@geekmidas/constructs 10.0.0-alpha.11 → 10.0.0-alpha.110

package/dist/topic/index.mjs

@@ -1,134 +1,2 @@
-import { Construct, ConstructType } from "../Construct-BD5neF7w.mjs";
-import { cloneWith } from "../clone-DblgEZZa.mjs";
-import { canonicalId, provideKey, serviceKey } from "@geekmidas/manifest";
-import { DEFAULT_LOGGER } from "@geekmidas/logger/console";
-import { Publisher } from "@geekmidas/events";
-
-//#region src/topic/Topic.ts
-/**
-* A topic — pub/sub fan-out. Unlike a `Queue` (point-to-point, one consumer), a
-* topic is a *resource* owned by no single handler: it declares the event
-* contract, derives a typed producer (`topic.publisher`), and any number of
-* subscribers (`s.topic(topic)`) bind to it. `gkm build` discovers it into the
-* manifest's `topics` field; infra provisions an SNS topic.
-*
-* This replaces hand-writing a publisher `Service`: the publisher is *derived*
-* from the declared event contract, the same way `Queue` derives its publisher.
-*/
-var Topic = class extends Construct {
-	__IS_TOPIC__ = true;
-	static isTopic(obj) {
-		return Boolean(obj && obj.__IS_TOPIC__ === true && obj.type === ConstructType.Topic);
-	}
-	/**
-	* The canonical id this topic is declared under.
-	*
-	* Derived from the name, so `users` and `Users` are one topic. The name is
-	* left alone: subscribers bind to it and it is what the broker routes on.
-	*/
-	id;
-	/**
-	* The producer's env key, read by both {@link declare} and
-	* {@link publisher} so the two cannot drift.
-	*/
-	connectionKey;
-	constructor(name, eventSchemas, logger = DEFAULT_LOGGER) {
-		super(ConstructType.Topic, logger, [], []);
-		this.name = name;
-		this.eventSchemas = eventSchemas;
-		this.id = canonicalId(name);
-		this.connectionKey = provideKey(this.id, "publisherConnectionString");
-	}
-	/**
-	* What this topic is in the manifest.
-	*
-	* Only the producer's key: a subscriber is *bound* to a topic rather than
-	* depending on it, so the binding is an edge the deploy target reads and not
-	* an env key anyone can hold. Locally both sides meet on the same broker.
-	*/
-	declare() {
-		return [{
-			kind: "topic",
-			id: this.id,
-			provides: [this.connectionKey],
-			events: this.eventTypes,
-			subscribers: []
-		}];
-	}
-	/** The event type names this topic carries. */
-	get eventTypes() {
-		return Object.keys(this.eventSchemas);
-	}
-	/**
-	* The producer side — a `Service` exposing an `EventPublisher` typed to the
-	* union of this topic's events. Inject via `.publisher(topic.publisher)` (for
-	* declarative `.event(...)`) or `.services([topic.publisher])` (to publish
-	* imperatively). Reads `<NAME>_PUBLISHER_CONNECTION_STRING` and selects the
-	* transport from the URL protocol — `pgboss://` locally, `sns://` deployed.
-	*
-	* Because it's a `Service`, the connection-string requirement is sniffed into
-	* the manifest of whatever construct injects it (least-privilege linking).
-	*/
-	/**
-	* The topic as a dependency — what `.dependsOn([users])` dissolves into,
-	* reachable as `services.users`.
-	*
-	* It is the producer, because publishing is the only thing depending on a
-	* topic can mean: a subscriber *binds* with `s.topic(…)` instead, and is
-	* deliberately never handed this. {@link publisher} is the same service
-	* under its older `<name>Publisher` key.
-	*/
-	get service() {
-		const { register } = this.publisher;
-		return {
-			serviceName: serviceKey(this.id),
-			register
-		};
-	}
-	get publisher() {
-		const envVar = this.connectionKey;
-		return {
-			serviceName: `${this.name}Publisher`,
-			async register({ envParser }) {
-				const { connectionString } = envParser.create((get) => ({ connectionString: get(envVar).string() })).parse();
-				return Publisher.fromConnectionString(connectionString);
-			}
-		};
-	}
-};
-
-//#endregion
-//#region src/topic/TopicBuilder.ts
-/**
-* Builds a {@link Topic} — `t.topic('users').events({ 'user.created': schema, … })`.
-* The event map is the topic's contract: it types the derived `topic.publisher`
-* and the subscribers that bind via `s.topic(topic)`.
-*/
-var TopicBuilder = class {
-	_name;
-	_logger = DEFAULT_LOGGER;
-	/** The topic name — drives the infra topic and its `<NAME>_*` env vars. */
-	topic(name) {
-		return cloneWith(this, { _name: name });
-	}
-	logger(logger) {
-		return cloneWith(this, { _logger: logger });
-	}
-	/**
-	* The event contract — a map of event type → payload schema. Building the
-	* topic requires this; it's what types the publisher and subscribers.
-	*/
-	events(events) {
-		if (!this._name) throw new Error("Topic requires a name — call .topic(name) before .events().");
-		const topic = new Topic(this._name, events, this._logger);
-		return topic;
-	}
-};
-
-//#endregion
-//#region src/topic/index.ts
-const t = new TopicBuilder();
-
-//#endregion
-export { Topic, TopicBuilder, t };
-//# sourceMappingURL=index.mjs.map
+import { t as Topic } from "../Topic-D2R0r24C.mjs";
+export { Topic };

