pi-harness-runtime 1.1.395 → 1.1.397

package/packages/logging/dist/server/index-store.js

@@ -0,0 +1,190 @@
+/**
+ * Metadata index for the log query service.
+ *
+ * R2 is an archive, not a search API, so the server keeps a small metadata
+ * index next to it: tenant, machine, session, timestamp, severity,
+ * source/event, batch id and the object key of the archived batch.
+ *
+ * The index deliberately holds NO message text. Prompts, responses and
+ * command output never enter it, and an agent asking "which errors happened
+ * in this session" gets metadata, not content.
+ *
+ * Storage is one NDJSON file per tenant and day:
+ *
+ *   <dir>/<tenant>/2026-10-24.ndjson
+ *
+ * The index is tenant scoped by construction: every query is filtered by the
+ * tenant of the authenticated caller, and the tenant of the request body is
+ * never used.
+ */
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { safeSegment } from "./outbox.js";
+function toIsoDay(value) {
+    return value.toISOString().slice(0, 10);
+}
+function encodeCursor(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+function decodeCursor(value) {
+    try {
+        return Buffer.from(value, "base64url").toString("utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+export class LogIndexStore {
+    dir;
+    maxScanDays;
+    defaultLimit;
+    maxLimit;
+    constructor(options) {
+        this.dir = options.dir;
+        this.maxScanDays = Math.min(options.maxScanDays ?? 7, 31);
+        this.defaultLimit = options.defaultLimit ?? 100;
+        this.maxLimit = options.maxLimit ?? 500;
+    }
+    /**
+     * Index the metadata of a batch.
+     *
+     * Returns the number of entries that were written. The write is best
+     * effort: a failing index must not lose the batch itself.
+     */
+    append(batch, r2Key) {
+        if (!Array.isArray(batch.records) || batch.records.length === 0)
+            return 0;
+        const lines = [];
+        for (const record of batch.records) {
+            const entry = {
+                tenantId: batch.tenantId,
+                installationId: batch.installationId,
+                ts: record.ts,
+                level: record.level,
+                source: record.source,
+                event: record.event,
+                batchId: batch.batchId,
+            };
+            if (batch.sessionId)
+                entry.sessionId = batch.sessionId;
+            else if (record.sessionId)
+                entry.sessionId = record.sessionId;
+            if (r2Key)
+                entry.r2Key = r2Key;
+            lines.push(JSON.stringify(entry));
+        }
+        try {
+            const day = toIsoDay(new Date(batch.sentAt));
+            const dir = join(this.dir, safeSegment(batch.tenantId));
+            mkdirSync(dir, { recursive: true });
+            appendFileSync(join(dir, `${day}.ndjson`), `${lines.join("\n")}\n`, { mode: 0o600 });
+            return lines.length;
+        }
+        catch {
+            return 0;
+        }
+    }
+    /**
+     * Query the index for one tenant.
+     *
+     * The result is bounded by the page limit and by the day budget, and the
+     * caller is always a tenant: there is no way to query another tenant
+     * because the tenant comes from the parameter, which the server fills
+     * from the authenticated credential.
+     */
+    query(params) {
+        const limit = Math.min(params.limit ?? this.defaultLimit, this.maxLimit);
