pi-harness-runtime 1.1.396 → 1.1.398

package/packages/logging/dist/server/credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/server/credentials.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuCjC,MAAM,CAAC,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC3C,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,WAAW,CAAC;AAE1C,2CAA2C;AAC3C,MAAM,UAAU,SAAS,CAAC,KAAa;IACtC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACpC,IAAI,CAAC;QACJ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,OAAO,kBAAkB;IACb,WAAW,CAAkB;IAC7B,MAAM,CAAkD;IAEzE,YAAoB,WAA4B,EAAE,MAA4C;QAC7F,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,GAA8B,EAAE;QAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;QAE1E,MAAM,WAAW,GAAoB,EAAE,CAAC;QACxC,IAAI,CAAC;YACJ,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAmB,CAAC;gBACxE,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;oBACxC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACxC,IACC,KAAK;4BACL,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;4BAC5B,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;4BAClC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,EAClC,CAAC;4BACF,WAAW,CAAC,IAAI,CAAC;gCAChB,GAAG,KAAK;gCACR,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;gCACtE,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;gCACvD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;6BAClC,CAAC,CAAC;wBACJ,CAAC;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,MAAM,CAAC;YACR,sEAAsE;QACvE,CAAC;QAED,MAAM,WAAW,GAChB,GAAG,CAAC,gBAAgB,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,WAAW;YACzB,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,iBAAiB,IAAI,iBAAiB,EAAE;YAC9E,CAAC,CAAC,SAAS,CAAC;QAEb,OAAO,IAAI,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,uDAAuD;IACvD,IAAI,UAAU;QACb,OAAO,CACN,IAAI,CAAC,MAAM,KAAK,SAAS;YACzB,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAC5D,CAAC;IACH,CAAC;IAED,kDAAkD;IAClD,IAAI;QACH,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED;;;;OAIG;IACH,YAAY,CAAC,KAAyB;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QAExB,IAAI,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9E,OAAO;gBACN,YAAY,EAAE,QAAQ;gBACtB,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC9B,MAAM,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;gBACzC,MAAM,EAAE,IAAI;aACZ,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,KAAK,MAAM,UAAU,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC3C,IAAI,UAAU,CAAC,SAAS;gBAAE,SAAS;YACnC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,UAAU,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC1D,OAAO;gBACN,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,MAAM,EAAE,KAAK;aACb,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACb,CAAC;CACD;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAA0B;IACzD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC"}

package/packages/logging/dist/server/http.d.ts

@@ -0,0 +1,36 @@
+/**
+ * HTTP surface of the log service.
+ *
+ * The handlers live here (not in the server script) so the whole request
+ * path - authentication, size limits, validation, durable acceptance - can
+ * be tested over a real socket.
+ *
+ * Routes:
+ *   POST /api/logs         accept a batch (202 after the durable write)
+ *   POST /api/logs/query   read-only, tenant scoped metadata query
+ *   GET  /api/logs/health  queue depth, oldest pending age, failure count
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { LogIndexStore } from "./index-store.js";
+import type { LogOutbox } from "./outbox.js";
+import type { LogIngestService } from "./service.js";
+export interface LogHttpOptions {
+    service: LogIngestService;
+    outbox: LogOutbox;
+    index: LogIndexStore;
+    /** Largest accepted ingest body. Default 2 MB. */
+    maxBodyBytes?: number;
+    /** Largest accepted query body. Default 64 KB. */
+    maxQueryBytes?: number;
+    /**
+     * Directory for a human readable copy of the accepted batches
+     * (`logs-<day>.ndjson`). Optional.
+     */
+    localCopyDir?: string;
+}
+export type LogHttpHandler = (req: IncomingMessage, res: ServerResponse) => Promise<void>;
+/**
+ * Build the HTTP handler for the log routes.
+ */
+export declare function createLogHttpHandler(options: LogHttpOptions): LogHttpHandler;
+//# sourceMappingURL=http.d.ts.map

package/packages/logging/dist/server/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,aAAa,CAAC;IACrB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAoC1F;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CA8F5E"}