package/dist/tracing-Bbj1uoFJ.mjs

@@ -0,0 +1,127 @@
+import { channel } from "node:diagnostics_channel";
+import { carrierFromAttributes } from "@geekmidas/events";
+import { identifyRequest } from "@geekmidas/services";
+import { SpanKind, SpanStatusCode, context, propagation, trace } from "@opentelemetry/api";
+//#region src/tracing.ts
+/**
+* Where the constructs meet OpenTelemetry, beyond the spans `@geekmidas/events`
+* starts for the brokers: the trace context in a Lambda's records, the spans
+* around an `ExternalApi`'s client, and the context a call to a sibling
+* service carries.
+*
+* Everything goes through the global API, so without a registered provider
+* none of it records anything.
+*
+* @module
+*/
+/**
+* The trace context a Lambda record carries: an SQS record's message
+* attributes, an SNS record's, or those of the SNS envelope an SQS
+* subscription delivers in its body.
+*/
+function recordCarrier(record) {
+	const r = record;
+	if (r?.Sns) return carrierFromAttributes(r.Sns.MessageAttributes);
+	const own = carrierFromAttributes(r?.messageAttributes);
+	if (own || typeof r?.body !== "string") return own;
+	try {
+		const body = JSON.parse(r.body);
+		return body?.Type === "Notification" ? carrierFromAttributes(body.MessageAttributes) : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* `client`, with a span around each of its methods: `<api>.<method>`, carrying
+* the API's name. An outbound `fetch` the method makes is traced already, and
+* becomes this span's child, so the name is on the trace without anything
+* knowing which URL belongs to which API.
+*
+* Only the client's own methods: what they return is the client's business.
+* Methods are called on the client itself, never on the proxy, so private
+* fields keep working.
+*/
+function traceClient(api, client, attributes = {}) {
+	if (!client || typeof client !== "object" && typeof client !== "function") return client;
+	const wrapped = /* @__PURE__ */ new Map();
+	return new Proxy(client, { get(target, property, receiver) {
+		const value = Reflect.get(target, property, receiver);
+		if (typeof value !== "function" || typeof property === "symbol") return value;
+		if (property === "constructor" || property === "then") return value;
+		const cached = wrapped.get(property);
+		if (cached && cached.original === value) return cached;
+		const traced = Object.assign((...args) => callTraced(api, property, attributes, () => value.apply(target, args)), { original: value });
+		wrapped.set(property, traced);
+		return traced;
+	} });
+}
+function callTraced(api, method, attributes, call) {
+	return trace.getTracer("@geekmidas/constructs").startActiveSpan(`${api}.${method}`, {
+		kind: SpanKind.INTERNAL,
+		attributes: {
+			"gkm.external_api.name": api,
+			"gkm.external_api.method": method,
+			...attributes
+		}
+	}, (span) => {
+		const fail = (error) => {
+			if (error instanceof Error) span.recordException(error);
+			span.setStatus({ code: SpanStatusCode.ERROR });
+			span.end();
+		};
+		let result;
+		try {
+			result = call();
+		} catch (error) {
+			fail(error);
+			throw error;
+		}
+		if (result instanceof Promise) {
+			result.then(() => span.end(), (error) => fail(error));
+			return result;
+		}
+		span.end();
+		return result;
+	});
+}
+/**
+* Where an instrumentation of `fetch` hears of each request — undici's own
+* diagnostics channel, which OpenTelemetry's undici instrumentation (and every
+* APM built on it) subscribes to.
+*/
+const FETCH_REQUESTS = channel("undici:request:create");
+/**
+* The active trace context, written into `headers` for a call this process
+* makes to one of its own services — the auth server's session check — so the
+* callee's span joins the caller's trace.
+*
+* Through the global propagator, so it is a no-op without one. And not at all
+* when a `fetch` instrumentation is listening: that opens the request's own
+* CLIENT span and writes its `traceparent` by appending a header, so a second
+* one here would reach the callee as two values joined — `a, b` — which no
+* propagator reads, and the trace would break instead of joining.
+*/
+function injectTraceContext(headers) {
+	if (FETCH_REQUESTS.hasSubscribers) return;
+	propagation.inject(context.active(), headers, { set: (carrier, key, value) => carrier.set(key, value) });
+}
+/**
+* Say who the current request is for: on its context — so its logger and
+* every service read it — and on its span, as OpenTelemetry's `enduser.id`
+* and `session.id`, so the request's trace can be found by who made it.
+*
+* The span is the active one: the request's own, since a session is verified
+* before the handler opens any of its own. With no provider registered there
+* is none, and only the context is told.
+*/
+function identifyUser(user) {
+	identifyRequest(user);
+	trace.getActiveSpan()?.setAttributes({
+		"enduser.id": user.id,
+		...user.sessionId ? { "session.id": user.sessionId } : {}
+	});
+}
+//#endregion
+export { traceClient as i, injectTraceContext as n, recordCarrier as r, identifyUser as t };
+
+//# sourceMappingURL=tracing-Bbj1uoFJ.mjs.map

