@generazioneai/telemetry 0.0.1 → 0.1.0

package/dist/nats.interceptor.js

@@ -0,0 +1,124 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NatsTelemetryInterceptor = void 0;
+exports.resolveCmd = resolveCmd;
+exports.pickJuridicalId = pickJuridicalId;
+require("reflect-metadata");
+const common_1 = require("@nestjs/common");
+const api_1 = require("@opentelemetry/api");
+const rxjs_1 = require("rxjs");
+const log_context_1 = require("./log-context");
+const propagation_1 = require("./propagation");
+const PATTERN_METADATA = 'microservices:pattern';
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Il nome del comando di un handler `@MessagePattern({ cmd: 'x.y' })` (o `@EventPattern`), altrimenti il subject NATS. */
+function resolveCmd(handler, subject) {
+    const patterns = typeof handler === 'function' ? Reflect.getMetadata(PATTERN_METADATA, handler) : undefined;
+    const first = patterns?.[0];
+    if (typeof first === 'string')
+        return first.slice(0, 120);
+    if (first && typeof first === 'object' && typeof first.cmd === 'string') {
+        return first.cmd.slice(0, 120);
+    }
+    if (first !== undefined)
+        return JSON.stringify(first).slice(0, 120);
+    return (subject ?? 'unknown').slice(0, 120);
+}
+function uuidOrUndefined(v) {
+    return typeof v === 'string' && UUID.test(v) ? v : undefined;
+}
+/** L'azienda del messaggio, solo se è un UUID: dall'intestazione `Gen-Tenant` o dall'`auth`/dal payload. Mai altri campi. */
+function pickJuridicalId(headers, data) {
+    const fromHeader = uuidOrUndefined(headers?.get('Gen-Tenant'));
+    if (fromHeader)
+        return fromHeader;
+    const d = (data ?? {});
+    return uuidOrUndefined(d.auth?.juridicalId) ?? uuidOrUndefined(d.auth?.tenantId) ?? uuidOrUndefined(d.juridicalId) ?? uuidOrUndefined(d.dto?.juridicalId);
+}
+const meter = api_1.metrics.getMeter('@generazioneai/telemetry');
+const requests = meter.createCounter('nats_server_requests_total', { description: 'Comandi NATS gestiti dal servizio, per comando ed esito' });
+const durations = meter.createHistogram('nats_server_request_duration_seconds', {
+    description: 'Durata dei comandi NATS gestiti dal servizio',
+    unit: 's',
+    advice: { explicitBucketBoundaries: [0.005, 0.025, 0.1, 0.25, 0.5, 1, 2.5, 5, 10, 30] },
+});
+/**
+ * Lato servizio: per ogni messaggio NATS apre lo span `nats.server <cmd>` figlio del `traceparent` negli header, mette `cmd`
+ * e `juridicalId` nel contesto dei log del comando e conta durata ed esito. Non tocca mai il payload: negli span entrano
+ * solo gli attributi a lista bianca. Gli altri tipi di contesto (HTTP) passano senza cambiamenti.
+ */
+let NatsTelemetryInterceptor = class NatsTelemetryInterceptor {
+    constructor() {
+        this.tracer = api_1.trace.getTracer('@generazioneai/telemetry');
+    }
+    intercept(execution, next) {
+        if (execution.getType() !== 'rpc')
+            return next.handle();
+        const rpc = execution.switchToRpc();
+        const nats = rpc.getContext();
+        const headers = typeof nats?.getHeaders === 'function' ? nats.getHeaders() : undefined;
+        const subject = typeof nats?.getSubject === 'function' ? nats.getSubject() : undefined;
+        const cmd = resolveCmd(execution.getHandler(), subject);
+        const juridicalId = pickJuridicalId(headers, rpc.getData());
+        const parent = (0, propagation_1.extractTraceContext)(headers);
+        return new rxjs_1.Observable((subscriber) => {
+            const started = process.hrtime.bigint();
+            const span = this.tracer.startSpan(`nats.server ${cmd}`, {
+                kind: api_1.SpanKind.CONSUMER,
+                attributes: {
+                    'messaging.system': 'nats',
+                    'messaging.operation': 'process',
+                    ...(subject ? { 'messaging.destination.name': subject.slice(0, 120) } : {}),
+                    cmd,
+                    ...(juridicalId ? { juridicalId } : {}),
+                },
+            }, parent);
+            let done = false;
+            const finish = (outcome, error) => {
+                if (done)
+                    return;
+                done = true;
+                const seconds = Number(process.hrtime.bigint() - started) / 1e9;
+                span.setAttribute('outcome', outcome);
+                span.setAttribute('duration_ms', Math.round(seconds * 1000));
+                if (outcome === 'error') {
+                    // Niente messaggio dell'errore: può citare dati personali.
+                    span.setAttribute('error.type', error instanceof Error ? error.name : 'Error');
+                    span.setStatus({ code: api_1.SpanStatusCode.ERROR });
+                }
+                span.end();
+                requests.add(1, { cmd, outcome });
+                durations.record(seconds, { cmd });
+            };
+            let inner;
+            api_1.context.with(api_1.trace.setSpan(parent, span), () => (0, log_context_1.runWithLogContext)({ cmd, juridicalId }, () => {
+                inner = next.handle().subscribe({
+                    next: (v) => subscriber.next(v),
+                    error: (e) => {
+                        finish('error', e);
+                        subscriber.error(e);
+                    },
+                    complete: () => {
+                        finish('ok');
+                        subscriber.complete();
+                    },
+                });
+            }));
+            return () => {
+                inner?.unsubscribe();
+                finish('ok');
+            };
+        });
+    }
+};
+exports.NatsTelemetryInterceptor = NatsTelemetryInterceptor;
+exports.NatsTelemetryInterceptor = NatsTelemetryInterceptor = __decorate([
+    (0, common_1.Injectable)()
+], NatsTelemetryInterceptor);
+//# sourceMappingURL=nats.interceptor.js.map

