@generazioneai/telemetry 0.0.0-stage → 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,8 @@
+# Changelog — @generazioneai/telemetry
+
+## 0.1.0 — 2026-10-25
+Prima versione (treno 3+4, O1; ADR-013, spec «Fondamenta enterprise» §5.2, decisioni 31, 32, 35).
+- `@generazioneai/telemetry/register`: SDK OpenTelemetry Node (tracce e metriche OTLP/HTTP; HTTP, pg, ioredis, Prisma), spento di serie (`TELEMETRY_MODE=off`).
+- `TelemetryModule.forRoot({ service })`: interceptor `nats.server <cmd>`, hook `traceparent` per `setNatsHeadersHook` di authz ≥ 0.7 (opzionale), spegnimento.
+- `@generazioneai/telemetry/logger`: `JsonLogger` (`level`, `ts`, `service`, `msg`, `trace_id`, `span_id`, `cmd`, `juridicalId`), `createLogger` (`LOG_FORMAT`).
+- Attributi a lista bianca, esportatore che ripulisce gli span, redazione di corpi, `Authorization`, cookie, email, nomi, codici fiscali, IBAN, JWT.

package/README.md

@@ -1,3 +1,45 @@
-# Temporary Holding Version
+# @generazioneai/telemetry
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Osservabilità comune dei servizi Node (ADR-013, spec «Fondamenta enterprise» §5): tracce e metriche OpenTelemetry verso il collector, log JSON con `trace_id`, span dei comandi NATS, nessun dato personale.
+
+```bash
+npm i @generazioneai/telemetry
+```
+
+## Uso
+```ts
+// main.ts — PRIMA riga
+import '@generazioneai/telemetry/register';
+import { createLogger } from '@generazioneai/telemetry/logger';
+
+const app = await NestFactory.create(AppModule, { logger: createLogger('hr') });
+
+// app.module.ts
+TelemetryModule.forRoot({ service: 'hr' })
+```
+
+| Variabile | Valori | Di serie |
+|---|---|---|
+| `TELEMETRY_MODE` | `off` \| `on` | `off`: il processo non carica l'SDK, nessuna connessione |
+| `OTEL_EXPORTER_OTLP_ENDPOINT` | base OTLP/HTTP | `http://otel-collector.observability:4318`; **vuota = spento** |
+| `OTEL_SERVICE_NAME` | nome | `name` del `package.json` (senza scope) |
+| `SKILLERA_ENV` | | → `deployment.environment` |
+| `LOG_FORMAT` | `text` \| `json` | `text` |
+| `APP_LOGGER_LEVEL` | `log,error,warn,debug,verbose` \| `none` | `log,error,warn` (`fatal` segue `error`) |
+| `TELEMETRY_SAMPLE_RATIO` | 0..1 | `1` (il campionamento in coda è del collector) |
+| `OTEL_METRIC_EXPORT_INTERVAL` | ms | `60000` |
+
+Impostare `OTEL_SERVICE_NAME` nei manifest: `register` parte prima di Nest e non conosce l'opzione `service` del modulo.
+
+## Cosa fa
+- **`/register`**: Node SDK con OTLP/HTTP per tracce e metriche; strumentazioni HTTP (senza `health`/`metrics`), `pg`, `ioredis`, Prisma (le ultime tre opzionali). Nessun gestore di SIGTERM: lo spegnimento ordinato lo fa `TelemetryModule` (o `beforeExit`).
+- **NATS**: l'interceptor globale (solo contesto `rpc`) apre `nats.server <cmd>` (kind consumer) come figlio del `traceparent` negli header, mette `cmd` e `juridicalId` nel contesto dei log, conta `nats_server_requests_total{cmd,outcome}` e `nats_server_request_duration_seconds{cmd}`. `juridicalId` viene dall'header `Gen-Tenant` o da `auth.juridicalId`/`auth.tenantId`/`dto.juridicalId`, solo se è un UUID.
+- **Invio**: `traceparentHeadersHook` scrive `traceparent` negli header. `TelemetryModule.forRoot` lo registra con `setNatsHeadersHook` di `@generazioneai/authz` ≥ 0.7 se c'è (altrimenti nulla); si può passare il modulo con `authz: …` o spegnere con `authz: false`. Per gli eventi di JetStream ci pensa `@generazioneai/events` con `injectTraceContext`/`extractTraceContext`.
+- **Log** (`JsonLogger`): `level`, `ts`, `service`, `msg`, `trace_id`, `span_id`, `cmd`, `juridicalId` (+ `context`, `err`, campi del messaggio-oggetto, mai in conflitto con quelli del contratto).
+- **Dati personali** (decisione 35): gli span escono da `SanitizingSpanExporter`, che tiene solo gli attributi della **lista bianca** (`ALLOWED_ATTRIBUTES`: metodo, rotta come modello, comando, esito, durata, dimensioni, id di azienda UUID, `db.statement` senza letterali, redis solo il comando), stato senza messaggio, IP solo come hash (`client.ip_hash`). `redact()`/`maskString()` (usate dal logger) azzerano i valori di chiavi come `authorization`, `cookie`, `body`, `dto`, `email`, `*name`, `fiscalCode`, `iban`, `password`, `*token` e mascherano nel testo email, codici fiscali (anche omocodici), IBAN, JWT, `Bearer …`.
+
+## Compatibilità delle versioni OpenTelemetry
+Le strumentazioni sono fissate alla famiglia `0.219` con `@opentelemetry/api` 1.9 (la `0.300` richiede api ≥ 1.10, che gli SDK 2.x non accettano ancora). Il servizio **non** deve avere un proprio `@opentelemetry/api` diverso.
+
+## Prove
+`npm test`. La prova dell'SDK acceso gira in un processo Node figlio (le strumentazioni usano `import()` dinamici, che Jest non esegue) e costruisce il pacchetto in `.test-dist/`.