package/dist/tracing-Bbj1uoFJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing-Bbj1uoFJ.mjs","names":[],"sources":["../src/tracing.ts"],"sourcesContent":["/**\n * Where the constructs meet OpenTelemetry, beyond the spans `@geekmidas/events`\n * starts for the brokers: the trace context in a Lambda's records, the spans\n * around an `ExternalApi`'s client, and the context a call to a sibling\n * service carries.\n *\n * Everything goes through the global API, so without a registered provider\n * none of it records anything.\n *\n * @module\n */\nimport { channel } from 'node:diagnostics_channel';\nimport { carrierFromAttributes, type TraceCarrier } from '@geekmidas/events';\nimport { identifyRequest, type RequestUser } from '@geekmidas/services';\nimport {\n\tcontext,\n\tpropagation,\n\tSpanKind,\n\tSpanStatusCode,\n\ttrace,\n} from '@opentelemetry/api';\n\n/**\n * The trace context a Lambda record carries: an SQS record's message\n * attributes, an SNS record's, or those of the SNS envelope an SQS\n * subscription delivers in its body.\n */\nexport function recordCarrier(record: unknown): TraceCarrier | undefined {\n\tconst r = record as {\n\t\tmessageAttributes?: Record<string, unknown>;\n\t\tbody?: string;\n\t\tSns?: { MessageAttributes?: Record<string, unknown> };\n\t};\n\tif (r?.Sns) return carrierFromAttributes(r.Sns.MessageAttributes);\n\n\tconst own = carrierFromAttributes(r?.messageAttributes);\n\tif (own || typeof r?.body !== 'string') return own;\n\ttry {\n\t\tconst body = JSON.parse(r.body);\n\t\treturn body?.Type === 'Notification'\n\t\t\t? carrierFromAttributes(body.MessageAttributes)\n\t\t\t: undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * `client`, with a span around each of its methods: `<api>.<method>`, carrying\n * the API's name. An outbound `fetch` the method makes is traced already, and\n * becomes this span's child, so the name is on the trace without anything\n * knowing which URL belongs to which API.\n *\n * Only the client's own methods: what they return is the client's business.\n * Methods are called on the client itself, never on the proxy, so private\n * fields keep working.\n */\nexport function traceClient<T>(\n\tapi: string,\n\tclient: T,\n\tattributes: Record<string, string> = {},\n): T {\n\tif (!client || (typeof client !== 'object' && typeof client !== 'function')) {\n\t\treturn client;\n\t}\n\tconst wrapped = new Map<PropertyKey, unknown>();\n\treturn new Proxy(client as object, {\n\t\tget(target, property, receiver) {\n\t\t\tconst value = Reflect.get(target, property, receiver);\n\t\t\tif (typeof value !== 'function' || typeof property === 'symbol') {\n\t\t\t\treturn value;\n\t\t\t}\n\t\t\tif (property === 'constructor' || property === 'then') return value;\n\n\t\t\tconst cached = wrapped.get(property);\n\t\t\tif (cached && (cached as { original?: unknown }).original === value) {\n\t\t\t\treturn cached;\n\t\t\t}\n\t\t\tconst traced = Object.assign(\n\t\t\t\t(...args: unknown[]) =>\n\t\t\t\t\tcallTraced(api, property, attributes, () =>\n\t\t\t\t\t\t(value as (...a: unknown[]) => unknown).apply(target, args),\n\t\t\t\t\t),\n\t\t\t\t{ original: value },\n\t\t\t);\n\t\t\twrapped.set(property, traced);\n\t\t\treturn traced;\n\t\t},\n\t}) as T;\n}\n\nfunction callTraced(\n\tapi: string,\n\tmethod: string,\n\tattributes: Record<string, string>,\n\tcall: () => unknown,\n): unknown {\n\treturn trace.getTracer('@geekmidas/constructs').startActiveSpan(\n\t\t`${api}.${method}`,\n\t\t{\n\t\t\tkind: SpanKind.INTERNAL,\n\t\t\tattributes: {\n\t\t\t\t'gkm.external_api.name': api,\n\t\t\t\t'gkm.external_api.method': method,\n\t\t\t\t...attributes,\n\t\t\t},\n\t\t},\n\t\t(span) => {\n\t\t\tconst fail = (error: unknown) => {\n\t\t\t\tif (error instanceof Error) span.recordException(error);\n\t\t\t\tspan.setStatus({ code: SpanStatusCode.ERROR });\n\t\t\t\tspan.end();\n\t\t\t};\n\t\t\tlet result: unknown;\n\t\t\ttry {\n\t\t\t\tresult = call();\n\t\t\t} catch (error) {\n\t\t\t\tfail(error);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\t// Only a native promise is waited on, and the caller gets it back as\n\t\t\t// it was: a lazy thenable runs on `then`, and a promise subclass has\n\t\t\t// methods a chained promise would not.\n\t\t\tif (result instanceof Promise) {\n\t\t\t\tresult.then(\n\t\t\t\t\t() => span.end(),\n\t\t\t\t\t(error) => fail(error),\n\t\t\t\t);\n\t\t\t\treturn result;\n\t\t\t}\n\t\t\tspan.end();\n\t\t\treturn result;\n\t\t},\n\t);\n}\n\n/**\n * Where an instrumentation of `fetch` hears of each request — undici's own\n * diagnostics channel, which OpenTelemetry's undici instrumentation (and every\n * APM built on it) subscribes to.\n */\nconst FETCH_REQUESTS = channel('undici:request:create');\n\n/**\n * The active trace context, written into `headers` for a call this process\n * makes to one of its own services — the auth server's session check — so the\n * callee's span joins the caller's trace.\n *\n * Through the global propagator, so it is a no-op without one. And not at all\n * when a `fetch` instrumentation is listening: that opens the request's own\n * CLIENT span and writes its `traceparent` by appending a header, so a second\n * one here would reach the callee as two values joined — `a, b` — which no\n * propagator reads, and the trace would break instead of joining.\n */\nexport function injectTraceContext(headers: Headers): void {\n\tif (FETCH_REQUESTS.hasSubscribers) return;\n\tpropagation.inject(context.active(), headers, {\n\t\tset: (carrier, key, value) => carrier.set(key, value),\n\t});\n}\n\n/**\n * Say who the current request is for: on its context — so its logger and\n * every service read it — and on its span, as OpenTelemetry's `enduser.id`\n * and `session.id`, so the request's trace can be found by who made it.\n *\n * The span is the active one: the request's own, since a session is verified\n * before the handler opens any of its own. With no provider registered there\n * is none, and only the context is told.\n */\nexport function identifyUser(user: RequestUser): void {\n\tidentifyRequest(user);\n\ttrace.getActiveSpan()?.setAttributes({\n\t\t'enduser.id': user.id,\n\t\t...(user.sessionId ? { 'session.id': user.sessionId } : {}),\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,cAAc,QAA2C;CACxE,MAAM,IAAI;CAKV,IAAI,GAAG,KAAK,OAAO,sBAAsB,EAAE,IAAI,iBAAiB;CAEhE,MAAM,MAAM,sBAAsB,GAAG,iBAAiB;CACtD,IAAI,OAAO,OAAO,GAAG,SAAS,UAAU,OAAO;CAC/C,IAAI;EACH,MAAM,OAAO,KAAK,MAAM,EAAE,IAAI;EAC9B,OAAO,MAAM,SAAS,iBACnB,sBAAsB,KAAK,iBAAiB,IAC5C,KAAA;CACJ,QAAQ;EACP;CACD;AACD;;;;;;;;;;;AAYA,SAAgB,YACf,KACA,QACA,aAAqC,CAAC,GAClC;CACJ,IAAI,CAAC,UAAW,OAAO,WAAW,YAAY,OAAO,WAAW,YAC/D,OAAO;CAER,MAAM,0BAAU,IAAI,IAA0B;CAC9C,OAAO,IAAI,MAAM,QAAkB,EAClC,IAAI,QAAQ,UAAU,UAAU;EAC/B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;EACpD,IAAI,OAAO,UAAU,cAAc,OAAO,aAAa,UACtD,OAAO;EAER,IAAI,aAAa,iBAAiB,aAAa,QAAQ,OAAO;EAE9D,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,UAAW,OAAkC,aAAa,OAC7D,OAAO;EAER,MAAM,SAAS,OAAO,QACpB,GAAG,SACH,WAAW,KAAK,UAAU,kBACxB,MAAuC,MAAM,QAAQ,IAAI,CAC3D,GACD,EAAE,UAAU,MAAM,CACnB;EACA,QAAQ,IAAI,UAAU,MAAM;EAC5B,OAAO;CACR,EACD,CAAC;AACF;AAEA,SAAS,WACR,KACA,QACA,YACA,MACU;CACV,OAAO,MAAM,UAAU,uBAAuB,CAAC,CAAC,gBAC/C,GAAG,IAAI,GAAG,UACV;EACC,MAAM,SAAS;EACf,YAAY;GACX,yBAAyB;GACzB,2BAA2B;GAC3B,GAAG;EACJ;CACD,IACC,SAAS;EACT,MAAM,QAAQ,UAAmB;GAChC,IAAI,iBAAiB,OAAO,KAAK,gBAAgB,KAAK;GACtD,KAAK,UAAU,EAAE,MAAM,eAAe,MAAM,CAAC;GAC7C,KAAK,IAAI;EACV;EACA,IAAI;EACJ,IAAI;GACH,SAAS,KAAK;EACf,SAAS,OAAO;GACf,KAAK,KAAK;GACV,MAAM;EACP;EAIA,IAAI,kBAAkB,SAAS;GAC9B,OAAO,WACA,KAAK,IAAI,IACd,UAAU,KAAK,KAAK,CACtB;GACA,OAAO;EACR;EACA,KAAK,IAAI;EACT,OAAO;CACR,CACD;AACD;;;;;;AAOA,MAAM,iBAAiB,QAAQ,uBAAuB;;;;;;;;;;;;AAatD,SAAgB,mBAAmB,SAAwB;CAC1D,IAAI,eAAe,gBAAgB;CACnC,YAAY,OAAO,QAAQ,OAAO,GAAG,SAAS,EAC7C,MAAM,SAAS,KAAK,UAAU,QAAQ,IAAI,KAAK,KAAK,EACrD,CAAC;AACF;;;;;;;;;;AAWA,SAAgB,aAAa,MAAyB;CACrD,gBAAgB,IAAI;CACpB,MAAM,cAAc,CAAC,EAAE,cAAc;EACpC,cAAc,KAAK;EACnB,GAAI,KAAK,YAAY,EAAE,cAAc,KAAK,UAAU,IAAI,CAAC;CAC1D,CAAC;AACF"}

