@mondaydotcomorg/atp-providers 0.17.16 → 0.18.4-rc.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (43) hide show
  1. package/dist/audit/jsonl.d.ts +29 -0
  2. package/dist/audit/jsonl.d.ts.map +1 -0
  3. package/dist/audit/jsonl.js +163 -0
  4. package/dist/audit/jsonl.js.map +1 -0
  5. package/dist/audit/opentelemetry.d.ts +23 -0
  6. package/dist/audit/opentelemetry.d.ts.map +1 -0
  7. package/dist/audit/opentelemetry.js +240 -0
  8. package/dist/audit/opentelemetry.js.map +1 -0
  9. package/dist/audit/otel-metrics.d.ts +111 -0
  10. package/dist/audit/otel-metrics.d.ts.map +1 -0
  11. package/dist/audit/otel-metrics.js +115 -0
  12. package/dist/audit/otel-metrics.js.map +1 -0
  13. package/dist/auth/env.d.ts +21 -0
  14. package/dist/auth/env.d.ts.map +1 -0
  15. package/dist/auth/env.js +48 -0
  16. package/dist/auth/env.js.map +1 -0
  17. package/dist/cache/file.d.ts +47 -0
  18. package/dist/cache/file.d.ts.map +1 -0
  19. package/dist/cache/file.js +262 -0
  20. package/dist/cache/file.js.map +1 -0
  21. package/dist/cache/memory.d.ts +30 -0
  22. package/dist/cache/memory.d.ts.map +1 -0
  23. package/dist/cache/memory.js +81 -0
  24. package/dist/cache/memory.js.map +1 -0
  25. package/dist/cache/redis.d.ts +28 -0
  26. package/dist/cache/redis.d.ts.map +1 -0
  27. package/dist/cache/redis.js +124 -0
  28. package/dist/cache/redis.js.map +1 -0
  29. package/dist/index.d.ts +10 -0
  30. package/dist/index.d.ts.map +1 -0
  31. package/dist/index.js +9 -0
  32. package/dist/index.js.map +1 -0
  33. package/dist/oauth/index.d.ts +2 -0
  34. package/dist/oauth/index.d.ts.map +1 -0
  35. package/dist/oauth/index.js +2 -0
  36. package/dist/oauth/index.js.map +1 -0
  37. package/dist/oauth/scope-checkers.d.ts +61 -0
  38. package/dist/oauth/scope-checkers.d.ts.map +1 -0
  39. package/dist/oauth/scope-checkers.js +166 -0
  40. package/dist/oauth/scope-checkers.js.map +1 -0
  41. package/package.json +8 -2
  42. package/project.json +1 -3
  43. package/tsconfig.tsbuildinfo +1 -0
@@ -0,0 +1,29 @@
1
+ import type { AuditEvent, AuditFilter, AuditSink } from '@mondaydotcomorg/atp-protocol';
2
+ /**
3
+ * JSONL (JSON Lines) audit sink
4
+ * Writes audit events to a file, one JSON object per line
5
+ * Simple, append-only, easy to parse with standard tools
6
+ */
7
+ export declare class JSONLAuditSink implements AuditSink {
8
+ name: string;
9
+ private filePath;
10
+ private sanitizeSecrets;
11
+ private buffer;
12
+ private flushInterval;
13
+ private batchSize;
14
+ constructor(options: {
15
+ filePath: string;
16
+ sanitizeSecrets?: boolean;
17
+ batchSize?: number;
18
+ flushIntervalMs?: number;
19
+ });
20
+ write(event: AuditEvent): Promise<void>;
21
+ writeBatch(events: AuditEvent[]): Promise<void>;
22
+ query(filter: AuditFilter): Promise<AuditEvent[]>;
23
+ disconnect(): Promise<void>;
24
+ private flush;
25
+ private sanitizeEvent;
26
+ private sanitizeString;
27
+ private sanitizeObject;
28
+ }
29
+ //# sourceMappingURL=jsonl.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"jsonl.d.ts","sourceRoot":"","sources":["../../src/audit/jsonl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAKxF;;;;GAIG;AACH,qBAAa,cAAe,YAAW,SAAS;IAC/C,IAAI,SAAW;IACf,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,eAAe,CAAU;IACjC,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,aAAa,CAA+B;IACpD,OAAO,CAAC,SAAS,CAAS;gBAEd,OAAO,EAAE;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,eAAe,CAAC,EAAE,MAAM,CAAC;KACzB;IAuBK,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAa/C,KAAK,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAqCjD,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;YAUnB,KAAK;IAOnB,OAAO,CAAC,aAAa;IAiBrB,OAAO,CAAC,cAAc;IAoBtB,OAAO,CAAC,cAAc;CA0BtB"}
@@ -0,0 +1,163 @@
1
+ import { appendFile, readFile, mkdir } from 'node:fs/promises';
2
+ import { existsSync } from 'node:fs';
3
+ import { dirname } from 'node:path';
4
+ /**
5
+ * JSONL (JSON Lines) audit sink
6
+ * Writes audit events to a file, one JSON object per line
7
+ * Simple, append-only, easy to parse with standard tools
8
+ */
9
+ export class JSONLAuditSink {
