZodNumber;
+    auditHeadDigest: z.ZodString;
+    records: z.ZodArray<z.ZodObject<{
+        auditId: z.ZodString;
+        eventId: z.ZodString;
+        schemaVersion: z.ZodDefault<z.ZodNumber>;
+        timestamp: z.ZodString;
+        projectId: z.ZodOptional<z.ZodString>;
+        sessionId: z.ZodOptional<z.ZodString>;
+        taskId: z.ZodOptional<z.ZodString>;
+        agentId: z.ZodOptional<z.ZodString>;
+        actor: z.ZodString;
+        action: z.ZodString;
+        classification: z.ZodEnum<["AUTHENTICATION_FAILURE", "AUTHORIZATION_DENIED", "POLICY_DENIED", "TOOL_DENIED", "PERMISSION_ESCALATION_ATTEMPT", "PROJECT_ISOLATION_VIOLATION", "SIGNATURE_FAILURE", "REPLAY_ATTEMPT", "SECRET_DETECTION", "INTEGRITY_FAILURE", "FENCING_VIOLATION", "RECOVERY_FAILURE", "RESOURCE_LIMIT", "PROMPT_INJECTION", "INVALID_EXTERNAL_INPUT", "INFORMATIONAL"]>;
+        decision: z.ZodEnum<["PERMIT", "DENY", "MONITOR", "RETRY_EXHAUSTED", "UNKNOWN"]>;
+        reasonCode: z.ZodString;
+        correlationId: z.ZodOptional<z.ZodString>;
+        parentEventId: z.ZodOptional<z.ZodString>;
+        causationId: z.ZodOptional<z.ZodString>;
+        payloadDigest: z.ZodString;
+        previousRecordDigest: z.ZodOptional<z.ZodString>;
+        recordDigest: z.ZodString;
+        metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        metadata: Record<string, unknown>;
+        schemaVersion: number;
+        actor: string;
+        timestamp: string;
+        decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+        action: string;
+        classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+        eventId: string;
+        auditId: string;
+        reasonCode: string;
+        payloadDigest: string;
+        recordDigest: string;
+        projectId?: string | undefined;
+        sessionId?: string | undefined;
+        taskId?: string | undefined;
+        agentId?: string | undefined;
+        correlationId?: string | undefined;
+        parentEventId?: string | undefined;
+        causationId?: string | undefined;
+        previousRecordDigest?: string | undefined;
+    }, {
+        actor: string;
+        timestamp: string;
+        decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+        action: string;
+        classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+        eventId: string;
+        auditId: string;
+        reasonCode: string;
+        payloadDigest: string;
+        recordDigest: string;
+        metadata?: Record<string, unknown> | undefined;
+        projectId?: string | undefined;
+        sessionId?: string | undefined;
+        taskId?: string | undefined;
+        agentId?: string | undefined;
+        schemaVersion?: number | undefined;
+        correlationId?: string | undefined;
+        parentEventId?: string | undefined;
+        causationId?: string | undefined;
+        previousRecordDigest?: string | undefined;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    projectId: string;
+    reportId: string;
+    generatedAt: string;
+    totalAuditEvents: number;
+    chainIntegrityVerified: boolean;
+    policyDenialsCount: number;
+    securityAnomaliesCount: number;
+    auditHeadDigest: string;
+    records: {
+        metadata: Record<string, unknown>;
+        schemaVersion: number;
+        actor: string;
+        timestamp: string;
+        decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+        action: string;
+        classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+        eventId: string;
+        auditId: string;
+        reasonCode: string;
+        payloadDigest: string;
+        recordDigest: string;
+        projectId?: string | undefined;
+        sessionId?: string | undefined;
+        taskId?: string | undefined;
+        agentId?: string | undefined;
+        correlationId?: string | undefined;
+        parentEventId?: string | undefined;
+        causationId?: string | undefined;
+        previousRecordDigest?: string | undefined;
+    }[];
+}, {
+    projectId: string;
+    reportId: string;
+    generatedAt: string;
+    totalAuditEvents: number;
+    chainIntegrityVerified: boolean;
+    policyDenialsCount: number;
+    securityAnomaliesCount: number;
+    auditHeadDigest: string;
+    records: {
+        actor: string;
+        timestamp: string;
+        decision: "UNKNOWN" | "PERMIT" | "DENY" | "MONITOR" | "RETRY_EXHAUSTED";
+        action: string;
+        classification: "TOOL_DENIED" | "FENCING_VIOLATION" | "AUTHENTICATION_FAILURE" | "AUTHORIZATION_DENIED" | "POLICY_DENIED" | "PERMISSION_ESCALATION_ATTEMPT" | "PROJECT_ISOLATION_VIOLATION" | "SIGNATURE_FAILURE" | "REPLAY_ATTEMPT" | "SECRET_DETECTION" | "INTEGRITY_FAILURE" | "RECOVERY_FAILURE" | "RESOURCE_LIMIT" | "PROMPT_INJECTION" | "INVALID_EXTERNAL_INPUT" | "INFORMATIONAL";
+        eventId: string;
+        auditId: string;
+        reasonCode: string;
+        payloadDigest: string;
+        recordDigest: string;
+        metadata?: Record<string, unknown> | undefined;
+        projectId?: string | undefined;
+        sessionId?: string | undefined;
+        taskId?: string | undefined;
+        agentId?: string | undefined;
+        schemaVersion?: number | undefined;
+        correlationId?: string | undefined;
+        parentEventId?: string | undefined;
+        causationId?: string | undefined;
+        previousRecordDigest?: string | undefined;
+    }[];
+}>;
+export type ComplianceReport = z.infer<typeof ComplianceReportSchema>;
+//# sourceMappingURL=observability.d.ts.map

package/dist/domain/observability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.d.ts","sourceRoot":"","sources":["../../src/domain/observability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,iCAAiC,yWAiB5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE5F;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqBpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,gBAAgB,8CAA4C,CAAC;AAC1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAShC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;GAGG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/domain/observability.js

