openclaw-observability 2026.4.1 → 2026.4.21

package/dist/security/scanner.js

@@ -23,6 +23,16 @@ exports.DEFAULT_SECURITY_CONFIG = {
     },
     domainWhitelist: [],
 };
+const MAX_TRACKED_ALERT_SESSIONS = 1000;
+const MAX_DEDUP_ALERTS_PER_SESSION = 200;
+const EXCLUDED_SCAN_KEYS = new Set([
+    'historymessages',
+    'history_messages',
+    'history',
+    'messages',
+    'conversationhistory',
+    'conversation_history',
+]);
 function resolveSecurityConfig(raw) {
     const normalizedRules = normalizeCustomRegexRules(raw?.customRegexRules);
     if (!raw)
@@ -122,6 +132,8 @@ class SecurityScanner {
     config;
     /** Runtime context — passed to each rule's detect method */
     ruleCtx;
+    /** Session-scoped alert dedupe cache: same risk in one trace only reports once */
+    seenAlertsBySession = new Map();
     /** Cumulative statistics */
     stats = {
         scanned: 0,
@@ -163,7 +175,7 @@ class SecurityScanner {
         return this.getConfig();
     }
     /**
-     * Scan a single AuditAction, return 0~N security alerts
+     * Scan a single ObservabilityAction, return 0~N security alerts
      */
     scan(action) {
         if (!this.config.enabled)
@@ -229,8 +241,9 @@ class SecurityScanner {
                 }
             }
         }
-        this.stats.alertsGenerated += alerts.length;
-        return alerts;
+        const dedupedAlerts = this.dedupeAlerts(alerts);
+        this.stats.alertsGenerated += dedupedAlerts.length;
+        return dedupedAlerts;
     }
     /** Get statistics */
     getStats() {
@@ -239,6 +252,7 @@ class SecurityScanner {
     /** Reset */
     reset() {
         this.chainDetector.reset();
+        this.seenAlertsBySession.clear();
         this.stats = { scanned: 0, alertsGenerated: 0 };
     }
     rebuildRuntimeState() {
@@ -257,10 +271,12 @@ class SecurityScanner {
     /** Extract all scannable text from an action */
     extractText(action) {
         const parts = [];
-        if (action.inputParams)
-            parts.push(JSON.stringify(action.inputParams));
-        if (action.outputResult)
-            parts.push(JSON.stringify(action.outputResult));
+        const sanitizedInput = sanitizeScanPayload(action.inputParams);
+        const sanitizedOutput = sanitizeScanPayload(action.outputResult);
+        if (sanitizedInput !== undefined)
+            parts.push(JSON.stringify(sanitizedInput));
+        if (sanitizedOutput !== undefined)
+            parts.push(JSON.stringify(sanitizedOutput));
         return parts.join('\n');
     }
     /** SecurityFinding -> SecurityAlert */
@@ -282,6 +298,68 @@ class SecurityScanner {
             createdAt: new Date(),
         };
     }
+    dedupeAlerts(alerts) {
+        if (alerts.length === 0)
+            return alerts;
+        const deduped = [];
+        for (const alert of alerts) {
+            const sessionKey = alert.sessionId || 'unknown';
+            const sessionCache = this.getSessionAlertCache(sessionKey);
+            const dedupeKey = this.buildAlertDedupeKey(alert);
+            if (sessionCache.has(dedupeKey))
+                continue;
+            sessionCache.set(dedupeKey, Date.now());
+            if (sessionCache.size > MAX_DEDUP_ALERTS_PER_SESSION) {
+                const oldestKey = sessionCache.keys().next().value;
+                if (oldestKey)
+                    sessionCache.delete(oldestKey);
+            }
+            deduped.push(alert);
+        }
+        return deduped;
+    }
+    getSessionAlertCache(sessionId) {
+        const existing = this.seenAlertsBySession.get(sessionId);
+        if (existing) {
+            this.seenAlertsBySession.delete(sessionId);
+            this.seenAlertsBySession.set(sessionId, existing);
+            return existing;
+        }
+        const created = new Map();
+        this.seenAlertsBySession.set(sessionId, created);
+        if (this.seenAlertsBySession.size > MAX_TRACKED_ALERT_SESSIONS) {
+            const oldestSessionId = this.seenAlertsBySession.keys().next().value;
+            if (oldestSessionId)
+                this.seenAlertsBySession.delete(oldestSessionId);
+        }
+        return created;
+    }
+    buildAlertDedupeKey(alert) {
+        return [
+            alert.ruleId,
+            alert.category,
+            alert.severity,
+            alert.finding.trim(),
+        ].join('\u001f');
+    }
 }
 exports.SecurityScanner = SecurityScanner;
+function sanitizeScanPayload(value) {
+    if (value === null || value === undefined)
+        return undefined;
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitizeScanPayload(item)).filter((item) => item !== undefined);
+    }
+    if (typeof value !== 'object')
+        return value;
+    const out = {};
+    for (const [key, nested] of Object.entries(value)) {
+        if (EXCLUDED_SCAN_KEYS.has(key.toLowerCase()))
+            continue;
+        const sanitized = sanitizeScanPayload(nested);
+        if (sanitized !== undefined)
+            out[key] = sanitized;
+    }
+    return out;
+}
 //# sourceMappingURL=scanner.js.map

