pi-harness-runtime 1.1.396 → 1.1.397

package/packages/logging/dist/server/outbox-worker.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Retry worker for the server-side outbox.
+ *
+ * The worker drains the queue in the background, so an R2 outage never
+ * blocks the ingest endpoint: the batch waits in the queue and is retried
+ * with a bounded exponential backoff.
+ *
+ * A batch that exhausts its attempts stays in the queue (visible in the
+ * diagnostics) instead of being dropped silently.
+ */
+import type { LogOutbox, OutboxEntry } from "./outbox.js";
+export interface LogOutboxWorkerOptions {
+    outbox: LogOutbox;
+    /** Uploads one batch. Throwing marks the batch as failed. */
+    upload: (entry: OutboxEntry) => Promise<void>;
+    /** Interval between two drain runs. Default 5000 ms. */
+    intervalMs?: number;
+    /** Attempts before a batch is parked. Default 10. */
+    maxAttempts?: number;
+    /** First backoff step. Default 5000 ms. */
+    baseDelayMs?: number;
+    /** Upper bound of the backoff. Default 300000 ms (5 minutes). */
+    maxDelayMs?: number;
+    /** Batches per run. Default 50. */
+    batchLimit?: number;
+    /** Clock injection (tests). */
+    now?: () => number;
+}
+export interface WorkerRunResult {
+    uploaded: number;
+    failed: number;
+    skipped: number;
+}
+export declare class LogOutboxWorker {
+    private readonly outbox;
+    private readonly upload;
+    private readonly intervalMs;
+    private readonly maxAttempts;
+    private readonly baseDelayMs;
+    private readonly maxDelayMs;
+    private readonly batchLimit;
+    private readonly now;
+    private timer;
+    private running;
+    constructor(options: LogOutboxWorkerOptions);
+    /** Backoff for the given attempt count (1 = first failure). */
+    backoffMs(attempts: number): number;
+    /** Start the periodic drain. */
+    start(): void;
+    /** Stop the periodic drain and wait for a running pass. */
+    stop(): Promise<void>;
+    /** Drain the queue once. Never throws. */
+    runOnce(): Promise<WorkerRunResult>;
+}
+//# sourceMappingURL=outbox-worker.d.ts.map

package/packages/logging/dist/server/outbox-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-worker.d.ts","sourceRoot":"","sources":["../../src/server/outbox-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,6DAA6D;IAC7D,MAAM,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAwC;IAC/D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,KAAK,CAA6C;IAC1D,OAAO,CAAC,OAAO,CAAS;IAExB,YAAY,OAAO,EAAE,sBAAsB,EAS1C;IAED,+DAA+D;IAC/D,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGlC;IAED,gCAAgC;IAChC,KAAK,IAAI,IAAI,CAMZ;IAED,2DAA2D;IACrD,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAQ1B;IAED,0CAA0C;IACpC,OAAO,IAAI,OAAO,CAAC,eAAe,CAAC,CAmCxC;CACD"}

package/packages/logging/dist/server/outbox-worker.js

@@ -0,0 +1,95 @@
+/**
+ * Retry worker for the server-side outbox.
+ *
+ * The worker drains the queue in the background, so an R2 outage never
+ * blocks the ingest endpoint: the batch waits in the queue and is retried
+ * with a bounded exponential backoff.
+ *
+ * A batch that exhausts its attempts stays in the queue (visible in the
+ * diagnostics) instead of being dropped silently.
