qyl-mcp-server 11.1.4 → 17.0.0

package/README.md

@@ -1,70 +1,38 @@
 # qyl-mcp-server
 
-MCP tools over a live [qyl](https://github.com/ANcpLua/qyl) collector — traces,
-logs, metrics, sessions and CI runs, plus the Trace Explorer and MCP Dashboard
-viewers for hosts that render MCP Apps.
+MCP tools over a live [qyl](https://github.com/ANcpLua/qyl) Collector — traces, logs, metrics,
+sessions and CI runs — for agents investigating a running system. The Collector computes every
+analysis; this server validates, scopes and frames the calls.
 
 ```bash
 bunx qyl-mcp-server --stdio    # stdio MCP server
-bunx qyl-mcp-server      # Streamable HTTP on 127.0.0.1:3001
+bunx qyl-mcp-server            # Streamable HTTP on 127.0.0.1:3001
 ```
 
-Use a modern or 2025-era MCP client. Point it at a collector:
+`npx` and `pnpm dlx` also work when Bun 1.4 or newer is installed; the executable runs on Bun, the
+library exports `qyl-mcp-server` and `qyl-mcp-server/auth` support Node 24. Point it at a Collector:
 
 ```bash
 export QYL_COLLECTOR_URL=http://127.0.0.1:5100
-export QYL_API_KEY='your-collector-key'   # omit for an unsecured local collector
+export QYL_API_KEY='your-collector-key'   # omit for an unsecured local Collector
 ```
 
-`QYL_API_KEY` is an *outgoing* collector credential — it does not authenticate
-incoming MCP clients, which is why the local server binds to loopback only.
+`QYL_API_KEY` is an *outgoing* Collector credential; it does not authenticate incoming MCP
+clients, which is why the local server binds to loopback only.
 
-There is also a hosted instance at `https://mcp.qyl.at/mcp` needing no install.
-It is an OAuth 2.1 resource server, so an unauthenticated request answers `401`
-with an RFC 9728 protected-resource document that a stock MCP client follows on
-its own.
+The hosted instance is `https://mcp.qyl.at/mcp`. It is an OAuth 2.1 resource server: an
+unauthenticated request answers `401` with an RFC 9728 protected-resource document naming issuer
+`https://qyl-eu.eu.auth0.com/` and scopes `qyl:read qyl:write qyl:delete`, which a stock MCP
+client follows on its own.
 
-Both use MCP TypeScript SDK v2: Streamable HTTP through `createMcpHandler`
-and stdio through `serveStdio`, with their documented compatibility defaults.
-One factory serves revision `2026-07-28` and supported 2025-era requests.
-The HTTP server serves a product page at `/`; `/mcp` is the only protocol
-endpoint.
-
-## Hosted authentication
-
-The hosted Auth0 profile requires CIMD and DCR discovery, Authorization Code
-with PKCE S256, both `private_key_jwt` and `none` for ChatGPT CIMD compatibility,
-`none` for Claude CIMD, and issuer identification. Auth0 owns registration and token
-issuance; this server validates resource-bound RFC 9068 access tokens on every
-MCP request. It rejects malformed/query credentials, invalid tokens and
-insufficient scopes with distinct 400/401/403 responses. Every request needs
-`qyl:read`. The initial 401 requests `qyl:read qyl:write qyl:delete` so new
-connections can authorize the complete tool set. A write tool called without `qyl:write` or `qyl:delete` gets a
-`403` with `error="insufficient_scope"` naming the scopes to request, in both
-protocol eras, before the handler runs.
-
-Optional resource-server integrations are selected explicitly:
-
-```sh
-MCP_AUTH_EXTENSIONS=enterprise-managed-authorization@1.0.0,oauth-client-credentials@1.0.0
-```
-
-Enterprise-managed authorization is stable upstream; client credentials is a
-draft extension. Both preserve the core token verifier and require matching
-Auth0 capabilities and separately provisioned client grants. Integration versions
-are independent of the MCP wire version. Embedders can use the exported
-`qyl-mcp-server/auth` composition API for additional declarative modules and
-explicit scope hierarchies.
-
-See the [deployment and authentication guide](https://github.com/ANcpLua/qyl.mcp#authentication)
-for Auth0 configuration, extension responsibilities, and verification. Auth0
-requires Enterprise for `private_key_jwt`. Neither a provider capability flag nor
-an enabled module proves a client has been provisioned.
+Both use MCP TypeScript SDK v2: Streamable HTTP through `createMcpHandler` and stdio through
+`serveStdio`. One factory serves revision `2026-07-28` and negotiates down for 2025-era clients
+that send `initialize`. The HTTP server answers `/mcp`, `/healthz`, the OAuth discovery documents
+and `/.well-known/openai-apps-challenge`; every other path, `/` included, is `404`.
 
