@agent-vm/agent-vm 0.0.96 → 0.0.97

package/dist/observability/observability-lifecycle.js

@@ -0,0 +1,101 @@
+import { spawn } from 'node:child_process';
+import { chmod, mkdir, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+import { createObservabilityComposeModel, renderObservabilityComposeYaml, } from './observability-compose.js';
+import { createObservabilityRuntimeConfig, } from './observability-config.js';
+import { checkObservabilityStackReadiness } from './observability-readiness.js';
+import { createOtelCollectorConfigModel, renderOtelCollectorConfigYaml, } from './otel-collector-config.js';
+const OBSERVABILITY_DIRECTORY_MODE = 0o700;
+const OBSERVABILITY_FILE_MODE = 0o600;
+function formatUnknownError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function createObservabilityComposeStartupError(error) {
+    return new Error(`Host observability Docker Compose startup failed. Ensure Docker Compose is installed and running, or rerun agent-vm build with --no-observability to skip this build run. Cause: ${formatUnknownError(error)}`, { cause: error });
+}
+export async function writeObservabilityArtifacts(config) {
+    const directoryPaths = [
+        config.runtimeDir,
+        config.dataDir,
+        path.join(config.dataDir, 'metrics'),
+        path.join(config.dataDir, 'logs'),
+        path.join(config.dataDir, 'traces'),
+    ];
+    await Promise.all(directoryPaths.map(async (directoryPath) => {
+        await mkdir(directoryPath, { mode: OBSERVABILITY_DIRECTORY_MODE, recursive: true });
+        await chmod(directoryPath, OBSERVABILITY_DIRECTORY_MODE);
+    }));
+    const composePath = path.join(config.runtimeDir, 'docker-compose.observability.yml');
+    const collectorConfigPath = path.join(config.runtimeDir, 'otel-collector-config.yaml');
+    await Promise.all([
+        writeFile(composePath, renderObservabilityComposeYaml(createObservabilityComposeModel(config)), { encoding: 'utf8', mode: OBSERVABILITY_FILE_MODE }),
+        writeFile(collectorConfigPath, renderOtelCollectorConfigYaml(createOtelCollectorConfigModel(config)), { encoding: 'utf8', mode: OBSERVABILITY_FILE_MODE }),
+    ]);
+    await Promise.all([
+        chmod(composePath, OBSERVABILITY_FILE_MODE),
+        chmod(collectorConfigPath, OBSERVABILITY_FILE_MODE),
+    ]);
+    return { composePath, collectorConfigPath };
+}
+function runDockerCompose(options) {
+    const args = [
+        'compose',
+        '--project-name',
+        options.projectName,
+        '--file',
+        options.composePath,
+        'up',
+        '-d',
+        ...(options.wait ? ['--wait'] : []),
+    ];
+    return new Promise((resolve, reject) => {
+        const childProcess = spawn('docker', args, { stdio: 'inherit' });
+        childProcess.once('error', reject);
+        childProcess.once('exit', (exitCode) => {
+            if (exitCode === 0) {
+                resolve();
+                return;
+            }
+            reject(new Error(`docker ${args.join(' ')} exited with code ${String(exitCode)}.`));
+        });
+    });
+}
+export async function prepareObservabilityStack(options) {
+    const artifacts = await writeObservabilityArtifacts(options.config);
+    try {
+        await (options.runCompose ?? runDockerCompose)({
+            composePath: artifacts.composePath,
+            projectName: options.config.projectName,
+            wait: options.wait,
+        });
+    }
+    catch (error) {
+        throw createObservabilityComposeStartupError(error);
+    }
+    if (options.wait) {
+        const readinessResult = await (options.checkReadiness ?? checkObservabilityStackReadiness)({
+            config: options.config,
+        });
+        if (!readinessResult.ok) {
+            throw new Error(`Host observability stack is not ready: ${readinessResult.reason}`);
+        }
+    }
+    return {
+        ...artifacts,
+        status: options.wait ? 'ready' : 'started',
+    };
+}
+export function resolveBuildObservabilityConfig(systemConfig) {
+    const observabilityConfig = createObservabilityRuntimeConfig(systemConfig);
+    if (!observabilityConfig.enabled) {
+        return undefined;
+    }
+    if (observabilityConfig.stackMode !== 'managed') {
+        return undefined;
+    }
+    if (!observabilityConfig.prepareOnBuild || observabilityConfig.zones.length === 0) {
+        return undefined;
+    }
+    return observabilityConfig;
+}
+//# sourceMappingURL=observability-lifecycle.js.map

