@bluefly/openstandardagents 0.4.3 → 0.4.5

package/dist/types/security.d.ts

@@ -0,0 +1,123 @@
+/**
+ * OSSA v0.5 Security Posture Types
+ *
+ * Type definitions for agent security posture metadata,
+ * including threat models, capability requirements, sandboxing,
+ * and network access constraints.
+ */
+/**
+ * Threat categories from OWASP LLM Top 10 and agent-specific threats
+ */
+export type ThreatCategory = 'prompt-injection' | 'data-exfiltration' | 'privilege-escalation' | 'resource-abuse' | 'model-poisoning' | 'supply-chain' | 'denial-of-service' | 'information-disclosure' | 'unauthorized-access' | 'custom';
+/**
+ * Threat severity levels
+ */
+export type ThreatSeverity = 'critical' | 'high' | 'medium' | 'low' | 'informational';
+/**
+ * Threat model entry
+ */
+export interface ThreatModelEntry {
+    /** Threat category */
+    category: ThreatCategory;
+    /** Assessed severity level */
+    severity?: ThreatSeverity;
+    /** Mitigation strategies implemented */
+    mitigations?: string[];
+    /** Human-readable description */
+    description?: string;
+}
+/**
+ * Security capability that an agent may require or optionally use
+ */
+export type SecurityCapability = 'filesystem-read' | 'filesystem-write' | 'network-outbound' | 'network-inbound' | 'process-spawn' | 'env-read' | 'env-write' | 'clipboard-read' | 'clipboard-write' | 'browser' | 'database-read' | 'database-write' | 'secrets-read' | 'gpu' | 'memory-extended' | 'tool-execution' | 'agent-spawn' | 'human-interaction';
+/**
+ * Sandboxing technology type
+ */
+export type SandboxType = 'container' | 'vm' | 'wasm' | 'process' | 'none';
+/**
+ * Network protocol
+ */
+export type NetworkProtocol = 'https' | 'http' | 'wss' | 'ws' | 'grpc' | 'ssh' | 'stdio';
+/**
+ * Egress policy
+ */
+export type EgressPolicy = 'allow-all' | 'allow-list' | 'deny-all';
+/**
+ * Data classification level
+ */
+export type DataClassification = 'public' | 'internal' | 'confidential' | 'restricted';
+/**
+ * Resource limits for sandboxed execution
+ */
+export interface ResourceLimits {
+    /** Maximum memory allocation in megabytes */
+    max_memory_mb?: number;
+    /** Maximum CPU cores */
+    max_cpu_cores?: number;
+    /** Maximum execution time in seconds */
+    max_execution_seconds?: number;
+    /** Maximum disk usage in megabytes */
+    max_disk_mb?: number;
+}
+/**
+ * Sandboxing configuration
+ */
+export interface SandboxingConfig {
+    /** Whether sandboxed execution is mandatory */
+    required: boolean;
+    /** Preferred sandboxing technology */
+    type?: SandboxType;
+    /** Resource constraints */
+    resource_limits?: ResourceLimits;
+}
+/**
+ * Network access constraints
+ */
+export interface NetworkAccessConfig {
+    /** Allowlist of domains the agent may connect to */
+    allowed_domains?: string[];
+    /** Denylist of domains (takes precedence over allowed) */
+    blocked_domains?: string[];
+    /** Allowed network protocols */
+    protocols?: NetworkProtocol[];
+    /** Default egress policy */
+    egress_policy?: EgressPolicy;
+}
+/**
+ * Audit configuration
+ */
+export interface AuditConfig {
+    /** Whether to log all inputs */
+    log_inputs?: boolean;
+    /** Whether to log all outputs */
+    log_outputs?: boolean;
+    /** Whether to log all tool invocations */
+    log_tool_calls?: boolean;
+    /** Number of days to retain audit logs */
+    retention_days?: number;
+}
+/**
+ * Security Posture (v0.5)
+ * Defines the agent's security requirements, threat model,
+ * and operational constraints.
+ */
+export interface SecurityPosture {
+    /** Threat categories this agent handles or is exposed to */
+    threat_model?: ThreatModelEntry[];
+    /** Required and optional capability declarations */
+    capabilities?: {
+        /** Capabilities the agent MUST have */
+        required?: SecurityCapability[];
+        /** Capabilities the agent can use if available */
+        optional?: SecurityCapability[];
+    };
+    /** Sandboxing requirements */
+    sandboxing?: SandboxingConfig;
+    /** Network access constraints */
+    network_access?: NetworkAccessConfig;
+    /** Data classification level */
+    data_classification?: DataClassification;
+    /** Audit requirements */
+    audit?: AuditConfig;
+}
+//# sourceMappingURL=security.d.ts.map

