@autter/runtime-node 1.9.0 → 1.10.0

package/dist/{chunk-ZKM76SDP.js → chunk-KWAJIELR.js}

@@ -1,3 +1,198 @@
+// src/lifecycle.ts
+import { ExportResultCode } from "@opentelemetry/core";
+var debugEnabled = process.env.AUTTER_DEBUG === "1" || process.env.AUTTER_DEBUG === "true";
+function setDebugMode(enabled) {
+  debugEnabled = enabled;
+}
+function isDebugEnabled() {
+  return debugEnabled;
+}
+function debugLog(...args) {
+  if (debugEnabled) {
+    console.error("[autter]", ...args);
+  }
+}
+var TelemetryStats = class {
+  /** Captures queued via our APIs and not yet seen leaving an exporter. */
+  pendingCaptures = 0;
+  markCaptured(count = 1) {
+    this.pendingCaptures += count;
+  }
+  /** An exporter batch left the process successfully. */
+  onExported(spanCount) {
+    this.pendingCaptures = Math.max(0, this.pendingCaptures - spanCount);
+    if (debugEnabled && spanCount > 0) {
+      debugLog(`exported ${spanCount} span${spanCount === 1 ? "" : "s"}`);
+    }
+  }
+  markAllFlushed() {
+    this.pendingCaptures = 0;
+  }
+};
+var telemetryStats = new TelemetryStats();
+var CountingExporter = class {
+  constructor(inner) {
+    this.inner = inner;
+  }
+  inner;
+  export(spans, resultCallback) {
+    this.inner.export(spans, (result) => {
+      if (result.code === ExportResultCode.SUCCESS) {
+        telemetryStats.onExported(spans.length);
+      }
+      resultCallback(result);
+    });
+  }
+  shutdown() {
+    return this.inner.shutdown();
+  }
+  forceFlush() {
+    return this.inner.forceFlush?.() ?? Promise.resolve();
+  }
+};
+var flushTargets = /* @__PURE__ */ new Map();
+function registerFlushTarget(key, target) {
+  flushTargets.set(key, target);
+}
+function unregisterFlushTargets() {
+  flushTargets.clear();
+}
+function activeFlushTargets() {
+  return [...flushTargets.values()];
+}
+var DEFAULT_SIGNALS = ["SIGINT", "SIGTERM"];
+var SIGNAL_EXIT_CODES = {
+  SIGINT: 130,
+  SIGTERM: 143
+};
+function installAutterAutoFlush(options = {}) {
+  const logger = options.logger ?? console;
+  const log = options.log !== false;
+  const warnOnUnflushedExit = options.warnOnUnflushedExit !== false;
+  const timeoutMs = Math.max(100, options.timeoutMs ?? 3e3);
+  const signals = options.signals ?? DEFAULT_SIGNALS;
+  const flushOnUncaughtException = options.flushOnUncaughtException !== false;
+  let disposed = false;
+  let inFlight = null;
+  const doFlush = async () => {
+    const targets = options.targets ?? activeFlushTargets();
+    if (targets.length === 0) return true;
+    let timer;
+    const timedOut = new Promise((resolve) => {
+      timer = setTimeout(() => resolve(false), timeoutMs);
+    });
+    const drained = Promise.allSettled(
+      targets.map(
+        (target) => Promise.resolve().then(() => target.forceFlush())
+      )
+    ).then(
+      (results) => results.every((result) => result.status === "fulfilled")
+    );
+    let ok;
+    try {
+      ok = await Promise.race([drained, timedOut]);
+    } finally {
+      clearTimeout(timer);
+    }
+    if (ok) {
+      telemetryStats.markAllFlushed();
+      if (log) {
+        logger.log("[autter] telemetry flushed");
+      }
+    } else {
+      logger.error(
+        `[autter] flush did not finish within ${timeoutMs}ms \u2014 some telemetry may be lost`
+      );
+    }
+    return ok;
+  };
+  const flush = (reason = "exit") => {
+    if (disposed) return Promise.resolve(false);
+    if (!inFlight) {
+      inFlight = doFlush().finally(() => {
+        inFlight = null;
+      });
+    }
+    if (isDebugEnabled()) debugLog(`auto-flush requested on ${reason}`);
+    return inFlight;
+  };
+  const signalCounts = /* @__PURE__ */ new Map();
+  let handlingUncaughtException = false;
+  const onUncaughtException = (error) => {
+    if (process.listenerCount("uncaughtException") > 1) return;