package/dist/observability/observability-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability-lifecycle.js","sourceRoot":"","sources":["../../src/observability/observability-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EACN,+BAA+B,EAC/B,8BAA8B,GAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACN,gCAAgC,GAEhC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACN,8BAA8B,EAC9B,6BAA6B,GAC7B,MAAM,4BAA4B,CAAC;AAepC,MAAM,4BAA4B,GAAG,KAAK,CAAC;AAC3C,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAEtC,SAAS,kBAAkB,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,sCAAsC,CAAC,KAAc;IAC7D,OAAO,IAAI,KAAK,CACf,oLAAoL,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAC/M,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAChD,MAAyC;IAKzC,MAAM,cAAc,GAAG;QACtB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,OAAO;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;KACnC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAChB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QAC1C,MAAM,KAAK,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAC1D,CAAC,CAAC,CACF,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,kCAAkC,CAAC,CAAC;IACrF,MAAM,mBAAmB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,4BAA4B,CAAC,CAAC;IACvF,MAAM,OAAO,CAAC,GAAG,CAAC;QACjB,SAAS,CACR,WAAW,EACX,8BAA8B,CAAC,+BAA+B,CAAC,MAAM,CAAC,CAAC,EACvE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CACnD;QACD,SAAS,CACR,mBAAmB,EACnB,6BAA6B,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,EACrE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CACnD;KACD,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,GAAG,CAAC;QACjB,KAAK,CAAC,WAAW,EAAE,uBAAuB,CAAC;QAC3C,KAAK,CAAC,mBAAmB,EAAE,uBAAuB,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,gBAAgB,CAAC,OAIzB;IACA,MAAM,IAAI,GAAG;QACZ,SAAS;QACT,gBAAgB;QAChB,OAAO,CAAC,WAAW;QACnB,QAAQ;QACR,OAAO,CAAC,WAAW;QACnB,IAAI;QACJ,IAAI;QACJ,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACnC,CAAC;IACF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACjE,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACnC,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;gBACV,OAAO;YACR,CAAC;YACD,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,OAAyC;IAEzC,MAAM,SAAS,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,CAAC;QACJ,MAAM,CAAC,OAAO,CAAC,UAAU,IAAI,gBAAgB,CAAC,CAAC;YAC9C,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW;YACvC,IAAI,EAAE,OAAO,CAAC,IAAI;SAClB,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,sCAAsC,CAAC,KAAK,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,eAAe,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,IAAI,gCAAgC,CAAC,CAAC;YAC1F,MAAM,EAAE,OAAO,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,0CAA0C,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;IACF,CAAC;IACD,OAAO;QACN,GAAG,SAAS;QACZ,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;KAC1C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,+BAA+B,CAC9C,YAAgC;IAEhC,MAAM,mBAAmB,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;IAC3E,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,mBAAmB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,cAAc,IAAI,mBAAmB,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnF,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC5B,CAAC"}

package/dist/observability/observability-readiness.d.ts

@@ -0,0 +1,17 @@
+import type { EnabledObservabilityRuntimeConfig } from './observability-config.js';
+export type ObservabilityReadinessResult = {
+    readonly ok: true;
+    readonly status: 'ready';
+} | {
+    readonly ok: false;
+    readonly reason: string;
+    readonly status: 'unavailable';
+};
+export interface CheckObservabilityStackReadinessOptions {
+    readonly config: EnabledObservabilityRuntimeConfig;
+    readonly fetchImpl?: typeof fetch;
+    readonly probeTimeoutMs?: number;
+    readonly retryDelayMs?: number;
+}
+export declare function checkObservabilityStackReadiness(options: CheckObservabilityStackReadinessOptions): Promise<ObservabilityReadinessResult>;
+//# sourceMappingURL=observability-readiness.d.ts.map

package/dist/observability/observability-readiness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability-readiness.d.ts","sourceRoot":"","sources":["../../src/observability/observability-readiness.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAEnF,MAAM,MAAM,4BAA4B,GACrC;IACA,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACxB,GACD;IACA,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAC9B,CAAC;AAEL,MAAM,WAAW,uCAAuC;IACvD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAC/B;AA0GD,wBAAsB,gCAAgC,CACrD,OAAO,EAAE,uCAAuC,GAC9C,OAAO,CAAC,4BAA4B,CAAC,CAoEvC"}

