pipework 0.8.2 → 0.8.4

package/dist/trace/entry/parent-trace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parent-trace.js","sourceRoot":"","sources":["../../../src/trace/entry/parent-trace.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,2EAA2E;AAC3E,+EAA+E;AAC/E,kDAAkD;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAG3D,2FAA2F;AAC3F,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,EAAE,KAAK,IAAI,IAAI,CAAA;AACpC,CAAC"}

package/dist/trace/entry/parse-traceparent.d.ts

@@ -0,0 +1,8 @@
+/** A parsed traceparent — only the fields pipework actually wires through. */
+export interface ParsedTraceparent {
+    /** The W3C trace-id, formatted as a UUID for direct use in `trace.parent_id`. */
+    readonly traceId: string;
+}
+/** Parses a `traceparent` header value; returns `null` for missing or malformed input. */
+export declare function parseTraceparent(header: string | string[] | undefined): ParsedTraceparent | null;
+//# sourceMappingURL=parse-traceparent.d.ts.map

package/dist/trace/entry/parse-traceparent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-traceparent.d.ts","sourceRoot":"","sources":["../../../src/trace/entry/parse-traceparent.ts"],"names":[],"mappings":"AAiBA,8EAA8E;AAC9E,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,iBAAiB,GAAG,IAAI,CAUhG"}

package/dist/trace/entry/parse-traceparent.js

@@ -0,0 +1,37 @@
+// Parses the W3C `traceparent` HTTP header (Q10 — cross-team contract with
+// plumb). Format: `version-trace-id-parent-id-trace-flags`, version-00 only.
+// The spec is strict: any deviation from the format means the header is
+// invalid and the receiver MUST start a new trace as if it weren't there.
+// We return the trace-id formatted as a UUID so it can land in
+// `trace.parent_id` directly; the parent-id and trace-flags fields are
+// validated but not surfaced — pipework's parent_id wiring uses the
+// distributed trace-id, not the W3C parent-span-id.
+//
+// Spec: https://www.w3.org/TR/trace-context/#traceparent-header
+const TRACE_ID_RE = /^[0-9a-f]{32}$/;
+const PARENT_ID_RE = /^[0-9a-f]{16}$/;
+const FLAGS_RE = /^[0-9a-f]{2}$/;
+const TRACE_ID_ZERO = '0'.repeat(32);
+const PARENT_ID_ZERO = '0'.repeat(16);
+/** Parses a `traceparent` header value; returns `null` for missing or malformed input. */
+export function parseTraceparent(header) {
+    if (typeof header !== 'string')
+        return null;
+    const parts = header.split('-');
+    if (parts.length !== 4)
+        return null;
+    const [version, traceId, parentId, flags] = parts;
+    if (version !== '00')
+        return null;
+    if (!TRACE_ID_RE.test(traceId) || traceId === TRACE_ID_ZERO)
+        return null;
+    if (!PARENT_ID_RE.test(parentId) || parentId === PARENT_ID_ZERO)
+        return null;
+    if (!FLAGS_RE.test(flags))
+        return null;
+    return { traceId: formatAsUuid(traceId) };
+}
+function formatAsUuid(hex32) {
+    return `${hex32.slice(0, 8)}-${hex32.slice(8, 12)}-${hex32.slice(12, 16)}-${hex32.slice(16, 20)}-${hex32.slice(20, 32)}`;
+}
+//# sourceMappingURL=parse-traceparent.js.map

package/dist/trace/entry/parse-traceparent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-traceparent.js","sourceRoot":"","sources":["../../../src/trace/entry/parse-traceparent.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AACxE,0EAA0E;AAC1E,+DAA+D;AAC/D,uEAAuE;AACvE,oEAAoE;AACpE,oDAAoD;AACpD,EAAE;AACF,gEAAgE;AAEhE,MAAM,WAAW,GAAG,gBAAgB,CAAA;AACpC,MAAM,YAAY,GAAG,gBAAgB,CAAA;AACrC,MAAM,QAAQ,GAAG,eAAe,CAAA;AAChC,MAAM,aAAa,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AACpC,MAAM,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAQrC,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,MAAqC;IACpE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,KAAyC,CAAA;IACrF,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACjC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,KAAK,aAAa;QAAE,OAAO,IAAI,CAAA;IACxE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,QAAQ,KAAK,cAAc;QAAE,OAAO,IAAI,CAAA;IAC5E,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAA;AAC1H,CAAC"}