package/packages/logging/dist/server/http.js

@@ -0,0 +1,139 @@
+/**
+ * HTTP surface of the log service.
+ *
+ * The handlers live here (not in the server script) so the whole request
+ * path - authentication, size limits, validation, durable acceptance - can
+ * be tested over a real socket.
+ *
+ * Routes:
+ *   POST /api/logs         accept a batch (202 after the durable write)
+ *   POST /api/logs/query   read-only, tenant scoped metadata query
+ *   GET  /api/logs/health  queue depth, oldest pending age, failure count
+ */
+import { appendFileSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { readBearerToken } from "./credentials.js";
+function sendJson(res, status, body) {
+    res.writeHead(status, { "Content-Type": "application/json" });
+    res.end(JSON.stringify(body));
+}
+async function readBody(req, maxBytes) {
+    const chunks = [];
+    let size = 0;
+    for await (const chunk of req) {
+        size += chunk.length;
+        if (size > maxBytes)
+            return null;
+        chunks.push(chunk);
+    }
+    return Buffer.concat(chunks);
+}
+/**
+ * Write a human readable copy of the accepted records next to the other
+ * server logs. Best effort: a failing copy never affects the request.
+ */
+function writeLocalCopy(dir, payload) {
+    if (!dir)
+        return;
+    const records = payload.records;
+    if (!Array.isArray(records) || records.length === 0)
+        return;
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        const day = new Date().toISOString().slice(0, 10);
+        const file = join(dir, `logs-${day}.ndjson`);
+        appendFileSync(file, `${records.map((record) => JSON.stringify(record)).join("\n")}\n`);
+    }
+    catch {
+        // The copy is a convenience, not a requirement.
+    }
+}
+/**
+ * Build the HTTP handler for the log routes.
+ */
+export function createLogHttpHandler(options) {
+    const maxBodyBytes = options.maxBodyBytes ?? 2 * 1024 * 1024;
+    const maxQueryBytes = options.maxQueryBytes ?? 64 * 1024;
+    return async (req, res) => {
+        const url = new URL(req.url ?? "/", "http://localhost");
+        const token = readBearerToken(req.headers.authorization);
+        if (url.pathname === "/api/logs" && req.method === "POST") {
+            // Fail closed: without a credential the endpoint does not exist.
+            if (!options.service.configured) {
+                sendJson(res, 503, { error: "log ingest is not configured", code: "ingest_unconfigured" });
+                return;
+            }
+            if (!options.service.authenticate(token)) {
+                sendJson(res, 401, { error: "unauthorized", code: "unauthorized" });
+                return;
+            }
+            const raw = await readBody(req, maxBodyBytes);
+            if (!raw) {
+                sendJson(res, 413, { error: "payload too large", code: "payload_too_large" });
+                return;
+            }
+            let payload;
+            try {
+                payload = JSON.parse(raw.toString());
+            }
+            catch {
+                sendJson(res, 400, { error: "invalid json", code: "invalid_json" });
+                return;
+            }
+            const result = options.service.ingest(payload, token);
+            sendJson(res, result.status, result.body);
+            if (result.status === 202)
+                writeLocalCopy(options.localCopyDir, payload);
+            return;
+        }
+        if (url.pathname === "/api/logs/query" && req.method === "POST") {
+            if (!options.service.configured) {
+                sendJson(res, 503, { error: "log ingest is not configured", code: "ingest_unconfigured" });
+                return;
+            }
+            const raw = await readBody(req, maxQueryBytes);
+            if (!raw) {
+                sendJson(res, 413, { error: "payload too large", code: "payload_too_large" });
+                return;
+            }
+            let params = {};
+            if (raw.length > 0) {
+                try {
+                    params = JSON.parse(raw.toString());
+                }
+                catch {
+                    sendJson(res, 400, { error: "invalid json", code: "invalid_json" });
+                    return;
+                }
+            }
+            const result = options.service.query({
+                installationId: params.installationId,
+                sessionId: params.sessionId,
+                since: params.since,
+                until: params.until,
+                levels: params.levels,
+                source: params.source,
+                event: params.event,
+                limit: params.limit,
+                cursor: params.cursor,
+            }, token);
+            sendJson(res, result.status, result.body);
+            return;
+        }
+        if (url.pathname === "/api/logs/health" && req.method === "GET") {
+            if (!options.service.configured) {
+                sendJson(res, 503, { configured: false });
+                return;
+            }
+            if (!options.service.authenticate(token)) {
+                sendJson(res, 401, { error: "unauthorized", code: "unauthorized" });
+                return;
+            }
+            sendJson(res, 200, { configured: true, outbox: options.outbox.stats() });
+            return;
+        }
+        sendJson(res, 404, { error: "not found" });
+    };
+}
+//# sourceMappingURL=http.js.map