 ## Tools
 
-The server publishes 32 tools, including one app-only read tool. Reads use the collector's
-analysis queries and the generated qyl API contracts.
+The committed [`tool-manifest.snapshot.json`](tool-manifest.snapshot.json) is the tool contract.
 
 | Purpose | Tools |
 | --- | --- |
@@ -73,90 +41,116 @@ analysis queries and the generated qyl API contracts.
 | Read executions | `list_sessions`, `list_traces`, `get_trace`, `search_logs`, `ci_log` |
 | Read metrics | `list_metrics`, `get_metric_series`, `query_metric` |
 | Saved questions | `list_saved_queries`, `run_saved_query` |
-| Interactive views | `display_traces`, `display_mcp_dashboard`, `fetch_telemetry` (app-only) |
-| Write project records | `create_annotation`, `update_annotation`, `create_saved_query`, `update_saved_query`, `delete`, `update_failure_status` |
-
-Read tools accept an absolute RFC 3339 time window or `lookback_minutes` and report the
-resolved `window` and `coverage`: examined, matched and returned counts, truncation,
-scan completeness and observation time. Unknown counts are null. Filtering happens before
-pagination; reuse an opaque `next_cursor` with the same filters to continue a page.
-
-Shared matchers support `eq`, `neq`, `in`, `prefix`, `contains`, `exists`, `gt`, `gte`,
-`lt` and `lte`, with span, resource or log scope. Span durations are milliseconds;
-metrics retain their recorded units. Histogram percentiles identify their approximation,
-and cumulative counter changes account for resets. Verification reports insufficient
-traffic as pending rather than calling an unobserved failure fixed.
-
-`get_trace` supports all spans, errors, errors with ancestors, or the critical path,
-selected attributes and correlated logs. `display_traces` preserves the selected span
-and can compare two executions. Notes and bookmarks are created only through explicit
-viewer actions. `display_mcp_dashboard` uses the same MCP aggregates as `get_mcp_stats`,
-shows the numerator and denominator behind rates, classifies failures, and opens matching
-calls from aggregate selections. `fetch_telemetry` serves five app-only views: traces,
-trace, logs, MCP statistics and comparison, with incremental refresh and field selection.
-
-The 26 read tools carry `readOnlyHint: true`. Six write tools change annotations, saved
-queries or failure status in the caller's project. An annotation can target a trace, span,
-session or failure and has optional labels and a classification. A bookmark is a note
-labelled `bookmark`. Updates and deletes require the current `etag`; stale writes are
-rejected. Create calls reuse the stored result for 24 hours. Without an explicit
-`idempotency_key`, the server derives one from the project, operation and request
-body, so identical retries are safe. Supply a different key to deliberately create
-another identical record. No tool edits or deletes recorded telemetry.
+| Write project records | `create_annotation`, `update_annotation`, `create_saved_query`, `update_saved_query`, `delete_record`, `update_failure_status` |
+
+Read tools accept an absolute RFC 3339 time window or `lookback_minutes` and report the resolved
+`window` and `coverage`: examined, matched and returned counts, truncation, scan completeness and
+observation time. Unknown counts are null. Filtering happens before pagination; reuse an opaque
+`next_cursor` with the same filters to continue a page. Shared matchers support `eq`, `neq`, `in`,
+`prefix`, `contains`, `exists`, `gt`, `gte`, `lt` and `lte`, with span, resource or log scope. Span
+durations are milliseconds; metrics keep their recorded units. Histogram percentiles identify their
+approximation, cumulative counter changes account for resets, and verification reports
+insufficient traffic as pending rather than calling an unobserved failure fixed.
+
+`get_trace` returns all spans, errors, errors with ancestors, or the critical path, with selected
+attributes and correlated logs. `ci_log` reads telemetry from any CI following its emitter
+convention; `service_prefix` defaults to `qyl-ci`. `get_mcp_stats` reports MCP request totals, the
+numerator and denominator behind rates, failure classes, the window's 60 time buckets, per-tool
+requests, errors and latency, and simultaneous server, transport and method breakdowns. The `qyl-investigate` skill says which
+tool to start with; the server serves it through the MCP skills extension (`skills/list`,
+`skills/get`, `skill://qyl/qyl-investigate/SKILL.md`), and the build copies it from `skills/` into
+`dist/skills`.
+
+Every read tool carries `readOnlyHint: true`. The write tools change only records in the caller's
+Collector project: annotations (plain-text notes of at most 2000 characters on a trace, span,
+session or failure, with optional labels; a bookmark is a note labelled `bookmark`), saved queries
+(named filters for traces, logs or metrics) and the status of recorded failures (`open`,
+`resolved`, `ignored`, assignee, ignore-until). `delete_record` removes one annotation or saved
+query (`kind` is `annotation` or `saved_query`). Updates and deletes send the current `etag` as
+`If-Match`: a stale etag is refused with `precondition_failed`, a duplicate saved-query name with
+`conflict`. Create calls reuse the stored result for 24 hours; without an explicit
+`idempotency_key` the server derives one from the project, operation and request body. No tool
+edits or deletes recorded telemetry; retention alone removes it.
 
