@aforoai/metering 1.0.0 → 2.0.0

package/dist/cjs/limits.d.ts

@@ -5,8 +5,10 @@
  * billed. The server reports it per event (`errors[]` in the batch response,
  * indexed), so the rest of the batch survives — but the SDK sends in the
  * background, so that report reaches nobody: the usage is simply gone. Checking
- * the same limits at `track()` surfaces the problem to the caller, at the call
- * site that produced it, while the event can still be corrected.
+ * the same limits at `track()` reports the problem where it happens: the event
+ * is not buffered or sent, it is counted in `droppedCount`, WARN-logged with
+ * the field, the limit and the offending value, and handed to the opt-in
+ * `onDrop` hook with reason `'invalid'`. `track()` does not throw for it.
  *
  * Source: `dto/IngestUsageEventRequest` (aforo-nextgen-usage-ingestor-service) —
  * the `@Size` and `@Digits` bean constraints, which are compiled into the
@@ -21,9 +23,15 @@
  * Only `occurredAt`'s shape is checked, since a malformed timestamp is invalid
  * under every configuration.
  *
- * Nothing here truncates or rounds — that would change what is billed. The
- * offending event is rejected instead, naming the field, the limit, and the
- * offending value.
+ * The limit check never truncates or rounds a value the caller set — that would
+ * change what is billed. The offending event is dropped instead (reason
+ * `'invalid'`), naming the field, the limit, and the offending value.
+ *
+ * The one exception is a label the SDK itself reads off an incoming request
+ * (the middlewares' `endpointPath` and `httpMethod`): dropping there would let
+ * an API consumer avoid metering by sending an over-long path. Those are cut to
+ * the limit where they are derived (`truncateRequestLabel`) and the event is
+ * still sent.
  */
 /** Maximum characters the ingestor accepts per string field (`@Size(max = ...)`). */
 export declare const MAX_LENGTHS: {
@@ -36,12 +44,35 @@ export declare const MAX_LENGTHS: {
     readonly sessionId: 64;
     readonly agentId: 36;
     readonly toolName: 64;
+    readonly capabilityName: 64;
     readonly endpointPath: 512;
     readonly httpMethod: 16;
+    readonly subscriptionId: 64;
+    readonly grpcService: 255;
+    readonly grpcMethod: 128;
+    readonly gqlOperationName: 255;
+    readonly wsConnectionId: 64;
+    readonly mqttTopic: 500;
+    readonly mqttClientId: 128;
 };
 /** `@Digits(integer = 14, fraction = 6)` — `usage_events.quantity` is NUMERIC(20,6). */
 export declare const MAX_QUANTITY_INTEGER_DIGITS = 14;
 export declare const MAX_QUANTITY_DECIMAL_PLACES = 6;
+/** Fields whose length the ingestor caps, checked when the caller sets them. */
+type LengthCheckedField = keyof typeof MAX_LENGTHS;
+/**
+ * Cut `value` to at most `max` UTF-16 code units — how the ingestor counts —
+ * without leaving half a surrogate pair at the end.
+ */
+export declare function truncateToLimit(value: string, max: number): string;
+/**
+ * Bound a label the SDK derived from an incoming request to the ingestor's
+ * limit for `field`. Logs one WARN per field per process. Not for values the
+ * SDK caller sets: those are never altered (an over-long one drops the event).
+ */
+export declare function truncateRequestLabel(field: LengthCheckedField, value: string): string;
+/** Test hook: forget which labels were already reported as truncated. */
+export declare function resetTruncationWarnings(): void;
 /**
  * Integer and decimal digit counts as the ingestor's `@Digits` sees them, i.e.
  * as `BigDecimal` reads the number the SDK puts on the wire:
@@ -70,11 +101,20 @@ export interface LimitCheckedEvent {
     sessionId?: unknown;
     agentId?: unknown;
     toolName?: unknown;
+    capabilityName?: unknown;
+    subscriptionId?: unknown;
+    grpcService?: unknown;
+    grpcMethod?: unknown;
+    gqlOperationName?: unknown;
+    wsConnectionId?: unknown;
+    mqttTopic?: unknown;
+    mqttClientId?: unknown;
 }
 /**
  * Describe the first ingestor constraint this event breaks, or `null` when it
- * would be accepted. Callers that must not throw (the framework middlewares)
- * can use this to skip an event instead.
+ * would be accepted. `AforoClient.track()` uses it to drop an invalid event
+ * (reason `'invalid'`) before it is buffered.
  */
 export declare function describeLimitViolation(event: LimitCheckedEvent): string | null;
+export {};
 //# sourceMappingURL=limits.d.ts.map

package/dist/cjs/limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,qFAAqF;AACrF,eAAO,MAAM,WAAW;;;;;;;;;;;;CAYd,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAoC7C;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAYnG;AA+BD,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAe9E"}
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,qFAAqF;AACrF,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;CAoBd,CAAC;AAEX,wFAAwF;AACxF,eAAO,MAAM,2BAA2B,KAAK,CAAC;AAC9C,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAc7C,gFAAgF;AAChF,KAAK,kBAAkB,GAAG,MAAM,OAAO,WAAW,CAAC;AAUnD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAOlE;AAKD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAWrF;AAED,yEAAyE;AACzE,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAaD;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAYnG;AA+BD,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,IAAI,CAe9E"}