package/dist/nats.interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nats.interceptor.js","sourceRoot":"","sources":["../src/nats.interceptor.ts"],"names":[],"mappings":";;;;;;;;;AAWA,gCASC;AAOD,0CAKC;AAhCD,4BAA0B;AAC1B,2CAA4F;AAC5F,4CAAsG;AACtG,+BAAkC;AAClC,+CAAkD;AAClD,+CAA8E;AAE9E,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,2HAA2H;AAC3H,SAAgB,UAAU,CAAC,OAAgB,EAAE,OAAgB;IAC3D,MAAM,QAAQ,GAAG,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAE,OAAO,CAAC,WAAW,CAAC,gBAAgB,EAAE,OAAO,CAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;IACvI,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA2B,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC/F,OAAQ,KAAyB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,eAAe,CAAC,CAAU;IACjC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,6HAA6H;AAC7H,SAAgB,eAAe,CAAC,OAAwC,EAAE,IAAa;IACrF,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA6F,CAAC;IACnH,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;AAC5J,CAAC;AAOD,MAAM,KAAK,GAAG,aAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;AAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,4BAA4B,EAAE,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC,CAAC;AAC/I,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,sCAAsC,EAAE;IAC9E,WAAW,EAAE,8CAA8C;IAC3D,IAAI,EAAE,GAAG;IACT,MAAM,EAAE,EAAE,wBAAwB,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE;CACxF,CAAC,CAAC;AAEH;;;;GAIG;AAEI,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IAA9B;QACY,WAAM,GAAG,WAAK,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;IAkExE,CAAC;IAhEC,SAAS,CAAC,SAA2B,EAAE,IAAiB;QACtD,IAAI,SAAS,CAAC,OAAO,EAAE,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,EAA+B,CAAC;QAC3D,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,OAAO,GAAG,OAAO,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAA,iCAAmB,EAAC,OAAO,CAAC,CAAC;QAE5C,OAAO,IAAI,iBAAU,CAAC,CAAC,UAAU,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAChC,eAAe,GAAG,EAAE,EACpB;gBACE,IAAI,EAAE,cAAQ,CAAC,QAAQ;gBACvB,UAAU,EAAE;oBACV,kBAAkB,EAAE,MAAM;oBAC1B,qBAAqB,EAAE,SAAS;oBAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,4BAA4B,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG;oBACH,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC;aACF,EACD,MAAM,CACP,CAAC;YACF,IAAI,IAAI,GAAG,KAAK,CAAC;YACjB,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAE,KAAe,EAAE,EAAE;gBAC1D,IAAI,IAAI;oBAAE,OAAO;gBACjB,IAAI,GAAG,IAAI,CAAC;gBACZ,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,CAAC;gBAChE,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;gBACtC,IAAI,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;gBAC7D,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;oBACxB,2DAA2D;oBAC3D,IAAI,CAAC,YAAY,CAAC,YAAY,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;oBAC/E,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;gBACjD,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,CAAC;gBACX,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;gBAClC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;YACrC,CAAC,CAAC;YACF,IAAI,KAA0C,CAAC;YAC/C,aAAW,CAAC,IAAI,CAAC,WAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CACjD,IAAA,+BAAiB,EAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE;gBAC3C,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC;oBAC9B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/B,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE;wBACX,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;wBACnB,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,CAAC;oBACD,QAAQ,EAAE,GAAG,EAAE;wBACb,MAAM,CAAC,IAAI,CAAC,CAAC;wBACb,UAAU,CAAC,QAAQ,EAAE,CAAC;oBACxB,CAAC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CACH,CAAC;YACF,OAAO,GAAG,EAAE;gBACV,KAAK,EAAE,WAAW,EAAE,CAAC;gBACrB,MAAM,CAAC,IAAI,CAAC,CAAC;YACf,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAnEY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,mBAAU,GAAE;GACA,wBAAwB,CAmEpC"}