package/dist/types/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/types/security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,kBAAkB,GAClB,mBAAmB,GACnB,sBAAsB,GACtB,gBAAgB,GAChB,iBAAiB,GACjB,cAAc,GACd,mBAAmB,GACnB,wBAAwB,GACxB,qBAAqB,GACrB,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,MAAM,GACN,QAAQ,GACR,KAAK,GACL,eAAe,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,QAAQ,EAAE,cAAc,CAAC;IAEzB,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAE1B,wCAAwC;IACxC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,iBAAiB,GACjB,kBAAkB,GAClB,kBAAkB,GAClB,iBAAiB,GACjB,eAAe,GACf,UAAU,GACV,WAAW,GACX,gBAAgB,GAChB,iBAAiB,GACjB,SAAS,GACT,eAAe,GACf,gBAAgB,GAChB,cAAc,GACd,KAAK,GACL,iBAAiB,GACjB,gBAAgB,GAChB,aAAa,GACb,mBAAmB,CAAC;AAExB;;GAEG;AACH,MAAM,MAAM,WAAW,GAAG,WAAW,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3E;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,OAAO,GACP,MAAM,GACN,KAAK,GACL,IAAI,GACJ,MAAM,GACN,KAAK,GACL,OAAO,CAAC;AAEZ;;GAEG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,UAAU,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,UAAU,GACV,cAAc,GACd,YAAY,CAAC;AAEjB;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,wBAAwB;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,wCAAwC;IACxC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAE/B,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,QAAQ,EAAE,OAAO,CAAC;IAElB,sCAAsC;IACtC,IAAI,CAAC,EAAE,WAAW,CAAC;IAEnB,2BAA2B;IAC3B,eAAe,CAAC,EAAE,cAAc,CAAC;CAClC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,0DAA0D;IAC1D,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAE3B,gCAAgC;IAChC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;IAE9B,4BAA4B;IAC5B,aAAa,CAAC,EAAE,YAAY,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,iCAAiC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,OAAO,CAAC;IAEzB,0CAA0C;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,4DAA4D;IAC5D,YAAY,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAElC,oDAAoD;IACpD,YAAY,CAAC,EAAE;QACb,uCAAuC;QACvC,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;QAChC,kDAAkD;QAClD,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;KACjC,CAAC;IAEF,8BAA8B;IAC9B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAE9B,iCAAiC;IACjC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IAErC,gCAAgC;IAChC,mBAAmB,CAAC,EAAE,kBAAkB,CAAC;IAEzC,yBAAyB;IACzB,KAAK,CAAC,EAAE,WAAW,CAAC;CACrB"}

package/dist/types/security.js

@@ -0,0 +1,9 @@
+/**
+ * OSSA v0.5 Security Posture Types
+ *
+ * Type definitions for agent security posture metadata,
+ * including threat models, capability requirements, sandboxing,
+ * and network access constraints.
+ */
+export {};
+//# sourceMappingURL=security.js.map

package/dist/types/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/types/security.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/types/tool.d.ts

@@ -0,0 +1,73 @@
+/**
+ * OSSA Tool Types
+ * Defines tool/trigger types and configurations for OSSA agents
+ *
+ * Based on OSSA v0.4.4 spec - 19 tool types
+ */
+/**
+ * All supported tool types in OSSA v0.4.4
+ */
+export type ToolType = 'mcp' | 'browser' | 'kubernetes' | 'http' | 'api' | 'grpc' | 'function' | 'a2a' | 'webhook' | 'schedule' | 'pipeline' | 'workflow' | 'artifact' | 'git-commit' | 'ci-status' | 'comment' | 'library' | 'custom';
+/**
+ * Authentication types for tools
+ */
+export type AuthType = 'none' | 'bearer' | 'basic' | 'api-key' | 'oauth2';
+/**
+ * Tool authentication configuration
+ */
+export interface ToolAuth {
+    type: AuthType;
+    credentials?: string;
+}
+/**
+ * OSSA Tool definition
+ * Represents a tool/capability/trigger that an agent can use
+ */
+export interface Tool {
+    /** Tool type */
+    type: ToolType;
+    /** Unique tool identifier */
+    name: string;
+    /** Human-readable description */
+    description?: string;
+    /** MCP server command (for type: mcp) */
+    server?: string;
+    /** Tool namespace for grouping */
+    namespace?: string;
+    /** HTTP/API endpoint (for type: http/api/webhook/grpc) */
+    endpoint?: string;
+    /** List of capability identifiers */
+    capabilities?: string[];
+    /** Tool-specific configuration */
+    config?: Record<string, any>;
+    /** Authentication configuration */
+    auth?: ToolAuth;
+    /** JSON Schema for tool input parameters */
+    input_schema?: Record<string, any>;
+    /** JSON Schema for tool output */
+    output_schema?: Record<string, any>;
+    /** Tool metadata */
+    metadata?: {
+        /** Version of the tool */
+        version?: string;
+        /** Tags for categorization */
+        tags?: string[];
+        /** Deprecation notice */
+        deprecated?: boolean;
+        /** Documentation URL */
+        documentation?: string;
+    };
+}
+/**
+ * Type guard to check if object is a valid Tool
+ */
+export declare function isTool(obj: any): obj is Tool;
+/**
+ * Create a minimal tool configuration
+ */
+export declare function createTool(type: ToolType, name: string, config?: Partial<Tool>): Tool;
+/**
+ * Validate tool configuration
+ */
+export declare function validateToolConfig(tool: Tool): string[];
+//# sourceMappingURL=tool.d.ts.map

package/dist/types/tool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.d.ts","sourceRoot":"","sources":["../../src/types/tool.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;GAEG;AACH,MAAM,MAAM,QAAQ,GAChB,KAAK,GACL,SAAS,GACT,YAAY,GACZ,MAAM,GACN,KAAK,GACL,MAAM,GACN,UAAU,GACV,KAAK,GACL,SAAS,GACT,UAAU,GACV,UAAU,GACV,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,SAAS,GACT,SAAS,GACT,QAAQ,CAAC;AAEb;;GAEG;AACH,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE1E;;GAEG;AACH,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,IAAI;IACnB,gBAAgB;IAChB,IAAI,EAAE,QAAQ,CAAC;IAEf,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IAEb,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,yCAAyC;IACzC,MAAM,CAAC,EAAE,MAAM,CAAC;IAEhB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAExB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7B,mCAAmC;IACnC,IAAI,CAAC,EAAE,QAAQ,CAAC;IAEhB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEnC,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAEpC,oBAAoB;IACpB,QAAQ,CAAC,EAAE;QACT,0BAA0B;QAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,8BAA8B;QAC9B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,yBAAyB;QACzB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,wBAAwB;QACxB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH;AAED;;GAEG;AACH,wBAAgB,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,IAAI,CAQ5C;AAED;;GAEG;AACH,wBAAgB,UAAU,CACxB,IAAI,EAAE,QAAQ,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GACrB,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,IAAI,GAAG,MAAM,EAAE,CA8CvD"}

