@lensmcp/node-instrumentation 1.18.4 → 1.18.7

package/index.js

@@ -1,32 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installLensmcpNodeInstrumentation = exports.installChildAppBridge = exports.nestTap = exports.bullmqTap = exports.redisTap = exports.pgTap = exports.tapExec = exports.tapFs = exports.tapEgress = exports.installRequireHook = exports.createEventFloodGuard = exports.maybeRotateEventFile = exports.EVENT_MAX_FILES = exports.EVENT_MAX_BYTES = exports.EVENT_FILE = exports.PROJECT = exports.isLensWriting = exports.lensEmit = void 0;
-var emit_1 = require("./lib/emit");
-Object.defineProperty(exports, "lensEmit", { enumerable: true, get: function () { return emit_1.lensEmit; } });
-Object.defineProperty(exports, "isLensWriting", { enumerable: true, get: function () { return emit_1.isLensWriting; } });
-Object.defineProperty(exports, "PROJECT", { enumerable: true, get: function () { return emit_1.PROJECT; } });
-Object.defineProperty(exports, "EVENT_FILE", { enumerable: true, get: function () { return emit_1.EVENT_FILE; } });
-Object.defineProperty(exports, "EVENT_MAX_BYTES", { enumerable: true, get: function () { return emit_1.EVENT_MAX_BYTES; } });
-Object.defineProperty(exports, "EVENT_MAX_FILES", { enumerable: true, get: function () { return emit_1.EVENT_MAX_FILES; } });
-Object.defineProperty(exports, "maybeRotateEventFile", { enumerable: true, get: function () { return emit_1.maybeRotateEventFile; } });
-var flood_guard_1 = require("./lib/flood-guard");
-Object.defineProperty(exports, "createEventFloodGuard", { enumerable: true, get: function () { return flood_guard_1.createEventFloodGuard; } });
-var require_hook_1 = require("./lib/require-hook");
-Object.defineProperty(exports, "installRequireHook", { enumerable: true, get: function () { return require_hook_1.installRequireHook; } });
-var tap_egress_1 = require("./lib/tap-egress");
-Object.defineProperty(exports, "tapEgress", { enumerable: true, get: function () { return tap_egress_1.tapEgress; } });
-var tap_fs_1 = require("./lib/tap-fs");
-Object.defineProperty(exports, "tapFs", { enumerable: true, get: function () { return tap_fs_1.tapFs; } });
-var tap_exec_1 = require("./lib/tap-exec");
-Object.defineProperty(exports, "tapExec", { enumerable: true, get: function () { return tap_exec_1.tapExec; } });
-var tap_pg_1 = require("./lib/tap-pg");
-Object.defineProperty(exports, "pgTap", { enumerable: true, get: function () { return tap_pg_1.pgTap; } });
-var tap_redis_1 = require("./lib/tap-redis");
-Object.defineProperty(exports, "redisTap", { enumerable: true, get: function () { return tap_redis_1.redisTap; } });
-var tap_bullmq_1 = require("./lib/tap-bullmq");
-Object.defineProperty(exports, "bullmqTap", { enumerable: true, get: function () { return tap_bullmq_1.bullmqTap; } });
-var tap_nest_1 = require("./lib/tap-nest");
-Object.defineProperty(exports, "nestTap", { enumerable: true, get: function () { return tap_nest_1.nestTap; } });
-Object.defineProperty(exports, "installChildAppBridge", { enumerable: true, get: function () { return tap_nest_1.installChildAppBridge; } });
-var install_1 = require("./lib/install");
-Object.defineProperty(exports, "installLensmcpNodeInstrumentation", { enumerable: true, get: function () { return install_1.installLensmcpNodeInstrumentation; } });
+"use strict";var o=Object.defineProperty;var i=(t,r)=>o(t,"name",{value:r,configurable:!0});var n=Object.defineProperty,e=i((t,r)=>n(t,"name",{value:r,configurable:!0}),"e");Object.defineProperty(exports,"__esModule",{value:!0}),exports.installLensmcpNodeInstrumentation=exports.installChildAppBridge=exports.nestTap=exports.bullmqTap=exports.redisTap=exports.pgTap=exports.tapExec=exports.tapFs=exports.tapEgress=exports.installRequireHook=exports.createEventFloodGuard=exports.maybeRotateEventFile=exports.EVENT_MAX_FILES=exports.EVENT_MAX_BYTES=exports.EVENT_FILE=exports.PROJECT=exports.isLensWriting=exports.lensEmit=void 