package/dist/propagation.d.ts

@@ -0,0 +1,18 @@
+import { type Context } from '@opentelemetry/api';
+/** La parte di `MsgHdrs` (`@nats-io/nats-core`) che serve: `get`/`set`/`has`. */
+export interface HeadersLike {
+    get(key: string): string;
+    set(key: string, value: string): void;
+}
+export interface ReadableHeadersLike {
+    get(key: string): string;
+}
+/** Firma del hook che `@generazioneai/authz` ≥ 0.7 chiama prima di ogni invio NATS (`setNatsHeadersHook`). `ctx` è il contesto di authz. */
+export type NatsHeadersHook = (headers: HeadersLike, ctx?: unknown) => void;
+/** Scrive `traceparent` (e `tracestate`) dallo span attivo negli header. Senza span attivo non scrive nulla. */
+export declare function injectTraceContext(headers: HeadersLike, ctx?: Context): void;
+/** Il contesto remoto dagli header NATS (o il contesto attivo se `traceparent` manca). */
+export declare function extractTraceContext(headers: ReadableHeadersLike | undefined | null, base?: Context): Context;
+/** Da passare ad `authz.setNatsHeadersHook(traceparentHeadersHook)` (lo fa `TelemetryModule.forRoot` se il pacchetto lo espone). */
+export declare const traceparentHeadersHook: NatsHeadersHook;
+//# sourceMappingURL=propagation.d.ts.map

package/dist/propagation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagation.d.ts","sourceRoot":"","sources":["../src/propagation.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,OAAO,EAA0C,MAAM,oBAAoB,CAAC;AAEvH,iFAAiF;AACjF,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AACD,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED,4IAA4I;AAC5I,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,OAAO,KAAK,IAAI,CAAC;AAW5E,gHAAgH;AAChH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,GAAE,OAA0B,GAAG,IAAI,CAG9F;AAED,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,SAAS,GAAG,IAAI,EAAE,IAAI,GAAE,OAA0B,GAAG,OAAO,CAG9H;AAED,oIAAoI;AACpI,eAAO,MAAM,sBAAsB,EAAE,eAMpC,CAAC"}

package/dist/propagation.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.traceparentHeadersHook = void 0;
+exports.injectTraceContext = injectTraceContext;
+exports.extractTraceContext = extractTraceContext;
+const api_1 = require("@opentelemetry/api");
+const setter = { set: (h, k, v) => h.set(k, v) };
+const getter = {
+    keys: () => ['traceparent', 'tracestate'],
+    get: (h, k) => {
+        const v = h?.get(k);
+        return v ? v : undefined;
+    },
+};
+/** Scrive `traceparent` (e `tracestate`) dallo span attivo negli header. Senza span attivo non scrive nulla. */
+function injectTraceContext(headers, ctx = api_1.context.active()) {
+    if (!api_1.trace.getSpan(ctx)?.spanContext())
+        return;
+    api_1.propagation.inject(ctx, headers, setter);
+}
+/** Il contesto remoto dagli header NATS (o il contesto attivo se `traceparent` manca). */
+function extractTraceContext(headers, base = api_1.context.active()) {
+    if (!headers)
+        return base;
+    return api_1.propagation.extract(base, headers, getter);
+}
+/** Da passare ad `authz.setNatsHeadersHook(traceparentHeadersHook)` (lo fa `TelemetryModule.forRoot` se il pacchetto lo espone). */
+const traceparentHeadersHook = (headers) => {
+    try {
+        injectTraceContext(headers);
+    }
+    catch {
+        /* la telemetria non deve mai rompere un invio */
+    }
+};
+exports.traceparentHeadersHook = traceparentHeadersHook;
+//# sourceMappingURL=propagation.js.map

package/dist/propagation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"propagation.js","sourceRoot":"","sources":["../src/propagation.ts"],"names":[],"mappings":";;;AAwBA,gDAGC;AAGD,kDAGC;AAjCD,4CAAuH;AAcvH,MAAM,MAAM,GAA+B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7E,MAAM,MAAM,GAAmD;IAC7D,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,aAAa,EAAE,YAAY,CAAC;IACzC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3B,CAAC;CACF,CAAC;AAEF,gHAAgH;AAChH,SAAgB,kBAAkB,CAAC,OAAoB,EAAE,MAAe,aAAO,CAAC,MAAM,EAAE;IACtF,IAAI,CAAC,WAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE;QAAE,OAAO;IAC/C,iBAAW,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED,0FAA0F;AAC1F,SAAgB,mBAAmB,CAAC,OAA+C,EAAE,OAAgB,aAAO,CAAC,MAAM,EAAE;IACnH,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,OAAO,iBAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,oIAAoI;AAC7H,MAAM,sBAAsB,GAAoB,CAAC,OAAO,EAAE,EAAE;IACjE,IAAI,CAAC;QACH,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,iDAAiD;IACnD,CAAC;AACH,CAAC,CAAC;AANW,QAAA,sBAAsB,0BAMjC"}