package/dist/trace/entry/trace-context.d.ts

@@ -0,0 +1,19 @@
+import type { StepBuffer } from '../runtime/step-buffer.js';
+/** The ingress point a trace was opened at. Mirrors `traceFields.entryKind`. */
+export type TraceEntryKind = 'http' | 'job' | 'cron' | 'test';
+export interface TraceContext {
+    /** This trace's id — the `trace.id` of the row opened at the entry. */
+    readonly id: string;
+    /** The root of the trace tree. Equals `id` for a root trace. */
+    readonly rootId: string;
+    /** The UTC calendar day the trace opened — the partition its row lives in. */
+    readonly openedDay: string;
+    /**
+     * Resolves once the opening `INSERT` has settled. The closing `UPDATE` waits
+     * on this so it can never race ahead of the row it means to close.
+     */
+    readonly persisted: Promise<void>;
+    /** The in-memory `trace_step` buffer flow steps record into — drained at close. */
+    readonly buffer: StepBuffer;
+}
+//# sourceMappingURL=trace-context.d.ts.map

package/dist/trace/entry/trace-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-context.d.ts","sourceRoot":"","sources":["../../../src/trace/entry/trace-context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAA;AAE3D,gFAAgF;AAChF,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAA;AAE7D,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAA;IACjC,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAA;CAC5B"}

package/dist/trace/entry/trace-context.js

@@ -0,0 +1,5 @@
+// The trace's runtime handle on the Flow. Every Flow that runs under tracing
+// carries one; flow steps record `trace_step` rows into `buffer`, and a child
+// entry reads `id` / `rootId` to wire itself into the trace tree.
+export {};
+//# sourceMappingURL=trace-context.js.map

package/dist/trace/entry/trace-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-context.js","sourceRoot":"","sources":["../../../src/trace/entry/trace-context.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,kEAAkE"}

package/dist/trace/entry/tracing-enabled.d.ts

@@ -0,0 +1,4 @@
+import type { Manifold } from '../../core/pipework.js';
+/** Whether trace rows should be opened for this manifold's entries. */
+export declare function isTracingEnabled(instance: Manifold): boolean;
+//# sourceMappingURL=tracing-enabled.d.ts.map

package/dist/trace/entry/tracing-enabled.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing-enabled.d.ts","sourceRoot":"","sources":["../../../src/trace/entry/tracing-enabled.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAEtD,uEAAuE;AACvE,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAE5D"}

package/dist/trace/entry/tracing-enabled.js

@@ -0,0 +1,8 @@
+// Tracing is opt-in: a Blueprint with no `trace` block runs untraced and pays
+// zero overhead at the ingress points. Configuring `trace` — even as `{}`, which
+// resolves entirely to defaults — turns it on.
+/** Whether trace rows should be opened for this manifold's entries. */
+export function isTracingEnabled(instance) {
+    return instance.config.raw.trace !== undefined;
+}
+//# sourceMappingURL=tracing-enabled.js.map

package/dist/trace/entry/tracing-enabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing-enabled.js","sourceRoot":"","sources":["../../../src/trace/entry/tracing-enabled.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,+CAA+C;AAI/C,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,QAAkB;IACjD,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAA;AAChD,CAAC"}

package/dist/trace/partition/plan.d.ts

@@ -3,6 +3,8 @@ export interface TracePartitionConfig {
     readonly hotRetentionDays: number;
     /** Days of cold partitions kept for `trace_retained` / `trace_step_retained`. */
     readonly errorRetentionDays: number;
+    /** Days of audit partitions kept for `audit_record` — independent of trace storage. */
+    readonly auditRetentionDays: number;
     /** Days of partitions pre-created ahead of today so writes never race creation. */
     readonly partitionLeadDays: number;
 }

package/dist/trace/partition/plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/plan.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAuBvE"}
+{"version":3,"file":"plan.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/plan.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,iFAAiF;IACjF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAA;IACnC,mFAAmF;IACnF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,iFAAiF;AACjF,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,YAAY,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;IACrC,gFAAgF;IAChF,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;CAC5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAuBvE"}

