pi-harness-runtime 1.1.395 → 1.1.397

package/packages/doc-generator/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/doc-generator",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Auto-Doc Generator — generate documentation from source code (RFC-0014)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/durable-review/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/durable-review",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "SQLite-backed durable reviewer using @earendil-works/pi-durable",
   "type": "module",
   "main": "src/index.ts",

package/packages/e2e-tester/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/e2e-tester",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "WebMCP-powered E2E testing for pi-harness - natural language test scenarios",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/evaluation-engine",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Evaluation engine for pi-harness runtime (RFC-0057)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/evaluation-runner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/evaluation-runner",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "description": "Framework-agnostic evaluation framework for AI outputs (RFC-0020)",
   "main": "dist/index.js",

package/packages/event-bus/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-bus",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/event-sink/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/event-sink",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "description": "Atomic event sourcing with SQLite transactions for pi-harness",
   "main": "./dist/index.js",

package/packages/event-store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/event-store",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/experience-replay/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/experience-replay",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Experience replay for debugging and reproducibility (RFC-0059)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/feedback-collector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/feedback-collector",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "description": "Collect and aggregate human/automated feedback (RFC-0021)",
   "main": "dist/index.js",

package/packages/file-copy-helper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moocoding/file-copy-helper",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Injects cp/sudo cp rule when user asks to mimic/copy files",
   "type": "module",
   "main": "dist/index.js",

package/packages/framework-detector/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-detector",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Framework detection system for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/framework-plugin-sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/framework-plugin-sdk",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Framework plugin SDK for pi-harness-runtime",
   "type": "module",
   "main": "./dist/index.js",

package/packages/frappe-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/frappe-plugin",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Frappe/ERPNext framework analysis — DocTypes, hooks, bench sites, site config",
   "type": "module",
   "main": "./dist/index.js",

package/packages/generic-web-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/generic-web-plugin",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Generic web framework analysis — REST/GraphQL endpoints, OpenAPI, auth",
   "type": "module",
   "main": "./dist/index.js",

package/packages/health-monitor/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/health-monitor",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "description": "Health monitoring and auto-healing",
   "main": "dist/index.js",

package/packages/intent-analyzer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/intent-analyzer",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "type": "module",
   "main": "src/index.ts",
   "exports": {

package/packages/jev-judge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/jev-judge",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Jev Judge - Structured decision model for agent routing, E2E testing, and automated decisions",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-graph/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-graph",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Knowledge Graph extraction and provenance linking for SKILL.md files",
   "type": "module",
   "main": "./dist/index.js",

package/packages/knowledge-retrieval/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/knowledge-retrieval",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Knowledge retrieval via TencentDB-Agent-Memory MCP (RFC-0105)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/laravel-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi/laravel-plugin",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Laravel framework analysis — artisan commands, Eloquent models, Blade",
   "type": "module",
   "main": "./dist/index.js",

package/packages/learning-engine/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/learning-engine",
-  "version": "1.1.395",
+  "version": "1.1.397",
   "description": "Learning engine for extracting lessons from runtime execution (RFC-0058)",
   "type": "module",
   "main": "./dist/index.js",

package/packages/logging/README.md

@@ -3,17 +3,26 @@
 Centralized structured application logging for pi-harness.
 
 ```text
-producer -> redact -> sample -> buffer -> R2 -> webhook -> local spool
+client: producer -> classify -> redact -> sample -> buffer -> webhook -> local spool
+server: POST /api/logs -> authenticate -> validate -> durable outbox -> 202
+                                                        |
+                                                        v
+                                              worker -> R2 -> done
 ```
 
+- **Classification**: an event allowlist decides what may leave the machine. Prompts,
+  responses, command output and the catch-all `harness.log` mirror stay local.
 - **Redaction**: credential-looking keys, bearer tokens, JWTs and long token runs are
   replaced; strings are truncated and structures are depth limited.
 - **Sampling**: minimum level, a deterministic sample rate for `debug` records and a
   per source+event rate limit. Errors are never sampled away.
 - **Buffering**: bounded in-memory buffer; when it is full the least severe record is
   dropped and the drop is counted.
-- **Delivery**: transports are tried in order (R2, webhook). If all of them fail the
-  batch is spooled to disk as NDJSON and retried on the next flush.
+- **Delivery**: transports are a FALLBACK chain (the first success wins, the rest are
+  skipped - never a broadcast). If all of them fail the batch is spooled to disk as
+  NDJSON and retried on the next flush.
+- **Durability**: the server only answers `202` after the batch is written to its
+  durable outbox. A background worker uploads it to R2 with a bounded backoff.
 
