@geekmidas/telescope 10.0.0-alpha.80 → 10.0.0-alpha.82

package/dist/instrumentation/index.cjs

@@ -2,9 +2,11 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_instrumentation_core = require("./core.cjs");
 const require_instrumentation_tracing = require("./tracing.cjs");
 const require_instrumentation_http = require("./http.cjs");
+const require_instrumentation_trust = require("./trust.cjs");
 const require_instrumentation_hono = require("./hono.cjs");
 const require_instrumentation_middleware = require("./middleware.cjs");
 const require_instrumentation_otel = require("./otel.cjs");
+const require_instrumentation_sampler = require("./sampler.cjs");
 const require_instrumentation_setup = require("./setup.cjs");
 exports.InvalidSampleRatio = require_instrumentation_setup.InvalidSampleRatio;
 exports.NoopSpanProcessor = require_instrumentation_core.NoopSpanProcessor;
@@ -28,9 +30,13 @@ exports.getSpanId = require_instrumentation_tracing.getSpanId;
 exports.getTraceContextFromHono = require_instrumentation_hono.getTraceContextFromHono;
 exports.getTraceId = require_instrumentation_tracing.getTraceId;
 exports.honoTelemetryMiddleware = require_instrumentation_hono.honoTelemetryMiddleware;
+exports.incomingTraceContext = require_instrumentation_http.incomingTraceContext;
 exports.injectTraceContext = require_instrumentation_http.injectTraceContext;
+exports.isInternalCaller = require_instrumentation_trust.isInternalCaller;
+exports.isPrivateAddress = require_instrumentation_trust.isPrivateAddress;
 exports.isTelemetryInitialized = require_instrumentation_core.isTelemetryInitialized;
 exports.isTracingEnabled = require_instrumentation_http.isTracingEnabled;
+exports.isTrustedOrigin = require_instrumentation_trust.isTrustedOrigin;
 exports.recordException = require_instrumentation_tracing.recordException;
 exports.setGlobalLogProcessor = require_instrumentation_core.setGlobalLogProcessor;
 exports.setGlobalSpanProcessor = require_instrumentation_core.setGlobalSpanProcessor;
@@ -39,6 +45,8 @@ exports.setupTelemetry = require_instrumentation_setup.setupTelemetry;
 exports.shutdownTelemetry = require_instrumentation_setup.shutdownTelemetry;
 exports.telemetryMiddleware = require_instrumentation_middleware.telemetryMiddleware;
 exports.toOtelAttributes = require_instrumentation_http.toOtelAttributes;
+exports.traceSampler = require_instrumentation_sampler.traceSampler;
+exports.traceSamplerFromEnv = require_instrumentation_sampler.traceSamplerFromEnv;
 exports.withChildSpan = require_instrumentation_http.withChildSpan;
 exports.withEventContext = require_instrumentation_middleware.withEventContext;
 exports.withHonoSpanContext = require_instrumentation_hono.withHonoSpanContext;

package/dist/instrumentation/index.d.cts

@@ -2,8 +2,10 @@ import { SpanProcessorOptions, SpanProcessorStrategy } from "../adapters/types.c
 import { NoopSpanProcessor, createSpanProcessor, enableTelemetryDebug, flushTelemetry, getRecommendedStrategy, isTelemetryInitialized, setGlobalLogProcessor, setGlobalSpanProcessor, withTelemetryFlush } from "./core.cjs";
 import { addSpanEvent, createSpan, getActiveSpan, getSpanId, getTraceId, recordException, setSpanAttributes, withSpan, withSpanSync } from "./tracing.cjs";
 import { HonoTelemetryMiddlewareOptions, getSpanFromContext, getTraceContextFromHono, honoTelemetryMiddleware, withHonoSpanContext } from "./hono.cjs";
-import { EndpointAttributes, HttpRequestAttributes, HttpResponseAttributes, HttpSpanAttributes, UserAttributes, createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.cjs";
+import { EndpointAttributes, HttpRequestAttributes, HttpResponseAttributes, HttpSpanAttributes, IncomingTraceContext, UserAttributes, createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, incomingTraceContext, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.cjs";
 import { TelemetryMiddlewareOptions, getContextFromEvent, getSpanFromEvent, telemetryMiddleware, withEventContext } from "./middleware.cjs";
 import { OTelTelemetry, OTelTelemetryOptions } from "./otel.cjs";
+import { traceSampler, traceSamplerFromEnv } from "./sampler.cjs";
 import { InvalidSampleRatio, TelemetryOptions, setupTelemetry, shutdownTelemetry } from "./setup.cjs";
-export { type EndpointAttributes, type HonoTelemetryMiddlewareOptions, type HttpRequestAttributes, type HttpResponseAttributes, type HttpSpanAttributes, InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, type OTelTelemetryOptions, type SpanProcessorOptions, type SpanProcessorStrategy, type TelemetryMiddlewareOptions, type TelemetryOptions, type UserAttributes, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, injectTraceContext, isTelemetryInitialized, isTracingEnabled, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };
+import { IncomingRequestFacts, isInternalCaller, isPrivateAddress, isTrustedOrigin } from "./trust.cjs";
+export { type EndpointAttributes, type HonoTelemetryMiddlewareOptions, type HttpRequestAttributes, type HttpResponseAttributes, type HttpSpanAttributes, type IncomingRequestFacts, type IncomingTraceContext, InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, type OTelTelemetryOptions, type SpanProcessorOptions, type SpanProcessorStrategy, type TelemetryMiddlewareOptions, type TelemetryOptions, type UserAttributes, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, incomingTraceContext, injectTraceContext, isInternalCaller, isPrivateAddress, isTelemetryInitialized, isTracingEnabled, isTrustedOrigin, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, traceSampler, traceSamplerFromEnv, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };

package/dist/instrumentation/index.d.mts

@@ -2,8 +2,10 @@ import { SpanProcessorOptions, SpanProcessorStrategy } from "../adapters/types.m
 import { NoopSpanProcessor, createSpanProcessor, enableTelemetryDebug, flushTelemetry, getRecommendedStrategy, isTelemetryInitialized, setGlobalLogProcessor, setGlobalSpanProcessor, withTelemetryFlush } from "./core.mjs";
 import { addSpanEvent, createSpan, getActiveSpan, getSpanId, getTraceId, recordException, setSpanAttributes, withSpan, withSpanSync } from "./tracing.mjs";
 import { HonoTelemetryMiddlewareOptions, getSpanFromContext, getTraceContextFromHono, honoTelemetryMiddleware, withHonoSpanContext } from "./hono.mjs";
-import { EndpointAttributes, HttpRequestAttributes, HttpResponseAttributes, HttpSpanAttributes, UserAttributes, createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.mjs";
+import { EndpointAttributes, HttpRequestAttributes, HttpResponseAttributes, HttpSpanAttributes, IncomingTraceContext, UserAttributes, createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, incomingTraceContext, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.mjs";
 import { TelemetryMiddlewareOptions, getContextFromEvent, getSpanFromEvent, telemetryMiddleware, withEventContext } from "./middleware.mjs";
 import { OTelTelemetry, OTelTelemetryOptions } from "./otel.mjs";
+import { traceSampler, traceSamplerFromEnv } from "./sampler.mjs";
 import { InvalidSampleRatio, TelemetryOptions, setupTelemetry, shutdownTelemetry } from "./setup.mjs";
-export { type EndpointAttributes, type HonoTelemetryMiddlewareOptions, type HttpRequestAttributes, type HttpResponseAttributes, type HttpSpanAttributes, InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, type OTelTelemetryOptions, type SpanProcessorOptions, type SpanProcessorStrategy, type TelemetryMiddlewareOptions, type TelemetryOptions, type UserAttributes, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, injectTraceContext, isTelemetryInitialized, isTracingEnabled, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };
+import { IncomingRequestFacts, isInternalCaller, isPrivateAddress, isTrustedOrigin } from "./trust.mjs";
+export { type EndpointAttributes, type HonoTelemetryMiddlewareOptions, type HttpRequestAttributes, type HttpResponseAttributes, type HttpSpanAttributes, type IncomingRequestFacts, type IncomingTraceContext, InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, type OTelTelemetryOptions, type SpanProcessorOptions, type SpanProcessorStrategy, type TelemetryMiddlewareOptions, type TelemetryOptions, type UserAttributes, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, incomingTraceContext, injectTraceContext, isInternalCaller, isPrivateAddress, isTelemetryInitialized, isTracingEnabled, isTrustedOrigin, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, traceSampler, traceSamplerFromEnv, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };

package/dist/instrumentation/index.mjs

@@ -1,8 +1,10 @@
 import { NoopSpanProcessor, createSpanProcessor, enableTelemetryDebug, flushTelemetry, getRecommendedStrategy, isTelemetryInitialized, setGlobalLogProcessor, setGlobalSpanProcessor, withTelemetryFlush } from "./core.mjs";
 import { addSpanEvent, createSpan, getActiveSpan, getSpanId, getTraceId, recordException, setSpanAttributes, withSpan, withSpanSync } from "./tracing.mjs";
-import { createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.mjs";
+import { createChildSpan, createHttpServerSpan, endHttpSpan, extractTraceContext, getConstructsTracer, incomingTraceContext, injectTraceContext, isTracingEnabled, toOtelAttributes, withChildSpan, withHttpSpan } from "./http.mjs";
+import { isInternalCaller, isPrivateAddress, isTrustedOrigin } from "./trust.mjs";
 import { getSpanFromContext, getTraceContextFromHono, honoTelemetryMiddleware, withHonoSpanContext } from "./hono.mjs";
 import { getContextFromEvent, getSpanFromEvent, telemetryMiddleware, withEventContext } from "./middleware.mjs";
 import { OTelTelemetry } from "./otel.mjs";
+import { traceSampler, traceSamplerFromEnv } from "./sampler.mjs";
 import { InvalidSampleRatio, setupTelemetry, shutdownTelemetry } from "./setup.mjs";
-export { InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, injectTraceContext, isTelemetryInitialized, isTracingEnabled, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };
+export { InvalidSampleRatio, NoopSpanProcessor, OTelTelemetry, addSpanEvent, createChildSpan, createHttpServerSpan, createSpan, createSpanProcessor, enableTelemetryDebug, endHttpSpan, extractTraceContext, flushTelemetry, getActiveSpan, getConstructsTracer, getContextFromEvent, getRecommendedStrategy, getSpanFromContext, getSpanFromEvent, getSpanId, getTraceContextFromHono, getTraceId, honoTelemetryMiddleware, incomingTraceContext, injectTraceContext, isInternalCaller, isPrivateAddress, isTelemetryInitialized, isTracingEnabled, isTrustedOrigin, recordException, setGlobalLogProcessor, setGlobalSpanProcessor, setSpanAttributes, setupTelemetry, shutdownTelemetry, telemetryMiddleware, toOtelAttributes, traceSampler, traceSamplerFromEnv, withChildSpan, withEventContext, withHonoSpanContext, withHttpSpan, withSpan, withSpanSync, withTelemetryFlush };

package/dist/instrumentation/middleware.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_instrumentation_http = require("./http.cjs");
+const require_instrumentation_trust = require("./trust.cjs");
 let _opentelemetry_api = require("@opentelemetry/api");
 //#region src/instrumentation/middleware.ts
 const SPAN_SYMBOL = Symbol("telemetry.span");
@@ -35,9 +36,10 @@ function telemetryMiddleware(options = {}) {
 			const event = request.event;
 			const lambdaContext = request.context;
 			const headers = normalizeHeaders(event.headers || {});
-			const parentContext = require_instrumentation_http.extractTraceContext(headers);
+			const trusted = require_instrumentation_trust.isTrustedOrigin(typeof headers.origin === "string" ? headers.origin : void 0, options.trustedOrigins) || Boolean(options.trustRequest?.(event));
+			const { parent: parentContext, links } = require_instrumentation_http.incomingTraceContext(headers, trusted);
 			const attrs = buildSpanAttributes(event, lambdaContext, options);
-			const span = require_instrumentation_http.createHttpServerSpan(attrs, parentContext);
+			const span = require_instrumentation_http.createHttpServerSpan(attrs, parentContext, links);
 			event[SPAN_SYMBOL] = span;
 			event[CONTEXT_SYMBOL] = _opentelemetry_api.trace.setSpan(parentContext, span);
 			span.setAttribute("faas.invocation_id", lambdaContext.awsRequestId);

