@aster-rpc/aster 0.1.2

package/dist/limits.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Security limits for the Aster RPC framework.
+ *
+ * All size caps, entry limits, and validation constants live here.
+ * Import from this module -- never hardcode limits elsewhere.
+ *
+ * Spec reference: Aster-SPEC.md S-Security, Aster-ContractIdentity.md S11.4.4.1
+ */
+/** Maximum wire frame size in bytes (16 MiB). Spec S4.3. */
+export declare const MAX_FRAME_SIZE: number;
+/** Maximum decompressed payload size (16 MiB). Prevents zstd decompression bombs. */
+export declare const MAX_DECOMPRESSED_SIZE: number;
+/** Default timeout for reading a frame from a QUIC stream (seconds). */
+export declare const DEFAULT_FRAME_READ_TIMEOUT_S = 30;
+/** Server-side upper bound on handler execution time (5 minutes).
+ *  Applied regardless of client deadline. If the client sends no deadline
+ *  (deadlineEpochMs=0), this is used as the default. If the client sends
+ *  a deadline further in the future, it is clamped to this value. */
+export declare const MAX_HANDLER_TIMEOUT_S = 300;
+/** Maximum number of items in a client-stream or bidi-stream before
+ *  the server stops accepting. Prevents memory exhaustion from a
+ *  malicious client sending millions of tiny frames. */
+export declare const MAX_CLIENT_STREAM_ITEMS = 100000;
+/** Maximum number of key-value pairs in StreamHeader/CallHeader metadata. */
+export declare const MAX_METADATA_ENTRIES = 64;
+/** Maximum total size of all metadata keys + values in bytes. */
+export declare const MAX_METADATA_TOTAL_BYTES = 8192;
+/** Maximum length of a single metadata key. */
+export declare const MAX_METADATA_KEY_LEN = 256;
+/** Maximum length of a single metadata value. */
+export declare const MAX_METADATA_VALUE_LEN = 4096;
+/** Maximum length of the RpcStatus message string. */
+export declare const MAX_STATUS_MESSAGE_LEN = 4096;
+/** Maximum number of detail key-value pairs in an RpcStatus. */
+export declare const MAX_STATUS_DETAIL_ENTRIES = 32;
+/** Maximum number of ServiceSummary entries in a ConsumerAdmissionResponse. */
+export declare const MAX_SERVICES_IN_ADMISSION = 10000;
+/** Maximum size of the admission request/response JSON payload. */
+export declare const MAX_ADMISSION_PAYLOAD_SIZE: number;
+/** Maximum number of channels per ServiceSummary. */
+export declare const MAX_CHANNELS_PER_SERVICE = 100;
+/** Expected hex string lengths for credential/identity fields. */
+export declare const HEX_FIELD_LENGTHS: Record<string, number>;
+/** Maximum number of entries in a contract collection index. */
+export declare const MAX_COLLECTION_INDEX_ENTRIES = 10000;
+/** Maximum length of a collection entry name. */
+export declare const MAX_COLLECTION_ENTRY_NAME_LEN = 256;
+/** Maximum number of entries in a registry ACL list. */
+export declare const MAX_ACL_LIST_SIZE = 10000;
+/** Maximum number of methods in a ContractManifest. */
+export declare const MAX_MANIFEST_METHODS = 10000;
+/** Maximum number of fields per method in a ContractManifest. */
+export declare const MAX_MANIFEST_FIELDS_PER_METHOD = 1000;
+/** Maximum number of type hashes in a ContractManifest. */
+export declare const MAX_MANIFEST_TYPE_HASHES = 100000;
+/** Maximum gossip message payload before JSON parsing. */
+export declare const MAX_GOSSIP_PAYLOAD_SIZE: number;
+/** Maximum nesting depth for JSON deserialization from untrusted sources. */
+export declare const MAX_JSON_DEPTH = 50;
+/** Maximum length of a service name. */
+export declare const MAX_SERVICE_NAME_LEN = 256;
+/** Maximum length of a method name. */
+export declare const MAX_METHOD_NAME_LEN = 256;
+/** Raised when a security limit is exceeded. Maps to RESOURCE_EXHAUSTED. */
+export declare class LimitExceeded extends Error {
+    readonly field: string;
+    readonly limit: number;
+    readonly actual: number | undefined;
+    constructor(field: string, limit: number, actual?: number);
+}
+/** Validate that a hex-encoded field has the expected length. */
+export declare function validateHexField(name: string, value: string): void;
+/** Validate metadata key-value pairs against limits. */
+export declare function validateMetadata(keys: string[], values: string[]): void;
+/** Truncate an RpcStatus message to the maximum allowed length. */
+export declare function validateStatusMessage(message: string): string;
+//# sourceMappingURL=limits.d.ts.map