+        const days = this.dayRange(params);
+        const dir = join(this.dir, safeSegment(params.tenantId));
+        const matches = [];
+        let scannedFiles = 0;
+        let truncated = days.truncated;
+        for (const day of days.days) {
+            const path = join(dir, `${day}.ndjson`);
+            if (!existsSync(path))
+                continue;
+            scannedFiles++;
+            let content;
+            try {
+                content = readFileSync(path, "utf8");
+            }
+            catch {
+                continue;
+            }
+            for (const line of content.split("\n")) {
+                if (!line.trim())
+                    continue;
+                let entry;
+                try {
+                    entry = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                if (!this.matches(entry, params))
+                    continue;
+                matches.push(entry);
+            }
+        }
+        matches.sort((a, b) => (a.ts < b.ts ? -1 : a.ts > b.ts ? 1 : 0));
+        const cursor = params.cursor ? decodeCursor(params.cursor) : undefined;
+        let start = 0;
+        if (cursor) {
+            const index = matches.findIndex((entry) => `${entry.ts}|${entry.batchId}` === cursor);
+            start = index >= 0 ? index + 1 : 0;
+        }
+        const page = matches.slice(start, start + limit);
+        const hasMore = start + limit < matches.length;
+        const result = {
+            entries: page,
+            hasMore,
+            scannedFiles,
+            truncated,
+        };
+        if (hasMore && page.length > 0) {
+            const last = page[page.length - 1];
+            result.nextCursor = encodeCursor(`${last.ts}|${last.batchId}`);
+        }
+        return result;
+    }
+    matches(entry, params) {
+        if (entry.tenantId !== params.tenantId)
+            return false;
+        if (params.installationId && entry.installationId !== params.installationId)
+            return false;
+        if (params.sessionId && entry.sessionId !== params.sessionId)
+            return false;
+        if (params.levels && params.levels.length > 0 && !params.levels.includes(entry.level)) {
+            return false;
+        }
+        if (params.source && entry.source !== params.source)
+            return false;
+        if (params.event && entry.event !== params.event)
+            return false;
+        if (params.since && entry.ts < params.since)
+            return false;
+        if (params.until && entry.ts >= params.until)
+            return false;
+        return true;
+    }
+    dayRange(params) {
+        const now = new Date();
+        const until = params.until ? new Date(params.until) : now;
+        // The budget counts the scanned days, so the default window covers
+        // exactly `maxScanDays` days including the day of `until`.
+        const since = params.since
+            ? new Date(params.since)
+            : new Date(until.getTime() - (this.maxScanDays - 1) * 86_400_000);
+        const days = [];
+        const cursor = new Date(since);
+        let truncated = false;
+        while (cursor <= until && days.length < this.maxScanDays) {
+            days.push(toIsoDay(cursor));
+            cursor.setUTCDate(cursor.getUTCDate() + 1);
+        }
+        if (cursor <= until)
+            truncated = true;
+        return { days, truncated };
+    }
+}
+//# sourceMappingURL=index-store.js.map