package/dist/redaction.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Redazione dei dati personali (decisione 35). Due livelli:
+ *  - chiavi: ciò che per nome porta dati personali o segreti (`Authorization`, `cookie`, corpi, email, nomi, codici fiscali…)
+ *    perde il valore;
+ *  - testo: ogni stringa ha email, codici fiscali, IBAN, JWT e `Bearer …` mascherati, anche se la chiave è innocua.
+ */
+export declare const REDACTED = "[redacted]";
+export declare function isSensitiveKey(key: string): boolean;
+/** Maschera nel testo ciò che sembra email, codice fiscale, IBAN, JWT o credenziale. */
+export declare function maskString(text: string): string;
+/** Copia ripulita di un valore qualsiasi (log, eccezioni, attributi). Non modifica l'originale. */
+export declare function redact(value: unknown, depth?: number, seen?: WeakSet<object>): unknown;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,eAAe,CAAC;AAsErC,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKnD;AAED,wFAAwF;AACxF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,mGAAmG;AACnG,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,EAAE,IAAI,GAAE,OAAO,CAAC,MAAM,CAAiB,GAAG,OAAO,CA6BhG"}

package/dist/redaction.js

@@ -0,0 +1,133 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTED = void 0;
+exports.isSensitiveKey = isSensitiveKey;
+exports.maskString = maskString;
+exports.redact = redact;
+/**
+ * Redazione dei dati personali (decisione 35). Due livelli:
+ *  - chiavi: ciò che per nome porta dati personali o segreti (`Authorization`, `cookie`, corpi, email, nomi, codici fiscali…)
+ *    perde il valore;
+ *  - testo: ogni stringa ha email, codici fiscali, IBAN, JWT e `Bearer …` mascherati, anche se la chiave è innocua.
+ */
+exports.REDACTED = '[redacted]';
+const EMAIL = /[A-Za-z0-9._%+'-]+@[A-Za-z0-9-]+(?:\.[A-Za-z0-9-]+)+/g;
+// Codice fiscale italiano, con le lettere dell'omocodia al posto delle cifre.
+const FISCAL_CODE = /\b[A-Za-z]{6}[0-9LMNPQRSTUVlmnpqrstuv]{2}[A-Za-z][0-9LMNPQRSTUVlmnpqrstuv]{2}[A-Za-z][0-9LMNPQRSTUVlmnpqrstuv]{3}[A-Za-z]\b/g;
+const IBAN = /\b[A-Z]{2}\d{2}[A-Z0-9]{11,30}\b/g;
+const JWT = /\beyJ[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]{5,}\.[A-Za-z0-9_-]*\b/g;
+const BEARER = /\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{8,}/gi;
+const MAX_STRING = 2000;
+const MAX_DEPTH = 6;
+const MAX_ITEMS = 50;
+/** Chiavi (normalizzate: minuscole, senza `-` `_` `.`) che non portano mai il valore. */
+const SENSITIVE_EXACT = new Set([
+    'authorization',
+    'proxyauthorization',
+    'cookie',
+    'setcookie',
+    'xapikey',
+    'apikey',
+    'password',
+    'passwd',
+    'pwd',
+    'secret',
+    'clientsecret',
+    'token',
+    'accesstoken',
+    'refreshtoken',
+    'idtoken',
+    'otp',
+    'pin',
+    'body',
+    'rawbody',
+    'payload',
+    'data',
+    'dto',
+    'snapshot',
+    'headers',
+    'email',
+    'mail',
+    'pec',
+    'phone',
+    'telefono',
+    'cellulare',
+    'mobile',
+    'iban',
+    'address',
+    'indirizzo',
+    'birthdate',
+    'birthplace',
+    'dateofbirth',
+    'datanascita',
+    'cf',
+    'taxcode',
+    'vatnumber',
+    'partitaiva',
+    'name',
+    'nome',
+    'cognome',
+    'surname',
+]);
+const SENSITIVE_SUFFIX = ['name', 'nome', 'email', 'secret', 'password', 'token', 'fiscalcode', 'codicefiscale', 'iban', 'cookie'];
+/** Chiavi tecniche che finiscono in `name` ma non sono persone. */
+const NOT_PERSONAL = new Set(['servicename', 'hostname', 'filename', 'loggername', 'consumername', 'jobname', 'queuename', 'streamname', 'cmd', 'contextname']);
+function normalize(key) {
+    return key.toLowerCase().replace(/[-_.\s]/g, '');
+}
+function isSensitiveKey(key) {
+    const k = normalize(key);
+    if (NOT_PERSONAL.has(k))
+        return false;
+    if (SENSITIVE_EXACT.has(k))
+        return true;
+    return SENSITIVE_SUFFIX.some((s) => k.endsWith(s));
+}
+/** Maschera nel testo ciò che sembra email, codice fiscale, IBAN, JWT o credenziale. */
+function maskString(text) {
+    let out = text.length > MAX_STRING ? `${text.slice(0, MAX_STRING)}…` : text;
+    out = out.replace(BEARER, '$1 [redacted]').replace(JWT, '[jwt]').replace(EMAIL, '[email]').replace(IBAN, '[iban]').replace(FISCAL_CODE, '[cf]');
+    return out;
+}
+/** Copia ripulita di un valore qualsiasi (log, eccezioni, attributi). Non modifica l'originale. */
+function redact(value, depth = 0, seen = new WeakSet()) {
+    if (value === null || value === undefined)
+        return value;
+    if (typeof value === 'string')
+        return maskString(value);
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'bigint')
+        return value.toString();
+    if (typeof value === 'function' || typeof value === 'symbol')
+        return undefined;
+    if (value instanceof Date)
+        return value.toISOString();
+    if (Buffer.isBuffer(value) || value instanceof Uint8Array)
+        return `[binary ${value.byteLength} bytes]`;
+    if (value instanceof Error) {
+        return { type: value.name, message: maskString(value.message), stack: value.stack ? maskString(value.stack) : undefined };
+    }
+    if (typeof value !== 'object')
+        return String(value);
+    if (depth >= MAX_DEPTH)
+        return '[truncated]';
+    if (seen.has(value))
+        return '[circular]';
+    seen.add(value);
+    if (Array.isArray(value)) {
+        const items = value.slice(0, MAX_ITEMS).map((v) => redact(v, depth + 1, seen));
+        return value.length > MAX_ITEMS ? [...items, `[+${value.length - MAX_ITEMS}]`] : items;
+    }
+    const out = {};
+    let n = 0;
+    for (const [k, v] of Object.entries(value)) {
+        if (n++ >= MAX_ITEMS) {
+            out['[+]'] = true;
+            break;
+        }
+        out[k] = isSensitiveKey(k) ? exports.REDACTED : redact(v, depth + 1, seen);
+    }
+    return out;
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":";;;AA4EA,wCAKC;AAGD,gCAIC;AAGD,wBA6BC;AAxHD;;;;;GAKG;AACU,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,KAAK,GAAG,uDAAuD,CAAC;AACtE,8EAA8E;AAC9E,MAAM,WAAW,GAAG,8HAA8H,CAAC;AACnJ,MAAM,IAAI,GAAG,mCAAmC,CAAC;AACjD,MAAM,GAAG,GAAG,8DAA8D,CAAC;AAC3E,MAAM,MAAM,GAAG,6CAA6C,CAAC;AAE7D,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,yFAAyF;AACzF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,eAAe;IACf,oBAAoB;IACpB,QAAQ;IACR,WAAW;IACX,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,cAAc;IACd,OAAO;IACP,aAAa;IACb,cAAc;IACd,SAAS;IACT,KAAK;IACL,KAAK;IACL,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,KAAK;IACL,UAAU;IACV,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,UAAU;IACV,WAAW;IACX,QAAQ;IACR,MAAM;IACN,SAAS;IACT,WAAW;IACX,WAAW;IACX,YAAY;IACZ,aAAa;IACb,aAAa;IACb,IAAI;IACJ,SAAS;IACT,WAAW;IACX,YAAY;IACZ,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;AACnI,mEAAmE;AACnE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;AAEhK,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,wFAAwF;AACxF,SAAgB,UAAU,CAAC,IAAY;IACrC,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAChJ,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,SAAgB,MAAM,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAE,OAAwB,IAAI,OAAO,EAAE;IACrF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC/E,IAAI,KAAK,YAAY,IAAI;QAAE,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,WAAW,KAAK,CAAC,UAAU,SAAS,CAAC;IACvG,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC5H,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO,aAAa,CAAC;IAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/E,OAAO,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,KAAK,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QACtE,IAAI,CAAC,EAAE,IAAI,SAAS,EAAE,CAAC;YACrB,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;YAClB,MAAM;QACR,CAAC;QACD,GAAG,CAAC,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/register.d.ts