+ */
+export class LogOutboxWorker {
+    outbox;
+    upload;
+    intervalMs;
+    maxAttempts;
+    baseDelayMs;
+    maxDelayMs;
+    batchLimit;
+    now;
+    timer;
+    running = false;
+    constructor(options) {
+        this.outbox = options.outbox;
+        this.upload = options.upload;
+        this.intervalMs = options.intervalMs ?? 5_000;
+        this.maxAttempts = options.maxAttempts ?? 10;
+        this.baseDelayMs = options.baseDelayMs ?? 5_000;
+        this.maxDelayMs = options.maxDelayMs ?? 300_000;
+        this.batchLimit = options.batchLimit ?? 50;
+        this.now = options.now ?? (() => Date.now());
+    }
+    /** Backoff for the given attempt count (1 = first failure). */
+    backoffMs(attempts) {
+        const factor = 2 ** Math.max(0, attempts - 1);
+        return Math.min(this.baseDelayMs * factor, this.maxDelayMs);
+    }
+    /** Start the periodic drain. */
+    start() {
+        if (this.timer)
+            return;
+        this.timer = setInterval(() => {
+            void this.runOnce();
+        }, this.intervalMs);
+        this.timer.unref?.();
+    }
+    /** Stop the periodic drain and wait for a running pass. */
+    async stop() {
+        if (this.timer) {
+            clearInterval(this.timer);
+            this.timer = undefined;
+        }
+        while (this.running) {
+            await new Promise((resolve) => setTimeout(resolve, 10));
+        }
+    }
+    /** Drain the queue once. Never throws. */
+    async runOnce() {
+        if (this.running)
+            return { uploaded: 0, failed: 0, skipped: 0 };
+        this.running = true;
+        const result = { uploaded: 0, failed: 0, skipped: 0 };
+        try {
+            const now = this.now();
+            for (const entry of this.outbox.listPending(this.batchLimit)) {
+                if (entry.nextAttemptAt > now) {
+                    result.skipped++;
+                    continue;
+                }
+                if (entry.attempts >= this.maxAttempts) {
+                    result.skipped++;
+                    continue;
+                }
+                try {
+                    await this.upload(entry);
+                    this.outbox.markUploaded(entry);
+                    result.uploaded++;
+                }
+                catch (error) {
+                    const message = error instanceof Error ? error.message : String(error);
+                    const attempts = entry.attempts + 1;
+                    this.outbox.markFailed(entry, message, this.now() + this.backoffMs(attempts));
+                    result.failed++;
+                }
+            }
+        }
+        catch {
+            // A failing drain must not kill the worker.
+        }
+        finally {
+            this.running = false;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=outbox-worker.js.map

package/packages/logging/dist/server/outbox-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-worker.js","sourceRoot":"","sources":["../../src/server/outbox-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4BH,MAAM,OAAO,eAAe;IACV,MAAM,CAAY;IAClB,MAAM,CAAwC;IAC9C,UAAU,CAAS;IACnB,WAAW,CAAS;IACpB,WAAW,CAAS;IACpB,UAAU,CAAS;IACnB,UAAU,CAAS;IACnB,GAAG,CAAe;IAC3B,KAAK,CAA6C;IAClD,OAAO,GAAG,KAAK,CAAC;IAExB,YAAY,OAA+B;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,KAAK,CAAC;QAC9C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC;QAChD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,+DAA+D;IAC/D,SAAS,CAAC,QAAgB;QACzB,MAAM,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,CAAC,CAAC,CAAC;QAC9C,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,gCAAgC;IAChC,KAAK;QACJ,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC7B,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;QACrB,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC;IAED,2DAA2D;IAC3D,KAAK,CAAC,IAAI;QACT,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;IACF,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,OAAO;QACZ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QAEvE,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9D,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,EAAE,CAAC;oBAC/B,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,SAAS;gBACV,CAAC;gBACD,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACxC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACjB,SAAS;gBACV,CAAC;gBAED,IAAI,CAAC;oBACJ,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAChC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACpC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAC9E,MAAM,CAAC,MAAM,EAAE,CAAC;gBACjB,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,4CAA4C;QAC7C,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}

package/packages/logging/dist/server/outbox.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Durable server-side outbox.
+ *
+ * The ingest endpoint must not tell a client "accepted" before the batch
+ * survived a crash. The outbox is the durable hand-off point between the
+ * HTTP request and the R2 upload:
+ *
+ *   request -> validate -> enqueue (durable) -> 202
+ *                                         |
+ *                                         v
+ *                               worker -> upload -> done
+ *
+ * The queue is a directory of JSON files, one per accepted batch:
+ *
+ *   <dir>/pending/<key>.json        the batch payload
+ *   <dir>/pending/<key>.meta.json   attempts, next attempt, last error
+ *   <dir>/done/<key>.json           uploaded batches (pruned after a while)
+ *
+ * A plain file queue is used on purpose: the server runs under Bun, which
+ * has no `node:sqlite`, and the queue stays inspectable with `ls`/`jq`.
