monora-ai 2.1.0 → 2.1.3

package/dist/schemas/config.schema.json

@@ -28,7 +28,11 @@
     "ai_act": { "$ref": "#/$defs/ai_act" },
     "telemetry": { "$ref": "#/$defs/telemetry" },
     "attribution": { "$ref": "#/$defs/attribution" },
-    "audit": { "$ref": "#/$defs/audit_metadata" }
+    "audit": { "$ref": "#/$defs/audit_metadata" },
+    "quotas": { "$ref": "#/$defs/quotas" },
+    "onboarding": { "$ref": "#/$defs/onboarding" },
+    "model_spec": { "$ref": "#/$defs/model_spec" },
+    "enrichments": { "$ref": "#/$defs/enrichments" }
   },
   "$defs": {
     "defaults": {
@@ -58,10 +62,13 @@
         "backoff_base_sec": { "type": "number", "minimum": 0 },
         "rotation": { "type": ["string", "null"] },
         "max_size_mb": { "type": ["integer", "null"], "minimum": 1 },
+        "symlink": { "type": "boolean" },
         "format": { "type": ["string", "null"] },
         "circuit_breaker": { "$ref": "#/$defs/circuit_breaker" },
         "retry_queue": { "$ref": "#/$defs/retry_queue" },
-        "idempotency": { "$ref": "#/$defs/idempotency" }
+        "idempotency": { "$ref": "#/$defs/idempotency" },
+        "data_residency": { "type": ["string", "null"], "enum": ["us", "eu", "any", null] },
+        "data_residency_action": { "type": ["string", "null"], "enum": ["block", "warn", null] }
       }
     },
     "circuit_breaker": {
@@ -257,7 +264,7 @@
         "queue_size": { "type": "integer", "minimum": 1, "default": 1000 },
         "batch_size": { "type": "integer", "minimum": 1, "default": 50 },
         "flush_interval_sec": { "type": "number", "minimum": 0, "default": 1.0 },
-        "queue_full_timeout_sec": { "type": ["number", "null"], "minimum": 0 },
+        "queue_full_timeout_sec": { "type": ["number", "null"], "exclusiveMinimum": 0 },
         "adaptive_batching": { "type": "boolean", "default": true },
         "min_batch_size": { "type": "integer", "minimum": 1, "default": 10 },
         "max_batch_size": { "type": "integer", "minimum": 1, "default": 500 }
@@ -305,7 +312,7 @@
         "enabled": { "type": "boolean", "default": true },
         "backend": {
           "type": "string",
-          "enum": ["minimal", "prometheus", "statsd"],
+          "enum": ["none", "minimal", "memory", "prometheus", "statsd"],
           "default": "minimal"
         },
         "prometheus": { "$ref": "#/$defs/prometheus" },
@@ -359,6 +366,113 @@
         "notes": { "type": ["string", "null"] }
       }
     },
+    "quotas": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false },
+        "max_tokens_per_trace": { "type": "integer", "minimum": 0, "default": 100000 },
+        "max_llm_calls_per_trace": { "type": "integer", "minimum": 0, "default": 50 },
+        "max_trace_duration_sec": { "type": "integer", "minimum": 0, "default": 3600 },
+        "max_cost_per_trace": { "type": "number", "minimum": 0, "default": 10.0 },
+        "action": { "type": "string", "enum": ["warn", "block"], "default": "warn" }
+      }
+    },
+    "onboarding_artifacts": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "production_logs_path": { "type": "string", "default": "./monora_events.jsonl" },
+        "schema_contract_path": { "type": "string", "default": "./onboarding/schema_contract.json" },
+        "dataset_sample_path": { "type": ["string", "null"] },
+        "baseline_reports_dir": { "type": "string", "default": "./monora_reports/onboarding" }
+      }
+    },
+    "onboarding_validation": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "min_log_records": { "type": "integer", "minimum": 1, "default": 100 },
+        "required_field_presence_threshold": { "type": "number", "minimum": 0, "maximum": 1, "default": 0.95 },
+        "type_conformance_threshold": { "type": "number", "minimum": 0, "maximum": 1, "default": 0.9 }
+      }
+    },
+    "onboarding_completion": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "completed_at": { "type": ["string", "null"] },
+        "completed_by": { "type": ["string", "null"] },
+        "last_validated_at": { "type": ["string", "null"] }
+      }
+    },
+    "onboarding": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "enabled": { "type": "boolean", "default": false },
+        "required_in_production": { "type": "boolean", "default": true },
+        "status": { "type": "string", "enum": ["draft", "validated", "completed"], "default": "draft" },
+        "standards": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": ["SOC2", "GDPR", "ISO27001"]
+        },
+        "artifacts": { "$ref": "#/$defs/onboarding_artifacts" },
+        "validation": { "$ref": "#/$defs/onboarding_validation" },
+        "completion": { "$ref": "#/$defs/onboarding_completion" }
+      }
+    },
+    "model_spec_roles": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "inputs": { "type": "array", "items": { "type": "string" }, "default": [] },
+        "outputs": { "type": "array", "items": { "type": "string" }, "default": [] },
+        "metadata": { "type": "array", "items": { "type": "string" }, "default": [] },
+        "identifiers": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": ["event_id", "trace_id", "span_id"]
+        }
+      }
+    },
+    "model_spec": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "name": { "type": "string", "default": "monora_default" },
+        "version": { "type": "string", "default": "v1" },
+        "event_ts_field": { "type": "string", "default": "timestamp" },
+        "schema_ref": { "type": "string", "default": "./onboarding/schema_contract.json" },
+        "roles": { "$ref": "#/$defs/model_spec_roles" }
+      }
+    },
+    "enrichment_toggles": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "identity_tracking": { "type": "boolean", "default": true },
+        "risk_tracking": { "type": "boolean", "default": true },
+        "bias_tracking": { "type": "boolean", "default": false },
+        "oversight_tracking": { "type": "boolean", "default": true },
+        "data_governance_tracking": { "type": "boolean", "default": true },
+        "lifecycle_tracking": { "type": "boolean", "default": true }
+      }
+    },
+    "enrichments": {
+      "type": "object",
+      "additionalProperties": true,
+      "properties": {
+        "profile": { "type": "string", "default": "recommended" },
+        "bundles": {
+          "type": "array",
+          "items": { "type": "string" },
+          "default": ["core_observability", "soc2_access", "gdpr_privacy", "iso27001_security"]
+        },
+        "toggles": { "$ref": "#/$defs/enrichment_toggles" }
+      }
+    },
     "prometheus": {
       "type": "object",
       "additionalProperties": true,

