@lunora/observability 1.0.0-alpha.5 → 1.0.0-alpha.51

package/README.md

@@ -27,7 +27,7 @@ Three details are Cloudflare's rather than this package's, so the host passes th
 
 - **AI model** — `explainIssue(binding, args, { defaultModel })`. `DEFAULT_EXPLAIN_ISSUE_MODEL` is a Workers AI id, exported so the Cloudflare host has a name to pass rather than a string literal.
 - **Query batch size** — `readIssueStates(sql, hashes, { hashQueryBatch })`. `DEFAULT_HASH_QUERY_BATCH` is 100, the Durable Object SQLite bound-parameter cap; a host with a different cap passes its own.
-- **Span projections** — `HostSpanLike`, `HostTracingLike`, `HostTracingResolver`, `resolveHostTracing`, `fuseHostSpans`, `applyHostSpanAttributes`. Named for the role, not the provider. Cloudflare's `enterSpan` callback argument is one shape that satisfies them.
+- **Span projections** — the exported types `HostSpanLike`, `HostTracingLike` and `HostTracingResolver`. Named for the role, not the provider; Cloudflare's `enterSpan` callback argument is one shape that satisfies them. The host injects its tracer through the `TracerDeps` option fields `fuseHostSpans?: boolean` and `resolveHostTracing?: HostTracingResolver` — those are option names, not exported values, and the resolver itself lives in the host (`@lunora/do`'s `shard-do.ts` guards a dynamic `import("cloudflare:workers")`).
 
 ## Importing it
 

package/dist/index.d.mts

@@ -64,9 +64,9 @@ declare const ensureAuthMetricsTables: (sql: SqlExec) => void;
  * `failures` advances only when `outcome === "fail"`. `since_ms` is set once on
  * the first attempt and never moved (so it stays a true first-seen marker).
  *
- * Exactly two `INSERT … ON CONFLICT … DO UPDATE` statements plus a bounded
- * `DELETE`, all keyed by primary key — cheap enough to fire off the auth
- * response path without blocking it.
+ * Exactly two `INSERT … ON CONFLICT … DO UPDATE` statements, all keyed by
+ * primary key, plus a bounded `DELETE` that runs once per bucket window —
+ * cheap enough to fire off the auth response path without blocking it.
  */
 declare const recordAuthEvent: (sql: SqlExec, input: RecordAuthEventInput) => void;
 /**
@@ -605,7 +605,7 @@ declare const createSpanCollector: (ids: {
  *
  * **DO async-context caveat (EXPERIMENTAL, partially workerd-validated).**
  * `tracing.enterSpan` is now confirmed to EXIST and RUN inside a real Durable
- * Object under `@cloudflare/vitest-pool-workers` (see
+ * Object under `@cloudflare/vitest-plugin` (see
  * `__tests__/workerd/context-telemetry-cf-bridge.workerd.test.ts`): it resolves
  * from `cloudflare:workers`, its callback executes and returns the body value
  * without throwing, `span.isTraced` is a real boolean, and — the key additive
@@ -625,6 +625,14 @@ declare const createTracer: (deps: TracerDeps) => ContextTracer;
 interface TracedFetchDeps {
   /** The trace the CLIENT spans belong to. */
   anchor: TraceAnchor;
+  /**
+   * Whether to record a failed fetch's error message verbatim rather than
+   * redacted. Same dev-only escape hatch as {@link TracerDeps.captureRaw}, and
+   * the same reason: a `fetch` TypeError embeds the request URL, so a key in a
+   * query string would otherwise reach the collector in the clear on the very
+   * span whose `url.full` is scrubbed by `redactUrl`.
+   */
+  captureRaw?: boolean;
   /** Function path the spans are attributed to. */
   functionPath: string;
   /**
@@ -911,7 +919,7 @@ interface RecordFunctionMetricInput {
    * dispatch used no declared index, keeping the hot path unchanged.
    */
   indexHits?: ReadonlyArray<IndexHit>;
-  /** The `&lt;file>:&lt;function>` identifier. */
+  /** The `<file>:<function>` identifier. */
   path: string;
   /**
    * Distinct tables this dispatch full-scanned (read with no index / point
@@ -1040,7 +1048,7 @@ interface AiRunBinding {
 }
 /** Parsed `__lunora_admin__:explainIssue` payload: the folded Issue's identifying facts, plus an optional model override. */
 interface ExplainIssueArgs {
-  /** The Issue's culprit (`&lt;file>:&lt;function>` or `container:&lt;name>`), for grounding context. */
+  /** The Issue's culprit (`<file>:<function>` or `container:<name>`), for grounding context. */
   culprit?: string;
   /** Per-request model-id override; falls back to the caller's `defaultModel`, then {@link DEFAULT_EXPLAIN_ISSUE_MODEL}. */
   model?: string;
@@ -1189,13 +1197,15 @@ type LogLevel = ContextLogLevel;
  */
 interface LogEntry {
   exitCode?: number;
-  /** Structured fields from a `ctx.log.&lt;level>(message, fields)` / `ctx.log.with(fields)` call, when present. */
+  /** Structured fields from a `ctx.log.<level>(message, fields)` / `ctx.log.with(fields)` call, when present. */
   fields?: Record<string, unknown>;
   functionPath?: string;
   instance?: string;
   level: LogLevel;
   message: string;
   timestamp: number;
+  /** Trace the line was emitted under; absent outside a dispatch (container lifecycle, hibernation-path errors). What the Studio joins a log line to its waterfall on. */
+  traceId?: string;
 }
 /**
  * A bounded, in-memory ring buffer of recent {@link LogEntry} records.