package/dist/observability/observability-readiness.js

@@ -0,0 +1,141 @@
+const DEFAULT_OBSERVABILITY_READINESS_PROBE_TIMEOUT_MS = 1_000;
+function formatHttpHost(host) {
+    return host === '::1' ? '[::1]' : host;
+}
+function createHealthEndpoints(config) {
+    const host = formatHttpHost(config.bindAddress);
+    const collectorEndpoint = {
+        name: 'collector',
+        url: `http://${host}:${String(config.ports.collectorHealth)}/`,
+    };
+    if (config.stackMode === 'external') {
+        return [collectorEndpoint];
+    }
+    return [
+        collectorEndpoint,
+        {
+            name: 'victoria-metrics',
+            url: `http://${host}:${String(config.ports.metrics)}/health`,
+        },
+        {
+            name: 'victoria-logs',
+            url: `http://${host}:${String(config.ports.logs)}/health`,
+        },
+        {
+            name: 'victoria-traces',
+            url: `http://${host}:${String(config.ports.traces)}/health`,
+        },
+    ];
+}
+function readErrorCauseCode(error) {
+    const cause = error.cause;
+    if (typeof cause !== 'object' || cause === null || !('code' in cause)) {
+        return undefined;
+    }
+    const code = cause.code;
+    return typeof code === 'string' && code.length > 0 ? code : undefined;
+}
+function formatReadinessError(error) {
+    if (!(error instanceof Error)) {
+        return String(error);
+    }
+    const causeCode = readErrorCauseCode(error);
+    return causeCode === undefined ? error.message : `${error.message} (${causeCode})`;
+}
+function computeProbeTimeoutMs(options) {
+    return Math.max(1, Math.min(options.maxProbeTimeoutMs, options.deadlineMs - options.nowMs));
+}
+async function probeCollectorOtlpHttpReceiver(options) {
+    const host = formatHttpHost(options.config.bindAddress);
+    try {
+        const response = await options.fetchImpl(`http://${host}:${String(options.config.ports.collectorHttp)}/v1/logs`, {
+            body: '{"resourceLogs":[]}',
+            headers: { 'content-type': 'application/json' },
+            method: 'POST',
+            signal: AbortSignal.timeout(options.timeoutMs),
+        });
+        if (response.ok) {
+            return { ok: true };
+        }
+        return {
+            ok: false,
+            reason: `returned HTTP ${String(response.status)}`,
+        };
+    }
+    catch (error) {
+        return {
+            ok: false,
+            reason: formatReadinessError(error),
+        };
+    }
+}
+export async function checkObservabilityStackReadiness(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const probeTimeoutMs = options.probeTimeoutMs ?? DEFAULT_OBSERVABILITY_READINESS_PROBE_TIMEOUT_MS;
+    const retryDelayMs = options.retryDelayMs ?? 100;
+    const healthEndpoints = createHealthEndpoints(options.config);
+    const deadlineMs = Date.now() + options.config.startupCheckTimeoutMs;
+    let lastErrorReason = 'observability health checks did not complete';
+    try {
+        for (;;) {
+            let ready = true;
+            for (const endpoint of healthEndpoints) {
+                const currentProbeTimeoutMs = computeProbeTimeoutMs({
+                    deadlineMs,
+                    maxProbeTimeoutMs: probeTimeoutMs,
+                    nowMs: Date.now(),
+                });
+                try {
+                    // oxlint-disable-next-line no-await-in-loop -- bounded readiness checks must preserve failure attribution
+                    const response = await fetchImpl(endpoint.url, {
+                        signal: AbortSignal.timeout(currentProbeTimeoutMs),
+                    });
+                    if (!response.ok) {
+                        ready = false;
+                        lastErrorReason = `${endpoint.name} health check returned HTTP ${String(response.status)}`;
+                        break;
+                    }
+                }
+                catch (error) {
+                    ready = false;
+                    lastErrorReason = `${endpoint.name} health check failed: ${formatReadinessError(error)}`;
+                    if (endpoint.name === 'collector') {
+                        // oxlint-disable-next-line no-await-in-loop -- collector fallback must preserve the failed health-check attribution before continuing.
+                        const collectorOtlpProbeResult = await probeCollectorOtlpHttpReceiver({
+                            config: options.config,
+                            fetchImpl,
+                            timeoutMs: computeProbeTimeoutMs({
+                                deadlineMs,
+                                maxProbeTimeoutMs: probeTimeoutMs,
+                                nowMs: Date.now(),
+                            }),
+                        });
+                        if (collectorOtlpProbeResult.ok) {
+                            ready = true;
+                            continue;
+                        }
+                        lastErrorReason = `${lastErrorReason}; OTLP HTTP fallback failed: ${collectorOtlpProbeResult.reason}`;
+                    }
+                    break;
+                }
+            }
+            if (ready) {
+                return { ok: true, status: 'ready' };
+            }
+            if (Date.now() >= deadlineMs) {
+                break;
+            }
+            // oxlint-disable-next-line no-await-in-loop -- bounded readiness polling for transient port binding races
+            await new Promise((resolve) => setTimeout(resolve, retryDelayMs));
+        }
+    }
+    catch (error) {
+        lastErrorReason = error instanceof Error ? error.message : String(error);
+    }
+    return {
+        ok: false,
+        reason: lastErrorReason,
+        status: 'unavailable',
+    };
+}
+//# sourceMappingURL=observability-readiness.js.map