package/dist/cjs/limits.js

@@ -6,8 +6,10 @@
  * billed. The server reports it per event (`errors[]` in the batch response,
  * indexed), so the rest of the batch survives — but the SDK sends in the
  * background, so that report reaches nobody: the usage is simply gone. Checking
- * the same limits at `track()` surfaces the problem to the caller, at the call
- * site that produced it, while the event can still be corrected.
+ * the same limits at `track()` reports the problem where it happens: the event
+ * is not buffered or sent, it is counted in `droppedCount`, WARN-logged with
+ * the field, the limit and the offending value, and handed to the opt-in
+ * `onDrop` hook with reason `'invalid'`. `track()` does not throw for it.
  *
  * Source: `dto/IngestUsageEventRequest` (aforo-nextgen-usage-ingestor-service) —
  * the `@Size` and `@Digits` bean constraints, which are compiled into the
@@ -22,12 +24,21 @@
  * Only `occurredAt`'s shape is checked, since a malformed timestamp is invalid
  * under every configuration.
  *
- * Nothing here truncates or rounds — that would change what is billed. The
- * offending event is rejected instead, naming the field, the limit, and the
- * offending value.
+ * The limit check never truncates or rounds a value the caller set — that would
+ * change what is billed. The offending event is dropped instead (reason
+ * `'invalid'`), naming the field, the limit, and the offending value.
+ *
+ * The one exception is a label the SDK itself reads off an incoming request
+ * (the middlewares' `endpointPath` and `httpMethod`): dropping there would let
+ * an API consumer avoid metering by sending an over-long path. Those are cut to
+ * the limit where they are derived (`truncateRequestLabel`) and the event is
+ * still sent.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MAX_QUANTITY_DECIMAL_PLACES = exports.MAX_QUANTITY_INTEGER_DIGITS = exports.MAX_LENGTHS = void 0;
+exports.truncateToLimit = truncateToLimit;
+exports.truncateRequestLabel = truncateRequestLabel;
+exports.resetTruncationWarnings = resetTruncationWarnings;
 exports.quantityDigits = quantityDigits;
 exports.describeLimitViolation = describeLimitViolation;
 /** Maximum characters the ingestor accepts per string field (`@Size(max = ...)`). */
@@ -41,8 +52,16 @@ exports.MAX_LENGTHS = {
     sessionId: 64,
     agentId: 36,
     toolName: 64,
+    capabilityName: 64,
     endpointPath: 512,
     httpMethod: 16,
+    subscriptionId: 64,
+    grpcService: 255,
+    grpcMethod: 128,
+    gqlOperationName: 255,
+    wsConnectionId: 64,
+    mqttTopic: 500,
+    mqttClientId: 128,
 };
 /** `@Digits(integer = 14, fraction = 6)` — `usage_events.quantity` is NUMERIC(20,6). */
 exports.MAX_QUANTITY_INTEGER_DIGITS = 14;
@@ -61,6 +80,42 @@ const ISO_DATE_TIME = /^\d{4}-\d{2}-\d{2}[Tt]\d{2}:\d{2}(:\d{2}(\.\d{1,9})?)?([Z
 function lengthOf(value) {
     return value.length;
 }
+/**
+ * Cut `value` to at most `max` UTF-16 code units — how the ingestor counts —
+ * without leaving half a surrogate pair at the end.
+ */
+function truncateToLimit(value, max) {
+    if (value.length <= max)
+        return value;
+    let end = Math.max(0, max);
+    const last = end > 0 ? value.charCodeAt(end - 1) : 0;
+    // A high surrogate at the cut means its low half was cut off: drop it too.
+    if (last >= 0xd800 && last <= 0xdbff)
+        end -= 1;
+    return value.slice(0, end);
+}
+/** Labels already reported as truncated — one WARN per label name per process. */
+const truncationWarned = new Set();
+/**
+ * Bound a label the SDK derived from an incoming request to the ingestor's
+ * limit for `field`. Logs one WARN per field per process. Not for values the
+ * SDK caller sets: those are never altered (an over-long one drops the event).
+ */
+function truncateRequestLabel(field, value) {
+    const max = exports.MAX_LENGTHS[field];
+    if (typeof value !== 'string' || value.length <= max)
+        return value;
+    if (!truncationWarned.has(field)) {
+        truncationWarned.add(field);
+        console.warn(`[aforo] ${field} taken from the request was longer than the ingestor's limit and was `
+            + `truncated to ${max} characters; the event is still sent. Logged once per label.`);
+    }
+    return truncateToLimit(value, max);
+}
+/** Test hook: forget which labels were already reported as truncated. */
+function resetTruncationWarnings() {
+    truncationWarned.clear();
+}
 function lengthError(field, value) {
     if (value === undefined || value === null)
         return null;
@@ -70,7 +125,7 @@ function lengthError(field, value) {
     if (len <= max)
         return null;
     return `${field} is ${len} characters, exceeding the ingestor's ${max}-character limit `
-        + `(value starts "${text.slice(0, 32)}"). Shorten it — the SDK will not truncate it, `
+        + `(value starts "${text.slice(0, 80)}"). Shorten it — the SDK will not truncate it, `
         + 'because a truncated id bills the wrong thing.';
 }
 /**
@@ -112,18 +167,18 @@ function quantityError(quantity) {
 }
 function occurredAtError(occurredAt) {
     if (!ISO_DATE_TIME.test(occurredAt)) {
-        return `occurredAt "${occurredAt}" is not an ISO-8601 timestamp `
+        return `occurredAt "${String(occurredAt).slice(0, 80)}" is not an ISO-8601 timestamp `
             + '(expected e.g. "2026-03-01T14:30:00Z").';
     }
     if (Number.isNaN(Date.parse(occurredAt))) {
-        return `occurredAt "${occurredAt}" is not a valid date.`;
+        return `occurredAt "${String(occurredAt).slice(0, 80)}" is not a valid date.`;
     }
     return null;
 }
 /**
  * Describe the first ingestor constraint this event breaks, or `null` when it
- * would be accepted. Callers that must not throw (the framework middlewares)
- * can use this to skip an event instead.
+ * would be accepted. `AforoClient.track()` uses it to drop an invalid event
+ * (reason `'invalid'`) before it is buffered.
  */
 function describeLimitViolation(event) {
     if (event.idempotencyKey !== undefined && event.idempotencyKey !== null