package/packages/logging/dist/server/index-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-store.js","sourceRoot":"","sources":["../../src/server/index-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAe,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAsD5D,SAAS,QAAQ,CAAC,KAAW;IAC5B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,IAAI,CAAC;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,OAAO,aAAa;IACR,GAAG,CAAS;IACZ,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,QAAQ,CAAS;IAElC,YAAY,OAA6B;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAkB,EAAE,KAAc;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,KAAK,GAAkB;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC;YACF,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;iBAClD,IAAI,MAAM,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC9D,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC;QACV,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAsB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,YAAY,EAAE,CAAC;YACf,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,KAAoB,CAAC;gBACzB,IAAI,CAAC;oBACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,SAAS;gBAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACF,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,MAAM,CAAC,CAAC;YACtF,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/C,MAAM,MAAM,GAAmB;YAC9B,OAAO,EAAE,IAAI;YACb,OAAO;YACP,YAAY;YACZ,SAAS;SACT,CAAC;QACF,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,KAAoB,EAAE,MAAsB;QAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAC1F,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClE,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,MAAsB;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1D,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;YACzB,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,OAAO,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,IAAI,KAAK;YAAE,SAAS,GAAG,IAAI,CAAC;QAEtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;CACD"}

package/packages/logging/dist/server/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Server side of the logging pipeline.
+ *
+ * The server is the only component that writes to the archive: clients ship
+ * batches to the ingest endpoint, the server derives the tenant from the
+ * credential, queues the batch durably and a worker uploads it.
+ */
+export { DEFAULT_TENANT_ID, LOG_READ_SCOPE, LOG_WRITE_SCOPE, LogCredentialStore, hashToken, readBearerToken, } from "./credentials.js";
+export type { AuthenticatedCredential, LogCredential, LogCredentialStoreOptions, } from "./credentials.js";
+export { LogOutbox, outboxKey, safeSegment } from "./outbox.js";
+export type { EnqueueResult, LogOutboxOptions, OutboxBatch, OutboxEntry, OutboxStats, } from "./outbox.js";
+export { LogOutboxWorker } from "./outbox-worker.js";
+export type { LogOutboxWorkerOptions, WorkerRunResult } from "./outbox-worker.js";
+export { LogIndexStore } from "./index-store.js";
+export type { LogIndexEntry, LogIndexStoreOptions, LogQueryParams, LogQueryResult, } from "./index-store.js";
+export { serverObjectKey } from "./keys.js";
+export type { ObjectKeyInput } from "./keys.js";
+export { LogIngestService } from "./service.js";
+export type { IngestFailure, IngestResult, IngestSuccess, LogIngestServiceOptions, QuerySuccess, } from "./service.js";
+export { createLogHttpHandler } from "./http.js";
+export type { LogHttpHandler, LogHttpOptions } from "./http.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/logging/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,eAAe,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,uBAAuB,EACvB,aAAa,EACb,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACX,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,WAAW,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EACX,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,cAAc,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EACX,aAAa,EACb,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,YAAY,GACZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/packages/logging/dist/server/index.js

@@ -0,0 +1,15 @@
+/**
+ * Server side of the logging pipeline.
+ *
+ * The server is the only component that writes to the archive: clients ship
+ * batches to the ingest endpoint, the server derives the tenant from the
+ * credential, queues the batch durably and a worker uploads it.
+ */
+export { DEFAULT_TENANT_ID, LOG_READ_SCOPE, LOG_WRITE_SCOPE, LogCredentialStore, hashToken, readBearerToken, } from "./credentials.js";
+export { LogOutbox, outboxKey, safeSegment } from "./outbox.js";
+export { LogOutboxWorker } from "./outbox-worker.js";
+export { LogIndexStore } from "./index-store.js";
+export { serverObjectKey } from "./keys.js";
+export { LogIngestService } from "./service.js";
+export { createLogHttpHandler } from "./http.js";
+//# sourceMappingURL=index.js.map

package/packages/logging/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,eAAe,GACf,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAShE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAQjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAShD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}

package/packages/logging/dist/server/keys.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Deterministic object keys for the log archive.
+ *
+ * The server generates the keys - never the client - and they contain no
+ * user controlled path segment beyond an already sanitized tenant and batch
+ * id. The key is derived from the batch itself, so the same batch always
+ * lands under the same key and the metadata index can compute it without
+ * waiting for the upload.
+ */
+export interface ObjectKeyInput {
+    tenantId: string;
+    batchId: string;
+    /** ISO timestamp used for the date partition. */
+    sentAt: string;
+}
+/**
+ * Build the archive key of a batch:
+ *
+ *   logs/<tenant>/2026/10/24/09/<batchId>.ndjson
+ */
+export declare function serverObjectKey(input: ObjectKeyInput): string;
+//# sourceMappingURL=keys.d.ts.map

package/packages/logging/dist/server/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/server/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAO7D"}

package/packages/logging/dist/server/keys.js

@@ -0,0 +1,24 @@
+/**
+ * Deterministic object keys for the log archive.
+ *
+ * The server generates the keys - never the client - and they contain no
+ * user controlled path segment beyond an already sanitized tenant and batch
+ * id. The key is derived from the batch itself, so the same batch always
+ * lands under the same key and the metadata index can compute it without
+ * waiting for the upload.
+ */
+import { safeSegment } from "./outbox.js";
+/**
+ * Build the archive key of a batch:
+ *
+ *   logs/<tenant>/2026/10/24/09/<batchId>.ndjson
+ */
+export function serverObjectKey(input) {
+    const date = new Date(input.sentAt);
+    const year = date.getUTCFullYear();
+    const month = String(date.getUTCMonth() + 1).padStart(2, "0");
+    const day = String(date.getUTCDate()).padStart(2, "0");
+    const hour = String(date.getUTCHours()).padStart(2, "0");
+    return `logs/${safeSegment(input.tenantId)}/${year}/${month}/${day}/${hour}/${safeSegment(input.batchId)}.ndjson`;
+}
+//# sourceMappingURL=keys.js.map