package/dist/trace/partition/plan.js

@@ -20,7 +20,7 @@ export function planPartitions(input) {
     const create = [];
     const drop = [];
     for (const { parent, retention } of PARTITIONED_TRACE_TABLES) {
-        const retentionDays = retention === 'hot' ? config.hotRetentionDays : config.errorRetentionDays;
+        const retentionDays = retentionDaysFor(retention, config);
         const cutoff = addDays(today, -retentionDays);
         const existing = input.existing.get(parent) ?? new Set();
         for (const day of dayRange(cutoff, addDays(today, config.partitionLeadDays))) {
@@ -36,4 +36,11 @@ export function planPartitions(input) {
     }
     return { create, drop };
 }
+function retentionDaysFor(retention, config) {
+    switch (retention) {
+        case 'hot': return config.hotRetentionDays;
+        case 'cold': return config.errorRetentionDays;
+        case 'audit': return config.auditRetentionDays;
+    }
+}
 //# sourceMappingURL=plan.js.map

package/dist/trace/partition/plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/trace/partition/plan.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qEAAqE;AACrE,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAA;AACtD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AA8BnD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,MAAM,IAAI,GAAmB,EAAE,CAAA;IAE/B,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,wBAAwB,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAA;QAC/F,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QAEhE,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC"}
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/trace/partition/plan.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,qEAAqE;AACrE,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,wBAAwB,EAAuB,MAAM,aAAa,CAAA;AAC3E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAgCnD;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAyB;IACtD,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IACxB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,MAAM,MAAM,GAAmB,EAAE,CAAA;IACjC,MAAM,IAAI,GAAmB,EAAE,CAAA;IAE/B,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,wBAAwB,EAAE,CAAC;QAC7D,MAAM,aAAa,GAAG,gBAAgB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,CAAA;QAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,EAAU,CAAA;QAEhE,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;YACvC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QAC7D,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,MAAM;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACzB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAyB,EAAE,MAA4B;IAC/E,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC,gBAAgB,CAAA;QAC1C,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,kBAAkB,CAAA;QAC7C,KAAK,OAAO,CAAC,CAAC,OAAO,MAAM,CAAC,kBAAkB,CAAA;IAChD,CAAC;AACH,CAAC"}

package/dist/trace/partition/schedule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/schedule.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAEhD,eAAO,MAAM,+BAA+B,yCAAyC,CAAA;AAErF,kFAAkF;AAClF,eAAO,MAAM,gCAAgC,eAAe,CAAA;AAE5D,kGAAkG;AAClG,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxF;AAED,wBAAsB,iCAAiC,CACrD,SAAS,EAAE,aAAa,EACxB,EAAE,EAAE,EAAE,EACN,IAAI,GAAE,MAAyC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAEf"}
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/schedule.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAEhD,eAAO,MAAM,+BAA+B,yCAAyC,CAAA;AAErF,kFAAkF;AAClF,eAAO,MAAM,gCAAgC,eAAe,CAAA;AAE5D,kGAAkG;AAClG,UAAU,aAAa;IACrB,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACxF;AAED,wBAAsB,iCAAiC,CACrD,SAAS,EAAE,aAAa,EACxB,EAAE,EAAE,EAAE,EACN,IAAI,GAAE,MAAyC,GAC9C,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/trace/partition/schedule.js

@@ -1,7 +1,9 @@
-// Registers partition maintenance as a recurring job on the cron scheduler.
-// The startup hook covers the boot moment; this keeps partitions rolling
-// forward for a long-lived process. The job body is `syncTracePartitions` —
-// the consumer's worker dispatch routes `TRACE_PARTITION_MAINTENANCE_JOB` to it.
+// Registers trace maintenance as a recurring job on the cron scheduler. The
+// startup hook covers the boot moment; this keeps things rolling forward for a
+// long-lived process. The consumer's worker dispatch routes
+// `TRACE_PARTITION_MAINTENANCE_JOB` to a body that runs both `syncTracePartitions`
+// (rolls day partitions forward, drops retired ones) and `expireStaleTraces`
+// (force-closes orphan traces past their hot retention window — Q7).
 export const TRACE_PARTITION_MAINTENANCE_JOB = 'pipework.trace.partition-maintenance';
 /** Daily at 01:10 UTC — past the midnight day rollover, before business hours. */
 export const TRACE_PARTITION_MAINTENANCE_CRON = '10 1 * * *';