0;var emit_1=require("./lib/emit");Object.defineProperty(exports,"lensEmit",{enumerable:!0,get:e(function(){return emit_1.lensEmit},"get")}),Object.defineProperty(exports,"isLensWriting",{enumerable:!0,get:e(function(){return emit_1.isLensWriting},"get")}),Object.defineProperty(exports,"PROJECT",{enumerable:!0,get:e(function(){return emit_1.PROJECT},"get")}),Object.defineProperty(exports,"EVENT_FILE",{enumerable:!0,get:e(function(){return emit_1.EVENT_FILE},"get")}),Object.defineProperty(exports,"EVENT_MAX_BYTES",{enumerable:!0,get:e(function(){return emit_1.EVENT_MAX_BYTES},"get")}),Object.defineProperty(exports,"EVENT_MAX_FILES",{enumerable:!0,get:e(function(){return emit_1.EVENT_MAX_FILES},"get")}),Object.defineProperty(exports,"maybeRotateEventFile",{enumerable:!0,get:e(function(){return emit_1.maybeRotateEventFile},"get")});var flood_guard_1=require("./lib/flood-guard");Object.defineProperty(exports,"createEventFloodGuard",{enumerable:!0,get:e(function(){return flood_guard_1.createEventFloodGuard},"get")});var require_hook_1=require("./lib/require-hook");Object.defineProperty(exports,"installRequireHook",{enumerable:!0,get:e(function(){return require_hook_1.installRequireHook},"get")});var tap_egress_1=require("./lib/tap-egress");Object.defineProperty(exports,"tapEgress",{enumerable:!0,get:e(function(){return tap_egress_1.tapEgress},"get")});var tap_fs_1=require("./lib/tap-fs");Object.defineProperty(exports,"tapFs",{enumerable:!0,get:e(function(){return tap_fs_1.tapFs},"get")});var tap_exec_1=require("./lib/tap-exec");Object.defineProperty(exports,"tapExec",{enumerable:!0,get:e(function(){return tap_exec_1.tapExec},"get")});var tap_pg_1=require("./lib/tap-pg");Object.defineProperty(exports,"pgTap",{enumerable:!0,get:e(function(){return tap_pg_1.pgTap},"get")});var tap_redis_1=require("./lib/tap-redis");Object.defineProperty(exports,"redisTap",{enumerable:!0,get:e(function(){return tap_redis_1.redisTap},"get")});var tap_bullmq_1=require("./lib/tap-bullmq");Object.defineProperty(exports,"bullmqTap",{enumerable:!0,get:e(function(){return tap_bullmq_1.bullmqTap},"get")});var tap_nest_1=require("./lib/tap-nest");Object.defineProperty(exports,"nestTap",{enumerable:!0,get:e(function(){return tap_nest_1.nestTap},"get")}),Object.defineProperty(exports,"installChildAppBridge",{enumerable:!0,get:e(function(){return tap_nest_1.installChildAppBridge},"get")});var install_1=require("./lib/install");Object.defineProperty(exports,"installLensmcpNodeInstrumentation",{enumerable:!0,get:e(function(){return install_1.installLensmcpNodeInstrumentation},"get")});

package/lib/emit.js

@@ -1,187 +1,3 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.EVENT_FILE = exports.PROJECT = exports.EVENT_MAX_FILES = exports.EVENT_MAX_BYTES = void 0;
-exports.maybeRotateEventFile = maybeRotateEventFile;
-exports.isLensWriting = isLensWriting;
-exports.lensEmit = lensEmit;
-exports.lensLog = lensLog;
-const tslib_1 = require("tslib");
-/**
- * The LensMCP bus writer for zero-touch taps — file rendezvous, one
- * BaseEvent-shaped JSON line per event (the exact shape the cluster
- * dashboard reducers consume: source db/redis/queue/external/fs/exec,
- * category `cluster`, raw `{ project, name, kind, … }`).
- *
- * The fs originals are BOUND to local consts at module load, BEFORE the fs
- * tap patches the fs namespace — so the lens writing to its own bus calls the
- * pristine functions and can never recurse into its own instrumentation. (A
- * bare `import { appendFileSync }` compiles to a LIVE namespace read, which
- * would pick up the tap's wrapper after patching — hence the explicit bind.)
- * `isLensWriting()` is a second belt for anything that still re-enters.
- */
-const nodeFs = tslib_1.__importStar(require("node:fs"));
-const node_path_1 = require("node:path");
-const flood_guard_1 = require("./flood-guard");
-// Pristine references, frozen at load — immune to the fs tap's later patching.