@@ -0,0 +1,2 @@
+export declare const telemetry: import("./sdk").TelemetryHandle | null;
+//# sourceMappingURL=register.d.ts.map

package/dist/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,SAAS,wCAAmB,CAAC"}

package/dist/register.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.telemetry = void 0;
+/**
+ * `import '@generazioneai/telemetry/register';` come PRIMA riga di `main.ts`. Con `TELEMETRY_MODE=off` (di serie) non fa nulla.
+ * Non installa gestori di segnali: lo spegnimento ordinato lo fa `TelemetryModule` (o `beforeExit`).
+ */
+const sdk_1 = require("./sdk");
+exports.telemetry = (0, sdk_1.startTelemetry)();
+//# sourceMappingURL=register.js.map

package/dist/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../src/register.ts"],"names":[],"mappings":";;;AAAA;;;GAGG;AACH,+BAAuC;AAE1B,QAAA,SAAS,GAAG,IAAA,oBAAc,GAAE,CAAC"}

package/dist/sanitizing-exporter.d.ts

@@ -0,0 +1,13 @@
+import type { ExportResult } from '@opentelemetry/core';
+import type { ReadableSpan, SpanExporter } from '@opentelemetry/sdk-trace-base';
+/** Copia di uno span con gli attributi (anche di eventi e link) ripuliti dalla lista bianca. */
+export declare function sanitizeSpan(span: ReadableSpan): ReadableSpan;
+/** Avvolge un esportatore: ciò che esce dal processo è già ripulito (il collector rifà il controllo, ma non è l'unica barriera). */
+export declare class SanitizingSpanExporter implements SpanExporter {
+    private readonly inner;
+    constructor(inner: SpanExporter);
+    export(spans: ReadableSpan[], resultCallback: (result: ExportResult) => void): void;
+    shutdown(): Promise<void>;
+    forceFlush(): Promise<void>;
+}
+//# sourceMappingURL=sanitizing-exporter.d.ts.map