package/dist/tracing-C0ooU0V2.cjs

@@ -0,0 +1,150 @@
+let node_diagnostics_channel = require("node:diagnostics_channel");
+let _geekmidas_events = require("@geekmidas/events");
+let _geekmidas_services = require("@geekmidas/services");
+let _opentelemetry_api = require("@opentelemetry/api");
+//#region src/tracing.ts
+/**
+* Where the constructs meet OpenTelemetry, beyond the spans `@geekmidas/events`
+* starts for the brokers: the trace context in a Lambda's records, the spans
+* around an `ExternalApi`'s client, and the context a call to a sibling
+* service carries.
+*
+* Everything goes through the global API, so without a registered provider
+* none of it records anything.
+*
+* @module
+*/
+/**
+* The trace context a Lambda record carries: an SQS record's message
+* attributes, an SNS record's, or those of the SNS envelope an SQS
+* subscription delivers in its body.
+*/
+function recordCarrier(record) {
+	const r = record;
+	if (r?.Sns) return (0, _geekmidas_events.carrierFromAttributes)(r.Sns.MessageAttributes);
+	const own = (0, _geekmidas_events.carrierFromAttributes)(r?.messageAttributes);
+	if (own || typeof r?.body !== "string") return own;
+	try {
+		const body = JSON.parse(r.body);
+		return body?.Type === "Notification" ? (0, _geekmidas_events.carrierFromAttributes)(body.MessageAttributes) : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* `client`, with a span around each of its methods: `<api>.<method>`, carrying
+* the API's name. An outbound `fetch` the method makes is traced already, and
+* becomes this span's child, so the name is on the trace without anything
+* knowing which URL belongs to which API.
+*
+* Only the client's own methods: what they return is the client's business.
+* Methods are called on the client itself, never on the proxy, so private
+* fields keep working.
+*/
+function traceClient(api, client, attributes = {}) {
+	if (!client || typeof client !== "object" && typeof client !== "function") return client;
+	const wrapped = /* @__PURE__ */ new Map();
+	return new Proxy(client, { get(target, property, receiver) {
+		const value = Reflect.get(target, property, receiver);
+		if (typeof value !== "function" || typeof property === "symbol") return value;
+		if (property === "constructor" || property === "then") return value;
+		const cached = wrapped.get(property);
+		if (cached && cached.original === value) return cached;
+		const traced = Object.assign((...args) => callTraced(api, property, attributes, () => value.apply(target, args)), { original: value });
+		wrapped.set(property, traced);
+		return traced;
+	} });
+}
+function callTraced(api, method, attributes, call) {
+	return _opentelemetry_api.trace.getTracer("@geekmidas/constructs").startActiveSpan(`${api}.${method}`, {
+		kind: _opentelemetry_api.SpanKind.INTERNAL,
+		attributes: {
+			"gkm.external_api.name": api,
+			"gkm.external_api.method": method,
+			...attributes
+		}
+	}, (span) => {
+		const fail = (error) => {
+			if (error instanceof Error) span.recordException(error);
+			span.setStatus({ code: _opentelemetry_api.SpanStatusCode.ERROR });
+			span.end();
+		};
+		let result;
+		try {
+			result = call();
+		} catch (error) {
+			fail(error);
+			throw error;
+		}
+		if (result instanceof Promise) {
+			result.then(() => span.end(), (error) => fail(error));
+			return result;
+		}
+		span.end();
+		return result;
+	});
+}
+/**
+* Where an instrumentation of `fetch` hears of each request — undici's own
+* diagnostics channel, which OpenTelemetry's undici instrumentation (and every
+* APM built on it) subscribes to.
+*/
+const FETCH_REQUESTS = (0, node_diagnostics_channel.channel)("undici:request:create");
+/**
+* The active trace context, written into `headers` for a call this process
+* makes to one of its own services — the auth server's session check — so the
+* callee's span joins the caller's trace.
+*
+* Through the global propagator, so it is a no-op without one. And not at all
+* when a `fetch` instrumentation is listening: that opens the request's own
+* CLIENT span and writes its `traceparent` by appending a header, so a second
+* one here would reach the callee as two values joined — `a, b` — which no
+* propagator reads, and the trace would break instead of joining.
+*/
+function injectTraceContext(headers) {
+	if (FETCH_REQUESTS.hasSubscribers) return;
+	_opentelemetry_api.propagation.inject(_opentelemetry_api.context.active(), headers, { set: (carrier, key, value) => carrier.set(key, value) });
+}
+/**
+* Say who the current request is for: on its context — so its logger and
+* every service read it — and on its span, as OpenTelemetry's `enduser.id`
+* and `session.id`, so the request's trace can be found by who made it.
+*
+* The span is the active one: the request's own, since a session is verified
+* before the handler opens any of its own. With no provider registered there
+* is none, and only the context is told.
+*/
+function identifyUser(user) {
+	(0, _geekmidas_services.identifyRequest)(user);
+	_opentelemetry_api.trace.getActiveSpan()?.setAttributes({
+		"enduser.id": user.id,
+		...user.sessionId ? { "session.id": user.sessionId } : {}
+	});
+}
+//#endregion
+Object.defineProperty(exports, "identifyUser", {
+	enumerable: true,
+	get: function() {
+		return identifyUser;
+	}
+});
+Object.defineProperty(exports, "injectTraceContext", {
+	enumerable: true,
+	get: function() {
+		return injectTraceContext;
+	}
+});
+Object.defineProperty(exports, "recordCarrier", {
+	enumerable: true,
+	get: function() {
+		return recordCarrier;
+	}
+});
+Object.defineProperty(exports, "traceClient", {
+	enumerable: true,
+	get: function() {
+		return traceClient;
+	}
+});
+
+//# sourceMappingURL=tracing-C0ooU0V2.cjs.map