package/dist/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,4DAA4D;AAC5D,eAAO,MAAM,cAAc,QAAmB,CAAC;AAE/C,qFAAqF;AACrF,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD,wEAAwE;AACxE,eAAO,MAAM,4BAA4B,KAAO,CAAC;AAEjD;;;qEAGqE;AACrE,eAAO,MAAM,qBAAqB,MAAQ,CAAC;AAE3C;;wDAEwD;AACxD,eAAO,MAAM,uBAAuB,SAAU,CAAC;AAI/C,6EAA6E;AAC7E,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,OAAO,CAAC;AAE7C,+CAA+C;AAC/C,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,iDAAiD;AACjD,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAI3C,sDAAsD;AACtD,eAAO,MAAM,sBAAsB,OAAO,CAAC;AAE3C,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAI5C,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,QAAS,CAAC;AAEhD,mEAAmE;AACnE,eAAO,MAAM,0BAA0B,QAAY,CAAC;AAEpD,qDAAqD;AACrD,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAI5C,kEAAkE;AAClE,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAMpD,CAAC;AAIF,gEAAgE;AAChE,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD,iDAAiD;AACjD,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD,wDAAwD;AACxD,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,uDAAuD;AACvD,eAAO,MAAM,oBAAoB,QAAS,CAAC;AAE3C,iEAAiE;AACjE,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD,2DAA2D;AAC3D,eAAO,MAAM,wBAAwB,SAAU,CAAC;AAIhD,0DAA0D;AAC1D,eAAO,MAAM,uBAAuB,QAAY,CAAC;AAEjD,6EAA6E;AAC7E,eAAO,MAAM,cAAc,KAAK,CAAC;AAIjC,wCAAwC;AACxC,eAAO,MAAM,oBAAoB,MAAM,CAAC;AAExC,uCAAuC;AACvC,eAAO,MAAM,mBAAmB,MAAM,CAAC;AAIvC,4EAA4E;AAC5E,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;gBAExB,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;CAQ1D;AAID,iEAAiE;AACjE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAWlE;AAID,wDAAwD;AACxD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAwBvE;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAK7D"}