package/dist/sanitizing-exporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizing-exporter.d.ts","sourceRoot":"","sources":["../src/sanitizing-exporter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAIhF,gGAAgG;AAChG,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,CAoB7D;AAED,oIAAoI;AACpI,qBAAa,sBAAuB,YAAW,YAAY;IAC7C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAEhD,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAInF,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B"}

package/dist/sanitizing-exporter.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SanitizingSpanExporter = void 0;
+exports.sanitizeSpan = sanitizeSpan;
+const attributes_1 = require("./attributes");
+const redaction_1 = require("./redaction");
+/** Copia di uno span con gli attributi (anche di eventi e link) ripuliti dalla lista bianca. */
+function sanitizeSpan(span) {
+    return {
+        name: (0, redaction_1.maskString)(span.name),
+        kind: span.kind,
+        spanContext: () => span.spanContext(),
+        parentSpanContext: span.parentSpanContext,
+        startTime: span.startTime,
+        endTime: span.endTime,
+        status: { code: span.status.code }, // il messaggio di stato può citare dati
+        attributes: (0, attributes_1.sanitizeAttributes)(span.attributes),
+        links: span.links.map((l) => ({ context: l.context, attributes: (0, attributes_1.sanitizeAttributes)(l.attributes) })),
+        events: span.events.map((e) => ({ name: e.name, time: e.time, attributes: (0, attributes_1.sanitizeAttributes)(e.attributes) })),
+        duration: span.duration,
+        ended: span.ended,
+        resource: span.resource,
+        instrumentationScope: span.instrumentationScope,
+        droppedAttributesCount: span.droppedAttributesCount,
+        droppedEventsCount: span.droppedEventsCount,
+        droppedLinksCount: span.droppedLinksCount,
+    };
+}
+/** Avvolge un esportatore: ciò che esce dal processo è già ripulito (il collector rifà il controllo, ma non è l'unica barriera). */
+class SanitizingSpanExporter {
+    constructor(inner) {
+        this.inner = inner;
+    }
+    export(spans, resultCallback) {
+        this.inner.export(spans.map(sanitizeSpan), resultCallback);
+    }
+    shutdown() {
+        return this.inner.shutdown();
+    }
+    forceFlush() {
+        return this.inner.forceFlush?.() ?? Promise.resolve();
+    }
+}
+exports.SanitizingSpanExporter = SanitizingSpanExporter;
+//# sourceMappingURL=sanitizing-exporter.js.map

package/dist/sanitizing-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizing-exporter.js","sourceRoot":"","sources":["../src/sanitizing-exporter.ts"],"names":[],"mappings":";;;AAMA,oCAoBC;AAxBD,6CAAkD;AAClD,2CAAyC;AAEzC,gGAAgG;AAChG,SAAgB,YAAY,CAAC,IAAkB;IAC7C,OAAO;QACL,IAAI,EAAE,IAAA,sBAAU,EAAC,IAAI,CAAC,IAAI,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE;QACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,wCAAwC;QAC5E,UAAU,EAAE,IAAA,+BAAkB,EAAC,IAAI,CAAC,UAAU,CAAC;QAC/C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,IAAA,+BAAkB,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACpG,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,IAAA,+BAAkB,EAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC9G,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;QAC/C,sBAAsB,EAAE,IAAI,CAAC,sBAAsB;QACnD,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;QAC3C,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC;AACJ,CAAC;AAED,oIAAoI;AACpI,MAAa,sBAAsB;IACjC,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,MAAM,CAAC,KAAqB,EAAE,cAA8C;QAC1E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,cAAc,CAAC,CAAC;IAC7D,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC;CACF;AAdD,wDAcC"}

package/dist/sdk.d.ts

@@ -0,0 +1,18 @@
+import { MeterProvider } from '@opentelemetry/sdk-metrics';
+import { NodeTracerProvider } from '@opentelemetry/sdk-trace-node';
+import { type TelemetryConfig } from './config';
+export interface TelemetryHandle {
+    config: TelemetryConfig;
+    tracerProvider: NodeTracerProvider;
+    meterProvider: MeterProvider;
+    shutdown(): Promise<void>;
+}
+/**
+ * Avvia l'SDK se la configurazione lo chiede (`TELEMETRY_MODE=on` e un endpoint). Idempotente. Va chiamato prima che
+ * l'applicazione carichi `http`, `pg`, `ioredis`: per questo `@generazioneai/telemetry/register` è il primo import di `main.ts`.
+ * Tutti gli span passano dal `SanitizingSpanExporter` (lista bianca degli attributi) prima di uscire.
+ */
+export declare function startTelemetry(env?: NodeJS.ProcessEnv): TelemetryHandle | null;
+export declare function getTelemetry(): TelemetryHandle | null;
+export declare function shutdownTelemetry(): Promise<void>;
+//# sourceMappingURL=sdk.d.ts.map

package/dist/sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,aAAa,EAAiC,MAAM,4BAA4B,CAAC;AAE1F,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,EAAc,KAAK,eAAe,EAAE,MAAM,UAAU,CAAC;AAG5D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,cAAc,EAAE,kBAAkB,CAAC;IACnC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAeD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,GAAG,IAAI,CAwD3F;AAED,wBAAgB,YAAY,IAAI,eAAe,GAAG,IAAI,CAErD;AAED,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAEvD"}

