@echovisionlab/geul-telemetry 0.1.0

package/fixtures/http-request-results.json

@@ -0,0 +1,21 @@
+[
+  { "status_code": 100, "outcome": "succeeded" },
+  { "status_code": 200, "outcome": "succeeded" },
+  { "status_code": 302, "outcome": "succeeded" },
+  { "status_code": 400, "outcome": "failed", "reason": "client_error" },
+  {
+    "status_code": 401,
+    "outcome": "blocked",
+    "reason": "authentication_required"
+  },
+  {
+    "status_code": 403,
+    "outcome": "blocked",
+    "reason": "permission_denied"
+  },
+  { "status_code": 404, "outcome": "failed", "reason": "client_error" },
+  { "status_code": 429, "outcome": "blocked", "reason": "rate_limited" },
+  { "status_code": 499, "outcome": "failed", "reason": "client_error" },
+  { "status_code": 500, "outcome": "failed", "reason": "server_error" },
+  { "status_code": 599, "outcome": "failed", "reason": "server_error" }
+]

package/fixtures/job-catalog.json

@@ -0,0 +1,23 @@
+[
+  {
+    "job_kind": "mesh_optimization",
+    "failure_reasons": [
+      "rejected",
+      "source_not_found",
+      "download_failed",
+      "optimization_failed",
+      "upload_failed",
+      "internal"
+    ]
+  },
+  {
+    "job_kind": "og_generation",
+    "failure_reasons": [
+      "invalid_claim",
+      "source_rejected",
+      "processing_failed",
+      "integrity_failed",
+      "completion_rejected"
+    ]
+  }
+]

package/fixtures/locale-content-audit.json

@@ -0,0 +1,126 @@
+[
+  {
+    "case": "post locale created",
+    "action": "post.updated",
+    "target_type": "post",
+    "target_id": "post-1",
+    "locale": "ko",
+    "item_operation": "created"
+  },
+  {
+    "case": "page locale updated",
+    "action": "page.updated",
+    "target_type": "page",
+    "target_id": "page-1",
+    "locale": "en-US",
+    "item_operation": "updated"
+  },
+  {
+    "case": "work locale deleted",
+    "action": "work.updated",
+    "target_type": "work",
+    "target_id": "work-1",
+    "locale": "ja",
+    "item_operation": "deleted"
+  },
+  {
+    "case": "post series locale updated",
+    "action": "post_series.updated",
+    "target_type": "post_series",
+    "target_id": "series-1",
+    "locale": "fr",
+    "item_operation": "updated"
+  },
+  {
+    "case": "program event locale updated",
+    "action": "program_event.updated",
+    "target_type": "program_event",
+    "target_id": "event-1",
+    "locale": "de",
+    "item_operation": "updated"
+  },
+  {
+    "case": "release locale updated",
+    "action": "release.updated",
+    "target_type": "release",
+    "target_id": "release-1",
+    "locale": "es-419",
+    "item_operation": "updated"
+  },
+  {
+    "case": "artist locale updated",
+    "action": "artist.updated",
+    "target_type": "artist",
+    "target_id": "artist-1",
+    "locale": "pt-PT",
+    "item_operation": "updated"
+  },
+  {
+    "case": "label locale updated",
+    "action": "label.updated",
+    "target_type": "label",
+    "target_id": "label-1",
+    "locale": "it",
+    "item_operation": "updated"
+  },
+  {
+    "case": "menu locale updated",
+    "action": "menu.updated",
+    "target_type": "menu",
+    "target_id": "menu-1",
+    "locale": "zh-CN",
+    "item_operation": "updated"
+  },
+  {
+    "case": "campaign locale updated",
+    "action": "campaign.updated",
+    "target_type": "campaign",
+    "target_id": "campaign-1",
+    "locale": "nl",
+    "item_operation": "updated"
+  },
+  {
+    "case": "form locale updated",
+    "action": "form.updated",
+    "target_type": "form",
+    "target_id": "form-1",
+    "locale": "pl",
+    "item_operation": "updated"
+  },
+  {
+    "case": "email template locale updated",
+    "action": "email_template.updated",
+    "target_type": "email_template",
+    "target_id": "template-1",
+    "locale": "ru",
+    "item_operation": "updated"
+  },
+  {
+    "case": "email layout locale updated",
+    "action": "email_layout.updated",
+    "target_type": "email_layout",
+    "target_id": "layout-1",
+    "locale": "tr",
+    "item_operation": "updated"
+  },
+  {
+    "case": "privacy locale updated",
+    "action": "legal_policy.updated",
+    "target_type": "legal_policy",
+    "target_id": "privacy-1",
+    "locale": "vi",
+    "item_operation": "updated",
+    "policy_type": "privacy",
+    "version_number": 2
+  },
+  {
+    "case": "terms locale updated",
+    "action": "legal_policy.updated",
+    "target_type": "legal_policy",
+    "target_id": "terms-1",
+    "locale": "th",
+    "item_operation": "updated",
+    "policy_type": "terms",
+    "version_number": 1
+  }
+]