package/dist/security_report.js

@@ -148,7 +148,7 @@ function buildCompleteness(events) {
     };
 }
 function buildComplianceSummary(events, config) {
-    const report = (0, report_1.buildReport)(events, config.policies);
+    const report = (0, report_1.buildReport)(events, config.policies, config.registry);
     const violations = report.violations || [];
     const compliance = report.model_compliance || {};
     const timestamps = events.map((event) => event.timestamp).filter(Boolean);
@@ -200,7 +200,7 @@ function buildClassificationCompliance(events) {
     return result;
 }
 function assessRisks(events, config) {
-    const report = (0, report_1.buildReport)(events, config.policies);
+    const report = (0, report_1.buildReport)(events, config.policies, config.registry);
     const violations = report.violations || [];
     const unknownModels = report.model_compliance?.unknown_models_used || [];
     const tampered = (0, verify_1.detectTampering)(events);
@@ -294,9 +294,9 @@ function buildOperationalMetrics(events, config) {
     };
 }
 function buildEvidence(events, config) {
-    const report = (0, report_1.buildReport)(events, config.policies);
+    const report = (0, report_1.buildReport)(events, config.policies, config.registry);
     const compliance = report.model_compliance || {};
-    const evidence = report.evidence || {};
+    const evidence = { ...(report.evidence || {}) };
     evidence.unknown_models_used = compliance.unknown_models_used || [];
     evidence.forbidden_models_blocked = compliance.forbidden_models_blocked || [];
     evidence.tampered_events = (0, verify_1.detectTampering)(events);

package/dist/signing.d.ts

@@ -9,7 +9,7 @@ export interface SigningConfig {
     algorithm?: 'ed25519' | 'hmac-sha256';
     key_id?: string | null;
     key_file?: string | null;
-    key_env?: string;
+    key_env?: string | null;
 }
 export interface EventSignature {
     algorithm: string;