package/packages/logging/dist/server/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/server/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAqB;IACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,QAAQ,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;AACnH,CAAC"}

package/packages/logging/dist/server/outbox-worker.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Retry worker for the server-side outbox.
+ *
+ * The worker drains the queue in the background, so an R2 outage never
+ * blocks the ingest endpoint: the batch waits in the queue and is retried
+ * with a bounded exponential backoff.
+ *
+ * A batch that exhausts its attempts stays in the queue (visible in the
+ * diagnostics) instead of being dropped silently.
+ */
+import type { LogOutbox, OutboxEntry } from "./outbox.js";
+export interface LogOutboxWorkerOptions {
+    outbox: LogOutbox;
+    /** Uploads one batch. Throwing marks the batch as failed. */
+    upload: (entry: OutboxEntry) => Promise<void>;
+    /** Interval between two drain runs. Default 5000 ms. */
+    intervalMs?: number;
+    /** Attempts before a batch is parked. Default 10. */
+    maxAttempts?: number;
+    /** First backoff step. Default 5000 ms. */
+    baseDelayMs?: number;
+    /** Upper bound of the backoff. Default 300000 ms (5 minutes). */
+    maxDelayMs?: number;
+    /** Batches per run. Default 50. */
+    batchLimit?: number;
+    /** Clock injection (tests). */
+    now?: () => number;
+}
+export interface WorkerRunResult {
+    uploaded: number;
+    failed: number;
+    skipped: number;
+}
+export declare class LogOutboxWorker {
+    private readonly outbox;
+    private readonly upload;
+    private readonly intervalMs;
+    private readonly maxAttempts;
+    private readonly baseDelayMs;
+    private readonly maxDelayMs;
+    private readonly batchLimit;
+    private readonly now;
+    private timer;
+    private running;
+    constructor(options: LogOutboxWorkerOptions);
+    /** Backoff for the given attempt count (1 = first failure). */
+    backoffMs(attempts: number): number;
+    /** Start the periodic drain. */
+    start(): void;
+    /** Stop the periodic drain and wait for a running pass. */
+    stop(): Promise<void>;
+    /** Drain the queue once. Never throws. */
+    runOnce(): Promise<WorkerRunResult>;
+}
+//# sourceMappingURL=outbox-worker.d.ts.map

package/packages/logging/dist/server/outbox-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-worker.d.ts","sourceRoot":"","sources":["../../src/server/outbox-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,6DAA6D;IAC7D,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,OAAO,EAAE,sBAAsB,EAS1C;IAED,+DAA+D;IAC/D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGlC;IAED,gCAAgC;IAChC,KAAK,IAAI,IAAI,CAMZ;IAED,2DAA2D;IACrD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ1B;IAED,0CAA0C;IACpC,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,CAmCxC;CACD"}

