@marinoscar/platform-api 0.0.0-stage → 0.1.0-next.3

package/dist/otel-core/sdk/telemetry-gate.d.ts

@@ -0,0 +1,116 @@
+import { type ExportResult } from '@opentelemetry/core';
+import { type Resource } from '@opentelemetry/resources';
+import type { LogRecordExporter, ReadableLogRecord } from '@opentelemetry/sdk-logs';
+import { AggregationTemporality, InstrumentType, type AggregationOption, type PushMetricExporter, type ResourceMetrics } from '@opentelemetry/sdk-metrics';
+import type { ReadableSpan, SpanExporter } from '@opentelemetry/sdk-trace-base';
+/**
+ * The shape of {@link telemetryGate}.
+ *
+ * @stability stable
+ */
+export interface TelemetryGate {
+    /** Whether exporting is allowed right now. Read at export time, per batch. */
+    isEnabled(): boolean;
+    /** Opens (`true`) or closes (`false`) the gate; applies to the next batch exported. */
+    setEnabled(next: boolean): void;
+    /** The instance identifier stamped on everything the gate lets through. */
+    instanceId(): string;
+    /** Replaces the instance identifier. Callers pass an already-resolved value (`resolveTelemetryInstanceId`). */
+    setInstanceId(next: string): void;
+}
+/**
+ * Process-wide runtime export switch (starts closed, `false`) and the instance
+ * identifier stamped on everything it lets through (starts at
+ * `DEFAULT_INSTANCE_ID` until `initializeOtel({ instanceId })` or the app's
+ * settings set it).
+ *
+ * @example
+ * ```ts
+ * telemetryGate.setInstanceId(resolveTelemetryInstanceId(settings.instanceId, APP_SLUG));
+ * telemetryGate.setEnabled(settings.enabled);
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+export declare const telemetryGate: TelemetryGate;
+/**
+ * `resource` with `app.instance.id` set to the current instance id: the SAME
+ * object for every call with the same source and id (see the file header: the
+ * OTLP transformer groups by resource identity).
+ *
+ * @param resource - The SDK resource a span, log record or metric batch carries.
+ * @returns The merged resource, cached per (source, id).
+ *
+ * @stability experimental
+ */
+export declare function stampResource(resource: Resource): Resource;
+/**
+ * Forwards spans to `inner`, stamped with the instance id, only while the
+ * telemetry gate is open. A closed gate acknowledges each batch as SUCCESS.
+ *
+ * @stability stable
+ */
+export declare class GatedSpanExporter implements SpanExporter {
+    private readonly inner;
+    constructor(inner: SpanExporter);
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(spans: ReadableSpan[], resultCallback: (result: ExportResult) => void): void;
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown(): Promise<void>;
+    /** Always delegates, whatever the gate says. */
+    forceFlush(): Promise<void>;
+}
+/**
+ * Forwards log records to `inner`, stamped with the instance id, only while
+ * the telemetry gate is open. A closed gate acknowledges each batch as SUCCESS.
+ *
+ * @stability stable
+ */
+export declare class GatedLogRecordExporter implements LogRecordExporter {
+    private readonly inner;
+    constructor(inner: LogRecordExporter);
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(logs: ReadableLogRecord[], resultCallback: (result: ExportResult) => void): void;
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown(): Promise<void>;
+    /** Always delegates, whatever the gate says. */
+    forceFlush(): Promise<void>;
+}
+/**
+ * Forwards metrics to `inner`, stamped with the instance id, only while the
+ * telemetry gate is open.
+ *
+ * The optional aggregation selector is delegated so the reader keeps the inner
+ * exporter's aggregation preferences, and so is its temporality (OTLP defaults
+ * to cumulative) for every instrument EXCEPT gauges: wrapping must not change
+ * what is measured, only whether it is sent.
+ *
+ * ⚠ GAUGES ARE SELECTED DELTA, AND THIS IS NOT A CHANGE TO THE DATA. An OTLP
+ * gauge carries no temporality on the wire; the choice only decides what the
+ * SDK keeps between collections. Under cumulative, `@opentelemetry/sdk-metrics`
+ * (2.x, verified) re-exports EVERY attribute set a gauge callback ever
+ * observed, at its last value, on every later collection — so a worker node
+ * that went offline, or a job type whose backlog drained, would keep reporting
+ * its final reading with a fresh timestamp for the life of the process. Under
+ * delta, a collection exports exactly what the callback observed this time.
+ * The `app.nodes.*` per-node gauges (#606) depend on it: a node dropping out of
+ * the exported set must disappear from the store, not freeze.