package/dist/attributes.d.ts

@@ -0,0 +1,13 @@
+import type { Attributes } from '@opentelemetry/api';
+/**
+ * Lista bianca degli attributi di un span (decisione 35): metodo, rotta come modello, comando, esito, durata, dimensione,
+ * id di azienda. Tutto il resto cade, anche se un'instrumentation lo scrive (`http.url`, `url.query`, intestazioni,
+ * `exception.message`, `db.query.parameter.*`…).
+ */
+export declare const ALLOWED_ATTRIBUTES: ReadonlySet<string>;
+export declare function hashIp(ip: string, salt?: string): string;
+/** Toglie dal testo SQL stringhe e numeri letterali: restano struttura e segnaposto `$1`. */
+export declare function sanitizeStatement(sql: string): string;
+/** Copia degli attributi con solo quelli ammessi e ripuliti. */
+export declare function sanitizeAttributes(attrs: Attributes | undefined): Attributes;
+//# sourceMappingURL=attributes.d.ts.map

package/dist/attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes.d.ts","sourceRoot":"","sources":["../src/attributes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAkB,MAAM,oBAAoB,CAAC;AAGrE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAgDjD,CAAC;AAMH,wBAAgB,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,SAAsC,GAAG,MAAM,CAErF;AAED,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKrD;AAOD,gEAAgE;AAChE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,UAAU,CA2B5E"}

package/dist/attributes.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ALLOWED_ATTRIBUTES = void 0;
+exports.hashIp = hashIp;
+exports.sanitizeStatement = sanitizeStatement;
+exports.sanitizeAttributes = sanitizeAttributes;
+const crypto_1 = require("crypto");
+const redaction_1 = require("./redaction");
+/**
+ * Lista bianca degli attributi di un span (decisione 35): metodo, rotta come modello, comando, esito, durata, dimensione,
+ * id di azienda. Tutto il resto cade, anche se un'instrumentation lo scrive (`http.url`, `url.query`, intestazioni,
+ * `exception.message`, `db.query.parameter.*`…).
+ */
+exports.ALLOWED_ATTRIBUTES = new Set([
+    'http.request.method',
+    'http.method',
+    'http.route',
+    'http.response.status_code',
+    'http.status_code',
+    'http.request.body.size',
+    'http.response.body.size',
+    'http.request_content_length',
+    'http.response_content_length',
+    'network.protocol.name',
+    'network.protocol.version',
+    'network.transport',
+    'url.scheme',
+    'server.address',
+    'server.port',
+    'net.peer.name',
+    'net.peer.port',
+    'messaging.system',
+    'messaging.operation',
+    'messaging.operation.name',
+    'messaging.operation.type',
+    'messaging.destination.name',
+    'messaging.message.body.size',
+    'rpc.system',
+    'rpc.method',
+    'cmd',
+    'outcome',
+    'error.type',
+    'exception.type',
+    'db.system',
+    'db.system.name',
+    'db.operation',
+    'db.operation.name',
+    'db.namespace',
+    'db.name',
+    'db.sql.table',
+    'db.collection.name',
+    'db.statement',
+    'db.query.text',
+    'db.redis.database_index',
+    'duration_ms',
+    'size_bytes',
+    'juridicalId',
+    'gen.juridical_id',
+    'job',
+    'consumer',
+    'event.subject',
+]);
+const IP_KEYS = new Set(['client.address', 'net.sock.peer.addr', 'net.peer.ip', 'http.client_ip', 'net.sock.host.addr']);
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const ID_KEYS = new Set(['juridicalId', 'gen.juridical_id']);
+function hashIp(ip, salt = process.env.TELEMETRY_IP_SALT ?? '') {
+    return (0, crypto_1.createHash)('sha256').update(`${salt}${ip}`).digest('hex').slice(0, 16);
+}
+/** Toglie dal testo SQL stringhe e numeri letterali: restano struttura e segnaposto `$1`. */
+function sanitizeStatement(sql) {
+    return sql
+        .replace(/'(?:[^']|'')*'/g, '?')
+        .replace(/(?<![\w$])\d+(?:\.\d+)?(?![\w$])/g, '?')
+        .slice(0, 1000);
+}
+function scalar(value) {
+    if (value === undefined || value === null || Array.isArray(value))
+        return undefined;
+    return value;
+}
+/** Copia degli attributi con solo quelli ammessi e ripuliti. */
+function sanitizeAttributes(attrs) {
+    const out = {};
+    if (!attrs)
+        return out;
+    for (const [key, raw] of Object.entries(attrs)) {
+        const value = scalar(raw);
+        if (value === undefined)
+            continue;
+        if (IP_KEYS.has(key)) {
+            if (typeof value === 'string')
+                out['client.ip_hash'] = hashIp(value);
+            continue;
+        }
+        if (!exports.ALLOWED_ATTRIBUTES.has(key))
+            continue;
+        if (ID_KEYS.has(key)) {
+            if (typeof value === 'string' && UUID.test(value))
+                out[key] = value;
+            continue;
+        }
+        if (typeof value !== 'string') {
+            out[key] = value;
+            continue;
+        }
+        if (key === 'db.statement' || key === 'db.query.text') {
+            // Redis: solo il comando, mai chiavi e valori.
+            out[key] = attrs['db.system'] === 'redis' || attrs['db.system.name'] === 'redis' ? value.split(/\s+/)[0] : (0, redaction_1.maskString)(sanitizeStatement(value));
+            continue;
+        }
+        out[key] = (0, redaction_1.maskString)(value);
+    }
+    return out;
+}
+//# sourceMappingURL=attributes.js.map