package/dist/observability/observability-readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observability-readiness.js","sourceRoot":"","sources":["../../src/observability/observability-readiness.ts"],"names":[],"mappings":"AAoBA,MAAM,gDAAgD,GAAG,KAAK,CAAC;AAE/D,SAAS,cAAc,CAAC,IAAyB;IAChD,OAAO,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACxC,CAAC;AAOD,SAAS,qBAAqB,CAC7B,MAAyC;IAEzC,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAChD,MAAM,iBAAiB,GAAG;QACzB,IAAI,EAAE,WAAW;QACjB,GAAG,EAAE,UAAU,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG;KACrD,CAAC;IACX,IAAI,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACN,iBAAiB;QACjB;YACC,IAAI,EAAE,kBAAkB;YACxB,GAAG,EAAE,UAAU,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;SAC5D;QACD;YACC,IAAI,EAAE,eAAe;YACrB,GAAG,EAAE,UAAU,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS;SACzD;QACD;YACC,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,UAAU,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS;SAC3D;KACD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAY;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC3C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,GAAG,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,OAI9B;IACA,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,OAAO,CAAC,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7F,CAAC;AAWD,KAAK,UAAU,8BAA8B,CAAC,OAI7C;IACA,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CACvC,UAAU,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,EACtE;YACC,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,CACD,CAAC;QACF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iBAAiB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;SAClD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,oBAAoB,CAAC,KAAK,CAAC;SACnC,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACrD,OAAgD;IAEhD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,gDAAgD,CAAC;IAClG,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;IACjD,MAAM,eAAe,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,qBAAqB,CAAC;IACrE,IAAI,eAAe,GAAG,8CAA8C,CAAC;IACrE,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,IAAI,KAAK,GAAG,IAAI,CAAC;YACjB,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;gBACxC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;oBACnD,UAAU;oBACV,iBAAiB,EAAE,cAAc;oBACjC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;iBACjB,CAAC,CAAC;gBACH,IAAI,CAAC;oBACJ,0GAA0G;oBAC1G,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE;wBAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC;qBAClD,CAAC,CAAC;oBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBAClB,KAAK,GAAG,KAAK,CAAC;wBACd,eAAe,GAAG,GAAG,QAAQ,CAAC,IAAI,+BAA+B,MAAM,CACtE,QAAQ,CAAC,MAAM,CACf,EAAE,CAAC;wBACJ,MAAM;oBACP,CAAC;gBACF,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBAChB,KAAK,GAAG,KAAK,CAAC;oBACd,eAAe,GAAG,GAAG,QAAQ,CAAC,IAAI,yBAAyB,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzF,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBACnC,uIAAuI;wBACvI,MAAM,wBAAwB,GAAG,MAAM,8BAA8B,CAAC;4BACrE,MAAM,EAAE,OAAO,CAAC,MAAM;4BACtB,SAAS;4BACT,SAAS,EAAE,qBAAqB,CAAC;gCAChC,UAAU;gCACV,iBAAiB,EAAE,cAAc;gCACjC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE;6BACjB,CAAC;yBACF,CAAC,CAAC;wBACH,IAAI,wBAAwB,CAAC,EAAE,EAAE,CAAC;4BACjC,KAAK,GAAG,IAAI,CAAC;4BACb,SAAS;wBACV,CAAC;wBACD,eAAe,GAAG,GAAG,eAAe,gCAAgC,wBAAwB,CAAC,MAAM,EAAE,CAAC;oBACvG,CAAC;oBACD,MAAM;gBACP,CAAC;YACF,CAAC;YACD,IAAI,KAAK,EAAE,CAAC;gBACX,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;YACtC,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;gBAC9B,MAAM;YACP,CAAC;YACD,0GAA0G;YAC1G,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;QACnE,CAAC;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,eAAe,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACN,EAAE,EAAE,KAAK;QACT,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,aAAa;KACrB,CAAC;AACH,CAAC"}

package/dist/observability/otel-collector-config.d.ts

@@ -0,0 +1,70 @@
+import type { ManagedObservabilityRuntimeConfig } from './observability-config.js';
+export interface OtelCollectorConfigModel {
+    readonly receivers: {
+        readonly otlp: {
+            readonly protocols: {
+                readonly grpc: {
+                    readonly endpoint: string;
+                };
+                readonly http: {
+                    readonly endpoint: string;
+                };
+            };
+        };
+    };
+    readonly processors: {
+        readonly 'resource/drop-sensitive-fields': {
+            readonly attributes: readonly OtelCollectorAttributeAction[];
+        };
+        readonly 'attributes/drop-sensitive-fields': {
+            readonly actions: readonly OtelCollectorAttributeAction[];
+        };
+        readonly 'transform/drop-log-body': {
+            readonly log_statements: readonly {
+                readonly context: 'log';
+                readonly statements: readonly string[];
+            }[];
+        };
+    };
+    readonly exporters: {
+        readonly otlphttp: {
+            readonly encoding: 'proto';
+            readonly compression: 'gzip';
+            readonly metrics: {
+                readonly metricsEndpoint: string;
+            };
+            readonly logs: {
+                readonly logsEndpoint: string;
+                readonly headers: Record<string, string>;
+            };
+            readonly traces: {
+                readonly tracesEndpoint: string;
+            };
+        };
+    };
+    readonly extensions: {
+        readonly health_check: {
+            readonly endpoint: string;
+        };
+    };
+    readonly service: {
+        readonly extensions: readonly string[];
+        readonly pipelines: {
+            readonly metrics: OtelCollectorPipeline;
+            readonly logs: OtelCollectorPipeline;
+            readonly traces: OtelCollectorPipeline;
+        };
+    };
+}
+export interface OtelCollectorAttributeAction {
+    readonly action: 'delete';
+    readonly key: string;
+}
+export interface OtelCollectorPipeline {
+    readonly receivers: readonly string[];
+    readonly processors: readonly string[];
+    readonly exporters: readonly string[];
+}
+export declare function createOtelCollectorConfigModel(_config: ManagedObservabilityRuntimeConfig): OtelCollectorConfigModel;
+export declare function renderOtelCollectorConfigYaml(config: OtelCollectorConfigModel): string;
+//# sourceMappingURL=otel-collector-config.d.ts.map

