@dyrected/core 2.5.60 → 2.5.62

package/dist/server.d.cts

@@ -1,16 +1,115 @@
 import * as hono_types from 'hono/types';
 import * as hono from 'hono';
 import { Hono, Context } from 'hono';
-import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-C0twGIaF.cjs';
-import * as hono_utils_http_status from 'hono/utils/http-status';
+import { Logger } from 'pino';
+import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-Dv5XACR4.cjs';
+import { JWTPayload } from 'jose';
+import { Tracer, Counter, Attributes, Histogram, Span } from '@opentelemetry/api';
+import { PrometheusExporter } from '@opentelemetry/exporter-prometheus';
 import * as hono_utils_types from 'hono/utils/types';
+import * as hono_utils_http_status from 'hono/utils/http-status';
 import 'lucide-react';
 
+interface CollectionTokenPayload extends JWTPayload {
+    sub: string;
+    email: string;
+    collection: string;
+    sid?: string;
+    purpose?: 'invite' | 'reset';
+    providerId?: string;
+    authSource?: 'local' | 'external';
+}
+
+interface ResolvedObservabilityConfig {
+    requestLogging: {
+        enabled: boolean;
+        logBodies: boolean;
+        maxBodyBytes: number;
+        redactPaths: string[];
+        includeHeaders: string[];
+        redactHeaders: string[];
+    };
+    sampling: {
+        successRate: number;
+        traceSuccessRate: number;
+        bodySuccessRate: number;
+        alwaysKeep4xx: boolean;
+        alwaysKeep5xx: boolean;
+    };
+    tracing: {
+        enabled: boolean;
+        serviceName: string;
+        exporter: "otlp" | "console" | "none";
+        headers: Record<string, string>;
+        endpoint?: string;
+    };
+    metrics: {
+        enabled: boolean;
+        exporter: "otlp" | "prometheus" | "none";
+        endpoint?: string;
+        path: string;
+    };
+    transports: {
+        targets: Array<{
+            type: "stdout";
+        } | {
+            type: "stderr";
+        } | {
+            type: "file";
+            path: string;
+        } | {
+            type: "otlp";
+            endpoint: string;
+            headers?: Record<string, string>;
+        }>;
+    };
+}
+interface RequestTraceContext {
+    span: Span;
+    traceId: string;
+    spanId: string;
+    sampled: boolean;
+}
+interface RequestBodyCapture {
+    attempted: boolean;
+    contentType?: string;
+    contentLength?: number;
+    truncated?: boolean;
+    parseFailed?: boolean;
+    body?: unknown;
+}
+interface MetricsRuntime {
+    requestCount: Counter<Attributes>;
+    authFailureCount: Counter<Attributes>;
+    uncaughtErrorCount: Counter<Attributes>;
+    auditWriteFailureCount: Counter<Attributes>;
+    emailSendFailureCount: Counter<Attributes>;
+    workflowHookFailureCount: Counter<Attributes>;
+    requestDuration: Histogram<Attributes>;
+}
+interface DyrectedObservabilityRuntime {
+    logger: Logger;
+    config: ResolvedObservabilityConfig;
+    tracer?: Tracer;
+    metrics?: MetricsRuntime;
+    prometheusExporter?: PrometheusExporter;
+    shutdown: () => Promise<void>;
+    recordAuthFailure: (attributes?: Attributes) => void;
+    recordUncaughtError: (attributes?: Attributes) => void;
+    recordAuditWriteFailure: (attributes?: Attributes) => void;
+    recordEmailSendFailure: (attributes?: Attributes) => void;
+    recordWorkflowHookFailure: (attributes?: Attributes) => void;
+}
+
 interface DyrectedContext {
     Variables: {
         config: DyrectedConfig;
+        logger?: Logger;
+        observability?: DyrectedObservabilityRuntime;
         siteId?: string;
         workspaceId?: string;
+        requestBodyCapture?: RequestBodyCapture;
+        requestTrace?: RequestTraceContext;
         /**
          * The authenticated user set by requireAuth() or optionalAuth() middleware.
          * Hydrated from the full user record (minus password) when a db adapter is
@@ -23,6 +122,8 @@ interface DyrectedContext {
             collection: string;
             [key: string]: any;
         };
+        clientIp?: string;
+        authTokenPayload?: CollectionTokenPayload;
     };
 }
 /**
@@ -40,7 +141,7 @@ declare function registerRoutes(app: Hono<DyrectedContext>, config: DyrectedConf
  *
  * Routes registered (relative to `/api/collections/:slug`):
  *   POST   /login
- *   POST   /logout       (stateless — client drops the token)
+ *   POST   /logout
  *   GET    /me
  *   POST   /refresh-token
  *   POST   /forgot-password
@@ -51,6 +152,9 @@ declare function registerRoutes(app: Hono<DyrectedContext>, config: DyrectedConf
 declare class AuthController {
     private collection;
     constructor(collection: CollectionConfig);
+    private sanitizeUser;
+    private clearLockoutState;
+    private recordFailedLogin;
     init(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
@@ -67,8 +171,7 @@ declare class AuthController {
     }, 400, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
-            id: string;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     login(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
@@ -80,15 +183,22 @@ declare class AuthController {
         error: true;
         message: string;
     }, 401, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+        retryAfterSeconds: number;
+    }, 429, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
-    logout(c: Context<DyrectedContext>): Promise<Response & hono.TypedResponse<{
+    logout(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+    }, 401, "json">) | (Response & hono.TypedResponse<{
         success: true;
         message: string;
-    }, hono_utils_http_status.ContentfulStatusCode, "json">>;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     me(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
@@ -98,13 +208,15 @@ declare class AuthController {
         error: true;
         message: string;
     }, 404, "json">) | (Response & hono.TypedResponse<{
-        [x: string]: any;
-        id: string;
+        [x: string]: hono_utils_types.JSONValue;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     refreshToken(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         error: true;
         message: string;
     }, 401, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+    }, 400, "json">) | (Response & hono.TypedResponse<{
         token: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     forgotPassword(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
@@ -151,8 +263,7 @@ declare class AuthController {
     }, 409, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
-            id: string;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, 201, "json">)>;
 }
@@ -343,6 +454,7 @@ declare class GlobalController {
 
