@arcote.tech/arc-host 0.7.5 → 0.7.7

package/dist/index.js

@@ -978,7 +978,7 @@ var require_timespan = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/constants.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/constants.js
 var require_constants = __commonJS((exports, module) => {
   var SEMVER_SPEC_VERSION = "2.0.0";
   var MAX_LENGTH = 256;
@@ -1006,13 +1006,13 @@ var require_constants = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/debug.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/debug.js
 var require_debug = __commonJS((exports, module) => {
   var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {};
   module.exports = debug;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/re.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/re.js
 var require_re = __commonJS((exports, module) => {
   var {
     MAX_SAFE_COMPONENT_LENGTH,
@@ -1097,7 +1097,7 @@ var require_re = __commonJS((exports, module) => {
   createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/parse-options.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/parse-options.js
 var require_parse_options = __commonJS((exports, module) => {
   var looseOption = Object.freeze({ loose: true });
   var emptyOpts = Object.freeze({});
@@ -1113,7 +1113,7 @@ var require_parse_options = __commonJS((exports, module) => {
   module.exports = parseOptions;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/identifiers.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/identifiers.js
 var require_identifiers = __commonJS((exports, module) => {
   var numeric = /^[0-9]+$/;
   var compareIdentifiers = (a, b) => {
@@ -1135,7 +1135,7 @@ var require_identifiers = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/semver.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/semver.js
 var require_semver = __commonJS((exports, module) => {
   var debug = require_debug();
   var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
@@ -1404,7 +1404,7 @@ var require_semver = __commonJS((exports, module) => {
   module.exports = SemVer;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/parse.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/parse.js
 var require_parse = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var parse = (version, options, throwErrors = false) => {
@@ -1423,7 +1423,7 @@ var require_parse = __commonJS((exports, module) => {
   module.exports = parse;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/valid.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/valid.js
 var require_valid = __commonJS((exports, module) => {
   var parse = require_parse();
   var valid = (version, options) => {
@@ -1433,7 +1433,7 @@ var require_valid = __commonJS((exports, module) => {
   module.exports = valid;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/clean.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/clean.js
 var require_clean = __commonJS((exports, module) => {
   var parse = require_parse();
   var clean = (version, options) => {
@@ -1443,7 +1443,7 @@ var require_clean = __commonJS((exports, module) => {
   module.exports = clean;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/inc.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/inc.js
 var require_inc = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var inc = (version, release, options, identifier, identifierBase) => {
@@ -1461,7 +1461,7 @@ var require_inc = __commonJS((exports, module) => {
   module.exports = inc;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/diff.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/diff.js
 var require_diff = __commonJS((exports, module) => {
   var parse = require_parse();
   var diff = (version1, version2) => {
@@ -1502,28 +1502,28 @@ var require_diff = __commonJS((exports, module) => {
   module.exports = diff;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/major.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/major.js
 var require_major = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var major = (a, loose) => new SemVer(a, loose).major;
   module.exports = major;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/minor.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/minor.js
 var require_minor = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var minor = (a, loose) => new SemVer(a, loose).minor;
   module.exports = minor;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/patch.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/patch.js
 var require_patch = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var patch = (a, loose) => new SemVer(a, loose).patch;
   module.exports = patch;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/prerelease.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/prerelease.js
 var require_prerelease = __commonJS((exports, module) => {
   var parse = require_parse();
   var prerelease = (version, options) => {
@@ -1533,28 +1533,28 @@ var require_prerelease = __commonJS((exports, module) => {
   module.exports = prerelease;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare.js