package/dist/attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attributes.js","sourceRoot":"","sources":["../src/attributes.ts"],"names":[],"mappings":";;;AA+DA,wBAEC;AAGD,8CAKC;AAQD,gDA2BC;AA5GD,mCAAoC;AAEpC,2CAAyC;AAEzC;;;;GAIG;AACU,QAAA,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,qBAAqB;IACrB,aAAa;IACb,YAAY;IACZ,2BAA2B;IAC3B,kBAAkB;IAClB,wBAAwB;IACxB,yBAAyB;IACzB,6BAA6B;IAC7B,8BAA8B;IAC9B,uBAAuB;IACvB,0BAA0B;IAC1B,mBAAmB;IACnB,YAAY;IACZ,gBAAgB;IAChB,aAAa;IACb,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,qBAAqB;IACrB,0BAA0B;IAC1B,0BAA0B;IAC1B,4BAA4B;IAC5B,6BAA6B;IAC7B,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,SAAS;IACT,YAAY;IACZ,gBAAgB;IAChB,WAAW;IACX,gBAAgB;IAChB,cAAc;IACd,mBAAmB;IACnB,cAAc;IACd,SAAS;IACT,cAAc;IACd,oBAAoB;IACpB,cAAc;IACd,eAAe;IACf,yBAAyB;IACzB,aAAa;IACb,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,KAAK;IACL,UAAU;IACV,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,EAAE,aAAa,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAAC;AACzH,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAC/E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAE7D,SAAgB,MAAM,CAAC,EAAU,EAAE,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE;IAC3E,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,6FAA6F;AAC7F,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG;SACP,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC;SAC/B,OAAO,CAAC,mCAAmC,EAAE,GAAG,CAAC;SACjD,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,MAAM,CAAC,KAAiC;IAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACpF,OAAO,KAAkC,CAAC;AAC5C,CAAC;AAED,gEAAgE;AAChE,SAAgB,kBAAkB,CAAC,KAA6B;IAC9D,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IACvB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,KAAK,KAAK,SAAS;YAAE,SAAS;QAClC,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,GAAG,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,SAAS;QACX,CAAC;QACD,IAAI,CAAC,0BAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpE,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;YACtD,+CAA+C;YAC/C,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,OAAO,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,sBAAU,EAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;YAChJ,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,IAAA,sBAAU,EAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/config.d.ts

@@ -0,0 +1,20 @@
+export declare const DEFAULT_OTLP_ENDPOINT = "http://otel-collector.observability:4318";
+export interface TelemetryConfig {
+    enabled: boolean;
+    endpoint: string;
+    serviceName: string;
+    environment?: string;
+    serviceVersion?: string;
+    sampleRatio: number;
+    metricIntervalMs: number;
+}
+/**
+ * - `TELEMETRY_MODE=on` accende (di serie `off`: il processo non carica nulla, non apre connessioni);
+ * - `OTEL_EXPORTER_OTLP_ENDPOINT`: base OTLP/HTTP (di serie quella del collector nel cluster); **vuota = spento**;
+ * - `OTEL_SERVICE_NAME`, altrimenti il `name` del `package.json` del processo;
+ * - `SKILLERA_ENV` → `deployment.environment`;
+ * - `TELEMETRY_SAMPLE_RATIO` (0..1, di serie 1: il campionamento in coda lo fa il collector);
+ * - `OTEL_METRIC_EXPORT_INTERVAL` (ms, di serie 60000).
+ */
+export declare function readConfig(env?: NodeJS.ProcessEnv): TelemetryConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,qBAAqB,6CAA6C,CAAC;AAEhF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAWD;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,CAahF"}