@@ -1480,7 +1490,7 @@ interface RequestLogEntry {
   durationMs: number;
   /** Error message when `outcome === "error"`, redacted like args/identity; absent on success. */
   errorMessage?: string;
-  /** The `&lt;file>:&lt;function>` identifier dispatched, e.g. `messages:list`. */
+  /** The `<file>:<function>` identifier dispatched, e.g. `messages:list`. */
   functionPath: string;
   /** Identity-claim envelope forwarded by the runtime, JSON-decoded; leaf values are redacted (the claims are PII), so only the shape survives. Absent for anonymous requests. Correlate on `userId` instead. */
   identity?: Record<string, unknown>;
@@ -1498,6 +1508,8 @@ interface RequestLogEntry {
   tablesRead: string[];
   /** Tables the handler wrote (from the change tracker); empty for a read-only dispatch. */
   tablesWritten: string[];
+  /** W3C trace id (32-hex) of the dispatch; `undefined` on a row appended before this column existed. See the module docstring on the retention asymmetry. */
+  traceId?: string;
   /** Wall-clock millis when the dispatch completed. */
   ts: number;
   /** Acting userId forwarded by the runtime, or `undefined` when anonymous. */
@@ -1516,6 +1528,7 @@ interface AppendRequestLogEntry {
   subscriptionsReRun?: number;
   tablesRead?: string[];
   tablesWritten?: string[];
+  traceId?: string;
   ts: number;
   userId?: string;
 }
@@ -1528,7 +1541,7 @@ interface RequestLogWriteOptions {
 }
 /** Filters for {@link readRequestLog}, all AND-combined; every value is a bound SQL parameter, so nothing here injects SQL. */
 interface ReadRequestLogOptions {
-  /** Functions whose path begins with this prefix (a `&lt;file>:` or `&lt;file>:&lt;fn>` correlation). */
+  /** Functions whose path begins with this prefix (a `<file>:` or `<file>:<fn>` correlation). */
   functionPathPrefix?: string;
   /** Upper bound on returned rows, clamped to [1, 10000]. */
   limit?: number;
@@ -1558,7 +1571,7 @@ interface ErrorIssue {
   assignee?: string;
   /** Number of `error` rows folded into this Issue within the scanned window. */
   count: number;
-  /** The `&lt;file>:&lt;function>` (or `container:&lt;name>`) the errors came from. */
+  /** The `<file>:<function>` (or `container:<name>`) the errors came from. */
   culprit: string;
   /** Wall-clock millis of the oldest folded row. */
   firstSeen: number;
@@ -1597,7 +1610,7 @@ interface IssuesResult {
 }
 /** Filters for {@link readErrorIssues}; forwarded to {@link readRequestLog} with `outcome` forced to `error`. */
 interface ReadIssuesOptions {
-  /** Functions whose path begins with this prefix (a `&lt;file>:` or `&lt;file>:&lt;fn>` correlation). */
+  /** Functions whose path begins with this prefix (a `<file>:` or `<file>:<fn>` correlation). */
   functionPathPrefix?: string;
   /** Upper bound on error rows scanned before grouping, clamped to [1, 10000]. */
   limit?: number;
@@ -1622,7 +1635,7 @@ interface ReadIssuesOptions {
  * STRING — which is what `errorMessage`/log `fields`-as-rendered-text are —
  * only pattern-shaped matches apply: emails, long digit runs / structured
  * numeric IDs (credit-card, phone, SSN, AWS-access-key-style), and an explicit
- * `Bearer &lt;token>` / `token=…`-shaped substring. A free-text `password=hunter2`
+ * `Bearer <token>` / `token=…`-shaped substring. A free-text `password=hunter2`
  * or a bare provider API key embedded in prose (e.g. `sk-live-…`) is NOT
  * caught on a plain string — there is no key to match against, and neither is
  * a recognized value pattern. So this is a PII-pattern net for rendered text,
@@ -1651,12 +1664,17 @@ declare const redactArgs: (value: unknown, captureRaw?: boolean) => unknown;
  *
  * `error_fingerprint` is the {@link fingerprintError} grouping hash captured
  * from the RAW `error_message` at write time, before {@link appendRequestLogEntry}
- * redacts it — see that function's docstring. It is added via a guarded
- * `ALTER TABLE` rather than baked into the `CREATE`, mirroring
+ * redacts it — see that function's docstring. `trace_id` is the dispatch's W3C
+ * trace id, the correlation key to the span ring and to whatever collector
+ * `otlpSink` ships to.
+ *
+ * Both are also added via a guarded `ALTER TABLE`, mirroring
  * `function-metrics.ts`'s `ensureFunctionMetricsTables`, so a shard whose
- * `__lunora_reqlog__` predates this column gains it on the next call without a
+ * `__lunora_reqlog__` predates a column gains it on the next call without a
  * migration. SQLite has no `ADD COLUMN IF NOT EXISTS`, so the duplicate-column
- * error from a re-run (or the freshly-created schema above) is swallowed.
+ * error from a re-run (or from the freshly-created schema above) is swallowed
+ * per column — the loop is what keeps one column's duplicate from skipping the
+ * next column's add.
  */
 declare const ensureRequestLogTable: (sql: SqlExec) => void;
 /**
@@ -1672,8 +1690,8 @@ declare const ensureRequestLogTable: (sql: SqlExec) => void;
  * it's redacted below, and the resulting hash is persisted in
  * `error_fingerprint`. `readErrorIssues` groups off that stored hash instead of
  * recomputing `fingerprintError` from the (redacted) `error_message` column, so
- * masking a PII-bearing value — e.g. two different `&lt;n>`-bucketed IDs that
- * redact to two different tag lengths (`&lt;DL>` vs `&lt;BANKACC>`) — can't split an
+ * masking a PII-bearing value — e.g. two different `<n>`-bucketed IDs that
+ * redact to two different tag lengths (`<DL>` vs `<BANKACC>`) — can't split an
  * existing Issue or change its identity.
  */
 declare const appendRequestLogEntry: (sql: SqlExec, entry: AppendRequestLogEntry, options?: RequestLogWriteOptions) => void;
@@ -1702,7 +1720,7 @@ declare const emitRequestLogEvent: (entry: AppendRequestLogEntry, options?: Requ
  */
 type LogEventInput = LogEvent;
 /**
- * Split a `ctx.log.&lt;level>(...)` call's raw arguments into a display `message`
+ * Split a `ctx.log.<level>(...)` call's raw arguments into a display `message`
  * and optional structured `fields`. The structured form — a message string plus
  * a plain-object fields bag — is matched only for exactly `(string, object)`;
  * every other shape is console-style and rendered whole (so existing
@@ -1842,6 +1860,15 @@ interface TraceSpan {
     message: string;
     type: string;
   };
+  /**
+   * Timestamped occurrences inside the span — `span.addEvent(...)` and
+   * `span.recordException(...)`. Carried through so a handled retry or a
+   * swallowed exception is visible on the span it happened in, which is the
+   * only place it is interpretable. Absent when the body recorded none.
+   */
+  events?: SpanEventPoint[];
+  /** OTel `SpanKind`; absent means `"internal"`. */
+  kind?: OtlpSpanKind;
   name: string;
   /** Start of this span relative to the trace's start, in ms. */
   offsetMs: number;
@@ -1860,12 +1887,25 @@ interface TraceSummary {
   rootName: string;
   shardKey?: string;
   /**
-   * Spans ordered by `(offsetMs, depth)`, ready to render as waterfall rows.