package/dist/trace/partition/schedule.js.map

@@ -1 +1 @@
-{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../../src/trace/partition/schedule.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,4EAA4E;AAC5E,iFAAiF;AAIjF,MAAM,CAAC,MAAM,+BAA+B,GAAG,sCAAsC,CAAA;AAErF,kFAAkF;AAClF,MAAM,CAAC,MAAM,gCAAgC,GAAG,YAAY,CAAA;AAO5D,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,SAAwB,EACxB,EAAM,EACN,OAAe,gCAAgC;IAE/C,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/E,CAAC"}
+{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../../src/trace/partition/schedule.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAC/E,4DAA4D;AAC5D,mFAAmF;AACnF,6EAA6E;AAC7E,qEAAqE;AAIrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,sCAAsC,CAAA;AAErF,kFAAkF;AAClF,MAAM,CAAC,MAAM,gCAAgC,GAAG,YAAY,CAAA;AAO5D,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,SAAwB,EACxB,EAAM,EACN,OAAe,gCAAgC;IAE/C,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,IAAI,EAAE,CAAC,CAAA;AAC/E,CAAC"}

package/dist/trace/partition/startup-hook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-hook.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/startup-hook.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAEhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAErD,eAAO,MAAM,yBAAyB,gCAAgC,CAAA;AAEtE,wBAAgB,+BAA+B,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,GAAG,WAAW,CAOjG"}
+{"version":3,"file":"startup-hook.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/startup-hook.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,+BAA+B,CAAA;AAGhE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAErD,eAAO,MAAM,yBAAyB,gCAAgC,CAAA;AAEtE,wBAAgB,+BAA+B,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,oBAAoB,GAAG,WAAW,CAQjG"}

package/dist/trace/partition/startup-hook.js

@@ -1,14 +1,18 @@
-// Partition maintenance as a startup hook. Running it at boot guarantees the
+// Trace maintenance as a startup hook. Running it at boot guarantees the
 // near-term partitions exist before the app takes its first request — a fresh
 // deploy on a new day must not write a trace into a partition that doesn't
-// exist yet. The cron schedule keeps it current after that.
+// exist yet — and clears any orphan traces left open by a process that died
+// without closing them (Q7 expiry). The cron schedule keeps both current after
+// that.
 import { syncTracePartitions } from './sync.js';
+import { expireStaleTraces } from '../runtime/expire-stale-traces.js';
 export const TRACE_PARTITION_HOOK_NAME = 'trace-partition-maintenance';
 export function createTracePartitionStartupHook(db, config) {
     return {
         name: TRACE_PARTITION_HOOK_NAME,
         async execute() {
             await syncTracePartitions(db, config);
+            await expireStaleTraces(db);
         },
     };
 }

package/dist/trace/partition/startup-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"startup-hook.js","sourceRoot":"","sources":["../../../src/trace/partition/startup-hook.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,4DAA4D;AAI5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAG/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAA;AAEtE,MAAM,UAAU,+BAA+B,CAAC,EAAM,EAAE,MAA4B;IAClF,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,OAAO;YACX,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACvC,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"startup-hook.js","sourceRoot":"","sources":["../../../src/trace/partition/startup-hook.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,QAAQ;AAIR,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAGrE,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAA;AAEtE,MAAM,UAAU,+BAA+B,CAAC,EAAM,EAAE,MAA4B;IAClF,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,KAAK,CAAC,OAAO;YACX,MAAM,mBAAmB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;YACrC,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAA;QAC7B,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/trace/partition/tables.d.ts

@@ -1,4 +1,4 @@
-export type RetentionClass = 'hot' | 'cold';
+export type RetentionClass = 'hot' | 'cold' | 'audit';
 export interface PartitionedTraceTable {
     /** The parent table's wire name — partitions are children of this. */
     readonly parent: string;

package/dist/trace/partition/tables.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/tables.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,CAAA;AAE3C,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CACnC;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAKpE,CAAA"}
+{"version":3,"file":"tables.d.ts","sourceRoot":"","sources":["../../../src/trace/partition/tables.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;AAErD,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAA;CACnC;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,qBAAqB,EAMpE,CAAA"}