package/dist/sdk.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startTelemetry = startTelemetry;
+exports.getTelemetry = getTelemetry;
+exports.shutdownTelemetry = shutdownTelemetry;
+const api_1 = require("@opentelemetry/api");
+const exporter_metrics_otlp_http_1 = require("@opentelemetry/exporter-metrics-otlp-http");
+const exporter_trace_otlp_http_1 = require("@opentelemetry/exporter-trace-otlp-http");
+const instrumentation_1 = require("@opentelemetry/instrumentation");
+const instrumentation_http_1 = require("@opentelemetry/instrumentation-http");
+const resources_1 = require("@opentelemetry/resources");
+const sdk_metrics_1 = require("@opentelemetry/sdk-metrics");
+const sdk_trace_base_1 = require("@opentelemetry/sdk-trace-base");
+const sdk_trace_node_1 = require("@opentelemetry/sdk-trace-node");
+const config_1 = require("./config");
+const sanitizing_exporter_1 = require("./sanitizing-exporter");
+let handle = null;
+const QUIET_PATHS = /^\/(?:api\/)?(?:health|metrics|ready|live)/;
+/** Strumentazioni opzionali: se il pacchetto manca o non si carica, si va avanti senza. */
+function optional(load) {
+    try {
+        return [load()];
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Avvia l'SDK se la configurazione lo chiede (`TELEMETRY_MODE=on` e un endpoint). Idempotente. Va chiamato prima che
+ * l'applicazione carichi `http`, `pg`, `ioredis`: per questo `@generazioneai/telemetry/register` è il primo import di `main.ts`.
+ * Tutti gli span passano dal `SanitizingSpanExporter` (lista bianca degli attributi) prima di uscire.
+ */
+function startTelemetry(env = process.env) {
+    if (handle)
+        return handle;
+    const config = (0, config_1.readConfig)(env);
+    if (!config.enabled)
+        return null;
+    const resource = (0, resources_1.resourceFromAttributes)({
+        'service.name': config.serviceName,
+        ...(config.environment ? { 'deployment.environment': config.environment } : {}),
+        ...(config.serviceVersion ? { 'service.version': config.serviceVersion } : {}),
+    });
+    const tracerProvider = new sdk_trace_node_1.NodeTracerProvider({
+        resource,
+        sampler: new sdk_trace_base_1.ParentBasedSampler({
+            root: config.sampleRatio >= 1 ? new sdk_trace_base_1.AlwaysOnSampler() : new sdk_trace_base_1.TraceIdRatioBasedSampler(config.sampleRatio),
+        }),
+        spanProcessors: [new sdk_trace_base_1.BatchSpanProcessor(new sanitizing_exporter_1.SanitizingSpanExporter(new exporter_trace_otlp_http_1.OTLPTraceExporter({ url: `${config.endpoint}/v1/traces` })))],
+    });
+    tracerProvider.register();
+    const meterProvider = new sdk_metrics_1.MeterProvider({
+        resource,
+        readers: [
+            new sdk_metrics_1.PeriodicExportingMetricReader({
+                exporter: new exporter_metrics_otlp_http_1.OTLPMetricExporter({ url: `${config.endpoint}/v1/metrics` }),
+                exportIntervalMillis: config.metricIntervalMs,
+            }),
+        ],
+    });
+    api_1.metrics.setGlobalMeterProvider(meterProvider);
+    const instrumentations = [
+        new instrumentation_http_1.HttpInstrumentation({
+            ignoreIncomingRequestHook: (req) => QUIET_PATHS.test(req.url ?? ''),
+            // Nessuna intestazione e nessun corpo negli span: l'esportatore tiene comunque solo la lista bianca.
+            requireParentforOutgoingSpans: true,
+        }),
+        ...optional(() => new (require('@opentelemetry/instrumentation-pg').PgInstrumentation)({ enhancedDatabaseReporting: false })),
+        ...optional(() => new (require('@opentelemetry/instrumentation-ioredis').IORedisInstrumentation)({ dbStatementSerializer: (cmdName) => cmdName })),
+        ...optional(() => new (require('@prisma/instrumentation').PrismaInstrumentation)()),
+    ];
+    (0, instrumentation_1.registerInstrumentations)({ tracerProvider, meterProvider, instrumentations });
+    let closed = false;
+    handle = {
+        config,
+        tracerProvider,
+        meterProvider,
+        async shutdown() {
+            if (closed)
+                return;
+            closed = true;
+            await Promise.allSettled([tracerProvider.shutdown(), meterProvider.shutdown()]);
+        },
+    };
+    process.once('beforeExit', () => void handle?.shutdown());
+    return handle;
+}
+function getTelemetry() {
+    return handle;
+}
+async function shutdownTelemetry() {
+    await handle?.shutdown();
+}
+//# sourceMappingURL=sdk.js.map