package/dist/cjs/limits.js.map

@@ -1 +1 @@
-{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/limits.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAgEH,wCAYC;AAqDD,wDAeC;AA9ID,qFAAqF;AACxE,QAAA,WAAW,GAAG;IACzB,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,GAAG;IACf,cAAc,EAAE,GAAG;IACnB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,EAAE;IACZ,YAAY,EAAE,GAAG;IACjB,UAAU,EAAE,EAAE;CACN,CAAC;AAEX,wFAAwF;AAC3E,QAAA,2BAA2B,GAAG,EAAE,CAAC;AACjC,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAK7C;;;;;GAKG;AACH,MAAM,aAAa,GACjB,iFAAiF,CAAC;AAKpF;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,KAAc;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,mBAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,GAAG,KAAK,OAAO,GAAG,yCAAyC,GAAG,mBAAmB;UACpF,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iDAAiD;UACpF,+CAA+C,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,UAAkB;IAC/C,MAAM,KAAK,GAAG,6CAA6C,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;IAEzC,OAAO,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE5E,IAAI,aAAa,GAAG,mCAA2B,EAAE,CAAC;QAChD,OAAO,YAAY,UAAU,QAAQ,aAAa,4CAA4C;cAC1F,YAAY,mCAA2B,4CAA4C,CAAC;IAC1F,CAAC;IACD,IAAI,aAAa,GAAG,mCAA2B,EAAE,CAAC;QAChD,OAAO,YAAY,UAAU,QAAQ,aAAa,4CAA4C;cAC1F,YAAY,mCAA2B,qDAAqD;cAC5F,0EAA0E,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,UAAU,iCAAiC;cAC7D,yCAAyC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,eAAe,UAAU,wBAAwB,CAAC;IAC3D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAmBD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,KAAwB;IAC7D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI;WAChE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAyB,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAG,KAA4C,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAED,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,OAAO,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/limits.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;;;AAwDH,0CAOC;AAUD,oDAWC;AAGD,0DAEC;AAsBD,wCAYC;AA6DD,wDAeC;AArMD,qFAAqF;AACxE,QAAA,WAAW,GAAG;IACzB,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,GAAG;IACf,cAAc,EAAE,GAAG;IACnB,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,GAAG;IACZ,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,EAAE;IACZ,cAAc,EAAE,EAAE;IAClB,YAAY,EAAE,GAAG;IACjB,UAAU,EAAE,EAAE;IACd,cAAc,EAAE,EAAE;IAClB,WAAW,EAAE,GAAG;IAChB,UAAU,EAAE,GAAG;IACf,gBAAgB,EAAE,GAAG;IACrB,cAAc,EAAE,EAAE;IAClB,SAAS,EAAE,GAAG;IACd,YAAY,EAAE,GAAG;CACT,CAAC;AAEX,wFAAwF;AAC3E,QAAA,2BAA2B,GAAG,EAAE,CAAC;AACjC,QAAA,2BAA2B,GAAG,CAAC,CAAC;AAK7C;;;;;GAKG;AACH,MAAM,aAAa,GACjB,iFAAiF,CAAC;AAKpF;;;GAGG;AACH,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,KAAa,EAAE,GAAW;IACxD,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,2EAA2E;IAC3E,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM;QAAE,GAAG,IAAI,CAAC,CAAC;IAC/C,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,kFAAkF;AAClF,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;AAE3C;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,KAAyB,EAAE,KAAa;IAC3E,MAAM,GAAG,GAAG,mBAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,IAAI,CACV,WAAW,KAAK,uEAAuE;cACrF,gBAAgB,GAAG,8DAA8D,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,yEAAyE;AACzE,SAAgB,uBAAuB;IACrC,gBAAgB,CAAC,KAAK,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,KAAc;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,mBAAW,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,GAAG,KAAK,OAAO,GAAG,yCAAyC,GAAG,mBAAmB;UACpF,kBAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iDAAiD;UACpF,+CAA+C,CAAC;AACtD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,cAAc,CAAC,UAAkB;IAC/C,MAAM,KAAK,GAAG,6CAA6C,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;IAC1D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;IAEzC,OAAO,EAAE,aAAa,EAAE,SAAS,GAAG,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,2EAA2E;IAC3E,iEAAiE;IACjE,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAE5E,IAAI,aAAa,GAAG,mCAA2B,EAAE,CAAC;QAChD,OAAO,YAAY,UAAU,QAAQ,aAAa,4CAA4C;cAC1F,YAAY,mCAA2B,4CAA4C,CAAC;IAC1F,CAAC;IACD,IAAI,aAAa,GAAG,mCAA2B,EAAE,CAAC;QAChD,OAAO,YAAY,UAAU,QAAQ,aAAa,4CAA4C;cAC1F,YAAY,mCAA2B,qDAAqD;cAC5F,0EAA0E,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,UAAkB;IACzC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,eAAe,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iCAAiC;cAClF,yCAAyC,CAAC;IAChD,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzC,OAAO,eAAe,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,wBAAwB,CAAC;IAChF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AA2BD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,KAAwB;IAC7D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI;WAChE,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,mBAAW,CAAyB,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAG,KAA4C,CAAC,KAAK,CAAC,CAAC,CAAC;QACzF,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IAED,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,eAAe;QAAE,OAAO,eAAe,CAAC;IAE5C,OAAO,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC"}