package/dist/instrumentation/middleware.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.cjs","names":["extractTraceContext","createHttpServerSpan","trace","context"],"sources":["../../src/instrumentation/middleware.ts"],"sourcesContent":["/**\n * OpenTelemetry instrumentation middleware for @geekmidas/constructs\n *\n * This middleware automatically creates spans for HTTP requests,\n * extracts trace context from incoming headers, and records\n * request/response metadata as span attributes.\n */\nimport type { MiddlewareObj } from '@middy/core';\nimport { context, type Span, trace } from '@opentelemetry/api';\nimport type { Context as LambdaContext } from 'aws-lambda';\nimport {\n\tcreateHttpServerSpan,\n\tendHttpSpan,\n\textractTraceContext,\n\ttype HttpSpanAttributes,\n} from './http';\n\n/**\n * Options for the telemetry middleware\n */\nexport interface TelemetryMiddlewareOptions {\n\t/**\n\t * Whether to record request body as span attribute\n\t * @default false\n\t */\n\trecordBody?: boolean;\n\n\t/**\n\t * Whether to record response body as span attribute\n\t * @default false\n\t */\n\trecordResponseBody?: boolean;\n\n\t/**\n\t * Custom function to extract endpoint name from event\n\t */\n\tgetEndpointName?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract operation ID from event\n\t */\n\tgetOperationId?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract user ID from event\n\t */\n\tgetUserId?: (event: any) => string | undefined;\n\n\t/**\n\t * Whether to skip tracing for this request\n\t */\n\tshouldSkip?: (event: any) => boolean;\n}\n\n// Symbol for storing span on event\nconst SPAN_SYMBOL = Symbol('telemetry.span');\nconst CONTEXT_SYMBOL = Symbol('telemetry.context');\n\n/**\n * Get the current span from the Lambda event\n */\nexport function getSpanFromEvent(event: any): Span | undefined {\n\treturn event?.[SPAN_SYMBOL];\n}\n\n/**\n * Get the current trace context from the Lambda event\n */\nexport function getContextFromEvent(event: any): any {\n\treturn event?.[CONTEXT_SYMBOL];\n}\n\n/**\n * Create a telemetry middleware for Lambda handlers\n *\n * @example\n * ```typescript\n * import { telemetryMiddleware } from '@geekmidas/telescope/instrumentation';\n *\n * const adaptor = new AmazonApiGatewayV2Endpoint(endpoint, {\n *   telemetry: { middleware: telemetryMiddleware() },\n * });\n * ```\n */\nexport function telemetryMiddleware(\n\toptions: TelemetryMiddlewareOptions = {},\n): MiddlewareObj<any, any, Error, LambdaContext> {\n\treturn {\n\t\tbefore: async (request) => {\n\t\t\t// Skip if custom skip function returns true\n\t\t\tif (options.shouldSkip?.(request.event)) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst event = request.event;\n\t\t\tconst lambdaContext = request.context;\n\n\t\t\t// Extract trace context from headers\n\t\t\tconst headers = normalizeHeaders(event.headers || {});\n\t\t\tconst parentContext = extractTraceContext(headers);\n\n\t\t\t// Build span attributes from event\n\t\t\tconst attrs = buildSpanAttributes(event, lambdaContext, options);\n\n\t\t\t// Create the span\n\t\t\tconst span = createHttpServerSpan(attrs, parentContext);\n\n\t\t\t// Store span and context on event for access in handler\n\t\t\tevent[SPAN_SYMBOL] = span;\n\t\t\tevent[CONTEXT_SYMBOL] = trace.setSpan(parentContext, span);\n\n\t\t\t// Add Lambda-specific attributes\n\t\t\tspan.setAttribute('faas.invocation_id', lambdaContext.awsRequestId);\n\t\t\tspan.setAttribute('faas.name', lambdaContext.functionName);\n\n\t\t\tif (options.recordBody && event.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof event.body === 'string'\n\t\t\t\t\t\t? event.body\n\t\t\t\t\t\t: JSON.stringify(event.body);\n\t\t\t\t// Truncate large bodies\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.request.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\t\t},\n\n\t\tafter: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst response = request.response;\n\t\t\tconst statusCode =\n\t\t\t\ttypeof response?.statusCode === 'number' ? response.statusCode : 200;\n\n\t\t\tif (options.recordResponseBody && response?.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof response.body === 'string'\n\t\t\t\t\t\t? response.body\n\t\t\t\t\t\t: JSON.stringify(response.body);\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.response.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tendHttpSpan(span, { statusCode });\n\t\t},\n\n\t\tonError: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst error = request.error;\n\t\t\tconst response = request.response;\n\n\t\t\t// Determine status code from response or error\n\t\t\tlet statusCode = 500;\n\t\t\tif (response?.statusCode) {\n\t\t\t\tstatusCode = response.statusCode;\n\t\t\t} else if (error && 'statusCode' in error) {\n\t\t\t\tstatusCode = (error as any).statusCode;\n\t\t\t}\n\n\t\t\tendHttpSpan(\n\t\t\t\tspan,\n\t\t\t\t{ statusCode },\n\t\t\t\terror instanceof Error ? error : new Error(String(error)),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/**\n * Build span attributes from Lambda event\n */\nfunction buildSpanAttributes(\n\tevent: any,\n\tlambdaContext: LambdaContext,\n\toptions: TelemetryMiddlewareOptions,\n): HttpSpanAttributes {\n\t// Detect event type (API Gateway v1, v2, ALB, or direct invoke)\n\tconst isV2 =\n\t\t'requestContext' in event && 'http' in (event.requestContext || {});\n\tconst isV1 =\n\t\t'requestContext' in event &&\n\t\t'httpMethod' in event &&\n\t\t!('http' in (event.requestContext || {}));\n\n\tlet method = 'INVOKE';\n\tlet path = '/';\n\tlet route: string | undefined;\n\tlet host: string | undefined;\n\tlet scheme: 'http' | 'https' | undefined;\n\tlet userAgent: string | undefined;\n\tlet clientIp: string | undefined;\n\tlet requestId: string | undefined;\n\n\tif (isV2) {\n\t\t// API Gateway v2 (HTTP API)\n\t\tconst http = event.requestContext.http;\n\t\tmethod = http.method;\n\t\tpath = event.rawPath || http.path;\n\t\troute = event.routeKey?.replace(/^[A-Z]+\\s+/, ''); // Remove HTTP method prefix\n\t\thost = event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = http.userAgent;\n\t\tclientIp = http.sourceIp;\n\t\trequestId = event.requestContext.requestId;\n\t} else if (isV1) {\n\t\t// API Gateway v1 (REST API)\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\troute = event.resource;\n\t\thost = event.headers?.Host || event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = event.headers?.['User-Agent'] || event.headers?.['user-agent'];\n\t\tclientIp = event.requestContext?.identity?.sourceIp;\n\t\trequestId = event.requestContext?.requestId;\n\t} else if ('httpMethod' in event) {\n\t\t// ALB event\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\thost = event.headers?.host;\n\t\tuserAgent = event.headers?.['user-agent'] || event.headers?.['User-Agent'];\n\t\tclientIp = event.headers?.['x-forwarded-for']?.split(',')[0]?.trim();\n\t}\n\n\tconst attrs: HttpSpanAttributes = {\n\t\tmethod,\n\t\tpath,\n\t\troute,\n\t\thost,\n\t\tscheme,\n\t\tuserAgent,\n\t\tclientIp,\n\t\trequestId: requestId || lambdaContext.awsRequestId,\n\t};\n\n\t// Add endpoint metadata if extractors provided\n\tif (options.getEndpointName || options.getOperationId) {\n\t\tattrs.endpoint = {\n\t\t\tname: options.getEndpointName?.(event),\n\t\t\toperationId: options.getOperationId?.(event),\n\t\t};\n\t}\n\n\t// Add user metadata if extractor provided\n\tif (options.getUserId) {\n\t\tconst userId = options.getUserId(event);\n\t\tif (userId) {\n\t\t\tattrs.user = { userId };\n\t\t}\n\t}\n\n\treturn attrs;\n}\n\n/**\n * Normalize headers to lowercase keys\n */\nfunction normalizeHeaders(\n\theaders: Record<string, string | string[] | undefined>,\n): Record<string, string | string[] | undefined> {\n\tconst normalized: Record<string, string | string[] | undefined> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tnormalized[key.toLowerCase()] = value;\n\t}\n\treturn normalized;\n}\n\n/**\n * Run a function within the span context from a Lambda event\n *\n * @example\n * ```typescript\n * await withEventContext(event, async () => {\n *   // Any spans created here will be children of the request span\n *   await doSomething();\n * });\n * ```\n */\nexport async function withEventContext<T>(\n\tevent: any,\n\tfn: () => Promise<T>,\n): Promise<T> {\n\tconst ctx = getContextFromEvent(event);\n\tif (!ctx) {\n\t\treturn fn();\n\t}\n\treturn context.with(ctx, fn);\n}\n"],"mappings":";;;;AAuDA,MAAM,cAAc,OAAO,gBAAgB;AAC3C,MAAM,iBAAiB,OAAO,mBAAmB;;;;AAKjD,SAAgB,iBAAiB,OAA8B;CAC9D,OAAO,QAAQ;AAChB;;;;AAKA,SAAgB,oBAAoB,OAAiB;CACpD,OAAO,QAAQ;AAChB;;;;;;;;;;;;;AAcA,SAAgB,oBACf,UAAsC,CAAC,GACS;CAChD,OAAO;EACN,QAAQ,OAAO,YAAY;GAE1B,IAAI,QAAQ,aAAa,QAAQ,KAAK,GACrC;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,gBAAgB,QAAQ;GAG9B,MAAM,UAAU,iBAAiB,MAAM,WAAW,CAAC,CAAC;GACpD,MAAM,gBAAgBA,6BAAAA,oBAAoB,OAAO;GAGjD,MAAM,QAAQ,oBAAoB,OAAO,eAAe,OAAO;GAG/D,MAAM,OAAOC,6BAAAA,qBAAqB,OAAO,aAAa;GAGtD,MAAM,eAAe;GACrB,MAAM,kBAAkBC,mBAAAA,MAAM,QAAQ,eAAe,IAAI;GAGzD,KAAK,aAAa,sBAAsB,cAAc,YAAY;GAClE,KAAK,aAAa,aAAa,cAAc,YAAY;GAEzD,IAAI,QAAQ,cAAc,MAAM,MAAM;IACrC,MAAM,UACL,OAAO,MAAM,SAAS,WACnB,MAAM,OACN,KAAK,UAAU,MAAM,IAAI;IAE7B,KAAK,aACJ,qBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;EACD;EAEA,OAAO,OAAO,YAAY;GACzB,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,WAAW,QAAQ;GACzB,MAAM,aACL,OAAO,UAAU,eAAe,WAAW,SAAS,aAAa;GAElE,IAAI,QAAQ,sBAAsB,UAAU,MAAM;IACjD,MAAM,UACL,OAAO,SAAS,SAAS,WACtB,SAAS,OACT,KAAK,UAAU,SAAS,IAAI;IAChC,KAAK,aACJ,sBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;GAEA,6BAAA,YAAY,MAAM,EAAE,WAAW,CAAC;EACjC;EAEA,SAAS,OAAO,YAAY;GAC3B,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,WAAW,QAAQ;GAGzB,IAAI,aAAa;GACjB,IAAI,UAAU,YACb,aAAa,SAAS;QAChB,IAAI,SAAS,gBAAgB,OACnC,aAAc,MAAc;GAG7B,6BAAA,YACC,MACA,EAAE,WAAW,GACb,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CACzD;EACD;CACD;AACD;;;;AAKA,SAAS,oBACR,OACA,eACA,SACqB;CAErB,MAAM,OACL,oBAAoB,SAAS,WAAW,MAAM,kBAAkB,CAAC;CAClE,MAAM,OACL,oBAAoB,SACpB,gBAAgB,SAChB,EAAE,WAAW,MAAM,kBAAkB,CAAC;CAEvC,IAAI,SAAS;CACb,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,MAAM;EAET,MAAM,OAAO,MAAM,eAAe;EAClC,SAAS,KAAK;EACd,OAAO,MAAM,WAAW,KAAK;EAC7B,QAAQ,MAAM,UAAU,QAAQ,cAAc,EAAE;EAChD,OAAO,MAAM,SAAS;EACtB,SAAS;EACT,YAAY,KAAK;EACjB,WAAW,KAAK;EAChB,YAAY,MAAM,eAAe;CAClC,OAAO,IAAI,MAAM;EAEhB,SAAS,MAAM;EACf,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,OAAO,MAAM,SAAS,QAAQ,MAAM,SAAS;EAC7C,SAAS;EACT,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,gBAAgB,UAAU;EAC3C,YAAY,MAAM,gBAAgB;CACnC,OAAO,IAAI,gBAAgB,OAAO;EAEjC,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO,MAAM,SAAS;EACtB,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,UAAU,kBAAkB,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;CACpE;CAEA,MAAM,QAA4B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,aAAa,cAAc;CACvC;CAGA,IAAI,QAAQ,mBAAmB,QAAQ,gBACtC,MAAM,WAAW;EAChB,MAAM,QAAQ,kBAAkB,KAAK;EACrC,aAAa,QAAQ,iBAAiB,KAAK;CAC5C;CAID,IAAI,QAAQ,WAAW;EACtB,MAAM,SAAS,QAAQ,UAAU,KAAK;EACtC,IAAI,QACH,MAAM,OAAO,EAAE,OAAO;CAExB;CAEA,OAAO;AACR;;;;AAKA,SAAS,iBACR,SACgD;CAChD,MAAM,aAA4D,CAAC;CACnE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAChD,WAAW,IAAI,YAAY,KAAK;CAEjC,OAAO;AACR;;;;;;;;;;;;AAaA,eAAsB,iBACrB,OACA,IACa;CACb,MAAM,MAAM,oBAAoB,KAAK;CACrC,IAAI,CAAC,KACJ,OAAO,GAAG;CAEX,OAAOC,mBAAAA,QAAQ,KAAK,KAAK,EAAE;AAC5B"}