package/packages/logging/dist/server/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/server/http.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAsBnD,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACnE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAoB,EAAE,QAAgB;IAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC/B,IAAI,IAAK,KAAgB,CAAC,MAAM,CAAC;QACjC,IAAI,IAAI,GAAG,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB,EAAE,OAAgB;IAChE,IAAI,CAAC,GAAG;QAAE,OAAO;IACjB,MAAM,OAAO,GAAI,OAAmC,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC5D,IAAI,CAAC;QACJ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,CAAC,CAAC;QAC7C,cAAc,CAAC,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACR,gDAAgD;IACjD,CAAC;AACF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAuB;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;IAC7D,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,EAAE,GAAG,IAAI,CAAC;IAEzD,OAAO,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAiB,EAAE;QACzE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QAEzD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3D,iEAAiE;YACjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC3F,OAAO;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC9E,OAAO;YACR,CAAC;YAED,IAAI,OAAgB,CAAC;YACrB,IAAI,CAAC;gBACJ,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACR,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBACpE,OAAO;YACR,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACtD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;gBAAE,cAAc,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzE,OAAO;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,qBAAqB,EAAE,CAAC,CAAC;gBAC3F,OAAO;YACR,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YAC/C,IAAI,CAAC,GAAG,EAAE,CAAC;gBACV,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC9E,OAAO;YACR,CAAC;YAED,IAAI,MAAM,GAA4B,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAA4B,CAAC;gBAChE,CAAC;gBAAC,MAAM,CAAC;oBACR,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;oBACpE,OAAO;gBACR,CAAC;YACF,CAAC;YAED,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CACnC;gBACC,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;aACrB,EACD,KAAK,CACL,CAAC;YACF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,IAAI,GAAG,CAAC,QAAQ,KAAK,kBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACjE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBACjC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1C,OAAO;YACR,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;gBACpE,OAAO;YACR,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzE,OAAO;QACR,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC;AACH,CAAC"}

package/packages/logging/dist/server/index-store.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Metadata index for the log query service.
+ *
+ * R2 is an archive, not a search API, so the server keeps a small metadata
+ * index next to it: tenant, machine, session, timestamp, severity,
+ * source/event, batch id and the object key of the archived batch.
+ *
+ * The index deliberately holds NO message text. Prompts, responses and
+ * command output never enter it, and an agent asking "which errors happened
+ * in this session" gets metadata, not content.
+ *
+ * Storage is one NDJSON file per tenant and day:
+ *
+ *   <dir>/<tenant>/2026-10-24.ndjson
+ *
+ * The index is tenant scoped by construction: every query is filtered by the
+ * tenant of the authenticated caller, and the tenant of the request body is
+ * never used.
+ */
+import type { LogLevel } from "../types.js";
+import { type OutboxBatch } from "./outbox.js";
+export interface LogIndexEntry {
+    tenantId: string;
+    installationId: string;
+    sessionId?: string;
+    ts: string;
+    level: LogLevel;
+    source: string;
+    event: string;
+    batchId: string;
+    /** Object key of the archived batch, when it was uploaded. */
+    r2Key?: string;
+}
+export interface LogQueryParams {
+    /** Tenant of the authenticated caller. Required. */
+    tenantId: string;
+    installationId?: string;
+    sessionId?: string;
+    /** ISO timestamp, inclusive lower bound. */
+    since?: string;
+    /** ISO timestamp, exclusive upper bound. */
+    until?: string;
+    levels?: LogLevel[];
+    source?: string;
+    event?: string;
+    /** Maximum number of entries. Default 100, hard maximum 500. */
+    limit?: number;
+    /** Opaque cursor of the previous page. */
+    cursor?: string;
+}
+export interface LogQueryResult {
+    entries: LogIndexEntry[];
+    /** Cursor of the next page, when there is one. */
+    nextCursor?: string;
+    hasMore: boolean;
+    /** Number of day files that were read. */
+    scannedFiles: number;
+    /** True when the scan hit its day budget. */
+    truncated: boolean;
+}
+export interface LogIndexStoreOptions {
+    dir: string;
+    /** Days a query may scan back. Default 7, hard maximum 31. */
+    maxScanDays?: number;
+    /** Entries per page by default. */
+    defaultLimit?: number;
+    /** Hard maximum of entries per page. */
+    maxLimit?: number;
+}
+export declare class LogIndexStore {
+    private readonly dir;
+    private readonly maxScanDays;
+    private readonly defaultLimit;
+    private readonly maxLimit;
+    constructor(options: LogIndexStoreOptions);
+    /**
+     * Index the metadata of a batch.
+     *
+     * Returns the number of entries that were written. The write is best
+     * effort: a failing index must not lose the batch itself.
+     */
+    append(batch: OutboxBatch, r2Key?: string): number;
+    /**
+     * Query the index for one tenant.
+     *
+     * The result is bounded by the page limit and by the day budget, and the
+     * caller is always a tenant: there is no way to query another tenant
+     * because the tenant comes from the parameter, which the server fills
+     * from the authenticated credential.
+     */
+    query(params: LogQueryParams): LogQueryResult;
+    private matches;
+    private dayRange;
+}
+//# sourceMappingURL=index-store.d.ts.map