package/dist/signing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuCH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,iBAAiB,CAAiC;gBAE9C,MAAM,GAAE,aAAkB;IActC,OAAO,CAAC,OAAO;IAmEf;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS;IAgB5D,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,QAAQ;CAkBjB;AAED;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAA4E;IAExF;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IA2CjE;;;;OAIG;IACH,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA6B,EACrC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO;IAkBV;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO;IAuC3C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,UAAU;CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GAAG,WAAW,CAEd;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,GAAE,MAA6B,GACpC,OAAO,CAsBT"}
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../src/signing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuCH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,GAAG,aAAa,CAAC;IACtC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAA0B;IACxC,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,iBAAiB,CAAiC;gBAE9C,MAAM,GAAE,aAAkB;IActC,OAAO,CAAC,OAAO;IAyEf;;;;;;OAMG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,cAAc,GAAG,SAAS;IAgB5D,OAAO,CAAC,aAAa;IAarB,OAAO,CAAC,WAAW;IAcnB,OAAO,CAAC,QAAQ;CAkBjB;AAED;;;;;;;;;GASG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,IAAI,CAA4E;IAExF;;;;;;OAMG;IACH,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI;IA2CjE;;;;OAIG;IACH,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,MAA6B,EACrC,KAAK,CAAC,EAAE,MAAM,GACb,OAAO;IAkBV;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO;IAuC3C,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,UAAU;CAUnB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB,GAAG,WAAW,CAEd;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,CAAC,EAAE,MAAM,EAChB,MAAM,GAAE,MAA6B,GACpC,OAAO,CAsBT"}

package/dist/signing.js

@@ -129,6 +129,10 @@ class EventSigner {
                 throw new Error(`Ed25519 signing enabled but no key provided. ` +
                     `Set ${this.config.key_env} or provide key_file.`);
             }
+            if (this.config.algorithm === 'hmac-sha256') {
+                throw new Error(`HMAC-SHA256 signing enabled but no key provided. ` +
+                    `Set ${this.config.key_env} or provide key_file.`);
+            }
             return;
         }
         this.signingKey = keyData;

package/dist/sinks/file.d.ts

@@ -1,13 +1,23 @@
 /**
  * File sink with JSON-lines output and optional rotation.
+ *
+ * Supports:
+ * - `rotation: 'daily'` - Rotate files daily with date suffix
+ * - `rotation: 'size'` - Rotate when file exceeds `maxSizeMb`
+ * - `symlink: true` - Maintain symlinks that point to the current file:
+ *   - original path (e.g., `monora_events.jsonl`)
+ *   - latest path (e.g., `monora_events.latest.jsonl`)
+ *   (useful for npm scripts and log viewers that need a stable path)
  */
 import { Sink } from './base';
 export declare class FileSink implements Sink {
-    private path;
+    private originalPath;
+    private currentPath;
     private batchSize;
     private flushIntervalSec;
     private rotation;
     private maxSizeMb?;
+    private symlink;
     private buffer;
     private timer?;
     private currentDate;
@@ -16,6 +26,7 @@ export declare class FileSink implements Sink {
         flushIntervalSec?: number;
         rotation?: 'none' | 'daily' | 'size';
         maxSizeMb?: number;
+        symlink?: boolean;
     });
     emit(events: Array<Record<string, any>>): void;
     flush(): void;
@@ -23,6 +34,13 @@ export declare class FileSink implements Sink {
     private flushInternal;
     private ensurePath;
     private rotateFile;
+    /**
+     * Update symlinks to point to the current rotated file.
+     * This allows npm scripts and log viewers to always access the latest file
+     * via stable paths (e.g., `monora_events.jsonl` or `monora_events.latest.jsonl`).
+     */
+    private updateSymlink;
+    private latestPath;
     private dailyPath;
     private today;
 }