 ## Usage
 
@@ -21,17 +30,43 @@ producer -> redact -> sample -> buffer -> R2 -> webhook -> local spool
 import { centralInfo, centralWarn, initCentralLogging } from "./packages/logging/dist/index.js";
 
 initCentralLogging();                       // reads the environment and the key files
-centralInfo("harness", "startup", "ready", { pid: process.pid });
+centralInfo("harness.service-diagnostics", "service.check", "service is up", { durationMs: 3 });
 ```
 
+The event name decides whether the record may be shipped: use an allowlisted shape
+(`service.*`, `session.*`, `validation.*`, `harness.service-diagnostics.*`,
+`harness.planner.decision`, `harness.glm-quota.quota`) or a `warn`/`error` level.
+
 ## Transports
 
 | Transport | Purpose |
 |-----------|---------|
-| `createR2Transport` | Cloudflare R2 (S3 API), gzipped NDJSON under a date prefix |
-| `createWebhookTransport` | HTTP POST to the unified webhook server (`/api/logs`) |
+| `createWebhookTransport` | HTTP POST to the unified webhook server (`/api/logs`) - the client ingress point |
+| `createR2Transport` | Cloudflare R2 (S3 API), gzipped NDJSON under a date prefix - normally used by the server, not by clients |
 | `LogSpool` | Local NDJSON fallback, rotated by size, with retention |
 
+## Server side
+
+```ts
+import {
+  LogCredentialStore,
+  LogIndexStore,
+  LogIngestService,
+  LogOutbox,
+  LogOutboxWorker,
+  createLogHttpHandler,
+} from "./packages/logging/dist/index.js";
+
+const credentials = LogCredentialStore.load();
+const outbox = new LogOutbox({ dir: `${home}/.pi-harness-runtime/logs/outbox` });
+const index = new LogIndexStore({ dir: `${home}/.pi-harness-runtime/logs/index` });
+const service = new LogIngestService({ credentials, outbox, index });
+const handler = createLogHttpHandler({ service, outbox, index });
+```
+
+The credential store decides whether the endpoint exists: without a credential every
+write is refused (`503`). The tenant comes from the credential, never from the body.
+
 ## Configuration
 
 See the "Centralized Application Logging" section in the repository `AGENTS.md`.

package/packages/logging/dist/classification.d.ts

@@ -0,0 +1,65 @@
+/**
+ * What may leave the machine.
+ *
+ * The local log file keeps everything. The centralized archive keeps what an
+ * operator actually needs: service state, event codes, sanitized errors,
+ * durations and opaque identifiers.
+ *
+ * Two rules decide:
+ *
+ *   1. The event decides. A catch-all mirror of a local log line
+ *      (`harness.log`) or anything that smells like a prompt, a response or
+ *      command output never leaves the machine.
+ *   2. The payload decides. A message only travels when it looks like a
+ *      sanitized summary: short, one line, no path and no URL with a query
+ *      string. Fields with a private key name are dropped.
+ *
+ * The diagnostic mode (`PI_LOG_DIAGNOSTIC=1`) relaxes rule 2 for a user who
+ * explicitly asked for more, and nothing else.
+ */
+import type { LogRecord } from "./types.js";
+export interface ClassificationPolicy {
+    /** Events that may go remote. */
+    remoteEvents: RegExp[];
+    /** Events that never go remote, whatever the level is. */
+    localEvents: RegExp[];
+    /** Keep a message even when it does not look sanitized. */
+    allowRawMessages: boolean;
+    /** Maximum length of a message that is kept. */
+    maxMessageLength: number;
+}
+/**
+ * Events that stay local.
+ *
+ * `harness.log` is the mirror of the catch-all local log line - it carries
+ * whatever the harness printed, so it is never remote.
+ */
+export declare const DEFAULT_LOCAL_EVENTS: RegExp[];
+/**
+ * Events that may go remote.
+ *
+ * They are structured: a service state change, a session lifecycle event, a
+ * validation tier, a provider or quota event.
+ */
+export declare const DEFAULT_REMOTE_EVENTS: RegExp[];