+ *
+ * @stability stable
+ */
+export declare class GatedPushMetricExporter implements PushMetricExporter {
+    private readonly inner;
+    /** Delta for gauges, the inner exporter's choice (default cumulative) for everything else. */
+    readonly selectAggregationTemporality: (instrumentType: InstrumentType) => AggregationTemporality;
+    /** The inner exporter's aggregation selector, when it has one. */
+    readonly selectAggregation?: (instrumentType: InstrumentType) => AggregationOption;
+    constructor(inner: PushMetricExporter);
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(metrics: ResourceMetrics, resultCallback: (result: ExportResult) => void): void;
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown(): Promise<void>;
+    /** Always delegates, whatever the gate says. */
+    forceFlush(): Promise<void>;
+}
+//# sourceMappingURL=telemetry-gate.d.ts.map

package/dist/otel-core/sdk/telemetry-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-gate.d.ts","sourceRoot":"","sources":["../../../src/otel-core/sdk/telemetry-gate.ts"],"names":[],"mappings":"AA+GA,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAA0B,KAAK,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACjF,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAOhF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,SAAS,IAAI,OAAO,CAAC;IACrB,uFAAuF;IACvF,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,2EAA2E;IAC3E,UAAU,IAAI,MAAM,CAAC;IACrB,+GAA+G;IAC/G,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,aAAa,EAAE,aAa3B,CAAC;AAKF;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAY1D;AAeD;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IACxC,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAEhD,0FAA0F;IAC1F,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQnF,+FAA+F;IAC/F,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,gDAAgD;IAChD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,iBAAiB;IAErD,0FAA0F;IAC1F,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQvF,+FAA+F;IAC/F,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,gDAAgD;IAChD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,uBAAwB,YAAW,kBAAkB;IAMpD,OAAO,CAAC,QAAQ,CAAC,KAAK;IALlC,8FAA8F;IAC9F,QAAQ,CAAC,4BAA4B,EAAE,CAAC,cAAc,EAAE,cAAc,KAAK,sBAAsB,CAAC;IAClG,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,cAAc,EAAE,cAAc,KAAK,iBAAiB,CAAC;gBAEtD,KAAK,EAAE,kBAAkB;IAWtD,0FAA0F;IAC1F,MAAM,CAAC,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQtF,+FAA+F;IAC/F,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAIzB,gDAAgD;IAChD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAG5B"}

package/dist/otel-core/sdk/telemetry-gate.js

@@ -0,0 +1,297 @@
+"use strict";
+// =============================================================================
+// The runtime telemetry gate (issue #532, epic #528; packaged by issue #700)
+// =============================================================================
+//
+// TWO SWITCHES, AND THEY ARE NOT THE SAME SWITCH
+// -----------------------------------------------------------------------------
+//
+//   1. `OTEL_ENABLED` (environment, infra). Decides whether the OpenTelemetry
+//      SDK is installed in this process AT ALL — read once by
+//      `initializeOtel()` (`initialize-otel.ts`, called from the app's
+//      `instrumentation.ts`) before Nest exists. It is `true` when the
+//      deployment ships the telemetry overlay (collector + storage backend),
+//      and it cannot change without a restart, because auto-instrumentation
+//      can only patch modules required AFTER `sdk.start()`.
+//
+//   2. `telemetry.enabled` (system setting, admin UI). Decides whether what
+//      the installed SDK produces is actually EXPORTED. An administrator
+//      flips it at runtime with no restart; the app's telemetry module calls
+//      `telemetryGate.setEnabled()` on boot (once settings have loaded) and on
+//      every settings refresh.
+//
+// The SDK keeps running either way — spans are still created, log records
+// still correlated, metrics still aggregated — and the gated exporters below
+// simply drop each batch while the gate is closed. Dropping is the intended
+// behaviour, not a failure: a batch is acknowledged as SUCCESS so the
+// processors neither retry it nor log an export error for it.
+//
+// The gate is read at EXPORT time, not when a span or record is created: a
+// batch that was queued while closed and is flushed after the gate opens is
+// sent. At worst that is one batch interval (the batch processors' scheduled
+// delay, or the metric reader's 60s) on either side of a toggle.
+//
+// THE GATE STARTS CLOSED. Nothing leaves the process until settings have been
+// read and an administrator's choice is known; a deployment that has switched
+// telemetry off must not leak the first minute of every boot.
+//
+// THE INSTANCE IDENTIFIER IS STAMPED HERE TOO (issue #565)
+// -----------------------------------------------------------------------------
+//
+// Every exported span, log record and metric batch carries the resource
+// attribute `app.instance.id` (`instance-id.ts`), which an administrator
+// changes at runtime (`telemetry.instanceId`). The SDK resource cannot carry
+// it: `initializeOtel()` hands the resource to `NodeSDK` once, before
+// `sdk.start()`, and it is immutable from then on — every span and record
+// holds a reference to that one object. A runtime-changeable identity must
+// therefore be applied at EXPORT time, and the gate is already the one place
+// every batch passes through on its way out. The telemetry module pushes the
+// resolved value with `telemetryGate.setInstanceId()` at the same moments it
+// pushes `setEnabled()`: on boot, every refresh interval, and after a save.