+ *
+ * The key is derived from (tenant, installation, batch), so the same batch
+ * is enqueued only once - the ingest endpoint is idempotent.
+ */
+import type { LogRecord } from "../types.js";
+export interface OutboxBatch {
+    tenantId: string;
+    installationId: string;
+    batchId: string;
+    app: string;
+    appVersion?: string;
+    hostLabel?: string;
+    sessionId?: string;
+    sentAt: string;
+    records: LogRecord[];
+}
+export interface OutboxEntry {
+    /** File name key of the batch. */
+    key: string;
+    /** Absolute path of the payload file. */
+    path: string;
+    batch: OutboxBatch;
+    attempts: number;
+    nextAttemptAt: number;
+    lastError?: string;
+    createdAt: number;
+}
+export interface OutboxStats {
+    /** Batches waiting for an upload. */
+    pending: number;
+    /** Age of the oldest pending batch in milliseconds. */
+    oldestPendingAgeMs: number;
+    /** Batches that failed at least once. */
+    failures: number;
+    /** Last upload error (message only, never a payload). */
+    lastError?: string;
+}
+export interface EnqueueResult {
+    accepted: boolean;
+    /** True when the same batch was already queued (idempotent replay). */
+    duplicate: boolean;
+}
+export interface LogOutboxOptions {
+    /** Directory of the queue. */
+    dir: string;
+    /** How long uploaded batches are kept, in milliseconds. Default 7 days. */
+    retentionMs?: number;
+}
+/** Make a value safe to use inside a file name. */
+export declare function safeSegment(value: string, maxLength?: number): string;
+/**
+ * Build the queue key of a batch.
+ *
+ * The key is unique per (tenant, installation, batch) and contains no
+ * user controlled path segment.
+ */
+export declare function outboxKey(batch: {
+    tenantId: string;
+    installationId: string;
+    batchId: string;
+}): string;
+export declare class LogOutbox {
+    private readonly dir;
+    private readonly pendingDir;
+    private readonly doneDir;
+    private readonly retentionMs;
+    constructor(options: LogOutboxOptions);
+    /** Directory of the queue. */
+    get directory(): string;
+    /**
+     * Store a batch durably.
+     *
+     * The write is atomic (write to a temp file, then rename), so a crash
+     * can never leave a half written batch behind.
+     */
+    enqueue(batch: OutboxBatch): EnqueueResult;
+    /** The batches waiting for an upload, oldest first. */
+    listPending(limit?: number): OutboxEntry[];
+    /** Mark a batch as uploaded and move it out of the pending directory. */
+    markUploaded(entry: OutboxEntry): void;
+    /**
+     * Record a failed upload and schedule the next attempt.
+     */
+    markFailed(entry: OutboxEntry, error: string, nextAttemptAt: number): void;
+    /** Queue depth, oldest pending age and failure information. */
+    stats(now?: number): OutboxStats;
+    /** Delete uploaded batches that are older than the retention period. */
+    prune(now?: number): number;
+    private writeMeta;
+    private readEntry;
+}
+//# sourceMappingURL=outbox.d.ts.map

package/packages/logging/dist/server/outbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.d.ts","sourceRoot":"","sources":["../../src/server/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAcH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,WAAW,WAAW;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,SAAS,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC3B,kCAAkC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,yCAAyC;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC3B,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAChC,8BAA8B;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,mDAAmD;AACnD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,SAAK,GAAG,MAAM,CAOjE;AAED;;;;;GAKG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CAChB,GAAG,MAAM,CAMT;AAED,qBAAa,SAAS;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IAErC,YAAY,OAAO,EAAE,gBAAgB,EAWpC;IAED,8BAA8B;IAC9B,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAK,EAAE,WAAW,GAAG,aAAa,CA4BzC;IAED,uDAAuD;IACvD,WAAW,CAAC,KAAK,SAAM,GAAG,WAAW,EAAE,CAiBtC;IAED,yEAAyE;IACzE,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAWrC;IAED;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAOzE;IAED,+DAA+D;IAC/D,KAAK,CAAC,GAAG,SAAa,GAAG,WAAW,CAcnC;IAED,wEAAwE;IACxE,KAAK,CAAC,GAAG,SAAa,GAAG,MAAM,CAqB9B;IAED,OAAO,CAAC,SAAS;IAejB,OAAO,CAAC,SAAS;CAsCjB"}

package/packages/logging/dist/server/outbox.js

@@ -0,0 +1,247 @@
+/**
+ * Durable server-side outbox.