 var require_compare = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
   module.exports = compare;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rcompare.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/rcompare.js
 var require_rcompare = __commonJS((exports, module) => {
   var compare = require_compare();
   var rcompare = (a, b, loose) => compare(b, a, loose);
   module.exports = rcompare;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-loose.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare-loose.js
 var require_compare_loose = __commonJS((exports, module) => {
   var compare = require_compare();
   var compareLoose = (a, b) => compare(a, b, true);
   module.exports = compareLoose;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/compare-build.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/compare-build.js
 var require_compare_build = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var compareBuild = (a, b, loose) => {
@@ -1565,63 +1565,63 @@ var require_compare_build = __commonJS((exports, module) => {
   module.exports = compareBuild;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/sort.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/sort.js
 var require_sort = __commonJS((exports, module) => {
   var compareBuild = require_compare_build();
   var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
   module.exports = sort;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/rsort.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/rsort.js
 var require_rsort = __commonJS((exports, module) => {
   var compareBuild = require_compare_build();
   var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
   module.exports = rsort;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gt.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/gt.js
 var require_gt = __commonJS((exports, module) => {
   var compare = require_compare();
   var gt = (a, b, loose) => compare(a, b, loose) > 0;
   module.exports = gt;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lt.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/lt.js
 var require_lt = __commonJS((exports, module) => {
   var compare = require_compare();
   var lt = (a, b, loose) => compare(a, b, loose) < 0;
   module.exports = lt;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/eq.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/eq.js
 var require_eq = __commonJS((exports, module) => {
   var compare = require_compare();
   var eq = (a, b, loose) => compare(a, b, loose) === 0;
   module.exports = eq;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/neq.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/neq.js
 var require_neq = __commonJS((exports, module) => {
   var compare = require_compare();
   var neq = (a, b, loose) => compare(a, b, loose) !== 0;
   module.exports = neq;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/gte.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/gte.js
 var require_gte = __commonJS((exports, module) => {
   var compare = require_compare();
   var gte = (a, b, loose) => compare(a, b, loose) >= 0;
   module.exports = gte;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/lte.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/lte.js
 var require_lte = __commonJS((exports, module) => {
   var compare = require_compare();
   var lte = (a, b, loose) => compare(a, b, loose) <= 0;
   module.exports = lte;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/cmp.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/cmp.js
 var require_cmp = __commonJS((exports, module) => {
   var eq = require_eq();
   var neq = require_neq();
@@ -1668,7 +1668,7 @@ var require_cmp = __commonJS((exports, module) => {
   module.exports = cmp;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/coerce.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/coerce.js
 var require_coerce = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var parse = require_parse();
@@ -1711,7 +1711,45 @@ var require_coerce = __commonJS((exports, module) => {
   module.exports = coerce;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/internal/lrucache.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS((exports, module) => {
+  var parse = require_parse();
+  var constants = require_constants();
+  var SemVer = require_semver();
+  var truncate = (version, truncation, options) => {
+    if (!constants.RELEASE_TYPES.includes(truncation)) {
+      return null;
+    }
+    const clonedVersion = cloneInputVersion(version, options);
+    return clonedVersion && doTruncation(clonedVersion, truncation);
+  };
+  var cloneInputVersion = (version, options) => {
+    const versionStringToParse = version instanceof SemVer ? version.version : version;
+    return parse(versionStringToParse, options);
+  };
+  var doTruncation = (version, truncation) => {
+    if (isPrerelease(truncation)) {
+      return version.version;
+    }
+    version.prerelease = [];
+    switch (truncation) {
+      case "major":