 `qyl:read` covers reads, `qyl:write` adds creation and updates, and `qyl:delete` permits
-`delete`. A missing scope returns the supported OAuth step-up challenge. Failed calls
-carry a stable code, retryability, the problem type and field-level validation details
-when available. Secrets are redacted before model text or structured content is returned.
-
-Every tool runs inside its request scope, forwarding cancellation to the collector.
-Requested progress reports completion; no logging notifications are sent to clients.
-Analysis reads require a live collector. Synthetic data is used only by test fixtures, and is never substituted when a collector fails.
-
-Every inbound `tools/call` on a local server — `--stdio`, or HTTP without
-`MCP_PUBLIC_URL` — records only its tool name, timing, status and error type,
-plus a server-generated execution ID, atomically in
-`~/.qyl/mcp-native-executions.json`. Arguments, request metadata, result bodies
-and error messages are not retained. Known version-1/2 files are reduced to
-this format on load; unreadable files still use the existing archive recovery
-path, and pre-existing archives are not purged. A public deployment (`MCP_PUBLIC_URL` set)
-records nothing to disk; that evidence file is a local developer artifact, not a
-multi-tenant audit log.
+`delete_record`. A missing scope returns the OAuth step-up challenge `403`
+`insufficient_scope` naming the scopes to request, in both protocol eras, before the handler runs.
+Failed calls carry a stable code, retryability, the problem type and field-level validation
+details when available. Secrets are redacted before model text, structured content or durable
+evidence. Every tool runs inside its request scope, forwarding cancellation to the Collector;
+requested progress reports completion. Analysis reads require a live Collector; synthetic data
+exists only in test fixtures.
+
+## Hosted authentication
+
+The hosted Auth0 profile is **CIMD or DCR + OAuth 2.1 Authorization Code with PKCE S256 + issuer
+identification**. ChatGPT's client metadata advertises `none` and `private_key_jwt` and uses the
+latter; Claude's CIMD is a public client using `none`. Auth0 owns registration and token issuance;
+the server validates resource-bound RFC 9068 access tokens (signature, issuer, resource audience,
+expiry and scopes) on every MCP request and rejects malformed or query credentials, invalid tokens
+and insufficient scopes with distinct `400`/`401`/`403` responses. Only the qyl production Auth0
+issuer is accepted. `/.well-known/oauth-protected-resource/mcp` and
+`/.well-known/oauth-protected-resource` describe the same `/mcp` resource.
+
+Operating a hosted deployment:
+
+1. Register the resource audience `<public-url>/mcp`, RS256 access tokens and the permissions
+   `qyl:read`, `qyl:write` and `qyl:delete`.
+2. Provision each client through its current CIMD document or DCR, keeping its actual callback and
+   authentication method. When DCR is enabled, set `dynamic_client_registration_security_mode` to
+   `strict`; the DCR endpoint is open to registration, so keep third-party API default permissions
+   empty.
+3. `qyl:read` exposes traces, logs, metrics, sessions and CI evidence; grant it only to intended
+   clients and users. `qyl:write` and `qyl:delete` reach only annotations, saved queries and failure
+   status in the caller's project, and the Collector key the server uses needs the Collector's
+   `write` and `delete` roles.
+4. Configure `MCP_PUBLIC_URL`, `MCP_BIND_HOST`, allowed hosts and origins, and the Collector URL and
+   key. Non-loopback serving requires a public URL and hosted authorization.
+
+`eng/auth0` in the repository records and reconciles the tenant's API scopes, named client grants
+and mapped-user permissions.
+
+Optional authorization extensions are selected explicitly:
+
+```sh
+MCP_AUTH_EXTENSIONS=enterprise-managed-authorization@1.0.0,oauth-client-credentials@1.0.0
+```
+
+`enterprise-managed-authorization@1.0.0` is stable and needs the JWT bearer and ID-JAG grant
+profile; `oauth-client-credentials@1.0.0` is a draft and needs client credentials with
+`private_key_jwt` (Auth0 Enterprise). Unknown versions and conflicting provider requirements are
+rejected; neither replaces the core verifier. Embedders compose further modules through
+`qyl-mcp-server/auth`.
+
+The alternative `MCP_AUTH_PROVIDER=cloudflare-access` mode (with `MCP_ACCESS_TEAM_DOMAIN`,
+`MCP_ACCESS_AUD` and `MCP_PUBLIC_URL`) validates `Cf-Access-Jwt-Assertion`: issuer, application
+audience, expiry and subject, with RS256 signatures. Its assertion carries no qyl scopes, so it
+grants the read tools only, and Auth0-backed Events cannot be enabled in it.
 