+ *
+ * The ingest endpoint must not tell a client "accepted" before the batch
+ * survived a crash. The outbox is the durable hand-off point between the
+ * HTTP request and the R2 upload:
+ *
+ *   request -> validate -> enqueue (durable) -> 202
+ *                                         |
+ *                                         v
+ *                               worker -> upload -> done
+ *
+ * The queue is a directory of JSON files, one per accepted batch:
+ *
+ *   <dir>/pending/<key>.json        the batch payload
+ *   <dir>/pending/<key>.meta.json   attempts, next attempt, last error
+ *   <dir>/done/<key>.json           uploaded batches (pruned after a while)
+ *
+ * A plain file queue is used on purpose: the server runs under Bun, which
+ * has no `node:sqlite`, and the queue stays inspectable with `ls`/`jq`.
+ *
+ * The key is derived from (tenant, installation, batch), so the same batch
+ * is enqueued only once - the ingest endpoint is idempotent.
+ */
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync, } from "node:fs";
+import { join } from "node:path";
+/** Make a value safe to use inside a file name. */
+export function safeSegment(value, maxLength = 48) {
+    const cleaned = value
+        .replace(/\.\./g, "_")
+        .replace(/[^A-Za-z0-9._-]/g, "_")
+        .slice(0, maxLength)
+        .replace(/^\.+/, "_");
+    return cleaned.length > 0 ? cleaned : "unknown";
+}
+/**
+ * Build the queue key of a batch.
+ *
+ * The key is unique per (tenant, installation, batch) and contains no
+ * user controlled path segment.
+ */
+export function outboxKey(batch) {
+    const digest = createHash("sha256")
+        .update(`${batch.tenantId}|${batch.installationId}|${batch.batchId}`, "utf8")
+        .digest("hex")
+        .slice(0, 12);
+    return `${safeSegment(batch.tenantId)}--${safeSegment(batch.batchId)}--${digest}`;
+}
+export class LogOutbox {
+    dir;
+    pendingDir;
+    doneDir;
+    retentionMs;
+    constructor(options) {
+        this.dir = options.dir;
+        this.pendingDir = join(options.dir, "pending");
+        this.doneDir = join(options.dir, "done");
+        this.retentionMs = options.retentionMs ?? 7 * 24 * 60 * 60 * 1000;
+        try {
+            mkdirSync(this.pendingDir, { recursive: true });
+            mkdirSync(this.doneDir, { recursive: true });
+        }
+        catch {
+            // The enqueue call reports the failure with a retryable error.
+        }
+    }
+    /** Directory of the queue. */
+    get directory() {
+        return this.dir;
+    }
+    /**
+     * Store a batch durably.
+     *
+     * The write is atomic (write to a temp file, then rename), so a crash
+     * can never leave a half written batch behind.
+     */
+    enqueue(batch) {
+        const key = outboxKey(batch);
+        const payloadPath = join(this.pendingDir, `${key}.json`);
+        if (existsSync(payloadPath) || existsSync(join(this.doneDir, `${key}.json`))) {
+            return { accepted: true, duplicate: true };
+        }
+        const tempPath = `${payloadPath}.tmp`;
+        try {
+            writeFileSync(tempPath, `${JSON.stringify(batch)}\n`, { mode: 0o600 });
+            renameSync(tempPath, payloadPath);
+        }
+        catch (error) {
+            try {
+                rmSync(tempPath, { force: true });
+            }
+            catch {
+                // Nothing else to do.