package/dist/observability/otel-collector-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-collector-config.d.ts","sourceRoot":"","sources":["../../src/observability/otel-collector-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAqCnF,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,IAAI,EAAE;YACd,QAAQ,CAAC,SAAS,EAAE;gBACnB,QAAQ,CAAC,IAAI,EAAE;oBAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;iBAAE,CAAC;gBAC7C,QAAQ,CAAC,IAAI,EAAE;oBAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;iBAAE,CAAC;aAC7C,CAAC;SACF,CAAC;KACF,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE;QACpB,QAAQ,CAAC,gCAAgC,EAAE;YAC1C,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;SAC7D,CAAC;QACF,QAAQ,CAAC,kCAAkC,EAAE;YAC5C,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;SAC1D,CAAC;QACF,QAAQ,CAAC,yBAAyB,EAAE;YACnC,QAAQ,CAAC,cAAc,EAAE,SAAS;gBACjC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;gBACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;aACvC,EAAE,CAAC;SACJ,CAAC;KACF,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,QAAQ,EAAE;YAClB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;YAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;YAC7B,QAAQ,CAAC,OAAO,EAAE;gBAAE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;aAAE,CAAC;YACvD,QAAQ,CAAC,IAAI,EAAE;gBACd,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;gBAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;aACzC,CAAC;YACF,QAAQ,CAAC,MAAM,EAAE;gBAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;aAAE,CAAC;SACrD,CAAC;KACF,CAAC;IACF,QAAQ,CAAC,UAAU,EAAE;QACpB,QAAQ,CAAC,YAAY,EAAE;YAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,CAAC;KACrD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QACjB,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;QACvC,QAAQ,CAAC,SAAS,EAAE;YACnB,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;YACxC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;YACrC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;SACvC,CAAC;KACF,CAAC;CACF;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,iCAAiC,GACxC,wBAAwB,CA4E1B;AA4BD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,wBAAwB,GAAG,MAAM,CAsDtF"}