package/dist/limits.js

@@ -0,0 +1,137 @@
+/**
+ * Security limits for the Aster RPC framework.
+ *
+ * All size caps, entry limits, and validation constants live here.
+ * Import from this module -- never hardcode limits elsewhere.
+ *
+ * Spec reference: Aster-SPEC.md S-Security, Aster-ContractIdentity.md S11.4.4.1
+ */
+// -- Wire-level limits -------------------------------------------------------
+/** Maximum wire frame size in bytes (16 MiB). Spec S4.3. */
+export const MAX_FRAME_SIZE = 16 * 1024 * 1024;
+/** Maximum decompressed payload size (16 MiB). Prevents zstd decompression bombs. */
+export const MAX_DECOMPRESSED_SIZE = 16 * 1024 * 1024;
+/** Default timeout for reading a frame from a QUIC stream (seconds). */
+export const DEFAULT_FRAME_READ_TIMEOUT_S = 30.0;
+/** Server-side upper bound on handler execution time (5 minutes).
+ *  Applied regardless of client deadline. If the client sends no deadline
+ *  (deadlineEpochMs=0), this is used as the default. If the client sends
+ *  a deadline further in the future, it is clamped to this value. */
+export const MAX_HANDLER_TIMEOUT_S = 300.0;
+/** Maximum number of items in a client-stream or bidi-stream before
+ *  the server stops accepting. Prevents memory exhaustion from a
+ *  malicious client sending millions of tiny frames. */
+export const MAX_CLIENT_STREAM_ITEMS = 100_000;
+// -- Metadata limits ---------------------------------------------------------
+/** Maximum number of key-value pairs in StreamHeader/CallHeader metadata. */
+export const MAX_METADATA_ENTRIES = 64;
+/** Maximum total size of all metadata keys + values in bytes. */
+export const MAX_METADATA_TOTAL_BYTES = 8192;
+/** Maximum length of a single metadata key. */
+export const MAX_METADATA_KEY_LEN = 256;
+/** Maximum length of a single metadata value. */
+export const MAX_METADATA_VALUE_LEN = 4096;
+// -- RPC status limits -------------------------------------------------------
+/** Maximum length of the RpcStatus message string. */
+export const MAX_STATUS_MESSAGE_LEN = 4096;
+/** Maximum number of detail key-value pairs in an RpcStatus. */
+export const MAX_STATUS_DETAIL_ENTRIES = 32;
+// -- Admission limits --------------------------------------------------------
+/** Maximum number of ServiceSummary entries in a ConsumerAdmissionResponse. */
+export const MAX_SERVICES_IN_ADMISSION = 10_000;
+/** Maximum size of the admission request/response JSON payload. */
+export const MAX_ADMISSION_PAYLOAD_SIZE = 64 * 1024;
+/** Maximum number of channels per ServiceSummary. */
+export const MAX_CHANNELS_PER_SERVICE = 100;
+// -- Credential field lengths (hex characters) --------------------------------
+/** Expected hex string lengths for credential/identity fields. */
+export const HEX_FIELD_LENGTHS = {
+    root_pubkey: 64, // 32 bytes -> 64 hex chars
+    nonce: 64,
+    signature: 128, // 64 bytes -> 128 hex chars
+    endpoint_id: 64,
+    contract_id: 64,
+};
+// -- Registry / collection limits --------------------------------------------
+/** Maximum number of entries in a contract collection index. */
+export const MAX_COLLECTION_INDEX_ENTRIES = 10_000;
+/** Maximum length of a collection entry name. */
+export const MAX_COLLECTION_ENTRY_NAME_LEN = 256;
+/** Maximum number of entries in a registry ACL list. */
+export const MAX_ACL_LIST_SIZE = 10_000;
+/** Maximum number of methods in a ContractManifest. */
+export const MAX_MANIFEST_METHODS = 10_000;
+/** Maximum number of fields per method in a ContractManifest. */
+export const MAX_MANIFEST_FIELDS_PER_METHOD = 1_000;
+/** Maximum number of type hashes in a ContractManifest. */
+export const MAX_MANIFEST_TYPE_HASHES = 100_000;
+// -- Gossip limits -----------------------------------------------------------
+/** Maximum gossip message payload before JSON parsing. */
+export const MAX_GOSSIP_PAYLOAD_SIZE = 64 * 1024;
+/** Maximum nesting depth for JSON deserialization from untrusted sources. */
+export const MAX_JSON_DEPTH = 50;
+// -- General string limits ---------------------------------------------------
+/** Maximum length of a service name. */
+export const MAX_SERVICE_NAME_LEN = 256;
+/** Maximum length of a method name. */
+export const MAX_METHOD_NAME_LEN = 256;
+// -- Validation helpers -------------------------------------------------------
+/** Raised when a security limit is exceeded. Maps to RESOURCE_EXHAUSTED. */
+export class LimitExceeded extends Error {
+    field;
+    limit;
+    actual;
+    constructor(field, limit, actual) {
+        const detail = actual !== undefined ? ` (got ${actual})` : '';
+        super(`${field} exceeds limit of ${limit}${detail}`);
+        this.name = 'LimitExceeded';
+        this.field = field;
+        this.limit = limit;
+        this.actual = actual;
+    }
+}
+const HEX_REGEX = /^[0-9a-fA-F]*$/;
+/** Validate that a hex-encoded field has the expected length. */
+export function validateHexField(name, value) {
+    if (!value)
+        return; // empty is allowed (optional fields)
+    const expected = HEX_FIELD_LENGTHS[name];
+    if (expected !== undefined && value.length !== expected) {
+        throw new LimitExceeded(name, expected, value.length);
+    }
+    if (!HEX_REGEX.test(value)) {
+        throw new Error(`${name}: invalid hex string`);
+    }
+}
+const encoder = new TextEncoder();
+/** Validate metadata key-value pairs against limits. */
+export function validateMetadata(keys, values) {
+    const count = keys.length;
+    if (count > MAX_METADATA_ENTRIES) {
+        throw new LimitExceeded('metadata entries', MAX_METADATA_ENTRIES, count);
+    }
+    let totalBytes = 0;
+    for (const k of keys) {
+        if (k.length > MAX_METADATA_KEY_LEN) {
+            throw new LimitExceeded('metadata key length', MAX_METADATA_KEY_LEN, k.length);
+        }
+        totalBytes += encoder.encode(k).byteLength;
+    }
+    for (const v of values) {
+        if (v.length > MAX_METADATA_VALUE_LEN) {
+            throw new LimitExceeded('metadata value length', MAX_METADATA_VALUE_LEN, v.length);
+        }
+        totalBytes += encoder.encode(v).byteLength;
+    }
+    if (totalBytes > MAX_METADATA_TOTAL_BYTES) {
+        throw new LimitExceeded('metadata total bytes', MAX_METADATA_TOTAL_BYTES, totalBytes);
+    }
+}
+/** Truncate an RpcStatus message to the maximum allowed length. */
+export function validateStatusMessage(message) {
+    if (message.length > MAX_STATUS_MESSAGE_LEN) {
+        return message.slice(0, MAX_STATUS_MESSAGE_LEN - 3) + '...';
+    }
+    return message;
+}
+//# sourceMappingURL=limits.js.map