-   * Start time alone is not enough to order them: spans are recorded on
-   * completion and `startTs` has millisecond resolution, so a parent and its
-   * child routinely tie. Breaking that tie by depth makes the sequence a valid
-   * pre-order traversal of the span tree, so indenting each row by its `depth`
-   * yields the nesting without a separate tree walk.
+   * Spans in **pre-order**, ready to render as waterfall rows: every span is
+   * immediately followed by its own subtree, siblings in start order. So
+   * indenting each row by its `depth` yields the real nesting — the row above
+   * a `depth`-`n+1` row is genuinely its parent.
+   *
+   * This is a tree walk, not a sort, because no ordering on `(offsetMs,
+   * depth)` can produce it. Given a parent, its child `a`, `a`'s child `a1`
+   * and `a`'s sibling `b` all at offset 0, that comparator yields
+   * `parent, a, b, a1` — which renders `a1` indented beneath `b`, under a
+   * parent it does not belong to.
+   *
+   * **Why they tie is not millisecond resolution.** On the Workers runtime
+   * `Date.now()` is pinned to the time of the last I/O — a Spectre mitigation,
+   * not a bug — so it does not advance at all across pure computation. Every
+   * duration in this package is `Date.now() - startTs`, which means a span
+   * wrapping CPU-only work reports `0`, and a parent whose child performed no
+   * I/O shares its exact start and end. See `docs/concepts/observability`
+   * ("Span durations on Workers"); the practical consequence is that a `0 ms`
+   * span means "no I/O happened here", not "this was fast".
    */
   spans: TraceSpan[];
   startTs: number;
@@ -1965,4 +2005,61 @@ declare const resolveTraceAnchor: (traceparent: string | undefined) => {
   sampled: boolean;
   traceId: string;
 };
-export { AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AiRunBinding, type AppendRequestLogEntry, type AuthMetrics, type AuthMetricsBucket, type ContextFetch, type ContextLogLevel, type ContextMetrics, type ContextTracer, DEFAULT_EXPLAIN_ISSUE_MODEL, type DanglingReference, type DanglingReferenceResult, type DatabaseInstrumentation, type DatabaseTally, type DatabaseTelemetryDeps, type ErrorIssue, type ExplainIssueArgs, type ExplainIssueDegradedReason, type ExplainIssueGrounding, type ExplainIssueResult, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_MAX_PATHS, FUNCTION_METRICS_READ_LIMIT, FUNCTION_METRICS_SCANS_TABLE, FUNCTION_METRICS_TABLE, type FoldedTraces, type FunctionMetricBucket, type FunctionMetricBucketsResult, type FunctionMetricIndexHit, type HostSpanLike, type HostTracingLike, type HostTracingResolver, ISSUE_SEVERITIES, ISSUE_STATE_TABLE, ISSUE_STATUSES, type IndexHit, type IssueSeverity, type IssueState, type IssueStatePatch, type IssueStatus, type IssuesResult, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, MetricBuffer, type MetricEvent, type MetricHistoryOptions, type MetricHistoryPoint, type MetricHistoryResult, type MetricHistorySeries, type MetricKind, type MetricSeries, type MetricsDeps, type QueryInsightBucket, type QueryInsightEntry, type QueryInsightsResult, type QueryStatEntry, REQUEST_LOG_TABLE, type ReadIssuesOptions, type ReadRequestLogOptions, type RecordAuthEventInput, type RecordFunctionMetricInput, type RequestLogEntry, type RequestLogResult, type RequestLogWriteOptions, type RequestOutcome, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, SpanBuffer, type SpanCollection, type SpanCollector, type SpanEvent, type SpanEventPoint, type SpanHandle, type OtlpSpanKind as SpanKind, type SpanLink, type SpanOptions, type TraceAnchor, type TraceSpan, type TraceSummary, type TracedFetchDeps, type TracerDeps, appendRequestLogEntry, buildSecurityAudit, createDatabaseTally, createMetrics, createSpanCollector, createTracedFetch, createTracer, dispatchRootSpan, emitLogEvent, emitRequestLogEvent, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureRequestLogTable, explainIssue, findDanglingReferences, foldTraces, formatTally, instrumentDatabase, mergeScanAttribution, parseExplainIssueArgs, parseLogArgs, readAuthMetrics, readErrorIssues, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetricScans, readFunctionMetrics, readFunctionMetricsTotals, readMetricHistory, readQueryInsights, readQueryMetrics, readRequestLog, recordAuthEvent, recordFunctionMetric, recordMetricHistory, recordQueryMetric, redactArgs, resolveTraceAnchor, upsertIssueState };
+export { AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AiRunBinding, type AppendRequestLogEntry,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type AuthMetrics,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type AuthMetricsBucket, type ContextFetch, type ContextLogLevel, type ContextMetrics, type ContextTracer, DEFAULT_EXPLAIN_ISSUE_MODEL, type DanglingReference, type DanglingReferenceResult, type DatabaseInstrumentation, type DatabaseTally, type DatabaseTelemetryDeps, type ErrorIssue, type ExplainIssueArgs, type ExplainIssueDegradedReason, type ExplainIssueGrounding, type ExplainIssueResult, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_MAX_PATHS, FUNCTION_METRICS_READ_LIMIT, FUNCTION_METRICS_SCANS_TABLE, FUNCTION_METRICS_TABLE, type FoldedTraces, type FunctionMetricBucket, type FunctionMetricBucketsResult, type FunctionMetricIndexHit, type HostSpanLike, type HostTracingLike, type HostTracingResolver, ISSUE_SEVERITIES, ISSUE_STATE_TABLE, ISSUE_STATUSES, type IndexHit, type IssueSeverity, type IssueState, type IssueStatePatch, type IssueStatus, type IssuesResult, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, MetricBuffer, type MetricEvent, type MetricHistoryOptions, type MetricHistoryPoint, type MetricHistoryResult, type MetricHistorySeries, type MetricKind, type MetricSeries, type MetricsDeps, type QueryInsightBucket, type QueryInsightEntry, type QueryInsightsResult, type QueryStatEntry, REQUEST_LOG_TABLE, type ReadIssuesOptions, type ReadRequestLogOptions,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type RecordAuthEventInput, type RecordFunctionMetricInput, type RequestLogEntry, type RequestLogResult, type RequestLogWriteOptions, type RequestOutcome, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, SpanBuffer, type SpanCollection, type SpanCollector, type SpanEvent, type SpanEventPoint, type SpanHandle, type OtlpSpanKind as SpanKind, type SpanLink, type SpanOptions, type TraceAnchor, type TraceSpan, type TraceSummary, type TracedFetchDeps, type TracerDeps, appendRequestLogEntry, buildSecurityAudit, createDatabaseTally, createMetrics, createSpanCollector, createTracedFetch, createTracer, dispatchRootSpan, emitLogEvent, emitRequestLogEvent, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureRequestLogTable, explainIssue, findDanglingReferences, foldTraces, formatTally, instrumentDatabase, mergeScanAttribution, parseExplainIssueArgs, parseLogArgs, readAuthMetrics, readErrorIssues, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetricScans, readFunctionMetrics, readFunctionMetricsTotals, readMetricHistory, readQueryInsights, readQueryMetrics, readRequestLog, recordAuthEvent, recordFunctionMetric, recordMetricHistory, recordQueryMetric, redactArgs, resolveTraceAnchor, upsertIssueState };

package/dist/index.d.ts

@@ -64,9 +64,9 @@ declare const ensureAuthMetricsTables: (sql: SqlExec) => void;
  * `failures` advances only when `outcome === "fail"`. `since_ms` is set once on
  * the first attempt and never moved (so it stays a true first-seen marker).