package/dist/observability/otel-collector-config.js

@@ -0,0 +1,179 @@
+const SENSITIVE_FIELD_NAMES = [
+    'Authorization',
+    'Cookie',
+    'Set-Cookie',
+    'X-Api-Key',
+    'access_token',
+    'api_key',
+    'apikey',
+    'authorization',
+    'body',
+    'client_secret',
+    'cookie',
+    'db.statement',
+    'http.request.body',
+    'http.request.header.authorization',
+    'http.response.body',
+    'http.response.header.set_cookie',
+    'id_token',
+    'message',
+    'payload',
+    'password',
+    'private_key',
+    'refresh_token',
+    'secret',
+    'set-cookie',
+    'token',
+    'url.full',
+    'url.query',
+    'x-api-key',
+];
+const OTEL_COLLECTOR_GRPC_CONTAINER_PORT = 4317;
+const OTEL_COLLECTOR_HTTP_CONTAINER_PORT = 4318;
+const OTEL_COLLECTOR_HEALTH_CONTAINER_PORT = 13_133;
+export function createOtelCollectorConfigModel(_config) {
+    const sensitiveFieldHeader = SENSITIVE_FIELD_NAMES.join(',');
+    return {
+        receivers: {
+            otlp: {
+                protocols: {
+                    grpc: { endpoint: `0.0.0.0:${String(OTEL_COLLECTOR_GRPC_CONTAINER_PORT)}` },
+                    http: { endpoint: `0.0.0.0:${String(OTEL_COLLECTOR_HTTP_CONTAINER_PORT)}` },
+                },
+            },
+        },
+        processors: {
+            'resource/drop-sensitive-fields': {
+                attributes: SENSITIVE_FIELD_NAMES.map((fieldName) => ({
+                    action: 'delete',
+                    key: fieldName,
+                })),
+            },
+            'attributes/drop-sensitive-fields': {
+                actions: SENSITIVE_FIELD_NAMES.map((fieldName) => ({
+                    action: 'delete',
+                    key: fieldName,
+                })),
+            },
+            'transform/drop-log-body': {
+                log_statements: [
+                    {
+                        context: 'log',
+                        statements: ['set(body, "")'],
+                    },
+                ],
+            },
+        },
+        exporters: {
+            otlphttp: {
+                encoding: 'proto',
+                compression: 'gzip',
+                metrics: { metricsEndpoint: 'http://victoria-metrics:8428/opentelemetry/v1/metrics' },
+                logs: {
+                    logsEndpoint: 'http://victoria-logs:9428/insert/opentelemetry/v1/logs',
+                    headers: { 'VL-Ignore-Fields': sensitiveFieldHeader },
+                },
+                traces: { tracesEndpoint: 'http://victoria-traces:10428/insert/opentelemetry/v1/traces' },
+            },
+        },
+        extensions: {
+            health_check: {
+                endpoint: `0.0.0.0:${String(OTEL_COLLECTOR_HEALTH_CONTAINER_PORT)}`,
+            },
+        },
+        service: {
+            extensions: ['health_check'],
+            pipelines: {
+                metrics: {
+                    receivers: ['otlp'],
+                    processors: ['resource/drop-sensitive-fields', 'attributes/drop-sensitive-fields'],
+                    exporters: ['otlphttp/metrics'],
+                },
+                logs: {
+                    receivers: ['otlp'],
+                    processors: [
+                        'resource/drop-sensitive-fields',
+                        'attributes/drop-sensitive-fields',
+                        'transform/drop-log-body',
+                    ],
+                    exporters: ['otlphttp/logs'],
+                },
+                traces: {
+                    receivers: ['otlp'],
+                    processors: ['resource/drop-sensitive-fields', 'attributes/drop-sensitive-fields'],
+                    exporters: ['otlphttp/traces'],
+                },
+            },
+        },
+    };
+}
+function renderStringArray(indent, values) {
+    return values.map((value) => `${indent}- ${value}`);
+}
+function renderAttributeActions(indent, actions) {
+    return actions.flatMap((action) => [
+        `${indent}- key: ${action.key}`,
+        `${indent}  action: ${action.action}`,
+    ]);
+}
+function renderPipeline(name, pipeline) {
+    return [
+        `    ${name}:`,
+        '      receivers:',
+        ...renderStringArray('        ', pipeline.receivers),
+        '      processors:',
+        ...renderStringArray('        ', pipeline.processors),
+        '      exporters:',
+        ...renderStringArray('        ', pipeline.exporters),
+    ];
+}
+export function renderOtelCollectorConfigYaml(config) {
+    const lines = [
+        'receivers:',
+        '  otlp:',
+        '    protocols:',
+        `      grpc: { endpoint: "${config.receivers.otlp.protocols.grpc.endpoint}" }`,
+        `      http: { endpoint: "${config.receivers.otlp.protocols.http.endpoint}" }`,
+        'processors:',
+        '  resource/drop-sensitive-fields:',
+        '    attributes:',
+        ...renderAttributeActions('      ', config.processors['resource/drop-sensitive-fields'].attributes),
+        '  attributes/drop-sensitive-fields:',
+        '    actions:',
+        ...renderAttributeActions('      ', config.processors['attributes/drop-sensitive-fields'].actions),
+        '  transform/drop-log-body:',
+        '    log_statements:',
+        ...config.processors['transform/drop-log-body'].log_statements.flatMap((statementGroup) => [
+            `      - context: ${statementGroup.context}`,
+            '        statements:',
+            ...statementGroup.statements.map((statement) => `          - ${JSON.stringify(statement)}`),
+        ]),
+        'exporters:',
+        '  otlphttp/metrics:',
+        `    encoding: ${config.exporters.otlphttp.encoding}`,
+        `    compression: ${config.exporters.otlphttp.compression}`,
+        `    metrics_endpoint: ${config.exporters.otlphttp.metrics.metricsEndpoint}`,
+        '  otlphttp/logs:',
+        `    encoding: ${config.exporters.otlphttp.encoding}`,
+        `    compression: ${config.exporters.otlphttp.compression}`,
+        `    logs_endpoint: ${config.exporters.otlphttp.logs.logsEndpoint}`,
+        '    headers:',
+        `      VL-Ignore-Fields: ${config.exporters.otlphttp.logs.headers['VL-Ignore-Fields']}`,
+        '  otlphttp/traces:',
+        `    encoding: ${config.exporters.otlphttp.encoding}`,
+        `    compression: ${config.exporters.otlphttp.compression}`,
+        `    traces_endpoint: ${config.exporters.otlphttp.traces.tracesEndpoint}`,
+        'extensions:',
+        '  health_check:',
+        `    endpoint: ${config.extensions.health_check.endpoint}`,
+        'service:',
+        '  extensions:',
+        ...renderStringArray('    ', config.service.extensions),
+        '  pipelines:',
+        ...renderPipeline('metrics', config.service.pipelines.metrics),
+        ...renderPipeline('logs', config.service.pipelines.logs),
+        ...renderPipeline('traces', config.service.pipelines.traces),
+    ];
+    return `${lines.join('\n')}\n`;
+}
+//# sourceMappingURL=otel-collector-config.js.map