@@ -0,0 +1,114 @@
+import { z } from "zod";
+/**
+ * Security Event Classifications.
+ * PRD Part 3 Section 85.
+ */
+export const SecurityEventClassificationSchema = z.enum([
+    "AUTHENTICATION_FAILURE",
+    "AUTHORIZATION_DENIED",
+    "POLICY_DENIED",
+    "TOOL_DENIED",
+    "PERMISSION_ESCALATION_ATTEMPT",
+    "PROJECT_ISOLATION_VIOLATION",
+    "SIGNATURE_FAILURE",
+    "REPLAY_ATTEMPT",
+    "SECRET_DETECTION",
+    "INTEGRITY_FAILURE",
+    "FENCING_VIOLATION",
+    "RECOVERY_FAILURE",
+    "RESOURCE_LIMIT",
+    "PROMPT_INJECTION",
+    "INVALID_EXTERNAL_INPUT",
+    "INFORMATIONAL",
+]);
+/**
+ * Authoritative Security & Audit Record.
+ * PRD Part 1 Section 40 / PRD Part 3 Section 85.
+ */
+export const SecurityAuditRecordSchema = z.object({
+    auditId: z.string().min(1),
+    eventId: z.string().min(1),
+    schemaVersion: z.number().int().positive().default(1),
+    timestamp: z.string().min(1),
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    taskId: z.string().optional(),
+    agentId: z.string().optional(),
+    actor: z.string().min(1),
+    action: z.string().min(1),
+    classification: SecurityEventClassificationSchema,
+    decision: z.enum(["PERMIT", "DENY", "MONITOR", "RETRY_EXHAUSTED", "UNKNOWN"]),
+    reasonCode: z.string().min(1),
+    correlationId: z.string().optional(),
+    parentEventId: z.string().optional(),
+    causationId: z.string().optional(),
+    payloadDigest: z.string().min(1), // SHA-256 over sanitized payload
+    previousRecordDigest: z.string().optional(), // Cryptographic hash chaining
+    recordDigest: z.string().min(1), // SHA-256 over canonical record fields
+    metadata: z.record(z.unknown()).default({}),
+});
+/**
+ * Telemetry Metric Type.
+ */
+export const MetricTypeSchema = z.enum(["COUNTER", "GAUGE", "HISTOGRAM"]);
+/**
+ * Structured Telemetry Metric.
+ */
+export const TelemetryMetricSchema = z.object({
+    name: z.string().min(1),
+    type: MetricTypeSchema,
+    value: z.number(),
+    unit: z.string().default("count"),
+    timestamp: z.string().min(1),
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    tags: z.record(z.string()).default({}),
+});
+/**
+ * Telemetry Execution Span.
+ */
+export const TelemetrySpanSchema = z.object({
+    spanId: z.string().min(1),
+    parentSpanId: z.string().optional(),
+    traceId: z.string().min(1),
+    name: z.string().min(1),
+    startTime: z.string().min(1),
+    endTime: z.string().optional(),
+    durationMs: z.number().optional(),
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    status: z.enum(["OK", "ERROR", "CANCELLED"]).default("OK"),
+    attributes: z.record(z.unknown()).default({}),
+});
+/**
+ * System Diagnostic Report.
+ * PRD Part 2 Section 170.
+ */
+export const DiagnosticReportSchema = z.object({
+    reportId: z.string().min(1),
+    timestamp: z.string().min(1),
+    status: z.enum(["HEALTHY", "DEGRADED", "UNHEALTHY"]),
+    sqliteIntegrity: z.boolean(),
+    migrationsApplied: z.number().int().min(0),
+    activeLeasesCount: z.number().int().min(0),
+    orphanedTasksCount: z.number().int().min(0),
+    crashedJobsCount: z.number().int().min(0),
+    unresolvedAnomalies: z.array(z.string()).default([]),
+    checks: z.record(z.boolean()).default({}),
+});
+/**
+ * Compliance Audit Report Bundle.
+ * PRD Part 3 Section 100.
+ */
+export const ComplianceReportSchema = z.object({
+    reportId: z.string().min(1),
+    generatedAt: z.string().min(1),
+    projectId: z.string(),
+    totalAuditEvents: z.number().int().min(0),
+    chainIntegrityVerified: z.boolean(),
+    policyDenialsCount: z.number().int().min(0),
+    securityAnomaliesCount: z.number().int().min(0),
+    auditHeadDigest: z.string().min(1),
+    records: z.array(SecurityAuditRecordSchema),
+});
+//# sourceMappingURL=observability.js.map

package/dist/domain/observability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability.js","sourceRoot":"","sources":["../../src/domain/observability.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,IAAI,CAAC;IACtD,wBAAwB;IACxB,sBAAsB;IACtB,eAAe;IACf,aAAa;IACb,+BAA+B;IAC/B,6BAA6B;IAC7B,mBAAmB;IACnB,gBAAgB;IAChB,kBAAkB;IAClB,mBAAmB;IACnB,mBAAmB;IACnB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,wBAAwB;IACxB,eAAe;CAChB,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,cAAc,EAAE,iCAAiC;IACjD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;IAC7E,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iCAAiC;IACnE,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,8BAA8B;IAC3E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,uCAAuC;IACxE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5C,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AAG1E;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC9C,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACpD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;IAC5B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE;IACnC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC5C,CAAC,CAAC"}