package/dist/tracing-C0ooU0V2.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing-C0ooU0V2.cjs","names":["carrierFromAttributes","trace","SpanKind","SpanStatusCode","channel","context"],"sources":["../src/tracing.ts"],"sourcesContent":["/**\n * Where the constructs meet OpenTelemetry, beyond the spans `@geekmidas/events`\n * starts for the brokers: the trace context in a Lambda's records, the spans\n * around an `ExternalApi`'s client, and the context a call to a sibling\n * service carries.\n *\n * Everything goes through the global API, so without a registered provider\n * none of it records anything.\n *\n * @module\n */\nimport { channel } from 'node:diagnostics_channel';\nimport { carrierFromAttributes, type TraceCarrier } from '@geekmidas/events';\nimport { identifyRequest, type RequestUser } from '@geekmidas/services';\nimport {\n\tcontext,\n\tpropagation,\n\tSpanKind,\n\tSpanStatusCode,\n\ttrace,\n} from '@opentelemetry/api';\n\n/**\n * The trace context a Lambda record carries: an SQS record's message\n * attributes, an SNS record's, or those of the SNS envelope an SQS\n * subscription delivers in its body.\n */\nexport function recordCarrier(record: unknown): TraceCarrier | undefined {\n\tconst r = record as {\n\t\tmessageAttributes?: Record<string, unknown>;\n\t\tbody?: string;\n\t\tSns?: { MessageAttributes?: Record<string, unknown> };\n\t};\n\tif (r?.Sns) return carrierFromAttributes(r.Sns.MessageAttributes);\n\n\tconst own = carrierFromAttributes(r?.messageAttributes);\n\tif (own || typeof r?.body !== 'string') return own;\n\ttry {\n\t\tconst body = JSON.parse(r.body);\n\t\treturn body?.Type === 'Notification'\n\t\t\t? carrierFromAttributes(body.MessageAttributes)\n\t\t\t: undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * `client`, with a span around each of its methods: `<api>.<method>`, carrying\n * the API's name. An outbound `fetch` the method makes is traced already, and\n * becomes this span's child, so the name is on the trace without anything\n * knowing which URL belongs to which API.\n *\n * Only the client's own methods: what they return is the client's business.\n * Methods are called on the client itself, never on the proxy, so private\n * fields keep working.\n */\nexport function traceClient<T>(\n\tapi: string,\n\tclient: T,\n\tattributes: Record<string, string> = {},\n): T {\n\tif (!client || (typeof client !== 'object' && typeof client !== 'function')) {\n\t\treturn client;\n\t}\n\tconst wrapped = new Map<PropertyKey, unknown>();\n\treturn new Proxy(client as object, {\n\t\tget(target, property, receiver) {\n\t\t\tconst value = Reflect.get(target, property, receiver);\n\t\t\tif (typeof value !== 'function' || typeof property === 'symbol') {\n\t\t\t\treturn value;\n\t\t\t}\n\t\t\tif (property === 'constructor' || property === 'then') return value;\n\n\t\t\tconst cached = wrapped.get(property);\n\t\t\tif (cached && (cached as { original?: unknown }).original === value) {\n\t\t\t\treturn cached;\n\t\t\t}\n\t\t\tconst traced = Object.assign(\n\t\t\t\t(...args: unknown[]) =>\n\t\t\t\t\tcallTraced(api, property, attributes, () =>\n\t\t\t\t\t\t(value as (...a: unknown[]) => unknown).apply(target, args),\n\t\t\t\t\t),\n\t\t\t\t{ original: value },\n\t\t\t);\n\t\t\twrapped.set(property, traced);\n\t\t\treturn traced;\n\t\t},\n\t}) as T;\n}\n\nfunction callTraced(\n\tapi: string,\n\tmethod: string,\n\tattributes: Record<string, string>,\n\tcall: () => unknown,\n): unknown {\n\treturn trace.getTracer('@geekmidas/constructs').startActiveSpan(\n\t\t`${api}.${method}`,\n\t\t{\n\t\t\tkind: SpanKind.INTERNAL,\n\t\t\tattributes: {\n\t\t\t\t'gkm.external_api.name': api,\n\t\t\t\t'gkm.external_api.method': method,\n\t\t\t\t...attributes,\n\t\t\t},\n\t\t},\n\t\t(span) => {\n\t\t\tconst fail = (error: unknown) => {\n\t\t\t\tif (error instanceof Error) span.recordException(error);\n\t\t\t\tspan.setStatus({ code: SpanStatusCode.ERROR });\n\t\t\t\tspan.end();\n\t\t\t};\n\t\t\tlet result: unknown;\n\t\t\ttry {\n\t\t\t\tresult = call();\n\t\t\t} catch (error) {\n\t\t\t\tfail(error);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\t// Only a native promise is waited on, and the caller gets it back as\n\t\t\t// it was: a lazy thenable runs on `then`, and a promise subclass has\n\t\t\t// methods a chained promise would not.