+{"version":3,"file":"middleware.cjs","names":["isTrustedOrigin","incomingTraceContext","createHttpServerSpan","trace","context"],"sources":["../../src/instrumentation/middleware.ts"],"sourcesContent":["/**\n * OpenTelemetry instrumentation middleware for @geekmidas/constructs\n *\n * This middleware automatically creates spans for HTTP requests,\n * extracts trace context from incoming headers, and records\n * request/response metadata as span attributes.\n */\nimport type { MiddlewareObj } from '@middy/core';\nimport { context, type Span, trace } from '@opentelemetry/api';\nimport type { Context as LambdaContext } from 'aws-lambda';\nimport {\n\tcreateHttpServerSpan,\n\tendHttpSpan,\n\ttype HttpSpanAttributes,\n\tincomingTraceContext,\n} from './http';\nimport { isTrustedOrigin } from './trust';\n\n/**\n * Options for the telemetry middleware\n */\nexport interface TelemetryMiddlewareOptions {\n\t/**\n\t * Whether to record request body as span attribute\n\t * @default false\n\t */\n\trecordBody?: boolean;\n\n\t/**\n\t * Whether to record response body as span attribute\n\t * @default false\n\t */\n\trecordResponseBody?: boolean;\n\n\t/**\n\t * Custom function to extract endpoint name from event\n\t */\n\tgetEndpointName?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract operation ID from event\n\t */\n\tgetOperationId?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract user ID from event\n\t */\n\tgetUserId?: (event: any) => string | undefined;\n\n\t/**\n\t * Whether to skip tracing for this request\n\t */\n\tshouldSkip?: (event: any) => boolean;\n\n\t/**\n\t * The origins whose `traceparent` is continued: the API's own sites, the\n\t * same list its CORS allows. Any other caller starts a new trace linked to\n\t * the one it claimed.\n\t */\n\ttrustedOrigins?: readonly string[];\n\n\t/**\n\t * Trust a request with no trusted origin anyway — a caller the function\n\t * can vouch for, such as one that passed IAM auth. A Lambda behind API\n\t * Gateway has no private network to tell an internal caller by, so none\n\t * is trusted unless this says so.\n\t */\n\ttrustRequest?: (event: any) => boolean;\n}\n\n// Symbol for storing span on event\nconst SPAN_SYMBOL = Symbol('telemetry.span');\nconst CONTEXT_SYMBOL = Symbol('telemetry.context');\n\n/**\n * Get the current span from the Lambda event\n */\nexport function getSpanFromEvent(event: any): Span | undefined {\n\treturn event?.[SPAN_SYMBOL];\n}\n\n/**\n * Get the current trace context from the Lambda event\n */\nexport function getContextFromEvent(event: any): any {\n\treturn event?.[CONTEXT_SYMBOL];\n}\n\n/**\n * Create a telemetry middleware for Lambda handlers\n *\n * @example\n * ```typescript\n * import { telemetryMiddleware } from '@geekmidas/telescope/instrumentation';\n *\n * const adaptor = new AmazonApiGatewayV2Endpoint(endpoint, {\n *   telemetry: { middleware: telemetryMiddleware() },\n * });\n * ```\n */\nexport function telemetryMiddleware(\n\toptions: TelemetryMiddlewareOptions = {},\n): MiddlewareObj<any, any, Error, LambdaContext> {\n\treturn {\n\t\tbefore: async (request) => {\n\t\t\t// Skip if custom skip function returns true\n\t\t\tif (options.shouldSkip?.(request.event)) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst event = request.event;\n\t\t\tconst lambdaContext = request.context;\n\n\t\t\t// Extract trace context from headers\n\t\t\tconst headers = normalizeHeaders(event.headers || {});\n\t\t\tconst trusted =\n\t\t\t\tisTrustedOrigin(\n\t\t\t\t\ttypeof headers.origin === 'string' ? headers.origin : undefined,\n\t\t\t\t\toptions.trustedOrigins,\n\t\t\t\t) || Boolean(options.trustRequest?.(event));\n\t\t\tconst { parent: parentContext, links } = incomingTraceContext(\n\t\t\t\theaders,\n\t\t\t\ttrusted,\n\t\t\t);\n\n\t\t\t// Build span attributes from event\n\t\t\tconst attrs = buildSpanAttributes(event, lambdaContext, options);\n\n\t\t\t// Create the span\n\t\t\tconst span = createHttpServerSpan(attrs, parentContext, links);\n\n\t\t\t// Store span and context on event for access in handler\n\t\t\tevent[SPAN_SYMBOL] = span;\n\t\t\tevent[CONTEXT_SYMBOL] = trace.setSpan(parentContext, span);\n\n\t\t\t// Add Lambda-specific attributes\n\t\t\tspan.setAttribute('faas.invocation_id', lambdaContext.awsRequestId);\n\t\t\tspan.setAttribute('faas.name', lambdaContext.functionName);\n\n\t\t\tif (options.recordBody && event.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof event.body === 'string'\n\t\t\t\t\t\t? event.body\n\t\t\t\t\t\t: JSON.stringify(event.body);\n\t\t\t\t// Truncate large bodies\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.request.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\t\t},\n\n\t\tafter: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst response = request.response;\n\t\t\tconst statusCode =\n\t\t\t\ttypeof response?.statusCode === 'number' ? response.statusCode : 200;\n\n\t\t\tif (options.recordResponseBody && response?.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof response.body === 'string'\n\t\t\t\t\t\t? response.body\n\t\t\t\t\t\t: JSON.stringify(response.body);\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.response.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tendHttpSpan(span, { statusCode });\n\t\t},\n\n\t\tonError: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst error = request.error;\n\t\t\tconst response = request.response;\n\n\t\t\t// Determine status code from response or error\n\t\t\tlet statusCode = 500;\n\t\t\tif (response?.statusCode) {\n\t\t\t\tstatusCode = response.statusCode;\n\t\t\t} else if (error && 'statusCode' in error) {\n\t\t\t\tstatusCode = (error as any).statusCode;\n\t\t\t}\n\n\t\t\tendHttpSpan(\n\t\t\t\tspan,\n\t\t\t\t{ statusCode },\n\t\t\t\terror instanceof Error ? error : new Error(String(error)),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/**\n * Build span attributes from Lambda event\n */\nfunction buildSpanAttributes(\n\tevent: any,\n\tlambdaContext: LambdaContext,\n\toptions: TelemetryMiddlewareOptions,\n): HttpSpanAttributes {\n\t// Detect event type (API Gateway v1, v2, ALB, or direct invoke)\n\tconst isV2 =\n\t\t'requestContext' in event && 'http' in (event.requestContext || {});\n\tconst isV1 =\n\t\t'requestContext' in event &&\n\t\t'httpMethod' in event &&\n\t\t!('http' in (event.requestContext || {}));\n\n\tlet method = 'INVOKE';\n\tlet path = '/';\n\tlet route: string | undefined;\n\tlet host: string | undefined;\n\tlet scheme: 'http' | 'https' | undefined;\n\tlet userAgent: string | undefined;\n\tlet clientIp: string | undefined;\n\tlet requestId: string | undefined;\n\n\tif (isV2) {\n\t\t// API Gateway v2 (HTTP API)\n\t\tconst http = event.requestContext.http;\n\t\tmethod = http.method;\n\t\tpath = event.rawPath || http.path;\n\t\troute = event.routeKey?.replace(/^[A-Z]+\\s+/, ''); // Remove HTTP method prefix\n\t\thost = event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = http.userAgent;\n\t\tclientIp = http.sourceIp;\n\t\trequestId = event.requestContext.requestId;\n\t} else if (isV1) {\n\t\t// API Gateway v1 (REST API)\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\troute = event.resource;\n\t\thost = event.headers?.Host || event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = event.headers?.['User-Agent'] || event.headers?.['user-agent'];\n\t\tclientIp = event.requestContext?.identity?.sourceIp;\n\t\trequestId = event.requestContext?.requestId;\n\t} else if ('httpMethod' in event) {\n\t\t// ALB event\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\thost = event.headers?.host;\n\t\tuserAgent = event.headers?.['user-agent'] || event.headers?.['User-Agent'];\n\t\tclientIp = event.headers?.['x-forwarded-for']?.split(',')[0]?.trim();\n\t}\n\n\tconst attrs: HttpSpanAttributes = {\n\t\tmethod,\n\t\tpath,\n\t\troute,\n\t\thost,\n\t\tscheme,\n\t\tuserAgent,\n\t\tclientIp,\n\t\trequestId: requestId || lambdaContext.awsRequestId,\n\t};\n\n\t// Add endpoint metadata if extractors provided\n\tif (options.getEndpointName || options.getOperationId) {\n\t\tattrs.endpoint = {\n\t\t\tname: options.getEndpointName?.(event),\n\t\t\toperationId: options.getOperationId?.(event),\n\t\t};\n\t}\n\n\t// Add user metadata if extractor provided\n\tif (options.getUserId) {\n\t\tconst userId = options.getUserId(event);\n\t\tif (userId) {\n\t\t\tattrs.user = { userId };\n\t\t}\n\t}\n\n\treturn attrs;\n}\n\n/**\n * Normalize headers to lowercase keys\n */\nfunction normalizeHeaders(\n\theaders: Record<string, string | string[] | undefined>,\n): Record<string, string | string[] | undefined> {\n\tconst normalized: Record<string, string | string[] | undefined> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tnormalized[key.toLowerCase()] = value;\n\t}\n\treturn normalized;\n}\n\n/**\n * Run a function within the span context from a Lambda event\n *\n * @example\n * ```typescript\n * await withEventContext(event, async () => {\n *   // Any spans created here will be children of the request span\n *   await doSomething();\n * });\n * ```\n */\nexport async function withEventContext<T>(\n\tevent: any,\n\tfn: () => Promise<T>,\n): Promise<T> {\n\tconst ctx = getContextFromEvent(event);\n\tif (!ctx) {\n\t\treturn fn();\n\t}\n\treturn context.with(ctx, fn);\n}\n"],"mappings":";;;;;AAuEA,MAAM,cAAc,OAAO,gBAAgB;AAC3C,MAAM,iBAAiB,OAAO,mBAAmB;;;;AAKjD,SAAgB,iBAAiB,OAA8B;CAC9D,OAAO,QAAQ;AAChB;;;;AAKA,SAAgB,oBAAoB,OAAiB;CACpD,OAAO,QAAQ;AAChB;;;;;;;;;;;;;AAcA,SAAgB,oBACf,UAAsC,CAAC,GACS;CAChD,OAAO;EACN,QAAQ,OAAO,YAAY;GAE1B,IAAI,QAAQ,aAAa,QAAQ,KAAK,GACrC;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,gBAAgB,QAAQ;GAG9B,MAAM,UAAU,iBAAiB,MAAM,WAAW,CAAC,CAAC;GACpD,MAAM,UACLA,8BAAAA,gBACC,OAAO,QAAQ,WAAW,WAAW,QAAQ,SAAS,KAAA,GACtD,QAAQ,cACT,KAAK,QAAQ,QAAQ,eAAe,KAAK,CAAC;GAC3C,MAAM,EAAE,QAAQ,eAAe,UAAUC,6BAAAA,qBACxC,SACA,OACD;GAGA,MAAM,QAAQ,oBAAoB,OAAO,eAAe,OAAO;GAG/D,MAAM,OAAOC,6BAAAA,qBAAqB,OAAO,eAAe,KAAK;GAG7D,MAAM,eAAe;GACrB,MAAM,kBAAkBC,mBAAAA,MAAM,QAAQ,eAAe,IAAI;GAGzD,KAAK,aAAa,sBAAsB,cAAc,YAAY;GAClE,KAAK,aAAa,aAAa,cAAc,YAAY;GAEzD,IAAI,QAAQ,cAAc,MAAM,MAAM;IACrC,MAAM,UACL,OAAO,MAAM,SAAS,WACnB,MAAM,OACN,KAAK,UAAU,MAAM,IAAI;IAE7B,KAAK,aACJ,qBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;EACD;EAEA,OAAO,OAAO,YAAY;GACzB,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,WAAW,QAAQ;GACzB,MAAM,aACL,OAAO,UAAU,eAAe,WAAW,SAAS,aAAa;GAElE,IAAI,QAAQ,sBAAsB,UAAU,MAAM;IACjD,MAAM,UACL,OAAO,SAAS,SAAS,WACtB,SAAS,OACT,KAAK,UAAU,SAAS,IAAI;IAChC,KAAK,aACJ,sBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;GAEA,6BAAA,YAAY,MAAM,EAAE,WAAW,CAAC;EACjC;EAEA,SAAS,OAAO,YAAY;GAC3B,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,WAAW,QAAQ;GAGzB,IAAI,aAAa;GACjB,IAAI,UAAU,YACb,aAAa,SAAS;QAChB,IAAI,SAAS,gBAAgB,OACnC,aAAc,MAAc;GAG7B,6BAAA,YACC,MACA,EAAE,WAAW,GACb,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CACzD;EACD;CACD;AACD;;;;AAKA,SAAS,oBACR,OACA,eACA,SACqB;CAErB,MAAM,OACL,oBAAoB,SAAS,WAAW,MAAM,kBAAkB,CAAC;CAClE,MAAM,OACL,oBAAoB,SACpB,gBAAgB,SAChB,EAAE,WAAW,MAAM,kBAAkB,CAAC;CAEvC,IAAI,SAAS;CACb,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,MAAM;EAET,MAAM,OAAO,MAAM,eAAe;EAClC,SAAS,KAAK;EACd,OAAO,MAAM,WAAW,KAAK;EAC7B,QAAQ,MAAM,UAAU,QAAQ,cAAc,EAAE;EAChD,OAAO,MAAM,SAAS;EACtB,SAAS;EACT,YAAY,KAAK;EACjB,WAAW,KAAK;EAChB,YAAY,MAAM,eAAe;CAClC,OAAO,IAAI,MAAM;EAEhB,SAAS,MAAM;EACf,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,OAAO,MAAM,SAAS,QAAQ,MAAM,SAAS;EAC7C,SAAS;EACT,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,gBAAgB,UAAU;EAC3C,YAAY,MAAM,gBAAgB;CACnC,OAAO,IAAI,gBAAgB,OAAO;EAEjC,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO,MAAM,SAAS;EACtB,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,UAAU,kBAAkB,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;CACpE;CAEA,MAAM,QAA4B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,aAAa,cAAc;CACvC;CAGA,IAAI,QAAQ,mBAAmB,QAAQ,gBACtC,MAAM,WAAW;EAChB,MAAM,QAAQ,kBAAkB,KAAK;EACrC,aAAa,QAAQ,iBAAiB,KAAK;CAC5C;CAID,IAAI,QAAQ,WAAW;EACtB,MAAM,SAAS,QAAQ,UAAU,KAAK;EACtC,IAAI,QACH,MAAM,OAAO,EAAE,OAAO;CAExB;CAEA,OAAO;AACR;;;;AAKA,SAAS,iBACR,SACgD;CAChD,MAAM,aAA4D,CAAC;CACnE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAChD,WAAW,IAAI,YAAY,KAAK;CAEjC,OAAO;AACR;;;;;;;;;;;;AAaA,eAAsB,iBACrB,OACA,IACa;CACb,MAAM,MAAM,oBAAoB,KAAK;CACrC,IAAI,CAAC,KACJ,OAAO,GAAG;CAEX,OAAOC,mBAAAA,QAAQ,KAAK,KAAK,EAAE;AAC5B"}