package/dist/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../src/limits.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,+EAA+E;AAE/E,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE/C,qFAAqF;AACrF,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,wEAAwE;AACxE,MAAM,CAAC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAEjD;;;qEAGqE;AACrE,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAE3C;;wDAEwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,OAAO,CAAC;AAE/C,+EAA+E;AAE/E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,iEAAiE;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAE7C,+CAA+C;AAC/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,+EAA+E;AAE/E,sDAAsD;AACtD,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAE3C,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,+EAA+E;AAE/E,+EAA+E;AAC/E,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEhD,mEAAmE;AACnE,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD,qDAAqD;AACrD,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,CAAC;AAE5C,gFAAgF;AAEhF,kEAAkE;AAClE,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACvD,WAAW,EAAE,EAAE,EAAK,2BAA2B;IAC/C,KAAK,EAAE,EAAE;IACT,SAAS,EAAE,GAAG,EAAM,4BAA4B;IAChD,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,EAAE;CAChB,CAAC;AAEF,+EAA+E;AAE/E,gEAAgE;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAEnD,iDAAiD;AACjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD,wDAAwD;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,uDAAuD;AACvD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAE3C,iEAAiE;AACjE,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD,2DAA2D;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,OAAO,CAAC;AAEhD,+EAA+E;AAE/E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,6EAA6E;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAEjC,+EAA+E;AAE/E,wCAAwC;AACxC,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAExC,uCAAuC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEvC,gFAAgF;AAEhF,4EAA4E;AAC5E,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,KAAK,CAAS;IACd,KAAK,CAAS;IACd,MAAM,CAAqB;IAEpC,YAAY,KAAa,EAAE,KAAa,EAAE,MAAe;QACvD,MAAM,MAAM,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,KAAK,CAAC,GAAG,KAAK,qBAAqB,KAAK,GAAG,MAAM,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,qCAAqC;IAEzD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,wDAAwD;AACxD,MAAM,UAAU,gBAAgB,CAAC,IAAc,EAAE,MAAgB;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,IAAI,KAAK,GAAG,oBAAoB,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;YACpC,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7C,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;YACtC,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,sBAAsB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACrF,CAAC;QACD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC7C,CAAC;IAED,IAAI,UAAU,GAAG,wBAAwB,EAAE,CAAC;QAC1C,MAAM,IAAI,aAAa,CAAC,sBAAsB,EAAE,wBAAwB,EAAE,UAAU,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,OAAO,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/logging.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Structured logging for Aster services.
+ *
+ * Provides JSON and text format logging with request correlation,
+ * sensitive field masking, and standard log fields.
+ */
+/** Request context stored via AsyncLocalStorage for correlation. */
+export interface RequestContext {
+    service: string;
+    method: string;
+    requestId: string;
+    peer?: string;
+}
+/** Run a callback with request context attached to all logs within. */
+export declare function withRequestContext<T>(ctx: RequestContext, fn: () => T): T;
+/** Get the current request context (if any). */
+export declare function getRequestContext(): RequestContext | undefined;
+type LogLevel = 'debug' | 'info' | 'warning' | 'error';
+export interface LoggerOptions {
+    format?: 'json' | 'text';
+    level?: LogLevel;
+    mask?: boolean;
+}
+/** Simple structured logger. For production, swap with pino. */
+export declare class AsterLogger {
+    private format;
+    private minLevel;
+    private mask;
+    constructor(opts?: LoggerOptions);
+    debug(msg: string, fields?: Record<string, unknown>): void;
+    info(msg: string, fields?: Record<string, unknown>): void;
+    warning(msg: string, fields?: Record<string, unknown>): void;
+    warn(msg: string, fields?: Record<string, unknown>): void;
+    error(msg: string, fields?: Record<string, unknown>): void;
+    private log;
+}
+/** Create a logger from AsterConfig values. */
+export declare function createLogger(opts?: LoggerOptions): AsterLogger;
+export {};
+//# sourceMappingURL=logging.d.ts.map