package/dist/observability/otel-collector-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel-collector-config.js","sourceRoot":"","sources":["../../src/observability/otel-collector-config.ts"],"names":[],"mappings":"AAEA,MAAM,qBAAqB,GAAG;IAC7B,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,SAAS;IACT,QAAQ;IACR,eAAe;IACf,MAAM;IACN,eAAe;IACf,QAAQ;IACR,cAAc;IACd,mBAAmB;IACnB,mCAAmC;IACnC,oBAAoB;IACpB,iCAAiC;IACjC,UAAU;IACV,SAAS;IACT,SAAS;IACT,UAAU;IACV,aAAa;IACb,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,OAAO;IACP,UAAU;IACV,WAAW;IACX,WAAW;CACF,CAAC;AAEX,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,MAAM,kCAAkC,GAAG,IAAI,CAAC;AAChD,MAAM,oCAAoC,GAAG,MAAM,CAAC;AA6DpD,MAAM,UAAU,8BAA8B,CAC7C,OAA0C;IAE1C,MAAM,oBAAoB,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE7D,OAAO;QACN,SAAS,EAAE;YACV,IAAI,EAAE;gBACL,SAAS,EAAE;oBACV,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,MAAM,CAAC,kCAAkC,CAAC,EAAE,EAAE;oBAC3E,IAAI,EAAE,EAAE,QAAQ,EAAE,WAAW,MAAM,CAAC,kCAAkC,CAAC,EAAE,EAAE;iBAC3E;aACD;SACD;QACD,UAAU,EAAE;YACX,gCAAgC,EAAE;gBACjC,UAAU,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBACrD,MAAM,EAAE,QAAQ;oBAChB,GAAG,EAAE,SAAS;iBACd,CAAC,CAAC;aACH;YACD,kCAAkC,EAAE;gBACnC,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBAClD,MAAM,EAAE,QAAQ;oBAChB,GAAG,EAAE,SAAS;iBACd,CAAC,CAAC;aACH;YACD,yBAAyB,EAAE;gBAC1B,cAAc,EAAE;oBACf;wBACC,OAAO,EAAE,KAAK;wBACd,UAAU,EAAE,CAAC,eAAe,CAAC;qBAC7B;iBACD;aACD;SACD;QACD,SAAS,EAAE;YACV,QAAQ,EAAE;gBACT,QAAQ,EAAE,OAAO;gBACjB,WAAW,EAAE,MAAM;gBACnB,OAAO,EAAE,EAAE,eAAe,EAAE,uDAAuD,EAAE;gBACrF,IAAI,EAAE;oBACL,YAAY,EAAE,wDAAwD;oBACtE,OAAO,EAAE,EAAE,kBAAkB,EAAE,oBAAoB,EAAE;iBACrD;gBACD,MAAM,EAAE,EAAE,cAAc,EAAE,6DAA6D,EAAE;aACzF;SACD;QACD,UAAU,EAAE;YACX,YAAY,EAAE;gBACb,QAAQ,EAAE,WAAW,MAAM,CAAC,oCAAoC,CAAC,EAAE;aACnE;SACD;QACD,OAAO,EAAE;YACR,UAAU,EAAE,CAAC,cAAc,CAAC;YAC5B,SAAS,EAAE;gBACV,OAAO,EAAE;oBACR,SAAS,EAAE,CAAC,MAAM,CAAC;oBACnB,UAAU,EAAE,CAAC,gCAAgC,EAAE,kCAAkC,CAAC;oBAClF,SAAS,EAAE,CAAC,kBAAkB,CAAC;iBAC/B;gBACD,IAAI,EAAE;oBACL,SAAS,EAAE,CAAC,MAAM,CAAC;oBACnB,UAAU,EAAE;wBACX,gCAAgC;wBAChC,kCAAkC;wBAClC,yBAAyB;qBACzB;oBACD,SAAS,EAAE,CAAC,eAAe,CAAC;iBAC5B;gBACD,MAAM,EAAE;oBACP,SAAS,EAAE,CAAC,MAAM,CAAC;oBACnB,UAAU,EAAE,CAAC,gCAAgC,EAAE,kCAAkC,CAAC;oBAClF,SAAS,EAAE,CAAC,iBAAiB,CAAC;iBAC9B;aACD;SACD;KACD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,MAAyB;IACnE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,MAAM,KAAK,KAAK,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,sBAAsB,CAC9B,MAAc,EACd,OAAgD;IAEhD,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QAClC,GAAG,MAAM,UAAU,MAAM,CAAC,GAAG,EAAE;QAC/B,GAAG,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE;KACrC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,QAA+B;IACpE,OAAO;QACN,OAAO,IAAI,GAAG;QACd,kBAAkB;QAClB,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC;QACpD,mBAAmB;QACnB,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC;QACrD,kBAAkB;QAClB,GAAG,iBAAiB,CAAC,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC;KACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,MAAgC;IAC7E,MAAM,KAAK,GAAG;QACb,YAAY;QACZ,SAAS;QACT,gBAAgB;QAChB,4BAA4B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK;QAC9E,4BAA4B,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,KAAK;QAC9E,aAAa;QACb,mCAAmC;QACnC,iBAAiB;QACjB,GAAG,sBAAsB,CACxB,QAAQ,EACR,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,UAAU,CAC9D;QACD,qCAAqC;QACrC,cAAc;QACd,GAAG,sBAAsB,CACxB,QAAQ,EACR,MAAM,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC,OAAO,CAC7D;QACD,4BAA4B;QAC5B,qBAAqB;QACrB,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1F,oBAAoB,cAAc,CAAC,OAAO,EAAE;YAC5C,qBAAqB;YACrB,GAAG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;SAC3F,CAAC;QACF,YAAY;QACZ,qBAAqB;QACrB,iBAAiB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACrD,oBAAoB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC3D,yBAAyB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE;QAC5E,kBAAkB;QAClB,iBAAiB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACrD,oBAAoB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC3D,sBAAsB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE;QACnE,cAAc;QACd,2BAA2B,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;QACvF,oBAAoB;QACpB,iBAAiB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,EAAE;QACrD,oBAAoB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC3D,wBAAwB,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE;QACzE,aAAa;QACb,iBAAiB;QACjB,iBAAiB,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE;QAC1D,UAAU;QACV,eAAe;QACf,GAAG,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QACvD,cAAc;QACd,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;QAC9D,GAAG,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC;QACxD,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC;KAC5D,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAChC,CAAC"}