package/dist/sinks/file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/sinks/file.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,IAAI,EAAa,MAAM,QAAQ,CAAC;AAEzC,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,QAAQ,CAA4B;IAC5C,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,KAAK,CAAC,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;gBAG1B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB;IAiBH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI;IAO9C,KAAK,IAAI,IAAI;IAIb,KAAK,IAAI,IAAI;IAQb,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,UAAU;IAuBlB,OAAO,CAAC,UAAU;IAclB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,KAAK;CAId"}
+{"version":3,"file":"file.d.ts","sourceRoot":"","sources":["../../src/sinks/file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EAAE,IAAI,EAAa,MAAM,QAAQ,CAAC;AAEzC,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,QAAQ,CAA4B;IAC5C,OAAO,CAAC,SAAS,CAAC,CAAS;IAC3B,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,KAAK,CAAC,CAAiB;IAC/B,OAAO,CAAC,WAAW,CAAS;gBAG1B,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QACR,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,CAAC;QACrC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IA2BH,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI;IAO9C,KAAK,IAAI,IAAI;IAIb,KAAK,IAAI,IAAI;IAQb,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,UAAU;IA4BlB,OAAO,CAAC,UAAU;IAclB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IAyCrB,OAAO,CAAC,UAAU;IAOlB,OAAO,CAAC,SAAS;IAQjB,OAAO,CAAC,KAAK;CAId"}

package/dist/sinks/file.js

@@ -1,6 +1,14 @@
 "use strict";
 /**
  * File sink with JSON-lines output and optional rotation.
+ *
+ * Supports:
+ * - `rotation: 'daily'` - Rotate files daily with date suffix
+ * - `rotation: 'size'` - Rotate when file exceeds `maxSizeMb`
+ * - `symlink: true` - Maintain symlinks that point to the current file:
+ *   - original path (e.g., `monora_events.jsonl`)
+ *   - latest path (e.g., `monora_events.latest.jsonl`)
+ *   (useful for npm scripts and log viewers that need a stable path)
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -42,13 +50,23 @@ const path = __importStar(require("path"));
 const base_1 = require("./base");
 class FileSink {
     constructor(filePath, options) {
-        this.path = filePath;
+        this.originalPath = filePath;
+        this.currentPath = filePath;
         this.batchSize = options?.batchSize || 100;
         this.flushIntervalSec = options?.flushIntervalSec || 5.0;
         this.rotation = options?.rotation || 'none';
         this.maxSizeMb = options?.maxSizeMb;
+        this.symlink = options?.symlink ?? false;
         this.buffer = [];
         this.currentDate = this.today();
+        // Initialize the current path for daily rotation
+        if (this.rotation === 'daily') {
+            this.currentPath = this.dailyPath(this.currentDate);
+            this.updateSymlink();
+        }
+        else if (this.rotation !== 'none') {
+            this.updateSymlink();
+        }
         if (this.flushIntervalSec > 0) {
             this.timer = setInterval(() => {
                 this.flush();
@@ -78,7 +96,7 @@ class FileSink {
         try {
             this.ensurePath();
             const lines = this.buffer.map((event) => JSON.stringify(event)).join('\n') + '\n';
-            fs.appendFileSync(this.path, lines, 'utf-8');
+            fs.appendFileSync(this.currentPath, lines, 'utf-8');
             this.buffer = [];
         }
         catch (error) {
@@ -90,40 +108,91 @@ class FileSink {
             const today = this.today();
             if (today !== this.currentDate) {
                 this.currentDate = today;
+                this.currentPath = this.dailyPath(today);
+                this.updateSymlink();
             }
-            this.path = this.dailyPath(today);
         }
         else if (this.rotation === 'size' && this.maxSizeMb) {
             const maxBytes = this.maxSizeMb * 1024 * 1024;
-            if (fs.existsSync(this.path)) {
-                const stats = fs.statSync(this.path);
+            if (fs.existsSync(this.currentPath)) {
+                const stats = fs.statSync(this.currentPath);
                 if (stats.size >= maxBytes) {
                     this.rotateFile();
                 }
             }
         }
-        const dir = path.dirname(this.path);
+        const dir = path.dirname(this.currentPath);
         if (!fs.existsSync(dir)) {
             fs.mkdirSync(dir, { recursive: true });
         }
+        if (this.symlink && this.rotation !== 'none') {
+            this.updateSymlink();
+        }
     }
     rotateFile() {
         const timestamp = new Date().toISOString().replace(/[:.]/g, '-').split('T').join('_');
-        const ext = path.extname(this.path);
-        const basename = path.basename(this.path, ext);
-        const dirname = path.dirname(this.path);
+        const ext = path.extname(this.currentPath);
+        const basename = path.basename(this.currentPath, ext);
+        const dirname = path.dirname(this.currentPath);
         const rotated = path.join(dirname, `${basename}.${timestamp}${ext}`);
         try {
-            fs.renameSync(this.path, rotated);
+            fs.renameSync(this.currentPath, rotated);
         }
         catch (error) {
             throw new base_1.SinkError(`Failed to rotate file: ${error}`);
         }
     }
+    /**
+     * Update symlinks to point to the current rotated file.
+     * This allows npm scripts and log viewers to always access the latest file
+     * via stable paths (e.g., `monora_events.jsonl` or `monora_events.latest.jsonl`).
+     */
+    updateSymlink() {
+        if (!this.symlink || this.rotation === 'none') {
+            return;
+        }
+        const targets = [
+            { linkPath: this.originalPath, skipIfSame: true },
+            { linkPath: this.latestPath(), skipIfSame: false },
+        ];
+        for (const target of targets) {
+            if (target.skipIfSame && this.currentPath === target.linkPath) {
+                continue;
+            }
+            try {
+                if (fs.existsSync(target.linkPath)) {
+                    const stats = fs.lstatSync(target.linkPath);
+                    if (stats.isSymbolicLink()) {
+                        fs.unlinkSync(target.linkPath);
+                    }
+                    else {
+                        // Avoid removing user data.
+                        continue;
+                    }
+                }
+                const relativePath = path.relative(path.dirname(target.linkPath), this.currentPath);
+                fs.symlinkSync(relativePath, target.linkPath);
+            }
+            catch (error) {
+                // Symlink creation is best-effort; log but don't throw
+                // Windows may require admin privileges for symlinks
+                if (process.env.DEBUG) {
+                    console.warn(`Failed to create symlink: ${error}`);
+                }
+            }
+        }
+    }
+    latestPath() {
+        const ext = path.extname(this.originalPath);
+        const basename = path.basename(this.originalPath, ext);
+        const dirname = path.dirname(this.originalPath);
+        return path.join(dirname, `${basename}.latest${ext}`);
+    }
     dailyPath(date) {
-        const ext = path.extname(this.path);
-        const basename = path.basename(this.path, ext);
-        const dirname = path.dirname(this.path);
+        // Use originalPath for calculating daily path (not currentPath)
+        const ext = path.extname(this.originalPath);
+        const basename = path.basename(this.originalPath, ext);
+        const dirname = path.dirname(this.originalPath);
         return path.join(dirname, `${basename}.${date}${ext}`);
     }
     today() {