+//
+// The value is read per batch, like the gate itself, so a change applies to
+// the next batch exported. It starts at the app's default rather than empty
+// (`initializeOtel({ instanceId })` seeds it with the app's slug before
+// `sdk.start()`; the package's own placeholder is `DEFAULT_INSTANCE_ID`), so
+// the first batch after the gate opens is never unlabelled even if it races
+// the first settings read.
+//
+// HOW A RECORD IS RE-LABELLED WITHOUT TOUCHING IT
+// -----------------------------------------------------------------------------
+//
+//   - Metrics: `ResourceMetrics` is a plain object built per collection, so
+//     the batch is shallow-copied with a replaced `resource`.
+//
+//   - Spans and log records are SDK class instances (`SpanImpl`,
+//     `LogRecordImpl`), shared with every other processor, and much of what
+//     the OTLP transformer reads is a prototype GETTER over an underscored
+//     field (`droppedAttributesCount`, `hrTime`, `severityText`, `body`,
+//     `spanContext`…). A spread would lose every getter; mutating the
+//     original would leak the label into other processors. So each record is
+//     presented as `Object.create(record)` with ONE own property, `resource`:
+//     every getter and method still resolves through the prototype chain with
+//     `this` bound to the wrapper, which falls through to the original's
+//     fields. (Neither class uses `#private` fields, which a wrapper could not
+//     reach — checked against sdk-trace / sdk-logs 0.221.)
+//
+//   - The OTLP transformer (`@opentelemetry/otlp-transformer`, `trace/
+//     internal.js` and `logs/internal.js`) groups records into
+//     `ResourceSpans` / `ResourceLogs` with a `Map` KEYED BY THE RESOURCE
+//     OBJECT'S IDENTITY. A fresh merged resource per record would emit one
+//     `ResourceSpans` per span. The merged resource is therefore cached per
+//     (original resource, instance id) pair in a `WeakMap`, so every record in
+//     a batch that shared a resource still shares one — and a change of id
+//     simply replaces the entry.
+//
+//   - `resource.merge(other)` gives `other`'s attributes precedence
+//     (`ResourceImpl.merge` lists the incoming attributes first and
+//     `attributes` keeps the first of each key), so the stamped id wins over
+//     anything a detector or `OTEL_RESOURCE_ATTRIBUTES` put there, and every
+//     other attribute (`service.name`, …) is preserved.
+//
+//   - The batch processors settle a resource's async (detector) attributes
+//     BEFORE calling `export`, so the merged copy is built from settled
+//     values. A cache entry built while its source was still pending is
+//     rebuilt once the source has settled.
+//
+// SAFE TO IMPORT BEFORE THE SDK STARTS
+// -----------------------------------------------------------------------------
+//
+// Like `service-name.ts`, this module is part of the `sdk` subpath, loaded
+// ahead of `sdk.start()`. It is kept trivial and side-effect-free on purpose:
+// module-level state, three thin wrapper classes, and imports only from the
+// OpenTelemetry SDK packages themselves and `instance-id.ts` (never `http`,
+// `pg`, `pino` or any other module the auto-instrumentation needs to patch).
+// There is no Nest DI here because Nest does not exist yet when this runs.
+//
+// ONE COPY PER PROCESS. The gate is module-level state: two copies of
+// `@marinoscar/platform-api` in one process would be two gates, and the app
+// would open one while the SDK exports through the other. The platform
+// single-instance check (issue #695) guards the package name.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GatedPushMetricExporter = exports.GatedLogRecordExporter = exports.GatedSpanExporter = exports.telemetryGate = void 0;
+exports.stampResource = stampResource;
+const core_1 = require("@opentelemetry/core");
+const resources_1 = require("@opentelemetry/resources");
+const sdk_metrics_1 = require("@opentelemetry/sdk-metrics");
+const instance_id_1 = require("./instance-id");
+let enabled = false;
+let instanceId = instance_id_1.DEFAULT_INSTANCE_ID;
+/**
+ * Process-wide runtime export switch (starts closed, `false`) and the instance
+ * identifier stamped on everything it lets through (starts at
+ * `DEFAULT_INSTANCE_ID` until `initializeOtel({ instanceId })` or the app's
+ * settings set it).
+ *
+ * @example
+ * ```ts
+ * telemetryGate.setInstanceId(resolveTelemetryInstanceId(settings.instanceId, APP_SLUG));
+ * telemetryGate.setEnabled(settings.enabled);
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+exports.telemetryGate = {
+    isEnabled() {
+        return enabled;
+    },
+    setEnabled(next) {
+        enabled = next;
+    },
+    instanceId() {
+        return instanceId;
+    },
+    setInstanceId(next) {
+        instanceId = next;
+    },
+};
+/** Per source resource: the merged copy last built, and for which id. */
+const stamped = new WeakMap();
+/**
+ * `resource` with `app.instance.id` set to the current instance id: the SAME
+ * object for every call with the same source and id (see the file header: the
+ * OTLP transformer groups by resource identity).
+ *
+ * @param resource - The SDK resource a span, log record or metric batch carries.
+ * @returns The merged resource, cached per (source, id).