10
+ name = 'jsonl';
11
+ filePath;
12
+ sanitizeSecrets;
13
+ buffer = [];
14
+ flushInterval = null;
15
+ batchSize;
16
+ constructor(options) {
17
+ this.filePath = options.filePath;
18
+ this.sanitizeSecrets = options.sanitizeSecrets ?? true;
19
+ this.batchSize = options.batchSize || 10;
20
+ const dir = dirname(this.filePath);
21
+ if (!existsSync(dir)) {
22
+ mkdir(dir, { recursive: true }).catch((err) => {
23
+ console.error(`Failed to create audit directory: ${err.message}`);
24
+ });
25
+ }
26
+ if (options.flushIntervalMs) {
27
+ this.flushInterval = setInterval(() => {
28
+ if (this.buffer.length > 0) {
29
+ this.flush().catch((err) => {
30
+ console.error(`Failed to flush audit buffer: ${err.message}`);
31
+ });
32
+ }
33
+ }, options.flushIntervalMs);
34
+ }
35
+ }
36
+ async write(event) {
37
+ const sanitized = this.sanitizeSecrets ? this.sanitizeEvent(event) : event;
38
+ const line = JSON.stringify(sanitized) + '\n';
39
+ try {
40
+ await appendFile(this.filePath, line, 'utf8');
41
+ }
42
+ catch (error) {
43
+ console.error(`Failed to write audit event: ${error.message}`);
44
+ throw error;
45
+ }
46
+ }
47
+ async writeBatch(events) {
48
+ const sanitized = this.sanitizeSecrets ? events.map((e) => this.sanitizeEvent(e)) : events;
49
+ const lines = sanitized.map((e) => JSON.stringify(e)).join('\n') + '\n';
50
+ try {
51
+ await appendFile(this.filePath, lines, 'utf8');
52
+ }
53
+ catch (error) {
54
+ console.error(`Failed to write audit batch: ${error.message}`);
55
+ throw error;
56
+ }
57
+ }
58
+ async query(filter) {
59
+ try {
60
+ const content = await readFile(this.filePath, 'utf8');
61
+ const lines = content.split('\n').filter((line) => line.trim());
62
+ const events = lines.map((line) => JSON.parse(line));
63
+ return events
64
+ .filter((event) => {
65
+ if (filter.clientId && event.clientId !== filter.clientId)
66
+ return false;
67
+ if (filter.userId && event.userId !== filter.userId)
68
+ return false;
69
+ if (filter.from && event.timestamp < filter.from)
70
+ return false;
71
+ if (filter.to && event.timestamp > filter.to)
72
+ return false;
73
+ if (filter.resource && event.resource !== filter.resource)
74
+ return false;
75
+ if (filter.eventType) {
76
+ const types = Array.isArray(filter.eventType) ? filter.eventType : [filter.eventType];
77
+ if (!types.includes(event.eventType))
78
+ return false;
79
+ }
80
+ if (filter.status) {
81
+ const statuses = Array.isArray(filter.status) ? filter.status : [filter.status];
82
+ if (!statuses.includes(event.status))
83
+ return false;
84
+ }
85
+ if (filter.minRiskScore && (event.riskScore || 0) < filter.minRiskScore)
86
+ return false;
87
+ return true;
88
+ })
89
+ .slice(filter.offset || 0, (filter.offset || 0) + (filter.limit || 100));
90
+ }
91
+ catch (error) {
92
+ if (error.code === 'ENOENT') {
93
+ return [];
94
+ }
95
+ throw error;
96
+ }
97
+ }
98
+ async disconnect() {
99
+ if (this.flushInterval) {
100
+ clearInterval(this.flushInterval);
101
+ }
102
+ if (this.buffer.length > 0) {
103
+ await this.flush();
104
+ }
105
+ }
106
+ async flush() {
107
+ if (this.buffer.length === 0)
108
+ return;
109
+ await this.writeBatch([...this.buffer]);
110
+ this.buffer = [];
111
+ }
112
+ sanitizeEvent(event) {
113
+ const sanitized = { ...event };
114
+ if (sanitized.code) {
115
+ sanitized.code = this.sanitizeString(sanitized.code);
116
+ }
117
+ if (sanitized.input) {
118
+ sanitized.input = this.sanitizeObject(sanitized.input);
119
+ }
120
+ if (sanitized.output) {
121
+ sanitized.output = this.sanitizeObject(sanitized.output);
122
+ }
123
+ return sanitized;
124
+ }
125
+ sanitizeString(str) {
126
+ const patterns = [
127
+ /api[_-]?key/gi,
128
+ /secret/gi,
129
+ /token/gi,
130
+ /password/gi,
131
+ /bearer/gi,
132
+ /authorization/gi,
133
+ ];
134
+ for (const pattern of patterns) {
135
+ str = str.replace(new RegExp(`(${pattern.source})\\s*[:=]\\s*['\"]?([^'\"\\s]+)`, 'gi'), '$1: [REDACTED]');
136
+ }
137
+ return str;
138
+ }
139
+ sanitizeObject(obj) {
140
+ if (typeof obj !== 'object' || obj === null) {
141
+ return obj;
142
+ }
143