+            }
+            throw error;
+        }
+        this.writeMeta(key, {
+            attempts: 0,
+            nextAttemptAt: Date.now(),
+            createdAt: Date.now(),
+        });
+        return { accepted: true, duplicate: false };
+    }
+    /** The batches waiting for an upload, oldest first. */
+    listPending(limit = 100) {
+        const entries = [];
+        let names;
+        try {
+            names = readdirSync(this.pendingDir);
+        }
+        catch {
+            return entries;
+        }
+        for (const name of names) {
+            if (!name.endsWith(".json") || name.endsWith(".meta.json"))
+                continue;
+            const entry = this.readEntry(join(this.pendingDir, name));
+            if (entry)
+                entries.push(entry);
+        }
+        entries.sort((a, b) => a.createdAt - b.createdAt);
+        return entries.slice(0, limit);
+    }
+    /** Mark a batch as uploaded and move it out of the pending directory. */
+    markUploaded(entry) {
+        try {
+            renameSync(entry.path, join(this.doneDir, `${entry.key}.json`));
+        }
+        catch {
+            // The file may have been moved already; nothing to do.
+        }
+        try {
+            rmSync(join(this.pendingDir, `${entry.key}.meta.json`), { force: true });
+        }
+        catch {
+            // Ignore.
+        }
+    }
+    /**
+     * Record a failed upload and schedule the next attempt.
+     */
+    markFailed(entry, error, nextAttemptAt) {
+        this.writeMeta(entry.key, {
+            attempts: entry.attempts + 1,
+            nextAttemptAt,
+            lastError: error,
+            createdAt: entry.createdAt,
+        });
+    }
+    /** Queue depth, oldest pending age and failure information. */
+    stats(now = Date.now()) {
+        const entries = this.listPending(Number.MAX_SAFE_INTEGER);
+        let oldestPendingAgeMs = 0;
+        let failures = 0;
+        let lastError;
+        for (const entry of entries) {
+            const age = now - entry.createdAt;
+            if (oldestPendingAgeMs === 0 || age > oldestPendingAgeMs)
+                oldestPendingAgeMs = age;
+            if (entry.attempts > 0)
+                failures++;
+            if (entry.lastError)
+                lastError = entry.lastError;
+        }
+        return { pending: entries.length, oldestPendingAgeMs, failures, lastError };
+    }
+    /** Delete uploaded batches that are older than the retention period. */
+    prune(now = Date.now()) {
+        let removed = 0;
+        let names;
+        try {
+            names = readdirSync(this.doneDir);
+        }
+        catch {
+            return 0;
+        }
+        for (const name of names) {
+            const path = join(this.doneDir, name);
+            try {
+                const age = now - statSync(path).mtimeMs;
+                if (age > this.retentionMs) {
+                    rmSync(path, { force: true });
+                    removed++;
+                }
+            }
+            catch {
+                // Ignore a file that vanished.
+            }
+        }
+        return removed;
+    }
+    writeMeta(key, meta) {
+        const path = join(this.pendingDir, `${key}.meta.json`);
+        const tempPath = `${path}.tmp`;
+        try {
+            writeFileSync(tempPath, `${JSON.stringify(meta)}\n`, { mode: 0o600 });
+            renameSync(tempPath, path);
+        }
+        catch {
+            // The meta file is an optimisation: without it the batch is still
+            // retried, only without the backoff hint.
+        }
+    }
+    readEntry(path) {
+        const key = path.slice(path.lastIndexOf("/") + 1).replace(/\.json$/, "");
+        try {
+            const batch = JSON.parse(readFileSync(path, "utf8"));
+            let meta = {
+                attempts: 0,
+                nextAttemptAt: 0,
+                createdAt: 0,
+            };
+            try {
+                const metaPath = join(this.pendingDir, `${key}.meta.json`);
+                if (existsSync(metaPath)) {
+                    meta = { ...meta, ...JSON.parse(readFileSync(metaPath, "utf8")) };
+                }
+            }
+            catch {
+                // Fall back to the defaults.