package/dist/trace/partition/tables.js

@@ -1,16 +1,24 @@
-// The four partitioned trace tables and the retention window each one obeys.
-// Hot tables (`trace`, `trace_step`) keep `hotRetentionDays` of partitions;
-// cold tables (`trace_retained`, `trace_step_retained`) keep
-// `errorRetentionDays`. Partition creation uses the same lead window for all
-// four — copy-on-error can land a cold row on any day a hot row exists.
+// The partitioned tables the substrate manages, plus the retention window each
+// one obeys. Three retention classes share one partition lifecycle:
+//
+//   - **hot** (`trace`, `trace_step`) — `hotRetentionDays`, short-lived.
+//   - **cold** (`trace_retained`, `trace_step_retained`) — `errorRetentionDays`,
+//     copy-on-error survives past hot retention.
+//   - **audit** (`audit_record`) — `auditRetentionDays`, long / indefinite; the
+//     audit projection lives independently of trace storage.
+//
+// Partition creation uses the same `partitionLeadDays` for all three classes —
+// inserts on any class must never race partition creation.
 import { trace } from '../schema/trace.js';
 import { traceStep } from '../schema/trace-step.js';
 import { traceRetained } from '../schema/trace-retained.js';
 import { traceStepRetained } from '../schema/trace-step-retained.js';
+import { auditRecord } from '../../audit/schema/audit-record.js';
 export const PARTITIONED_TRACE_TABLES = [
     { parent: trace.$name, retention: 'hot' },
     { parent: traceStep.$name, retention: 'hot' },
     { parent: traceRetained.$name, retention: 'cold' },
     { parent: traceStepRetained.$name, retention: 'cold' },
+    { parent: auditRecord.$name, retention: 'audit' },
 ];
 //# sourceMappingURL=tables.js.map

package/dist/trace/partition/tables.js.map

@@ -1 +1 @@
-{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../../src/trace/partition/tables.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,6DAA6D;AAC7D,6EAA6E;AAC7E,wEAAwE;AAExE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AAUpE,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACzC,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7C,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;CACvD,CAAA"}
+{"version":3,"file":"tables.js","sourceRoot":"","sources":["../../../src/trace/partition/tables.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oEAAoE;AACpE,EAAE;AACF,yEAAyE;AACzE,iFAAiF;AACjF,iDAAiD;AACjD,gFAAgF;AAChF,6DAA6D;AAC7D,EAAE;AACF,+EAA+E;AAC/E,2DAA2D;AAE3D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,WAAW,EAAE,MAAM,oCAAoC,CAAA;AAUhE,MAAM,CAAC,MAAM,wBAAwB,GAAqC;IACxE,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACzC,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IAC7C,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;IAClD,EAAE,MAAM,EAAE,iBAAiB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE;IACtD,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE;CAClD,CAAA"}

package/dist/trace/runtime/expire-stale-traces.d.ts

@@ -0,0 +1,10 @@
+import type { DB } from '../../data/db/index.js';
+export interface ExpireStaleTracesResult {
+    /** Trace rows force-closed by this sweep (`open` past `expires_at`). */
+    readonly expired: number;
+    /** Rows newly inserted into `trace_retained` across all expired traces. */
+    readonly retained: number;
+}
+/** Force-closes every trace whose `expires_at` has passed; copies each to the cold set. */
+export declare function expireStaleTraces(db: DB, now?: Date): Promise<ExpireStaleTracesResult>;
+//# sourceMappingURL=expire-stale-traces.d.ts.map

package/dist/trace/runtime/expire-stale-traces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expire-stale-traces.d.ts","sourceRoot":"","sources":["../../../src/trace/runtime/expire-stale-traces.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,wBAAwB,CAAA;AAIhD,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B;AAED,2FAA2F;AAC3F,wBAAsB,iBAAiB,CACrC,EAAE,EAAE,EAAE,EACN,GAAG,GAAE,IAAiB,GACrB,OAAO,CAAC,uBAAuB,CAAC,CAuBlC"}