-const appendFileSync = nodeFs.appendFileSync;
-const mkdirSync = nodeFs.mkdirSync;
-const statSync = nodeFs.statSync;
-const renameSync = nodeFs.renameSync;
-const unlinkSync = nodeFs.unlinkSync;
-/** Per-generation cap for the events.jsonl bus (a long-running dev session hit 9 GB in the wild, and
- *  a 254 MB file OOM-crash-looped every ingesting consumer in the 2026-07-28 flood). Override with
- *  `LENSMCP_EVENT_MAX_BYTES` (default 50 MB). 0/invalid ⇒ the default. */
-exports.EVENT_MAX_BYTES = (() => {
-    const n = Number(process.env['LENSMCP_EVENT_MAX_BYTES']);
-    return Number.isFinite(n) && n > 0 ? n : 50 * 1024 * 1024;
-})();
-/** Rotated generations kept as history (`events.jsonl.1` … `.N`, newest → oldest). With the live
- *  file that bounds a workspace to (N+1) × EVENT_MAX_BYTES (~300 MB at defaults). Override with
- *  `LENSMCP_EVENT_MAX_FILES`. */
-exports.EVENT_MAX_FILES = (() => {
-    const n = Number(process.env['LENSMCP_EVENT_MAX_FILES']);
-    return Number.isFinite(n) && n >= 1 && n <= 20 ? Math.floor(n) : 5;
-})();
-const ROTATE_CHECK_BYTES = 1024 * 1024; // statSync at most ~once per MB appended (cheap amortized)
-const bytesSinceCheck = new Map();
-/**
- * Round-robin rotation for a bus file: when the live file exceeds the per-generation cap, drop the
- * oldest generation, shift `.1` → `.2` → … → `.N`, and rename the live file to `.1` (the next append
- * recreates it fresh). Throttled by a per-file byte counter so we `statSync` at most ~once per MB,
- * not per event. Best-effort + fs-tap-safe (pristine refs, callers hold `writing`). Many processes
- * append to the same path — the final `renameSync` is atomic, so a concurrent rotate that loses the
- * race just throws ENOENT and no-ops (a racing shift can at worst mis-order HISTORY generations,
- * never touch the live file). Exported so every OTHER writer to the shared bus (the cluster
- * gateway's observability emit) enforces the same contract — the gateway was the one writer with NO
- * rotation, which is how foodguard's bus outgrew every consumer. `caps` exists for tests.
- */
-function maybeRotateEventFile(file, addedBytes, caps) {
-    const sofar = (bytesSinceCheck.get(file) ?? 0) + addedBytes;
-    if (sofar < ROTATE_CHECK_BYTES && caps === undefined) {
-        bytesSinceCheck.set(file, sofar);
-        return;
-    }
-    bytesSinceCheck.set(file, 0);
-    const maxBytes = caps?.maxBytes ?? exports.EVENT_MAX_BYTES;
-    const maxFiles = caps?.maxFiles ?? exports.EVENT_MAX_FILES;
-    try {
-        if (statSync(file).size <= maxBytes)
-            return;
-    }
-    catch {
-        return; /* missing / already rotated by another writer — fine */
-    }
-    try {
-        unlinkSync(`${file}.${maxFiles}`);
-    }
-    catch {
-        /* no oldest generation to drop */
-    }
-    for (let gen = maxFiles - 1; gen >= 1; gen--) {
-        try {
-            renameSync(`${file}.${gen}`, `${file}.${gen + 1}`);
-        }
-        catch {
-            /* that generation doesn't exist (yet) */
-        }
-    }
-    try {
-        renameSync(file, `${file}.1`);
-    }
-    catch {
-        /* lost the rotate race to a concurrent writer — its cascade already ran */
-    }
-}
-/** Service identity stamped on every event (set by the cluster serve executor). */
-exports.PROJECT = process.env['LENSMCP_PROJECT'] || process.env['SERVICE_NAME'] || 'app';
-/** The file bus — same default the cluster gateway and dashboard use. */
-exports.EVENT_FILE = process.env['LENSMCP_EVENT_FILE'] || `${process.cwd()}/.lensmcp/events.jsonl`;
-let writing = false;
-let dirReady = false;
-// Flood guards: one hot fingerprint (a query fired in a loop, a component rendering per frame) keeps
-// its first burst + a trickle with `floodSuppressed` counts, instead of flooding the bus file. Logs get
-// a laxer bucket — boot storms of a few hundred lines are normal; sustained >20 lines/s is log-spam the
-// bus shouldn't mirror unboundedly.