package/packages/logging/dist/server/index-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-store.d.ts","sourceRoot":"","sources":["../../src/server/index-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,aAAa;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC9B,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4CAA4C;IAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gEAAgE;IAChE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,6CAA6C;IAC7C,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,8DAA8D;IAC9D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mCAAmC;IACnC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAkBD,qBAAa,aAAa;IACzB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAElC,YAAY,OAAO,EAAE,oBAAoB,EAKxC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CA6BjD;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,EAAE,cAAc,GAAG,cAAc,CAsD5C;IAED,OAAO,CAAC,OAAO;IAcf,OAAO,CAAC,QAAQ;CAoBhB"}

package/packages/logging/dist/server/index-store.js

@@ -0,0 +1,190 @@
+/**
+ * Metadata index for the log query service.
+ *
+ * R2 is an archive, not a search API, so the server keeps a small metadata
+ * index next to it: tenant, machine, session, timestamp, severity,
+ * source/event, batch id and the object key of the archived batch.
+ *
+ * The index deliberately holds NO message text. Prompts, responses and
+ * command output never enter it, and an agent asking "which errors happened
+ * in this session" gets metadata, not content.
+ *
+ * Storage is one NDJSON file per tenant and day:
+ *
+ *   <dir>/<tenant>/2026-10-24.ndjson
+ *
+ * The index is tenant scoped by construction: every query is filtered by the
+ * tenant of the authenticated caller, and the tenant of the request body is
+ * never used.
+ */
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { safeSegment } from "./outbox.js";
+function toIsoDay(value) {
+    return value.toISOString().slice(0, 10);
+}
+function encodeCursor(value) {
+    return Buffer.from(value, "utf8").toString("base64url");
+}
+function decodeCursor(value) {
+    try {
+        return Buffer.from(value, "base64url").toString("utf8");
+    }
+    catch {
+        return undefined;
+    }
+}
+export class LogIndexStore {
+    dir;
+    maxScanDays;
+    defaultLimit;
+    maxLimit;
+    constructor(options) {
+        this.dir = options.dir;
+        this.maxScanDays = Math.min(options.maxScanDays ?? 7, 31);
+        this.defaultLimit = options.defaultLimit ?? 100;
+        this.maxLimit = options.maxLimit ?? 500;
+    }
+    /**
+     * Index the metadata of a batch.
+     *
+     * Returns the number of entries that were written. The write is best
+     * effort: a failing index must not lose the batch itself.
+     */
+    append(batch, r2Key) {
+        if (!Array.isArray(batch.records) || batch.records.length === 0)
+            return 0;
+        const lines = [];
+        for (const record of batch.records) {
+            const entry = {
+                tenantId: batch.tenantId,
+                installationId: batch.installationId,
+                ts: record.ts,
+                level: record.level,
+                source: record.source,
+                event: record.event,
+                batchId: batch.batchId,
+            };
+            if (batch.sessionId)
+                entry.sessionId = batch.sessionId;
+            else if (record.sessionId)
+                entry.sessionId = record.sessionId;
+            if (r2Key)
+                entry.r2Key = r2Key;
+            lines.push(JSON.stringify(entry));
+        }
+        try {
+            const day = toIsoDay(new Date(batch.sentAt));
+            const dir = join(this.dir, safeSegment(batch.tenantId));
+            mkdirSync(dir, { recursive: true });
+            appendFileSync(join(dir, `${day}.ndjson`), `${lines.join("\n")}\n`, { mode: 0o600 });
+            return lines.length;
+        }
+        catch {
+            return 0;
+        }
+    }