  *
- * Exactly two `INSERT … ON CONFLICT … DO UPDATE` statements plus a bounded
- * `DELETE`, all keyed by primary key — cheap enough to fire off the auth
- * response path without blocking it.
+ * Exactly two `INSERT … ON CONFLICT … DO UPDATE` statements, all keyed by
+ * primary key, plus a bounded `DELETE` that runs once per bucket window —
+ * cheap enough to fire off the auth response path without blocking it.
  */
 declare const recordAuthEvent: (sql: SqlExec, input: RecordAuthEventInput) => void;
 /**
@@ -605,7 +605,7 @@ declare const createSpanCollector: (ids: {
  *
  * **DO async-context caveat (EXPERIMENTAL, partially workerd-validated).**
  * `tracing.enterSpan` is now confirmed to EXIST and RUN inside a real Durable
- * Object under `@cloudflare/vitest-pool-workers` (see
+ * Object under `@cloudflare/vitest-plugin` (see
  * `__tests__/workerd/context-telemetry-cf-bridge.workerd.test.ts`): it resolves
  * from `cloudflare:workers`, its callback executes and returns the body value
  * without throwing, `span.isTraced` is a real boolean, and — the key additive
@@ -625,6 +625,14 @@ declare const createTracer: (deps: TracerDeps) => ContextTracer;
 interface TracedFetchDeps {
   /** The trace the CLIENT spans belong to. */
   anchor: TraceAnchor;
+  /**
+   * Whether to record a failed fetch's error message verbatim rather than
+   * redacted. Same dev-only escape hatch as {@link TracerDeps.captureRaw}, and
+   * the same reason: a `fetch` TypeError embeds the request URL, so a key in a
+   * query string would otherwise reach the collector in the clear on the very
+   * span whose `url.full` is scrubbed by `redactUrl`.
+   */
+  captureRaw?: boolean;
   /** Function path the spans are attributed to. */
   functionPath: string;
   /**
@@ -911,7 +919,7 @@ interface RecordFunctionMetricInput {
    * dispatch used no declared index, keeping the hot path unchanged.
    */
   indexHits?: ReadonlyArray<IndexHit>;
-  /** The `&lt;file>:&lt;function>` identifier. */
+  /** The `<file>:<function>` identifier. */
   path: string;
   /**
    * Distinct tables this dispatch full-scanned (read with no index / point
@@ -1040,7 +1048,7 @@ interface AiRunBinding {
 }
 /** Parsed `__lunora_admin__:explainIssue` payload: the folded Issue's identifying facts, plus an optional model override. */
 interface ExplainIssueArgs {
-  /** The Issue's culprit (`&lt;file>:&lt;function>` or `container:&lt;name>`), for grounding context. */
+  /** The Issue's culprit (`<file>:<function>` or `container:<name>`), for grounding context. */
   culprit?: string;
   /** Per-request model-id override; falls back to the caller's `defaultModel`, then {@link DEFAULT_EXPLAIN_ISSUE_MODEL}. */
   model?: string;
@@ -1189,13 +1197,15 @@ type LogLevel = ContextLogLevel;
  */
 interface LogEntry {
   exitCode?: number;
-  /** Structured fields from a `ctx.log.&lt;level>(message, fields)` / `ctx.log.with(fields)` call, when present. */
+  /** Structured fields from a `ctx.log.<level>(message, fields)` / `ctx.log.with(fields)` call, when present. */
   fields?: Record<string, unknown>;
   functionPath?: string;
   instance?: string;
   level: LogLevel;
   message: string;
   timestamp: number;
+  /** Trace the line was emitted under; absent outside a dispatch (container lifecycle, hibernation-path errors). What the Studio joins a log line to its waterfall on. */
+  traceId?: string;
 }
 /**
  * A bounded, in-memory ring buffer of recent {@link LogEntry} records.