package/dist/types/tool.js

@@ -0,0 +1,66 @@
+/**
+ * OSSA Tool Types
+ * Defines tool/trigger types and configurations for OSSA agents
+ *
+ * Based on OSSA v0.4.4 spec - 19 tool types
+ */
+/**
+ * Type guard to check if object is a valid Tool
+ */
+export function isTool(obj) {
+    return (obj &&
+        typeof obj === 'object' &&
+        'type' in obj &&
+        'name' in obj &&
+        typeof obj.name === 'string');
+}
+/**
+ * Create a minimal tool configuration
+ */
+export function createTool(type, name, config) {
+    return {
+        type,
+        name,
+        ...config,
+    };
+}
+/**
+ * Validate tool configuration
+ */
+export function validateToolConfig(tool) {
+    const errors = [];
+    if (!tool.type) {
+        errors.push('Tool type is required');
+    }
+    if (!tool.name) {
+        errors.push('Tool name is required');
+    }
+    // Type-specific validation
+    switch (tool.type) {
+        case 'mcp':
+            if (!tool.server) {
+                errors.push('MCP tools require a server command');
+            }
+            break;
+        case 'http':
+        case 'api':
+        case 'webhook':
+        case 'grpc':
+            if (!tool.endpoint) {
+                errors.push(`${tool.type} tools require an endpoint URL`);
+            }
+            break;
+        case 'schedule':
+            if (!tool.config?.schedule) {
+                errors.push('Schedule tools require a cron expression in config.schedule');
+            }
+            break;
+        case 'kubernetes':
+            if (!tool.config?.namespace || !tool.config?.resource) {
+                errors.push('Kubernetes tools require namespace and resource in config');
+            }
+            break;
+    }
+    return errors;
+}
+//# sourceMappingURL=tool.js.map

package/dist/types/tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool.js","sourceRoot":"","sources":["../../src/types/tool.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyFH;;GAEG;AACH,MAAM,UAAU,MAAM,CAAC,GAAQ;IAC7B,OAAO,CACL,GAAG;QACH,OAAO,GAAG,KAAK,QAAQ;QACvB,MAAM,IAAI,GAAG;QACb,MAAM,IAAI,GAAG;QACb,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAC7B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CACxB,IAAc,EACd,IAAY,EACZ,MAAsB;IAEtB,OAAO;QACL,IAAI;QACJ,IAAI;QACJ,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAU;IAC3C,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACvC,CAAC;IAED,2BAA2B;IAC3B,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;YACpD,CAAC;YACD,MAAM;QAER,KAAK,MAAM,CAAC;QACZ,KAAK,KAAK,CAAC;QACX,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACT,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,gCAAgC,CAAC,CAAC;YAC5D,CAAC;YACD,MAAM;QAER,KAAK,UAAU;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CACT,6DAA6D,CAC9D,CAAC;YACJ,CAAC;YACD,MAAM;QAER,KAAK,YAAY;YACf,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CACT,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,MAAM;IACV,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,82 @@
+/**
+ * OSSA Structured Logging - Production-Grade Logging with Pino
+ *
+ * Features:
+ * - Structured JSON logs (machine-parsable)
+ * - Configurable log levels
+ * - OpenTelemetry trace/span correlation
+ * - Performance-optimized (Pino is fastest Node.js logger)
+ * - Multiple transports (console, file, remote)
+ */
+import pino from 'pino';
+/**
+ * Log levels (0-60)
+ */
+export declare enum LogLevel {
+    TRACE = "trace",
+    DEBUG = "debug",
+    INFO = "info",
+    WARN = "warn",
+    ERROR = "error",
+    FATAL = "fatal"
+}
+/**
+ * Logger configuration
+ */
+export interface LoggerConfig {
+    level?: LogLevel | string;
+    name?: string;
+    pretty?: boolean;
+    redact?: string[];
+    destination?: string;
+}
+/**
+ * Create logger instance
+ */
+export declare function createLogger(config?: LoggerConfig): pino.Logger;
+/**
+ * Default logger instance
+ */
+export declare const logger: pino.Logger<never, boolean>;
+/**
+ * Create child logger with context
+ */
+export declare function createChildLogger(context: Record<string, unknown>): pino.Logger;
+/**
+ * Log request/response (Express middleware)
+ */
+export declare function logRequest(logger: pino.Logger): (req: any, res: any, next: any) => void;
+/**
+ * Log error with full context
+ */
+export declare function logError(logger: pino.Logger, error: Error, context?: Record<string, unknown>): void;
+/**
+ * Create logger for specific module
+ */
+export declare function createModuleLogger(moduleName: string): pino.Logger;
+/**
+ * Performance logging helper
+ */
+export declare class PerformanceLogger {
+    private logger;
+    private startTime;
+    private operation;
+    constructor(logger: pino.Logger, operation: string);
+    /**
+     * Log completion with duration
+     */
+    end(context?: Record<string, unknown>): void;
+    /**
+     * Log error with duration
+     */
+    error(error: Error, context?: Record<string, unknown>): void;
+}
+/**
+ * Measure operation performance
+ */
+export declare function measurePerformance<T>(logger: pino.Logger, operation: string, fn: () => T | Promise<T>): Promise<T>;
+/**
+ * Export types
+ */
+export type { Logger } from 'pino';
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB;;GAEG;AACH,oBAAY,QAAQ;IAClB,KAAK,UAAU;IACf,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,KAAK,UAAU;IACf,KAAK,UAAU;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAwDD;;GAEG;AACH,wBAAgB,YAAY,CAAC,MAAM,GAAE,YAAiB,GAAG,IAAI,CAAC,MAAM,CAUnE;AA0CD;;GAEG;AACH,eAAO,MAAM,MAAM,6BAAiB,CAAC;AAErC;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,IAAI,CAAC,MAAM,CAEb;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,IACpC,KAAK,GAAG,EAAE,KAAK,GAAG,EAAE,MAAM,GAAG,UAoCtC;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,KAAK,EAAE,KAAK,EACZ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAYN;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,CAElE;AAED;;GAEG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,SAAS,CAAS;gBAEd,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM;IAWlD;;OAEG;IACH,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAW5C;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;CAS7D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GACvB,OAAO,CAAC,CAAC,CAAC,CAwBZ;AAED;;GAEG;AACH,YAAY,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC"}