 ## Configuration
 
 | Variable | Meaning |
 | --- | --- |
-| `QYL_COLLECTOR_URL` | Collector read API base; default `http://127.0.0.1:5100`. Also the OTLP base when set. |
-| `QYL_API_KEY` | Collector credential for reads and OTLP; the write tools need the Collector's `write` and `delete` roles on it. Outgoing only. |
-| `QYL_PROJECT` | Server-owned collector project scope. Unset, the server sends no project-scope header, so the Collector's default project applies. Never accepted as tool input. This is the only place that states the default; other documents link here. |
-| `MCP_COLLECTOR_PROJECTS` | Optional secret JSON mapping validated Auth0 subjects to project-bound Collector keys; see account isolation below. |
-| `QYL_OTLP_ENDPOINT` | Optional OTLP base for self-telemetry. |
-| `QYL_MCP_TELEMETRY=0` | Disable MCP spans, metrics, and operation logs. |
-| `QYL_MCP_CAPTURE_CONTENT=1` | Workbench content capture; native incoming tool-call telemetry never supplies request or response bodies. |
-| `QYL_MCP_NATIVE_STATE_PATH` | Override the native execution-evidence path. |
-| `MCP_EVENTS_STORE` | Optional internal Events subscription file; leave unset for the shared ChatGPT/Claude deployment. |
-| `MCP_EVENTS_AUTH0_CLIENT_ID` / `MCP_EVENTS_AUTH0_CLIENT_SECRET` | Dedicated Management API application with `read:users`, `read:clients`, `read:client_grants`, `read:grants`; resolves CIMD identities and keeps access checks current without storing subscriber tokens. |
-| `MCP_EVENTS_POLL_MS` | Collector polling interval, at least 5000 ms; default 30000 ms. |
-| `PORT` | HTTP listener port; default `3001`. |
-
-Secrets are redacted before results reach the model, structured content, or
-durable evidence.
-
-`npx` and `pnpm dlx` also work when Bun 1.4 or newer is installed.
-Both the HTTP and stdio executables use Bun 1.4 or newer.
-
-### Account isolation for hosted Auth0
-
-The existing tenant's API scopes, named client grants and mapped-user permissions
-are managed by [the Auth0 configuration and drift checker](https://github.com/ANcpLua/qyl.mcp/tree/main/tools/auth0).
-Run its check before applying changes; it preserves unrelated tenant configuration
-and never creates identities or rotates credentials.
-
-To give a reviewer access to sample data, provision a separate Collector
-project/key through the Collector's `QYL_OTLP_PROJECT_KEYS` configuration and
-assign that key to the reviewer's validated Auth0 subject. Configure the MCP