+    if (handlingUncaughtException) return;
+    handlingUncaughtException = true;
+    logger.error(error instanceof Error ? error.stack ?? error.message : String(error));
+    const keepAlive = setTimeout(() => {
+    }, timeoutMs + 50);
+    void flush("uncaughtException").finally(() => {
+      clearTimeout(keepAlive);
+      process.exit(1);
+    });
+  };
+  const onSignal = (signal) => {
+    const count = (signalCounts.get(signal) ?? 0) + 1;
+    signalCounts.set(signal, count);
+    const exitCode = SIGNAL_EXIT_CODES[signal] ?? 1;
+    if (count > 1) {
+      process.exit(exitCode);
+    }
+    const otherHandlers = process.listenerCount(signal) - 1;
+    if (otherHandlers > 0) {
+      void flush(signal);
+      return;
+    }
+    void flush(signal).finally(() => {
+      process.exit(exitCode);
+    });
+  };
+  const MAX_BEFORE_EXIT_FLUSHES = 10;
+  let beforeExitFlushes = 0;
+  const onBeforeExit = () => {
+    if (disposed) return;
+    const targets = options.targets ?? activeFlushTargets();
+    const worthIt = beforeExitFlushes === 0 ? targets.length > 0 : telemetryStats.pendingCaptures > 0;
+    if (!worthIt || beforeExitFlushes >= MAX_BEFORE_EXIT_FLUSHES) return;
+    beforeExitFlushes++;
+    const keepAlive = setTimeout(() => {
+    }, timeoutMs);
+    void flush("beforeExit").finally(() => clearTimeout(keepAlive));
+  };
+  const onExit = () => {
+    if (!warnOnUnflushedExit || disposed) return;
+    const pending = telemetryStats.pendingCaptures;
+    if (pending > 0) {
+      logger.error(
+        `[autter] process exiting with ~${pending} captured item(s) never confirmed exported \u2014 await autter.shutdown() on graceful shutdown`
+      );
+    }
+  };
+  const signalHandlers = /* @__PURE__ */ new Map();
+  process.on("beforeExit", onBeforeExit);
+  if (flushOnUncaughtException) {
+    process.on("uncaughtException", onUncaughtException);
+  }
+  for (const signal of signals) {
+    const handler = () => onSignal(signal);
+    signalHandlers.set(signal, handler);
+    process.on(signal, handler);
+  }
+  process.on("exit", onExit);
+  return {
+    flush,
+    dispose() {
+      disposed = true;
+      process.removeListener("beforeExit", onBeforeExit);
+      process.removeListener("uncaughtException", onUncaughtException);
+      process.removeListener("exit", onExit);
+      for (const [signal, handler] of signalHandlers) {
+        process.removeListener(signal, handler);
+      }
+      signalHandlers.clear();
+    }
+  };
+}
+
 // ../otlp-ingester/src/compat-manifest.json
 var compat_manifest_default = {
   manifestVersion: 1,
@@ -350,201 +545,6 @@ function ingesterInfoFromReport(body) {
   };
 }
 
-// src/lifecycle.ts
-import { ExportResultCode } from "@opentelemetry/core";
-var debugEnabled = process.env.AUTTER_DEBUG === "1" || process.env.AUTTER_DEBUG === "true";
-function setDebugMode(enabled) {
-  debugEnabled = enabled;
-}
-function isDebugEnabled() {
-  return debugEnabled;
-}
-function debugLog(...args) {
-  if (debugEnabled) {
-    console.error("[autter]", ...args);
-  }
-}
-var TelemetryStats = class {
-  /** Captures queued via our APIs and not yet seen leaving an exporter. */
-  pendingCaptures = 0;
-  markCaptured(count = 1) {
-    this.pendingCaptures += count;
-  }
-  /** An exporter batch left the process successfully. */
-  onExported(spanCount) {
-    this.pendingCaptures = Math.max(0, this.pendingCaptures - spanCount);
-    if (debugEnabled && spanCount > 0) {
-      debugLog(`exported ${spanCount} span${spanCount === 1 ? "" : "s"}`);
-    }
-  }
-  markAllFlushed() {
-    this.pendingCaptures = 0;
-  }
-};
-var telemetryStats = new TelemetryStats();
-var CountingExporter = class {
-  constructor(inner) {
-    this.inner = inner;
-  }
-  inner;
-  export(spans, resultCallback) {