package/dist/utils/logger.js

@@ -0,0 +1,250 @@
+/**
+ * OSSA Structured Logging - Production-Grade Logging with Pino
+ *
+ * Features:
+ * - Structured JSON logs (machine-parsable)
+ * - Configurable log levels
+ * - OpenTelemetry trace/span correlation
+ * - Performance-optimized (Pino is fastest Node.js logger)
+ * - Multiple transports (console, file, remote)
+ */
+import pino from 'pino';
+import { trace, context } from '@opentelemetry/api';
+/**
+ * Log levels (0-60)
+ */
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel["TRACE"] = "trace";
+    LogLevel["DEBUG"] = "debug";
+    LogLevel["INFO"] = "info";
+    LogLevel["WARN"] = "warn";
+    LogLevel["ERROR"] = "error";
+    LogLevel["FATAL"] = "fatal";
+})(LogLevel || (LogLevel = {}));
+/**
+ * Create base logger configuration
+ */
+function createLoggerConfig(config = {}) {
+    const isDevelopment = process.env.NODE_ENV !== 'production';
+    const level = config.level || process.env.LOG_LEVEL || (isDevelopment ? 'debug' : 'info');
+    const baseConfig = {
+        name: config.name || 'ossa',
+        level,
+        // Redact sensitive fields
+        redact: {
+            paths: config.redact || [
+                'req.headers.authorization',
+                'req.headers.cookie',
+                'token',
+                'apiKey',
+                'password',
+                'secret',
+                '*.token',
+                '*.apiKey',
+                '*.password',
+                '*.secret',
+            ],
+            remove: true,
+        },
+        // Base fields
+        base: {
+            pid: process.pid,
+            hostname: process.env.HOSTNAME || 'unknown',
+            env: process.env.NODE_ENV || 'development',
+        },
+        // Timestamp format
+        timestamp: pino.stdTimeFunctions.isoTime,
+        // Pretty print in development
+        ...(config.pretty || isDevelopment
+            ? {
+                transport: {
+                    target: 'pino-pretty',
+                    options: {
+                        colorize: true,
+                        translateTime: 'HH:MM:ss Z',
+                        ignore: 'pid,hostname',
+                        singleLine: false,
+                    },
+                },
+            }
+            : {}),
+    };
+    return baseConfig;
+}
+/**
+ * Create logger instance
+ */
+export function createLogger(config = {}) {
+    const loggerConfig = createLoggerConfig(config);
+    // Create base logger
+    const logger = config.destination
+        ? pino(loggerConfig, pino.destination(config.destination))
+        : pino(loggerConfig);
+    // Add OpenTelemetry trace correlation
+    return wrapWithTraceContext(logger);
+}
+/**
+ * Wrap logger to automatically include OpenTelemetry trace context
+ */
+function wrapWithTraceContext(logger) {
+    const originalChild = logger.child.bind(logger);
+    // Override child method to inject trace context
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    logger.child = (bindings, options) => {
+        const traceContext = getTraceContext();
+        return originalChild({ ...traceContext, ...bindings }, options);
+    };
+    return logger;
+}
+/**
+ * Get current OpenTelemetry trace context
+ */
+function getTraceContext() {
+    const span = trace.getSpan(context.active());
+    if (!span) {
+        return {};
+    }
+    const spanContext = span.spanContext();
+    return {
+        traceId: spanContext.traceId,
+        spanId: spanContext.spanId,
+        traceFlags: spanContext.traceFlags,
+    };
+}
+/**
+ * Default logger instance
+ */
+export const logger = createLogger();
+/**
+ * Create child logger with context
+ */
+export function createChildLogger(context) {
+    return logger.child(context);
+}
+/**