-service's secret `MCP_COLLECTOR_PROJECTS` with this shape (placeholder values):
+| `QYL_COLLECTOR_URL` | Collector base URL; default `http://127.0.0.1:5100`. Also the OTLP base when set. |
+| `QYL_API_KEY` | Collector credential for reads and OTLP; the write tools need its `write` and `delete` roles. Outgoing only. |
+| `QYL_PROJECT` | Server-owned Collector project scope. Unset, the server sends no project header and the Collector's default project applies. Never accepted as tool input. |
+| `MCP_COLLECTOR_PROJECTS` | Optional secret JSON mapping verified Auth0 subjects to project-bound Collector keys (below). |
+| `MCP_PUBLIC_URL` | Public base URL of a hosted deployment; sets the resource audience and the canonical `/mcp` URL and disables the local execution record. |
+| `MCP_BIND_HOST`, `PORT` | Listener address and port; default `127.0.0.1:3001`. |
+| `MCP_ALLOWED_HOSTS`, `MCP_ALLOWED_ORIGIN_HOSTS` | Comma-separated request and browser-origin hostnames added to the public URL's hostname. |
+| `MCP_AUTH_PROVIDER`, `MCP_AUTH_EXTENSIONS` | Authorization mode and optional extensions (above). |
+| `MCP_EVENTS_STORE` | Persistent Events subscription file; unset disables Events. |
+| `MCP_EVENTS_AUTH0_CLIENT_ID`, `MCP_EVENTS_AUTH0_CLIENT_SECRET` | Management API application with `read:users`, `read:clients`, `read:client_grants`, `read:grants`; resolves CIMD identities and keeps Events access checks current without storing subscriber tokens. |
+| `MCP_EVENTS_POLL_MS` | Collector polling interval for Events, at least 5000 ms; default 30000 ms. |
+| `OPENAI_APPS_CHALLENGE` | Text served at `/.well-known/openai-apps-challenge`; `404` while blank. |
+| `QYL_OTLP_ENDPOINT` | Optional OTLP base for self-telemetry; signal-specific `OTEL_*` endpoints take precedence. |
+| `QYL_MCP_TELEMETRY=0` | Disable MCP spans, metrics and operation logs. |
+| `QYL_MCP_NATIVE_STATE_PATH` | Location of the local execution record; default `~/.qyl/mcp-native-executions.json`. |
+
+With `MCP_COLLECTOR_PROJECTS` set, only the verified SDK `AuthInfo.extra.subject` selects the
+project; tool inputs and request metadata cannot override it. An enabled map rejects unmapped
+callers and never falls back to `QYL_API_KEY`; missing, malformed, duplicate or conflicting entries
+fail validation. It needs the hosted Auth0 configuration. Shape (placeholder values):
 
 ```json
 [
@@ -165,38 +159,39 @@ service's secret `MCP_COLLECTOR_PROJECTS` with this shape (placeholder values):
 ]
 ```
 