package/dist/security/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAmDH,sDAcC;AA/DD,mCAAoC;AAEpC,mCAAiF;AACjF,mCAA+D;AAC/D,qDAAiD;AA+BpC,QAAA,uBAAuB,GAAmB;IACrD,gBAAgB,EAAE,EAAE;IACpB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE;QACL,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,KAAK;KACtB;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,SAAgB,qBAAqB,CACnC,GAAwC;IAExC,MAAM,eAAe,GAAG,yBAAyB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,+BAAuB,EAAE,CAAC;IAChD,OAAO;QACL,gBAAgB,EAAE,eAAe;QACjC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,+BAAuB,CAAC,OAAO;QACvD,KAAK,EAAE;YACL,GAAG,+BAAuB,CAAC,KAAK;YAChC,GAAG,GAAG,CAAC,KAAK;SACb;QACD,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,+BAAuB,CAAC,eAAe;KAChF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAsB;IACjD,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE;YACL,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;YAC/C,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe;YAC7C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;SAC5C;QACD,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,gBAAQ,CAAC,QAAQ,IAAI,KAAK,KAAK,gBAAQ,CAAC,IAAI,IAAI,KAAK,KAAK,gBAAQ,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,gBAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAiB;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAChG,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,yBAAyB;YACzB,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI;YACJ,OAAO;YACP,KAAK;YACL,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,6CAA6C;AAC7C,MAAM,eAAe,GAAkD;IACrE,CAAC,oBAAY,CAAC,aAAa,CAAC,EAAE,eAAe;IAC7C,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,aAAa;IACxC,CAAC,oBAAY,CAAC,SAAS,CAAC,EAAE,kBAAkB;IAC5C,CAAC,oBAAY,CAAC,eAAe,CAAC,EAAE,iBAAiB;IACjD,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,aAAa;IACzC,CAAC,oBAAY,CAAC,YAAY,CAAC,EAAE,aAAa;CAC3C,CAAC;AAEF,MAAa,eAAe;IAClB,KAAK,CAAiB;IACtB,aAAa,CAAgB;IAC7B,MAAM,CAAiB;IAC/B,4DAA4D;IACpD,OAAO,CAAc;IAE7B,4BAA4B;IACpB,KAAK,GAAG;QACd,OAAO,EAAE,CAAC;QACV,eAAe,EAAE,CAAC;KACnB,CAAC;IAEF,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,EAAE,CAAC;QAEzC,wBAAwB;QACxB,IAAI,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,SAAS;QACP,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY,CAAC,KAA8B;QACzC,MAAM,wBAAwB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,oBAAoB,GAAG,wBAAwB;YACnD,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACjC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK;eAC1C,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACtE,MAAM,WAAW,GAA4B;YAC3C,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;YACpB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,WAAW,EAAE,yBAAyB;gBACpC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW;gBAC5B,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACjG,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC;YAClC,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,KAAK;YACR,gBAAgB,EAAE,oBAAoB;YACtC,KAAK,EAAE,WAAW;YAClB,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,MAAmB;QACtB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,8BAA8B;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACzD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,SAAS;gBACrC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC;oBACtG,IAAI,CAAyB,CAAC;oBAC9B,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjB,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACpC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;wBACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;4BACvB,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE;4BACxB,QAAQ,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;4BACtC,QAAQ,EAAE,oBAAY,CAAC,WAAW;4BAClC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;4BAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,IAAI,CAAC,OAAO,GAAG;4BAChD,OAAO,EAAE,kCAAkC,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,OAAO,WAAW,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG;yBAC3G,EAAE,MAAM,CAAC,CAAC,CAAC;wBACZ,QAAQ,EAAE,CAAC;wBACX,IAAI,QAAQ,IAAI,EAAE;4BAAE,MAAM;wBAC1B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;4BAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,6DAA6D,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,MAAM,CAAC,MAAM,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qBAAqB;IACrB,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,YAAY;IACZ,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAClD,CAAC;IAEO,mBAAmB;QACzB,wCAAwC;QACxC,IAAI,CAAC,KAAK,GAAG,iBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IAEtE,gDAAgD;IACxC,WAAW,CAAC,MAAmB;QACrC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,MAAM,CAAC,WAAW;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,uCAAuC;IAC/B,OAAO,CAAC,OAAwB,EAAE,MAAmB;QAC3D,OAAO;YACL,OAAO,EAAE,IAAA,mBAAU,GAAE;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAE7B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAE1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YAExB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;IACJ,CAAC;CACF;AAlLD,0CAkLC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/security/scanner.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AA8DH,sDAcC;AA1ED,mCAAoC;AAEpC,mCAAiF;AACjF,mCAA+D;AAC/D,qDAAiD;AA+BpC,QAAA,uBAAuB,GAAmB;IACrD,gBAAgB,EAAE,EAAE;IACpB,OAAO,EAAE,IAAI;IACb,KAAK,EAAE;QACL,aAAa,EAAE,IAAI;QACnB,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,KAAK;QAClB,cAAc,EAAE,KAAK;KACtB;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,0BAA0B,GAAG,IAAI,CAAC;AACxC,MAAM,4BAA4B,GAAG,GAAG,CAAC;AACzC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,iBAAiB;IACjB,kBAAkB;IAClB,SAAS;IACT,UAAU;IACV,qBAAqB;IACrB,sBAAsB;CACvB,CAAC,CAAC;AAEH,SAAgB,qBAAqB,CACnC,GAAwC;IAExC,MAAM,eAAe,GAAG,yBAAyB,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;IACzE,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,+BAAuB,EAAE,CAAC;IAChD,OAAO;QACL,gBAAgB,EAAE,eAAe;QACjC,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,+BAAuB,CAAC,OAAO;QACvD,KAAK,EAAE;YACL,GAAG,+BAAuB,CAAC,KAAK;YAChC,GAAG,GAAG,CAAC,KAAK;SACb;QACD,eAAe,EAAE,GAAG,CAAC,eAAe,IAAI,+BAAuB,CAAC,eAAe;KAChF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAsB;IACjD,OAAO;QACL,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrD,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,KAAK,EAAE;YACL,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa;YACzC,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,gBAAgB,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;YAC/C,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,eAAe;YAC7C,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,WAAW;YACrC,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;SAC5C;QACD,eAAe,EAAE,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,IAAI,IAAI,GAAG,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,gBAAQ,CAAC,QAAQ,IAAI,KAAK,KAAK,gBAAQ,CAAC,IAAI,IAAI,KAAK,KAAK,gBAAQ,CAAC,IAAI,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,gBAAQ,CAAC,IAAI,CAAC;AACvB,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAiB;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,GAAG,GAAuC,EAAE,CAAC;IACnD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,IAAA,mBAAU,GAAE,EAAE,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC;QAChG,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,SAAS;QAC9B,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC;YACH,yBAAyB;YACzB,IAAI,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE;YACF,IAAI;YACJ,OAAO;YACP,KAAK;YACL,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YACzC,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AAExE,6CAA6C;AAC7C,MAAM,eAAe,GAAkD;IACrE,CAAC,oBAAY,CAAC,aAAa,CAAC,EAAE,eAAe;IAC7C,CAAC,oBAAY,CAAC,UAAU,CAAC,EAAE,aAAa;IACxC,CAAC,oBAAY,CAAC,SAAS,CAAC,EAAE,kBAAkB;IAC5C,CAAC,oBAAY,CAAC,eAAe,CAAC,EAAE,iBAAiB;IACjD,CAAC,oBAAY,CAAC,WAAW,CAAC,EAAE,aAAa;IACzC,CAAC,oBAAY,CAAC,YAAY,CAAC,EAAE,aAAa;CAC3C,CAAC;AAEF,MAAa,eAAe;IAClB,KAAK,CAAiB;IACtB,aAAa,CAAgB;IAC7B,MAAM,CAAiB;IAC/B,4DAA4D;IACpD,OAAO,CAAc;IAC7B,kFAAkF;IAC1E,mBAAmB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAErE,4BAA4B;IACpB,KAAK,GAAG;QACd,OAAO,EAAE,CAAC;QACV,eAAe,EAAE,CAAC;KACnB,CAAC;IAEF,YAAY,MAAsB;QAChC,IAAI,CAAC,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,aAAa,GAAG,IAAI,8BAAa,EAAE,CAAC;QAEzC,wBAAwB;QACxB,IAAI,CAAC,OAAO,GAAG,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;QACvC,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,SAAS;QACP,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,YAAY,CAAC,KAA8B;QACzC,MAAM,wBAAwB,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACvE,MAAM,oBAAoB,GAAG,wBAAwB;YACnD,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,gBAAgB,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACjC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK;eAC1C,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;QACtE,MAAM,WAAW,GAA4B;YAC3C,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK;YACpB,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YACtB,WAAW,EAAE,yBAAyB;gBACpC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW;gBAC5B,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;SACjG,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG,qBAAqB,CAAC;YAClC,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,KAAK;YACR,gBAAgB,EAAE,oBAAoB;YACtC,KAAK,EAAE,WAAW;YAClB,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe;SACtE,CAAC,CAAC;QACH,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,MAA2B;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,MAAM,GAAoB,EAAE,CAAC;QAEnC,8BAA8B;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,IAAI,CAAC,OAAO;gBAAE,SAAS;YAC5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACzD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;YACjF,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACzD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;oBAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;gBACvC,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,GAAG,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;QAED,0CAA0C;QAC1C,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7E,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK;oBAAE,SAAS;gBACrC,IAAI,CAAC;oBACH,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG,CAAC,CAAC;oBACtG,IAAI,CAAyB,CAAC;oBAC9B,IAAI,QAAQ,GAAG,CAAC,CAAC;oBACjB,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBACpC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC;wBACjE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;4BACvB,MAAM,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE;4BACxB,QAAQ,EAAE,iBAAiB,IAAI,CAAC,IAAI,EAAE;4BACtC,QAAQ,EAAE,oBAAY,CAAC,WAAW;4BAClC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;4BAC1C,OAAO,EAAE,OAAO,IAAI,aAAa,IAAI,CAAC,OAAO,GAAG;4BAChD,OAAO,EAAE,kCAAkC,CAAC,CAAC,KAAK,aAAa,IAAI,CAAC,OAAO,WAAW,IAAI,CAAC,KAAK,IAAI,GAAG,GAAG;yBAC3G,EAAE,MAAM,CAAC,CAAC,CAAC;wBACZ,QAAQ,EAAE,CAAC;wBACX,IAAI,QAAQ,IAAI,EAAE;4BAAE,MAAM;wBAC1B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;4BAAE,EAAE,CAAC,SAAS,IAAI,CAAC,CAAC;oBACrC,CAAC;gBACH,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CAAC,6DAA6D,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC5F,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,eAAe,IAAI,aAAa,CAAC,MAAM,CAAC;QACnD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,qBAAqB;IACrB,QAAQ;QACN,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,YAAY;IACZ,KAAK;QACH,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;IAClD,CAAC;IAEO,mBAAmB;QACzB,wCAAwC;QACxC,IAAI,CAAC,KAAK,GAAG,iBAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACnC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG;YACb,eAAe,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;SAClD,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,sEAAsE;IAEtE,gDAAgD;IACxC,WAAW,CAAC,MAA2B;QAC7C,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,eAAe,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,cAAc,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;QAC7E,IAAI,eAAe,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,uCAAuC;IAC/B,OAAO,CAAC,OAAwB,EAAE,MAA2B;QACnE,OAAO;YACL,OAAO,EAAE,IAAA,mBAAU,GAAE;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAE7B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAE1B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YAExB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC;IACJ,CAAC;IAEO,YAAY,CAAC,MAAuB;QAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACvC,MAAM,OAAO,GAAoB,EAAE,CAAC;QAEpC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC;YAChD,MAAM,YAAY,GAAG,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAClD,IAAI,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1C,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACxC,IAAI,YAAY,CAAC,IAAI,GAAG,4BAA4B,EAAE,CAAC;gBACrD,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBACnD,IAAI,SAAS;oBAAE,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,oBAAoB,CAAC,SAAiB;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAClD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,GAAG,0BAA0B,EAAE,CAAC;YAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YACrE,IAAI,eAAe;gBAAE,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,mBAAmB,CAAC,KAAoB;QAC9C,OAAO;YACL,KAAK,CAAC,MAAM;YACZ,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,QAAQ;YACd,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;SACrB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnB,CAAC;CACF;AAtOD,0CAsOC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC7E,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QACxD,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,SAAS,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/security/types.d.ts