+ * Log request/response (Express middleware)
+ */
+export function logRequest(logger) {
+    return (req, res, next) => {
+        const start = Date.now();
+        // Log request
+        logger.info({
+            req: {
+                method: req.method,
+                url: req.url,
+                headers: req.headers,
+                query: req.query,
+                params: req.params,
+            },
+            msg: 'Incoming request',
+        });
+        // Log response
+        res.on('finish', () => {
+            const duration = Date.now() - start;
+            const logLevel = res.statusCode >= 400 ? 'error' : 'info';
+            logger[logLevel]({
+                req: {
+                    method: req.method,
+                    url: req.url,
+                },
+                res: {
+                    statusCode: res.statusCode,
+                    headers: res.getHeaders(),
+                },
+                duration,
+                msg: 'Request completed',
+            });
+        });
+        next();
+    };
+}
+/**
+ * Log error with full context
+ */
+export function logError(logger, error, context) {
+    logger.error({
+        err: {
+            type: error.name,
+            message: error.message,
+            stack: error.stack,
+            ...('code' in error ? { code: error.code } : {}),
+            ...('statusCode' in error ? { statusCode: error.statusCode } : {}),
+        },
+        ...context,
+        msg: error.message,
+    });
+}
+/**
+ * Create logger for specific module
+ */
+export function createModuleLogger(moduleName) {
+    return createChildLogger({ module: moduleName });
+}
+/**
+ * Performance logging helper
+ */
+export class PerformanceLogger {
+    logger;
+    startTime;
+    operation;
+    constructor(logger, operation) {
+        this.logger = logger;
+        this.operation = operation;
+        this.startTime = Date.now();
+        this.logger.debug({
+            operation: this.operation,
+            msg: `Starting ${this.operation}`,
+        });
+    }
+    /**
+     * Log completion with duration
+     */
+    end(context) {
+        const duration = Date.now() - this.startTime;
+        this.logger.info({
+            operation: this.operation,
+            duration,
+            ...context,
+            msg: `Completed ${this.operation}`,
+        });
+    }
+    /**
+     * Log error with duration
+     */
+    error(error, context) {
+        const duration = Date.now() - this.startTime;
+        logError(this.logger, error, {
+            operation: this.operation,
+            duration,
+            ...context,
+        });
+    }
+}
+/**
+ * Measure operation performance
+ */
+export function measurePerformance(logger, operation, fn) {
+    const perf = new PerformanceLogger(logger, operation);
+    try {
+        const result = fn();
+        if (result instanceof Promise) {
+            return result
+                .then((value) => {
+                perf.end();
+                return value;
+            })
+                .catch((error) => {
+                perf.error(error);
+                throw error;
+            });
+        }
+        perf.end();
+        return Promise.resolve(result);
+    }
+    catch (error) {
+        perf.error(error);
+        return Promise.reject(error);
+    }
+}