\n\t\t\tif (result instanceof Promise) {\n\t\t\t\tresult.then(\n\t\t\t\t\t() => span.end(),\n\t\t\t\t\t(error) => fail(error),\n\t\t\t\t);\n\t\t\t\treturn result;\n\t\t\t}\n\t\t\tspan.end();\n\t\t\treturn result;\n\t\t},\n\t);\n}\n\n/**\n * Where an instrumentation of `fetch` hears of each request — undici's own\n * diagnostics channel, which OpenTelemetry's undici instrumentation (and every\n * APM built on it) subscribes to.\n */\nconst FETCH_REQUESTS = channel('undici:request:create');\n\n/**\n * The active trace context, written into `headers` for a call this process\n * makes to one of its own services — the auth server's session check — so the\n * callee's span joins the caller's trace.\n *\n * Through the global propagator, so it is a no-op without one. And not at all\n * when a `fetch` instrumentation is listening: that opens the request's own\n * CLIENT span and writes its `traceparent` by appending a header, so a second\n * one here would reach the callee as two values joined — `a, b` — which no\n * propagator reads, and the trace would break instead of joining.\n */\nexport function injectTraceContext(headers: Headers): void {\n\tif (FETCH_REQUESTS.hasSubscribers) return;\n\tpropagation.inject(context.active(), headers, {\n\t\tset: (carrier, key, value) => carrier.set(key, value),\n\t});\n}\n\n/**\n * Say who the current request is for: on its context — so its logger and\n * every service read it — and on its span, as OpenTelemetry's `enduser.id`\n * and `session.id`, so the request's trace can be found by who made it.\n *\n * The span is the active one: the request's own, since a session is verified\n * before the handler opens any of its own. With no provider registered there\n * is none, and only the context is told.\n */\nexport function identifyUser(user: RequestUser): void {\n\tidentifyRequest(user);\n\ttrace.getActiveSpan()?.setAttributes({\n\t\t'enduser.id': user.id,\n\t\t...(user.sessionId ? { 'session.id': user.sessionId } : {}),\n\t});\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AA2BA,SAAgB,cAAc,QAA2C;CACxE,MAAM,IAAI;CAKV,IAAI,GAAG,KAAK,QAAA,GAAOA,kBAAAA,sBAAAA,CAAsB,EAAE,IAAI,iBAAiB;CAEhE,MAAM,OAAA,GAAMA,kBAAAA,sBAAAA,CAAsB,GAAG,iBAAiB;CACtD,IAAI,OAAO,OAAO,GAAG,SAAS,UAAU,OAAO;CAC/C,IAAI;EACH,MAAM,OAAO,KAAK,MAAM,EAAE,IAAI;EAC9B,OAAO,MAAM,SAAS,kBAAA,GACnBA,kBAAAA,sBAAAA,CAAsB,KAAK,iBAAiB,IAC5C,KAAA;CACJ,QAAQ;EACP;CACD;AACD;;;;;;;;;;;AAYA,SAAgB,YACf,KACA,QACA,aAAqC,CAAC,GAClC;CACJ,IAAI,CAAC,UAAW,OAAO,WAAW,YAAY,OAAO,WAAW,YAC/D,OAAO;CAER,MAAM,0BAAU,IAAI,IAA0B;CAC9C,OAAO,IAAI,MAAM,QAAkB,EAClC,IAAI,QAAQ,UAAU,UAAU;EAC/B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU,QAAQ;EACpD,IAAI,OAAO,UAAU,cAAc,OAAO,aAAa,UACtD,OAAO;EAER,IAAI,aAAa,iBAAiB,aAAa,QAAQ,OAAO;EAE9D,MAAM,SAAS,QAAQ,IAAI,QAAQ;EACnC,IAAI,UAAW,OAAkC,aAAa,OAC7D,OAAO;EAER,MAAM,SAAS,OAAO,QACpB,GAAG,SACH,WAAW,KAAK,UAAU,kBACxB,MAAuC,MAAM,QAAQ,IAAI,CAC3D,GACD,EAAE,UAAU,MAAM,CACnB;EACA,QAAQ,IAAI,UAAU,MAAM;EAC5B,OAAO;CACR,EACD,CAAC;AACF;AAEA,SAAS,WACR,KACA,QACA,YACA,MACU;CACV,OAAOC,mBAAAA,MAAM,UAAU,uBAAuB,CAAC,CAAC,gBAC/C,GAAG,IAAI,GAAG,UACV;EACC,MAAMC,mBAAAA,SAAS;EACf,YAAY;GACX,yBAAyB;GACzB,2BAA2B;GAC3B,GAAG;EACJ;CACD,IACC,SAAS;EACT,MAAM,QAAQ,UAAmB;GAChC,IAAI,iBAAiB,OAAO,KAAK,gBAAgB,KAAK;GACtD,KAAK,UAAU,EAAE,MAAMC,mBAAAA,eAAe,MAAM,CAAC;GAC7C,KAAK,IAAI;EACV;EACA,IAAI;EACJ,IAAI;GACH,SAAS,KAAK;EACf,SAAS,OAAO;GACf,KAAK,KAAK;GACV,MAAM;EACP;EAIA,IAAI,kBAAkB,SAAS;GAC9B,OAAO,WACA,KAAK,IAAI,IACd,UAAU,KAAK,KAAK,CACtB;GACA,OAAO;EACR;EACA,KAAK,IAAI;EACT,OAAO;CACR,CACD;AACD;;;;;;AAOA,MAAM,kBAAA,GAAiBC,yBAAAA,QAAAA,CAAQ,uBAAuB;;;;;;;;;;;;AAatD,SAAgB,mBAAmB,SAAwB;CAC1D,IAAI,eAAe,gBAAgB;CACnC,mBAAA,YAAY,OAAOC,mBAAAA,QAAQ,OAAO,GAAG,SAAS,EAC7C,MAAM,SAAS,KAAK,UAAU,QAAQ,IAAI,KAAK,KAAK,EACrD,CAAC;AACF;;;;;;;;;;AAWA,SAAgB,aAAa,MAAyB;CACrD,CAAA,GAAA,oBAAA,gBAAA,CAAgB,IAAI;CACpB,mBAAA,MAAM,cAAc,CAAC,EAAE,cAAc;EACpC,cAAc,KAAK;EACnB,GAAI,KAAK,YAAY,EAAE,cAAc,KAAK,UAAU,IAAI,CAAC;CAC1D,CAAC;AACF"}