+export declare const DEFAULT_CLASSIFICATION_POLICY: ClassificationPolicy;
+/**
+ * True when a message looks like a sanitized summary and may travel.
+ */
+export declare function isSanitizedMessage(message: string, policy: ClassificationPolicy): boolean;
+/**
+ * Classify one record.
+ *
+ * "remote" means the record may be shipped; "local" means it must stay on
+ * the machine.
+ */
+export declare function classifyRecord(record: LogRecord, policy?: ClassificationPolicy): "remote" | "local";
+/**
+ * Build the version of a record that may leave the machine.
+ *
+ * Returns null when the record must stay local.
+ */
+export declare function prepareRemoteRecord(record: LogRecord, policy?: ClassificationPolicy): LogRecord | null;
+/** Keep only the records that may leave the machine. */
+export declare function filterRemoteRecords(records: LogRecord[], policy?: ClassificationPolicy): LogRecord[];
+//# sourceMappingURL=classification.d.ts.map

package/packages/logging/dist/classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.d.ts","sourceRoot":"","sources":["../src/classification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,WAAW,oBAAoB;IACpC,iCAAiC;IACjC,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,0DAA0D;IAC1D,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,2DAA2D;IAC3D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gDAAgD;IAChD,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,EAUxC,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,EAiBzC,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,oBAK3C,CAAC;AAKF;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAOzF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC7B,MAAM,EAAE,SAAS,EACjB,MAAM,GAAE,oBAAoD,GAC1D,QAAQ,GAAG,OAAO,CAapB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAClC,MAAM,EAAE,SAAS,EACjB,MAAM,GAAE,oBAAoD,GAC1D,SAAS,GAAG,IAAI,CA8BlB;AAED,wDAAwD;AACxD,wBAAgB,mBAAmB,CAClC,OAAO,EAAE,SAAS,EAAE,EACpB,MAAM,GAAE,oBAAoD,GAC1D,SAAS,EAAE,CAOb"}

package/packages/logging/dist/classification.js

@@ -0,0 +1,155 @@
+/**
+ * What may leave the machine.
+ *
+ * The local log file keeps everything. The centralized archive keeps what an
+ * operator actually needs: service state, event codes, sanitized errors,
+ * durations and opaque identifiers.
+ *
+ * Two rules decide:
+ *
+ *   1. The event decides. A catch-all mirror of a local log line
+ *      (`harness.log`) or anything that smells like a prompt, a response or
+ *      command output never leaves the machine.
+ *   2. The payload decides. A message only travels when it looks like a
+ *      sanitized summary: short, one line, no path and no URL with a query
+ *      string. Fields with a private key name are dropped.
+ *
+ * The diagnostic mode (`PI_LOG_DIAGNOSTIC=1`) relaxes rule 2 for a user who
+ * explicitly asked for more, and nothing else.
+ */
+import { isLocalOnlyFieldKey } from "./sensitive-keys.js";
+/**
+ * Events that stay local.
+ *
+ * `harness.log` is the mirror of the catch-all local log line - it carries
+ * whatever the harness printed, so it is never remote.
+ */
+export const DEFAULT_LOCAL_EVENTS = [
+    /^harness\.log$/,
+    /prompt/i,
+    /response/i,
+    /transcript/i,
+    /output/i,
+    /command/i,
+    /content/i,
+    /message\.text/i,
+    /notification\.text/i,
+];
+/**
+ * Events that may go remote.
+ *
+ * They are structured: a service state change, a session lifecycle event, a
+ * validation tier, a provider or quota event.
+ */
+export const DEFAULT_REMOTE_EVENTS = [
+    /^harness\.service-diagnostics\./,
+    /^harness\.session\./,
+    /^harness\.startup\./,
+    /^harness\.shutdown\./,
+    /^harness\.planner\.decision$/,
+    /^harness\.glm-quota\.quota$/,
+    /^validation\./,
+    /^tier\./,
+    /^service\./,
+    /^session\./,
+    /^startup\./,
+    /^config\./,
+    /^provider\./,
+    /^quota\./,
+    /^logging\./,
+    /^jest\./,
+];