@@ -34,6 +34,9 @@ export interface SecurityAlert {
     status: 'open' | 'acknowledged' | 'resolved';
     userId: string;
     modelName: string;
+    organizationId?: string;
+    scopeId?: string;
+    environment?: string;
     createdAt: Date;
 }
 /** Security scan finding (intermediate state, not yet persisted) */

package/dist/security/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mCAAmC;AACnC,oBAAY,QAAQ;IAClB,IAAI,SAAS;IACb,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAED,6BAA6B;AAC7B,oBAAY,YAAY;IACtB,aAAa,mBAAmB;IAChC,UAAU,wBAAwB;IAClC,SAAS,sBAAsB;IAC/B,eAAe,qBAAqB;IACpC,WAAW,iBAAiB;IAC5B,YAAY,kBAAkB;CAC/B;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAEnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IAEnB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAEhB,wBAAwB;IACxB,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,UAAU,CAAC;IAE7C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/security/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,mCAAmC;AACnC,oBAAY,QAAQ;IAClB,IAAI,SAAS;IACb,IAAI,SAAS;IACb,QAAQ,aAAa;CACtB;AAED,6BAA6B;AAC7B,oBAAY,YAAY;IACtB,aAAa,mBAAmB;IAChC,UAAU,wBAAwB;IAClC,SAAS,sBAAsB;IAC/B,eAAe,qBAAqB;IACpC,WAAW,iBAAiB;IAC5B,YAAY,kBAAkB;CAC/B;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAEnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IAEnB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,OAAO,EAAE,MAAM,CAAC;IAEhB,wBAAwB;IACxB,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,UAAU,CAAC;IAE7C,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,oEAAoE;AACpE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/storage/buffer.d.ts