-const emitGuard = (0, flood_guard_1.createEventFloodGuard)({ burst: 30, perSec: 5 });
-const logGuard = (0, flood_guard_1.createEventFloodGuard)({ burst: 120, perSec: 20 });
-/** True while the lens itself is appending — the fs tap skips self-writes. */
-function isLensWriting() {
-    return writing;
-}
-function lensEmit(source, severity, title, raw, fingerprint, flowCtx) {
-    try {
-        writing = true;
-        const fp = fingerprint ?? `${source}:${String(raw['name'] ?? source)}`;
-        const admit = emitGuard.admit(fp);
-        if (!admit.ok)
-            return; // flood-guarded — the next admitted event carries the suppressed count
-        if (!dirReady) {
-            mkdirSync((0, node_path_1.dirname)(exports.EVENT_FILE), { recursive: true });
-            dirReady = true;
-        }
-        const line = JSON.stringify({
-            id: Date.now().toString(36) + Math.random().toString(36).slice(2, 10),
-            sessionId: 'pending',
-            timestamp: Date.now(),
-            source,
-            category: 'cluster',
-            severity,
-            context: {
-                sessionId: 'pending',
-                projectName: exports.PROJECT,
-                ...(flowCtx?.flowId ? { flowId: flowCtx.flowId } : {}),
-                ...(flowCtx?.requestId ? { requestId: flowCtx.requestId } : {}),
-                ...(flowCtx?.originNodeId ? { originNodeId: flowCtx.originNodeId } : {}),
-            },
-            fingerprint: fp,
-            title,
-            raw: { project: exports.PROJECT, ...raw, ...(admit.suppressed > 0 ? { floodSuppressed: admit.suppressed } : {}) },
-        }) + '\n';
-        maybeRotateEventFile(exports.EVENT_FILE, line.length);
-        appendFileSync(exports.EVENT_FILE, line);
-    }
-    catch {
-        /* lens offline — never break the host */
-    }
-    finally {
-        writing = false;
-    }
-}
-/**
- * Emit a raw service log line — the ACTUAL stdout/Logger output a pod prints — as
- * a `runtime` event so it surfaces in the dashboard Logs view. Same fs-tap-safe
- * write path as {@link lensEmit}; `source: 'nestjs'` + `raw.project` carries the
- * concrete service name (which the dashboard prefers as the log's source).
- */
-function lensLog(severity, title) {
-    try {
-        writing = true;
-        const admit = logGuard.admit(`log:${exports.PROJECT}`);
-        if (!admit.ok)
-            return; // log-spam guard — the next admitted line carries the suppressed count
-        if (!dirReady) {
-            mkdirSync((0, node_path_1.dirname)(exports.EVENT_FILE), { recursive: true });
-            dirReady = true;
-        }
-        const line = JSON.stringify({
-            id: Date.now().toString(36) + Math.random().toString(36).slice(2, 10),
-            sessionId: 'pending',
-            timestamp: Date.now(),
-            source: 'nestjs',
-            category: 'runtime',
-            severity,
-            context: { sessionId: 'pending', projectName: exports.PROJECT },
-            fingerprint: `log:${exports.PROJECT}`,
-            title,
-            raw: { project: exports.PROJECT, kind: 'log', ...(admit.suppressed > 0 ? { floodSuppressed: admit.suppressed } : {}) },
-        }) + '\n';
-        maybeRotateEventFile(exports.EVENT_FILE, line.length);
-        appendFileSync(exports.EVENT_FILE, line);
-    }
-    catch {
-        /* lens offline — never break the host */
-    }
-    finally {
-        writing = false;
-    }
-}
+"use strict";var u=Object.defineProperty;var E=(e,t)=>u(e,"name",{value:t,configurable:!0});var d=Object.defineProperty,i=E((e,t)=>d(e,"name",{value:t,configurable:!0}),"i");Object.defineProperty(exports,"__esModule",{value:!0}),exports.EVENT_FILE=exports.PROJECT=exports.EVENT_MAX_FILES=exports.EVENT_MAX_BYTES=void 0,exports.maybeRotateEventFile=maybeRotateEventFile,exports.isLensWriting=isLensWriting,exports.lensEmit=lensEmit,exports.lensLog=lensLog;const tslib_1=require("tslib"),nodeFs=tslib_1.