package/dist/{types-BlAkSuGI.d.cts → types-DMuSQeLL.d.cts}

@@ -1,9 +1,7 @@
 //#region src/types.d.ts
-type RemoveUndefined<T> = { [K in keyof T as T[K] extends undefined ? never : K]: T[K] };
+type RemoveUndefined<T> = { [K in keyof T as T[K] extends undefined ? never : K]: T[K]; };
 type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS';
 type LowerHttpMethod<T extends HttpMethod> = Lowercase<T>;
-//# sourceMappingURL=types.d.ts.map
-
 //#endregion
-export { HttpMethod, LowerHttpMethod, RemoveUndefined };
-//# sourceMappingURL=types-BlAkSuGI.d.cts.map
+export { LowerHttpMethod as n, RemoveUndefined as r, HttpMethod as t };
+//# sourceMappingURL=types-DMuSQeLL.d.cts.map

package/dist/types-DMuSQeLL.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DMuSQeLL.d.cts","names":[],"sources":["../src/types.ts"],"mappings":";KAAY,gBAAgB,QAC1B,WAAW,KAAK,EAAE,+BAA+B,IAAI,EAAE;KAG7C;KAQA,gBAAgB,UAAU,cAAc,UAAU"}

package/dist/{types-aKksMEWL.d.mts → types-DMuSQeLL.d.mts}

@@ -1,9 +1,7 @@
 //#region src/types.d.ts
-type RemoveUndefined<T> = { [K in keyof T as T[K] extends undefined ? never : K]: T[K] };
+type RemoveUndefined<T> = { [K in keyof T as T[K] extends undefined ? never : K]: T[K]; };
 type HttpMethod = 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'OPTIONS';
 type LowerHttpMethod<T extends HttpMethod> = Lowercase<T>;
-//# sourceMappingURL=types.d.ts.map
-
 //#endregion
-export { HttpMethod, LowerHttpMethod, RemoveUndefined };
-//# sourceMappingURL=types-aKksMEWL.d.mts.map
+export { LowerHttpMethod as n, RemoveUndefined as r, HttpMethod as t };
+//# sourceMappingURL=types-DMuSQeLL.d.mts.map

package/dist/types-DMuSQeLL.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types-DMuSQeLL.d.mts","names":[],"sources":["../src/types.ts"],"mappings":";KAAY,gBAAgB,QAC1B,WAAW,KAAK,EAAE,+BAA+B,IAAI,EAAE;KAG7C;KAQA,gBAAgB,UAAU,cAAc,UAAU"}

package/dist/types.d.cts

@@ -1,2 +1,2 @@
-import { HttpMethod, LowerHttpMethod, RemoveUndefined } from "./types-BlAkSuGI.cjs";
+import { n as LowerHttpMethod, r as RemoveUndefined, t as HttpMethod } from "./types-DMuSQeLL.cjs";
 export { HttpMethod, LowerHttpMethod, RemoveUndefined };

package/dist/types.d.mts

@@ -1,2 +1,2 @@
-import { HttpMethod, LowerHttpMethod, RemoveUndefined } from "./types-aKksMEWL.mjs";
+import { n as LowerHttpMethod, r as RemoveUndefined, t as HttpMethod } from "./types-DMuSQeLL.mjs";
 export { HttpMethod, LowerHttpMethod, RemoveUndefined };

package/dist/types.mjs

@@ -0,0 +1 @@
+export {};