+    /**
+     * Query the index for one tenant.
+     *
+     * The result is bounded by the page limit and by the day budget, and the
+     * caller is always a tenant: there is no way to query another tenant
+     * because the tenant comes from the parameter, which the server fills
+     * from the authenticated credential.
+     */
+    query(params) {
+        const limit = Math.min(params.limit ?? this.defaultLimit, this.maxLimit);
+        const days = this.dayRange(params);
+        const dir = join(this.dir, safeSegment(params.tenantId));
+        const matches = [];
+        let scannedFiles = 0;
+        let truncated = days.truncated;
+        for (const day of days.days) {
+            const path = join(dir, `${day}.ndjson`);
+            if (!existsSync(path))
+                continue;
+            scannedFiles++;
+            let content;
+            try {
+                content = readFileSync(path, "utf8");
+            }
+            catch {
+                continue;
+            }
+            for (const line of content.split("\n")) {
+                if (!line.trim())
+                    continue;
+                let entry;
+                try {
+                    entry = JSON.parse(line);
+                }
+                catch {
+                    continue;
+                }
+                if (!this.matches(entry, params))
+                    continue;
+                matches.push(entry);
+            }
+        }
+        matches.sort((a, b) => (a.ts < b.ts ? -1 : a.ts > b.ts ? 1 : 0));
+        const cursor = params.cursor ? decodeCursor(params.cursor) : undefined;
+        let start = 0;
+        if (cursor) {
+            const index = matches.findIndex((entry) => `${entry.ts}|${entry.batchId}` === cursor);
+            start = index >= 0 ? index + 1 : 0;
+        }
+        const page = matches.slice(start, start + limit);
+        const hasMore = start + limit < matches.length;
+        const result = {
+            entries: page,
+            hasMore,
+            scannedFiles,
+            truncated,
+        };
+        if (hasMore && page.length > 0) {
+            const last = page[page.length - 1];
+            result.nextCursor = encodeCursor(`${last.ts}|${last.batchId}`);
+        }
+        return result;
+    }
+    matches(entry, params) {
+        if (entry.tenantId !== params.tenantId)
+            return false;
+        if (params.installationId && entry.installationId !== params.installationId)
+            return false;
+        if (params.sessionId && entry.sessionId !== params.sessionId)
+            return false;
+        if (params.levels && params.levels.length > 0 && !params.levels.includes(entry.level)) {
+            return false;
+        }
+        if (params.source && entry.source !== params.source)
+            return false;
+        if (params.event && entry.event !== params.event)
+            return false;
+        if (params.since && entry.ts < params.since)
+            return false;
+        if (params.until && entry.ts >= params.until)
+            return false;
+        return true;
+    }
+    dayRange(params) {
+        const now = new Date();
+        const until = params.until ? new Date(params.until) : now;
+        // The budget counts the scanned days, so the default window covers
+        // exactly `maxScanDays` days including the day of `until`.
+        const since = params.since
+            ? new Date(params.since)
+            : new Date(until.getTime() - (this.maxScanDays - 1) * 86_400_000);
+        const days = [];
+        const cursor = new Date(since);
+        let truncated = false;
+        while (cursor <= until && days.length < this.maxScanDays) {
+            days.push(toIsoDay(cursor));
+            cursor.setUTCDate(cursor.getUTCDate() + 1);
+        }
+        if (cursor <= until)
+            truncated = true;
+        return { days, truncated };
+    }
+}
+//# sourceMappingURL=index-store.js.map