package/dist/sinks/https.d.ts

@@ -7,6 +7,13 @@
  */
 import { Sink } from './base';
 import { CircuitBreakerConfig } from '../circuit_breaker';
+import { DataResidency } from '../config';
+export interface DataResidencyOptions {
+    /** Required data residency region (us, eu, any, or null for no enforcement) */
+    residency?: DataResidency;
+    /** Action on failure: 'block' throws error, 'warn' logs warning (default: 'warn') */
+    action?: 'block' | 'warn';
+}
 export interface HttpSinkOptions {
     batchSize?: number;
     timeoutSec?: number;
@@ -15,6 +22,7 @@ export interface HttpSinkOptions {
     circuitBreaker?: CircuitBreakerConfig;
     retryQueue?: RetryQueueOptions;
     idempotency?: IdempotencyOptions;
+    dataResidency?: DataResidencyOptions;
 }
 export interface RetryQueueOptions {
     enabled?: boolean;
@@ -24,6 +32,7 @@ export interface RetryQueueOptions {
 }
 export interface IdempotencyOptions {
     enabled?: boolean;
+    header?: string;
     headerName?: string;
 }
 export declare class HttpSink implements Sink {
@@ -41,6 +50,7 @@ export declare class HttpSink implements Sink {
     private readonly idempotencyEnabled;
     private readonly idempotencyHeader;
     private flushing;
+    private readonly dataResidencyResult;
     constructor(endpoint: string, headers: Record<string, string>, options?: HttpSinkOptions);
     emit(events: Array<Record<string, any>>): void | Promise<void>;
     flush(): void | Promise<void>;