__importStar(require("node:fs")),node_path_1=require("node:path"),flood_guard_1=require("./flood-guard"),appendFileSync=nodeFs.appendFileSync,mkdirSync=nodeFs.mkdirSync,statSync=nodeFs.statSync,renameSync=nodeFs.renameSync,unlinkSync=nodeFs.unlinkSync;exports.EVENT_MAX_BYTES=(()=>{const e=Number(process.env.LENSMCP_EVENT_MAX_BYTES);return Number.isFinite(e)&&e>0?e:50*1024*1024})(),exports.EVENT_MAX_FILES=(()=>{const e=Number(process.env.LENSMCP_EVENT_MAX_FILES);return Number.isFinite(e)&&e>=1&&e<=20?Math.floor(e):5})();const ROTATE_CHECK_BYTES=1024*1024,bytesSinceCheck=new Map;function maybeRotateEventFile(e,t,r){const n=(bytesSinceCheck.get(e)??0)+t;if(n<ROTATE_CHECK_BYTES&&r===void 0){bytesSinceCheck.set(e,n);return}bytesSinceCheck.set(e,0);const p=r?.maxBytes??exports.EVENT_MAX_BYTES,s=r?.maxFiles??exports.EVENT_MAX_FILES;try{if(statSync(e).size<=p)return}catch{return}try{unlinkSync(`${e}.${s}`)}catch{}for(let o=s-1;o>=1;o--)try{renameSync(`${e}.${o}`,`${e}.${o+1}`)}catch{}try{renameSync(e,`${e}.1`)}catch{}}E(maybeRotateEventFile,"maybeRotateEventFile"),i(maybeRotateEventFile,"maybeRotateEventFile"),exports.PROJECT=process.env.LENSMCP_PROJECT||process.env.SERVICE_NAME||"app",exports.EVENT_FILE=process.env.LENSMCP_EVENT_FILE||`${process.cwd()}/.lensmcp/events.jsonl`;let writing=!1,dirReady=!1;const emitGuard=(0,flood_guard_1.createEventFloodGuard)({burst:30,perSec:5}),logGuard=(0,flood_guard_1.createEventFloodGuard)({burst:120,perSec:20});function isLensWriting(){return writing}E(isLensWriting,"isLensWriting"),i(isLensWriting,"isLensWriting");function lensEmit(e,t,r,n,p,s){try{writing=!0;const o=p??`${e}:${String(n.name??e)}`,c=emitGuard.admit(o);if(!c.ok)return;dirReady||(mkdirSync((0,node_path_1.dirname)(exports.EVENT_FILE),{recursive:!0}),dirReady=!0);const a=JSON.stringify({id:Date.now().toString(36)+Math.random().toString(36).slice(2,10),sessionId:"pending",timestamp:Date.now(),source:e,category:"cluster",severity:t,context:{sessionId:"pending",projectName:exports.PROJECT,...s?.flowId?{flowId:s.flowId}:{},...s?.requestId?{requestId:s.requestId}:{},...s?.originNodeId?{originNodeId:s.originNodeId}:{}},fingerprint:o,title:r,raw:{project:exports.PROJECT,...n,...c.suppressed>0?{floodSuppressed:c.suppressed}:{}}})+`
+`;maybeRotateEventFile(exports.EVENT_FILE,a.length),appendFileSync(exports.EVENT_FILE,a)}catch{}finally{writing=!1}}E(lensEmit,"lensEmit"),i(lensEmit,"lensEmit");function lensLog(e,t){try{writing=!0;const r=logGuard.admit(`log:${exports.PROJECT}`);if(!r.ok)return;dirReady||(mkdirSync((0,node_path_1.dirname)(exports.EVENT_FILE),{recursive:!0}),dirReady=!0);const n=JSON.stringify({id:Date.now().toString(36)+Math.random().toString(36).slice(2,10),sessionId:"pending",timestamp:Date.now(),source:"nestjs",category:"runtime",severity:e,context:{sessionId:"pending",projectName:exports.PROJECT},fingerprint:`log:${exports.PROJECT}`,title:t,raw:{project:exports.PROJECT,kind:"log",...r.suppressed>0?{floodSuppressed:r.suppressed}:{}}})+`
+`;maybeRotateEventFile(exports.EVENT_FILE,n.length),appendFileSync(exports.EVENT_FILE,n)}catch{}finally{writing=!1}}E(lensLog,"lensLog"),i(lensLog,"lensLog");

package/lib/flood-guard.js

@@ -1,70 +1 @@
-"use strict";
-/**
- * Per-fingerprint event flood guard — a token bucket per fingerprint, shared by
- * every bus WRITER (lensEmit, the cluster gateway's observability emit, the
- * bridge env sink mirrors it). One hot fingerprint (an app retrying a fetch in
- * a loop, a valtio store churning per frame) must not be able to write hundreds
- * of lines/sec into events.jsonl: the 2026-07-28 incident sustained ~680 ev/s,
- * grew the bus file to 254 MB in two hours, and OOM-crash-looped every consumer
- * that ingests it. The guard keeps the SIGNAL (the first burst, then a trickle
- * with a `floodSuppressed` count) while dropping the redundant repetition.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createEventFloodGuard = createEventFloodGuard;
-/** `LENSMCP_EVENT_MAX_EPS` overrides the sustained per-fingerprint rate; `0`/`off` disables the guard. */
-function envPerSec() {
-    const raw = process.env['LENSMCP_EVENT_MAX_EPS'];
-    if (raw === undefined || raw === '')
-        return undefined;
-    if (raw === 'off')
-        return 'off';
-    const n = Number(raw);
-    if (!Number.isFinite(n))
-        return undefined;
-    return n <= 0 ? 'off' : n;
-}
-function createEventFloodGuard(opts) {
-    const env = envPerSec();
-    if (env === 'off')
-        return { admit: () => ({ ok: true, suppressed: 0 }) };
-    const perSec = env ?? opts?.perSec ?? 5;
-    const burst = Math.max(1, opts?.burst ?? Math.max(30, perSec * 4));
-    const maxKeys = opts?.maxKeys ?? 2048;
-    const buckets = new Map();
-    const evictStale = (now) => {
-        // A full bucket carries no state worth keeping — evict anything idle >60s.