package/dist/logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.d.ts","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,uEAAuE;AACvE,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEzE;AAED,gDAAgD;AAChD,wBAAgB,iBAAiB,IAAI,cAAc,GAAG,SAAS,CAE9D;AAED,KAAK,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AA4BvD,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,QAAQ,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,gEAAgE;AAChE,qBAAa,WAAW;IACtB,OAAO,CAAC,MAAM,CAAkB;IAChC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,IAAI,CAAU;gBAEV,IAAI,CAAC,EAAE,aAAa;IAMhC,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAC1D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IACzD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAC5D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IACzD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAE1D,OAAO,CAAC,GAAG;CAgCZ;AAED,+CAA+C;AAC/C,wBAAgB,YAAY,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,WAAW,CAE9D"}

package/dist/logging.js

@@ -0,0 +1,92 @@
+/**
+ * Structured logging for Aster services.
+ *
+ * Provides JSON and text format logging with request correlation,
+ * sensitive field masking, and standard log fields.
+ */
+import { AsyncLocalStorage } from 'node:async_hooks';
+const requestContext = new AsyncLocalStorage();
+/** Run a callback with request context attached to all logs within. */
+export function withRequestContext(ctx, fn) {
+    return requestContext.run(ctx, fn);
+}
+/** Get the current request context (if any). */
+export function getRequestContext() {
+    return requestContext.getStore();
+}
+const LEVEL_ORDER = {
+    debug: 0,
+    info: 1,
+    warning: 2,
+    error: 3,
+};
+/** Sensitive fields that are masked in log output. */
+const SENSITIVE_FIELDS = new Set([
+    'secret_key', 'private_key', 'signing_key', 'signature', 'credential_json',
+]);
+/** Identifier fields that are truncated. */
+const TRUNCATE_FIELDS = new Set([
+    'root_pubkey', 'endpoint_id', 'node_id', 'contract_id', 'nonce',
+]);
+function maskValue(key, value, mask) {
+    if (!mask)
+        return value;
+    if (SENSITIVE_FIELDS.has(key))
+        return '***';
+    if (TRUNCATE_FIELDS.has(key) && typeof value === 'string' && value.length > 12) {
+        return `${value.slice(0, 7)}...${value.slice(-4)}`;
+    }
+    return value;
+}
+/** Simple structured logger. For production, swap with pino. */
+export class AsterLogger {
+    format;
+    minLevel;
+    mask;
+    constructor(opts) {
+        this.format = opts?.format ?? 'text';
+        this.minLevel = LEVEL_ORDER[opts?.level ?? 'info'];
+        this.mask = opts?.mask ?? true;
+    }
+    debug(msg, fields) { this.log('debug', msg, fields); }
+    info(msg, fields) { this.log('info', msg, fields); }
+    warning(msg, fields) { this.log('warning', msg, fields); }
+    warn(msg, fields) { this.log('warning', msg, fields); }
+    error(msg, fields) { this.log('error', msg, fields); }
+    log(level, msg, fields) {
+        if (LEVEL_ORDER[level] < this.minLevel)
+            return;
+        const ctx = getRequestContext();
+        const entry = {
+            ts: new Date().toISOString(),
+            level,
+            msg,
+        };
+        if (ctx) {
+            entry.service = ctx.service;
+            entry.method = ctx.method;
+            entry.request_id = ctx.requestId;
+            if (ctx.peer)
+                entry.peer = maskValue('endpoint_id', ctx.peer, this.mask);
+        }
+        if (fields) {
+            for (const [k, v] of Object.entries(fields)) {
+                entry[k] = maskValue(k, v, this.mask);
+            }
+        }
+        if (this.format === 'json') {
+            console.log(JSON.stringify(entry));
+        }
+        else {
+            const time = new Date().toLocaleTimeString('en-US', { hour12: false });
+            const ctxStr = ctx ? ` [svc=${ctx.service} method=${ctx.method} req=${ctx.requestId.slice(0, 8)}]` : '';
+            const fieldStr = fields ? ' ' + Object.entries(fields).map(([k, v]) => `${k}=${maskValue(k, v, this.mask)}`).join(' ') : '';
+            console.log(`${time} ${level.toUpperCase().padEnd(7)} ${msg}${ctxStr}${fieldStr}`);
+        }
+    }
+}
+/** Create a logger from AsterConfig values. */
+export function createLogger(opts) {
+    return new AsterLogger(opts);
+}
+//# sourceMappingURL=logging.js.map