-Include every account that should retain access, including the owner. An
-enabled map rejects unmapped callers and never falls back to `QYL_API_KEY`.
-Missing, malformed, duplicate or conflicting entries fail validation. The
-feature requires the hosted Auth0 configuration; local stdio and Cloudflare
-Access deployments cannot enable this map. When the variable is absent, the
-existing deployment-wide credential behavior is retained.
-
-Only the verified SDK `AuthInfo.extra.subject` selects the project. Tool inputs
-and request metadata cannot override it. Telemetry tools, viewer refreshes and
-tool-call OTLP exports use that account's project credential. Export pipelines
-are bounded by the configured projects; an unassigned caller gets no fallback
-export destination. Project
-keys are redacted from text and structured results, including keys nested in
-this JSON configuration. Keep the map in host secrets and out of the plugin ZIP.
-
-`bun run smoke:projects` from the repository root checks every tool, the
-writes included, viewer query paths and both protocol eras against a
-real local Collector with two temporary projects. It reuses the completed Release
-build; set `QYL_COLLECTOR_DLL` for another build. The script uses local test identities
-and an in-process signed webhook receiver.
-
-### Seeded analysis verification
-
-`bun run --cwd server test:answer-key` starts a fresh temporary collector database,
-seeds real OTLP, and runs the 32 analysis checks through MCP and generated validators.
-It reuses the collector's completed build; set `QYL_COLLECTOR_DLL` when its location
-or configuration differs. `mise run check` includes this verification and the quiet
-SSE check. No pre-existing temporary file or manually seeded database is required.
-
-`QYL_BIN=/path/to/installed/qyl node live-tools-smoke.mjs` additionally checks
-all 32 tools against an isolated collector started by the published CLI.
+Tool-call OTLP exports use the mapped project's credential; an unassigned caller gets no fallback
+export destination. Project keys are redacted from text and structured results.
+
+## MCP Events
+
+On authenticated Auth0 deployments with `MCP_EVENTS_STORE`, clients can subscribe to `trace.error`,
+optionally filtered by `service_name`. The server verifies callbacks, signs deliveries, checks
+ongoing authorization, expires subscriptions and cancels delivery on unsubscribe or confirmed
+revocation. Subscription state is bounded and holds no OAuth tokens or copied telemetry.
+
+## Execution records and telemetry
+
+A local server (`--stdio`, or HTTP without `MCP_PUBLIC_URL`) records each inbound `tools/call` —
+tool name, timing, status, error type and a server-generated ID, never arguments, metadata, result
+bodies or error messages — atomically in the execution record, keeping the latest 1,000. A hosted
+deployment records nothing to disk. A completed or failed record that cannot be written never
+changes the call's outcome: the tool's result or error is returned, a structured `warn` line goes
+to stderr and the operation span carries `error.type=evidence_persistence_failed`; a record that
+cannot be written before the tool runs refuses the call. OTLP exports carry operation timing,
+status and trace correlation, without argument or result bodies.
+
+## Checks
+
+From `services/qyl.mcp` after `bun install --frozen-lockfile && bun run build`:
+`bun run test:built` (unit tests), `bun run smoke` (stdio transport), `bun run smoke:quiet`
+(an 18-second quiet response over HTTP), `bun run test:answer-key` (seeded OTLP through a fresh
+Collector, then every analysis check through MCP) and `bun run smoke:projects` (two real
+Collector projects, every tool, both protocol eras). The last two use the Collector's Release
+build in `artifacts/bin/qyl.collector/release/`; `QYL_COLLECTOR_DLL` selects another build.
+`QYL_BIN=/path/to/qyl bun run smoke:live` calls every tool against a Collector started by an
+installed qyl tool. `mise run hosted-eval` checks the hosted server with a real login
+([eval/](eval/)).
 