@@ -1480,7 +1490,7 @@ interface RequestLogEntry {
   durationMs: number;
   /** Error message when `outcome === "error"`, redacted like args/identity; absent on success. */
   errorMessage?: string;
-  /** The `&lt;file>:&lt;function>` identifier dispatched, e.g. `messages:list`. */
+  /** The `<file>:<function>` identifier dispatched, e.g. `messages:list`. */
   functionPath: string;
   /** Identity-claim envelope forwarded by the runtime, JSON-decoded; leaf values are redacted (the claims are PII), so only the shape survives. Absent for anonymous requests. Correlate on `userId` instead. */
   identity?: Record<string, unknown>;
@@ -1498,6 +1508,8 @@ interface RequestLogEntry {
   tablesRead: string[];
   /** Tables the handler wrote (from the change tracker); empty for a read-only dispatch. */
   tablesWritten: string[];
+  /** W3C trace id (32-hex) of the dispatch; `undefined` on a row appended before this column existed. See the module docstring on the retention asymmetry. */
+  traceId?: string;
   /** Wall-clock millis when the dispatch completed. */
   ts: number;
   /** Acting userId forwarded by the runtime, or `undefined` when anonymous. */
@@ -1516,6 +1528,7 @@ interface AppendRequestLogEntry {
   subscriptionsReRun?: number;
   tablesRead?: string[];
   tablesWritten?: string[];
+  traceId?: string;
   ts: number;
   userId?: string;
 }
@@ -1528,7 +1541,7 @@ interface RequestLogWriteOptions {
 }
 /** Filters for {@link readRequestLog}, all AND-combined; every value is a bound SQL parameter, so nothing here injects SQL. */
 interface ReadRequestLogOptions {
-  /** Functions whose path begins with this prefix (a `&lt;file>:` or `&lt;file>:&lt;fn>` correlation). */
+  /** Functions whose path begins with this prefix (a `<file>:` or `<file>:<fn>` correlation). */
   functionPathPrefix?: string;
   /** Upper bound on returned rows, clamped to [1, 10000]. */
   limit?: number;
@@ -1558,7 +1571,7 @@ interface ErrorIssue {
   assignee?: string;
   /** Number of `error` rows folded into this Issue within the scanned window. */
   count: number;
-  /** The `&lt;file>:&lt;function>` (or `container:&lt;name>`) the errors came from. */
+  /** The `<file>:<function>` (or `container:<name>`) the errors came from. */
   culprit: string;
   /** Wall-clock millis of the oldest folded row. */
   firstSeen: number;
@@ -1597,7 +1610,7 @@ interface IssuesResult {
 }
 /** Filters for {@link readErrorIssues}; forwarded to {@link readRequestLog} with `outcome` forced to `error`. */
 interface ReadIssuesOptions {
-  /** Functions whose path begins with this prefix (a `&lt;file>:` or `&lt;file>:&lt;fn>` correlation). */
+  /** Functions whose path begins with this prefix (a `<file>:` or `<file>:<fn>` correlation). */
   functionPathPrefix?: string;
   /** Upper bound on error rows scanned before grouping, clamped to [1, 10000]. */
   limit?: number;
@@ -1622,7 +1635,7 @@ interface ReadIssuesOptions {
  * STRING — which is what `errorMessage`/log `fields`-as-rendered-text are —
  * only pattern-shaped matches apply: emails, long digit runs / structured
  * numeric IDs (credit-card, phone, SSN, AWS-access-key-style), and an explicit
- * `Bearer &lt;token>` / `token=…`-shaped substring. A free-text `password=hunter2`
+ * `Bearer <token>` / `token=…`-shaped substring. A free-text `password=hunter2`
  * or a bare provider API key embedded in prose (e.g. `sk-live-…`) is NOT
  * caught on a plain string — there is no key to match against, and neither is
  * a recognized value pattern. So this is a PII-pattern net for rendered text,
@@ -1651,12 +1664,17 @@ declare const redactArgs: (value: unknown, captureRaw?: boolean) => unknown;
  *
  * `error_fingerprint` is the {@link fingerprintError} grouping hash captured
  * from the RAW `error_message` at write time, before {@link appendRequestLogEntry}
- * redacts it — see that function's docstring. It is added via a guarded
- * `ALTER TABLE` rather than baked into the `CREATE`, mirroring
+ * redacts it — see that function's docstring. `trace_id` is the dispatch's W3C
+ * trace id, the correlation key to the span ring and to whatever collector
+ * `otlpSink` ships to.
+ *
+ * Both are also added via a guarded `ALTER TABLE`, mirroring
  * `function-metrics.ts`'s `ensureFunctionMetricsTables`, so a shard whose
- * `__lunora_reqlog__` predates this column gains it on the next call without a
+ * `__lunora_reqlog__` predates a column gains it on the next call without a
  * migration. SQLite has no `ADD COLUMN IF NOT EXISTS`, so the duplicate-column
- * error from a re-run (or the freshly-created schema above) is swallowed.
+ * error from a re-run (or from the freshly-created schema above) is swallowed
+ * per column — the loop is what keeps one column's duplicate from skipping the
+ * next column's add.
  */
 declare const ensureRequestLogTable: (sql: SqlExec) => void;
 /**
@@ -1672,8 +1690,8 @@ declare const ensureRequestLogTable: (sql: SqlExec) => void;
  * it's redacted below, and the resulting hash is persisted in
  * `error_fingerprint`. `readErrorIssues` groups off that stored hash instead of
  * recomputing `fingerprintError` from the (redacted) `error_message` column, so
- * masking a PII-bearing value — e.g. two different `&lt;n>`-bucketed IDs that
- * redact to two different tag lengths (`&lt;DL>` vs `&lt;BANKACC>`) — can't split an
+ * masking a PII-bearing value — e.g. two different `<n>`-bucketed IDs that
+ * redact to two different tag lengths (`<DL>` vs `<BANKACC>`) — can't split an
  * existing Issue or change its identity.
  */
 declare const appendRequestLogEntry: (sql: SqlExec, entry: AppendRequestLogEntry, options?: RequestLogWriteOptions) => void;
@@ -1702,7 +1720,7 @@ declare const emitRequestLogEvent: (entry: AppendRequestLogEntry, options?: Requ
  */
 type LogEventInput = LogEvent;
 /**
- * Split a `ctx.log.&lt;level>(...)` call's raw arguments into a display `message`
+ * Split a `ctx.log.<level>(...)` call's raw arguments into a display `message`
  * and optional structured `fields`. The structured form — a message string plus
  * a plain-object fields bag — is matched only for exactly `(string, object)`;
  * every other shape is console-style and rendered whole (so existing
@@ -1842,6 +1860,15 @@ interface TraceSpan {
     message: string;
     type: string;
   };
+  /**
+   * Timestamped occurrences inside the span — `span.addEvent(...)` and
+   * `span.recordException(...)`. Carried through so a handled retry or a
+   * swallowed exception is visible on the span it happened in, which is the
+   * only place it is interpretable. Absent when the body recorded none.
+   */
+  events?: SpanEventPoint[];
+  /** OTel `SpanKind`; absent means `"internal"`. */
+  kind?: OtlpSpanKind;
   name: string;
   /** Start of this span relative to the trace's start, in ms. */
   offsetMs: number;
@@ -1860,12 +1887,25 @@ interface TraceSummary {
   rootName: string;
   shardKey?: string;
   /**
-   * Spans ordered by `(offsetMs, depth)`, ready to render as waterfall rows.
-   * Start time alone is not enough to order them: spans are recorded on
-   * completion and `startTs` has millisecond resolution, so a parent and its
-   * child routinely tie. Breaking that tie by depth makes the sequence a valid
-   * pre-order traversal of the span tree, so indenting each row by its `depth`
-   * yields the nesting without a separate tree walk.
+   * Spans in **pre-order**, ready to render as waterfall rows: every span is
+   * immediately followed by its own subtree, siblings in start order. So
+   * indenting each row by its `depth` yields the real nesting — the row above
+   * a `depth`-`n+1` row is genuinely its parent.