-        for (const [k, b] of buckets) {
-            if (now - b.lastSeenAt > 60_000)
-                buckets.delete(k);
-        }
-        // Pathological cardinality (unique fingerprints per event) — reset rather than grow.
-        if (buckets.size > maxKeys)
-            buckets.clear();
-    };
-    return {
-        admit(fingerprint) {
-            const now = Date.now();
-            let b = buckets.get(fingerprint);
-            if (!b) {
-                if (buckets.size >= maxKeys)
-                    evictStale(now);
-                b = { tokens: burst, lastRefillAt: now, suppressed: 0, lastSeenAt: now };
-                buckets.set(fingerprint, b);
-            }
-            b.lastSeenAt = now;
-            const elapsed = now - b.lastRefillAt;
-            if (elapsed > 0) {
-                b.tokens = Math.min(burst, b.tokens + (elapsed / 1000) * perSec);
-                b.lastRefillAt = now;
-            }
-            if (b.tokens >= 1) {
-                b.tokens -= 1;
-                const suppressed = b.suppressed;
-                b.suppressed = 0;
-                return { ok: true, suppressed };
-            }
-            b.suppressed += 1;
-            return { ok: false, suppressed: 0 };
-        },
-    };
-}
+"use strict";var m=Object.defineProperty;var i=(t,s)=>m(t,"name",{value:s,configurable:!0});var p=Object.defineProperty,o=i((t,s)=>p(t,"name",{value:s,configurable:!0}),"o");Object.defineProperty(exports,"__esModule",{value:!0}),exports.createEventFloodGuard=createEventFloodGuard;function envPerSec(){const t=process.env.LENSMCP_EVENT_MAX_EPS;if(t===void 0||t==="")return;if(t==="off")return"off";const s=Number(t);if(Number.isFinite(s))return s<=0?"off":s}i(envPerSec,"envPerSec"),o(envPerSec,"envPerSec");function createEventFloodGuard(t){const s=envPerSec();if(s==="off")return{admit:o(()=>({ok:!0,suppressed:0}),"admit")};const u=s??t?.perSec??5,c=Math.max(1,t?.burst??Math.max(30,u*4)),f=t?.maxKeys??2048,n=new Map,d=o(a=>{for(const[r,e]of n)a-e.lastSeenAt>6e4&&n.delete(r);n.size>f&&n.clear()},"evictStale");return{admit(a){const r=Date.now();let e=n.get(a);e||(n.size>=f&&d(r),e={tokens:c,lastRefillAt:r,suppressed:0,lastSeenAt:r},n.set(a,e)),e.lastSeenAt=r;const l=r-e.lastRefillAt;if(l>0&&(e.tokens=Math.min(c,e.tokens+l/1e3*u),e.lastRefillAt=r),e.tokens>=1){e.tokens-=1;const v=e.suppressed;return e.suppressed=0,{ok:!0,suppressed:v}}return e.suppressed+=1,{ok:!1,suppressed:0}}}}i(createEventFloodGuard,"createEventFloodGuard"),o(createEventFloodGuard,"createEventFloodGuard");

package/lib/flow-context.js

@@ -1,57 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.primeFlowContext = primeFlowContext;
-exports.runInFlowContext = runInFlowContext;
-exports.liveFlowContext = liveFlowContext;
-exports.flowContext = flowContext;
-let getCtx = null;
-let runWith = null;
-function primeFlowContext() {
-    import('@lensmcp/nest-instrumentation')
-        .then((m) => {
-        getCtx = m.currentLensmcpContext;
-        runWith = m.runInLensmcpContext;
-    })
-        .catch(() => {
-        /* nest instrumentation absent — tap events stay un-correlated */
-    });
-}
-/**
- * Run `fn` inside a fresh flow context (queue workers, timers — async
- * entry points that aren't HTTP requests). Inner taps then inherit the
- * flowId exactly like they do inside a traced request.