+ if (Array.isArray(obj)) {
144
+ return obj.map((item) => this.sanitizeObject(item));
145
+ }
146
+ const sanitized = {};
147
+ const secretPatterns = ['key', 'secret', 'token', 'password', 'bearer', 'auth'];
148
+ for (const [key, value] of Object.entries(obj)) {
149
+ const lowerKey = key.toLowerCase();
150
+ if (secretPatterns.some((pattern) => lowerKey.includes(pattern))) {
151
+ sanitized[key] = '[REDACTED]';
152
+ }
153
+ else if (typeof value === 'object') {
154
+ sanitized[key] = this.sanitizeObject(value);
155
+ }
156
+ else {
157
+ sanitized[key] = value;
158
+ }
159
+ }
160
+ return sanitized;
161
+ }
162
+ }
163
+ //# sourceMappingURL=jsonl.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"jsonl.js","sourceRoot":"","sources":["../../src/audit/jsonl.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;;GAIG;AACH,MAAM,OAAO,cAAc;IAC1B,IAAI,GAAG,OAAO,CAAC;IACP,QAAQ,CAAS;IACjB,eAAe,CAAU;IACzB,MAAM,GAAiB,EAAE,CAAC;IAC1B,aAAa,GAA0B,IAAI,CAAC;IAC5C,SAAS,CAAS;IAE1B,YAAY,OAKX;QACA,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,IAAI,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;QAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC7C,OAAO,CAAC,KAAK,CAAC,qCAAqC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;YAC7B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC5B,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;wBAC1B,OAAO,CAAC,KAAK,CAAC,iCAAiC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;oBAC/D,CAAC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;QAE9C,IAAI,CAAC;YACJ,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,gCAAiC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAoB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAE3F,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QAExE,IAAI,CAAC;YACJ,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,gCAAiC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1E,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC9B,IAAI,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAEnE,OAAO,MAAM;iBACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACjB,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBACxE,IAAI,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAClE,IAAI,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,IAAI;oBAAE,OAAO,KAAK,CAAC;gBAC/D,IAAI,MAAM,CAAC,EAAE,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC3D,IAAI,MAAM,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAExE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACtF,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC;wBAAE,OAAO,KAAK,CAAC;gBACpD,CAAC;gBAED,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBACnB,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBAChF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;wBAAE,OAAO,KAAK,CAAC;gBACpD,CAAC;gBAED,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY;oBAAE,OAAO,KAAK,CAAC;gBAEtF,OAAO,IAAI,CAAC;YACb,CAAC,CAAC;iBACD,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxD,OAAO,EAAE,CAAC;YACX,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,KAAK;QAClB,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAErC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IAClB,CAAC;IAEO,aAAa,CAAC,KAAiB;QACtC,MAAM,SAAS,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAE/B,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC;YACpB,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;YACrB,SAAS,CAAC,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,EAAE,CAAC;YACtB,SAAS,CAAC,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;IAEO,cAAc,CAAC,GAAW;QACjC,MAAM,QAAQ,GAAG;YAChB,eAAe;YACf,UAAU;YACV,SAAS;YACT,YAAY;YACZ,UAAU;YACV,iBAAiB;SACjB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAChC,GAAG,GAAG,GAAG,CAAC,OAAO,CAChB,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,MAAM,iCAAiC,EAAE,IAAI,CAAC,EACrE,gBAAgB,CAChB,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,cAAc,CAAC,GAAY;QAClC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC7C,OAAO,GAAG,CAAC;QACZ,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,SAAS,GAA4B,EAAE,CAAC;QAC9C,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEhF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;YAEnC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAClE,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC/B,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACtC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC;iBAAM,CAAC;gBACP,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACxB,CAAC;QACF,CAAC;QAED,OAAO,SAAS,CAAC;IAClB,CAAC;CACD"}