package/fixtures/log-redaction.json

@@ -0,0 +1,72 @@
+{
+  "forbidden": [
+    { "key": "api_key", "normalized": "api_key" },
+    { "key": "APIKey", "normalized": "apikey" },
+    { "key": "translation.api-key", "normalized": "translation_api_key" },
+    {
+      "key": "provider.document.id",
+      "normalized": "provider_document_id"
+    },
+    {
+      "key": "translationProviderDocumentKey",
+      "normalized": "translation_provider_document_key"
+    },
+    { "key": "XLIFF", "normalized": "xliff" },
+    { "key": "translation-xliff", "normalized": "translation_xliff" },
+    { "key": "sourceText", "normalized": "source_text" },
+    { "key": "target.text", "normalized": "target_text" },
+    {
+      "key": "translationTranslatedText",
+      "normalized": "translation_translated_text"
+    },
+    { "key": "systemPrompt", "normalized": "system_prompt" },
+    { "key": "glossary", "normalized": "glossary" },
+    {
+      "key": "translationGlossary",
+      "normalized": "translation_glossary"
+    },
+    {
+      "key": "translationGlossaryPayload",
+      "normalized": "translation_glossary_payload"
+    },
+    {
+      "key": "translationContextPayload",
+      "normalized": "translation_context_payload"
+    },
+    {
+      "key": "providerRequestBody",
+      "normalized": "provider_request_body"
+    },
+    {
+      "key": "provider.response.body",
+      "normalized": "provider_response_body"
+    },
+    {
+      "key": "providerResponseMessage",
+      "normalized": "provider_response_message"
+    },
+    { "key": "providerError", "normalized": "provider_error" },
+    {
+      "key": "translationProviderRawError",
+      "normalized": "translation_provider_raw_error"
+    },
+    { "key": "raw-error", "normalized": "raw_error" },
+    { "key": "error.message", "normalized": "error_message" }
+  ],
+  "allowed": [
+    { "key": "provider", "normalized": "provider" },
+    { "key": "providerType", "normalized": "provider_type" },
+    { "key": "model", "normalized": "model" },
+    { "key": "modelCatalogValue", "normalized": "model_catalog_value" },
+    { "key": "operation", "normalized": "operation" },
+    { "key": "HTTP status class", "normalized": "http_status_class" },
+    { "key": "exceptionType", "normalized": "exception_type" },
+    { "key": "reason", "normalized": "reason" },
+    { "key": "failureReason", "normalized": "failure_reason" },
+    {
+      "key": "providerDocumentSubmittedAt",
+      "normalized": "provider_document_submitted_at"
+    },
+    { "key": "promptLength", "normalized": "prompt_length" }
+  ]
+}

package/fixtures/request-record.json

@@ -0,0 +1,14 @@
+{
+  "event": "request.completed",
+  "occurred_at": "2026-08-09T03:04:05Z",
+  "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+  "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
+  "span_id": "00f067aa0ba902b7",
+  "actor_kind": "member",
+  "actor_member_id": "member_123",
+  "http_method": "PATCH",
+  "http_route": "/posts/{post_id}",
+  "status_code": 200,
+  "duration_ms": 42,
+  "outcome": "succeeded"
+}