+ *
+ * @stability experimental
+ */
+function stampResource(resource) {
+    const id = instanceId;
+    const hit = stamped.get(resource);
+    if (hit && hit.id === id && !(hit.merged.asyncAttributesPending && !resource.asyncAttributesPending)) {
+        return hit.merged;
+    }
+    const merged = resource.merge((0, resources_1.resourceFromAttributes)({ [instance_id_1.ATTR_APP_INSTANCE_ID]: id }));
+    stamped.set(resource, { id, merged });
+    return merged;
+}
+/**
+ * `record` presented with a stamped `resource`, without copying or mutating
+ * it: an object whose prototype IS the record, so getters and methods still
+ * work (see the header).
+ */
+function withStampedResource(record) {
+    return Object.create(record, {
+        resource: { value: stampResource(record.resource), enumerable: true },
+    });
+}
+const DROPPED = { code: core_1.ExportResultCode.SUCCESS };
+/**
+ * Forwards spans to `inner`, stamped with the instance id, only while the
+ * telemetry gate is open. A closed gate acknowledges each batch as SUCCESS.
+ *
+ * @stability stable
+ */
+class GatedSpanExporter {
+    inner;
+    constructor(inner) {
+        this.inner = inner;
+    }
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(spans, resultCallback) {
+        if (!exports.telemetryGate.isEnabled()) {
+            resultCallback(DROPPED);
+            return;
+        }
+        this.inner.export(spans.map(withStampedResource), resultCallback);
+    }
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown() {
+        return this.inner.shutdown();
+    }
+    /** Always delegates, whatever the gate says. */
+    forceFlush() {
+        return this.inner.forceFlush ? this.inner.forceFlush() : Promise.resolve();
+    }
+}
+exports.GatedSpanExporter = GatedSpanExporter;
+/**
+ * Forwards log records to `inner`, stamped with the instance id, only while
+ * the telemetry gate is open. A closed gate acknowledges each batch as SUCCESS.
+ *
+ * @stability stable
+ */
+class GatedLogRecordExporter {
+    inner;
+    constructor(inner) {
+        this.inner = inner;
+    }
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(logs, resultCallback) {
+        if (!exports.telemetryGate.isEnabled()) {
+            resultCallback(DROPPED);
+            return;
+        }
+        this.inner.export(logs.map(withStampedResource), resultCallback);
+    }
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown() {
+        return this.inner.shutdown();
+    }
+    /** Always delegates, whatever the gate says. */
+    forceFlush() {
+        return this.inner.forceFlush();
+    }
+}
+exports.GatedLogRecordExporter = GatedLogRecordExporter;
+/**
+ * Forwards metrics to `inner`, stamped with the instance id, only while the
+ * telemetry gate is open.
+ *
+ * The optional aggregation selector is delegated so the reader keeps the inner
+ * exporter's aggregation preferences, and so is its temporality (OTLP defaults
+ * to cumulative) for every instrument EXCEPT gauges: wrapping must not change
+ * what is measured, only whether it is sent.
+ *
+ * ⚠ GAUGES ARE SELECTED DELTA, AND THIS IS NOT A CHANGE TO THE DATA. An OTLP
+ * gauge carries no temporality on the wire; the choice only decides what the
+ * SDK keeps between collections. Under cumulative, `@opentelemetry/sdk-metrics`
+ * (2.x, verified) re-exports EVERY attribute set a gauge callback ever
+ * observed, at its last value, on every later collection — so a worker node
+ * that went offline, or a job type whose backlog drained, would keep reporting
+ * its final reading with a fresh timestamp for the life of the process. Under
+ * delta, a collection exports exactly what the callback observed this time.
+ * The `app.nodes.*` per-node gauges (#606) depend on it: a node dropping out of
+ * the exported set must disappear from the store, not freeze.