+        version.minor = 0;
+        version.patch = 0;
+        break;
+      case "minor":
+        version.patch = 0;
+        break;
+    }
+    return version.format();
+  };
+  var isPrerelease = (type) => {
+    return type.startsWith("pre");
+  };
+  module.exports = truncate;
+});
+
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/internal/lrucache.js
 var require_lrucache = __commonJS((exports, module) => {
   class LRUCache {
     constructor() {
@@ -1746,7 +1784,7 @@ var require_lrucache = __commonJS((exports, module) => {
   module.exports = LRUCache;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/range.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/range.js
 var require_range = __commonJS((exports, module) => {
   var SPACE_CHARACTERS = /\s+/g;
 
@@ -2120,7 +2158,7 @@ var require_range = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/classes/comparator.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/classes/comparator.js
 var require_comparator = __commonJS((exports, module) => {
   var ANY = Symbol("SemVer ANY");
 
@@ -2231,7 +2269,7 @@ var require_comparator = __commonJS((exports, module) => {
   var Range = require_range();
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/functions/satisfies.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/functions/satisfies.js
 var require_satisfies = __commonJS((exports, module) => {
   var Range = require_range();
   var satisfies = (version, range, options) => {
@@ -2245,14 +2283,14 @@ var require_satisfies = __commonJS((exports, module) => {
   module.exports = satisfies;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/to-comparators.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/to-comparators.js
 var require_to_comparators = __commonJS((exports, module) => {
   var Range = require_range();
   var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
   module.exports = toComparators;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/max-satisfying.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/max-satisfying.js
 var require_max_satisfying = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -2278,7 +2316,7 @@ var require_max_satisfying = __commonJS((exports, module) => {
   module.exports = maxSatisfying;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/min-satisfying.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/min-satisfying.js
 var require_min_satisfying = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -2304,7 +2342,7 @@ var require_min_satisfying = __commonJS((exports, module) => {
   module.exports = minSatisfying;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/min-version.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/min-version.js
 var require_min_version = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Range = require_range();
@@ -2358,7 +2396,7 @@ var require_min_version = __commonJS((exports, module) => {
   module.exports = minVersion;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/valid.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/valid.js
 var require_valid2 = __commonJS((exports, module) => {
   var Range = require_range();
   var validRange = (range, options) => {
@@ -2371,7 +2409,7 @@ var require_valid2 = __commonJS((exports, module) => {
   module.exports = validRange;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/outside.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/outside.js
 var require_outside = __commonJS((exports, module) => {
   var SemVer = require_semver();
   var Comparator = require_comparator();
@@ -2437,21 +2475,21 @@ var require_outside = __commonJS((exports, module) => {
   module.exports = outside;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/gtr.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/gtr.js
 var require_gtr = __commonJS((exports, module) => {
   var outside = require_outside();
   var gtr = (version, range, options) => outside(version, range, ">", options);
   module.exports = gtr;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/ltr.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/ltr.js
 var require_ltr = __commonJS((exports, module) => {
   var outside = require_outside();
   var ltr = (version, range, options) => outside(version, range, "<", options);
   module.exports = ltr;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/intersects.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/intersects.js
 var require_intersects = __commonJS((exports, module) => {
   var Range = require_range();
   var intersects = (r1, r2, options) => {
@@ -2462,7 +2500,7 @@ var require_intersects = __commonJS((exports, module) => {
   module.exports = intersects;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/simplify.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/simplify.js
 var require_simplify = __commonJS((exports, module) => {
   var satisfies = require_satisfies();
   var compare = require_compare();
@@ -2509,7 +2547,7 @@ var require_simplify = __commonJS((exports, module) => {
   };