@@ -2,15 +2,15 @@
  * Async batch buffer queue
  * Dual-trigger flush mechanism based on count threshold + time threshold
  */
-import { AuditAction, AuditSession } from '../types';
+import { ObservabilityAction, ObservabilitySession } from '../types';
 import { BufferConfig } from '../config';
 /** Buffer entry type */
 export type BufferEntry = {
     type: 'action';
-    data: AuditAction;
+    data: ObservabilityAction;
 } | {
     type: 'session';
-    data: AuditSession;
+    data: ObservabilitySession;
 };
 /** Flush callback function type */
 export type FlushCallback = (entries: BufferEntry[]) => Promise<void>;
@@ -39,17 +39,17 @@ export declare class AsyncBatchBuffer {
      */
     stop(): void;
     /**
-     * Add audit record to buffer
+     * Add observation record to buffer
      */
     add(entry: BufferEntry): Promise<void>;
     /**
-     * Add audit action record
+     * Add observation action record
      */
-    addAction(action: AuditAction): Promise<void>;
+    addAction(action: ObservabilityAction): Promise<void>;
     /**
      * Add or update session summary record
      */
-    addSession(session: AuditSession): Promise<void>;
+    addSession(session: ObservabilitySession): Promise<void>;
     /**
      * Force flush buffer (write all entries to database).
      * If a flush is already in progress, await it instead of silently returning.

package/dist/storage/buffer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"buffer.d.ts","sourceRoot":"","sources":["../../src/storage/buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAwB;AACxB,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,CAAC;AAE5C,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAKtE;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAkB;IAClC,sEAAsE;IACtE,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa;IAK9D;;OAEG;IACH,KAAK,IAAI,IAAI;IAiBb;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB5C;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAInD;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAItD;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC5B;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC"}
+{"version":3,"file":"buffer.d.ts","sourceRoot":"","sources":["../../src/storage/buffer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,wBAAwB;AACxB,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,GAC7C;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEpD,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAKtE;;;;;;GAMG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,MAAM,CAAqB;IACnC,OAAO,CAAC,KAAK,CAA+C;IAC5D,OAAO,CAAC,QAAQ,CAAkB;IAClC,sEAAsE;IACtE,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,MAAM,CAAe;gBAEjB,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa;IAK9D;;OAEG;IACH,KAAK,IAAI,IAAI;IAiBb;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB5C;;OAEG;IACG,SAAS,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D;;OAEG;IACG,UAAU,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9D;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAgC5B;;OAEG;IACH,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;OAEG;IACG,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAIhC"}

package/dist/storage/buffer.js

@@ -53,7 +53,7 @@ class AsyncBatchBuffer {
         }
     }
     /**
-     * Add audit record to buffer
+     * Add observation record to buffer
      */
     async add(entry) {
         // Prevent unbounded buffer growth (when flush keeps failing)
@@ -69,7 +69,7 @@ class AsyncBatchBuffer {
         }
     }
     /**
-     * Add audit action record
+     * Add observation action record
      */
     async addAction(action) {
         await this.add({ type: 'action', data: action });

package/dist/storage/buffer.js.map

@@ -1 +1 @@
-{"version":3,"file":"buffer.js","sourceRoot":"","sources":["../../src/storage/buffer.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAaH,sEAAsE;AACtE,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;;;;GAMG;AACH,MAAa,gBAAgB;IACnB,MAAM,GAAkB,EAAE,CAAC;IAC3B,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAY,KAAK,CAAC;IAClC,sEAAsE;IAC9D,YAAY,GAAyB,IAAI,CAAC;IAC1C,aAAa,CAAgB;IAC7B,MAAM,CAAe;IAE7B,YAAY,MAAoB,EAAE,aAA4B;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEhC,6CAA6C;QAC7C,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAkB;QAC1B,6DAA6D;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,CAAC,qBAAqB;YACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,iBAAiB,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAAmB;QACjC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAAqB;QACpC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,iDAAiD;QACjD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,mCAAmC;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5B,MAAM,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAhID,4CAgIC"}
+{"version":3,"file":"buffer.js","sourceRoot":"","sources":["../../src/storage/buffer.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAaH,sEAAsE;AACtE,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B;;;;;;GAMG;AACH,MAAa,gBAAgB;IACnB,MAAM,GAAkB,EAAE,CAAC;IAC3B,KAAK,GAA0C,IAAI,CAAC;IACpD,QAAQ,GAAY,KAAK,CAAC;IAClC,sEAAsE;IAC9D,YAAY,GAAyB,IAAI,CAAC;IAC1C,aAAa,CAAgB;IAC7B,MAAM,CAAe;IAE7B,YAAY,MAAoB,EAAE,aAA4B;QAC5D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,OAAO;QACT,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAEhC,6CAA6C;QAC7C,IAAI,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACpB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAkB;QAC1B,6DAA6D;QAC7D,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,eAAe,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,CAAC,qBAAqB;YACrE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,qDAAqD,IAAI,iBAAiB,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,mCAAmC;QACnC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAChD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,MAA2B;QACzC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,OAA6B;QAC5C,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK;QACT,iDAAiD;QACjD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,IAAI,CAAC,YAAY,CAAC;YAC/C,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAErB,mCAAmC;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;QAEjB,MAAM,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iEAAiE;gBACjE,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC3C,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC;YAC3E,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;gBACtB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC;QAC5B,MAAM,OAAO,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAhID,4CAgIC"}