+ *
+ * @stability stable
+ */
+class GatedPushMetricExporter {
+    inner;
+    /** Delta for gauges, the inner exporter's choice (default cumulative) for everything else. */
+    selectAggregationTemporality;
+    /** The inner exporter's aggregation selector, when it has one. */
+    selectAggregation;
+    constructor(inner) {
+        this.inner = inner;
+        const innerTemporality = inner.selectAggregationTemporality?.bind(inner);
+        this.selectAggregationTemporality = (instrumentType) => instrumentType === sdk_metrics_1.InstrumentType.OBSERVABLE_GAUGE || instrumentType === sdk_metrics_1.InstrumentType.GAUGE
+            ? sdk_metrics_1.AggregationTemporality.DELTA
+            : (innerTemporality?.(instrumentType) ?? sdk_metrics_1.AggregationTemporality.CUMULATIVE);
+        if (inner.selectAggregation) {
+            this.selectAggregation = inner.selectAggregation.bind(inner);
+        }
+    }
+    /** Drops the batch (SUCCESS) while the gate is closed; otherwise stamps and delegates. */
+    export(metrics, resultCallback) {
+        if (!exports.telemetryGate.isEnabled()) {
+            resultCallback(DROPPED);
+            return;
+        }
+        this.inner.export({ ...metrics, resource: stampResource(metrics.resource) }, resultCallback);
+    }
+    /** Always delegates, whatever the gate says: a shutdown must flush even when export is off. */
+    shutdown() {
+        return this.inner.shutdown();
+    }
+    /** Always delegates, whatever the gate says. */
+    forceFlush() {
+        return this.inner.forceFlush();
+    }
+}
+exports.GatedPushMetricExporter = GatedPushMetricExporter;
+//# sourceMappingURL=telemetry-gate.js.map

package/dist/otel-core/sdk/telemetry-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry-gate.js","sourceRoot":"","sources":["../../../src/otel-core/sdk/telemetry-gate.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,EAAE;AACF,iDAAiD;AACjD,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,8DAA8D;AAC9D,uEAAuE;AACvE,uEAAuE;AACvE,6EAA6E;AAC7E,4EAA4E;AAC5E,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,+EAA+E;AAC/E,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,6EAA6E;AAC7E,4EAA4E;AAC5E,sEAAsE;AACtE,8DAA8D;AAC9D,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,6EAA6E;AAC7E,iEAAiE;AACjE,EAAE;AACF,8EAA8E;AAC9E,8EAA8E;AAC9E,8DAA8D;AAC9D,EAAE;AACF,2DAA2D;AAC3D,gFAAgF;AAChF,EAAE;AACF,wEAAwE;AACxE,yEAAyE;AACzE,6EAA6E;AAC7E,sEAAsE;AACtE,0EAA0E;AAC1E,2EAA2E;AAC3E,6EAA6E;AAC7E,6EAA6E;AAC7E,6EAA6E;AAC7E,4EAA4E;AAC5E,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,2BAA2B;AAC3B,EAAE;AACF,kDAAkD;AAClD,gFAAgF;AAChF,EAAE;AACF,4EAA4E;AAC5E,8DAA8D;AAC9D,EAAE;AACF,iEAAiE;AACjE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,sEAAsE;AACtE,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,yEAAyE;AACzE,+EAA+E;AAC/E,2DAA2D;AAC3D,EAAE;AACF,uEAAuE;AACvE,+DAA+D;AAC/D,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,+EAA+E;AAC/E,2EAA2E;AAC3E,iCAAiC;AACjC,EAAE;AACF,oEAAoE;AACpE,oEAAoE;AACpE,6EAA6E;AAC7E,6EAA6E;AAC7E,wDAAwD;AACxD,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,2CAA2C;AAC3C,EAAE;AACF,uCAAuC;AACvC,gFAAgF;AAChF,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,4EAA4E;AAC5E,4EAA4E;AAC5E,6EAA6E;AAC7E,2EAA2E;AAC3E,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,uEAAuE;AACvE,8DAA8D;AAC9D,gFAAgF;;;AA8EhF,sCAYC;AAxFD,8CAA0E;AAC1E,wDAAiF;AAEjF,4DAMoC;AAGpC,+CAA0E;AAE1E,IAAI,OAAO,GAAG,KAAK,CAAC;AACpB,IAAI,UAAU,GAAG,iCAAmB,CAAC;AAkBrC;;;;;;;;;;;;;;GAcG;AACU,QAAA,aAAa,GAAkB;IAC1C,SAAS;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,UAAU,CAAC,IAAa;QACtB,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,UAAU;QACR,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,aAAa,CAAC,IAAY;QACxB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;CACF,CAAC;AAEF,yEAAyE;AACzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAA8C,CAAC;AAE1E;;;;;;;;;GASG;AACH,SAAgB,aAAa,CAAC,QAAkB;IAC9C,MAAM,EAAE,GAAG,UAAU,CAAC;IACtB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAElC,IAAI,GAAG,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACrG,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAA,kCAAsB,EAAC,EAAE,CAAC,kCAAoB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAEtC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAmC,MAAS;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE;KACtE,CAAM,CAAC;AACV,CAAC;AAED,MAAM,OAAO,GAAiB,EAAE,IAAI,EAAE,uBAAgB,CAAC,OAAO,EAAE,CAAC;AAEjE;;;;;GAKG;AACH,MAAa,iBAAiB;IACC;IAA7B,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,0FAA0F;IAC1F,MAAM,CAAC,KAAqB,EAAE,cAA8C;QAC1E,IAAI,CAAC,qBAAa,CAAC,SAAS,EAAE,EAAE,CAAC;YAC/B,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC,CAAC;IACpE,CAAC;IAED,+FAA+F;IAC/F,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7E,CAAC;CACF;AArBD,8CAqBC;AAED;;;;;GAKG;AACH,MAAa,sBAAsB;IACJ;IAA7B,YAA6B,KAAwB;QAAxB,UAAK,GAAL,KAAK,CAAmB;IAAG,CAAC;IAEzD,0FAA0F;IAC1F,MAAM,CAAC,IAAyB,EAAE,cAA8C;QAC9E,IAAI,CAAC,qBAAa,CAAC,SAAS,EAAE,EAAE,CAAC;YAC/B,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,cAAc,CAAC,CAAC;IACnE,CAAC;IAED,+FAA+F;IAC/F,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;CACF;AArBD,wDAqBC