package/dist/sinks/https.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"https.d.ts","sourceRoot":"","sources":["../../src/sinks/https.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,IAAI,EAAa,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAkB,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAa1E,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAiMD,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,UAAU,CAAC,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAU;gBAGxB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,eAAe;IAuD3B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAQf,kBAAkB;YA0BlB,eAAe;IAO7B,OAAO,CAAC,YAAY;YAQN,WAAW;IA0CnB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC"}
+{"version":3,"file":"https.d.ts","sourceRoot":"","sources":["../../src/sinks/https.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAE,IAAI,EAAa,MAAM,QAAQ,CAAC;AACzC,OAAO,EAAkB,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAQ1E,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAO1C,MAAM,WAAW,oBAAoB;IACnC,+EAA+E;IAC/E,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B,qFAAqF;IACrF,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,oBAAoB,CAAC;IACtC,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACtC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAgQD,qBAAa,QAAS,YAAW,IAAI;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAS;IACxC,OAAO,CAAC,MAAM,CAA6B;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAiB;IAC7C,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,UAAU,CAAC,CAAiB;IACpC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAU;IAC7C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAU;IAC1B,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAkC;gBAGpE,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,OAAO,CAAC,EAAE,eAAe;IAgE3B,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,KAAK,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;YAQf,kBAAkB;YA4BlB,eAAe;IAO7B,OAAO,CAAC,YAAY;YAQN,WAAW;IA0CnB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAGlC"}

package/dist/sinks/https.js

@@ -52,6 +52,7 @@ const circuit_breaker_1 = require("../circuit_breaker");
 const verify_1 = require("../verify");
 const telemetry_1 = require("../telemetry");
 const logger_1 = require("../logger");
+const dataResidency_1 = require("../dataResidency");
 function sleep(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -73,6 +74,7 @@ class HttpRetryQueue {
         const filepath = path.join(this.queueDir, filename);
         const payload = {
             created_at: new Date().toISOString(),
+            attempts: 0,
             events,
         };
         fs.writeFileSync(filepath, JSON.stringify(payload));
@@ -103,8 +105,9 @@ class HttpRetryQueue {
                 try {
                     await sendFunc(events);
                 }
-                catch {
-                    return;
+                catch (error) {
+                    this.handleSendFailure(filepath, payload, error);
+                    continue;
                 }
                 this.removeFile(filepath);
             }
@@ -119,7 +122,9 @@ class HttpRetryQueue {
         try {
             entries = fs
                 .readdirSync(this.queueDir)
-                .filter((entry) => entry.endsWith('.json') && entry !== HttpRetryQueue.STATS_FILENAME);
+                .filter((entry) => entry.endsWith('.json') &&
+                entry !== HttpRetryQueue.STATS_FILENAME &&
+                !entry.endsWith(HttpRetryQueue.DEAD_LETTER_SUFFIX));
         }
         catch {
             return [];
@@ -135,12 +140,58 @@ class HttpRetryQueue {
             // Best-effort cleanup
         }
     }
+    handleSendFailure(filepath, payload, error) {
+        const attempts = this.getAttempts(payload);
+        const nextAttempts = attempts + 1;
+        payload.attempts = nextAttempts;
+        payload.updated_at = new Date().toISOString();
+        logger_1.logger.warning('HTTP retry queue send failed: %s', error);
+        if (nextAttempts >= HttpRetryQueue.MAX_ATTEMPTS) {
+            logger_1.logger.warning('HTTP retry queue max attempts reached (%d); moving batch to dead letter.', nextAttempts);
+            this.moveToDeadLetter(filepath, payload);
+            return;
+        }
+        this.requeueFile(filepath, payload);
+    }
+    getAttempts(payload) {
+        const attempts = Number(payload.attempts);
+        return Number.isFinite(attempts) && attempts >= 0 ? attempts : 0;
+    }
+    requeueFile(filepath, payload) {
+        const tmpPath = `${filepath}.tmp`;
+        try {
+            fs.writeFileSync(tmpPath, JSON.stringify(payload));
+            fs.renameSync(tmpPath, filepath);
+        }