-    this.inner.export(spans, (result) => {
-      if (result.code === ExportResultCode.SUCCESS) {
-        telemetryStats.onExported(spans.length);
-      }
-      resultCallback(result);
-    });
-  }
-  shutdown() {
-    return this.inner.shutdown();
-  }
-  forceFlush() {
-    return this.inner.forceFlush?.() ?? Promise.resolve();
-  }
-};
-var flushTargets = /* @__PURE__ */ new Map();
-function registerFlushTarget(key, target) {
-  flushTargets.set(key, target);
-}
-function unregisterFlushTargets() {
-  flushTargets.clear();
-}
-function activeFlushTargets() {
-  return [...flushTargets.values()];
-}
-var DEFAULT_SIGNALS = ["SIGINT", "SIGTERM"];
-var SIGNAL_EXIT_CODES = {
-  SIGINT: 130,
-  SIGTERM: 143
-};
-function installAutterAutoFlush(options = {}) {
-  const logger = options.logger ?? console;
-  const log = options.log !== false;
-  const warnOnUnflushedExit = options.warnOnUnflushedExit !== false;
-  const timeoutMs = Math.max(100, options.timeoutMs ?? 3e3);
-  const signals = options.signals ?? DEFAULT_SIGNALS;
-  const flushOnUncaughtException = options.flushOnUncaughtException !== false;
-  let disposed = false;
-  let inFlight = null;
-  const doFlush = async () => {
-    const targets = options.targets ?? activeFlushTargets();
-    if (targets.length === 0) return true;
-    let timer;
-    const timedOut = new Promise((resolve) => {
-      timer = setTimeout(() => resolve(false), timeoutMs);
-    });
-    const drained = Promise.allSettled(
-      targets.map(
-        (target) => Promise.resolve().then(() => target.forceFlush())
-      )
-    ).then(
-      (results) => results.every((result) => result.status === "fulfilled")
-    );
-    let ok;
-    try {
-      ok = await Promise.race([drained, timedOut]);
-    } finally {
-      clearTimeout(timer);
-    }
-    if (ok) {
-      telemetryStats.markAllFlushed();
-      if (log) {
-        logger.log("[autter] telemetry flushed");
-      }
-    } else {
-      logger.error(
-        `[autter] flush did not finish within ${timeoutMs}ms \u2014 some telemetry may be lost`
-      );
-    }
-    return ok;
-  };
-  const flush = (reason = "exit") => {
-    if (disposed) return Promise.resolve(false);
-    if (!inFlight) {
-      inFlight = doFlush().finally(() => {
-        inFlight = null;
-      });
-    }
-    if (isDebugEnabled()) debugLog(`auto-flush requested on ${reason}`);
-    return inFlight;
-  };
-  const signalCounts = /* @__PURE__ */ new Map();
-  let handlingUncaughtException = false;
-  const onUncaughtException = (error) => {
-    if (process.listenerCount("uncaughtException") > 1) return;
-    if (handlingUncaughtException) return;
-    handlingUncaughtException = true;
-    logger.error(error instanceof Error ? error.stack ?? error.message : String(error));
-    const keepAlive = setTimeout(() => {
-    }, timeoutMs + 50);
-    void flush("uncaughtException").finally(() => {
-      clearTimeout(keepAlive);
-      process.exit(1);
-    });
-  };
-  const onSignal = (signal) => {
-    const count = (signalCounts.get(signal) ?? 0) + 1;
-    signalCounts.set(signal, count);
-    const exitCode = SIGNAL_EXIT_CODES[signal] ?? 1;
-    if (count > 1) {
-      process.exit(exitCode);
-    }
-    const otherHandlers = process.listenerCount(signal) - 1;
-    if (otherHandlers > 0) {
-      void flush(signal);
-      return;
-    }
-    void flush(signal).finally(() => {
-      process.exit(exitCode);
-    });
-  };
-  const MAX_BEFORE_EXIT_FLUSHES = 10;
-  let beforeExitFlushes = 0;
-  const onBeforeExit = () => {
-    if (disposed) return;
-    const targets = options.targets ?? activeFlushTargets();
-    const worthIt = beforeExitFlushes === 0 ? targets.length > 0 : telemetryStats.pendingCaptures > 0;
-    if (!worthIt || beforeExitFlushes >= MAX_BEFORE_EXIT_FLUSHES) return;
-    beforeExitFlushes++;