 declare class MediaController {
     private collection;
+    private loggerComponent;
     constructor(collection?: string);
     upload(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;

package/dist/server.d.ts

@@ -1,16 +1,115 @@
 import * as hono_types from 'hono/types';
 import * as hono from 'hono';
 import { Hono, Context } from 'hono';
-import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-C0twGIaF.js';
-import * as hono_utils_http_status from 'hono/utils/http-status';
+import { Logger } from 'pino';
+import { D as DyrectedConfig, C as CollectionConfig, G as GlobalConfig } from './app-config-Dv5XACR4.js';
+import { JWTPayload } from 'jose';
+import { Tracer, Counter, Attributes, Histogram, Span } from '@opentelemetry/api';
+import { PrometheusExporter } from '@opentelemetry/exporter-prometheus';
 import * as hono_utils_types from 'hono/utils/types';
+import * as hono_utils_http_status from 'hono/utils/http-status';
 import 'lucide-react';
 
+interface CollectionTokenPayload extends JWTPayload {
+    sub: string;
+    email: string;
+    collection: string;
+    sid?: string;
+    purpose?: 'invite' | 'reset';
+    providerId?: string;
+    authSource?: 'local' | 'external';
+}
+
+interface ResolvedObservabilityConfig {
+    requestLogging: {
+        enabled: boolean;
+        logBodies: boolean;
+        maxBodyBytes: number;
+        redactPaths: string[];
+        includeHeaders: string[];
+        redactHeaders: string[];
+    };
+    sampling: {
+        successRate: number;
+        traceSuccessRate: number;
+        bodySuccessRate: number;
+        alwaysKeep4xx: boolean;
+        alwaysKeep5xx: boolean;
+    };
+    tracing: {
+        enabled: boolean;
+        serviceName: string;
+        exporter: "otlp" | "console" | "none";
+        headers: Record<string, string>;
+        endpoint?: string;
+    };
+    metrics: {
+        enabled: boolean;
+        exporter: "otlp" | "prometheus" | "none";
+        endpoint?: string;
+        path: string;
+    };
+    transports: {
+        targets: Array<{
+            type: "stdout";
+        } | {
+            type: "stderr";
+        } | {
+            type: "file";
+            path: string;
+        } | {
+            type: "otlp";
+            endpoint: string;
+            headers?: Record<string, string>;
+        }>;
+    };
+}
+interface RequestTraceContext {
+    span: Span;
+    traceId: string;
+    spanId: string;
+    sampled: boolean;
+}
+interface RequestBodyCapture {
+    attempted: boolean;
+    contentType?: string;
+    contentLength?: number;
+    truncated?: boolean;
+    parseFailed?: boolean;
+    body?: unknown;
+}
+interface MetricsRuntime {
+    requestCount: Counter<Attributes>;
+    authFailureCount: Counter<Attributes>;
+    uncaughtErrorCount: Counter<Attributes>;
+    auditWriteFailureCount: Counter<Attributes>;
+    emailSendFailureCount: Counter<Attributes>;
+    workflowHookFailureCount: Counter<Attributes>;
+    requestDuration: Histogram<Attributes>;
+}
+interface DyrectedObservabilityRuntime {
+    logger: Logger;
+    config: ResolvedObservabilityConfig;
+    tracer?: Tracer;
+    metrics?: MetricsRuntime;
+    prometheusExporter?: PrometheusExporter;
+    shutdown: () => Promise<void>;
+    recordAuthFailure: (attributes?: Attributes) => void;
+    recordUncaughtError: (attributes?: Attributes) => void;
+    recordAuditWriteFailure: (attributes?: Attributes) => void;
+    recordEmailSendFailure: (attributes?: Attributes) => void;
+    recordWorkflowHookFailure: (attributes?: Attributes) => void;
+}
+
 interface DyrectedContext {
     Variables: {
         config: DyrectedConfig;
+        logger?: Logger;