- */
-function runInFlowContext(ctx, fn) {
-    if (!runWith)
-        return fn();
-    try {
-        return runWith({ sessionId: 'pending', requestId: ctx.requestId, ...(ctx.flowId ? { flowId: ctx.flowId } : {}) }, fn);
-    }
-    catch {
-        return fn();
-    }
-}
-/**
- * The LIVE (mutable) request context — taps bump its operation counters
- * (db/redis/external) so the span wrapper's loop detector can report
- * "this method issued N of these" (the N+1 / fan-out signal).
- */
-function liveFlowContext() {
-    try {
-        return getCtx?.();
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Snapshot the live flow context — call AT the operation site, before awaits. */
-function flowContext() {
-    const ctx = liveFlowContext();
-    if (!ctx)
-        return undefined;
-    return {
-        ...(ctx.flowId ? { flowId: ctx.flowId } : {}),
-        ...(ctx.requestId ? { requestId: ctx.requestId } : {}),
-        ...(ctx.originNodeId ? { originNodeId: ctx.originNodeId } : {}),
-    };
-}
+"use strict";var l=Object.defineProperty;var r=(e,t)=>l(e,"name",{value:t,configurable:!0});var o=Object.defineProperty,n=r((e,t)=>o(e,"name",{value:t,configurable:!0}),"n");Object.defineProperty(exports,"__esModule",{value:!0}),exports.primeFlowContext=primeFlowContext,exports.runInFlowContext=runInFlowContext,exports.liveFlowContext=liveFlowContext,exports.flowContext=flowContext;let getCtx=null,runWith=null;function primeFlowContext(){import("@lensmcp/nest-instrumentation").then(e=>{getCtx=e.currentLensmcpContext,runWith=e.runInLensmcpContext}).catch(()=>{})}r(primeFlowContext,"primeFlowContext"),n(primeFlowContext,"primeFlowContext");function runInFlowContext(e,t){if(!runWith)return t();try{return runWith({sessionId:"pending",requestId:e.requestId,...e.flowId?{flowId:e.flowId}:{}},t)}catch{return t()}}r(runInFlowContext,"runInFlowContext"),n(runInFlowContext,"runInFlowContext");function liveFlowContext(){try{return getCtx?.()}catch{return}}r(liveFlowContext,"liveFlowContext"),n(liveFlowContext,"liveFlowContext");function flowContext(){const e=liveFlowContext();if(e)return{...e.flowId?{flowId:e.flowId}:{},...e.requestId?{requestId:e.requestId}:{},...e.originNodeId?{originNodeId:e.originNodeId}:{}}}r(flowContext,"flowContext"),n(flowContext,"flowContext");

package/lib/install.js

@@ -1,64 +1 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installLensmcpNodeInstrumentation = installLensmcpNodeInstrumentation;
-/**
- * Installs every zero-touch tap once (idempotent via a global marker):
- *
- *   builtins/globals — fetch + http/https (egress), fs (aggregated), child_process (exec)
- *   require hook     — pg (db) · ioredis (redis) · bullmq (queue) · @nestjs/core (class
- *                      traces via LensmcpModule graft + zero-touch pod bootstrap)
- *
- * Kill switches: LENSMCP_AUTO=0 disables everything; LENSMCP_NEST=0 keeps the
- * taps but skips the NestJS graft.
- */
-const require_hook_1 = require("./require-hook");
-const flow_context_1 = require("./flow-context");
-const tap_egress_1 = require("./tap-egress");
-const tap_fs_1 = require("./tap-fs");
-const tap_exec_1 = require("./tap-exec");
-const tap_pg_1 = require("./tap-pg");
-const tap_redis_1 = require("./tap-redis");
-const tap_bullmq_1 = require("./tap-bullmq");
-const tap_nest_1 = require("./tap-nest");
-const tap_stdout_1 = require("./tap-stdout");
-function installLensmcpNodeInstrumentation() {
-    const g = globalThis;
-    if (g['__lensmcpNodeInstrumented'])
-        return;
-    g['__lensmcpNodeInstrumented'] = true;
-    if (process.env['LENSMCP_AUTO'] === '0')
-        return;
-    try {
-        (0, flow_context_1.primeFlowContext)();
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, tap_egress_1.tapEgress)();
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, tap_fs_1.tapFs)();
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, tap_exec_1.tapExec)();
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, tap_stdout_1.tapStdout)();
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, require_hook_1.installRequireHook)({
-            pg: tap_pg_1.pgTap,
-            ioredis: tap_redis_1.redisTap,
-            bullmq: tap_bullmq_1.bullmqTap,
-            '@nestjs/core': tap_nest_1.nestTap,
-        });
-    }