package/packages/logging/dist/server/outbox-worker.js

@@ -0,0 +1,95 @@
+/**
+ * Retry worker for the server-side outbox.
+ *
+ * The worker drains the queue in the background, so an R2 outage never
+ * blocks the ingest endpoint: the batch waits in the queue and is retried
+ * with a bounded exponential backoff.
+ *
+ * A batch that exhausts its attempts stays in the queue (visible in the
+ * diagnostics) instead of being dropped silently.
+ */
+export class LogOutboxWorker {
+    outbox;
+    upload;
+    intervalMs;
+    maxAttempts;
+    baseDelayMs;
+    maxDelayMs;
+    batchLimit;
+    now;
+    timer;
+    running = false;
+    constructor(options) {
+        this.outbox = options.outbox;
+        this.upload = options.upload;
+        this.intervalMs = options.intervalMs ?? 5_000;
+        this.maxAttempts = options.maxAttempts ?? 10;
+        this.baseDelayMs = options.baseDelayMs ?? 5_000;
+        this.maxDelayMs = options.maxDelayMs ?? 300_000;
+        this.batchLimit = options.batchLimit ?? 50;
+        this.now = options.now ?? (() => Date.now());
+    }
+    /** Backoff for the given attempt count (1 = first failure). */
+    backoffMs(attempts) {
+        const factor = 2 ** Math.max(0, attempts - 1);
+        return Math.min(this.baseDelayMs * factor, this.maxDelayMs);
+    }
+    /** Start the periodic drain. */
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.runOnce();
+        }, this.intervalMs);
+        this.timer.unref?.();
+    }
+    /** Stop the periodic drain and wait for a running pass. */
+    async stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = undefined;
+        }
+        while (this.running) {
+            await new Promise((resolve) => setTimeout(resolve, 10));
+        }
+    }
+    /** Drain the queue once. Never throws. */
+    async runOnce() {
+        if (this.running)
+            return { uploaded: 0, failed: 0, skipped: 0 };
+        this.running = true;
+        const result = { uploaded: 0, failed: 0, skipped: 0 };
+        try {
+            const now = this.now();
+            for (const entry of this.outbox.listPending(this.batchLimit)) {
+                if (entry.nextAttemptAt > now) {
+                    result.skipped++;
+                    continue;
+                }
+                if (entry.attempts >= this.maxAttempts) {
+                    result.skipped++;
+                    continue;
+                }
+                try {
+                    await this.upload(entry);
+                    this.outbox.markUploaded(entry);
+                    result.uploaded++;
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    const attempts = entry.attempts + 1;
+                    this.outbox.markFailed(entry, message, this.now() + this.backoffMs(attempts));
+                    result.failed++;
+                }
+            }
+        }
+        catch {
+            // A failing drain must not kill the worker.
+        }
+        finally {
+            this.running = false;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=outbox-worker.js.map

package/packages/logging/dist/server/outbox-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-worker.js","sourceRoot":"","sources":["../../src/server/outbox-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4BH,MAAM,OAAO,eAAe;IACV,MAAM,CAAY;IAClB,MAAM,CAAwC;IAC9C,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,GAAG,CAAe;IAC3B,KAAK,CAA6C;IAClD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,OAA+B;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,+DAA+D;IAC/D,SAAS,CAAC,QAAgB;QACzB,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,gCAAgC;IAChC,KAAK;QACJ,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,IAAI;QACT,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAEvE,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;oBAC/B,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,SAAS;gBACV,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACxC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,SAAS;gBACV,CAAC;gBAED,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAChC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACpC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC9E,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,4CAA4C;QAC7C,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}