package/dist/cjs/middleware/common.d.ts

@@ -1,4 +1,5 @@
-import { MiddlewareOptions } from '../types';
+import { MiddlewareOptions } from '../types.js';
+import { AforoClient } from '../client.js';
 /**
  * Metric recorded for each request when `metricName` is not configured.
  *
@@ -15,8 +16,29 @@ export declare const DEFAULT_METRIC_NAME = "api_calls";
 export declare function isPreflight(method: string | undefined): boolean;
 /** Resolve the metric: resolver function, then fixed name, then DEFAULT_METRIC_NAME. */
 export declare function resolveMetricName(options: MiddlewareOptions, req: any, res: any): string;
-/** Request path without its query string, capped to what the ingestor accepts. */
+/**
+ * Request path without its query string. Read off the incoming request, so an
+ * over-long path is cut to the ingestor's limit (512) instead of dropping the
+ * event — otherwise a caller could avoid metering with a long URL.
+ */
 export declare function endpointPathOf(url: string): string;
+/** HTTP method off the incoming request, cut to the ingestor's limit (16). */
+export declare function httpMethodOf(method: string): string;
 /** First non-empty string among the candidates, or null. */
 export declare function firstNonEmpty(...values: unknown[]): string | null;
+/** The client a middleware meters through: the app's own, or one built from the options. */
+export declare function middlewareClient(options: MiddlewareOptions): AforoClient;
+/**
+ * Build the per-request customer lookup. Throws at setup when neither a
+ * resolver nor the explicit `trustCustomerHeader` opt-in is configured: the
+ * X-Customer-Id header is set by whoever calls the API, so it is never read
+ * by default.
+ */
+export declare function customerLookup(options: MiddlewareOptions, readHeader: (req: any) => unknown): (req: any, headerSource?: any) => string | null;
+/**
+ * The endpointPath to send: the query string removed, dynamic segments
+ * collapsed unless `normalizePath` is false (a framework route template wins),
+ * and cut to the ingestor's 512-character limit.
+ */
+export declare function endpointPathFor(options: MiddlewareOptions, rawPath: string, req: any, routeTemplate?: unknown): string;
 //# sourceMappingURL=common.d.ts.map

package/dist/cjs/middleware/common.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/middleware/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE/D;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAKxF;AAKD,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,IAAI,CAOjE"}
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../src/middleware/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C;;;;;;;GAOG;AACH,eAAO,MAAM,mBAAmB,cAAc,CAAC;AAE/C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAE/D;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,GAAG,MAAM,CAKxF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,8EAA8E;AAC9E,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,IAAI,CAOjE;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,iBAAiB,GAAG,WAAW,CAMxE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAChC,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,CAkBjD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,EAAE,OAAO,GAAG,MAAM,CAUtH"}

