@bounded-sh/observe 0.1.0 → 0.1.1

package/dist/pipeline.js

@@ -169,6 +169,13 @@ class Pipeline {
             this.reporter.push({ wire, fields });
             return;
         }
+        // Bounded-only capture (the app-dev / skill default, "bounded stuff only"):
+        // send ONLY recognized-by-fixtures events + explicit counter routes. Drop
+        // every UNrecognized route here — no shape sample, no heuristic counter — so
+        // nothing about traffic Bounded doesn't already recognize ever leaves the
+        // process. BOUNDED_CAPTURE_SCOPE=all re-enables discovery (shapes/counters).
+        if (state_1.state.config?.captureScope === "recognized")
+            return;
         // Unrecognized: heuristic counter tally for GETs (exact from call #1).
         if (method === "GET") {
             this.counters.add(route, raw.ts, raw.status, raw.durMs, raw.bytesIn, raw.bytesOut, true);

package/dist/register.js

@@ -32,6 +32,9 @@
 //   BOUNDED_VERDICT_URL        https://<org>.bounded.sh/api/verdict (arms escort)
 //   BOUNDED_SENSOR_TOKEN       obs1.<keyId>.<sig> (verdict auth + report auth)
 //   BOUNDED_ORG                org slug (manifest polling only)
+//   BOUNDED_CAPTURE_SCOPE      bounded|recognized => send only recognized events
+//                              + counters (app-dev default); all => full capture
+//                              incl. unknown-route shape discovery (unset => all)
 //   BOUNDED_INGEST_BASE        default prod observe-ingest
 //   BOUNDED_COLLECTION         escort collection (default stripeRefunds)
 //   BOUNDED_FAIL_MODE          closed|open (default closed; SPEC U18)  [alias BOUNDED_FAILMODE]
@@ -105,11 +108,18 @@ function bootstrapFromEnv(env = process.env) {
         const flushIntervalMs = Number.isFinite(flushMsRaw) && flushMsRaw > 0 ? flushMsRaw : undefined;
         const timeoutRaw = Number(env.BOUNDED_VERDICT_TIMEOUT_MS);
         const timeoutMs = Number.isFinite(timeoutRaw) && timeoutRaw > 0 ? Math.min(timeoutRaw, 30_000) : undefined;
+        // Capture scope: "bounded"/"recognized" => send only recognized-by-fixtures
+        // events + counter routes (the app-dev / skill default). Anything else (or
+        // unset) => "all" (full capture incl. unknown-route shape discovery).
+        const scopeRaw = String(env.BOUNDED_CAPTURE_SCOPE || "").toLowerCase();
+        const captureScope = scopeRaw === "recognized" || scopeRaw === "bounded" ? "recognized"
+            : scopeRaw === "all" ? "all" : undefined;
         const cfg = {
             ingestBase: env.BOUNDED_INGEST_BASE || DEFAULT_INGEST,
             token: env.BOUNDED_SENSOR_TOKEN || "obs1.unset.unset",
             org: env.BOUNDED_ORG || undefined,
             debug: env.BOUNDED_DEBUG === "1",
+            ...(captureScope ? { captureScope } : {}),
             ...(flushIntervalMs ? { flushIntervalMs } : {}),
         };
         if (verdictUrl) {

package/dist/types.d.ts

@@ -83,6 +83,16 @@ export interface ObserveConfig {
     counterPromoteThreshold?: number;
     /** Max new shape samples emitted per minute (default 30). */
     shapesPerMinute?: number;
+    /**
+     * What to send. "all" (default): recognized events + counters + UNrecognized
+     * shape samples (needed for the classification loop). "recognized" (the
+     * app-dev / skill default, "bounded stuff only"): recognized-by-fixtures
+     * events + explicit counter routes ONLY — unknown external routes are neither
+     * sampled nor counted, so nothing about traffic Bounded doesn't already
+     * recognize ever leaves the process. Turn on full capture with
+     * BOUNDED_CAPTURE_SCOPE=all when you want to discover/classify new routes.
+     */
+    captureScope?: "recognized" | "all";
     /** Manifest override (tests/dev). Skips the built-in + polling when set. */
     manifest?: unknown;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bounded-sh/observe",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Bounded observe shim for Node: intercepts fetch + http/https egress, attributes actors, reports metadata-only events to the Bounded observe ingest. Never breaks the app.",
   "license": "MIT",
   "private": false,