package/fixtures/security-access-records.json

@@ -0,0 +1,61 @@
+[
+  {
+    "access_id": "7a7a8fd4-1f69-4e9a-9dc2-2378926ff351",
+    "occurred_at": "2026-08-09T03:04:05Z",
+    "action": "authentication.succeeded",
+    "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "trace_id": "4bf92f3577b34da6a3ce929d0e0e4736",
+    "span_id": "00f067aa0ba902b7",
+    "actor_kind": "member",
+    "actor_member_id": "member-1",
+    "source_ip": "192.0.2.4",
+    "flow_kind": "login",
+    "authentication_method": "passkey",
+    "principal_state": "active"
+  },
+  {
+    "access_id": "0b6bcad2-c90d-49e9-bec7-f9a4ba6b2894",
+    "occurred_at": "2026-08-09T03:04:06Z",
+    "action": "authentication.failed",
+    "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "actor_kind": "anonymous",
+    "source_ip": "2001:db8::4",
+    "flow_kind": "login",
+    "authentication_method": "oidc",
+    "provider": "google",
+    "reason": "provider_denied"
+  },
+  {
+    "access_id": "ade2d4c8-ca22-4c73-838e-104106ae20bb",
+    "occurred_at": "2026-08-09T03:04:07Z",
+    "action": "authentication.blocked",
+    "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "actor_kind": "anonymous",
+    "source_ip": "192.0.2.5",
+    "reason": "rate_limited"
+  },
+  {
+    "access_id": "c64e7917-d837-4d2f-a043-d12d99b07494",
+    "occurred_at": "2026-08-09T03:04:08Z",
+    "action": "authorization.denied",
+    "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "actor_kind": "anonymous",
+    "source_ip": "192.0.2.6",
+    "reason": "authentication_required",
+    "attempted_action": "/geul.api.v1.MemberService/ListMembersAdmin",
+    "permission": "procedure:invoke"
+  },
+  {
+    "access_id": "7ef4d464-532a-4921-91e7-d63e06c31842",
+    "occurred_at": "2026-08-09T03:04:09Z",
+    "action": "personal_data.accessed",
+    "request_id": "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "actor_kind": "member",
+    "actor_member_id": "7a7a8fd4-1f69-4e9a-9dc2-2378926ff351",
+    "source_ip": "192.0.2.7",
+    "subject_type": "member_collection",
+    "subject_id": "1",
+    "access_kind": "read",
+    "data_category": "member_administration"
+  }
+]

package/fixtures/service-identities.json

@@ -0,0 +1,11 @@
+[
+  "geul-backend",
+  "geul-web",
+  "geul-identity",
+  "geul-collab",
+  "geul-cdn",
+  "geul-og",
+  "geul-asset-optimizer",
+  "geul-transcoder",
+  "geul-waveform-processor"
+]

package/fixtures/system-catalog.json

@@ -0,0 +1,28 @@
+[
+  { "event": "service.ready", "outcome": "ready" },
+  { "event": "service.degraded", "outcome": "degraded" },
+  { "event": "service.stopping", "outcome": "stopping" },
+  { "event": "service.failed", "outcome": "failed" },
+  { "event": "dependency.degraded", "outcome": "degraded" },
+  { "event": "dependency.recovered", "outcome": "recovered" },
+  { "event": "queue.publish.succeeded", "outcome": "succeeded" },
+  { "event": "queue.publish.failed", "outcome": "failed" },
+  { "event": "queue.delivery.succeeded", "outcome": "succeeded" },
+  { "event": "queue.delivery.failed", "outcome": "failed" },
+  { "event": "queue.delivery.requeued", "outcome": "requeued" },
+  { "event": "queue.retry.accepted", "outcome": "accepted" },
+  { "event": "queue.retry.failed", "outcome": "failed" },
+  { "event": "queue.dlq.accepted", "outcome": "accepted" },
+  { "event": "queue.dlq.failed", "outcome": "failed" },
+  { "event": "job.started", "outcome": "started" },
+  { "event": "job.succeeded", "outcome": "succeeded" },
+  { "event": "job.failed", "outcome": "failed" },
+  { "event": "audit.append.failed", "outcome": "failed" },
+  { "event": "collaboration.checkpoint.failed", "outcome": "failed" },
+  { "event": "client.render.failed", "outcome": "failed" },
+  { "event": "telemetry.pipeline.degraded", "outcome": "degraded" },
+  { "event": "telemetry.pipeline.recovered", "outcome": "recovered" },
+  { "event": "translation.job.terminal", "outcome": "applied" },
+  { "event": "translation.job.terminal", "outcome": "failed" },
+  { "event": "translation.job.terminal", "outcome": "cancelled" }
+]