package/packages/logging/dist/server/index-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-store.js","sourceRoot":"","sources":["../../src/server/index-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAe,YAAY,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAoB,MAAM,aAAa,CAAC;AAsD5D,SAAS,QAAQ,CAAC,KAAW;IAC5B,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IAClC,IAAI,CAAC;QACJ,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,OAAO,aAAa;IACR,GAAG,CAAS;IACZ,WAAW,CAAS;IACpB,YAAY,CAAS;IACrB,QAAQ,CAAS;IAElC,YAAY,OAA6B;QACxC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC;IACzC,CAAC;IAED;;;;;OAKG;IACH,MAAM,CAAC,KAAkB,EAAE,KAAc;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE1E,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,KAAK,GAAkB;gBAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,EAAE,EAAE,MAAM,CAAC,EAAE;gBACb,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;aACtB,CAAC;YACF,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;iBAClD,IAAI,MAAM,CAAC,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC9D,IAAI,KAAK;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;YACxD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACrF,OAAO,KAAK,CAAC,MAAM,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,CAAC,CAAC;QACV,CAAC;IACF,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAsB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAE/B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,SAAS;YAChC,YAAY,EAAE,CAAC;YACf,IAAI,OAAe,CAAC;YACpB,IAAI,CAAC;gBACJ,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAAC,MAAM,CAAC;gBACR,SAAS;YACV,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;oBAAE,SAAS;gBAC3B,IAAI,KAAoB,CAAC;gBACzB,IAAI,CAAC;oBACJ,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;gBAC3C,CAAC;gBAAC,MAAM,CAAC;oBACR,SAAS;gBACV,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC;oBAAE,SAAS;gBAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACF,CAAC;QAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,MAAM,CAAC,CAAC;YACtF,KAAK,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;QAC/C,MAAM,MAAM,GAAmB;YAC9B,OAAO,EAAE,IAAI;YACb,OAAO;YACP,YAAY;YACZ,SAAS;SACT,CAAC;QACF,IAAI,OAAO,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,UAAU,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,OAAO,CAAC,KAAoB,EAAE,MAAsB;QAC3D,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrD,IAAI,MAAM,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAC1F,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAClE,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC/D,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC1D,IAAI,MAAM,CAAC,KAAK,IAAI,KAAK,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,QAAQ,CAAC,MAAsB;QACtC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1D,mEAAmE;QACnE,2DAA2D;QAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;YACzB,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,OAAO,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,IAAI,KAAK;YAAE,SAAS,GAAG,IAAI,CAAC;QAEtC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC5B,CAAC;CACD"}

package/packages/logging/dist/server/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Server side of the logging pipeline.
+ *
+ * The server is the only component that writes to the archive: clients ship
+ * batches to the ingest endpoint, the server derives the tenant from the
+ * credential, queues the batch durably and a worker uploads it.
+ */
+export { DEFAULT_TENANT_ID, LOG_READ_SCOPE, LOG_WRITE_SCOPE, LogCredentialStore, hashToken, readBearerToken, } from "./credentials.js";
+export type { AuthenticatedCredential, LogCredential, LogCredentialStoreOptions, } from "./credentials.js";
+export { LogOutbox, outboxKey, safeSegment } from "./outbox.js";
+export type { EnqueueResult, LogOutboxOptions, OutboxBatch, OutboxEntry, OutboxStats, } from "./outbox.js";
+export { LogOutboxWorker } from "./outbox-worker.js";
+export type { LogOutboxWorkerOptions, WorkerRunResult } from "./outbox-worker.js";
+export { LogIndexStore } from "./index-store.js";
+export type { LogIndexEntry, LogIndexStoreOptions, LogQueryParams, LogQueryResult, } from "./index-store.js";
+export { serverObjectKey } from "./keys.js";
+export type { ObjectKeyInput } from "./keys.js";
+export { LogIngestService } from "./service.js";
+export type { IngestFailure, IngestResult, IngestSuccess, LogIngestServiceOptions, QuerySuccess, } from "./service.js";
+export { createLogHttpHandler } from "./http.js";
+export type { LogHttpHandler, LogHttpOptions } from "./http.js";
+//# sourceMappingURL=index.d.ts.map