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAa,uBAAuB;IAML;IAL7B,8FAA8F;IACrF,4BAA4B,CAA6D;IAClG,kEAAkE;IACzD,iBAAiB,CAAyD;IAEnF,YAA6B,KAAyB;QAAzB,UAAK,GAAL,KAAK,CAAoB;QACpD,MAAM,gBAAgB,GAAG,KAAK,CAAC,4BAA4B,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,CAAC,4BAA4B,GAAG,CAAC,cAAc,EAAE,EAAE,CACrD,cAAc,KAAK,4BAAc,CAAC,gBAAgB,IAAI,cAAc,KAAK,4BAAc,CAAC,KAAK;YAC3F,CAAC,CAAC,oCAAsB,CAAC,KAAK;YAC9B,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,IAAI,oCAAsB,CAAC,UAAU,CAAC,CAAC;QAChF,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,IAAI,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,0FAA0F;IAC1F,MAAM,CAAC,OAAwB,EAAE,cAA8C;QAC7E,IAAI,CAAC,qBAAa,CAAC,SAAS,EAAE,EAAE,CAAC;YAC/B,cAAc,CAAC,OAAO,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,CAAC;IAC/F,CAAC;IAED,+FAA+F;IAC/F,QAAQ;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,gDAAgD;IAChD,UAAU;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;IACjC,CAAC;CACF;AAnCD,0DAmCC"}

package/dist/otel-core/spans/request-span-attributes.d.ts

@@ -0,0 +1,58 @@
+import type { FastifyInstance, FastifyReply, FastifyRequest, HookHandlerDoneFunction } from 'fastify';
+/**
+ * Semantic-convention route attribute (stable HTTP semconv).
+ *
+ * @stability stable
+ */
+export declare const ATTR_HTTP_ROUTE = "http.route";
+/**
+ * `false` when no route matched (Fastify's not-found handler answered). Absent otherwise.
+ *
+ * @stability stable
+ */
+export declare const ATTR_APP_ROUTE_MATCHED = "app.route.matched";
+/**
+ * Whether an `Authorization: Bearer` header was present. Never the token.
+ *
+ * @stability stable
+ */
+export declare const ATTR_APP_REQUEST_BEARER = "app.request.bearer";
+/**
+ * Whether the request carries an `Authorization: Bearer …` header. Reads only the scheme.
+ *
+ * @param authorization - The raw header value(s).
+ * @returns `true` when the first value starts with `bearer ` (any case) and has a token after it.
+ *
+ * @stability stable
+ */
+export declare function hasBearer(authorization: string | string[] | undefined): boolean;
+/**
+ * The `onRequest` hook itself; exported for the spec. Writes `http.route`,
+ * `app.route.matched` and `app.request.bearer` on the active span.
+ *
+ * @param request - The Fastify request.
+ * @param _reply - Unused.
+ * @param done - Fastify's continuation.
+ *
+ * @stability experimental
+ */
+export declare function requestSpanAttributesHook(request: FastifyRequest, _reply: FastifyReply, done: HookHandlerDoneFunction): void;
+/**
+ * Registers the hook on the ROOT Fastify instance. Call it before any plugin
+ * or route is registered (right after `NestFactory.create`), so it runs first
+ * — before a CORS preflight or any other `onRequest` hook can reply.
+ *
+ * @param fastify - The root Fastify instance (`app.getHttpAdapter().getInstance()`).
+ * @param otelEnabled - Whether the SDK is installed; `false` registers nothing.
+ * @returns Whether the hook was registered.
+ *
+ * @example
+ * ```ts
+ * registerRequestSpanAttributes(app.getHttpAdapter().getInstance(), process.env.OTEL_ENABLED === 'true');
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+export declare function registerRequestSpanAttributes(fastify: Pick<FastifyInstance, 'addHook'>, otelEnabled: boolean): boolean;
+//# sourceMappingURL=request-span-attributes.d.ts.map

package/dist/otel-core/spans/request-span-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-span-attributes.d.ts","sourceRoot":"","sources":["../../../src/otel-core/spans/request-span-attributes.ts"],"names":[],"mappings":"AAuEA,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,SAAS,CAAC;AAEtG;;;;GAIG;AACH,eAAO,MAAM,eAAe,eAAe,CAAC;AAC5C;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAC1D;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,uBAAuB,CAAC;AAE5D;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,GAAG,OAAO,CAG/E;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,YAAY,EACpB,IAAI,EAAE,uBAAuB,GAC5B,IAAI,CAYN;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EACzC,WAAW,EAAE,OAAO,GACnB,OAAO,CAIT"}

package/dist/otel-core/spans/request-span-attributes.js

@@ -0,0 +1,155 @@
+"use strict";
+// =============================================================================
+// Route and caller attributes on the HTTP server span (issue #650; packaged by
+// issue #700)
+// =============================================================================
+//
+// WHY THIS EXISTS
+// -----------------------------------------------------------------------------
+// A web build newer than the API build called routes the API did not have
+// (`GET /api/coach/messages`, …). Nest answered its default 404 ("Cannot GET
+// …") in about a millisecond, and the telemetry dashboard stayed green: it
+// only counted 5xx, OpenTelemetry leaves a 4xx server span STATUS_CODE_UNSET,
+// and nothing logged. Worse, a 404 from an unknown route looked exactly like a
+// legitimate 404 from a matched route (`GET /api/gyms/:id` for a deleted gym),
+// because the server span carried no route at all: the http instrumentation
+// cannot know Fastify's route table, and there is no Fastify instrumentation
+// in the auto-instrumentation bundle this API uses.