package/dist/cjs/middleware/common.js

@@ -4,7 +4,14 @@ exports.DEFAULT_METRIC_NAME = void 0;
 exports.isPreflight = isPreflight;
 exports.resolveMetricName = resolveMetricName;
 exports.endpointPathOf = endpointPathOf;
+exports.httpMethodOf = httpMethodOf;
 exports.firstNonEmpty = firstNonEmpty;
+exports.middlewareClient = middlewareClient;
+exports.customerLookup = customerLookup;
+exports.endpointPathFor = endpointPathFor;
+const limits_js_1 = require("../limits.js");
+const client_js_1 = require("../client.js");
+const path_normalizer_js_1 = require("../path-normalizer.js");
 /**
  * Metric recorded for each request when `metricName` is not configured.
  *
@@ -28,11 +35,17 @@ function resolveMetricName(options, req, res) {
     }
     return options.metricName || exports.DEFAULT_METRIC_NAME;
 }
-/** Longest endpointPath the ingestor accepts. */
-const MAX_ENDPOINT_PATH = 512;
-/** Request path without its query string, capped to what the ingestor accepts. */
+/**
+ * Request path without its query string. Read off the incoming request, so an
+ * over-long path is cut to the ingestor's limit (512) instead of dropping the
+ * event — otherwise a caller could avoid metering with a long URL.
+ */
 function endpointPathOf(url) {
-    return (url.split('?')[0] || '/').slice(0, MAX_ENDPOINT_PATH);
+    return (0, limits_js_1.truncateRequestLabel)('endpointPath', String(url).split('?')[0] || '/');
+}
+/** HTTP method off the incoming request, cut to the ingestor's limit (16). */
+function httpMethodOf(method) {
+    return (0, limits_js_1.truncateRequestLabel)('httpMethod', String(method));
 }
 /** First non-empty string among the candidates, or null. */
 function firstNonEmpty(...values) {
@@ -45,4 +58,53 @@ function firstNonEmpty(...values) {
     }
     return null;
 }
+/** The client a middleware meters through: the app's own, or one built from the options. */
+function middlewareClient(options) {
+    if (options?.client)
+        return options.client;
+    if (!options?.apiKey) {
+        throw new Error('Aforo middleware needs either `client` (an AforoClient your app owns) or `apiKey`.');
+    }
+    return new client_js_1.AforoClient({ ...(options.clientOptions ?? {}), apiKey: options.apiKey, baseUrl: options.baseUrl });
+}
+/**
+ * Build the per-request customer lookup. Throws at setup when neither a
+ * resolver nor the explicit `trustCustomerHeader` opt-in is configured: the
+ * X-Customer-Id header is set by whoever calls the API, so it is never read
+ * by default.
+ */
+function customerLookup(options, readHeader) {
+    const legacy = options?.customerId;
+    const resolver = options?.customerResolver ??
+        (typeof legacy === 'function' ? legacy : typeof legacy === 'string' && legacy.trim() ? () => legacy : undefined);
+    const trustHeader = options?.trustCustomerHeader === true;
+    if (!resolver && !trustHeader) {
+        throw new Error('Aforo middleware needs a customerResolver: (req) => the Aforo customer id from identity your app ' +
+            'authenticated (session, verified JWT subject, API-key lookup). To bill the X-Customer-Id header ' +
+            'instead — only safe behind a proxy that sets it — pass trustCustomerHeader: true.');
+    }
+    return (req, headerSource = req) => {
+        const fromResolver = resolver ? firstNonEmpty(resolver(req)) : null;
+        if (fromResolver)
+            return fromResolver;
+        return trustHeader ? firstNonEmpty(readHeader(headerSource)) : null;
+    };
+}
+/**
+ * The endpointPath to send: the query string removed, dynamic segments
+ * collapsed unless `normalizePath` is false (a framework route template wins),
+ * and cut to the ingestor's 512-character limit.
+ */
+function endpointPathFor(options, rawPath, req, routeTemplate) {
+    const path = String(rawPath ?? '/').split('?')[0] || '/';
+    const mode = options?.normalizePath ?? true;
+    let out = path;
+    if (typeof mode === 'function') {
+        out = String(mode(path, req) || path);
+    }
+    else if (mode) {
+        out = (0, path_normalizer_js_1.normalizePath)(path, typeof routeTemplate === 'string' && routeTemplate ? routeTemplate : undefined);
+    }
+    return endpointPathOf(out);
+}
 //# sourceMappingURL=common.js.map