package/dist/trace/runtime/expire-stale-traces.js

@@ -0,0 +1,36 @@
+// Q7 expiry sweep. A trace must not outlive its own oldest day-partition: if
+// a trace is still `open` past `expires_at` (stamped as `opened_at +
+// hotRetentionDays` at entry), the entry leaked or the job hung — the process
+// that opened the trace may be long dead, so there is no in-memory buffer to
+// flush. The sweep force-closes those orphans at the database level: stamps
+// `status = 'expired'` and `closed_at`, then copies the trace to the cold set
+// (treated as an error for Q4) before the next partition retirement drops the
+// hot row.
+//
+// `force_now` is injectable so the sweep is testable without mocking the
+// clock — production calls pass nothing and use `NOW()`.
+import { sql } from '../../data/db/sql.js';
+import { getBaseLogger } from '../../core/logging/index.js';
+import { copyTraceOnError } from '../retain/copy-on-error.js';
+/** Force-closes every trace whose `expires_at` has passed; copies each to the cold set. */
+export async function expireStaleTraces(db, now = new Date()) {
+    // postgres.js's raw `sql` parameters carry no column-type hint, so a Date
+    // binds as an unsupported type for `timestamptz`. The boundary cast to an
+    // ISO string keeps the production signature on `Date` without losing
+    // precision (compared as a literal, Postgres parses it back to `timestamptz`).
+    const nowIso = now.toISOString();
+    const rows = await db.execute(sql `
+    UPDATE "trace"
+    SET "status" = 'expired', "closed_at" = ${nowIso}
+    WHERE "status" = 'open' AND "expires_at" <= ${nowIso}
+    RETURNING "id"
+  `);
+    const ids = rows.map(r => r['id']);
+    if (ids.length === 0)
+        return { expired: 0, retained: 0 };
+    getBaseLogger().error({ count: ids.length, traceIds: ids }, 'Force-closed expired traces — entries leaked or hung past their hot retention window');
+    const copyResults = await Promise.all(ids.map(id => copyTraceOnError(db, id)));
+    const retained = copyResults.reduce((sum, r) => sum + r.traces, 0);
+    return { expired: ids.length, retained };
+}
+//# sourceMappingURL=expire-stale-traces.js.map

package/dist/trace/runtime/expire-stale-traces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expire-stale-traces.js","sourceRoot":"","sources":["../../../src/trace/runtime/expire-stale-traces.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,qEAAqE;AACrE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,WAAW;AACX,EAAE;AACF,yEAAyE;AACzE,yDAAyD;AAEzD,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAA;AAE1C,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAA;AAS7D,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,EAAM,EACN,MAAY,IAAI,IAAI,EAAE;IAEtB,0EAA0E;IAC1E,0EAA0E;IAC1E,qEAAqE;IACrE,+EAA+E;IAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,WAAW,EAAE,CAAA;IAChC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;8CAEW,MAAM;kDACF,MAAM;;GAErD,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAW,CAAC,CAAA;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;IAExD,aAAa,EAAE,CAAC,KAAK,CACnB,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,EACpC,sFAAsF,CACvF,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IAClE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC1C,CAAC"}

package/dist/trace/runtime/flow-step.d.ts

@@ -0,0 +1,6 @@
+import type { FlowStepMeta } from './step-meta.js';
+type AnyFunction = (...args: any[]) => any;
+/** Wraps `impl` so that, under an active traced Flow, each call records a `trace_step`. */
+export declare function __flowStep<F extends AnyFunction>(meta: FlowStepMeta, impl: F): F;
+export {};
+//# sourceMappingURL=flow-step.d.ts.map

package/dist/trace/runtime/flow-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-step.d.ts","sourceRoot":"","sources":["../../../src/trace/runtime/flow-step.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAqB,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAKrE,KAAK,WAAW,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,GAAG,CAAA;AAE1C,2FAA2F;AAC3F,wBAAgB,UAAU,CAAC,CAAC,SAAS,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CA2DhF"}