package/dist/config.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_OTLP_ENDPOINT = void 0;
+exports.readConfig = readConfig;
+const fs_1 = require("fs");
+const path_1 = require("path");
+exports.DEFAULT_OTLP_ENDPOINT = 'http://otel-collector.observability:4318';
+function packageName() {
+    try {
+        const name = JSON.parse((0, fs_1.readFileSync)((0, path_1.join)(process.cwd(), 'package.json'), 'utf8')).name;
+        return name?.replace(/^@[^/]+\//, '');
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * - `TELEMETRY_MODE=on` accende (di serie `off`: il processo non carica nulla, non apre connessioni);
+ * - `OTEL_EXPORTER_OTLP_ENDPOINT`: base OTLP/HTTP (di serie quella del collector nel cluster); **vuota = spento**;
+ * - `OTEL_SERVICE_NAME`, altrimenti il `name` del `package.json` del processo;
+ * - `SKILLERA_ENV` → `deployment.environment`;
+ * - `TELEMETRY_SAMPLE_RATIO` (0..1, di serie 1: il campionamento in coda lo fa il collector);
+ * - `OTEL_METRIC_EXPORT_INTERVAL` (ms, di serie 60000).
+ */
+function readConfig(env = process.env) {
+    const rawEndpoint = env.OTEL_EXPORTER_OTLP_ENDPOINT;
+    const endpoint = (rawEndpoint === undefined ? exports.DEFAULT_OTLP_ENDPOINT : rawEndpoint).trim().replace(/\/+$/, '');
+    const ratio = Number(env.TELEMETRY_SAMPLE_RATIO ?? '1');
+    return {
+        enabled: (env.TELEMETRY_MODE ?? 'off').toLowerCase() === 'on' && endpoint !== '',
+        endpoint,
+        serviceName: env.OTEL_SERVICE_NAME?.trim() || packageName() || 'unknown-service',
+        environment: env.SKILLERA_ENV,
+        serviceVersion: env.npm_package_version,
+        sampleRatio: Number.isFinite(ratio) ? Math.min(1, Math.max(0, ratio)) : 1,
+        metricIntervalMs: Number(env.OTEL_METRIC_EXPORT_INTERVAL) > 0 ? Number(env.OTEL_METRIC_EXPORT_INTERVAL) : 60_000,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;AAgCA,gCAaC;AA7CD,2BAAkC;AAClC,+BAA4B;AAEf,QAAA,qBAAqB,GAAG,0CAA0C,CAAC;AAYhF,SAAS,WAAW;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAA0B,CAAC;QAC9G,OAAO,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,2BAA2B,CAAC;IACpD,MAAM,QAAQ,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,6BAAqB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9G,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,IAAI,GAAG,CAAC,CAAC;IACxD,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,IAAI,IAAI,QAAQ,KAAK,EAAE;QAChF,QAAQ;QACR,WAAW,EAAE,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,WAAW,EAAE,IAAI,iBAAiB;QAChF,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,cAAc,EAAE,GAAG,CAAC,mBAAmB;QACvC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,gBAAgB,EAAE,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,MAAM;KACjH,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,16 @@
+export { TelemetryModule, TelemetryService, TELEMETRY_OPTIONS } from './telemetry.module';
+export type { TelemetryModuleOptions } from './telemetry.module';
+export { NatsTelemetryInterceptor, resolveCmd, pickJuridicalId } from './nats.interceptor';
+export { injectTraceContext, extractTraceContext, traceparentHeadersHook } from './propagation';
+export type { NatsHeadersHook, HeadersLike, ReadableHeadersLike } from './propagation';
+export { redact, maskString, isSensitiveKey, REDACTED } from './redaction';
+export { sanitizeAttributes, sanitizeStatement, ALLOWED_ATTRIBUTES, hashIp } from './attributes';
+export { SanitizingSpanExporter, sanitizeSpan } from './sanitizing-exporter';
+export { runWithLogContext, getLogContext } from './log-context';
+export type { LogContext } from './log-context';
+export { startTelemetry, shutdownTelemetry, getTelemetry } from './sdk';
+export type { TelemetryHandle } from './sdk';
+export { readConfig, DEFAULT_OTLP_ENDPOINT } from './config';
+export type { TelemetryConfig } from './config';
+export { JsonLogger, createLogger, parseLogLevels } from './logger';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAChG,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACvF,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AACxE,YAAY,EAAE,eAAe,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseLogLevels = exports.createLogger = exports.JsonLogger = exports.DEFAULT_OTLP_ENDPOINT = exports.readConfig = exports.getTelemetry = exports.shutdownTelemetry = exports.startTelemetry = exports.getLogContext = exports.runWithLogContext = exports.sanitizeSpan = exports.SanitizingSpanExporter = exports.hashIp = exports.ALLOWED_ATTRIBUTES = exports.sanitizeStatement = exports.sanitizeAttributes = exports.REDACTED = exports.isSensitiveKey = exports.maskString = exports.redact = exports.traceparentHeadersHook = exports.extractTraceContext = exports.injectTraceContext = exports.pickJuridicalId = exports.resolveCmd = exports.NatsTelemetryInterceptor = exports.TELEMETRY_OPTIONS = exports.TelemetryService = exports.TelemetryModule = void 0;
+var telemetry_module_1 = require("./telemetry.module");
+Object.defineProperty(exports, "TelemetryModule", { enumerable: true, get: function () { return telemetry_module_1.TelemetryModule; } });
+Object.defineProperty(exports, "TelemetryService", { enumerable: true, get: function () { return telemetry_module_1.TelemetryService; } });
+Object.defineProperty(exports, "TELEMETRY_OPTIONS", { enumerable: true, get: function () { return telemetry_module_1.TELEMETRY_OPTIONS; } });
+var nats_interceptor_1 = require("./nats.interceptor");
+Object.defineProperty(exports, "NatsTelemetryInterceptor", { enumerable: true, get: function () { return nats_interceptor_1.NatsTelemetryInterceptor; } });
+Object.defineProperty(exports, "resolveCmd", { enumerable: true, get: function () { return nats_interceptor_1.resolveCmd; } });
+Object.defineProperty(exports, "pickJuridicalId", { enumerable: true, get: function () { return nats_interceptor_1.pickJuridicalId; } });
+var propagation_1 = require("./propagation");
+Object.defineProperty(exports, "injectTraceContext", { enumerable: true, get: function () { return propagation_1.injectTraceContext; } });
+Object.defineProperty(exports, "extractTraceContext", { enumerable: true, get: function () { return propagation_1.extractTraceContext; } });
+Object.defineProperty(exports, "traceparentHeadersHook", { enumerable: true, get: function () { return propagation_1.traceparentHeadersHook; } });
+var redaction_1 = require("./redaction");
+Object.defineProperty(exports, "redact", { enumerable: true, get: function () { return redaction_1.redact; } });
+Object.defineProperty(exports, "maskString", { enumerable: true, get: function () { return redaction_1.maskString; } });
+Object.defineProperty(exports, "isSensitiveKey", { enumerable: true, get: function () { return redaction_1.isSensitiveKey; } });
+Object.defineProperty(exports, "REDACTED", { enumerable: true, get: function () { return redaction_1.REDACTED; } });
+var attributes_1 = require("./attributes");
+Object.defineProperty(exports, "sanitizeAttributes", { enumerable: true, get: function () { return attributes_1.sanitizeAttributes; } });
+Object.defineProperty(exports, "sanitizeStatement", { enumerable: true, get: function () { return attributes_1.sanitizeStatement; } });
+Object.defineProperty(exports, "ALLOWED_ATTRIBUTES", { enumerable: true, get: function () { return attributes_1.ALLOWED_ATTRIBUTES; } });
+Object.defineProperty(exports, "hashIp", { enumerable: true, get: function () { return attributes_1.hashIp; } });
+var sanitizing_exporter_1 = require("./sanitizing-exporter");
+Object.defineProperty(exports, "SanitizingSpanExporter", { enumerable: true, get: function () { return sanitizing_exporter_1.SanitizingSpanExporter; } });
+Object.defineProperty(exports, "sanitizeSpan", { enumerable: true, get: function () { return sanitizing_exporter_1.sanitizeSpan; } });
+var log_context_1 = require("./log-context");
+Object.defineProperty(exports, "runWithLogContext", { enumerable: true, get: function () { return log_context_1.runWithLogContext; } });
+Object.defineProperty(exports, "getLogContext", { enumerable: true, get: function () { return log_context_1.getLogContext; } });
+var sdk_1 = require("./sdk");
+Object.defineProperty(exports, "startTelemetry", { enumerable: true, get: function () { return sdk_1.startTelemetry; } });
+Object.defineProperty(exports, "shutdownTelemetry", { enumerable: true, get: function () { return sdk_1.shutdownTelemetry; } });
+Object.defineProperty(exports, "getTelemetry", { enumerable: true, get: function () { return sdk_1.getTelemetry; } });
+var config_1 = require("./config");
+Object.defineProperty(exports, "readConfig", { enumerable: true, get: function () { return config_1.readConfig; } });
+Object.defineProperty(exports, "DEFAULT_OTLP_ENDPOINT", { enumerable: true, get: function () { return config_1.DEFAULT_OTLP_ENDPOINT; } });
+var logger_1 = require("./logger");
+Object.defineProperty(exports, "JsonLogger", { enumerable: true, get: function () { return logger_1.JsonLogger; } });
+Object.defineProperty(exports, "createLogger", { enumerable: true, get: function () { return logger_1.createLogger; } });
+Object.defineProperty(exports, "parseLogLevels", { enumerable: true, get: function () { return logger_1.parseLogLevels; } });
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,uDAA0F;AAAjF,mHAAA,eAAe,OAAA;AAAE,oHAAA,gBAAgB,OAAA;AAAE,qHAAA,iBAAiB,OAAA;AAE7D,uDAA2F;AAAlF,4HAAA,wBAAwB,OAAA;AAAE,8GAAA,UAAU,OAAA;AAAE,mHAAA,eAAe,OAAA;AAC9D,6CAAgG;AAAvF,iHAAA,kBAAkB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,qHAAA,sBAAsB,OAAA;AAExE,yCAA2E;AAAlE,mGAAA,MAAM,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,2GAAA,cAAc,OAAA;AAAE,qGAAA,QAAQ,OAAA;AACrD,2CAAiG;AAAxF,gHAAA,kBAAkB,OAAA;AAAE,+GAAA,iBAAiB,OAAA;AAAE,gHAAA,kBAAkB,OAAA;AAAE,oGAAA,MAAM,OAAA;AAC1E,6DAA6E;AAApE,6HAAA,sBAAsB,OAAA;AAAE,mHAAA,YAAY,OAAA;AAC7C,6CAAiE;AAAxD,gHAAA,iBAAiB,OAAA;AAAE,4GAAA,aAAa,OAAA;AAEzC,6BAAwE;AAA/D,qGAAA,cAAc,OAAA;AAAE,wGAAA,iBAAiB,OAAA;AAAE,mGAAA,YAAY,OAAA;AAExD,mCAA6D;AAApD,oGAAA,UAAU,OAAA;AAAE,+GAAA,qBAAqB,OAAA;AAE1C,mCAAoE;AAA3D,oGAAA,UAAU,OAAA;AAAE,sGAAA,YAAY,OAAA;AAAE,wGAAA,cAAc,OAAA"}