+            }
+            let createdAt = meta.createdAt;
+            if (!createdAt) {
+                try {
+                    createdAt = statSync(path).mtimeMs;
+                }
+                catch {
+                    createdAt = Date.now();
+                }
+            }
+            return {
+                key,
+                path,
+                batch,
+                attempts: meta.attempts ?? 0,
+                nextAttemptAt: meta.nextAttemptAt ?? 0,
+                lastError: meta.lastError,
+                createdAt,
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=outbox.js.map

package/packages/logging/dist/server/outbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox.js","sourceRoot":"","sources":["../../src/server/outbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACN,UAAU,EACV,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,MAAM,EACN,QAAQ,EACR,aAAa,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmDjC,mDAAmD;AACnD,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,SAAS,GAAG,EAAE;IACxD,MAAM,OAAO,GAAG,KAAK;SACnB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC;SACrB,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC;SAChC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,KAIzB;IACA,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC;SAC5E,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,MAAM,OAAO,SAAS;IACJ,GAAG,CAAS;IACZ,UAAU,CAAS;IACnB,OAAO,CAAS;IAChB,WAAW,CAAS;IAErC,YAAY,OAAyB;QACpC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClE,IAAI,CAAC;YACJ,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACR,+DAA+D;QAChE,CAAC;IACF,CAAC;IAED,8BAA8B;IAC9B,IAAI,SAAS;QACZ,OAAO,IAAI,CAAC,GAAG,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,OAAO,CAAC,KAAkB;QACzB,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;QAEzD,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;YAC9E,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,QAAQ,GAAG,GAAG,WAAW,MAAM,CAAC;QACtC,IAAI,CAAC;YACJ,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC;gBACJ,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,sBAAsB;YACvB,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;YACnB,QAAQ,EAAE,CAAC;YACX,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;YACzB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACrB,CAAC,CAAC;QAEH,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC7C,CAAC;IAED,uDAAuD;IACvD,WAAW,CAAC,KAAK,GAAG,GAAG;QACtB,MAAM,OAAO,GAAkB,EAAE,CAAC;QAClC,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,SAAS;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1D,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC;QAClD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,yEAAyE;IACzE,YAAY,CAAC,KAAkB;QAC9B,IAAI,CAAC;YACJ,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,uDAAuD;QACxD,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACR,UAAU;QACX,CAAC;IACF,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,KAAkB,EAAE,KAAa,EAAE,aAAqB;QAClE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,CAAC;YAC5B,aAAa;YACb,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,KAAK,CAAC,SAAS;SAC1B,CAAC,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,IAAI,kBAAkB,GAAG,CAAC,CAAC;QAC3B,IAAI,QAAQ,GAAG,CAAC,CAAC;QACjB,IAAI,SAA6B,CAAC;QAElC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC;YAClC,IAAI,kBAAkB,KAAK,CAAC,IAAI,GAAG,GAAG,kBAAkB;gBAAE,kBAAkB,GAAG,GAAG,CAAC;YACnF,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC;gBAAE,QAAQ,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,SAAS;gBAAE,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;QAClD,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC7E,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACJ,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC;QACV,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC;gBACJ,MAAM,GAAG,GAAG,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBACzC,IAAI,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;oBAC5B,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9B,OAAO,EAAE,CAAC;gBACX,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,+BAA+B;YAChC,CAAC;QACF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,SAAS,CAChB,GAAW,EACX,IAAwF;QAExF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,YAAY,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;QAC/B,IAAI,CAAC;YACJ,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACR,kEAAkE;YAClE,0CAA0C;QAC3C,CAAC;IACF,CAAC;IAEO,SAAS,CAAC,IAAY;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAgB,CAAC;YACpE,IAAI,IAAI,GAAuF;gBAC9F,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,CAAC;gBAChB,SAAS,EAAE,CAAC;aACZ,CAAC;YACF,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,YAAY,CAAC,CAAC;gBAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC1B,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAiB,EAAE,CAAC;gBACpF,CAAC;YACF,CAAC;YAAC,MAAM,CAAC;gBACR,6BAA6B;YAC9B,CAAC;YACD,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YAC/B,IAAI,CAAC,SAAS,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACJ,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC;gBACpC,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACxB,CAAC;YACF,CAAC;YACD,OAAO;gBACN,GAAG;gBACH,IAAI;gBACJ,KAAK;gBACL,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,CAAC;gBAC5B,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;gBACtC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS;aACT,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;CACD"}

package/packages/logging/dist/server/service.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The log ingest service.