package/dist/operations/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/operations/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,yBAAyB,EACzB,aAAa,EAEb,MAAM,6BAA6B,CAAC;AAIrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGnF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CACrC,OAAO,EAAE,yBAAyB,KAC9B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;CAC/B;AA6HD,wBAAgB,+BAA+B,CAC9C,YAAY,EAAE,YAAY,GACxB,SAAS,WAAW,EAAE,CAqCxB;AAED,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,YAAY,GAAG,WAAW,CAQtF;AAsJD,wBAAsB,8BAA8B,CACnD,YAAY,EAAE,kBAAkB,GAC9B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA0E7B;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,sBAAsB,CA6K/F"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/operations/doctor.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACX,yBAAyB,EACzB,aAAa,EAEb,MAAM,6BAA6B,CAAC;AAIrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAGnF,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CACrC,OAAO,EAAE,yBAAyB,KAC9B,IAAI,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC;CAC/B;AAiJD,wBAAgB,+BAA+B,CAC9C,YAAY,EAAE,YAAY,GACxB,SAAS,WAAW,EAAE,CAqCxB;AAED,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,YAAY,GAAG,WAAW,CAQtF;AAsJD,wBAAsB,8BAA8B,CACnD,YAAY,EAAE,kBAAkB,GAC9B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA0E7B;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,sBAAsB,CA8K/F"}

package/dist/operations/doctor.js

@@ -43,7 +43,10 @@ function buildZigVersionCheck(zigVersion, requiredZigVersion) {
 function hasDockerBackedImageProfiles(systemConfig) {
     const gatewayProfiles = Object.values(systemConfig.imageProfiles.gateways);
     const toolVmProfiles = Object.values(systemConfig.imageProfiles.toolVms);
-    return [...gatewayProfiles, ...toolVmProfiles].some((profile) => profile.dockerfile !== undefined || profile.source !== undefined);
+    const hasDockerBackedImageProfile = [...gatewayProfiles, ...toolVmProfiles].some((profile) => profile.dockerfile !== undefined || profile.source !== undefined);
+    const hasManagedObservabilityStack = systemConfig.host.observability?.enabled === true &&
+        systemConfig.host.observability.stack.mode === 'managed';
+    return hasDockerBackedImageProfile || hasManagedObservabilityStack;
 }
 function buildDockerChecks(systemConfig, availableBinaries, dockerDaemonReady) {
     if (!hasDockerBackedImageProfiles(systemConfig)) {
@@ -91,6 +94,21 @@ function buildOpenClawCliCheck(systemConfig, availableBinaries) {
         },
     ];
 }
+function buildObservabilityEnabledCheck(systemConfig) {
+    const observability = systemConfig.host.observability;
+    if (observability?.enabled === true) {
+        return {
+            name: 'observability-enabled',
+            ok: true,
+            hint: observability.stack.mode,
+        };
+    }
+    return {
+        name: 'observability-enabled',
+        ok: true,
+        hint: 'Recommended: enable host.observability with stack.mode managed for a local Victoria stack, or stack.mode external plus stack.scrubbing.responsibility external-collector for a shared collector.',
+    };
+}
 function isSameOrDescendantPath(childPath, parentPath) {
     const relativePath = path.relative(path.resolve(parentPath), path.resolve(childPath));
     return relativePath === '' || (!relativePath.startsWith('..') && !path.isAbsolute(relativePath));
@@ -386,6 +404,7 @@ export function runControllerDoctor(options) {
                 },
             ]
             : []),
+        buildObservabilityEnabledCheck(options.systemConfig),
         checkAnyBinary('qemu', ['qemu-system-aarch64', 'qemu-system-x86_64'], 'Install QEMU (for example: brew install qemu).', availableBinaries),
         checkAnyBinary('qemu-img', ['qemu-img'], 'Install qemu-img (for example: brew install qemu).', availableBinaries),
         checkAnyBinary('mke2fs', [