package/dist/trace/runtime/flow-step.js

@@ -0,0 +1,122 @@
+// `__flowStep` — the value-wrapping runtime for a flow step. The build
+// transformer (component 5) renames each documented function and rebinds its
+// public name through this wrapper: `export const runJob = __flowStep(meta,
+// runJobImpl)`. No body is rewritten; the wrapper is the whole instrumentation.
+//
+// Off the traced path it is a pass-through with one `getContext()` lookup and a
+// branch — there is no active Flow, or the Flow opened no trace, so there is
+// nothing to record. On the traced path it brackets the implementation with a
+// `trace_step`: a `seq`, a parent link, start/end timing, and the outcome.
+// Once a trace truncates (Q7), every later step takes the pass-through path
+// too, so a truncated trace costs exactly what an untraced one does.
+//
+// Tier-2 input capture (Q5) runs at `begin` time, before the implementation
+// gets a chance to mutate the arguments. Each parameter's projection — baked
+// into `meta.capture` by the transformer — turns its argument into a
+// trace-safe payload, which the bounded serializer caps for depth, fan-out,
+// string length, and redaction before staging onto `trace_step.captured_inputs`.
+// The trace's `captureInputs` kill-switch (resolved at trace open from
+// `config.trace.captureInputs`) suppresses the whole capture path while
+// leaving Tier-1 (timing, status, error) untouched.
+//
+// `meta` is a literal baked in at transform time — the wrapper never computes
+// the step's identity.
+import { getContext } from '../../request/context/store.js';
+import { serializeForTrace } from '../capture/bounded-serializer.js';
+import { isThenable } from './thenable.js';
+import { truncateTrace } from './truncate-trace.js';
+import { emitReadTouches } from '../../data/write/audit/read-touches.js';
+/** Wraps `impl` so that, under an active traced Flow, each call records a `trace_step`. */
+export function __flowStep(meta, impl) {
+    function traced(...args) {
+        const flow = getContext();
+        if (flow === undefined || flow.trace === null) {
+            return impl.apply(this, args);
+        }
+        const ctx = flow.trace;
+        const buffer = ctx.buffer;
+        if (buffer.truncated) {
+            return impl.apply(this, args);
+        }
+        const capturedInputs = buffer.captureInputs && meta.capture !== undefined
+            ? captureArgs(args, meta.capture)
+            : null;
+        const begun = buffer.begin(meta.ref, capturedInputs, meta.touches ?? []);
+        // `begin` returns null for the call that blows the step cap — that call,
+        // and every step after it, runs untraced. The transition fires `truncateTrace`
+        // exactly once: the `buffer.truncated` short-circuit above catches every
+        // subsequent call before it reaches `begin`.
+        if (begun === null) {
+            void truncateTrace(flow.instance, ctx);
+            return impl.apply(this, args);
+        }
+        let result;
+        try {
+            result = impl.apply(this, args);
+        }
+        catch (err) {
+            buffer.complete(begun, 'error', err);
+            throw err;
+        }
+        if (isThenable(result)) {
+            return result.then(async (value) => {
+                buffer.complete(begun, 'ok', null);
+                await emitReadTouchesIfNeeded(flow, begun);
+                return value;
+            }, (err) => {
+                buffer.complete(begun, 'error', err);
+                throw err;
+            });
+        }
+        buffer.complete(begun, 'ok', null);
+        // Sync impl: can't change the wrapper's return type to Promise, so fire-and-
+        // forget. The audit emitter swallows its own errors, so this won't yield an
+        // unhandled rejection; the trade-off is that a sync `@touches` step's audit
+        // row may land after control has returned to the caller. Sync impls under
+        // `@touches` are rare anyway (pipe.* writes are all async).
+        void emitReadTouchesIfNeeded(flow, begun);
+        return result;
+    }
+    return traced;
+}
+/* eslint-enable @typescript-eslint/no-explicit-any */
+/**
+ * Read-touches gate. The CTE-form write path already covered the write case
+ * (flips `wroteForAudit` via `markWrote()`); this fires the complement —
+ * a step that declared `@touches` but performed no `pipe.*` write. Empty
+ * `touches` means no audit projection at all and short-circuits earlier in
+ * the emitter.
+ */
+function emitReadTouchesIfNeeded(flow, begun) {
+    if (begun.touches.length === 0 || begun.wroteForAudit)
+        return Promise.resolve();
+    return emitReadTouches(flow, begun);
+}
+/**
+ * Projects + bounded-serializes one captured payload per parameter, in
+ * declaration order. A `null` projection slot means the parameter has no
+ * registry-derived projection (primitive, `any`, or no `.traceSafe()` entry)
+ * and the raw arg is handed straight to the serializer. A projection that
+ * returns `undefined` is preserved as a `null` slot — fail-closed: an unsafe
+ * structured type with no marked-safe fields contributes no payload.
+ */
+function captureArgs(args, projections) {
+    const out = [];
+    // Pair by parameter index. Extra args (a variadic tail without a matching
+    // projection) fall through to the raw-serializer path; extra projections
+    // (impl invoked with fewer than declared args) project `undefined` — both
+    // paths converge on the bounded serializer's `undefined` handling.
+    const count = Math.max(args.length, projections.length);
+    for (let i = 0; i < count; i++) {
+        const projection = projections[i] ?? null;
+        const raw = args[i];
+        const projected = projection === null ? raw : projection(raw);
+        if (projected === undefined) {
+            out.push(null);
+            continue;
+        }
+        out.push(serializeForTrace(projected));
+    }
+    return out;
+}
+//# sourceMappingURL=flow-step.js.map