package/dist/logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging.js","sourceRoot":"","sources":["../src/logging.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAUrD,MAAM,cAAc,GAAG,IAAI,iBAAiB,EAAkB,CAAC;AAE/D,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAAI,GAAmB,EAAE,EAAW;IACpE,OAAO,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB;IAC/B,OAAO,cAAc,CAAC,QAAQ,EAAE,CAAC;AACnC,CAAC;AAID,MAAM,WAAW,GAA6B;IAC5C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,sDAAsD;AACtD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAC/B,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB;CAC3E,CAAC,CAAC;AAEH,4CAA4C;AAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO;CAChE,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,IAAa;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC/E,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,gEAAgE;AAChE,MAAM,OAAO,WAAW;IACd,MAAM,CAAkB;IACxB,QAAQ,CAAS;IACjB,IAAI,CAAU;IAEtB,YAAY,IAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,MAAM,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,IAAI,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,GAAW,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,CAAC,GAAW,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAW,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,GAAW,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/F,KAAK,CAAC,GAAW,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAEtF,GAAG,CAAC,KAAe,EAAE,GAAW,EAAE,MAAgC;QACxE,IAAI,WAAW,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,QAAQ;YAAE,OAAO;QAE/C,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,MAAM,KAAK,GAA4B;YACrC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,KAAK;YACL,GAAG;SACJ,CAAC;QAEF,IAAI,GAAG,EAAE,CAAC;YACR,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC5B,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,SAAS,CAAC,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,OAAO,WAAW,GAAG,CAAC,MAAM,QAAQ,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5H,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,GAAG,MAAM,GAAG,QAAQ,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/metadata.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Metadata — extensible semantic documentation for services, methods, and fields.
+ *
+ * Provides descriptions that AI agents (via MCP) and humans can use to
+ * understand what services do and how to populate request fields.
+ *
+ * Metadata is NON-CANONICAL — it does NOT affect contract identity (BLAKE3 hash)
+ * and does NOT appear in the wire protocol.
+ */
+export declare class Metadata {
+    description: string;
+    constructor(init?: Partial<Metadata>);
+}
+//# sourceMappingURL=metadata.d.ts.map

package/dist/metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.d.ts","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,qBACa,QAAQ;IACnB,WAAW,SAAM;gBAEL,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC;CAGrC"}

package/dist/metadata.js

@@ -0,0 +1,68 @@
+/**
+ * Metadata — extensible semantic documentation for services, methods, and fields.
+ *
+ * Provides descriptions that AI agents (via MCP) and humans can use to
+ * understand what services do and how to populate request fields.
+ *
+ * Metadata is NON-CANONICAL — it does NOT affect contract identity (BLAKE3 hash)
+ * and does NOT appear in the wire protocol.
+ */
+var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
+    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
+    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
+    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
+    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
+    var _, done = false;
+    for (var i = decorators.length - 1; i >= 0; i--) {
+        var context = {};
+        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
+        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
+        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
+        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
+        if (kind === "accessor") {
+            if (result === void 0) continue;
+            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
+            if (_ = accept(result.get)) descriptor.get = _;
+            if (_ = accept(result.set)) descriptor.set = _;
+            if (_ = accept(result.init)) initializers.unshift(_);
+        }
+        else if (_ = accept(result)) {
+            if (kind === "field") initializers.unshift(_);
+            else descriptor[key] = _;
+        }
+    }
+    if (target) Object.defineProperty(target, contextIn.name, descriptor);
+    done = true;
+};
+var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
+    var useValue = arguments.length > 2;
+    for (var i = 0; i < initializers.length; i++) {
+        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
+    }
+    return useValue ? value : void 0;
+};
+import { WireType } from './decorators.js';
+let Metadata = (() => {
+    let _classDecorators = [WireType('_aster/Metadata')];
+    let _classDescriptor;
+    let _classExtraInitializers = [];
+    let _classThis;
+    var Metadata = class {
+        static { _classThis = this; }
+        static {
+            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(null) : void 0;
+            __esDecorate(null, _classDescriptor = { value: _classThis }, _classDecorators, { kind: "class", name: _classThis.name, metadata: _metadata }, null, _classExtraInitializers);
+            Metadata = _classThis = _classDescriptor.value;
+            if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
+            __runInitializers(_classThis, _classExtraInitializers);
+        }
+        description = '';
+        constructor(init) {
+            if (init)
+                Object.assign(this, init);
+        }
+    };
+    return Metadata = _classThis;
+})();
+export { Metadata };
+//# sourceMappingURL=metadata.js.map