package/dist/log-context.d.ts

@@ -0,0 +1,8 @@
+/** Campi che ogni riga di log dello stesso comando eredita (`cmd`, `juridicalId`). */
+export interface LogContext {
+    cmd?: string;
+    juridicalId?: string;
+}
+export declare function runWithLogContext<T>(ctx: LogContext, fn: () => T): T;
+export declare function getLogContext(): LogContext;
+//# sourceMappingURL=log-context.d.ts.map

package/dist/log-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-context.d.ts","sourceRoot":"","sources":["../src/log-context.ts"],"names":[],"mappings":"AAEA,sFAAsF;AACtF,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAEpE;AAED,wBAAgB,aAAa,IAAI,UAAU,CAE1C"}

package/dist/log-context.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runWithLogContext = runWithLogContext;
+exports.getLogContext = getLogContext;
+const async_hooks_1 = require("async_hooks");
+const storage = new async_hooks_1.AsyncLocalStorage();
+function runWithLogContext(ctx, fn) {
+    return storage.run({ ...storage.getStore(), ...ctx }, fn);
+}
+function getLogContext() {
+    return storage.getStore() ?? {};
+}
+//# sourceMappingURL=log-context.js.map

package/dist/log-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-context.js","sourceRoot":"","sources":["../src/log-context.ts"],"names":[],"mappings":";;AAUA,8CAEC;AAED,sCAEC;AAhBD,6CAAgD;AAQhD,MAAM,OAAO,GAAG,IAAI,+BAAiB,EAAc,CAAC;AAEpD,SAAgB,iBAAiB,CAAI,GAAe,EAAE,EAAW;IAC/D,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAgB,aAAa;IAC3B,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC"}