package/dist/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../src/sdk.ts"],"names":[],"mappings":";;AAqCA,wCAwDC;AAED,oCAEC;AAED,8CAEC;AArGD,4CAA6C;AAC7C,0FAA+E;AAC/E,sFAA4E;AAC5E,oEAAgG;AAChG,8EAA0E;AAC1E,wDAAkE;AAClE,4DAA0F;AAC1F,kEAAkI;AAClI,kEAAmE;AACnE,qCAA4D;AAC5D,+DAA+D;AAS/D,IAAI,MAAM,GAA2B,IAAI,CAAC;AAE1C,MAAM,WAAW,GAAG,4CAA4C,CAAC;AAEjE,2FAA2F;AAC3F,SAAS,QAAQ,CAAC,IAA2B;IAC3C,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,IAAA,mBAAU,EAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAEjC,MAAM,QAAQ,GAAG,IAAA,kCAAsB,EAAC;QACtC,cAAc,EAAE,MAAM,CAAC,WAAW;QAClC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,mCAAkB,CAAC;QAC5C,QAAQ;QACR,OAAO,EAAE,IAAI,mCAAkB,CAAC;YAC9B,IAAI,EAAE,MAAM,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,gCAAe,EAAE,CAAC,CAAC,CAAC,IAAI,yCAAwB,CAAC,MAAM,CAAC,WAAW,CAAC;SACzG,CAAC;QACF,cAAc,EAAE,CAAC,IAAI,mCAAkB,CAAC,IAAI,4CAAsB,CAAC,IAAI,4CAAiB,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;KACrI,CAAC,CAAC;IACH,cAAc,CAAC,QAAQ,EAAE,CAAC;IAE1B,MAAM,aAAa,GAAG,IAAI,2BAAa,CAAC;QACtC,QAAQ;QACR,OAAO,EAAE;YACP,IAAI,2CAA6B,CAAC;gBAChC,QAAQ,EAAE,IAAI,+CAAkB,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,QAAQ,aAAa,EAAE,CAAC;gBAC1E,oBAAoB,EAAE,MAAM,CAAC,gBAAgB;aAC9C,CAAC;SACH;KACF,CAAC,CAAC;IACH,aAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC;IAE9C,MAAM,gBAAgB,GAAsB;QAC1C,IAAI,0CAAmB,CAAC;YACtB,yBAAyB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YACnE,qGAAqG;YACrG,6BAA6B,EAAE,IAAI;SACpC,CAAC;QACF,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,iBAAiB,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7H,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,qBAAqB,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1J,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC;KACpF,CAAC;IACF,IAAA,0CAAwB,EAAC,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAE9E,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,GAAG;QACP,MAAM;QACN,cAAc;QACd,aAAa;QACb,KAAK,CAAC,QAAQ;YACZ,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClF,CAAC;KACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO,MAAM,CAAC;AAChB,CAAC;AAEM,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC"}

package/dist/telemetry.module.d.ts

@@ -0,0 +1,26 @@
+import { DynamicModule, OnApplicationShutdown, OnModuleInit } from '@nestjs/common';
+import { type NatsHeadersHook } from './propagation';
+export interface TelemetryModuleOptions {
+    /** Nome del servizio (`id`, `hr`, `gateway`…): campo `service` dei log. */
+    service: string;
+    /**
+     * Il modulo di authz che espone `setNatsHeadersHook` (≥ 0.7). Di serie lo cerca da solo (`require('@generazioneai/authz')`);
+     * con authz più vecchio non fa nulla e il `traceparent` non parte negli header.
+     */
+    authz?: {
+        setNatsHeadersHook?: (hook: NatsHeadersHook) => void;
+    } | false;
+}
+export declare const TELEMETRY_OPTIONS: unique symbol;
+export declare class TelemetryService implements OnModuleInit, OnApplicationShutdown {
+    private readonly options;
+    private readonly logger;
+    constructor(options: TelemetryModuleOptions);
+    onModuleInit(): void;
+    onApplicationShutdown(): Promise<void>;
+}
+export declare class TelemetryModule {
+    /** `TelemetryModule.forRoot({ service: 'hr' })` nell'AppModule: interceptor `nats.server <cmd>` globale, hook del traceparent, spegnimento. */
+    static forRoot(options: TelemetryModuleOptions): DynamicModule;
+}
+//# sourceMappingURL=telemetry.module.d.ts.map

package/dist/telemetry.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.module.d.ts","sourceRoot":"","sources":["../src/telemetry.module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAsC,qBAAqB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAIxH,OAAO,EAA0B,KAAK,eAAe,EAAE,MAAM,eAAe,CAAC;AAG7E,MAAM,WAAW,sBAAsB;IACrC,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,KAAK,CAAC,EAAE;QAAE,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAA;KAAE,GAAG,KAAK,CAAC;CAC1E;AAED,eAAO,MAAM,iBAAiB,eAA8B,CAAC;AAE7D,qBACa,gBAAiB,YAAW,YAAY,EAAE,qBAAqB;IAGnC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAF/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA2B;gBAEM,OAAO,EAAE,sBAAsB;IAEvF,YAAY,IAAI,IAAI;IAkBd,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7C;AAED,qBACa,eAAe;IAC1B,+IAA+I;IAC/I,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,sBAAsB,GAAG,aAAa;CAY/D"}