package/packages/logging/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,eAAe,GACf,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACX,uBAAuB,EACvB,aAAa,EACb,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACX,aAAa,EACb,gBAAgB,EAChB,WAAW,EACX,WAAW,EACX,WAAW,GACX,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAElF,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EACX,aAAa,EACb,oBAAoB,EACpB,cAAc,EACd,cAAc,GACd,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EACX,aAAa,EACb,YAAY,EACZ,aAAa,EACb,uBAAuB,EACvB,YAAY,GACZ,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AACjD,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC"}

package/packages/logging/dist/server/index.js

@@ -0,0 +1,15 @@
+/**
+ * Server side of the logging pipeline.
+ *
+ * The server is the only component that writes to the archive: clients ship
+ * batches to the ingest endpoint, the server derives the tenant from the
+ * credential, queues the batch durably and a worker uploads it.
+ */
+export { DEFAULT_TENANT_ID, LOG_READ_SCOPE, LOG_WRITE_SCOPE, LogCredentialStore, hashToken, readBearerToken, } from "./credentials.js";
+export { LogOutbox, outboxKey, safeSegment } from "./outbox.js";
+export { LogOutboxWorker } from "./outbox-worker.js";
+export { LogIndexStore } from "./index-store.js";
+export { serverObjectKey } from "./keys.js";
+export { LogIngestService } from "./service.js";
+export { createLogHttpHandler } from "./http.js";
+//# sourceMappingURL=index.js.map

package/packages/logging/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACN,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,eAAe,GACf,MAAM,kBAAkB,CAAC;AAO1B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAShE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAGrD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAQjD,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAShD,OAAO,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}

package/packages/logging/dist/server/keys.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Deterministic object keys for the log archive.
+ *
+ * The server generates the keys - never the client - and they contain no
+ * user controlled path segment beyond an already sanitized tenant and batch
+ * id. The key is derived from the batch itself, so the same batch always
+ * lands under the same key and the metadata index can compute it without
+ * waiting for the upload.
+ */
+export interface ObjectKeyInput {
+    tenantId: string;
+    batchId: string;
+    /** ISO timestamp used for the date partition. */
+    sentAt: string;
+}
+/**
+ * Build the archive key of a batch:
+ *
+ *   logs/<tenant>/2026/10/24/09/<batchId>.ndjson
+ */
+export declare function serverObjectKey(input: ObjectKeyInput): string;
+//# sourceMappingURL=keys.d.ts.map

package/packages/logging/dist/server/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/server/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;CACf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAO7D"}

package/packages/logging/dist/server/keys.js

@@ -0,0 +1,24 @@
+/**
+ * Deterministic object keys for the log archive.
+ *
+ * The server generates the keys - never the client - and they contain no
+ * user controlled path segment beyond an already sanitized tenant and batch
+ * id. The key is derived from the batch itself, so the same batch always
+ * lands under the same key and the metadata index can compute it without
+ * waiting for the upload.
+ */
+import { safeSegment } from "./outbox.js";
+/**
+ * Build the archive key of a batch:
+ *
+ *   logs/<tenant>/2026/10/24/09/<batchId>.ndjson
+ */
+export function serverObjectKey(input) {
+    const date = new Date(input.sentAt);
+    const year = date.getUTCFullYear();
+    const month = String(date.getUTCMonth() + 1).padStart(2, "0");
+    const day = String(date.getUTCDate()).padStart(2, "0");
+    const hour = String(date.getUTCHours()).padStart(2, "0");
+    return `logs/${safeSegment(input.tenantId)}/${year}/${month}/${day}/${hour}/${safeSegment(input.batchId)}.ndjson`;
+}
+//# sourceMappingURL=keys.js.map

package/packages/logging/dist/server/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/server/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAqB;IACpD,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzD,OAAO,QAAQ,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;AACnH,CAAC"}