package/fixtures/translation-job-terminal-catalog.json

@@ -0,0 +1,45 @@
+{
+  "event": "translation.job.terminal",
+  "outcomes": ["applied", "failed", "cancelled"],
+  "entity_types": [
+    "post",
+    "page",
+    "work",
+    "program_event",
+    "release",
+    "artist",
+    "label",
+    "menu",
+    "email_template",
+    "email_layout",
+    "campaign",
+    "form",
+    "privacy",
+    "terms",
+    "series"
+  ],
+  "failure_reasons": [
+    "provider_configuration",
+    "provider_authentication",
+    "provider_rate_limited",
+    "provider_unavailable",
+    "provider_rejected",
+    "provider_response_invalid",
+    "target_apply_failed",
+    "og_handoff_failed",
+    "internal"
+  ],
+  "valid_job_ids": [
+    "018f47a2-8a3d-1e17-9d42-6f12c89b1234",
+    "018f47a2-8a3d-4e17-9d42-6f12c89b1234",
+    "018f47a2-8a3d-7e17-9d42-6f12c89b1234",
+    "018f47a2-8a3d-8e17-9d42-6f12c89b1234"
+  ],
+  "invalid_job_ids": [
+    "018F47A2-8A3D-4E17-9D42-6F12C89B1234",
+    "018f47a2-8a3d-0e17-9d42-6f12c89b1234",
+    "018f47a2-8a3d-9e17-9d42-6f12c89b1234",
+    "018f47a2-8a3d-4e17-7d42-6f12c89b1234",
+    "018f47a28a3d-4e17-9d42-6f12c89b1234"
+  ]
+}

package/fixtures/translation-settings-fields.json

@@ -0,0 +1 @@
+["default_locale", "protected_terms"]

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@echovisionlab/geul-telemetry",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/echovisionlab/geul-telemetry.git"
+  },
+  "engines": {
+    "node": "24.19.0"
+  },
+  "packageManager": "pnpm@11.22.0+sha512.1ff870c4c6133dfd88fb2afc46dd13d47f09c9794b438c6fdb47ca98caf3bc16381ee0be93a091b8e3824cf01f889f46d7d9e20910fb0be1ab0fb5baa80dd621",
+  "files": [
+    "README.md",
+    "src",
+    "!src/**/*.test.ts",
+    "fixtures",
+    "policy"
+  ],
+  "scripts": {
+    "format:check": "prettier --check .",
+    "format": "prettier --write .",
+    "lint": "eslint --cache .",
+    "lint:fix": "eslint --cache . --fix",
+    "deadcode": "knip --include files,dependencies,unlisted,exports,types",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "package:smoke": "npm pack --dry-run"
+  },
+  "exports": {
+    ".": "./src/index.ts",
+    "./actor": "./src/actor.ts",
+    "./redaction": "./src/redaction.ts",
+    "./request-id": "./src/request-id.ts",
+    "./trace": "./src/trace.ts"
+  },
+  "dependencies": {
+    "@opentelemetry/api": "^1.9.1"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.3",
+    "@typescript/native": "npm:typescript@7.0.2",
+    "@vitest/coverage-v8": "^4.1.10",
+    "eslint": "^10.8.1",
+    "knip": "^6.32.2",
+    "prettier": "^3.9.6",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "typescript-eslint": "^8.67.0",
+    "vitest": "^4.1.10"
+  },
+  "license": "PolyForm-Noncommercial-1.0.0",
+  "homepage": "https://github.com/echovisionlab/geul-telemetry#readme",
+  "bugs": {
+    "url": "https://github.com/echovisionlab/geul-telemetry/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/policy/log-redaction.json