package/packages/logging/dist/server/outbox.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Durable server-side outbox.
+ *
+ * The ingest endpoint must not tell a client "accepted" before the batch
+ * survived a crash. The outbox is the durable hand-off point between the
+ * HTTP request and the R2 upload:
+ *
+ *   request -> validate -> enqueue (durable) -> 202
+ *                                         |
+ *                                         v
+ *                               worker -> upload -> done
+ *
+ * The queue is a directory of JSON files, one per accepted batch:
+ *
+ *   <dir>/pending/<key>.json        the batch payload
+ *   <dir>/pending/<key>.meta.json   attempts, next attempt, last error
+ *   <dir>/done/<key>.json           uploaded batches (pruned after a while)
+ *
+ * A plain file queue is used on purpose: the server runs under Bun, which
+ * has no `node:sqlite`, and the queue stays inspectable with `ls`/`jq`.
+ *
+ * The key is derived from (tenant, installation, batch), so the same batch
+ * is enqueued only once - the ingest endpoint is idempotent.
+ */
+import type { LogRecord } from "../types.js";
+export interface OutboxBatch {
+    tenantId: string;
+    installationId: string;
+    batchId: string;
+    app: string;
+    appVersion?: string;
+    hostLabel?: string;
+    sessionId?: string;
+    sentAt: string;
+    records: LogRecord[];
+}
+export interface OutboxEntry {
+    /** File name key of the batch. */
+    key: string;
+    /** Absolute path of the payload file. */
+    path: string;
+    batch: OutboxBatch;
+    attempts: number;
+    nextAttemptAt: number;
+    lastError?: string;
+    createdAt: number;
+}
+export interface OutboxStats {
+    /** Batches waiting for an upload. */
+    pending: number;
+    /** Age of the oldest pending batch in milliseconds. */
+    oldestPendingAgeMs: number;
+    /** Batches that failed at least once. */
+    failures: number;
+    /** Last upload error (message only, never a payload). */
+    lastError?: string;
+}
+export interface EnqueueResult {
+    accepted: boolean;
+    /** True when the same batch was already queued (idempotent replay). */
+    duplicate: boolean;
+}
+export interface LogOutboxOptions {
+    /** Directory of the queue. */
+    dir: string;
+    /** How long uploaded batches are kept, in milliseconds. Default 7 days. */
+    retentionMs?: number;
+}
+/** Make a value safe to use inside a file name. */
+export declare function safeSegment(value: string, maxLength?: number): string;
+/**
+ * Build the queue key of a batch.
+ *
+ * The key is unique per (tenant, installation, batch) and contains no
+ * user controlled path segment.
+ */
+export declare function outboxKey(batch: {
+    tenantId: string;
+    installationId: string;
+    batchId: string;
+}): string;
+export declare class LogOutbox {
+    private readonly dir;
+    private readonly pendingDir;
+    private readonly doneDir;
+    private readonly retentionMs;
+    constructor(options: LogOutboxOptions);
+    /** Directory of the queue. */
+    get directory(): string;
+    /**
+     * Store a batch durably.
+     *
+     * The write is atomic (write to a temp file, then rename), so a crash
+     * can never leave a half written batch behind.
+     */
+    enqueue(batch: OutboxBatch): EnqueueResult;
+    /** The batches waiting for an upload, oldest first. */
+    listPending(limit?: number): OutboxEntry[];
+    /** Mark a batch as uploaded and move it out of the pending directory. */
+    markUploaded(entry: OutboxEntry): void;
+    /**
+     * Record a failed upload and schedule the next attempt.
+     */
+    markFailed(entry: OutboxEntry, error: string, nextAttemptAt: number): void;
+    /** Queue depth, oldest pending age and failure information. */
+    stats(now?: number): OutboxStats;
+    /** Delete uploaded batches that are older than the retention period. */
+    prune(now?: number): number;
+    private writeMeta;
+    private readEntry;
+}
+//# sourceMappingURL=outbox.d.ts.map

package/packages/logging/dist/server/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../src/server/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAcH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,WAAW;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC3B,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC3B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAChC,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAOjE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAMT;AAED,qBAAa,SAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAErC,YAAY,OAAO,EAAE,gBAAgB,EAWpC;IAED,8BAA8B;IAC9B,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CA4BzC;IAED,uDAAuD;IACvD,WAAW,CAAC,KAAK,SAAM,GAAG,WAAW,EAAE,CAiBtC;IAED,yEAAyE;IACzE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAWrC;IAED;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAOzE;IAED,+DAA+D;IAC/D,KAAK,CAAC,GAAG,SAAa,GAAG,WAAW,CAcnC;IAED,wEAAwE;IACxE,KAAK,CAAC,GAAG,SAAa,GAAG,MAAM,CAqB9B;IAED,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;CAsCjB"}