package/dist/cjs/middleware/common.js.map

@@ -1 +1 @@
-{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/middleware/common.ts"],"names":[],"mappings":";;;AAgBA,kCAEC;AAGD,8CAKC;AAMD,wCAEC;AAGD,sCAOC;AA1CD;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,WAAW,CAAC;AAE/C;;;GAGG;AACH,SAAgB,WAAW,CAAC,MAA0B;IACpD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,SAAgB,iBAAiB,CAAC,OAA0B,EAAE,GAAQ,EAAE,GAAQ;IAC9E,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,2BAAmB,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,IAAI,2BAAmB,CAAC;AACnD,CAAC;AAED,iDAAiD;AACjD,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,kFAAkF;AAClF,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AAChE,CAAC;AAED,4DAA4D;AAC5D,SAAgB,aAAa,CAAC,GAAG,MAAiB;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../src/middleware/common.ts"],"names":[],"mappings":";;;AAmBA,kCAEC;AAGD,8CAKC;AAOD,wCAEC;AAGD,oCAEC;AAGD,sCAOC;AAGD,4CAMC;AAQD,wCAqBC;AAOD,0CAUC;AA3GD,4CAAoD;AACpD,4CAA2C;AAC3C,8DAA4E;AAE5E;;;;;;;GAOG;AACU,QAAA,mBAAmB,GAAG,WAAW,CAAC;AAE/C;;;GAGG;AACH,SAAgB,WAAW,CAAC,MAA0B;IACpD,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AACpD,CAAC;AAED,wFAAwF;AACxF,SAAgB,iBAAiB,CAAC,OAA0B,EAAE,GAAQ,EAAE,GAAQ;IAC9E,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;QAC7C,OAAO,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,2BAAmB,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,IAAI,2BAAmB,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,GAAW;IACxC,OAAO,IAAA,gCAAoB,EAAC,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;AAChF,CAAC;AAED,8EAA8E;AAC9E,SAAgB,YAAY,CAAC,MAAc;IACzC,OAAO,IAAA,gCAAoB,EAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,4DAA4D;AAC5D,SAAgB,aAAa,CAAC,GAAG,MAAiB;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,4FAA4F;AAC5F,SAAgB,gBAAgB,CAAC,OAA0B;IACzD,IAAI,OAAO,EAAE,MAAM;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAC3C,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,uBAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;AACjH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAC5B,OAA0B,EAC1B,UAAiC;IAEjC,MAAM,MAAM,GAAG,OAAO,EAAE,UAAU,CAAC;IACnC,MAAM,QAAQ,GACZ,OAAO,EAAE,gBAAgB;QACzB,CAAC,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnH,MAAM,WAAW,GAAG,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,mGAAmG;YACjG,kGAAkG;YAClG,mFAAmF,CACtF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAQ,EAAE,eAAoB,GAAG,EAAE,EAAE;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACpE,IAAI,YAAY;YAAE,OAAO,YAAY,CAAC;QACtC,OAAO,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAA0B,EAAE,OAAe,EAAE,GAAQ,EAAE,aAAuB;IAC5G,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC;IACzD,MAAM,IAAI,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IAC5C,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACxC,CAAC;SAAM,IAAI,IAAI,EAAE,CAAC;QAChB,GAAG,GAAG,IAAA,kCAAkB,EAAC,IAAI,EAAE,OAAO,aAAa,KAAK,QAAQ,IAAI,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC"}

package/dist/cjs/middleware/express.d.ts

@@ -1,15 +1,20 @@
-import { MiddlewareOptions } from '../types';
+import { MiddlewareOptions } from '../types.js';
 /**
- * Express middleware that automatically captures API usage events.
+ * Express middleware that records one usage event per request.
  *
- * Hooks into `res.on('finish')` — runs AFTER the response is sent to the client.
- * Zero latency impact on the API call itself.
+ * Hooks into `res.on('finish')` — runs AFTER the response is sent, so it adds
+ * no latency to the request. Metering never throws into the request.
  *
  * ```typescript
+ * import { AforoClient } from '@aforoai/metering';
  * import { expressMiddleware } from '@aforoai/metering/middleware/express';
- * app.use(expressMiddleware({ apiKey: process.env.AFORO_API_KEY, productType: 'API' }));
+ * const aforo = new AforoClient({ apiKey: process.env.AFORO_API_KEY!, productType: 'API' });
+ * app.use(expressMiddleware({ client: aforo, customerResolver: (req) => req.user?.aforoCustomerId }));
+ * process.once('SIGTERM', async () => { await aforo.shutdown(); process.exit(0); });
  * ```
  */
-export declare function expressMiddleware(options: MiddlewareOptions): (req: any, res: any, next: any) => void;
+export declare function expressMiddleware(options: MiddlewareOptions): ((req: any, res: any, next: any) => void) & {
+    client: import("../client.js").AforoClient;
+};
 export declare const middleware: typeof expressMiddleware;
 //# sourceMappingURL=express.d.ts.map

package/dist/cjs/middleware/express.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../../../src/middleware/express.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAK7C;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,IAUlB,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,UAgEtE;AAeD,eAAO,MAAM,UAAU,0BAAoB,CAAC"}
+{"version":3,"file":"express.d.ts","sourceRoot":"","sources":["../../../src/middleware/express.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKhD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,UAOJ,GAAG,OAAO,GAAG,QAAQ,GAAG;;EAsC/E;AAGD,eAAO,MAAM,UAAU,0BAAoB,CAAC"}

