@ancha-labs/record 0.1.0 → 0.1.1

package/README.md

@@ -8,7 +8,7 @@ npm install @ancha-labs/record @opentelemetry/api
 node --import ./otel.js --import @ancha-labs/record your-agent.js   # otel.js starts your OpenTelemetry SDK
 ```
 
-- **What becomes a span:** each `fetch` or `node:http(s)` call to a tool Ancha replicates (Slack, GitHub, Datadog, PagerDuty, Stripe, and the hosts in `VENDOR_API_BASES`). It is a client span on your own tracer, so it goes out through your own exporter, with `url.full`, the method, the status, `ancha.service`, and the bodies (`ancha.http.request.body`, `ancha.http.response.body`, 64 KB each at most). Other calls are left alone.
+- **What becomes a span:** each `fetch` or `node:http(s)` call to a tool Ancha replicates (Slack, GitHub, Datadog, PagerDuty, Stripe, Okta on your `<org>.okta.com`, Google Drive, and the hosts in `VENDOR_API_BASES`). It is a client span on your own tracer, so it goes out through your own exporter, with `url.full`, the method, the status, `ancha.service`, and the bodies (`ancha.http.request.body`, `ancha.http.response.body`, 64 KB each at most). Other calls are left alone.
 - **Headers are never recorded,** so tokens never leave the process. Ancha removes credentials found in bodies before it stores anything.
 - **Webhooks:** call `recordInbound('slack', rawBody)` in the handler, while the request's server span is active.
 - **A proxy or private host** in front of a tool: `ANCHA_RECORD_HOSTS=api.internal.example=stripe`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ancha-labs/record",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Adds the request and response bodies of your agent's API calls to your OpenTelemetry traces, so Ancha can rebuild the world your agent saw.",
   "type": "module",
   "engines": {

package/src/index.mjs

@@ -26,7 +26,17 @@ function hostTable(extra = process.env.ANCHA_RECORD_HOSTS ?? '') {
   for (const pair of extra.split(',').map(s => s.trim()).filter(Boolean)) { const [host, service] = pair.split('='); if (host && service) table.set(host, service); }
   return table;
 }
-const serviceOf = (url) => { try { return hosts.get(new URL(url).host); } catch { return undefined; } };
+const serviceOf = (url) => { let u; try { u = new URL(url); } catch { return undefined; } return hosts.get(u.host) ?? serviceByRule(u); };
+
+/**
+ * Vendors that live on the customer's own host (Okta: <org>.okta.com) or on a host other APIs share (Google Drive on
+ * www.googleapis.com): a rule each. cloud/rebuild/ir.mjs keeps the same rules; a test holds the two equal.
+ */
+export function serviceByRule(u) {
+  if (/^[a-z0-9-]+\.(?:okta|oktapreview|okta-emea)\.com$/i.test(u.hostname)) return 'okta';
+  if (u.hostname === 'www.googleapis.com' && /^\/(?:upload\/)?drive\//.test(u.pathname)) return 'google-drive';
+  return undefined;
+}
 const clip = (text) => (text.length > MAX_BODY ? `${text.slice(0, MAX_BODY)}[truncated]` : text);
 const textOf = (body) => (typeof body === 'string' ? body : body instanceof URLSearchParams ? body.toString() : body instanceof Uint8Array ? Buffer.from(body).toString('utf8') : '');