package/dist/instrumentation/middleware.d.cts

@@ -32,6 +32,19 @@ export interface TelemetryMiddlewareOptions {
    * Whether to skip tracing for this request
    */
   shouldSkip?: (event: any) => boolean;
+  /**
+   * The origins whose `traceparent` is continued: the API's own sites, the
+   * same list its CORS allows. Any other caller starts a new trace linked to
+   * the one it claimed.
+   */
+  trustedOrigins?: readonly string[];
+  /**
+   * Trust a request with no trusted origin anyway — a caller the function
+   * can vouch for, such as one that passed IAM auth. A Lambda behind API
+   * Gateway has no private network to tell an internal caller by, so none
+   * is trusted unless this says so.
+   */
+  trustRequest?: (event: any) => boolean;
 }
 /**
  * Get the current span from the Lambda event

package/dist/instrumentation/middleware.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.cts","names":["LambdaContext"],"sources":["../../src/instrumentation/middleware.ts"],"mappings":";;;;;;;iBAoBiB;;;;;EAKhB;;;;;EAMA;;;;EAKA,mBAAmB;;;;EAKnB,kBAAkB;;;;EAKlB,aAAa;;;;EAKb,cAAc;;;;;wBAUC,iBAAiB,aAAa;;;;wBAO9B,oBAAoB;;;;;;;;;;;;;wBAgBpB,oBACf,UAAS,6BACP,wBAAwB,OAAOA;;;;;;;;;;;;wBAyMZ,iBAAiB,GACtC,YACA,UAAU,QAAQ,KAChB,QAAQ"}
+{"version":3,"file":"middleware.d.cts","names":["LambdaContext"],"sources":["../../src/instrumentation/middleware.ts"],"mappings":";;;;;;;iBAqBiB;;;;;EAKhB;;;;;EAMA;;;;EAKA,mBAAmB;;;;EAKnB,kBAAkB;;;;EAKlB,aAAa;;;;EAKb,cAAc;;;;;;EAOd;;;;;;;EAQA,gBAAgB;;;;;wBAUD,iBAAiB,aAAa;;;;wBAO9B,oBAAoB;;;;;;;;;;;;;wBAgBpB,oBACf,UAAS,6BACP,wBAAwB,OAAOA;;;;;;;;;;;;wBAiNZ,iBAAiB,GACtC,YACA,UAAU,QAAQ,KAChB,QAAQ"}

package/dist/instrumentation/middleware.d.mts

@@ -32,6 +32,19 @@ export interface TelemetryMiddlewareOptions {
    * Whether to skip tracing for this request
    */
   shouldSkip?: (event: any) => boolean;
+  /**
+   * The origins whose `traceparent` is continued: the API's own sites, the
+   * same list its CORS allows. Any other caller starts a new trace linked to
+   * the one it claimed.
+   */
+  trustedOrigins?: readonly string[];
+  /**
+   * Trust a request with no trusted origin anyway — a caller the function
+   * can vouch for, such as one that passed IAM auth. A Lambda behind API
+   * Gateway has no private network to tell an internal caller by, so none
+   * is trusted unless this says so.
+   */
+  trustRequest?: (event: any) => boolean;
 }
 /**
  * Get the current span from the Lambda event

package/dist/instrumentation/middleware.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.d.mts","names":["LambdaContext"],"sources":["../../src/instrumentation/middleware.ts"],"mappings":";;;;;;;iBAoBiB;;;;;EAKhB;;;;;EAMA;;;;EAKA,mBAAmB;;;;EAKnB,kBAAkB;;;;EAKlB,aAAa;;;;EAKb,cAAc;;;;;wBAUC,iBAAiB,aAAa;;;;wBAO9B,oBAAoB;;;;;;;;;;;;;wBAgBpB,oBACf,UAAS,6BACP,wBAAwB,OAAOA;;;;;;;;;;;;wBAyMZ,iBAAiB,GACtC,YACA,UAAU,QAAQ,KAChB,QAAQ"}
+{"version":3,"file":"middleware.d.mts","names":["LambdaContext"],"sources":["../../src/instrumentation/middleware.ts"],"mappings":";;;;;;;iBAqBiB;;;;;EAKhB;;;;;EAMA;;;;EAKA,mBAAmB;;;;EAKnB,kBAAkB;;;;EAKlB,aAAa;;;;EAKb,cAAc;;;;;;EAOd;;;;;;;EAQA,gBAAgB;;;;;wBAUD,iBAAiB,aAAa;;;;wBAO9B,oBAAoB;;;;;;;;;;;;;wBAgBpB,oBACf,UAAS,6BACP,wBAAwB,OAAOA;;;;;;;;;;;;wBAiNZ,iBAAiB,GACtC,YACA,UAAU,QAAQ,KAChB,QAAQ"}

package/dist/instrumentation/middleware.mjs

@@ -1,4 +1,5 @@
-import { createHttpServerSpan, endHttpSpan, extractTraceContext } from "./http.mjs";
+import { createHttpServerSpan, endHttpSpan, incomingTraceContext } from "./http.mjs";
+import { isTrustedOrigin } from "./trust.mjs";
 import { context, trace } from "@opentelemetry/api";
 //#region src/instrumentation/middleware.ts
 const SPAN_SYMBOL = Symbol("telemetry.span");
@@ -34,9 +35,10 @@ function telemetryMiddleware(options = {}) {
 			const event = request.event;
 			const lambdaContext = request.context;
 			const headers = normalizeHeaders(event.headers || {});
-			const parentContext = extractTraceContext(headers);
+			const trusted = isTrustedOrigin(typeof headers.origin === "string" ? headers.origin : void 0, options.trustedOrigins) || Boolean(options.trustRequest?.(event));
+			const { parent: parentContext, links } = incomingTraceContext(headers, trusted);
 			const attrs = buildSpanAttributes(event, lambdaContext, options);
-			const span = createHttpServerSpan(attrs, parentContext);
+			const span = createHttpServerSpan(attrs, parentContext, links);
 			event[SPAN_SYMBOL] = span;
 			event[CONTEXT_SYMBOL] = trace.setSpan(parentContext, span);
 			span.setAttribute("faas.invocation_id", lambdaContext.awsRequestId);