+        observability?: DyrectedObservabilityRuntime;
         siteId?: string;
         workspaceId?: string;
+        requestBodyCapture?: RequestBodyCapture;
+        requestTrace?: RequestTraceContext;
         /**
          * The authenticated user set by requireAuth() or optionalAuth() middleware.
          * Hydrated from the full user record (minus password) when a db adapter is
@@ -23,6 +122,8 @@ interface DyrectedContext {
             collection: string;
             [key: string]: any;
         };
+        clientIp?: string;
+        authTokenPayload?: CollectionTokenPayload;
     };
 }
 /**
@@ -40,7 +141,7 @@ declare function registerRoutes(app: Hono<DyrectedContext>, config: DyrectedConf
  *
  * Routes registered (relative to `/api/collections/:slug`):
  *   POST   /login
- *   POST   /logout       (stateless — client drops the token)
+ *   POST   /logout
  *   GET    /me
  *   POST   /refresh-token
  *   POST   /forgot-password
@@ -51,6 +152,9 @@ declare function registerRoutes(app: Hono<DyrectedContext>, config: DyrectedConf
 declare class AuthController {
     private collection;
     constructor(collection: CollectionConfig);
+    private sanitizeUser;
+    private clearLockoutState;
+    private recordFailedLogin;
     init(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
@@ -67,8 +171,7 @@ declare class AuthController {
     }, 400, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
-            id: string;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     login(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
@@ -80,15 +183,22 @@ declare class AuthController {
         error: true;
         message: string;
     }, 401, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+        retryAfterSeconds: number;
+    }, 429, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
-    logout(c: Context<DyrectedContext>): Promise<Response & hono.TypedResponse<{
+    logout(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+    }, 401, "json">) | (Response & hono.TypedResponse<{
         success: true;
         message: string;
-    }, hono_utils_http_status.ContentfulStatusCode, "json">>;
+    }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     me(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;
     }, 500, "json">) | (Response & hono.TypedResponse<{
@@ -98,13 +208,15 @@ declare class AuthController {
         error: true;
         message: string;
     }, 404, "json">) | (Response & hono.TypedResponse<{
-        [x: string]: any;
-        id: string;
+        [x: string]: hono_utils_types.JSONValue;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     refreshToken(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         error: true;
         message: string;
     }, 401, "json">) | (Response & hono.TypedResponse<{
+        error: true;
+        message: string;
+    }, 400, "json">) | (Response & hono.TypedResponse<{
         token: string;
     }, hono_utils_http_status.ContentfulStatusCode, "json">)>;
     forgotPassword(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
@@ -151,8 +263,7 @@ declare class AuthController {
     }, 409, "json">) | (Response & hono.TypedResponse<{
         token: string;
         user: {
-            [x: string]: any;
-            id: string;
+            [x: string]: hono_utils_types.JSONValue;
         };
     }, 201, "json">)>;
 }
@@ -343,6 +454,7 @@ declare class GlobalController {
 
 declare class MediaController {
     private collection;
+    private loggerComponent;
     constructor(collection?: string);
     upload(c: Context<DyrectedContext>): Promise<(Response & hono.TypedResponse<{
         message: string;