package/dist/storage/cloud-export-writer.d.ts

@@ -0,0 +1,23 @@
+import { CloudConfig } from '../config';
+import { SecurityAlert } from '../security/types';
+import { BufferEntry } from './buffer';
+import { MetricSample, ObservabilityWriter, QueryPool } from './writer';
+export declare class CloudExportWriter implements ObservabilityWriter {
+    private readonly config;
+    private initialized;
+    private initPromise;
+    private endpoint;
+    constructor(config: CloudConfig);
+    initialize(): Promise<void>;
+    private _initialize;
+    ensureReady(): Promise<boolean>;
+    private toTenant;
+    private buildEnvelope;
+    private postBatch;
+    writeBatch(entries: BufferEntry[]): Promise<void>;
+    writeAlerts(alerts: SecurityAlert[]): Promise<void>;
+    writeMetricSamples(samples: MetricSample[]): Promise<void>;
+    getPool(): QueryPool | null;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=cloud-export-writer.d.ts.map

package/dist/storage/cloud-export-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-export-writer.d.ts","sourceRoot":"","sources":["../../src/storage/cloud-export-writer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAsCxE,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,WAAW,CAA8B;IACjD,OAAO,CAAC,QAAQ,CAAM;gBAEV,MAAM,EAAE,WAAW;IAIzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YASnB,WAAW;IASnB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAUrC,OAAO,CAAC,QAAQ;IAQhB,OAAO,CAAC,aAAa;YAcP,SAAS;IA2BjB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAqDjD,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBnD,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAwBhE,OAAO,IAAI,SAAS,GAAG,IAAI;IAIrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B"}

package/dist/storage/cloud-export-writer.js

@@ -0,0 +1,202 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CloudExportWriter = void 0;
+const node_crypto_1 = require("node:crypto");
+const DEFAULT_TIMEOUT_MS = 10_000;
+function toIso(value) {
+    const d = value instanceof Date ? value : new Date(String(value || ''));
+    if (Number.isFinite(d.getTime()))
+        return d.toISOString();
+    return new Date().toISOString();
+}
+function trimSlash(value) {
+    return String(value || '').trim().replace(/\/+$/, '');
+}
+function normalizeEndpoint(value) {
+    const base = trimSlash(value);
+    if (!base)
+        return '';
+    if (/\/v1\/ingest$/i.test(base))
+        return base;
+    if (/^https?:\/\/[^/]+$/i.test(base))
+        return `${base}/v1/ingest`;
+    return base;
+}
+class CloudExportWriter {
+    config;
+    initialized = false;
+    initPromise = null;
+    endpoint = '';
+    constructor(config) {
+        this.config = config;
+    }
+    async initialize() {
+        if (this.initialized)
+            return;
+        if (this.initPromise)
+            return this.initPromise;
+        this.initPromise = this._initialize().finally(() => {
+            this.initPromise = null;
+        });
+        return this.initPromise;
+    }
+    async _initialize() {
+        const endpoint = normalizeEndpoint(this.config.endpoint);
+        const apiKey = String(this.config.apiKey || '').trim();
+        if (!endpoint)
+            throw new Error('cloud endpoint is required');
+        if (!apiKey)
+            throw new Error('cloud apiKey is required');
+        this.endpoint = endpoint;
+        this.initialized = true;
+    }
+    async ensureReady() {
+        if (this.initialized)
+            return true;
+        try {
+            await this.initialize();
+            return this.initialized;
+        }
+        catch {
+            return false;
+        }
+    }
+    toTenant() {
+        return {
+            organizationId: String(this.config.organizationId || 'local'),
+            projectId: String(this.config.projectId || 'default'),
+            environment: String(this.config.environment || 'prod'),
+        };
+    }
+    buildEnvelope(type, payload, occurredAt, sessionId) {
+        const eventId = (0, node_crypto_1.randomUUID)();
+        return {
+            eventId,
+            idempotencyKey: eventId,
+            occurredAt: toIso(occurredAt),
+            source: 'openclaw-observability-plugin',
+            tenant: this.toTenant(),
+            sessionId: sessionId || undefined,
+            type,
+            payload,
+        };
+    }
+    async postBatch(envelopes) {
+        if (!envelopes.length)
+            return;
+        if (!this.initialized) {
+            await this.initialize();
+        }
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), DEFAULT_TIMEOUT_MS);
+        try {
+            const response = await fetch(this.endpoint, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    Authorization: `Bearer ${String(this.config.apiKey || '').trim()}`,
+                },
+                body: JSON.stringify({ batch: envelopes }),
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                const text = await response.text().catch(() => '');
+                const body = text.trim();
+                throw new Error(`cloud export failed: HTTP ${response.status}${body ? ` ${body}` : ''}`);
+            }
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+    async writeBatch(entries) {
+        if (!entries.length)
+            return;
+        const batch = [];
+        for (const entry of entries) {
+            if (entry.type === 'action') {
+                const action = entry.data;
+                batch.push(this.buildEnvelope('observation.action', {
+                    sessionId: action.sessionId,
+                    actionType: action.actionType,
+                    actionName: action.actionName,
+                    modelName: action.modelName,
+                    inputParams: action.inputParams,
+                    outputResult: action.outputResult,
+                    promptTokens: action.promptTokens,
+                    completionTokens: action.completionTokens,
+                    durationMs: action.durationMs,
+                    userId: action.userId,
+                    parentSessionId: action.parentSessionId || '',
+                    runId: action.runId || '',
+                    parentRunId: action.parentRunId || '',
+                    parentObservationId: action.parentObservationId || '',
+                    channelId: action.channelId || '',
+                }, action.createdAt, action.sessionId));
+                continue;
+            }
+            if (entry.type === 'session') {
+                const session = entry.data;
+                batch.push(this.buildEnvelope('observation.session', {
+                    sessionId: session.sessionId,
+                    userId: session.userId,
+                    parentSessionId: session.parentSessionId || '',
+                    modelName: session.modelName,
+                    channelId: session.channelId || '',
+                    startTime: toIso(session.startTime),
+                    endTime: session.endTime ? toIso(session.endTime) : null,
+                    totalActions: session.totalActions,
+                    totalTokens: session.totalTokens,
+                }, session.endTime || session.startTime, session.sessionId));
+            }
+        }
+        await this.postBatch(batch);
+    }
+    async writeAlerts(alerts) {
+        if (!alerts.length)
+            return;
+        const batch = alerts.map((alert) => this.buildEnvelope('security.alert', {
+            alertId: alert.alertId,
+            sessionId: alert.sessionId,
+            actionType: alert.actionType,
+            actionName: alert.actionName,
+            ruleId: alert.ruleId,
+            ruleName: alert.ruleName,
+            category: alert.category,
+            severity: alert.severity,
+            finding: alert.finding,
+            context: alert.context,
+            status: alert.status,
+            userId: alert.userId,
+            modelName: alert.modelName,
+        }, alert.createdAt, alert.sessionId));
+        await this.postBatch(batch);
+    }
+    async writeMetricSamples(samples) {
+        if (!samples.length)
+            return;
+        const batch = samples.map((sample) => this.buildEnvelope('metrics.sample', {
+            metricName: sample.metricName,
+            metricType: sample.metricType,
+            metricHelp: sample.metricHelp || '',
+            metricUnit: sample.metricUnit || '',
+            temporality: sample.temporality || '',
+            isMonotonic: !!sample.isMonotonic,
+            labelsJson: sample.labelsJson,
+            labelFingerprint: sample.labelFingerprint,
+            value: sample.value,
+            startTimestampMs: sample.startTimestampMs,
+            sampleTimestampMs: sample.sampleTimestampMs,
+            histogram: sample.histogram || null,
+        }, sample.sampleTimestampMs, undefined));
+        await this.postBatch(batch);
+    }
+    getPool() {
+        return null;
+    }
+    async close() {
+        return;
+    }
+}
+exports.CloudExportWriter = CloudExportWriter;
+//# sourceMappingURL=cloud-export-writer.js.map