package/dist/worker.cjs

@@ -1,16 +1,16 @@
-const require_chunk = require('./chunk-DWy1uDak.cjs');
-const require_construct_interface = require('./construct-interface-BfjcOD_E.cjs');
-require('./Construct-CyS3RpTL.cjs');
-const require_functions = require('./functions-i_la-N5r.cjs');
-require('./clone-Dy0cR2SZ.cjs');
-const require_surfaceEnv = require('./surfaceEnv-BFXEms2f.cjs');
-const require_CronBuilder = require('./CronBuilder-Da0C0edR.cjs');
-const require_SubscriberBuilder = require('./SubscriberBuilder-4OPehf2R.cjs');
-const __geekmidas_manifest = require_chunk.__toESM(require("@geekmidas/manifest"));
-const __geekmidas_logger_console = require_chunk.__toESM(require("@geekmidas/logger/console"));
-
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_construct_interface = require("./construct-interface.cjs");
+const require_functions = require("./functions-D7O5SGVc.cjs");
+const require_surfaceEnv = require("./surfaceEnv-CNimK76p.cjs");
+const require_CronBuilder = require("./CronBuilder-BXTG10u5.cjs");
+const require_QueueBuilder = require("./QueueBuilder-DdU2klPu.cjs");
+const require_SubscriberBuilder = require("./SubscriberBuilder-M2EAgQhC.cjs");
+let _geekmidas_manifest = require("@geekmidas/manifest");
+let _geekmidas_logger_console = require("@geekmidas/logger/console");
 //#region src/worker.ts
 var Worker = class Worker {
+	config;
+	dependencies;
 	id;
 	/** Always defined — the worker's own, or the console logger. */
 	logger;
@@ -18,15 +18,16 @@ var Worker = class Worker {
 	envParser;
 	/**
 	* Where this worker's schedules live, when it has crons and a server runs
-	* them. `undefined` until `.database(…)` says.
+	* them — and the database everything built from it receives as `db`.
+	* `undefined` until `.database(…)` says.
 	*/
 	scheduleStore;
 	constructor(id, config = {}, dependencies = [], scheduleStore) {
 		this.config = config;
 		this.dependencies = dependencies;
-		const canonical = (0, __geekmidas_manifest.canonicalId)(id);
+		const canonical = (0, _geekmidas_manifest.canonicalId)(id);
 		this.id = canonical;
-		this.logger = config.logger ?? __geekmidas_logger_console.DEFAULT_LOGGER;
+		this.logger = config.logger ?? _geekmidas_logger_console.DEFAULT_LOGGER;
 		this.envParser = require_surfaceEnv.envParserFor(config.envParser ? {
 			id: canonical,
 			envParser: config.envParser
@@ -34,7 +35,10 @@ var Worker = class Worker {
 		this.scheduleStore = scheduleStore;
 	}
 	/**
-	* The database this worker keeps its schedules in.
+	* The database this worker keeps its schedules in, and the one everything
+	* built from it — crons, queues, subscribers, functions — receives as `db`.
+	* One of them that works against another database names it with its own
+	* `.database(other)`, which replaces this one for that runnable alone.
 	*
 	* Only a server target uses it. On AWS a cron is an EventBridge rule
 	* invoking a Lambda and nothing here is consulted — but a server has nothing
@@ -51,6 +55,10 @@ var Worker = class Worker {
 	* @example
 	* ```ts
 	* export const jobs = new Worker('Jobs', { logger }).database(database);
+	*
+	* export const sweep = jobs
+	*   .cron('rate(1 hour)')
+	*   .handle(async ({ db }) => db.deleteFrom('sessions').execute());
 	* ```
 	*/
 	database(source) {
@@ -65,12 +73,31 @@ var Worker = class Worker {
 		return this.own(new require_CronBuilder.CronBuilder().logger(this.logger)).schedule(schedule);
 	}
 	/**
+	* A queue and its one consumer, run by this worker.
+	*
+	* One construct, because a queue has exactly one consumer: nothing else can
+	* attach a second, or forget to attach the first. Producers send to it by
+	* depending on it — `.dependsOn([emails])` makes `services.emails` the
+	* publisher.
+	*
+	* @example
+	* ```ts
+	* export const emails = worker
+	*   .queue('Emails')
+	*   .message(z.object({ userId: z.uuid(), template: z.string() }))
+	*   .handle(async ({ messages, services }) => { … });
+	* ```
+	*/
+	queue(name) {
+		return this.own(new require_QueueBuilder.QueueBuilder().logger(this.logger)).queue(name);
+	}
+	/**
 	* A runnable that consumes a topic.
 	*
 	* Binding is not publishing: a consumer is handed the topic's event types
-	* and no connection string it could publish with. Chain `.publishes(…)` when
-	* the handler emits follow-up events, which is the only reason it would need
-	* one.
+	* and no connection string it could publish with. A handler that emits
+	* follow-up events depends on the topic it emits to —
+	* `.dependsOn([orders])` — which is the only reason it would need one.
 	*
 	* @example `worker.topic(users).subscribe(['user.created']).handle(…)`
 	*/
@@ -78,17 +105,6 @@ var Worker = class Worker {
 		return this.own(new require_SubscriberBuilder.SubscriberBuilder().logger(this.logger)).topic(topic);
 	}
 	/**
-	* A runnable that consumes events typed from a publisher service.
-	*
-	* The older of the two ways to bind a subscriber, kept for a project whose
-	* events come from a hand-written publisher rather than a `Topic`
-	* construct. `topic()` is the one to reach for: it types the events the same
-	* way and hands the consumer no connection string it could publish with.
-	*/
-	publisher(service) {
-		return this.own(new require_SubscriberBuilder.SubscriberBuilder().logger(this.logger)).publisher(service);
-	}
-	/**
 	* Everything below builds a function — the runnable with no schedule and no
 	* topic, invoked by something else.
 	*
@@ -144,23 +160,32 @@ var Worker = class Worker {
 	}
 	/**
 	* Stamps this worker's id onto a builder, so everything built from it says
-	* which process runs it.
+	* which process runs it — and hands it the worker's database.
+	*
+	* The database goes through the builder's own `.database()` rather than
+	* being written into its fields, so the default is recorded exactly as an
+	* explicit one would be: the client the handler gets, and the edge the
+	* manifest reads. That is also what lets a later `.database(other)` replace
+	* it outright. The builder arrives already typed with this worker's
+	* database; this is the runtime half of that.
 	*/
 	own(builder) {
-		builder._owner = this.id;
-		builder._scheduleStore = this.scheduleStore;
-		return builder;
+		const owned = this.scheduleStore ? builder.database(this.scheduleStore) : builder;
+		owned._owner = this.id;
+		owned._scheduleStore = this.scheduleStore;
+		return owned;
 	}
 	declare() {
 		return [{
 			kind: "worker",
 			id: this.id,
 			...this.dependencies.length ? { dependencies: this.dependencies } : {},
+			...this.config.telemetry ? { telemetry: this.config.telemetry.id } : {},
 			provides: []
 		}];
 	}
 };
-
 //#endregion
 exports.Worker = Worker;
+
 //# sourceMappingURL=worker.cjs.map