package/dist/trace/runtime/flow-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-step.js","sourceRoot":"","sources":["../../../src/trace/runtime/flow-step.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,8EAA8E;AAC9E,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,qEAAqE;AACrE,4EAA4E;AAC5E,iFAAiF;AACjF,uEAAuE;AACvE,wEAAwE;AACxE,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,uBAAuB;AAEvB,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AAQxE,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAwB,IAAkB,EAAE,IAAO;IAC3E,SAAS,MAAM,CAAgB,GAAG,IAAmB;QACnD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAA;QACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAkB,CAAA;QAChD,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAA;QACtB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QACzB,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAkB,CAAA;QAChD,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YACvE,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;YACjC,CAAC,CAAC,IAAI,CAAA;QAER,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAA;QACxE,yEAAyE;QACzE,+EAA+E;QAC/E,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,KAAK,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACtC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAkB,CAAA;QAChD,CAAC;QAED,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;YACpC,MAAM,GAAG,CAAA;QACX,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC,IAAI,CAChB,KAAK,EAAE,KAAc,EAAE,EAAE;gBACvB,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;gBAClC,MAAM,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;gBAC1C,OAAO,KAAK,CAAA;YACd,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;gBACf,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,CAAA;gBACpC,MAAM,GAAG,CAAA;YACX,CAAC,CACe,CAAA;QACpB,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,6EAA6E;QAC7E,4EAA4E;QAC5E,4EAA4E;QAC5E,0EAA0E;QAC1E,4DAA4D;QAC5D,KAAK,uBAAuB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACzC,OAAO,MAAuB,CAAA;IAChC,CAAC;IAED,OAAO,MAAW,CAAA;AACpB,CAAC;AACD,sDAAsD;AAEtD;;;;;;GAMG;AACH,SAAS,uBAAuB,CAAC,IAAU,EAAE,KAAgB;IAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC/E,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;AACrC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAClB,IAAwB,EACxB,WAAoD;IAEpD,MAAM,GAAG,GAAc,EAAE,CAAA;IACzB,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,SAAS,GAAG,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC7D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACd,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;IACxC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/trace/runtime/flush-steps.d.ts

@@ -0,0 +1,5 @@
+import type { Manifold } from '../../core/pipework.js';
+import type { PendingStep } from './step-buffer.js';
+/** Inserts `steps` into `trace_step` in a single batch. Resolves once the write settles. */
+export declare function flushSteps(instance: Manifold, steps: readonly PendingStep[]): Promise<void>;
+//# sourceMappingURL=flush-steps.d.ts.map

package/dist/trace/runtime/flush-steps.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flush-steps.d.ts","sourceRoot":"","sources":["../../../src/trace/runtime/flush-steps.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAA;AAGtD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAEnD,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3F"}

package/dist/trace/runtime/flush-steps.js

@@ -0,0 +1,23 @@
+// Batch-writes a buffered set of `trace_step` rows. The write is fire-and-
+// forget — the close path doesn't block on it, and a failure must not break
+// the request: a missing step row is a degraded trace, not a degraded user
+// flow. Errors land in the base logger so an operator can see what was lost.
+//
+// The write goes through `instance.pool` directly, never the request
+// transaction — an errored request rolls back, but its trace steps must
+// survive to be inspected.
+import { getBaseLogger } from '../../core/logging/index.js';
+import { traceStep } from '../schema/trace-step.js';
+/** Inserts `steps` into `trace_step` in a single batch. Resolves once the write settles. */
+export function flushSteps(instance, steps) {
+    if (steps.length === 0)
+        return Promise.resolve();
+    const db = instance.pool.getOrCreate(instance.config.database()).drizzle;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Drizzle's insert needs the concrete runtime table type
+    return db.insert(traceStep.table()).values([...steps])
+        .then(() => undefined)
+        .catch((err) => {
+        getBaseLogger().error({ err, traceId: steps[0].traceId, steps: steps.length }, 'Failed to persist trace steps — the trace is missing step rows');
+    });
+}
+//# sourceMappingURL=flush-steps.js.map

package/dist/trace/runtime/flush-steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flush-steps.js","sourceRoot":"","sources":["../../../src/trace/runtime/flush-steps.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,qEAAqE;AACrE,wEAAwE;AACxE,2BAA2B;AAG3B,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAA;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAA;AAGnD,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,QAAkB,EAAE,KAA6B;IAC1E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAChD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAA;IACxE,wHAAwH;IACxH,OAAQ,EAAU,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;SAC5D,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;SACrB,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,aAAa,EAAE,CAAC,KAAK,CACnB,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EACxD,gEAAgE,CACjE,CAAA;IACH,CAAC,CAAC,CAAA;AACN,CAAC"}