package/dist/metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata.js","sourceRoot":"","sources":["../src/metadata.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;IAG9B,QAAQ;4BADpB,QAAQ,CAAC,iBAAiB,CAAC;;;;;;;;YAC5B,6KAMC;;;YANY,uDAAQ;;QACnB,WAAW,GAAG,EAAE,CAAC;QAEjB,YAAY,IAAwB;YAClC,IAAI,IAAI;gBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,CAAC;;;;SALU,QAAQ"}

package/dist/metrics.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Connection and admission metrics.
+ *
+ * Lightweight in-memory counters for monitoring connection and
+ * admission activity. Complements the RPC-level MetricsInterceptor.
+ */
+/** Connection metrics counters. */
+export declare class ConnectionMetrics {
+    connectionsAccepted: number;
+    connectionsRejected: number;
+    connectionsClosed: number;
+    connectionsActive: number;
+    /** Currently active RPC streams. */
+    streamsActive: number;
+    /** Total streams handled since startup. */
+    streamsTotal: number;
+    onAccept(): void;
+    onReject(): void;
+    onClose(): void;
+    onStreamOpen(): void;
+    onStreamClose(): void;
+    snapshot(): Record<string, number>;
+    reset(): void;
+}
+/** Admission metrics counters. */
+export declare class AdmissionMetrics {
+    admissionsAttempted: number;
+    admissionsSucceeded: number;
+    admissionsRejected: number;
+    admissionsErrored: number;
+    /** Duration of the last admission handshake in milliseconds. */
+    lastAdmissionMs: number;
+    onAttempt(): void;
+    onSuccess(durationMs?: number): void;
+    onReject(): void;
+    onError(): void;
+    snapshot(): Record<string, number>;
+    reset(): void;
+}
+//# sourceMappingURL=metrics.d.ts.map

package/dist/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mCAAmC;AACnC,qBAAa,iBAAiB;IAC5B,mBAAmB,SAAK;IACxB,mBAAmB,SAAK;IACxB,iBAAiB,SAAK;IACtB,iBAAiB,SAAK;IAEtB,oCAAoC;IACpC,aAAa,SAAK;IAClB,2CAA2C;IAC3C,YAAY,SAAK;IAEjB,QAAQ,IAAI,IAAI;IAKhB,QAAQ,IAAI,IAAI;IAIhB,OAAO,IAAI,IAAI;IAKf,YAAY,IAAI,IAAI;IAKpB,aAAa,IAAI,IAAI;IAIrB,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAWlC,KAAK,IAAI,IAAI;CAQd;AAED,kCAAkC;AAClC,qBAAa,gBAAgB;IAC3B,mBAAmB,SAAK;IACxB,mBAAmB,SAAK;IACxB,kBAAkB,SAAK;IACvB,iBAAiB,SAAK;IACtB,gEAAgE;IAChE,eAAe,SAAK;IAEpB,SAAS,IAAI,IAAI;IAIjB,SAAS,CAAC,UAAU,SAAI,GAAG,IAAI;IAK/B,QAAQ,IAAI,IAAI;IAIhB,OAAO,IAAI,IAAI;IAIf,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAUlC,KAAK,IAAI,IAAI;CAOd"}