package/dist/instrumentation/middleware.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"middleware.mjs","names":[],"sources":["../../src/instrumentation/middleware.ts"],"sourcesContent":["/**\n * OpenTelemetry instrumentation middleware for @geekmidas/constructs\n *\n * This middleware automatically creates spans for HTTP requests,\n * extracts trace context from incoming headers, and records\n * request/response metadata as span attributes.\n */\nimport type { MiddlewareObj } from '@middy/core';\nimport { context, type Span, trace } from '@opentelemetry/api';\nimport type { Context as LambdaContext } from 'aws-lambda';\nimport {\n\tcreateHttpServerSpan,\n\tendHttpSpan,\n\textractTraceContext,\n\ttype HttpSpanAttributes,\n} from './http';\n\n/**\n * Options for the telemetry middleware\n */\nexport interface TelemetryMiddlewareOptions {\n\t/**\n\t * Whether to record request body as span attribute\n\t * @default false\n\t */\n\trecordBody?: boolean;\n\n\t/**\n\t * Whether to record response body as span attribute\n\t * @default false\n\t */\n\trecordResponseBody?: boolean;\n\n\t/**\n\t * Custom function to extract endpoint name from event\n\t */\n\tgetEndpointName?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract operation ID from event\n\t */\n\tgetOperationId?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract user ID from event\n\t */\n\tgetUserId?: (event: any) => string | undefined;\n\n\t/**\n\t * Whether to skip tracing for this request\n\t */\n\tshouldSkip?: (event: any) => boolean;\n}\n\n// Symbol for storing span on event\nconst SPAN_SYMBOL = Symbol('telemetry.span');\nconst CONTEXT_SYMBOL = Symbol('telemetry.context');\n\n/**\n * Get the current span from the Lambda event\n */\nexport function getSpanFromEvent(event: any): Span | undefined {\n\treturn event?.[SPAN_SYMBOL];\n}\n\n/**\n * Get the current trace context from the Lambda event\n */\nexport function getContextFromEvent(event: any): any {\n\treturn event?.[CONTEXT_SYMBOL];\n}\n\n/**\n * Create a telemetry middleware for Lambda handlers\n *\n * @example\n * ```typescript\n * import { telemetryMiddleware } from '@geekmidas/telescope/instrumentation';\n *\n * const adaptor = new AmazonApiGatewayV2Endpoint(endpoint, {\n *   telemetry: { middleware: telemetryMiddleware() },\n * });\n * ```\n */\nexport function telemetryMiddleware(\n\toptions: TelemetryMiddlewareOptions = {},\n): MiddlewareObj<any, any, Error, LambdaContext> {\n\treturn {\n\t\tbefore: async (request) => {\n\t\t\t// Skip if custom skip function returns true\n\t\t\tif (options.shouldSkip?.(request.event)) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst event = request.event;\n\t\t\tconst lambdaContext = request.context;\n\n\t\t\t// Extract trace context from headers\n\t\t\tconst headers = normalizeHeaders(event.headers || {});\n\t\t\tconst parentContext = extractTraceContext(headers);\n\n\t\t\t// Build span attributes from event\n\t\t\tconst attrs = buildSpanAttributes(event, lambdaContext, options);\n\n\t\t\t// Create the span\n\t\t\tconst span = createHttpServerSpan(attrs, parentContext);\n\n\t\t\t// Store span and context on event for access in handler\n\t\t\tevent[SPAN_SYMBOL] = span;\n\t\t\tevent[CONTEXT_SYMBOL] = trace.setSpan(parentContext, span);\n\n\t\t\t// Add Lambda-specific attributes\n\t\t\tspan.setAttribute('faas.invocation_id', lambdaContext.awsRequestId);\n\t\t\tspan.setAttribute('faas.name', lambdaContext.functionName);\n\n\t\t\tif (options.recordBody && event.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof event.body === 'string'\n\t\t\t\t\t\t? event.body\n\t\t\t\t\t\t: JSON.stringify(event.body);\n\t\t\t\t// Truncate large bodies\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.request.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\t\t},\n\n\t\tafter: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst response = request.response;\n\t\t\tconst statusCode =\n\t\t\t\ttypeof response?.statusCode === 'number' ? response.statusCode : 200;\n\n\t\t\tif (options.recordResponseBody && response?.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof response.body === 'string'\n\t\t\t\t\t\t? response.body\n\t\t\t\t\t\t: JSON.stringify(response.body);\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.response.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tendHttpSpan(span, { statusCode });\n\t\t},\n\n\t\tonError: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst error = request.error;\n\t\t\tconst response = request.response;\n\n\t\t\t// Determine status code from response or error\n\t\t\tlet statusCode = 500;\n\t\t\tif (response?.statusCode) {\n\t\t\t\tstatusCode = response.statusCode;\n\t\t\t} else if (error && 'statusCode' in error) {\n\t\t\t\tstatusCode = (error as any).statusCode;\n\t\t\t}\n\n\t\t\tendHttpSpan(\n\t\t\t\tspan,\n\t\t\t\t{ statusCode },\n\t\t\t\terror instanceof Error ? error : new Error(String(error)),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/**\n * Build span attributes from Lambda event\n */\nfunction buildSpanAttributes(\n\tevent: any,\n\tlambdaContext: LambdaContext,\n\toptions: TelemetryMiddlewareOptions,\n): HttpSpanAttributes {\n\t// Detect event type (API Gateway v1, v2, ALB, or direct invoke)\n\tconst isV2 =\n\t\t'requestContext' in event && 'http' in (event.requestContext || {});\n\tconst isV1 =\n\t\t'requestContext' in event &&\n\t\t'httpMethod' in event &&\n\t\t!('http' in (event.requestContext || {}));\n\n\tlet method = 'INVOKE';\n\tlet path = '/';\n\tlet route: string | undefined;\n\tlet host: string | undefined;\n\tlet scheme: 'http' | 'https' | undefined;\n\tlet userAgent: string | undefined;\n\tlet clientIp: string | undefined;\n\tlet requestId: string | undefined;\n\n\tif (isV2) {\n\t\t// API Gateway v2 (HTTP API)\n\t\tconst http = event.requestContext.http;\n\t\tmethod = http.method;\n\t\tpath = event.rawPath || http.path;\n\t\troute = event.routeKey?.replace(/^[A-Z]+\\s+/, ''); // Remove HTTP method prefix\n\t\thost = event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = http.userAgent;\n\t\tclientIp = http.sourceIp;\n\t\trequestId = event.requestContext.requestId;\n\t} else if (isV1) {\n\t\t// API Gateway v1 (REST API)\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\troute = event.resource;\n\t\thost = event.headers?.Host || event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = event.headers?.['User-Agent'] || event.headers?.['user-agent'];\n\t\tclientIp = event.requestContext?.identity?.sourceIp;\n\t\trequestId = event.requestContext?.requestId;\n\t} else if ('httpMethod' in event) {\n\t\t// ALB event\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\thost = event.headers?.host;\n\t\tuserAgent = event.headers?.['user-agent'] || event.headers?.['User-Agent'];\n\t\tclientIp = event.headers?.['x-forwarded-for']?.split(',')[0]?.trim();\n\t}\n\n\tconst attrs: HttpSpanAttributes = {\n\t\tmethod,\n\t\tpath,\n\t\troute,\n\t\thost,\n\t\tscheme,\n\t\tuserAgent,\n\t\tclientIp,\n\t\trequestId: requestId || lambdaContext.awsRequestId,\n\t};\n\n\t// Add endpoint metadata if extractors provided\n\tif (options.getEndpointName || options.getOperationId) {\n\t\tattrs.endpoint = {\n\t\t\tname: options.getEndpointName?.(event),\n\t\t\toperationId: options.getOperationId?.(event),\n\t\t};\n\t}\n\n\t// Add user metadata if extractor provided\n\tif (options.getUserId) {\n\t\tconst userId = options.getUserId(event);\n\t\tif (userId) {\n\t\t\tattrs.user = { userId };\n\t\t}\n\t}\n\n\treturn attrs;\n}\n\n/**\n * Normalize headers to lowercase keys\n */\nfunction normalizeHeaders(\n\theaders: Record<string, string | string[] | undefined>,\n): Record<string, string | string[] | undefined> {\n\tconst normalized: Record<string, string | string[] | undefined> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tnormalized[key.toLowerCase()] = value;\n\t}\n\treturn normalized;\n}\n\n/**\n * Run a function within the span context from a Lambda event\n *\n * @example\n * ```typescript\n * await withEventContext(event, async () => {\n *   // Any spans created here will be children of the request span\n *   await doSomething();\n * });\n * ```\n */\nexport async function withEventContext<T>(\n\tevent: any,\n\tfn: () => Promise<T>,\n): Promise<T> {\n\tconst ctx = getContextFromEvent(event);\n\tif (!ctx) {\n\t\treturn fn();\n\t}\n\treturn context.with(ctx, fn);\n}\n"],"mappings":";;;AAuDA,MAAM,cAAc,OAAO,gBAAgB;AAC3C,MAAM,iBAAiB,OAAO,mBAAmB;;;;AAKjD,SAAgB,iBAAiB,OAA8B;CAC9D,OAAO,QAAQ;AAChB;;;;AAKA,SAAgB,oBAAoB,OAAiB;CACpD,OAAO,QAAQ;AAChB;;;;;;;;;;;;;AAcA,SAAgB,oBACf,UAAsC,CAAC,GACS;CAChD,OAAO;EACN,QAAQ,OAAO,YAAY;GAE1B,IAAI,QAAQ,aAAa,QAAQ,KAAK,GACrC;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,gBAAgB,QAAQ;GAG9B,MAAM,UAAU,iBAAiB,MAAM,WAAW,CAAC,CAAC;GACpD,MAAM,gBAAgB,oBAAoB,OAAO;GAGjD,MAAM,QAAQ,oBAAoB,OAAO,eAAe,OAAO;GAG/D,MAAM,OAAO,qBAAqB,OAAO,aAAa;GAGtD,MAAM,eAAe;GACrB,MAAM,kBAAkB,MAAM,QAAQ,eAAe,IAAI;GAGzD,KAAK,aAAa,sBAAsB,cAAc,YAAY;GAClE,KAAK,aAAa,aAAa,cAAc,YAAY;GAEzD,IAAI,QAAQ,cAAc,MAAM,MAAM;IACrC,MAAM,UACL,OAAO,MAAM,SAAS,WACnB,MAAM,OACN,KAAK,UAAU,MAAM,IAAI;IAE7B,KAAK,aACJ,qBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;EACD;EAEA,OAAO,OAAO,YAAY;GACzB,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,WAAW,QAAQ;GACzB,MAAM,aACL,OAAO,UAAU,eAAe,WAAW,SAAS,aAAa;GAElE,IAAI,QAAQ,sBAAsB,UAAU,MAAM;IACjD,MAAM,UACL,OAAO,SAAS,SAAS,WACtB,SAAS,OACT,KAAK,UAAU,SAAS,IAAI;IAChC,KAAK,aACJ,sBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;GAEA,YAAY,MAAM,EAAE,WAAW,CAAC;EACjC;EAEA,SAAS,OAAO,YAAY;GAC3B,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,WAAW,QAAQ;GAGzB,IAAI,aAAa;GACjB,IAAI,UAAU,YACb,aAAa,SAAS;QAChB,IAAI,SAAS,gBAAgB,OACnC,aAAc,MAAc;GAG7B,YACC,MACA,EAAE,WAAW,GACb,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CACzD;EACD;CACD;AACD;;;;AAKA,SAAS,oBACR,OACA,eACA,SACqB;CAErB,MAAM,OACL,oBAAoB,SAAS,WAAW,MAAM,kBAAkB,CAAC;CAClE,MAAM,OACL,oBAAoB,SACpB,gBAAgB,SAChB,EAAE,WAAW,MAAM,kBAAkB,CAAC;CAEvC,IAAI,SAAS;CACb,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,MAAM;EAET,MAAM,OAAO,MAAM,eAAe;EAClC,SAAS,KAAK;EACd,OAAO,MAAM,WAAW,KAAK;EAC7B,QAAQ,MAAM,UAAU,QAAQ,cAAc,EAAE;EAChD,OAAO,MAAM,SAAS;EACtB,SAAS;EACT,YAAY,KAAK;EACjB,WAAW,KAAK;EAChB,YAAY,MAAM,eAAe;CAClC,OAAO,IAAI,MAAM;EAEhB,SAAS,MAAM;EACf,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,OAAO,MAAM,SAAS,QAAQ,MAAM,SAAS;EAC7C,SAAS;EACT,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,gBAAgB,UAAU;EAC3C,YAAY,MAAM,gBAAgB;CACnC,OAAO,IAAI,gBAAgB,OAAO;EAEjC,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO,MAAM,SAAS;EACtB,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,UAAU,kBAAkB,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;CACpE;CAEA,MAAM,QAA4B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,aAAa,cAAc;CACvC;CAGA,IAAI,QAAQ,mBAAmB,QAAQ,gBACtC,MAAM,WAAW;EAChB,MAAM,QAAQ,kBAAkB,KAAK;EACrC,aAAa,QAAQ,iBAAiB,KAAK;CAC5C;CAID,IAAI,QAAQ,WAAW;EACtB,MAAM,SAAS,QAAQ,UAAU,KAAK;EACtC,IAAI,QACH,MAAM,OAAO,EAAE,OAAO;CAExB;CAEA,OAAO;AACR;;;;AAKA,SAAS,iBACR,SACgD;CAChD,MAAM,aAA4D,CAAC;CACnE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAChD,WAAW,IAAI,YAAY,KAAK;CAEjC,OAAO;AACR;;;;;;;;;;;;AAaA,eAAsB,iBACrB,OACA,IACa;CACb,MAAM,MAAM,oBAAoB,KAAK;CACrC,IAAI,CAAC,KACJ,OAAO,GAAG;CAEX,OAAO,QAAQ,KAAK,KAAK,EAAE;AAC5B"}