-    const keepAlive = setTimeout(() => {
-    }, timeoutMs);
-    void flush("beforeExit").finally(() => clearTimeout(keepAlive));
-  };
-  const onExit = () => {
-    if (!warnOnUnflushedExit || disposed) return;
-    const pending = telemetryStats.pendingCaptures;
-    if (pending > 0) {
-      logger.error(
-        `[autter] process exiting with ~${pending} captured item(s) never confirmed exported \u2014 await autter.shutdown() on graceful shutdown`
-      );
-    }
-  };
-  const signalHandlers = /* @__PURE__ */ new Map();
-  process.on("beforeExit", onBeforeExit);
-  if (flushOnUncaughtException) {
-    process.on("uncaughtException", onUncaughtException);
-  }
-  for (const signal of signals) {
-    const handler = () => onSignal(signal);
-    signalHandlers.set(signal, handler);
-    process.on(signal, handler);
-  }
-  process.on("exit", onExit);
-  return {
-    flush,
-    dispose() {
-      disposed = true;
-      process.removeListener("beforeExit", onBeforeExit);
-      process.removeListener("uncaughtException", onUncaughtException);
-      process.removeListener("exit", onExit);
-      for (const [signal, handler] of signalHandlers) {
-        process.removeListener(signal, handler);
-      }
-      signalHandlers.clear();
-    }
-  };
-}
-
 // src/compat.ts
 import { request as httpRequest } from "http";
 import { request as httpsRequest } from "https";
@@ -552,7 +552,7 @@ import { request as httpsRequest } from "https";
 // package.json
 var package_default = {
   name: "@autter/runtime-node",
-  version: "1.9.0",
+  version: "1.10.0",
   description: "Autter Runtime for Node.js: request wide events, coded errors, operation logging, same-origin browser relay and a curated OpenTelemetry server tracker",
   license: "MIT",
   type: "module",
@@ -605,6 +605,7 @@ var package_default = {
     "@types/node": "^22.10.0",
     bunyan: "^1.8.15",
     express: "^4.21.2",
+    express5: "npm:express@^5.3.0",
     fastify: "^5.12.5",
     koa: "^3.2.1",
     pino: "^10.4.0",
@@ -926,12 +927,103 @@ function noteRelayRejection(eventTypes, status, headers) {
   }
 }
 
+// src/ingest-auth.ts
+var NOT_A_KEY = /* @__PURE__ */ new Set(["", "undefined", "null"]);
+function resolveIngestKey(explicit, env = process.env) {
+  for (const candidate of [explicit, env.AUTTER_RUNTIME_KEY]) {
+    if (typeof candidate !== "string") continue;
+    const key = candidate.trim();
+    if (!NOT_A_KEY.has(key.toLowerCase())) return key;
+  }
+  return null;
+}
+function authHeaders(key) {
+  return key ? { authorization: `Bearer ${key}` } : {};
+}
+var defaultWarn2 = (message) => console.warn(`[autter-runtime] ${message}`);
+var state = sharedSlot("ingest-auth", () => ({ warned: /* @__PURE__ */ new Set(), warn: defaultWarn2 }));
+function once(id, message) {
+  if (state.warned.has(id)) return false;
+  state.warned.add(id);
+  try {
+    state.warn(message);
+  } catch {
+  }
+  return true;
+}
+var VERIFY_HINT = "Then run: npx @autter/runtime-node verify";
+function warnMissingKey(where, service) {
+  const what = where === "relay" ? "the browser relay has no ingest key (apiKey is unset and AUTTER_RUNTIME_KEY is not set), so browser events are refused (500) instead of being sent" : `initAutterServer() got no apiKey and AUTTER_RUNTIME_KEY is not set, so traces, metrics and logs${service ? ` from "${service}"` : ""} are not sent`;
+  return once(
+    `missing:${where}`,
+    `No ingest key: ${what}. Set AUTTER_RUNTIME_KEY to a server key (autter_rt_\u2026). ${VERIFY_HINT}`
+  );
+}
+function warnKeyKind(key) {
+  if (!key) return false;
+  if (key.startsWith("autter_rtc_")) {
+    return once(
+      "kind:client",
+      "AUTTER_RUNTIME_KEY is a client (browser) key (autter_rtc_\u2026). Server SDKs and the relay need a server key (autter_rt_\u2026); the ingester refuses this one with 403."