package/dist/metrics.js

@@ -0,0 +1,92 @@
+/**
+ * Connection and admission metrics.
+ *
+ * Lightweight in-memory counters for monitoring connection and
+ * admission activity. Complements the RPC-level MetricsInterceptor.
+ */
+/** Connection metrics counters. */
+export class ConnectionMetrics {
+    connectionsAccepted = 0;
+    connectionsRejected = 0;
+    connectionsClosed = 0;
+    connectionsActive = 0;
+    /** Currently active RPC streams. */
+    streamsActive = 0;
+    /** Total streams handled since startup. */
+    streamsTotal = 0;
+    onAccept() {
+        this.connectionsAccepted++;
+        this.connectionsActive++;
+    }
+    onReject() {
+        this.connectionsRejected++;
+    }
+    onClose() {
+        this.connectionsClosed++;
+        this.connectionsActive = Math.max(0, this.connectionsActive - 1);
+    }
+    onStreamOpen() {
+        this.streamsActive++;
+        this.streamsTotal++;
+    }
+    onStreamClose() {
+        this.streamsActive = Math.max(0, this.streamsActive - 1);
+    }
+    snapshot() {
+        return {
+            connections_accepted: this.connectionsAccepted,
+            connections_rejected: this.connectionsRejected,
+            connections_closed: this.connectionsClosed,
+            connections_active: this.connectionsActive,
+            streams_active: this.streamsActive,
+            streams_total: this.streamsTotal,
+        };
+    }
+    reset() {
+        this.connectionsAccepted = 0;
+        this.connectionsRejected = 0;
+        this.connectionsClosed = 0;
+        this.connectionsActive = 0;
+        this.streamsActive = 0;
+        this.streamsTotal = 0;
+    }
+}
+/** Admission metrics counters. */
+export class AdmissionMetrics {
+    admissionsAttempted = 0;
+    admissionsSucceeded = 0;
+    admissionsRejected = 0;
+    admissionsErrored = 0;
+    /** Duration of the last admission handshake in milliseconds. */
+    lastAdmissionMs = 0;
+    onAttempt() {
+        this.admissionsAttempted++;
+    }
+    onSuccess(durationMs = 0) {
+        this.admissionsSucceeded++;
+        this.lastAdmissionMs = durationMs;
+    }
+    onReject() {
+        this.admissionsRejected++;
+    }
+    onError() {
+        this.admissionsErrored++;
+    }
+    snapshot() {
+        return {
+            admissions_attempted: this.admissionsAttempted,
+            admissions_succeeded: this.admissionsSucceeded,
+            admissions_rejected: this.admissionsRejected,
+            admissions_errored: this.admissionsErrored,
+            last_admission_ms: this.lastAdmissionMs,
+        };
+    }
+    reset() {
+        this.admissionsAttempted = 0;
+        this.admissionsSucceeded = 0;
+        this.admissionsRejected = 0;
+        this.admissionsErrored = 0;
+        this.lastAdmissionMs = 0;
+    }
+}
+//# sourceMappingURL=metrics.js.map

package/dist/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mCAAmC;AACnC,MAAM,OAAO,iBAAiB;IAC5B,mBAAmB,GAAG,CAAC,CAAC;IACxB,mBAAmB,GAAG,CAAC,CAAC;IACxB,iBAAiB,GAAG,CAAC,CAAC;IACtB,iBAAiB,GAAG,CAAC,CAAC;IAEtB,oCAAoC;IACpC,aAAa,GAAG,CAAC,CAAC;IAClB,2CAA2C;IAC3C,YAAY,GAAG,CAAC,CAAC;IAEjB,QAAQ;QACN,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACzB,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,YAAY;QACV,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED,aAAa;QACX,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,QAAQ;QACN,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,mBAAmB;YAC9C,oBAAoB,EAAE,IAAI,CAAC,mBAAmB;YAC9C,kBAAkB,EAAE,IAAI,CAAC,iBAAiB;YAC1C,kBAAkB,EAAE,IAAI,CAAC,iBAAiB;YAC1C,cAAc,EAAE,IAAI,CAAC,aAAa;YAClC,aAAa,EAAE,IAAI,CAAC,YAAY;SACjC,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;IACxB,CAAC;CACF;AAED,kCAAkC;AAClC,MAAM,OAAO,gBAAgB;IAC3B,mBAAmB,GAAG,CAAC,CAAC;IACxB,mBAAmB,GAAG,CAAC,CAAC;IACxB,kBAAkB,GAAG,CAAC,CAAC;IACvB,iBAAiB,GAAG,CAAC,CAAC;IACtB,gEAAgE;IAChE,eAAe,GAAG,CAAC,CAAC;IAEpB,SAAS;QACP,IAAI,CAAC,mBAAmB,EAAE,CAAC;IAC7B,CAAC;IAED,SAAS,CAAC,UAAU,GAAG,CAAC;QACtB,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;IACpC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,OAAO;QACL,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,QAAQ;QACN,OAAO;YACL,oBAAoB,EAAE,IAAI,CAAC,mBAAmB;YAC9C,oBAAoB,EAAE,IAAI,CAAC,mBAAmB;YAC9C,mBAAmB,EAAE,IAAI,CAAC,kBAAkB;YAC5C,kBAAkB,EAAE,IAAI,CAAC,iBAAiB;YAC1C,iBAAiB,EAAE,IAAI,CAAC,eAAe;SACxC,CAAC;IACJ,CAAC;IAED,KAAK;QACH,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,kBAAkB,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF"}