@@ -0,0 +1,113 @@
+{
+  "exact": [
+    "api_key",
+    "apikey",
+    "authorization",
+    "auth_code",
+    "body",
+    "campaign_content",
+    "client_ip",
+    "cookie",
+    "credentials",
+    "document_content",
+    "document_name",
+    "display_name",
+    "email",
+    "email_address",
+    "error_message",
+    "error_reason",
+    "file_name",
+    "filename",
+    "flow_id",
+    "from",
+    "context_payload",
+    "glossary",
+    "glossary_payload",
+    "html",
+    "identity_id",
+    "identity_subject",
+    "input",
+    "kratos_id",
+    "member_id",
+    "member_name",
+    "nickname",
+    "object_key",
+    "ory_subject",
+    "output",
+    "password",
+    "path",
+    "payload",
+    "prompt",
+    "provider_document_id",
+    "provider_document_key",
+    "provider_error",
+    "provider_raw_error",
+    "provider_request_body",
+    "provider_response_body",
+    "provider_response_message",
+    "query",
+    "raw_error",
+    "recipient",
+    "request_body",
+    "response_body",
+    "sender",
+    "session_id",
+    "share_token",
+    "signed_url",
+    "source_ip",
+    "source_key",
+    "source_text",
+    "stack",
+    "subject",
+    "target_text",
+    "text",
+    "to",
+    "token",
+    "token_prefix",
+    "unsubscribe_token",
+    "url",
+    "user_id",
+    "user_name",
+    "translated_text",
+    "verification_url",
+    "waveform_key",
+    "work_dir",
+    "workdir",
+    "xliff"
+  ],
+  "suffixes": [
+    "_api_key",
+    "_apikey",
+    "_authorization",
+    "_context_payload",
+    "_cookie",
+    "_display_name",
+    "_email",
+    "_error_message",
+    "_filename",
+    "_glossary",
+    "_glossary_payload",
+    "_object_key",
+    "_member_name",
+    "_nickname",
+    "_password",
+    "_path",
+    "_prompt",
+    "_provider_document_id",
+    "_provider_document_key",
+    "_provider_error",
+    "_provider_raw_error",
+    "_provider_request_body",
+    "_provider_response_body",
+    "_provider_response_message",
+    "_raw_error",
+    "_secret",
+    "_source_text",
+    "_target_text",
+    "_token",
+    "_translated_text",
+    "_url",
+    "_xliff"
+  ],
+  "prefixes": ["authorization_", "cookie_", "password_", "secret_", "token_"]
+}

package/src/actor.ts

@@ -0,0 +1,81 @@
+export type Actor = AnonymousActor | MemberActor | SystemActor;
+
+export const SERVICE_BACKEND = "geul-backend";
+export const SERVICE_WEB = "geul-web";
+export const SERVICE_IDENTITY = "geul-identity";
+export const SERVICE_EDITOR_COLLAB = "geul-collab";
+export const SERVICE_CDN = "geul-cdn";
+export const SERVICE_OG = "geul-og";
+export const SERVICE_ASSET_OPTIMIZER = "geul-asset-optimizer";
+export const SERVICE_TRANSCODER = "geul-transcoder";
+export const SERVICE_WAVEFORM_PROCESSOR = "geul-waveform-processor";
+
+export const CANONICAL_SERVICE_NAMES = [
+  SERVICE_BACKEND,
+  SERVICE_WEB,
+  SERVICE_IDENTITY,
+  SERVICE_EDITOR_COLLAB,
+  SERVICE_CDN,
+  SERVICE_OG,
+  SERVICE_ASSET_OPTIMIZER,
+  SERVICE_TRANSCODER,
+  SERVICE_WAVEFORM_PROCESSOR,
+] as const;
+
+export type ServiceName = (typeof CANONICAL_SERVICE_NAMES)[number];
+
+const canonicalServiceNames = new Set<string>(CANONICAL_SERVICE_NAMES);
+
+export function parseServiceName(value: string): ServiceName {
+  if (!canonicalServiceNames.has(value)) {
+    throw new TypeError(
+      `unknown canonical service name ${JSON.stringify(value)}`,
+    );
+  }
+  return value as ServiceName;
+}
+
+export function instrumentationName(
+  serviceName: ServiceName,
+  component: string,
+): string {
+  return `${serviceName}/${component}`;
+}
+
+export interface AnonymousActor {
+  readonly kind: "anonymous";
+}
+
+export interface MemberActor {
+  readonly kind: "member";
+  readonly sessionId: string;
+  readonly identityId: string;
+  readonly memberId: string;
+}
+
+export interface SystemActor {
+  readonly kind: "system";
+  readonly serviceName: ServiceName;
+}
+
+export type RecordActor =
+  | { readonly actor_kind: "anonymous" }
+  | { readonly actor_kind: "member"; readonly actor_member_id: string }
+  | { readonly actor_kind: "system"; readonly actor_service: string };
+
+export function actorForRecord(actor: Actor): RecordActor {
+  switch (actor.kind) {
+    case "anonymous":
+      return { actor_kind: "anonymous" };
+    case "member":
+      if (actor.memberId === "") {
+        throw new TypeError("member actor requires memberId");
+      }
+      return { actor_kind: "member", actor_member_id: actor.memberId };
+    case "system":
+      return {
+        actor_kind: "system",
+        actor_service: parseServiceName(actor.serviceName),
+      };
+  }
+}