+   *
+   * This is a tree walk, not a sort, because no ordering on `(offsetMs,
+   * depth)` can produce it. Given a parent, its child `a`, `a`'s child `a1`
+   * and `a`'s sibling `b` all at offset 0, that comparator yields
+   * `parent, a, b, a1` — which renders `a1` indented beneath `b`, under a
+   * parent it does not belong to.
+   *
+   * **Why they tie is not millisecond resolution.** On the Workers runtime
+   * `Date.now()` is pinned to the time of the last I/O — a Spectre mitigation,
+   * not a bug — so it does not advance at all across pure computation. Every
+   * duration in this package is `Date.now() - startTs`, which means a span
+   * wrapping CPU-only work reports `0`, and a parent whose child performed no
+   * I/O shares its exact start and end. See `docs/concepts/observability`
+   * ("Span durations on Workers"); the practical consequence is that a `0 ms`
+   * span means "no I/O happened here", not "this was fast".
    */
   spans: TraceSpan[];
   startTs: number;
@@ -1965,4 +2005,61 @@ declare const resolveTraceAnchor: (traceparent: string | undefined) => {
   sampled: boolean;
   traceId: string;
 };
-export { AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AiRunBinding, type AppendRequestLogEntry, type AuthMetrics, type AuthMetricsBucket, type ContextFetch, type ContextLogLevel, type ContextMetrics, type ContextTracer, DEFAULT_EXPLAIN_ISSUE_MODEL, type DanglingReference, type DanglingReferenceResult, type DatabaseInstrumentation, type DatabaseTally, type DatabaseTelemetryDeps, type ErrorIssue, type ExplainIssueArgs, type ExplainIssueDegradedReason, type ExplainIssueGrounding, type ExplainIssueResult, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_MAX_PATHS, FUNCTION_METRICS_READ_LIMIT, FUNCTION_METRICS_SCANS_TABLE, FUNCTION_METRICS_TABLE, type FoldedTraces, type FunctionMetricBucket, type FunctionMetricBucketsResult, type FunctionMetricIndexHit, type HostSpanLike, type HostTracingLike, type HostTracingResolver, ISSUE_SEVERITIES, ISSUE_STATE_TABLE, ISSUE_STATUSES, type IndexHit, type IssueSeverity, type IssueState, type IssueStatePatch, type IssueStatus, type IssuesResult, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, MetricBuffer, type MetricEvent, type MetricHistoryOptions, type MetricHistoryPoint, type MetricHistoryResult, type MetricHistorySeries, type MetricKind, type MetricSeries, type MetricsDeps, type QueryInsightBucket, type QueryInsightEntry, type QueryInsightsResult, type QueryStatEntry, REQUEST_LOG_TABLE, type ReadIssuesOptions, type ReadRequestLogOptions, type RecordAuthEventInput, type RecordFunctionMetricInput, type RequestLogEntry, type RequestLogResult, type RequestLogWriteOptions, type RequestOutcome, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, SpanBuffer, type SpanCollection, type SpanCollector, type SpanEvent, type SpanEventPoint, type SpanHandle, type OtlpSpanKind as SpanKind, type SpanLink, type SpanOptions, type TraceAnchor, type TraceSpan, type TraceSummary, type TracedFetchDeps, type TracerDeps, appendRequestLogEntry, buildSecurityAudit, createDatabaseTally, createMetrics, createSpanCollector, createTracedFetch, createTracer, dispatchRootSpan, emitLogEvent, emitRequestLogEvent, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureRequestLogTable, explainIssue, findDanglingReferences, foldTraces, formatTally, instrumentDatabase, mergeScanAttribution, parseExplainIssueArgs, parseLogArgs, readAuthMetrics, readErrorIssues, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetricScans, readFunctionMetrics, readFunctionMetricsTotals, readMetricHistory, readQueryInsights, readQueryMetrics, readRequestLog, recordAuthEvent, recordFunctionMetric, recordMetricHistory, recordQueryMetric, redactArgs, resolveTraceAnchor, upsertIssueState };
+export { AUTH_METRICS_BUCKETS_TABLE, AUTH_METRICS_BUCKET_MS, AUTH_METRICS_BUCKET_RETENTION, AUTH_METRICS_TABLE, type AiRunBinding, type AppendRequestLogEntry,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type AuthMetrics,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type AuthMetricsBucket, type ContextFetch, type ContextLogLevel, type ContextMetrics, type ContextTracer, DEFAULT_EXPLAIN_ISSUE_MODEL, type DanglingReference, type DanglingReferenceResult, type DatabaseInstrumentation, type DatabaseTally, type DatabaseTelemetryDeps, type ErrorIssue, type ExplainIssueArgs, type ExplainIssueDegradedReason, type ExplainIssueGrounding, type ExplainIssueResult, FUNCTION_METRICS_BUCKETS_TABLE, FUNCTION_METRICS_BUCKET_MS, FUNCTION_METRICS_BUCKET_RETENTION, FUNCTION_METRICS_INDEX_TABLE, FUNCTION_METRICS_MAX_PATHS, FUNCTION_METRICS_READ_LIMIT, FUNCTION_METRICS_SCANS_TABLE, FUNCTION_METRICS_TABLE, type FoldedTraces, type FunctionMetricBucket, type FunctionMetricBucketsResult, type FunctionMetricIndexHit, type HostSpanLike, type HostTracingLike, type HostTracingResolver, ISSUE_SEVERITIES, ISSUE_STATE_TABLE, ISSUE_STATUSES, type IndexHit, type IssueSeverity, type IssueState, type IssueStatePatch, type IssueStatus, type IssuesResult, LogBuffer, type LogEntry, type LogEventInput, type LogLevel, MIN_ADMIN_TOKEN_LENGTH, MIN_AUTH_SECRET_LENGTH, MetricBuffer, type MetricEvent, type MetricHistoryOptions, type MetricHistoryPoint, type MetricHistoryResult, type MetricHistorySeries, type MetricKind, type MetricSeries, type MetricsDeps, type QueryInsightBucket, type QueryInsightEntry, type QueryInsightsResult, type QueryStatEntry, REQUEST_LOG_TABLE, type ReadIssuesOptions, type ReadRequestLogOptions,
+/**
+ * `@lunora/observability` — host-neutral telemetry storage and read models.
+ *
+ * Logs, traces, metrics, issue grouping and the security-audit view: the data
+ * behind the Studio's observability pages. None of it is Cloudflare-specific —
+ * it reads and writes through the SQL handle the engine hands it, and it lived
+ * inside `@lunora/do` only because that is where the Durable Object it
+ * instruments happens to live.
+ *
+ * The dependency runs `@lunora/do` → here → `@lunora/shard-engine`, never the
+ * reverse, which is what makes this reusable by a second host rather than
+ * merely relocated.