 ## Release notes
 
-In the repository's [CHANGELOG.md](https://github.com/ANcpLua/qyl.mcp/blob/main/CHANGELOG.md).
+[CHANGELOG.md](https://github.com/ANcpLua/qyl/blob/main/CHANGELOG.md)

package/dist/analysis-client.d.ts

@@ -1,5 +1,5 @@
 /** Shared HTTP transport; every callable analysis operation is registered by name. */
 import type { CallToolResult } from "@modelcontextprotocol/server";
-import type * as z from "zod/v4";
+import type { ContractSchemaName } from "./contracts/tool-schemas.js";
 import type { ToolScope } from "./request-scope.js";
-export declare function queryAnalysis<Input extends object, Output extends object>(operation: string, input: Input, schema: z.ZodType<Output>, scope: ToolScope): Promise<CallToolResult>;
+export declare function queryAnalysis<Input extends object>(operation: string, input: Input, schema: ContractSchemaName, scope: ToolScope): Promise<CallToolResult>;

package/dist/analysis-client.js

@@ -26,8 +26,7 @@ export async function queryAnalysis(operation, input, schema, scope) {
         const page = output;
         const originalPoints = operation === "get_metric_series" && typeof args.series_id === "string";
         const points = page.points;
-        const traceView = operation === "get_trace" || operation === "fetch_telemetry" && args.view === "trace";
-        const sizeKey = originalPoints ? "points_limit" : traceView ? "max_spans" : operation === "query_metric" ? "series_limit" : operation === "get_agent_run" ? "max_steps" : "limit";
+        const sizeKey = originalPoints ? "points_limit" : operation === "get_trace" ? "max_spans" : operation === "query_metric" ? "series_limit" : operation === "get_agent_run" ? "max_steps" : "limit";
         const trace = page.trace;
         const observed = page.observed;
         const sizes = [trace?.spans?.length, observed?.error_spans?.length, observed?.logs?.length,

package/dist/analysis-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"analysis-client.js","sourceRoot":"","sources":["../src/analysis-client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,KAAY,EACZ,MAAyB,EACzB,KAAgB;IAEhB,MAAM,IAAI,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,KAAK,GAAW,KAAK,CAAC;IAC1B,IAAI,gBAAgB,GAAG,QAAQ,CAAC;IAChC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,0EAA0E,CAAC,CAAC;QACzH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,uBAAuB,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAiC,CAAC;QAC/C,MAAM,cAAc,GAAG,SAAS,KAAK,mBAAmB,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,MAA0C,CAAC;QAC/D,MAAM,SAAS,GAAG,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,iBAAiB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;QACxG,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QAClL,MAAM,KAAK,GAAG,IAAI,CAAC,KAA0C,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAqE,CAAC;QAC5F,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM;YACxF,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACpF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YAChD,gBAAgB,GAAG,QAAQ,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,uBAAuB,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;YACxF,wEAAwE;YACxE,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAI,IAAI,CAAC,MAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK;gBAC7D,GAAG,CAAC,SAAS,KAAK,qBAAqB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC;YAC5I,MAAM,IAAI,cAAc,CACtB,gGAAgG,KAAK,+CAA+C,EACpJ,KAAK,EAAE,SAAS,EAAE,oBAAoB,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,4BAA4B,CAAC,CAAC;QACnE,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}
+{"version":3,"file":"analysis-client.js","sourceRoot":"","sources":["../src/analysis-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEnF,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,SAAiB,EACjB,KAAY,EACZ,MAA0B,EAC1B,KAAgB;IAEhB,MAAM,IAAI,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,KAAK,GAAW,KAAK,CAAC;IAC1B,IAAI,gBAAgB,GAAG,QAAQ,CAAC;IAChC,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,SAAS,IAAI,CAAC;YAAE,MAAM,IAAI,cAAc,CAAC,0EAA0E,CAAC,CAAC;QACzH,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,mBAAmB,CAAC,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/E,0EAA0E;QAC1E,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,KAAK,IAAI,uBAAuB,EAAE,CAAC;YACrC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,MAAM,IAAI,GAAG,MAAiC,CAAC;QAC/C,MAAM,cAAc,GAAG,SAAS,KAAK,mBAAmB,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC;QAC/F,MAAM,MAAM,GAAG,IAAI,CAAC,MAA0C,CAAC;QAC/D,MAAM,OAAO,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;QAClM,MAAM,KAAK,GAAG,IAAI,CAAC,KAA0C,CAAC;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAqE,CAAC;QAC5F,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM;YACxF,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAClI,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;QACpF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YAChD,gBAAgB,GAAG,QAAQ,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,uBAAuB,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC;YACxF,wEAAwE;YACxE,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAI,IAAI,CAAC,MAAiB,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK;gBAC7D,GAAG,CAAC,SAAS,KAAK,qBAAqB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1F,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,4EAA4E;QAC5E,IAAI,cAAc,EAAE,CAAC;YACnB,MAAM,KAAK,GAAG,mBAAmB,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC;YAC5I,MAAM,IAAI,cAAc,CACtB,gGAAgG,KAAK,+CAA+C,EACpJ,KAAK,EAAE,SAAS,EAAE,oBAAoB,CACvC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,SAAS,4BAA4B,CAAC,CAAC;QACnE,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/analysis-summary.js