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/ranges/subset.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/ranges/subset.js
 var require_subset = __commonJS((exports, module) => {
   var Range = require_range();
   var Comparator = require_comparator();
@@ -2669,7 +2707,7 @@ var require_subset = __commonJS((exports, module) => {
   module.exports = subset;
 });
 
-// ../../node_modules/.bun/semver@7.7.4/node_modules/semver/index.js
+// ../../node_modules/.bun/semver@7.8.0/node_modules/semver/index.js
 var require_semver2 = __commonJS((exports, module) => {
   var internalRe = require_re();
   var constants = require_constants();
@@ -2698,6 +2736,7 @@ var require_semver2 = __commonJS((exports, module) => {
   var lte = require_lte();
   var cmp = require_cmp();
   var coerce = require_coerce();
+  var truncate = require_truncate();
   var Comparator = require_comparator();
   var Range = require_range();
   var satisfies = require_satisfies();
@@ -2736,6 +2775,7 @@ var require_semver2 = __commonJS((exports, module) => {
     lte,
     cmp,
     coerce,
+    truncate,
     Comparator,
     Range,
     satisfies,
@@ -3855,14 +3895,16 @@ function filterEventsForTokens(tokens, events, eventDefinitions) {
 // src/context-handler.ts
 class ContextHandler {
   context;
+  telemetry;
   model;
   dataStorage;
   eventPublisher;
   eventDefinitions = new Map;
   hostEventIdCounter = 0;
   initialized = false;
-  constructor(context, dbAdapter) {
+  constructor(context, dbAdapter, telemetry) {
     this.context = context;
+    this.telemetry = telemetry;
     this.dataStorage = new MasterDataStorage(dbAdapter);
     this.eventPublisher = new LocalEventPublisher(this.dataStorage);
     this.model = new Model(context, {
@@ -3910,27 +3952,49 @@ class ContextHandler {
     }
   }
   async executeCommand(commandName, params, rawToken) {
-    const scoped = new ScopedModel(this.model, "request");
-    if (rawToken)
-      scoped.setToken(rawToken);
-    const mutations = mutationExecutor(scoped);
-    let command;
-    if (commandName.includes(".")) {
-      const [elementName, methodName] = commandName.split(".");
-      const element = mutations[elementName];
-      command = element?.[methodName];
-    } else {
-      command = mutations[commandName];
-    }
-    if (!command) {
-      throw new Error(`Command '${commandName}' not found`);
-    }
+    const includePayloads = this.telemetry?.shouldIncludePayloads() ?? false;
+    const baseAttrs = {
+      "rpc.system": "arc",
+      "rpc.method": commandName,
+      "arc.command.name": commandName,
+      "arc.command.params_size": params ? JSON.stringify(params).length : 0,
+      ...includePayloads ? { "arc.command.params": params } : {}
+    };
+    const runCommand = async () => {
+      const scoped = new ScopedModel(this.model, "request");
+      if (rawToken)
+        scoped.setToken(rawToken);
+      const mutations = mutationExecutor(scoped);
+      let command;
+      if (commandName.includes(".")) {
+        const [elementName, methodName] = commandName.split(".");
+        const element = mutations[elementName];
+        command = element?.[methodName];
+      } else {
+        command = mutations[commandName];
+      }
+      if (!command) {
+        throw new Error(`Command '${commandName}' not found`);
+      }
+      try {
+        return await command(params);
+      } catch (error) {
+        console.error(`[ARC] Command '${commandName}' failed:`, error);
+        throw error;
+      }
+    };
+    if (!this.telemetry)
+      return runCommand();
+    const start = Date.now();
     try {
-      const result = await command(params);
-      return result;
-    } catch (error) {
-      console.error(`[ARC] Command '${commandName}' failed:`, error);
-      throw error;
+      return await this.telemetry.startSpan(`command.${commandName}`, runCommand, { attributes: baseAttrs });
+    } finally {
+      this.telemetry.measureSince("arc.command.duration_ms", start, {
+        "arc.command.name": commandName
+      });
+      this.telemetry.incrementCounter("arc.commands.total", 1, {
+        "arc.command.name": commandName
+      });
     }
   }
   async persistEvents(events, clientId, token) {
@@ -4993,7 +5057,7 @@ async function createArcServer(config) {
   const jwtSecret = config.jwtSecret || process.env.JWT_SECRET || "arc-host-secret-change-in-production";
   const port = config.port || 5005;
   const dbAdapter = config.dbAdapterFactory(config.context);
-  const contextHandler = new ContextHandler(config.context, dbAdapter);
+  const contextHandler = new ContextHandler(config.context, dbAdapter, config.telemetry);
   await contextHandler.init();
   const cronScheduler = new CronScheduler(contextHandler);
   cronScheduler.start();
@@ -5058,39 +5122,51 @@ async function createArcServer(config) {
       if (req.method === "OPTIONS") {
         return new Response(null, { headers: corsHeaders2 });
       }
-      const authHeader = req.headers.get("Authorization");
-      let rawToken = authHeader?.replace("Bearer ", "") || url.searchParams.get("token");