+ *
+ * This barrel is deliberately curated rather than `export *`. A star export
+ * would promote every module internal to permanent public API — the exact
+ * mistake `@lunora/do`'s own barrel documents having made once with the search
+ * core. What is exported here is what a consumer actually needs.
+ */
+type RecordAuthEventInput, type RecordFunctionMetricInput, type RequestLogEntry, type RequestLogResult, type RequestLogWriteOptions, type RequestOutcome, type SecurityAuditResult, type SecurityFinding, type SecurityFindingKind, type SecurityFindingLevel, SpanBuffer, type SpanCollection, type SpanCollector, type SpanEvent, type SpanEventPoint, type SpanHandle, type OtlpSpanKind as SpanKind, type SpanLink, type SpanOptions, type TraceAnchor, type TraceSpan, type TraceSummary, type TracedFetchDeps, type TracerDeps, appendRequestLogEntry, buildSecurityAudit, createDatabaseTally, createMetrics, createSpanCollector, createTracedFetch, createTracer, dispatchRootSpan, emitLogEvent, emitRequestLogEvent, ensureAuthMetricsTables, ensureFunctionMetricsTables, ensureRequestLogTable, explainIssue, findDanglingReferences, foldTraces, formatTally, instrumentDatabase, mergeScanAttribution, parseExplainIssueArgs, parseLogArgs, readAuthMetrics, readErrorIssues, readFunctionMetricBuckets, readFunctionMetricIndexHits, readFunctionMetricScans, readFunctionMetrics, readFunctionMetricsTotals, readMetricHistory, readQueryInsights, readQueryMetrics, readRequestLog, recordAuthEvent, recordFunctionMetric, recordMetricHistory, recordQueryMetric, redactArgs, resolveTraceAnchor, upsertIssueState };

package/dist/index.mjs

@@ -1 +1 @@
-import{AUTH_METRICS_BUCKETS_TABLE as t,AUTH_METRICS_BUCKET_MS as T,AUTH_METRICS_BUCKET_RETENTION as o,AUTH_METRICS_TABLE as a,ensureAuthMetricsTables as s,readAuthMetrics as E,recordAuthEvent as _}from"./packem_shared/AUTH_METRICS_BUCKETS_TABLE-C2V-DiGu.mjs";import{createMetrics as S,createSpanCollector as I,createTracedFetch as i,createTracer as n,dispatchRootSpan as M}from"./packem_shared/createMetrics-BXNmqy0o.mjs";import{createDatabaseTally as A,formatTally as C,instrumentDatabase as N}from"./packem_shared/createDatabaseTally-DBs7wDeF.mjs";import{FUNCTION_METRICS_BUCKETS_TABLE as p,FUNCTION_METRICS_BUCKET_MS as d,FUNCTION_METRICS_BUCKET_RETENTION as f,FUNCTION_METRICS_INDEX_TABLE as R,FUNCTION_METRICS_MAX_PATHS as L,FUNCTION_METRICS_READ_LIMIT as m,FUNCTION_METRICS_SCANS_TABLE as x,FUNCTION_METRICS_TABLE as B,ensureFunctionMetricsTables as F,mergeScanAttribution as l,readFunctionMetricBuckets as g,readFunctionMetricIndexHits as O,readFunctionMetricScans as H,readFunctionMetrics as y,readFunctionMetricsTotals as D,recordFunctionMetric as K}from"./packem_shared/FUNCTION_METRICS_BUCKETS_TABLE-BB8kcFBe.mjs";import{DEFAULT_EXPLAIN_ISSUE_MODEL as h,explainIssue as q,parseExplainIssueArgs as v}from"./packem_shared/DEFAULT_EXPLAIN_ISSUE_MODEL-xF11R4vX.mjs";import{ISSUE_SEVERITIES as G,ISSUE_STATE_TABLE as X,ISSUE_STATUSES as k,upsertIssueState as P}from"./packem_shared/ISSUE_SEVERITIES-Js6lGUG5.mjs";import{LogBuffer as V}from"./packem_shared/LogBuffer-bIvCelI-.mjs";import{M as j}from"./packem_shared/metric-buffer-CdgXal7w.mjs";import{readMetricHistory as J,recordMetricHistory as Y}from"./packem_shared/readMetricHistory-CVcUgQEL.mjs";import{readQueryInsights as $,readQueryMetrics as ee,recordQueryMetric as re}from"./packem_shared/readQueryInsights-DN07YcQy.mjs";import{d as Te,k as oe,K as ae,w as se,m as Ee,C as _e,W as ce,U as Se,c as Ie}from"./packem_shared/request-log-BwFic6VV.mjs";import{MIN_ADMIN_TOKEN_LENGTH as ne,MIN_AUTH_SECRET_LENGTH as Me,buildSecurityAudit as ue}from"./packem_shared/MIN_ADMIN_TOKEN_LENGTH-T-zuwRVR.mjs";import{SpanBuffer as Ce,foldTraces as Ne}from"./packem_shared/SpanBuffer-BR6Ff0M-.mjs";import{findDanglingReferences as pe}from"./packem_shared/findDanglingReferences-D-x9LvY0.mjs";import{r as fe}from"./packem_shared/trace-context-DrdF960P.mjs";export{t as AUTH_METRICS_BUCKETS_TABLE,T as AUTH_METRICS_BUCKET_MS,o as AUTH_METRICS_BUCKET_RETENTION,a as AUTH_METRICS_TABLE,h as DEFAULT_EXPLAIN_ISSUE_MODEL,p as FUNCTION_METRICS_BUCKETS_TABLE,d as FUNCTION_METRICS_BUCKET_MS,f as FUNCTION_METRICS_BUCKET_RETENTION,R as FUNCTION_METRICS_INDEX_TABLE,L as FUNCTION_METRICS_MAX_PATHS,m as FUNCTION_METRICS_READ_LIMIT,x as FUNCTION_METRICS_SCANS_TABLE,B as FUNCTION_METRICS_TABLE,G as ISSUE_SEVERITIES,X as ISSUE_STATE_TABLE,k as ISSUE_STATUSES,V as LogBuffer,ne as MIN_ADMIN_TOKEN_LENGTH,Me as MIN_AUTH_SECRET_LENGTH,j as MetricBuffer,Te as REQUEST_LOG_TABLE,Ce as SpanBuffer,oe as appendRequestLogEntry,ue as buildSecurityAudit,A as createDatabaseTally,S as createMetrics,I as createSpanCollector,i