+        catch (error) {
+            logger_1.logger.warning('Failed to requeue HTTP retry batch: %s', error);
+            try {
+                if (fs.existsSync(tmpPath)) {
+                    fs.unlinkSync(tmpPath);
+                }
+            }
+            catch {
+                return;
+            }
+        }
+    }
+    moveToDeadLetter(filepath, payload) {
+        const baseName = this.nextFilename().replace(/\.json$/, '');
+        const deadPath = path.join(this.queueDir, `${baseName}${HttpRetryQueue.DEAD_LETTER_SUFFIX}`);
+        try {
+            fs.writeFileSync(deadPath, JSON.stringify(payload));
+            this.removeFile(filepath);
+        }
+        catch (error) {
+            logger_1.logger.warning('Failed to move HTTP retry batch to dead letter: %s', error);
+        }
+    }
     pruneIfNeeded() {
         if (this.maxItems <= 0) {
             return;
         }
         const files = this.listFiles();
-        if (files.length < this.maxItems) {
+        if (files.length <= this.maxItems - 1) {
             return;
         }
         const excess = files.length - this.maxItems + 1;
@@ -233,8 +284,18 @@ class HttpRetryQueue {
     }
 }
 HttpRetryQueue.STATS_FILENAME = '.monora_retry_queue_stats.json';
+HttpRetryQueue.DEAD_LETTER_SUFFIX = '.dead.json';
+HttpRetryQueue.MAX_ATTEMPTS = 5;
 class HttpSink {
     constructor(endpoint, headers, options) {
+        // Enforce data residency before accepting the endpoint
+        const residencyConfig = options?.dataResidency || {};
+        if (residencyConfig.residency) {
+            this.dataResidencyResult = (0, dataResidency_1.enforceDataResidency)(endpoint, residencyConfig.residency, residencyConfig.action || 'warn');
+        }
+        else {
+            this.dataResidencyResult = null;
+        }
         this.endpoint = endpoint;
         this.headers = headers;
         this.batchSize = options?.batchSize || 50;
@@ -243,8 +304,13 @@ class HttpSink {
         this.backoffBaseSec = options?.backoffBaseSec || 0.5;
         this.buffer = [];
         this.retryIntervalMs = 5000;
-        this.idempotencyEnabled = true;
-        this.idempotencyHeader = 'Idempotency-Key';
+        const idempotencyConfig = options?.idempotency;
+        this.idempotencyEnabled = idempotencyConfig?.enabled ?? true;
+        const headerValue = idempotencyConfig?.header ?? idempotencyConfig?.headerName;
+        this.idempotencyHeader =
+            headerValue && headerValue.trim().length > 0
+                ? headerValue.trim()
+                : 'Idempotency-Key';
         this.flushing = false;
         // Initialize circuit breaker
         const cbConfig = options?.circuitBreaker || {};
@@ -273,14 +339,6 @@ class HttpSink {
                 this.retryTimer.unref();
             }
         }
-        const idempotencyConfig = options?.idempotency || {};
-        if (idempotencyConfig.enabled === false) {
-            this.idempotencyEnabled = false;
-        }
-        const headerName = idempotencyConfig.headerName;
-        if (headerName && headerName.trim().length > 0) {
-            this.idempotencyHeader = headerName.trim();
-        }
     }
     emit(events) {
         this.buffer.push(...events);
@@ -306,8 +364,10 @@ class HttpSink {
         try {
             await this.drainRetryQueue();
             while (this.buffer.length > 0) {
-                const batch = this.buffer;
-                this.buffer = [];
+                const batch = this.buffer.splice(0);
+                if (batch.length === 0) {
+                    break;
+                }
                 try {
                     await this.sendPayload(batch);
                 }

package/dist/sinks/stdout.d.ts

@@ -4,6 +4,7 @@
 import { Sink } from './base';
 export declare class StdoutSink implements Sink {
     private format;
+    private quiet;
     constructor(format?: 'json' | 'pretty');
     emit(events: Array<Record<string, any>>): void;
     flush(): void;

package/dist/sinks/stdout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdout.d.ts","sourceRoot":"","sources":["../../src/sinks/stdout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,qBAAa,UAAW,YAAW,IAAI;IACrC,OAAO,CAAC,MAAM,CAAoB;gBAEtB,MAAM,GAAE,MAAM,GAAG,QAAiB;IAI9C,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI;IAkB9C,KAAK,IAAI,IAAI;IAIb,KAAK,IAAI,IAAI;CAGd"}
+{"version":3,"file":"stdout.d.ts","sourceRoot":"","sources":["../../src/sinks/stdout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE9B,qBAAa,UAAW,YAAW,IAAI;IACrC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,KAAK,CAAU;gBAEX,MAAM,GAAE,MAAM,GAAG,QAAmB;IAKhD,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI;IAqB9C,KAAK,IAAI,IAAI;IAIb,KAAK,IAAI,IAAI;CAGd"}