+ *
+ * The HTTP handler is a thin adapter around this class, so the whole ingest
+ * and query policy is testable without a socket:
+ *
+ *   - authentication happens BEFORE the body is parsed,
+ *   - the tenant comes from the credential, never from the request body,
+ *   - a batch is only acknowledged after it is durably queued,
+ *   - a query is always scoped to the tenant of the caller.
+ */
+import { type BatchValidationLimits } from "../ingest/schema.js";
+import { type AuthenticatedCredential, type LogCredentialStore } from "./credentials.js";
+import type { LogIndexStore, LogQueryParams, LogQueryResult } from "./index-store.js";
+import type { LogOutbox } from "./outbox.js";
+export interface IngestSuccess {
+    accepted: number;
+    batchId: string;
+    duplicate: boolean;
+    tenantId: string;
+    queued: true;
+}
+export interface IngestFailure {
+    error: string;
+    code: string;
+}
+export interface IngestResult {
+    status: number;
+    body: IngestSuccess | IngestFailure;
+}
+export interface QuerySuccess {
+    entries: LogQueryResult["entries"];
+    nextCursor?: string;
+    hasMore: boolean;
+    scannedFiles: number;
+    truncated: boolean;
+    tenantId: string;
+}
+export interface LogIngestServiceOptions {
+    credentials: LogCredentialStore;
+    outbox: LogOutbox;
+    index: LogIndexStore;
+    /** Validation limits for an inbound batch. */
+    limits?: Partial<BatchValidationLimits>;
+}
+export declare class LogIngestService {
+    private readonly credentials;
+    private readonly outbox;
+    private readonly index;
+    private readonly limits;
+    constructor(options: LogIngestServiceOptions);
+    /** True when the ingest endpoint has at least one usable credential. */
+    get configured(): boolean;
+    /**
+     * Authenticate a presented bearer token.
+     *
+     * The HTTP layer uses it to reject a request before the body is read.
+     */
+    authenticate(token: string | undefined): AuthenticatedCredential | null;
+    /**
+     * Accept a batch.
+     *
+     * The status codes matter:
+     *   503 - no credential is configured (fail closed) or the queue is
+     *         unavailable. The client keeps the batch in its spool.
+     *   401 - the credential is missing or unknown.
+     *   403 - the credential may not write.
+     *   400 - the batch does not match the schema.
+     *   202 - the batch is durably queued.
+     */
+    ingest(body: unknown, bearerToken: string | undefined): IngestResult;
+    /**
+     * Query the metadata index for the tenant of the caller.
+     *
+     * The `tenantId` of the request is ignored on purpose - only the
+     * credential decides whose records are visible.
+     */
+    query(params: Omit<LogQueryParams, "tenantId">, bearerToken: string | undefined): {
+        status: number;
+        body: QuerySuccess | IngestFailure;
+    };
+}
+//# sourceMappingURL=service.d.ts.map

package/packages/logging/dist/server/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/server/service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAiB,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAGN,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,KAAK,EAAE,SAAS,EAAe,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,IAAI,CAAC;CACb;AAED,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,aAAa,GAAG,aAAa,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC5B,OAAO,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACvC,WAAW,EAAE,kBAAkB,CAAC;IAChC,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;IACrB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACxC;AAED,qBAAa,gBAAgB;IAC5B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IACjD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAY;IACnC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiC;IAExD,YAAY,OAAO,EAAE,uBAAuB,EAK3C;IAED,wEAAwE;IACxE,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,uBAAuB,GAAG,IAAI,CAEtE;IAED;;;;;;;;;;OAUG;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,CA6DnE;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,UAAU,CAAC,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,GAAG;QACjF,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,YAAY,GAAG,aAAa,CAAC;KACnC,CA0BA;CACD"}