+{"version":3,"file":"middleware.mjs","names":[],"sources":["../../src/instrumentation/middleware.ts"],"sourcesContent":["/**\n * OpenTelemetry instrumentation middleware for @geekmidas/constructs\n *\n * This middleware automatically creates spans for HTTP requests,\n * extracts trace context from incoming headers, and records\n * request/response metadata as span attributes.\n */\nimport type { MiddlewareObj } from '@middy/core';\nimport { context, type Span, trace } from '@opentelemetry/api';\nimport type { Context as LambdaContext } from 'aws-lambda';\nimport {\n\tcreateHttpServerSpan,\n\tendHttpSpan,\n\ttype HttpSpanAttributes,\n\tincomingTraceContext,\n} from './http';\nimport { isTrustedOrigin } from './trust';\n\n/**\n * Options for the telemetry middleware\n */\nexport interface TelemetryMiddlewareOptions {\n\t/**\n\t * Whether to record request body as span attribute\n\t * @default false\n\t */\n\trecordBody?: boolean;\n\n\t/**\n\t * Whether to record response body as span attribute\n\t * @default false\n\t */\n\trecordResponseBody?: boolean;\n\n\t/**\n\t * Custom function to extract endpoint name from event\n\t */\n\tgetEndpointName?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract operation ID from event\n\t */\n\tgetOperationId?: (event: any) => string | undefined;\n\n\t/**\n\t * Custom function to extract user ID from event\n\t */\n\tgetUserId?: (event: any) => string | undefined;\n\n\t/**\n\t * Whether to skip tracing for this request\n\t */\n\tshouldSkip?: (event: any) => boolean;\n\n\t/**\n\t * The origins whose `traceparent` is continued: the API's own sites, the\n\t * same list its CORS allows. Any other caller starts a new trace linked to\n\t * the one it claimed.\n\t */\n\ttrustedOrigins?: readonly string[];\n\n\t/**\n\t * Trust a request with no trusted origin anyway — a caller the function\n\t * can vouch for, such as one that passed IAM auth. A Lambda behind API\n\t * Gateway has no private network to tell an internal caller by, so none\n\t * is trusted unless this says so.\n\t */\n\ttrustRequest?: (event: any) => boolean;\n}\n\n// Symbol for storing span on event\nconst SPAN_SYMBOL = Symbol('telemetry.span');\nconst CONTEXT_SYMBOL = Symbol('telemetry.context');\n\n/**\n * Get the current span from the Lambda event\n */\nexport function getSpanFromEvent(event: any): Span | undefined {\n\treturn event?.[SPAN_SYMBOL];\n}\n\n/**\n * Get the current trace context from the Lambda event\n */\nexport function getContextFromEvent(event: any): any {\n\treturn event?.[CONTEXT_SYMBOL];\n}\n\n/**\n * Create a telemetry middleware for Lambda handlers\n *\n * @example\n * ```typescript\n * import { telemetryMiddleware } from '@geekmidas/telescope/instrumentation';\n *\n * const adaptor = new AmazonApiGatewayV2Endpoint(endpoint, {\n *   telemetry: { middleware: telemetryMiddleware() },\n * });\n * ```\n */\nexport function telemetryMiddleware(\n\toptions: TelemetryMiddlewareOptions = {},\n): MiddlewareObj<any, any, Error, LambdaContext> {\n\treturn {\n\t\tbefore: async (request) => {\n\t\t\t// Skip if custom skip function returns true\n\t\t\tif (options.shouldSkip?.(request.event)) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst event = request.event;\n\t\t\tconst lambdaContext = request.context;\n\n\t\t\t// Extract trace context from headers\n\t\t\tconst headers = normalizeHeaders(event.headers || {});\n\t\t\tconst trusted =\n\t\t\t\tisTrustedOrigin(\n\t\t\t\t\ttypeof headers.origin === 'string' ? headers.origin : undefined,\n\t\t\t\t\toptions.trustedOrigins,\n\t\t\t\t) || Boolean(options.trustRequest?.(event));\n\t\t\tconst { parent: parentContext, links } = incomingTraceContext(\n\t\t\t\theaders,\n\t\t\t\ttrusted,\n\t\t\t);\n\n\t\t\t// Build span attributes from event\n\t\t\tconst attrs = buildSpanAttributes(event, lambdaContext, options);\n\n\t\t\t// Create the span\n\t\t\tconst span = createHttpServerSpan(attrs, parentContext, links);\n\n\t\t\t// Store span and context on event for access in handler\n\t\t\tevent[SPAN_SYMBOL] = span;\n\t\t\tevent[CONTEXT_SYMBOL] = trace.setSpan(parentContext, span);\n\n\t\t\t// Add Lambda-specific attributes\n\t\t\tspan.setAttribute('faas.invocation_id', lambdaContext.awsRequestId);\n\t\t\tspan.setAttribute('faas.name', lambdaContext.functionName);\n\n\t\t\tif (options.recordBody && event.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof event.body === 'string'\n\t\t\t\t\t\t? event.body\n\t\t\t\t\t\t: JSON.stringify(event.body);\n\t\t\t\t// Truncate large bodies\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.request.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\t\t},\n\n\t\tafter: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst response = request.response;\n\t\t\tconst statusCode =\n\t\t\t\ttypeof response?.statusCode === 'number' ? response.statusCode : 200;\n\n\t\t\tif (options.recordResponseBody && response?.body) {\n\t\t\t\tconst bodyStr =\n\t\t\t\t\ttypeof response.body === 'string'\n\t\t\t\t\t\t? response.body\n\t\t\t\t\t\t: JSON.stringify(response.body);\n\t\t\t\tspan.setAttribute(\n\t\t\t\t\t'http.response.body',\n\t\t\t\t\tbodyStr.length > 4096 ? `${bodyStr.slice(0, 4096)}...` : bodyStr,\n\t\t\t\t);\n\t\t\t}\n\n\t\t\tendHttpSpan(span, { statusCode });\n\t\t},\n\n\t\tonError: async (request) => {\n\t\t\tconst span = getSpanFromEvent(request.event);\n\t\t\tif (!span) {\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tconst error = request.error;\n\t\t\tconst response = request.response;\n\n\t\t\t// Determine status code from response or error\n\t\t\tlet statusCode = 500;\n\t\t\tif (response?.statusCode) {\n\t\t\t\tstatusCode = response.statusCode;\n\t\t\t} else if (error && 'statusCode' in error) {\n\t\t\t\tstatusCode = (error as any).statusCode;\n\t\t\t}\n\n\t\t\tendHttpSpan(\n\t\t\t\tspan,\n\t\t\t\t{ statusCode },\n\t\t\t\terror instanceof Error ? error : new Error(String(error)),\n\t\t\t);\n\t\t},\n\t};\n}\n\n/**\n * Build span attributes from Lambda event\n */\nfunction buildSpanAttributes(\n\tevent: any,\n\tlambdaContext: LambdaContext,\n\toptions: TelemetryMiddlewareOptions,\n): HttpSpanAttributes {\n\t// Detect event type (API Gateway v1, v2, ALB, or direct invoke)\n\tconst isV2 =\n\t\t'requestContext' in event && 'http' in (event.requestContext || {});\n\tconst isV1 =\n\t\t'requestContext' in event &&\n\t\t'httpMethod' in event &&\n\t\t!('http' in (event.requestContext || {}));\n\n\tlet method = 'INVOKE';\n\tlet path = '/';\n\tlet route: string | undefined;\n\tlet host: string | undefined;\n\tlet scheme: 'http' | 'https' | undefined;\n\tlet userAgent: string | undefined;\n\tlet clientIp: string | undefined;\n\tlet requestId: string | undefined;\n\n\tif (isV2) {\n\t\t// API Gateway v2 (HTTP API)\n\t\tconst http = event.requestContext.http;\n\t\tmethod = http.method;\n\t\tpath = event.rawPath || http.path;\n\t\troute = event.routeKey?.replace(/^[A-Z]+\\s+/, ''); // Remove HTTP method prefix\n\t\thost = event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = http.userAgent;\n\t\tclientIp = http.sourceIp;\n\t\trequestId = event.requestContext.requestId;\n\t} else if (isV1) {\n\t\t// API Gateway v1 (REST API)\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\troute = event.resource;\n\t\thost = event.headers?.Host || event.headers?.host;\n\t\tscheme = 'https';\n\t\tuserAgent = event.headers?.['User-Agent'] || event.headers?.['user-agent'];\n\t\tclientIp = event.requestContext?.identity?.sourceIp;\n\t\trequestId = event.requestContext?.requestId;\n\t} else if ('httpMethod' in event) {\n\t\t// ALB event\n\t\tmethod = event.httpMethod;\n\t\tpath = event.path;\n\t\thost = event.headers?.host;\n\t\tuserAgent = event.headers?.['user-agent'] || event.headers?.['User-Agent'];\n\t\tclientIp = event.headers?.['x-forwarded-for']?.split(',')[0]?.trim();\n\t}\n\n\tconst attrs: HttpSpanAttributes = {\n\t\tmethod,\n\t\tpath,\n\t\troute,\n\t\thost,\n\t\tscheme,\n\t\tuserAgent,\n\t\tclientIp,\n\t\trequestId: requestId || lambdaContext.awsRequestId,\n\t};\n\n\t// Add endpoint metadata if extractors provided\n\tif (options.getEndpointName || options.getOperationId) {\n\t\tattrs.endpoint = {\n\t\t\tname: options.getEndpointName?.(event),\n\t\t\toperationId: options.getOperationId?.(event),\n\t\t};\n\t}\n\n\t// Add user metadata if extractor provided\n\tif (options.getUserId) {\n\t\tconst userId = options.getUserId(event);\n\t\tif (userId) {\n\t\t\tattrs.user = { userId };\n\t\t}\n\t}\n\n\treturn attrs;\n}\n\n/**\n * Normalize headers to lowercase keys\n */\nfunction normalizeHeaders(\n\theaders: Record<string, string | string[] | undefined>,\n): Record<string, string | string[] | undefined> {\n\tconst normalized: Record<string, string | string[] | undefined> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tnormalized[key.toLowerCase()] = value;\n\t}\n\treturn normalized;\n}\n\n/**\n * Run a function within the span context from a Lambda event\n *\n * @example\n * ```typescript\n * await withEventContext(event, async () => {\n *   // Any spans created here will be children of the request span\n *   await doSomething();\n * });\n * ```\n */\nexport async function withEventContext<T>(\n\tevent: any,\n\tfn: () => Promise<T>,\n): Promise<T> {\n\tconst ctx = getContextFromEvent(event);\n\tif (!ctx) {\n\t\treturn fn();\n\t}\n\treturn context.with(ctx, fn);\n}\n"],"mappings":";;;;AAuEA,MAAM,cAAc,OAAO,gBAAgB;AAC3C,MAAM,iBAAiB,OAAO,mBAAmB;;;;AAKjD,SAAgB,iBAAiB,OAA8B;CAC9D,OAAO,QAAQ;AAChB;;;;AAKA,SAAgB,oBAAoB,OAAiB;CACpD,OAAO,QAAQ;AAChB;;;;;;;;;;;;;AAcA,SAAgB,oBACf,UAAsC,CAAC,GACS;CAChD,OAAO;EACN,QAAQ,OAAO,YAAY;GAE1B,IAAI,QAAQ,aAAa,QAAQ,KAAK,GACrC;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,gBAAgB,QAAQ;GAG9B,MAAM,UAAU,iBAAiB,MAAM,WAAW,CAAC,CAAC;GACpD,MAAM,UACL,gBACC,OAAO,QAAQ,WAAW,WAAW,QAAQ,SAAS,KAAA,GACtD,QAAQ,cACT,KAAK,QAAQ,QAAQ,eAAe,KAAK,CAAC;GAC3C,MAAM,EAAE,QAAQ,eAAe,UAAU,qBACxC,SACA,OACD;GAGA,MAAM,QAAQ,oBAAoB,OAAO,eAAe,OAAO;GAG/D,MAAM,OAAO,qBAAqB,OAAO,eAAe,KAAK;GAG7D,MAAM,eAAe;GACrB,MAAM,kBAAkB,MAAM,QAAQ,eAAe,IAAI;GAGzD,KAAK,aAAa,sBAAsB,cAAc,YAAY;GAClE,KAAK,aAAa,aAAa,cAAc,YAAY;GAEzD,IAAI,QAAQ,cAAc,MAAM,MAAM;IACrC,MAAM,UACL,OAAO,MAAM,SAAS,WACnB,MAAM,OACN,KAAK,UAAU,MAAM,IAAI;IAE7B,KAAK,aACJ,qBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;EACD;EAEA,OAAO,OAAO,YAAY;GACzB,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,WAAW,QAAQ;GACzB,MAAM,aACL,OAAO,UAAU,eAAe,WAAW,SAAS,aAAa;GAElE,IAAI,QAAQ,sBAAsB,UAAU,MAAM;IACjD,MAAM,UACL,OAAO,SAAS,SAAS,WACtB,SAAS,OACT,KAAK,UAAU,SAAS,IAAI;IAChC,KAAK,aACJ,sBACA,QAAQ,SAAS,OAAO,GAAG,QAAQ,MAAM,GAAG,IAAI,EAAE,OAAO,OAC1D;GACD;GAEA,YAAY,MAAM,EAAE,WAAW,CAAC;EACjC;EAEA,SAAS,OAAO,YAAY;GAC3B,MAAM,OAAO,iBAAiB,QAAQ,KAAK;GAC3C,IAAI,CAAC,MACJ;GAGD,MAAM,QAAQ,QAAQ;GACtB,MAAM,WAAW,QAAQ;GAGzB,IAAI,aAAa;GACjB,IAAI,UAAU,YACb,aAAa,SAAS;QAChB,IAAI,SAAS,gBAAgB,OACnC,aAAc,MAAc;GAG7B,YACC,MACA,EAAE,WAAW,GACb,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC,CACzD;EACD;CACD;AACD;;;;AAKA,SAAS,oBACR,OACA,eACA,SACqB;CAErB,MAAM,OACL,oBAAoB,SAAS,WAAW,MAAM,kBAAkB,CAAC;CAClE,MAAM,OACL,oBAAoB,SACpB,gBAAgB,SAChB,EAAE,WAAW,MAAM,kBAAkB,CAAC;CAEvC,IAAI,SAAS;CACb,IAAI,OAAO;CACX,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CACJ,IAAI;CAEJ,IAAI,MAAM;EAET,MAAM,OAAO,MAAM,eAAe;EAClC,SAAS,KAAK;EACd,OAAO,MAAM,WAAW,KAAK;EAC7B,QAAQ,MAAM,UAAU,QAAQ,cAAc,EAAE;EAChD,OAAO,MAAM,SAAS;EACtB,SAAS;EACT,YAAY,KAAK;EACjB,WAAW,KAAK;EAChB,YAAY,MAAM,eAAe;CAClC,OAAO,IAAI,MAAM;EAEhB,SAAS,MAAM;EACf,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,OAAO,MAAM,SAAS,QAAQ,MAAM,SAAS;EAC7C,SAAS;EACT,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,gBAAgB,UAAU;EAC3C,YAAY,MAAM,gBAAgB;CACnC,OAAO,IAAI,gBAAgB,OAAO;EAEjC,SAAS,MAAM;EACf,OAAO,MAAM;EACb,OAAO,MAAM,SAAS;EACtB,YAAY,MAAM,UAAU,iBAAiB,MAAM,UAAU;EAC7D,WAAW,MAAM,UAAU,kBAAkB,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,EAAE,KAAK;CACpE;CAEA,MAAM,QAA4B;EACjC;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW,aAAa,cAAc;CACvC;CAGA,IAAI,QAAQ,mBAAmB,QAAQ,gBACtC,MAAM,WAAW;EAChB,MAAM,QAAQ,kBAAkB,KAAK;EACrC,aAAa,QAAQ,iBAAiB,KAAK;CAC5C;CAID,IAAI,QAAQ,WAAW;EACtB,MAAM,SAAS,QAAQ,UAAU,KAAK;EACtC,IAAI,QACH,MAAM,OAAO,EAAE,OAAO;CAExB;CAEA,OAAO;AACR;;;;AAKA,SAAS,iBACR,SACgD;CAChD,MAAM,aAA4D,CAAC;CACnE,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAChD,WAAW,IAAI,YAAY,KAAK;CAEjC,OAAO;AACR;;;;;;;;;;;;AAaA,eAAsB,iBACrB,OACA,IACa;CACb,MAAM,MAAM,oBAAoB,KAAK;CACrC,IAAI,CAAC,KACJ,OAAO,GAAG;CAEX,OAAO,QAAQ,KAAK,KAAK,EAAE;AAC5B"}