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAC;AAEjE;;GAEG;AACH,MAAM,CAAN,IAAY,QAOX;AAPD,WAAY,QAAQ;IAClB,2BAAe,CAAA;IACf,2BAAe,CAAA;IACf,yBAAa,CAAA;IACb,yBAAa,CAAA;IACb,2BAAe,CAAA;IACf,2BAAe,CAAA;AACjB,CAAC,EAPW,QAAQ,KAAR,QAAQ,QAOnB;AAaD;;GAEG;AACH,SAAS,kBAAkB,CAAC,SAAuB,EAAE;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;IAC5D,MAAM,KAAK,GACT,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE9E,MAAM,UAAU,GAAuB;QACrC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,MAAM;QAC3B,KAAK;QACL,0BAA0B;QAC1B,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI;gBACtB,2BAA2B;gBAC3B,oBAAoB;gBACpB,OAAO;gBACP,QAAQ;gBACR,UAAU;gBACV,QAAQ;gBACR,SAAS;gBACT,UAAU;gBACV,YAAY;gBACZ,UAAU;aACX;YACD,MAAM,EAAE,IAAI;SACb;QACD,cAAc;QACd,IAAI,EAAE;YACJ,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,SAAS;YAC3C,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,aAAa;SAC3C;QACD,mBAAmB;QACnB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,8BAA8B;QAC9B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,aAAa;YAChC,CAAC,CAAC;gBACE,SAAS,EAAE;oBACT,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE;wBACP,QAAQ,EAAE,IAAI;wBACd,aAAa,EAAE,YAAY;wBAC3B,MAAM,EAAE,cAAc;wBACtB,UAAU,EAAE,KAAK;qBAClB;iBACF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,SAAuB,EAAE;IACpD,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAEhD,qBAAqB;IACrB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW;QAC/B,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEvB,sCAAsC;IACtC,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAmB;IAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEhD,gDAAgD;IAChD,8DAA8D;IAC9D,MAAM,CAAC,KAAK,GAAG,CACb,QAAuB,EACvB,OAAiC,EAC5B,EAAE;QACP,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,OAAO,aAAa,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,SAAS,eAAe;IAKtB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GAAgB,IAAI,CAAC,WAAW,EAAE,CAAC;IACpD,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,UAAU,EAAE,WAAW,CAAC,UAAU;KACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;AAErC;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgC;IAEhC,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAmB;IAC5C,OAAO,CAAC,GAAQ,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,cAAc;QACd,MAAM,CAAC,IAAI,CAAC;YACV,GAAG,EAAE;gBACH,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;gBACZ,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;aACnB;YACD,GAAG,EAAE,kBAAkB;SACxB,CAAC,CAAC;QAEH,eAAe;QACf,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;YACpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YAE1D,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACf,GAAG,EAAE;oBACH,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;iBACb;gBACD,GAAG,EAAE;oBACH,UAAU,EAAE,GAAG,CAAC,UAAU;oBAC1B,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE;iBAC1B;gBACD,QAAQ;gBACR,GAAG,EAAE,mBAAmB;aACzB,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CACtB,MAAmB,EACnB,KAAY,EACZ,OAAiC;IAEjC,MAAM,CAAC,KAAK,CAAC;QACX,GAAG,EAAE;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;QACD,GAAG,OAAO;QACV,GAAG,EAAE,KAAK,CAAC,OAAO;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB;IACnD,OAAO,iBAAiB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AACnD,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,CAAc;IACpB,SAAS,CAAS;IAClB,SAAS,CAAS;IAE1B,YAAY,MAAmB,EAAE,SAAiB;QAChD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;YAChB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,EAAE,YAAY,IAAI,CAAC,SAAS,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,OAAiC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ;YACR,GAAG,OAAO;YACV,GAAG,EAAE,aAAa,IAAI,CAAC,SAAS,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAY,EAAE,OAAiC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAE7C,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE;YAC3B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ;YACR,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmB,EACnB,SAAiB,EACjB,EAAwB;IAExB,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;QAEpB,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,OAAO,MAAM;iBACV,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,KAAc,CAAC,CAAC;QAC3B,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}