-    catch { /* never break the host */ }
-    try {
-        (0, tap_nest_1.installChildAppBridge)();
-    }
-    catch { /* never break the host */ }
-}
+"use strict";var p=Object.defineProperty;var a=(t,r)=>p(t,"name",{value:r,configurable:!0});var s=Object.defineProperty,e=a((t,r)=>s(t,"name",{value:r,configurable:!0}),"e");Object.defineProperty(exports,"__esModule",{value:!0}),exports.installLensmcpNodeInstrumentation=installLensmcpNodeInstrumentation;const require_hook_1=require("./require-hook"),flow_context_1=require("./flow-context"),tap_egress_1=require("./tap-egress"),tap_fs_1=require("./tap-fs"),tap_exec_1=require("./tap-exec"),tap_pg_1=require("./tap-pg"),tap_redis_1=require("./tap-redis"),tap_bullmq_1=require("./tap-bullmq"),tap_nest_1=require("./tap-nest"),tap_stdout_1=require("./tap-stdout");function installLensmcpNodeInstrumentation(){const t=globalThis;if(!t.__lensmcpNodeInstrumented&&(t.__lensmcpNodeInstrumented=!0,process.env.LENSMCP_AUTO!=="0")){try{(0,flow_context_1.primeFlowContext)()}catch{}try{(0,tap_egress_1.tapEgress)()}catch{}try{(0,tap_fs_1.tapFs)()}catch{}try{(0,tap_exec_1.tapExec)()}catch{}try{(0,tap_stdout_1.tapStdout)()}catch{}try{(0,require_hook_1.installRequireHook)({pg:tap_pg_1.pgTap,ioredis:tap_redis_1.redisTap,bullmq:tap_bullmq_1.bullmqTap,"@nestjs/core":tap_nest_1.nestTap})}catch{}try{(0,tap_nest_1.installChildAppBridge)()}catch{}}}a(installLensmcpNodeInstrumentation,"installLensmcpNodeInstrumentation"),e(installLensmcpNodeInstrumentation,"installLensmcpNodeInstrumentation");

package/lib/require-hook.js

@@ -1,52 +1 @@
-"use strict";
-/**
- * CJS require hook: the cluster's dev webpack config externalizes every real
- * node_modules package (`commonjs <request>`), so at pod runtime `pg`,
- * `ioredis`, `bullmq` and `@nestjs/core` arrive through `Module._load`. We
- * intercept the EXACT package names and mutate their exports IN PLACE
- * (prototype/static patches, never proxies) — ESM `import` of the same CJS
- * package yields the same exports object, so both module systems observe the
- * patched behavior.
- */
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.installRequireHook = installRequireHook;
-const tapped = new Set();
-function runTap(name, tap, exportsObject) {
-    try {
-        const installed = tap(exportsObject);
-        if (installed !== false)
-            tapped.add(name);
-    }
-    catch {
-        tapped.add(name); // a THROWING tap must not retry forever
-    }
-}
-function installRequireHook(taps) {
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const Module = require('node:module');
-    const origLoad = Module._load;
-    Module._load = function (request, ...rest) {
-        const exportsObject = origLoad.call(this, request, ...rest);
-        const tap = taps[request];
-        if (tap && !tapped.has(request))
-            runTap(request, tap, exportsObject);
-        return exportsObject;
-    };
-    // Anything already loaded before the hook installed gets tapped from cache.
-    for (const name of Object.keys(taps)) {
-        if (tapped.has(name))
-            continue;
-        const tap = taps[name];
-        if (!tap)
-            continue;
-        try {
-            const resolved = require.resolve(name);
-            const cached = require.cache[resolved];
-            if (cached)
-                runTap(name, tap, cached.exports);
-        }
-        catch {
-            /* package not installed in this workspace — fine */
-        }
-    }
-}
+"use strict";var l=Object.defineProperty;var s=(e,n)=>l(e,"name",{value:n,configurable:!0});var a=Object.defineProperty,r=s((e,n)=>a(e,"name",{value:n,configurable:!0}),"r");Object.defineProperty(exports,"__esModule",{value:!0}),exports.installRequireHook=installRequireHook;const tapped=new Set;function runTap(e,n,u){try{n(u)!==!1&&tapped.add(e)}catch{tapped.add(e)}}s(runTap,"runTap"),r(runTap,"runTap");function installRequireHook(e){const n=require("node:module"),u=n._load;n._load=function(t,...c){const i=u.call(this,t,...c),o=e[t];return o&&!tapped.has(t)&&runTap(t,o,i),i};for(const t of Object.keys(e)){if(tapped.has(t))continue;const c=e[t];if(c)try{const i=require.resolve(t),o=require.cache[i];o&&runTap(t,c,o.exports)}catch{}}}s(installRequireHook,"installRequireHook"),r(installRequireHook,"installRequireHook");