package/dist/storage/cloud-export-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-export-writer.js","sourceRoot":"","sources":["../../src/storage/cloud-export-writer.ts"],"names":[],"mappings":";;;AAAA,6CAAyC;AAuBzC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,IAAI,YAAY,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAa,iBAAiB;IACX,MAAM,CAAc;IAC7B,WAAW,GAAG,KAAK,CAAC;IACpB,WAAW,GAAyB,IAAI,CAAC;IACzC,QAAQ,GAAG,EAAE,CAAC;IAEtB,YAAY,MAAmB;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAC7B,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACjD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,QAAQ;QACd,OAAO;YACL,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,OAAO,CAAC;YAC7D,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC;YACrD,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC;SACvD,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,IAAY,EAAE,OAAgC,EAAE,UAAoB,EAAE,SAAkB;QAC5G,MAAM,OAAO,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC7B,OAAO;YACL,OAAO;YACP,cAAc,EAAE,OAAO;YACvB,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;YAC7B,MAAM,EAAE,+BAA+B;YACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE;YACvB,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,IAAI;YACJ,OAAO;SACR,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAA0B;QAChD,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,OAAO;QAC9B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1B,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE;iBACnE;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAC1C,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3F,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAsB;QACrC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC5B,MAAM,KAAK,GAAoB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,IAA2B,CAAC;gBACjD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC3B,oBAAoB,EACpB;oBACE,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE;oBAC7C,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE;oBACzB,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;oBACrC,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,IAAI,EAAE;oBACrD,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;iBAClC,EACD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,IAA4B,CAAC;gBACnD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAC3B,qBAAqB,EACrB;oBACE,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;oBAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,EAAE;oBAClC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;oBACnC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;oBACxD,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,WAAW,EAAE,OAAO,CAAC,WAAW;iBACjC,EACD,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EACpC,OAAO,CAAC,SAAS,CAClB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAuB;QACvC,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CACpD,gBAAgB,EAChB;YACE,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,EACD,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAChB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAAuB;QAC9C,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CACtD,gBAAgB,EAChB;YACE,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACnC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,EAAE;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW;YACjC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;YAC3C,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;SACpC,EACD,MAAM,CAAC,iBAAiB,EACxB,SAAS,CACV,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO;IACT,CAAC;CACF;AApMD,8CAoMC"}