package/dist/cjs/middleware/express.js

@@ -2,102 +2,65 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.middleware = void 0;
 exports.expressMiddleware = expressMiddleware;
-const client_1 = require("../client");
-const common_1 = require("./common");
+const common_js_1 = require("./common.js");
 const DEFAULT_EXCLUDE_PATHS = ['/health', '/ready', '/metrics', '/favicon.ico'];
 /**
- * Express middleware that automatically captures API usage events.
+ * Express middleware that records one usage event per request.
  *
- * Hooks into `res.on('finish')` — runs AFTER the response is sent to the client.
- * Zero latency impact on the API call itself.
+ * Hooks into `res.on('finish')` — runs AFTER the response is sent, so it adds
+ * no latency to the request. Metering never throws into the request.
  *
  * ```typescript
+ * import { AforoClient } from '@aforoai/metering';
  * import { expressMiddleware } from '@aforoai/metering/middleware/express';
- * app.use(expressMiddleware({ apiKey: process.env.AFORO_API_KEY, productType: 'API' }));
+ * const aforo = new AforoClient({ apiKey: process.env.AFORO_API_KEY!, productType: 'API' });
+ * app.use(expressMiddleware({ client: aforo, customerResolver: (req) => req.user?.aforoCustomerId }));
+ * process.once('SIGTERM', async () => { await aforo.shutdown(); process.exit(0); });
  * ```
  */
 function expressMiddleware(options) {
-    const client = new client_1.AforoClient({
-        apiKey: options.apiKey,
-        baseUrl: options.baseUrl,
-        ...options.clientOptions,
-    });
+    const lookupCustomer = (0, common_js_1.customerLookup)(options, (req) => req.headers?.['x-customer-id']);
+    const client = (0, common_js_1.middlewareClient)(options);
     const excludePaths = options.excludePaths ?? DEFAULT_EXCLUDE_PATHS;
     const excludeStatusCodes = options.excludeStatusCodes ?? [];
-    return function aforoMeteringMiddleware(req, res, next) {
-        // Capture timing
+    const handler = function aforoMeteringMiddleware(req, res, next) {
         const startTime = Date.now();
         res.on('finish', () => {
             try {
                 const path = req.originalUrl || req.url || '/';
                 const method = req.method || 'UNKNOWN';
                 const statusCode = res.statusCode || 0;
-                // Check exclusions
-                if ((0, common_1.isPreflight)(method))
+                if ((0, common_js_1.isPreflight)(method))
                     return;
                 if (excludePaths.some((p) => path.startsWith(p)))
                     return;
                 if (excludeStatusCodes.includes(statusCode))
                     return;
-                // Resolve metric name (must be a metric in the tenant's catalog)
-                const metricName = (0, common_1.resolveMetricName)(options, req, res);
-                // Resolve quantity
-                let quantity;
-                if (typeof options.quantity === 'function') {
-                    quantity = options.quantity(req, res);
-                }
-                else {
-                    quantity = options.quantity ?? 1;
-                }
-                // Resolve customer ID
-                let customerId;
-                if (typeof options.customerId === 'function') {
-                    customerId = options.customerId(req);
-                }
-                else if (options.customerId) {
-                    customerId = options.customerId;
-                }
-                else {
-                    customerId = extractCustomerId(req);
-                }
-                if (!customerId)
-                    return; // Can't meter without a customer
+                const quantity = typeof options.quantity === 'function' ? options.quantity(req, res) : options.quantity ?? 1;
                 if (!(quantity > 0))
                     return; // The ingestor rejects quantity <= 0
-                // Build metadata
-                let metadata;
-                if (options.metadata) {
-                    metadata = options.metadata(req, res);
-                }
+                const route = typeof req.route?.path === 'string' ? `${req.baseUrl ?? ''}${req.route.path}` : undefined;
+                // No customer → track() drops it as 'invalid' and counts it; the request is unaffected.
                 client.track({
-                    customerId,
-                    metricName,
+                    customerId: lookupCustomer(req) ?? '',
+                    metricName: (0, common_js_1.resolveMetricName)(options, req, res),
                     quantity,
-                    metadata,
+                    metadata: options.metadata ? options.metadata(req, res) : undefined,
                     productType: options.productType,
-                    endpointPath: (0, common_1.endpointPathOf)(path),
-                    httpMethod: method,
+                    endpointPath: (0, common_js_1.endpointPathFor)(options, path, req, route),
+                    httpMethod: (0, common_js_1.httpMethodOf)(method),
                     statusCode,
                     responseTimeMs: Date.now() - startTime,
-                }).catch(() => { }); // Fire-and-forget
+                }).catch((err) => console.debug(`[aforo] metering skipped: ${err?.message ?? err}`));
             }
-            catch {
-                // Never let metering errors affect the API
+            catch (err) {
+                // Never let metering errors affect the API.
+                console.debug(`[aforo] metering skipped: ${err?.message ?? err}`);
             }
         });
         next();
     };
-}
-/**
- * Default customer resolution: authenticated user id, then X-Customer-Id.
- *
- * The caller's X-Api-Key header is deliberately NOT used: that is the end
- * user's secret, and using it as customerId wrote credentials into billing data
- * while never matching an Aforo customer. Configure `customerId` to map your
- * callers to Aforo customer ids.
- */
-function extractCustomerId(req) {
-    return (0, common_1.firstNonEmpty)(req.user?.id, req.user?.sub, req.headers?.['x-customer-id']);
+    return Object.assign(handler, { client });
 }
 // Also export as `middleware` for convenience
 exports.middleware = expressMiddleware;