+export const DEFAULT_CLASSIFICATION_POLICY = {
+    remoteEvents: DEFAULT_REMOTE_EVENTS,
+    localEvents: DEFAULT_LOCAL_EVENTS,
+    allowRawMessages: false,
+    maxMessageLength: 200,
+};
+const ABSOLUTE_PATH = /(?:^|\s)\/(?:[\w.-]+\/)+[\w.-]+/;
+const URL_WITH_QUERY = /https?:\/\/\S+\?\S+/;
+/**
+ * True when a message looks like a sanitized summary and may travel.
+ */
+export function isSanitizedMessage(message, policy) {
+    if (policy.allowRawMessages)
+        return true;
+    if (message.length > policy.maxMessageLength)
+        return false;
+    if (message.includes("\n"))
+        return false;
+    if (ABSOLUTE_PATH.test(message))
+        return false;
+    if (URL_WITH_QUERY.test(message))
+        return false;
+    return true;
+}
+/**
+ * Classify one record.
+ *
+ * "remote" means the record may be shipped; "local" means it must stay on
+ * the machine.
+ */
+export function classifyRecord(record, policy = DEFAULT_CLASSIFICATION_POLICY) {
+    for (const pattern of policy.localEvents) {
+        if (pattern.test(record.event))
+            return "local";
+    }
+    for (const pattern of policy.remoteEvents) {
+        if (pattern.test(record.event))
+            return "remote";
+    }
+    // Errors stay valuable even when the event is unknown: the message and
+    // the fields are sanitized anyway.
+    if (record.level === "warn" || record.level === "error")
+        return "remote";
+    // Unknown events are local by default: an allowlist is safer than a
+    // denylist.
+    return "local";
+}
+/**
+ * Build the version of a record that may leave the machine.
+ *
+ * Returns null when the record must stay local.
+ */
+export function prepareRemoteRecord(record, policy = DEFAULT_CLASSIFICATION_POLICY) {
+    if (classifyRecord(record, policy) === "local")
+        return null;
+    const remote = {
+        ts: record.ts,
+        level: record.level,
+        source: record.source,
+        event: record.event,
+    };
+    if (record.message !== undefined && isSanitizedMessage(record.message, policy)) {
+        remote.message = record.message;
+    }
+    if (record.sessionId)
+        remote.sessionId = record.sessionId;
+    if (typeof record.durationMs === "number")
+        remote.durationMs = record.durationMs;
+    if (record.fields) {
+        const fields = {};
+        for (const [key, value] of Object.entries(record.fields)) {
+            if (isLocalOnlyFieldKey(key))
+                continue;
+            fields[key] = value;
+        }
+        if (Object.keys(fields).length > 0)
+            remote.fields = fields;
+    }
+    if (record.error) {
+        remote.error = { ...record.error };
+    }
+    return remote;
+}
+/** Keep only the records that may leave the machine. */
+export function filterRemoteRecords(records, policy = DEFAULT_CLASSIFICATION_POLICY) {
+    const remote = [];
+    for (const record of records) {
+        const prepared = prepareRemoteRecord(record, policy);
+        if (prepared)
+            remote.push(prepared);
+    }
+    return remote;
+}
+//# sourceMappingURL=classification.js.map

package/packages/logging/dist/classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.js","sourceRoot":"","sources":["../src/classification.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAc1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAa;IAC7C,gBAAgB;IAChB,SAAS;IACT,WAAW;IACX,aAAa;IACb,SAAS;IACT,UAAU;IACV,UAAU;IACV,gBAAgB;IAChB,qBAAqB;CACrB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAa;IAC9C,iCAAiC;IACjC,qBAAqB;IACrB,qBAAqB;IACrB,sBAAsB;IACtB,8BAA8B;IAC9B,6BAA6B;IAC7B,eAAe;IACf,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,aAAa;IACb,UAAU;IACV,YAAY;IACZ,SAAS;CACT,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IAClE,YAAY,EAAE,qBAAqB;IACnC,WAAW,EAAE,oBAAoB;IACjC,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,GAAG;CACrB,CAAC;AAEF,