package/dist/instrumentation/sampler.cjs

@@ -0,0 +1,54 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+let _opentelemetry_sdk_trace_base = require("@opentelemetry/sdk-trace-base");
+//#region src/instrumentation/sampler.ts
+/**
+* The sampler a service uses at `ratio`: parent-based, with the ratio as a cap
+* on what a remote caller asks for.
+*
+* `parentbased_traceidratio` follows a remote parent's sampled flag as it is.
+* Between services that is how a trace stays whole — but the flag on a
+* request from a browser is the caller's to set, and following it would let
+* any page force 100% tracing on a stage that keeps 10%. So:
+*
+* | parent                    | decision                              |
+* |---------------------------|---------------------------------------|
+* | none (a new trace)        | the ratio, from the trace id          |
+* | remote, sampled           | the ratio again: the flag is a request |
+* | remote, not sampled       | not sampled: a caller may only ask for less |
+* | local (this process)      | the parent's decision                 |
+*
+* The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from
+* the trace id alone, so every service at the same rate — and the generated
+* API client, which applies the same rule to the page view's trace id — makes
+* the same decision for the same trace: a trace sampled where it started is
+* sampled at every hop.
+*/
+function traceSampler(ratio) {
+	const capped = new _opentelemetry_sdk_trace_base.TraceIdRatioBasedSampler(ratio);
+	return new _opentelemetry_sdk_trace_base.ParentBasedSampler({
+		root: capped,
+		remoteParentSampled: capped
+	});
+}
+/**
+* {@link traceSampler} at the rate the standard variables name, when they ask
+* for `parentbased_traceidratio` — which is what a deploy sets for a stage's
+* sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.
+*
+* Undefined otherwise, and for an argument that is not a rate from 0 to 1:
+* the SDK then reads the variables itself, as it would without this, and
+* reports a bad argument the way it always has — a sampling setting is not a
+* reason for a server not to start.
+*/
+function traceSamplerFromEnv(env = process.env) {
+	if (env.OTEL_TRACES_SAMPLER?.trim() !== "parentbased_traceidratio") return;
+	const arg = env.OTEL_TRACES_SAMPLER_ARG?.trim();
+	const ratio = arg ? Number(arg) : 1;
+	if (!Number.isFinite(ratio) || ratio < 0 || ratio > 1) return void 0;
+	return traceSampler(ratio);
+}
+//#endregion
+exports.traceSampler = traceSampler;
+exports.traceSamplerFromEnv = traceSamplerFromEnv;
+
+//# sourceMappingURL=sampler.cjs.map

package/dist/instrumentation/sampler.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.cjs","names":["TraceIdRatioBasedSampler","ParentBasedSampler"],"sources":["../../src/instrumentation/sampler.ts"],"sourcesContent":["import {\n\tParentBasedSampler,\n\ttype Sampler,\n\tTraceIdRatioBasedSampler,\n} from '@opentelemetry/sdk-trace-base';\n\n/**\n * The sampler a service uses at `ratio`: parent-based, with the ratio as a cap\n * on what a remote caller asks for.\n *\n * `parentbased_traceidratio` follows a remote parent's sampled flag as it is.\n * Between services that is how a trace stays whole — but the flag on a\n * request from a browser is the caller's to set, and following it would let\n * any page force 100% tracing on a stage that keeps 10%. So:\n *\n * | parent                    | decision                              |\n * |---------------------------|---------------------------------------|\n * | none (a new trace)        | the ratio, from the trace id          |\n * | remote, sampled           | the ratio again: the flag is a request |\n * | remote, not sampled       | not sampled: a caller may only ask for less |\n * | local (this process)      | the parent's decision                 |\n *\n * The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from\n * the trace id alone, so every service at the same rate — and the generated\n * API client, which applies the same rule to the page view's trace id — makes\n * the same decision for the same trace: a trace sampled where it started is\n * sampled at every hop.\n */\nexport function traceSampler(ratio: number): Sampler {\n\tconst capped = new TraceIdRatioBasedSampler(ratio);\n\treturn new ParentBasedSampler({\n\t\troot: capped,\n\t\tremoteParentSampled: capped,\n\t});\n}\n\n/**\n * {@link traceSampler} at the rate the standard variables name, when they ask\n * for `parentbased_traceidratio` — which is what a deploy sets for a stage's\n * sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.\n *\n * Undefined otherwise, and for an argument that is not a rate from 0 to 1:\n * the SDK then reads the variables itself, as it would without this, and\n * reports a bad argument the way it always has — a sampling setting is not a\n * reason for a server not to start.\n */\nexport function traceSamplerFromEnv(\n\tenv: Record<string, string | undefined> = process.env,\n): Sampler | undefined {\n\tif (env.OTEL_TRACES_SAMPLER?.trim() !== 'parentbased_traceidratio') {\n\t\treturn undefined;\n\t}\n\tconst arg = env.OTEL_TRACES_SAMPLER_ARG?.trim();\n\tconst ratio = arg ? Number(arg) : 1;\n\tif (!Number.isFinite(ratio) || ratio < 0 || ratio > 1) return undefined;\n\treturn traceSampler(ratio);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,aAAa,OAAwB;CACpD,MAAM,SAAS,IAAIA,8BAAAA,yBAAyB,KAAK;CACjD,OAAO,IAAIC,8BAAAA,mBAAmB;EAC7B,MAAM;EACN,qBAAqB;CACtB,CAAC;AACF;;;;;;;;;;;AAYA,SAAgB,oBACf,MAA0C,QAAQ,KAC5B;CACtB,IAAI,IAAI,qBAAqB,KAAK,MAAM,4BACvC;CAED,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,MAAM,QAAQ,MAAM,OAAO,GAAG,IAAI;CAClC,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG,OAAO,KAAA;CAC9D,OAAO,aAAa,KAAK;AAC1B"}