package/dist/cjs/middleware/express.js.map

@@ -1 +1 @@
-{"version":3,"file":"express.js","sourceRoot":"","sources":["../../../src/middleware/express.ts"],"names":[],"mappings":";;;AAiBA,8CA0EC;AA3FD,sCAAwC;AAExC,qCAAyF;AAEzF,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAEhF;;;;;;;;;;GAUG;AACH,SAAgB,iBAAiB,CAAC,OAA0B;IAC1D,MAAM,MAAM,GAAG,IAAI,oBAAW,CAAC;QAC7B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,OAAO,CAAC,aAAa;KACzB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE5D,OAAO,SAAS,uBAAuB,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QACnE,iBAAiB;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAW,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBACvD,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;gBAC/C,MAAM,UAAU,GAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;gBAE/C,mBAAmB;gBACnB,IAAI,IAAA,oBAAW,EAAC,MAAM,CAAC;oBAAE,OAAO;gBAChC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO;gBACjE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,OAAO;gBAEpD,iEAAiE;gBACjE,MAAM,UAAU,GAAG,IAAA,0BAAiB,EAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;gBAExD,mBAAmB;gBACnB,IAAI,QAAgB,CAAC;gBACrB,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAC3C,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;qBAAM,CAAC;oBACN,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;gBACnC,CAAC;gBAED,sBAAsB;gBACtB,IAAI,UAAyB,CAAC;gBAC9B,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;oBAC7C,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACvC,CAAC;qBAAM,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBAC9B,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBAED,IAAI,CAAC,UAAU;oBAAE,OAAO,CAAC,iCAAiC;gBAC1D,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAAE,OAAO,CAAC,qCAAqC;gBAElE,iBAAiB;gBACjB,IAAI,QAA+D,CAAC;gBACpE,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACrB,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACxC,CAAC;gBAED,MAAM,CAAC,KAAK,CAAC;oBACX,UAAU;oBACV,UAAU;oBACV,QAAQ;oBACR,QAAQ;oBACR,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY,EAAE,IAAA,uBAAc,EAAC,IAAI,CAAC;oBAClC,UAAU,EAAE,MAAM;oBAClB,UAAU;oBACV,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACvC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB;YAExC,CAAC;YAAC,MAAM,CAAC;gBACP,2CAA2C;YAC7C,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,GAAQ;IACjC,OAAO,IAAA,sBAAa,EAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,8CAA8C;AACjC,QAAA,UAAU,GAAG,iBAAiB,CAAC"}
+{"version":3,"file":"express.js","sourceRoot":"","sources":["../../../src/middleware/express.ts"],"names":[],"mappings":";;;AAmBA,8CA6CC;AA/DD,2CAA8H;AAE9H,MAAM,qBAAqB,GAAG,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;AAEhF;;;;;;;;;;;;;GAaG;AACH,SAAgB,iBAAiB,CAAC,OAA0B;IAC1D,MAAM,cAAc,GAAG,IAAA,0BAAc,EAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAA,4BAAgB,EAAC,OAAO,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,qBAAqB,CAAC;IACnE,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG,SAAS,uBAAuB,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS;QAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAW,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBACvD,MAAM,MAAM,GAAW,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC;gBAC/C,MAAM,UAAU,GAAW,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;gBAE/C,IAAI,IAAA,uBAAW,EAAC,MAAM,CAAC;oBAAE,OAAO;gBAChC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;oBAAE,OAAO;gBACjE,IAAI,kBAAkB,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAAE,OAAO;gBAEpD,MAAM,QAAQ,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;gBAC7G,IAAI,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAAE,OAAO,CAAC,qCAAqC;gBAElE,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxG,wFAAwF;gBACxF,MAAM,CAAC,KAAK,CAAC;oBACX,UAAU,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE;oBACrC,UAAU,EAAE,IAAA,6BAAiB,EAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC;oBAChD,QAAQ;oBACR,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS;oBACnE,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,YAAY,EAAE,IAAA,2BAAe,EAAC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC;oBACxD,UAAU,EAAE,IAAA,wBAAY,EAAC,MAAM,CAAC;oBAChC,UAAU;oBACV,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;iBACvC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;YACvF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,4CAA4C;gBAC5C,OAAO,CAAC,KAAK,CAAC,6BAA8B,GAAa,EAAE,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC;YAC/E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,8CAA8C;AACjC,QAAA,UAAU,GAAG,iBAAiB,CAAC"}

package/dist/cjs/middleware/fastify.d.ts

@@ -1,13 +1,17 @@
-import { MiddlewareOptions } from '../types';
+import { MiddlewareOptions } from '../types.js';
 /**
- * Fastify plugin that automatically captures API usage events.
- *
- * Uses the `onResponse` hook — runs AFTER the response is sent.
+ * Fastify plugin that records one usage event per request in the
+ * `onResponse` hook (after the response is sent).
  *
  * ```typescript
+ * import { AforoClient } from '@aforoai/metering';
  * import { fastifyPlugin } from '@aforoai/metering/middleware/fastify';
- * fastify.register(fastifyPlugin, { apiKey: process.env.AFORO_API_KEY, productType: 'API' });
+ * const aforo = new AforoClient({ apiKey: process.env.AFORO_API_KEY!, productType: 'API' });
+ * fastify.register(fastifyPlugin, { client: aforo, customerResolver: (request) => request.user?.aforoCustomerId });
  * ```
+ *
+ * When the plugin creates its own client (apiKey instead of client), it shuts
+ * that client down in Fastify's onClose hook. A client you pass in is yours to shut down.
  */
 export declare function fastifyPlugin(fastify: any, options: MiddlewareOptions): Promise<void>;
 //# sourceMappingURL=fastify.d.ts.map

package/dist/cjs/middleware/fastify.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fastify.d.ts","sourceRoot":"","sources":["../../../src/middleware/fastify.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAK7C;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,iBAwE3E"}
+{"version":3,"file":"fastify.d.ts","sourceRoot":"","sources":["../../../src/middleware/fastify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAKhD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,iBAiD3E"}