package/dist/logger/index.d.ts

@@ -0,0 +1,10 @@
+import { type LoggerService } from '@nestjs/common';
+export { JsonLogger, parseLogLevels, DEFAULT_LOG_LEVELS } from './json-logger';
+export type { JsonLoggerOptions } from './json-logger';
+/**
+ * Il logger di `main.ts`: `LOG_FORMAT=json` → `JsonLogger`, altrimenti (di serie, `text`) il logger di testo di Nest.
+ *
+ *   const app = await NestFactory.create(AppModule, { logger: createLogger('hr') });
+ */
+export declare function createLogger(service: string, env?: NodeJS.ProcessEnv): LoggerService;
+//# sourceMappingURL=index.d.ts.map

package/dist/logger/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAGnE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC/E,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,aAAa,CAMjG"}

package/dist/logger/index.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_LOG_LEVELS = exports.parseLogLevels = exports.JsonLogger = void 0;
+exports.createLogger = createLogger;
+const common_1 = require("@nestjs/common");
+const json_logger_1 = require("./json-logger");
+var json_logger_2 = require("./json-logger");
+Object.defineProperty(exports, "JsonLogger", { enumerable: true, get: function () { return json_logger_2.JsonLogger; } });
+Object.defineProperty(exports, "parseLogLevels", { enumerable: true, get: function () { return json_logger_2.parseLogLevels; } });
+Object.defineProperty(exports, "DEFAULT_LOG_LEVELS", { enumerable: true, get: function () { return json_logger_2.DEFAULT_LOG_LEVELS; } });
+/**
+ * Il logger di `main.ts`: `LOG_FORMAT=json` → `JsonLogger`, altrimenti (di serie, `text`) il logger di testo di Nest.
+ *
+ *   const app = await NestFactory.create(AppModule, { logger: createLogger('hr') });
+ */
+function createLogger(service, env = process.env) {
+    json_logger_1.JsonLogger.defaultService = service;
+    if ((env.LOG_FORMAT ?? 'text').toLowerCase() === 'json') {
+        return new json_logger_1.JsonLogger({ service, levels: (0, json_logger_1.parseLogLevels)(env.APP_LOGGER_LEVEL) });
+    }
+    return new common_1.ConsoleLogger({ logLevels: (0, json_logger_1.parseLogLevels)(env.APP_LOGGER_LEVEL) });
+}
+//# sourceMappingURL=index.js.map

package/dist/logger/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logger/index.ts"],"names":[],"mappings":";;;AAWA,oCAMC;AAjBD,2CAAmE;AACnE,+CAA2D;AAE3D,6CAA+E;AAAtE,yGAAA,UAAU,OAAA;AAAE,6GAAA,cAAc,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAGvD;;;;GAIG;AACH,SAAgB,YAAY,CAAC,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IAChF,wBAAU,CAAC,cAAc,GAAG,OAAO,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;QACxD,OAAO,IAAI,wBAAU,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAA,4BAAc,EAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,sBAAa,CAAC,EAAE,SAAS,EAAE,IAAA,4BAAc,EAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/logger/json-logger.d.ts

@@ -0,0 +1,39 @@
+import type { LogLevel, LoggerService } from '@nestjs/common';
+type Write = (line: string) => void;
+export declare const DEFAULT_LOG_LEVELS: readonly LogLevel[];
+/** `APP_LOGGER_LEVEL`: elenco separato da virgole (`log,error,warn`), `none` per spegnere. */
+export declare function parseLogLevels(raw: string | undefined, fallback?: readonly LogLevel[]): LogLevel[];
+export interface JsonLoggerOptions {
+    /** Nome del servizio nel campo `service`. Di serie `OTEL_SERVICE_NAME` o `unknown`. */
+    service?: string;
+    levels?: readonly LogLevel[];
+    write?: Write;
+    clock?: () => Date;
+}
+/**
+ * Una riga JSON per evento su stdout, con gli stessi campi in tutti i servizi Node:
+ * `level`, `ts`, `service`, `msg`, `trace_id`, `span_id`, `cmd`, `juridicalId` (solo id), più `context` (nome del logger di Nest)
+ * ed eventuali campi di un messaggio-oggetto. Ogni stringa e ogni oggetto passano dalla redazione: niente email, codici
+ * fiscali, IBAN, token, né i valori di chiavi come `password`, `authorization`, `body`.
+ * `trace_id`/`span_id` vengono dallo span attivo; `cmd`/`juridicalId` dal contesto del comando NATS in corso.
+ */
+export declare class JsonLogger implements LoggerService {
+    /** Impostato da `TelemetryModule.forRoot({ service })`. */
+    static defaultService: string | undefined;
+    private levels;
+    private readonly service?;
+    private readonly write;
+    private readonly clock;
+    constructor(options?: JsonLoggerOptions);
+    setLogLevels(levels: LogLevel[]): void;
+    log(message: unknown, ...rest: unknown[]): void;
+    error(message: unknown, ...rest: unknown[]): void;
+    warn(message: unknown, ...rest: unknown[]): void;
+    debug(message: unknown, ...rest: unknown[]): void;
+    verbose(message: unknown, ...rest: unknown[]): void;
+    fatal(message: unknown, ...rest: unknown[]): void;
+    private emit;
+    private build;
+}
+export {};
+//# sourceMappingURL=json-logger.d.ts.map

package/dist/logger/json-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-logger.d.ts","sourceRoot":"","sources":["../../src/logger/json-logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAK9D,KAAK,KAAK,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAGpC,eAAO,MAAM,kBAAkB,EAAE,SAAS,QAAQ,EAAsC,CAAC;AASzF,8FAA8F;AAC9F,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,GAAE,SAAS,QAAQ,EAAuB,GAAG,QAAQ,EAAE,CAUtH;AAED,MAAM,WAAW,iBAAiB;IAChC,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB;AAED;;;;;;GAMG;AACH,qBAAa,UAAW,YAAW,aAAa;IAC9C,2DAA2D;IAC3D,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,OAAO,CAAC,MAAM,CAAwB;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAQ;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAa;gBAEvB,OAAO,GAAE,iBAAsB;IAO3C,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI;IAItC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAG/C,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAGjD,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAGhD,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAGjD,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAGnD,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI;IAIjD,OAAO,CAAC,IAAI;IASZ,OAAO,CAAC,KAAK;CA2Cd"}