package/dist/storage/duckdb-local-writer.d.ts

@@ -4,11 +4,17 @@
  */
 import { SecurityAlert } from '../security/types';
 import { BufferEntry } from './buffer';
-import { QueryPool, AuditWriter, MetricSample } from './writer';
+import { QueryPool, ObservabilityWriter, MetricSample } from './writer';
 import { DuckDBConfig } from '../config';
-export declare class DuckDBLocalWriter implements AuditWriter {
+interface DuckDBWriterOptions {
+    dataRetentionDays?: number;
+}
+export declare function buildDuckDBOpenOptions(config: DuckDBConfig): Record<string, string>;
+export declare class DuckDBLocalWriter implements ObservabilityWriter {
     private pool;
     private config;
+    private dataRetentionDays;
+    private startupMaintenanceDone;
     private initialized;
     /** Promise for an in-progress initialization (allows concurrent callers to await) */
     private _initPromise;
@@ -22,7 +28,7 @@ export declare class DuckDBLocalWriter implements AuditWriter {
      * This gives ~10,000 unique IDs per millisecond.
      */
     private _idCounter;
-    constructor(config: DuckDBConfig);
+    constructor(config: DuckDBConfig, options?: DuckDBWriterOptions);
     /** Generate a unique BIGINT ID without DuckDB SEQUENCE (precision-safe) */
     private _nextId;
     initialize(maxRetries?: number, retryDelayMs?: number): Promise<void>;
@@ -52,8 +58,18 @@ export declare class DuckDBLocalWriter implements AuditWriter {
     private _hasIndex;
     /** Ensure channel_id column exists (migration helper) - silent check */
     private _ensureChannelIdColumn;
+    private _ensureActionRunLineageColumns;
+    private _ensureColumn;
+    /**
+     * Ensure a tenant-related column exists and legacy rows are backfilled.
+     * This keeps old local DuckDB files compatible with new project-scoped queries.
+     */
+    private _ensureTenantColumn;
     private _formatDate;
     private _formatDateOrNull;
+    runStartupMaintenance(): Promise<void>;
+    private _cleanupExpiredDataOnStartup;
     private _formatTimestamp;
 }
+export {};
 //# sourceMappingURL=duckdb-local-writer.d.ts.map

package/dist/storage/duckdb-local-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"duckdb-local-writer.d.ts","sourceRoot":"","sources":["../../src/storage/duckdb-local-writer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAuazC,qBAAa,iBAAkB,YAAW,WAAW;IACnD,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,WAAW,CAAS;IAC5B,qFAAqF;IACrF,OAAO,CAAC,YAAY,CAA8B;IAElD;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU,CAAK;gBAEX,MAAM,EAAE,YAAY;IAIhC,2EAA2E;IAC3E,OAAO,CAAC,OAAO;IAKT,UAAU,CAAC,UAAU,SAAI,EAAE,YAAY,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAatD,oBAAoB;IAmDlC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAwBtB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;YAoBvB,aAAa;IA2JrB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAqBzC,YAAY;YAyBZ,aAAa;YAiDb,eAAe;YA+If,6BAA6B;IA4CrC,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBnD,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkGhE,OAAO,IAAI,SAAS,GAAG,IAAI;IAIrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA8B5B,0CAA0C;YAC5B,UAAU;IA2BxB,+BAA+B;YACjB,SAAS;IA2BvB,wEAAwE;YAC1D,sBAAsB;IAmBpC,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,iBAAiB;IAMzB,OAAO,CAAC,gBAAgB;CAGzB"}
+{"version":3,"file":"duckdb-local-writer.d.ts","sourceRoot":"","sources":["../../src/storage/duckdb-local-writer.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,mBAAmB,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAGzC,UAAU,mBAAmB;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAOD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBnF;AAkbD,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,iBAAiB,CAAS;IAClC,OAAO,CAAC,sBAAsB,CAAS;IACvC,OAAO,CAAC,WAAW,CAAS;IAC5B,qFAAqF;IACrF,OAAO,CAAC,YAAY,CAA8B;IAElD;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU,CAAK;gBAEX,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,mBAAmB;IAO/D,2EAA2E;IAC3E,OAAO,CAAC,OAAO;IAKT,UAAU,CAAC,UAAU,SAAI,EAAE,YAAY,SAAO,GAAG,OAAO,CAAC,IAAI,CAAC;YAatD,oBAAoB;IAmDlC;;;;;;OAMG;IACH,OAAO,CAAC,oBAAoB;IAwBtB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;YAoBvB,aAAa;IAmLrB,UAAU,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;YAqBzC,YAAY;YA0BZ,aAAa;YAkDb,eAAe;YA8Jf,6BAA6B;IA4CrC,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBnD,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAkGhE,OAAO,IAAI,SAAS,GAAG,IAAI;IAIrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA+B5B,0CAA0C;YAC5B,UAAU;IA2BxB,+BAA+B;YACjB,SAAS;IA2BvB,wEAAwE;YAC1D,sBAAsB;YAYtB,8BAA8B;YAyC9B,aAAa;IAa3B;;;OAGG;YACW,mBAAmB;IA8BjC,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,iBAAiB;IAMnB,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;YAM9B,4BAA4B;IAsC1C,OAAO,CAAC,gBAAgB;CAGzB"}