as createTracedFetch,n as createTracer,M as dispatchRootSpan,ae as emitLogEvent,se as emitRequestLogEvent,s as ensureAuthMetricsTables,F as ensureFunctionMetricsTables,Ee as ensureRequestLogTable,q as explainIssue,pe as findDanglingReferences,Ne as foldTraces,C as formatTally,N as instrumentDatabase,l as mergeScanAttribution,v as parseExplainIssueArgs,_e as parseLogArgs,E as readAuthMetrics,ce as readErrorIssues,g as readFunctionMetricBuckets,O as readFunctionMetricIndexHits,H as readFunctionMetricScans,y as readFunctionMetrics,D as readFunctionMetricsTotals,J as readMetricHistory,$ as readQueryInsights,ee as readQueryMetrics,Se as readRequestLog,_ as recordAuthEvent,K as recordFunctionMetric,Y as recordMetricHistory,re as recordQueryMetric,Ie as redactArgs,fe as resolveTraceAnchor,P as upsertIssueState};
+import{AUTH_METRICS_BUCKETS_TABLE as t,AUTH_METRICS_BUCKET_MS as T,AUTH_METRICS_BUCKET_RETENTION as o,AUTH_METRICS_TABLE as a,ensureAuthMetricsTables as s,readAuthMetrics as E,recordAuthEvent as _}from"./packem_shared/AUTH_METRICS_BUCKETS_TABLE-CeplWoRm.mjs";import{createMetrics as S,createSpanCollector as I,createTracedFetch as i,createTracer as n,dispatchRootSpan as M}from"./packem_shared/createMetrics-B366_-Qf.mjs";import{createDatabaseTally as A,formatTally as C,instrumentDatabase as N}from"./packem_shared/createDatabaseTally-DCMuBKoP.mjs";import{FUNCTION_METRICS_BUCKETS_TABLE as f,FUNCTION_METRICS_BUCKET_MS as U,FUNCTION_METRICS_BUCKET_RETENTION as d,FUNCTION_METRICS_INDEX_TABLE as R,FUNCTION_METRICS_MAX_PATHS as L,FUNCTION_METRICS_READ_LIMIT as m,FUNCTION_METRICS_SCANS_TABLE as x,FUNCTION_METRICS_TABLE as B,ensureFunctionMetricsTables as F,mergeScanAttribution as l,readFunctionMetricBuckets as g,readFunctionMetricIndexHits as O,readFunctionMetricScans as H,readFunctionMetrics as y,readFunctionMetricsTotals as b,recordFunctionMetric as D}from"./packem_shared/FUNCTION_METRICS_BUCKETS_TABLE-ChlIe0vF.mjs";import{DEFAULT_EXPLAIN_ISSUE_MODEL as K,explainIssue as q,parseExplainIssueArgs as v}from"./packem_shared/DEFAULT_EXPLAIN_ISSUE_MODEL-BGGX6k5D.mjs";import{ISSUE_SEVERITIES as G,ISSUE_STATE_TABLE as X,ISSUE_STATUSES as P,upsertIssueState as k}from"./packem_shared/ISSUE_SEVERITIES-gLC4VEPQ.mjs";import{LogBuffer as j}from"./packem_shared/LogBuffer-bIvCelI-.mjs";import{M as z}from"./packem_shared/metric-buffer-Bx0XbypU.mjs";import{readMetricHistory as W,recordMetricHistory as Y}from"./packem_shared/readMetricHistory-TKfnwFNv.mjs";import{readQueryInsights as $,readQueryMetrics as ee,recordQueryMetric as re}from"./packem_shared/readQueryInsights-D37H7MII.mjs";import{R as Te,a as oe,e as ae,b as se,c as Ee,p as _e,r as ce,d as Se,f as Ie}from"./packem_shared/request-log-COB2xhns.mjs";import{MIN_ADMIN_TOKEN_LENGTH as ne,MIN_AUTH_SECRET_LENGTH as Me,buildSecurityAudit as ue}from"./packem_shared/MIN_ADMIN_TOKEN_LENGTH-CidkqOQ1.mjs";import{SpanBuffer as Ce,foldTraces as Ne}from"./packem_shared/SpanBuffer-zjqCAuGp.mjs";import{findDanglingReferences as fe}from"./packem_shared/findDanglingReferences-Dxl42LBT.mjs";import{r as de}from"./packem_shared/trace-context-DfJZi_g2.mjs";export{t as AUTH_METRICS_BUCKETS_TABLE,T as AUTH_METRICS_BUCKET_MS,o as AUTH_METRICS_BUCKET_RETENTION,a as AUTH_METRICS_TABLE,K as DEFAULT_EXPLAIN_ISSUE_MODEL,f as FUNCTION_METRICS_BUCKETS_TABLE,U as FUNCTION_METRICS_BUCKET_MS,d as FUNCTION_METRICS_BUCKET_RETENTION,R as FUNCTION_METRICS_INDEX_TABLE,L as FUNCTION_METRICS_MAX_PATHS,m as FUNCTION_METRICS_READ_LIMIT,x as FUNCTION_METRICS_SCANS_TABLE,B as FUNCTION_METRICS_TABLE,G as ISSUE_SEVERITIES,X as ISSUE_STATE_TABLE,P as ISSUE_STATUSES,j as LogBuffer,ne as MIN_ADMIN_TOKEN_LENGTH,Me as MIN_AUTH_SECRET_LENGTH,z as MetricBuffer,Te as REQUEST_LOG_TABLE,Ce as SpanBuffer,oe as appendRequestLogEntry,ue as buildSecurityAudit,A as createDatabaseTally,S as createMetrics,I as createSpanCollector,i as createTracedFetch,n as createTracer,M as dispatchRootSpan,ae as emitLogEvent,se as emitRequestLogEvent,s as ensureAuthMetricsTables,F as ensureFunctionMetricsTables,Ee as ensureRequestLogTable,q as explainIssue,fe as findDanglingReferences,Ne as foldTraces,C as formatTally,N as instrumentDatabase,l as mergeScanAttribution,v as parseExplainIssueArgs,_e as parseLogArgs,E as readAuthMetrics,ce as readErrorIssues,g as readFunctionMetricBuckets,O as readFunctionMetricIndexHits,H as readFunctionMetricScans,y as readFunctionMetrics,b as readFunctionMetricsTotals,W as readMetricHistory,$ as readQueryInsights,ee as readQueryMetrics,Se as readRequestLog,_ as recordAuthEvent,D as recordFunctionMetric,Y as recordMetricHistory,re as recordQueryMetric,Ie as redactArgs,de as resolveTraceAnchor,k as upsertIssueState};