+//
+// So one `onRequest` hook, registered on the root Fastify instance before any
+// route or plugin, writes what only Fastify knows onto the ACTIVE span:
+//
+//   http.route         the matched route pattern (`/api/gyms/:id`) — the OTel
+//                      semantic-convention attribute. Matched requests only.
+//                      As a side effect the http instrumentation renames the
+//                      server span to `GET /api/gyms/:id` when it ends (it
+//                      reads `http.route` back), so `span_name` becomes
+//                      useful too.
+//   app.route.matched  `false` when Fastify fell through to the not-found
+//                      handler (no route for this method + path). Absent on a
+//                      matched request: the dashboard asks only "= false", and
+//                      writing `true` on every span would only cost storage.
+//   app.request.bearer whether an `Authorization: Bearer …` header is PRESENT.
+//                      true/false on every request. NEVER the token or any
+//                      part of it — only `startsWith('bearer ')` is read. The
+//                      web app always sends a bearer, so this separates "our
+//                      own client is calling a route that does not exist"
+//                      (a deploy skew, a real defect) from anonymous internet
+//                      scanners probing `/api/wp-login.php`.
+//
+// VERIFIED (Fastify 5.11, @opentelemetry/instrumentation-http 0.221, issue #650):
+//   - Fastify resolves the route BEFORE `onRequest`, so `routeOptions.url` is
+//     the pattern for a matched request and `undefined` for the not-found
+//     handler (also for a known path with an unregistered method). `is404` is
+//     the same fact as a boolean, and is what the hook branches on.
+//   - During `onRequest`, `trace.getActiveSpan()` IS the http SERVER span
+//     (kind SERVER): the http instrumentation runs the server's `request`
+//     emit inside `context.with(serverSpan)`, and nothing between that emit
+//     and the hook opens another span (no Fastify instrumentation; the
+//     nestjs-core instrumentation only wraps the handler). The spec proves the
+//     hook writes to whatever span is active; the SERVER-kind fact was
+//     checked with a real `NodeSDK` + http instrumentation over a socket
+//     (Jest's module registry defeats require-in-the-middle, so it cannot be
+//     a Jest test).
+//
+// NO-OP WITHOUT OTEL. The app registers the hook only when the SDK is
+// installed (`OTEL_ENABLED=true`; the reference app's `main.ts`). Even if registered without it, the no-op
+// API's `getActiveSpan()` is undefined and the hook does nothing. It does not
+// consult the runtime export gate (`sdk/telemetry-gate.ts`): the SDK keeps
+// creating spans while the gate is closed, and an attribute set is cheaper
+// than the branch would be worth.
+//
+// COST: one header read, one `getActiveSpan()`, two attribute sets. No
+// allocation beyond what `setAttribute` itself does.
+//
+// The collector's `attributes/redact` processor only deletes credential
+// attributes (authorization/cookie headers, url.query), so these three pass
+// through; GreptimeDB's `greptime_trace_v1` pipeline flattens them into the
+// columns `span_attributes.http.route`, `span_attributes.app.route.matched`
+// and `span_attributes.app.request.bearer`, created on first write.
+// =============================================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ATTR_APP_REQUEST_BEARER = exports.ATTR_APP_ROUTE_MATCHED = exports.ATTR_HTTP_ROUTE = void 0;
+exports.hasBearer = hasBearer;
+exports.requestSpanAttributesHook = requestSpanAttributesHook;
+exports.registerRequestSpanAttributes = registerRequestSpanAttributes;
+const api_1 = require("@opentelemetry/api");
+/**
+ * Semantic-convention route attribute (stable HTTP semconv).
+ *
+ * @stability stable
+ */
+exports.ATTR_HTTP_ROUTE = 'http.route';
+/**
+ * `false` when no route matched (Fastify's not-found handler answered). Absent otherwise.
+ *
+ * @stability stable
+ */
+exports.ATTR_APP_ROUTE_MATCHED = 'app.route.matched';
+/**
+ * Whether an `Authorization: Bearer` header was present. Never the token.