package/dist/logger/json-logger.js

@@ -0,0 +1,127 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.JsonLogger = exports.DEFAULT_LOG_LEVELS = void 0;
+exports.parseLogLevels = parseLogLevels;
+const api_1 = require("@opentelemetry/api");
+const log_context_1 = require("../log-context");
+const redaction_1 = require("../redaction");
+const ALL_LEVELS = ['fatal', 'error', 'warn', 'log', 'debug', 'verbose'];
+exports.DEFAULT_LOG_LEVELS = ['log', 'error', 'warn', 'fatal'];
+/** Livello scritto nella riga: `log` di Nest = `info`. */
+const LEVEL_NAME = { fatal: 'fatal', error: 'error', warn: 'warn', log: 'info', debug: 'debug', verbose: 'trace' };
+function withFatal(levels) {
+    return levels.includes('error') && !levels.includes('fatal') ? [...levels, 'fatal'] : levels;
+}
+/** `APP_LOGGER_LEVEL`: elenco separato da virgole (`log,error,warn`), `none` per spegnere. */
+function parseLogLevels(raw, fallback = exports.DEFAULT_LOG_LEVELS) {
+    const value = raw?.trim();
+    if (!value)
+        return withFatal([...fallback]);
+    if (value === 'none')
+        return [];
+    return withFatal(value
+        .split(',')
+        .map((l) => l.trim())
+        .filter((l) => ALL_LEVELS.includes(l)));
+}
+/**
+ * Una riga JSON per evento su stdout, con gli stessi campi in tutti i servizi Node:
+ * `level`, `ts`, `service`, `msg`, `trace_id`, `span_id`, `cmd`, `juridicalId` (solo id), più `context` (nome del logger di Nest)
+ * ed eventuali campi di un messaggio-oggetto. Ogni stringa e ogni oggetto passano dalla redazione: niente email, codici
+ * fiscali, IBAN, token, né i valori di chiavi come `password`, `authorization`, `body`.
+ * `trace_id`/`span_id` vengono dallo span attivo; `cmd`/`juridicalId` dal contesto del comando NATS in corso.
+ */
+class JsonLogger {
+    constructor(options = {}) {
+        this.levels = new Set(options.levels ?? parseLogLevels(process.env.APP_LOGGER_LEVEL));
+        this.service = options.service;
+        this.write = options.write ?? ((line) => process.stdout.write(`${line}\n`));
+        this.clock = options.clock ?? (() => new Date());
+    }
+    setLogLevels(levels) {
+        this.levels = new Set(levels);
+    }
+    log(message, ...rest) {
+        this.emit('log', message, rest);
+    }
+    error(message, ...rest) {
+        this.emit('error', message, rest);
+    }
+    warn(message, ...rest) {
+        this.emit('warn', message, rest);
+    }
+    debug(message, ...rest) {
+        this.emit('debug', message, rest);
+    }
+    verbose(message, ...rest) {
+        this.emit('verbose', message, rest);
+    }
+    fatal(message, ...rest) {
+        this.emit('fatal', message, rest);
+    }
+    emit(level, message, rest) {
+        if (!this.levels.has(level))
+            return;
+        try {
+            this.write(JSON.stringify(this.build(level, message, rest)));
+        }
+        catch {
+            /* un log non deve mai far cadere il servizio */
+        }
+    }
+    build(level, message, rest) {
+        // Convenzione di Nest: l'ultimo argomento stringa è il contesto; per `error` il penultimo può essere lo stack.
+        const args = [...rest];
+        let context;
+        if (args.length && typeof args[args.length - 1] === 'string' && !(level === 'error' && args.length === 1 && looksLikeStack(args[0]))) {
+            context = args.pop();
+        }
+        let stack;
+        if (args.length && typeof args[0] === 'string' && looksLikeStack(args[0]))
+            stack = args.shift();
+        const span = api_1.trace.getActiveSpan()?.spanContext();
+        const ctx = (0, log_context_1.getLogContext)();
+        const line = {
+            level: LEVEL_NAME[level],
+            ts: this.clock().toISOString(),
+            service: this.service ?? JsonLogger.defaultService ?? process.env.OTEL_SERVICE_NAME ?? 'unknown',
+            msg: '',
+            trace_id: span?.traceId,
+            span_id: span?.spanId,
+            cmd: ctx.cmd,
+            juridicalId: ctx.juridicalId,
+        };
+        if (context)
+            line.context = (0, redaction_1.maskString)(context);
+        if (message instanceof Error) {
+            line.msg = (0, redaction_1.maskString)(message.message);
+            line.err = (0, redaction_1.redact)(message);
+        }
+        else if (message !== null && typeof message === 'object') {
+            const { message: inner, msg: inner2, ...fields } = message;
+            line.msg = typeof (inner ?? inner2) === 'string' ? (0, redaction_1.maskString)((inner ?? inner2)) : '';
+            const extra = (0, redaction_1.redact)(fields);
+            // I campi del contratto non si sovrascrivono da un messaggio-oggetto.
+            for (const [k, v] of Object.entries(extra))
+                if (!(k in line) || line[k] === undefined)
+                    line[k] = v;
+        }
+        else {
+            line.msg = (0, redaction_1.maskString)(String(message));
+        }
+        if (stack)
+            line.stack = (0, redaction_1.maskString)(stack);
+        for (const extra of args) {
+            if (extra instanceof Error)
+                line.err = (0, redaction_1.redact)(extra);
+            else if (extra && typeof extra === 'object')
+                line.extra = (0, redaction_1.redact)(extra);
+        }
+        return line;
+    }
+}
+exports.JsonLogger = JsonLogger;
+function looksLikeStack(s) {
+    return /\n\s+at /.test(s) || /^\w*Error: .*\n/.test(s);
+}
+//# sourceMappingURL=json-logger.js.map