@@ -19,7 +19,7 @@ export function analysisSummary(operation, output) {
         if (data[key] !== undefined)
             lines.push(`${key}: ${short(data[key])}`);
     }
-    const totals = record(data.totals ?? record(data.stats).totals);
+    const totals = record(data.totals);
     if (totals.requests !== undefined)
         lines.push(`${short(totals.errors)} errors / ${short(totals.requests)} requests; p95 ${short(totals.p95_ms)} ms.`);
     const trace = record(data.trace);
@@ -28,7 +28,9 @@ export function analysisSummary(operation, output) {
     const cause = record(record(data.observed).root_cause_span);
     if (cause.name)
         lines.push(`Recorded failure: ${short(cause.service)} / ${short(cause.name)} — ${short(record(cause.exception).message ?? cause.status)}`);
-    const collections = ["failures", "regressions", "groups", "steps", "traces", "sessions", "logs", "items", "attributes", "releases", "nodes", "runs", "phases", "saved_queries"];
+    if (typeof data.span_count_analyzed === "number")
+        lines.push(`${data.span_count_analyzed} MCP spans analyzed${data.truncated === true ? " from an incomplete scan" : ""}.`);
+    const collections = ["failures", "regressions", "groups", "tools", "steps", "traces", "sessions", "logs", "items", "attributes", "releases", "nodes", "runs", "phases", "saved_queries"];
     let evidence = 0;
     for (const field of collections) {
         const rows = data[field];

package/dist/analysis-summary.js.map

@@ -1 +1 @@
-{"version":3,"file":"analysis-summary.js","sourceRoot":"","sources":["../src/analysis-summary.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,MAAiC,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzK,MAAM,KAAK,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnL,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,yCAAyC,EAAE,CAAC,CAAC;IAC5N,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,MAAM,gBAAgB,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACpF,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3J,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAChL,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAC1E,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,QAAQ,IAAI,CAAC;gBAAE,MAAM;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;YAChJ,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;YACpE,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9H,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;SACzI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;SACzK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;SACnG,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC7G,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC"}
+{"version":3,"file":"analysis-summary.js","sourceRoot":"","sources":["../src/analysis-summary.ts"],"names":[],"mappings":"AAAA,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,MAAc;IAC/D,MAAM,IAAI,GAAG,MAAiC,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzK,MAAM,KAAK,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnL,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,yCAAyC,EAAE,CAAC,CAAC;IAC5N,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,oBAAoB,MAAM,CAAC,KAAK,CAAC,MAAM,gBAAgB,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpI,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACpF,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3J,IAAI,OAAO,IAAI,CAAC,mBAAmB,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,mBAAmB,sBAAsB,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5K,MAAM,WAAW,GAAG,CAAC,UAAU,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzL,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAC1E,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,QAAQ,IAAI,CAAC;gBAAE,MAAM;YACzB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC;YAChJ,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YACxE,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;YACpE,MAAM,EAAE,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,QAAQ,CAAC;YAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9H,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;SACzI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;SACzK,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;SACnG,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;IAC7G,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvC,CAAC"}