-      if (!rawToken) {
-        const cookieHeader = req.headers.get("Cookie");
-        if (cookieHeader) {
-          const match = cookieHeader.match(/arc_token=([^;]+)/);
-          if (match)
-            rawToken = decodeURIComponent(match[1]);
+      const handleRequest = async (span) => {
+        const authHeader = req.headers.get("Authorization");
+        let rawToken = authHeader?.replace("Bearer ", "") || url.searchParams.get("token");
+        if (!rawToken) {
+          const cookieHeader = req.headers.get("Cookie");
+          if (cookieHeader) {
+            const match = cookieHeader.match(/arc_token=([^;]+)/);
+            if (match)
+              rawToken = decodeURIComponent(match[1]);
+          }
         }
-      }
-      const tokenPayload = rawToken ? verifyToken(rawToken) : null;
-      if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
-        if (server2.upgrade(req, { data: { clientId: "" } }))
-          return;
-        return new Response("WebSocket upgrade failed", {
-          status: 500,
-          headers: corsHeaders2
-        });
-      }
-      const reqCtx = {
-        rawToken,
-        tokenPayload,
-        corsHeaders: corsHeaders2
+        const tokenPayload = rawToken ? verifyToken(rawToken) : null;
+        if (url.pathname === "/ws" && req.headers.get("Upgrade") === "websocket") {
+          if (server2.upgrade(req, { data: { clientId: "" } }))
+            return;
+          return new Response("WebSocket upgrade failed", {
+            status: 500,
+            headers: corsHeaders2
+          });
+        }
+        const reqCtx = { rawToken, tokenPayload, corsHeaders: corsHeaders2 };
+        for (const handler of httpHandlers) {
+          const response = await handler(req, url, reqCtx);
+          if (response) {
+            span?.setAttribute("http.response.status_code", response.status);
+            return response;
+          }
+        }
+        span?.setAttribute("http.response.status_code", 404);
+        return new Response("Not Found", { status: 404, headers: corsHeaders2 });
       };
-      for (const handler of httpHandlers) {
-        const response = await handler(req, url, reqCtx);
-        if (response)
-          return response;
-      }
-      return new Response("Not Found", {
-        status: 404,
-        headers: corsHeaders2
-      });
+      const telemetry = config.telemetry;
+      if (!telemetry)
+        return handleRequest(undefined);
+      return telemetry.runWithExtractedContext(req.headers, () => telemetry.startSpan(`${req.method} ${url.pathname}`, (span) => handleRequest(span), {
+        kind: 2,
+        attributes: {
+          "http.request.method": req.method,
+          "http.route": url.pathname,
+          "url.scheme": url.protocol.replace(":", ""),
+          "url.path": url.pathname,
+          "server.address": url.host,
+          "user_agent.original": req.headers.get("user-agent") ?? undefined
+        }
+      }));
     },
     websocket: {
       open(ws) {
@@ -5100,16 +5176,43 @@ async function createArcServer(config) {
         const client = connectionManager.getClientByWs(ws);
         if (!client)
           return;
+        let message;
         try {
-          const message = JSON.parse(messageStr);
-          for (const handler of wsHandlers) {
-            const handled = await handler(client, message, wsCtx);
-            if (handled)
-              break;
-          }
+          message = JSON.parse(messageStr);
         } catch (error) {
           console.error("Failed to parse WS message:", error);
+          return;
         }
+        const dispatch = async () => {
+          try {
+            for (const handler of wsHandlers) {
+              const handled = await handler(client, message, wsCtx);
+              if (handled)
+                break;
+            }
+          } catch (error) {
+            console.error("WS handler error:", error);
+          }
+        };
+        const telemetry = config.telemetry;
+        if (!telemetry) {
+          await dispatch();
+          return;
+        }
+        const carrier = {};
+        if (typeof message?.traceparent === "string")
+          carrier.traceparent = message.traceparent;
+        if (typeof message?.tracestate === "string")
+          carrier.tracestate = message.tracestate;
+        await telemetry.runWithExtractedContext(carrier, () => telemetry.startSpan(`ws.${message?.type ?? "message"}`, () => dispatch(), {
+          kind: 2,
+          attributes: {
+            "messaging.system": "arc-ws",
+            "messaging.operation": "process",
+            "messaging.message.type": message?.type,
+            "arc.ws.client_id": client.id
+          }
+        }));
       },
       close(ws) {
         const client = connectionManager.getClientByWs(ws);
@@ -5168,5 +5271,5 @@ export {
   ConnectionManager
 };
 
-//# debugId=7B502E19E3C91C9064756E2164756E21
+//# debugId=7F7FD59FE83962C764756E2164756E21
 //# sourceMappingURL=index.js.map