package/dist/logger/json-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-logger.js","sourceRoot":"","sources":["../../src/logger/json-logger.ts"],"names":[],"mappings":";;;AAkBA,wCAUC;AA3BD,4CAA2C;AAC3C,gDAA+C;AAC/C,4CAAkD;AAIlD,MAAM,UAAU,GAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AACjF,QAAA,kBAAkB,GAAwB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzF,0DAA0D;AAC1D,MAAM,UAAU,GAA6B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAE7I,SAAS,SAAS,CAAC,MAAkB;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/F,CAAC;AAED,8FAA8F;AAC9F,SAAgB,cAAc,CAAC,GAAuB,EAAE,WAAgC,0BAAkB;IACxG,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,SAAS,CACd,KAAK;SACF,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAiB,EAAE,CAAE,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC/E,CAAC;AACJ,CAAC;AAUD;;;;;;GAMG;AACH,MAAa,UAAU;IASrB,YAAY,UAA6B,EAAE;QACzC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,CAAC,MAAkB;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,GAAG,CAAC,OAAgB,EAAE,GAAG,IAAe;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,OAAgB,EAAE,GAAG,IAAe;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,OAAgB,EAAE,GAAG,IAAe;QACvC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,KAAK,CAAC,OAAgB,EAAE,GAAG,IAAe;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,OAAgB,EAAE,GAAG,IAAe;QAC1C,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,OAAgB,EAAE,GAAG,IAAe;QACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,IAAI,CAAC,KAAe,EAAE,OAAgB,EAAE,IAAe;QAC7D,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO;QACpC,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,KAAe,EAAE,OAAgB,EAAE,IAAe;QAC9D,+GAA+G;QAC/G,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;QACvB,IAAI,OAA2B,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAW,CAAC,CAAC,EAAE,CAAC;YAC/I,OAAO,GAAG,IAAI,CAAC,GAAG,EAAY,CAAC;QACjC,CAAC;QACD,IAAI,KAAyB,CAAC;QAC9B,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,KAAK,GAAG,IAAI,CAAC,KAAK,EAAY,CAAC;QAE1G,MAAM,IAAI,GAAG,WAAK,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAA,2BAAa,GAAE,CAAC;QAC5B,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC;YACxB,EAAE,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE;YAC9B,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,SAAS;YAChG,GAAG,EAAE,EAAE;YACP,QAAQ,EAAE,IAAI,EAAE,OAAO;YACvB,OAAO,EAAE,IAAI,EAAE,MAAM;YACrB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,WAAW,EAAE,GAAG,CAAC,WAAW;SAC7B,CAAC;QACF,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAA,sBAAU,EAAC,OAAO,CAAC,CAAC;QAEhD,IAAI,OAAO,YAAY,KAAK,EAAE,CAAC;YAC7B,IAAI,CAAC,GAAG,GAAG,IAAA,sBAAU,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,GAAG,IAAA,kBAAM,EAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,GAAG,OAAkC,CAAC;YACtF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,sBAAU,EAAC,CAAC,KAAK,IAAI,MAAM,CAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,KAAK,GAAG,IAAA,kBAAM,EAAC,MAAM,CAA4B,CAAC;YACxD,sEAAsE;YACtE,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS;oBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,GAAG,IAAA,sBAAU,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,IAAA,sBAAU,EAAC,KAAK,CAAC,CAAC;QAC1C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,YAAY,KAAK;gBAAE,IAAI,CAAC,GAAG,GAAG,IAAA,kBAAM,EAAC,KAAK,CAAC,CAAC;iBAChD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,IAAI,CAAC,KAAK,GAAG,IAAA,kBAAM,EAAC,KAAK,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA3FD,gCA2FC;AAED,SAAS,cAAc,CAAC,CAAS;IAC/B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/nats.interceptor.d.ts

@@ -0,0 +1,18 @@
+import 'reflect-metadata';
+import { CallHandler, ExecutionContext, NestInterceptor } from '@nestjs/common';
+import { Observable } from 'rxjs';
+import { type ReadableHeadersLike } from './propagation';
+/** Il nome del comando di un handler `@MessagePattern({ cmd: 'x.y' })` (o `@EventPattern`), altrimenti il subject NATS. */
+export declare function resolveCmd(handler: unknown, subject?: string): string;
+/** L'azienda del messaggio, solo se è un UUID: dall'intestazione `Gen-Tenant` o dall'`auth`/dal payload. Mai altri campi. */
+export declare function pickJuridicalId(headers: ReadableHeadersLike | undefined, data: unknown): string | undefined;
+/**
+ * Lato servizio: per ogni messaggio NATS apre lo span `nats.server <cmd>` figlio del `traceparent` negli header, mette `cmd`
+ * e `juridicalId` nel contesto dei log del comando e conta durata ed esito. Non tocca mai il payload: negli span entrano
+ * solo gli attributi a lista bianca. Gli altri tipi di contesto (HTTP) passano senza cambiamenti.
+ */
+export declare class NatsTelemetryInterceptor implements NestInterceptor {
+    private readonly tracer;
+    intercept(execution: ExecutionContext, next: CallHandler): Observable<unknown>;
+}
+//# sourceMappingURL=nats.interceptor.d.ts.map