package/dist/instrumentation/sampler.d.cts

@@ -0,0 +1,38 @@
+import { Sampler } from "@opentelemetry/sdk-trace-base";
+//#region src/instrumentation/sampler.d.ts
+/**
+ * The sampler a service uses at `ratio`: parent-based, with the ratio as a cap
+ * on what a remote caller asks for.
+ *
+ * `parentbased_traceidratio` follows a remote parent's sampled flag as it is.
+ * Between services that is how a trace stays whole — but the flag on a
+ * request from a browser is the caller's to set, and following it would let
+ * any page force 100% tracing on a stage that keeps 10%. So:
+ *
+ * | parent                    | decision                              |
+ * |---------------------------|---------------------------------------|
+ * | none (a new trace)        | the ratio, from the trace id          |
+ * | remote, sampled           | the ratio again: the flag is a request |
+ * | remote, not sampled       | not sampled: a caller may only ask for less |
+ * | local (this process)      | the parent's decision                 |
+ *
+ * The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from
+ * the trace id alone, so every service at the same rate — and the generated
+ * API client, which applies the same rule to the page view's trace id — makes
+ * the same decision for the same trace: a trace sampled where it started is
+ * sampled at every hop.
+ */
+export declare function traceSampler(ratio: number): Sampler;
+/**
+ * {@link traceSampler} at the rate the standard variables name, when they ask
+ * for `parentbased_traceidratio` — which is what a deploy sets for a stage's
+ * sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.
+ *
+ * Undefined otherwise, and for an argument that is not a rate from 0 to 1:
+ * the SDK then reads the variables itself, as it would without this, and
+ * reports a bad argument the way it always has — a sampling setting is not a
+ * reason for a server not to start.
+ */
+export declare function traceSamplerFromEnv(env?: Record<string, string | undefined>): Sampler | undefined;
+//#endregion
+//# sourceMappingURL=sampler.d.cts.map

package/dist/instrumentation/sampler.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.cts","names":[],"sources":["../../src/instrumentation/sampler.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;wBA4BgB,aAAa,gBAAgB;;;;;;;;;;;wBAkB7B,oBACf,MAAK,qCACH"}

package/dist/instrumentation/sampler.d.mts

@@ -0,0 +1,38 @@
+import { Sampler } from "@opentelemetry/sdk-trace-base";
+//#region src/instrumentation/sampler.d.ts
+/**
+ * The sampler a service uses at `ratio`: parent-based, with the ratio as a cap
+ * on what a remote caller asks for.
+ *
+ * `parentbased_traceidratio` follows a remote parent's sampled flag as it is.
+ * Between services that is how a trace stays whole — but the flag on a
+ * request from a browser is the caller's to set, and following it would let
+ * any page force 100% tracing on a stage that keeps 10%. So:
+ *
+ * | parent                    | decision                              |
+ * |---------------------------|---------------------------------------|
+ * | none (a new trace)        | the ratio, from the trace id          |
+ * | remote, sampled           | the ratio again: the flag is a request |
+ * | remote, not sampled       | not sampled: a caller may only ask for less |
+ * | local (this process)      | the parent's decision                 |
+ *
+ * The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from
+ * the trace id alone, so every service at the same rate — and the generated
+ * API client, which applies the same rule to the page view's trace id — makes
+ * the same decision for the same trace: a trace sampled where it started is
+ * sampled at every hop.
+ */
+export declare function traceSampler(ratio: number): Sampler;
+/**
+ * {@link traceSampler} at the rate the standard variables name, when they ask
+ * for `parentbased_traceidratio` — which is what a deploy sets for a stage's
+ * sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.
+ *
+ * Undefined otherwise, and for an argument that is not a rate from 0 to 1:
+ * the SDK then reads the variables itself, as it would without this, and
+ * reports a bad argument the way it always has — a sampling setting is not a
+ * reason for a server not to start.
+ */
+export declare function traceSamplerFromEnv(env?: Record<string, string | undefined>): Sampler | undefined;
+//#endregion
+//# sourceMappingURL=sampler.d.mts.map

package/dist/instrumentation/sampler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.mts","names":[],"sources":["../../src/instrumentation/sampler.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;wBA4BgB,aAAa,gBAAgB;;;;;;;;;;;wBAkB7B,oBACf,MAAK,qCACH"}

package/dist/instrumentation/sampler.mjs

@@ -0,0 +1,52 @@
+import { ParentBasedSampler, TraceIdRatioBasedSampler } from "@opentelemetry/sdk-trace-base";
+//#region src/instrumentation/sampler.ts
+/**
+* The sampler a service uses at `ratio`: parent-based, with the ratio as a cap
+* on what a remote caller asks for.
+*
+* `parentbased_traceidratio` follows a remote parent's sampled flag as it is.
+* Between services that is how a trace stays whole — but the flag on a
+* request from a browser is the caller's to set, and following it would let
+* any page force 100% tracing on a stage that keeps 10%. So:
+*
+* | parent                    | decision                              |
+* |---------------------------|---------------------------------------|
+* | none (a new trace)        | the ratio, from the trace id          |
+* | remote, sampled           | the ratio again: the flag is a request |
+* | remote, not sampled       | not sampled: a caller may only ask for less |
+* | local (this process)      | the parent's decision                 |
+*
+* The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from
+* the trace id alone, so every service at the same rate — and the generated
+* API client, which applies the same rule to the page view's trace id — makes
+* the same decision for the same trace: a trace sampled where it started is
+* sampled at every hop.
+*/
+function traceSampler(ratio) {
+	const capped = new TraceIdRatioBasedSampler(ratio);
+	return new ParentBasedSampler({
+		root: capped,
+		remoteParentSampled: capped
+	});
+}
+/**
+* {@link traceSampler} at the rate the standard variables name, when they ask
+* for `parentbased_traceidratio` — which is what a deploy sets for a stage's
+* sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.
+*
+* Undefined otherwise, and for an argument that is not a rate from 0 to 1:
+* the SDK then reads the variables itself, as it would without this, and
+* reports a bad argument the way it always has — a sampling setting is not a
+* reason for a server not to start.
+*/
+function traceSamplerFromEnv(env = process.env) {
+	if (env.OTEL_TRACES_SAMPLER?.trim() !== "parentbased_traceidratio") return;
+	const arg = env.OTEL_TRACES_SAMPLER_ARG?.trim();
+	const ratio = arg ? Number(arg) : 1;
+	if (!Number.isFinite(ratio) || ratio < 0 || ratio > 1) return void 0;
+	return traceSampler(ratio);
+}
+//#endregion
+export { traceSampler, traceSamplerFromEnv };
+
+//# sourceMappingURL=sampler.mjs.map

package/dist/instrumentation/sampler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.mjs","names":[],"sources":["../../src/instrumentation/sampler.ts"],"sourcesContent":["import {\n\tParentBasedSampler,\n\ttype Sampler,\n\tTraceIdRatioBasedSampler,\n} from '@opentelemetry/sdk-trace-base';\n\n/**\n * The sampler a service uses at `ratio`: parent-based, with the ratio as a cap\n * on what a remote caller asks for.\n *\n * `parentbased_traceidratio` follows a remote parent's sampled flag as it is.\n * Between services that is how a trace stays whole — but the flag on a\n * request from a browser is the caller's to set, and following it would let\n * any page force 100% tracing on a stage that keeps 10%. So:\n *\n * | parent                    | decision                              |\n * |---------------------------|---------------------------------------|\n * | none (a new trace)        | the ratio, from the trace id          |\n * | remote, sampled           | the ratio again: the flag is a request |\n * | remote, not sampled       | not sampled: a caller may only ask for less |\n * | local (this process)      | the parent's decision                 |\n *\n * The cap costs a whole trace nothing. `TraceIdRatioBasedSampler` decides from\n * the trace id alone, so every service at the same rate — and the generated\n * API client, which applies the same rule to the page view's trace id — makes\n * the same decision for the same trace: a trace sampled where it started is\n * sampled at every hop.\n */\nexport function traceSampler(ratio: number): Sampler {\n\tconst capped = new TraceIdRatioBasedSampler(ratio);\n\treturn new ParentBasedSampler({\n\t\troot: capped,\n\t\tremoteParentSampled: capped,\n\t});\n}\n\n/**\n * {@link traceSampler} at the rate the standard variables name, when they ask\n * for `parentbased_traceidratio` — which is what a deploy sets for a stage's\n * sample rate. `OTEL_TRACES_SAMPLER_ARG` is the rate, 1 when absent.\n *\n * Undefined otherwise, and for an argument that is not a rate from 0 to 1:\n * the SDK then reads the variables itself, as it would without this, and\n * reports a bad argument the way it always has — a sampling setting is not a\n * reason for a server not to start.\n */\nexport function traceSamplerFromEnv(\n\tenv: Record<string, string | undefined> = process.env,\n): Sampler | undefined {\n\tif (env.OTEL_TRACES_SAMPLER?.trim() !== 'parentbased_traceidratio') {\n\t\treturn undefined;\n\t}\n\tconst arg = env.OTEL_TRACES_SAMPLER_ARG?.trim();\n\tconst ratio = arg ? Number(arg) : 1;\n\tif (!Number.isFinite(ratio) || ratio < 0 || ratio > 1) return undefined;\n\treturn traceSampler(ratio);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AA4BA,SAAgB,aAAa,OAAwB;CACpD,MAAM,SAAS,IAAI,yBAAyB,KAAK;CACjD,OAAO,IAAI,mBAAmB;EAC7B,MAAM;EACN,qBAAqB;CACtB,CAAC;AACF;;;;;;;;;;;AAYA,SAAgB,oBACf,MAA0C,QAAQ,KAC5B;CACtB,IAAI,IAAI,qBAAqB,KAAK,MAAM,4BACvC;CAED,MAAM,MAAM,IAAI,yBAAyB,KAAK;CAC9C,MAAM,QAAQ,MAAM,OAAO,GAAG,IAAI;CAClC,IAAI,CAAC,OAAO,SAAS,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG,OAAO,KAAA;CAC9D,OAAO,aAAa,KAAK;AAC1B"}

package/dist/instrumentation/setup.cjs

@@ -1,5 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_instrumentation_core = require("./core.cjs");
+const require_instrumentation_sampler = require("./sampler.cjs");
 let _opentelemetry_api = require("@opentelemetry/api");
 let _opentelemetry_auto_instrumentations_node = require("@opentelemetry/auto-instrumentations-node");
 let _opentelemetry_exporter_logs_otlp_http = require("@opentelemetry/exporter-logs-otlp-http");
@@ -27,13 +28,14 @@ function otlpEndpointFromEnv(signal) {
 	return Boolean(process.env[`OTEL_EXPORTER_OTLP_${signal}_ENDPOINT`] || process.env.OTEL_EXPORTER_OTLP_ENDPOINT);
 }
 /**
-* The sampler for an explicit ratio, or undefined to let the SDK read
-* `OTEL_TRACES_SAMPLER` / `OTEL_TRACES_SAMPLER_ARG`.
+* The sampler for an explicit ratio, or for the stage's rate in
+* `OTEL_TRACES_SAMPLER_ARG` — or undefined to let the SDK read any other
+* `OTEL_TRACES_SAMPLER` itself.
 */
 function samplerFor(sampleRatio) {
-	if (sampleRatio === void 0) return void 0;
+	if (sampleRatio === void 0) return require_instrumentation_sampler.traceSamplerFromEnv();
 	if (!Number.isFinite(sampleRatio) || sampleRatio < 0 || sampleRatio > 1) throw new InvalidSampleRatio(sampleRatio);
-	return new _opentelemetry_sdk_trace_node.ParentBasedSampler({ root: new _opentelemetry_sdk_trace_node.TraceIdRatioBasedSampler(sampleRatio) });
+	return require_instrumentation_sampler.traceSampler(sampleRatio);
 }
 /**
 * Set up OpenTelemetry instrumentation.