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,MAAM,cAAc,GAAG,qBAAqB,CAAC;AAE7C;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,MAA4B;IAC/E,IAAI,MAAM,CAAC,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC7B,MAAiB,EACjB,MAAM,GAAyB,6BAA6B;IAE5D,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QAC1C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,OAAO,CAAC;IAChD,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;IACjD,CAAC;IACD,uEAAuE;IACvE,mCAAmC;IACnC,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,QAAQ,CAAC;IACzE,oEAAoE;IACpE,YAAY;IACZ,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAClC,MAAiB,EACjB,MAAM,GAAyB,6BAA6B;IAE5D,IAAI,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAE5D,MAAM,MAAM,GAAc;QACzB,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;KACnB,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QAChF,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IACjC,CAAC;IACD,IAAI,MAAM,CAAC,SAAS;QAAE,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC1D,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAEjF,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1D,IAAI,mBAAmB,CAAC,GAAG,CAAC;gBAAE,SAAS;YACvC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,mBAAmB,CAClC,OAAoB,EACpB,MAAM,GAAyB,6BAA6B;IAE5D,MAAM,MAAM,GAAgB,EAAE,CAAC;IAC/B,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/packages/logging/dist/config.d.ts

@@ -7,6 +7,7 @@
  * Secrets are never hardcoded here. A key file that is missing simply means
  * the corresponding transport is not configured.
  */
+import { type ClassificationPolicy } from "./classification.js";
 import type { LogBufferOptions } from "./buffer.js";
 import type { SamplingPolicy } from "./sampler.js";
 import type { LogTransport } from "./types.js";
@@ -16,6 +17,10 @@ export interface LogSinkConfig {
     enabled: boolean;
     /** Application name reported with every batch. */
     app: string;
+    /** Version of the emitting application. */
+    appVersion?: string;
+    /** Stable id of this installation. */
+    installationId: string;
     /** Transports in delivery priority order. */
     transports: LogTransport[];
     /** Directory of the local spool (undefined when logging is off). */
@@ -23,6 +28,8 @@ export interface LogSinkConfig {
     sampling: Partial<SamplingPolicy>;
     buffer: LogBufferOptions;
     flushIntervalMs: number;
+    /** What may leave the machine. */
+    classification: ClassificationPolicy;
     /** Human readable notes about what was enabled and why. */
     notes: string[];
 }
@@ -30,6 +37,8 @@ export interface ResolveConfigOptions {
     env?: Record<string, string | undefined>;
     /** Directory holding the credential key files. */
     keysDir?: string;
+    /** Overrides the installation id (tests, containers). */
+    installationId?: string;
 }
 export declare function defaultKeysDir(): string;
 export declare function defaultSpoolDir(): string;

package/packages/logging/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC7B,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,6CAA6C;IAC7C,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CA0FtF"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH,OAAO,EAEN,KAAK,oBAAoB,EACzB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC7B,sEAAsE;IACtE,OAAO,EAAE,OAAO,CAAC;IACjB,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sCAAsC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,6CAA6C;IAC7C,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,oEAAoE;IACpE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAClC,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,cAAc,EAAE,oBAAoB,CAAC;IACrC,2DAA2D;IAC3D,KAAK,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAoBD,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,eAAe,IAAI,MAAM,CAExC;AAiBD;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,oBAAyB,GAAG,aAAa,CAuHtF"}