+    );
+  }
+  if (key.startsWith("autter_rtu_")) {
+    return once(
+      "kind:upload",
+      "AUTTER_RUNTIME_KEY is an upload-only key (autter_rtu_\u2026) for source maps. Server SDKs need a server key (autter_rt_\u2026); the ingester refuses this one with 403."
+    );
+  }
+  return false;
+}
+function refusalReason(body) {
+  let text = "";
+  if (typeof body === "string") {
+    try {
+      const parsed = JSON.parse(body);
+      text = [parsed.error, parsed.detail].filter((v) => typeof v === "string" && v).join(": ");
+    } catch {
+      text = body;
+    }
+  }
+  return text.replace(/\s+/g, " ").trim().slice(0, 300);
+}
+function noteIngestRefusal(input) {
+  try {
+    const { status, route, endpoint } = input;
+    const reason = refusalReason(input.body);
+    const said = reason ? ` (${status}: ${reason})` : ` (${status})`;
+    const who = input.via === "relay" ? "browser events forwarded by the relay are" : "this data is";
+    if (status === 401) {
+      return once(
+        "status:401",
+        `The ingester at ${endpoint} refused the ingest key on ${route}${said}. Nothing is stored until it is fixed: ${who} dropped. Check AUTTER_RUNTIME_KEY (a server key, autter_rt_\u2026, for this repository). ${VERIFY_HINT}`
+      );
+    }
+    if (status === 403) {
+      return once(
+        `status:403:${route}`,
+        `The ingester at ${endpoint} refused ${route}${said}; ${who} dropped. ${VERIFY_HINT}`
+      );
+    }
+    if (status === 404) {
+      return once(
+        `status:404:${route}`,
+        `${endpoint}${route} answered 404: this ingester has no ${route} route, so ${who} dropped. Either the ingester is older than the feature (run: npx @autter/runtime-node doctor) or the endpoint has an extra path (set it to the ingester's base URL).`
+      );
+    }
+    if (status === 400 || status === 413 || status === 415) {
+      return once(
+        `status:${status}:${route}`,
+        `The ingester at ${endpoint} rejected a ${route} batch${said}; ${who} dropped.`
+      );
+    }
+    return false;
+  } catch {
+    return false;
+  }
+}
+
 export {
-  COMPAT_MANIFEST,
-  INGESTER_VERSION_HEADER,
-  versionAtLeast,
-  featuresForBrowserEvents,
-  evaluateCompat,
   setDebugMode,
   isDebugEnabled,
   debugLog,
@@ -941,6 +1033,17 @@ export {
   unregisterFlushTargets,
   installAutterAutoFlush,
   sharedSlot,
+  resolveIngestKey,
+  authHeaders,
+  warnMissingKey,
+  warnKeyKind,
+  refusalReason,
+  noteIngestRefusal,
+  COMPAT_MANIFEST,
+  INGESTER_VERSION_HEADER,
+  versionAtLeast,
+  featuresForBrowserEvents,
+  evaluateCompat,
   SDK_IDENTITY,
   compatRequest,
   fetchIngesterCompat,