+ *
+ * @stability stable
+ */
+exports.ATTR_APP_REQUEST_BEARER = 'app.request.bearer';
+/**
+ * Whether the request carries an `Authorization: Bearer …` header. Reads only the scheme.
+ *
+ * @param authorization - The raw header value(s).
+ * @returns `true` when the first value starts with `bearer ` (any case) and has a token after it.
+ *
+ * @stability stable
+ */
+function hasBearer(authorization) {
+    const value = Array.isArray(authorization) ? authorization[0] : authorization;
+    return typeof value === 'string' && value.length > 7 && value.slice(0, 7).toLowerCase() === 'bearer ';
+}
+/**
+ * The `onRequest` hook itself; exported for the spec. Writes `http.route`,
+ * `app.route.matched` and `app.request.bearer` on the active span.
+ *
+ * @param request - The Fastify request.
+ * @param _reply - Unused.
+ * @param done - Fastify's continuation.
+ *
+ * @stability experimental
+ */
+function requestSpanAttributesHook(request, _reply, done) {
+    const span = api_1.trace.getActiveSpan();
+    if (span) {
+        if (request.is404) {
+            span.setAttribute(exports.ATTR_APP_ROUTE_MATCHED, false);
+        }
+        else {
+            const route = request.routeOptions.url;
+            if (route)
+                span.setAttribute(exports.ATTR_HTTP_ROUTE, route);
+        }
+        span.setAttribute(exports.ATTR_APP_REQUEST_BEARER, hasBearer(request.headers.authorization));
+    }
+    done();
+}
+/**
+ * Registers the hook on the ROOT Fastify instance. Call it before any plugin
+ * or route is registered (right after `NestFactory.create`), so it runs first
+ * — before a CORS preflight or any other `onRequest` hook can reply.
+ *
+ * @param fastify - The root Fastify instance (`app.getHttpAdapter().getInstance()`).
+ * @param otelEnabled - Whether the SDK is installed; `false` registers nothing.
+ * @returns Whether the hook was registered.
+ *
+ * @example
+ * ```ts
+ * registerRequestSpanAttributes(app.getHttpAdapter().getInstance(), process.env.OTEL_ENABLED === 'true');
+ * ```
+ *
+ * @extensionPoint hook
+ * @stability stable
+ */
+function registerRequestSpanAttributes(fastify, otelEnabled) {
+    if (!otelEnabled)
+        return false;
+    fastify.addHook('onRequest', requestSpanAttributesHook);
+    return true;
+}
+//# sourceMappingURL=request-span-attributes.js.map

package/dist/otel-core/spans/request-span-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-span-attributes.js","sourceRoot":"","sources":["../../../src/otel-core/spans/request-span-attributes.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,cAAc;AACd,gFAAgF;AAChF,EAAE;AACF,kBAAkB;AAClB,gFAAgF;AAChF,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,wEAAwE;AACxE,EAAE;AACF,8EAA8E;AAC9E,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,wEAAwE;AACxE,mCAAmC;AACnC,0EAA0E;AAC1E,8EAA8E;AAC9E,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,0EAA0E;AAC1E,8EAA8E;AAC9E,6DAA6D;AAC7D,EAAE;AACF,kFAAkF;AAClF,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,4EAA4E;AAC5E,uEAAuE;AACvE,+EAA+E;AAC/E,uEAAuE;AACvE,yEAAyE;AACzE,6EAA6E;AAC7E,oBAAoB;AACpB,EAAE;AACF,sEAAsE;AACtE,2GAA2G;AAC3G,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,kCAAkC;AAClC,EAAE;AACF,uEAAuE;AACvE,qDAAqD;AACrD,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,4EAA4E;AAC5E,4EAA4E;AAC5E,oEAAoE;AACpE,gFAAgF;;;AAgChF,8BAGC;AAYD,8DAgBC;AAmBD,sEAOC;AAvFD,4CAA2C;AAG3C;;;;GAIG;AACU,QAAA,eAAe,GAAG,YAAY,CAAC;AAC5C;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,mBAAmB,CAAC;AAC1D;;;;GAIG;AACU,QAAA,uBAAuB,GAAG,oBAAoB,CAAC;AAE5D;;;;;;;GAOG;AACH,SAAgB,SAAS,CAAC,aAA4C;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IAC9E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC;AACxG,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,yBAAyB,CACvC,OAAuB,EACvB,MAAoB,EACpB,IAA6B;IAE7B,MAAM,IAAI,GAAG,WAAK,CAAC,aAAa,EAAE,CAAC;IACnC,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC,YAAY,CAAC,8BAAsB,EAAE,KAAK,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC;YACvC,IAAI,KAAK;gBAAE,IAAI,CAAC,YAAY,CAAC,uBAAe,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,+BAAuB,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,EAAE,CAAC;AACT,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,6BAA6B,CAC3C,OAAyC,EACzC,WAAoB;IAEpB,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAC/B,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,yBAAyB,CAAC,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC"}