@@ -0,0 +1,23 @@
1
+ import type { AuditSink, AuditEvent } from '@mondaydotcomorg/atp-protocol';
2
+ /**
3
+ * OpenTelemetry-based audit sink
4
+ * Provides industry-standard observability with distributed tracing and metrics
5
+ */
6
+ export declare class OpenTelemetryAuditSink implements AuditSink {
7
+ name: string;
8
+ private tracer;
9
+ private meter;
10
+ private executionCounter;
11
+ private toolCallCounter;
12
+ private llmCallCounter;
13
+ private approvalCounter;
14
+ private executionDuration;
15
+ private toolDuration;
16
+ write(event: AuditEvent): Promise<void>;
17
+ writeBatch(events: AuditEvent[]): Promise<void>;
18
+ private buildAttributes;
19
+ private handleEvent;
20
+ private recordMetrics;
21
+ private flattenObject;
22
+ }
23
+ //# sourceMappingURL=opentelemetry.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"opentelemetry.d.ts","sourceRoot":"","sources":["../../src/audit/opentelemetry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAY3E;;;GAGG;AACH,qBAAa,sBAAuB,YAAW,SAAS;IACvD,IAAI,SAAmB;IACvB,OAAO,CAAC,MAAM,CAAqC;IACnD,OAAO,CAAC,KAAK,CAAqC;IAElD,OAAO,CAAC,gBAAgB,CAGtB;IAEF,OAAO,CAAC,eAAe,CAGrB;IAEF,OAAO,CAAC,cAAc,CAGpB;IAEF,OAAO,CAAC,eAAe,CAGrB;IAEF,OAAO,CAAC,iBAAiB,CAGvB;IAEF,OAAO,CAAC,YAAY,CAGlB;IAEI,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBvC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,OAAO,CAAC,eAAe;IAiDvB,OAAO,CAAC,WAAW;IA8EnB,OAAO,CAAC,aAAa;IA6DrB,OAAO,CAAC,aAAa;CAmBrB"}
@@ -0,0 +1,240 @@
1
+ import { trace, context, SpanStatusCode, metrics } from '@opentelemetry/api';
2
+ import { OTelCounter, OTelHistogram, OTelAttribute, METRIC_CONFIGS, OTEL_TRACER_NAME, OTEL_METER_NAME, ATTRIBUTE_PREFIX_TOOL, ATTRIBUTE_PREFIX_METADATA, } from './otel-metrics.js';
3
+ /**
4
+ * OpenTelemetry-based audit sink
5
+ * Provides industry-standard observability with distributed tracing and metrics
6
+ */
7
+ export class OpenTelemetryAuditSink {
8
+ name = 'opentelemetry';
9
+ tracer = trace.getTracer(OTEL_TRACER_NAME);
10
+ meter = metrics.getMeter(OTEL_METER_NAME);
11
+ executionCounter = this.meter.createCounter(OTelCounter.EXECUTIONS_TOTAL, METRIC_CONFIGS[OTelCounter.EXECUTIONS_TOTAL]);
12
+ toolCallCounter = this.meter.createCounter(OTelCounter.TOOLS_CALLS, METRIC_CONFIGS[OTelCounter.TOOLS_CALLS]);
13
+ llmCallCounter = this.meter.createCounter(OTelCounter.LLM_CALLS, METRIC_CONFIGS[OTelCounter.LLM_CALLS]);
14
+ approvalCounter = this.meter.createCounter(OTelCounter.APPROVALS_TOTAL, METRIC_CONFIGS[OTelCounter.APPROVALS_TOTAL]);
15
+ executionDuration = this.meter.createHistogram(OTelHistogram.EXECUTION_DURATION, METRIC_CONFIGS[OTelHistogram.EXECUTION_DURATION]);
16
+ toolDuration = this.meter.createHistogram(OTelHistogram.TOOL_DURATION, METRIC_CONFIGS[OTelHistogram.TOOL_DURATION]);
17
+ async write(event) {
18
+ const span = this.tracer.startSpan(`atp.${event.eventType}.${event.action}`, {
19
+ attributes: this.buildAttributes(event),
20
+ });
21
+ await context.with(trace.setSpan(context.active(), span), async () => {
22
+ try {
23
+ this.handleEvent(span, event);
24
+ this.recordMetrics(event);
25
+ span.setStatus({ code: SpanStatusCode.OK });
26
+ }
27
+ catch (error) {
28
+ span.setStatus({
29
+ code: SpanStatusCode.ERROR,
30
+ message: error.message,
31
+ });
32
+ span.recordException(error);
33
+ }
34
+ finally {
35
+ span.end();
36
+ }
37
+ });
38
+ }
39
+ async writeBatch(events) {
40
+ await Promise.all(events.map((event) => this.write(event)));
41
+ }
42
+ buildAttributes(event) {
43
+ const attrs = {
44
+ [OTelAttribute.EVENT_ID]: event.eventId,
45
+ [OTelAttribute.EVENT_TYPE]: event.eventType,
46
+ [OTelAttribute.EVENT_ACTION]: event.action,
47
+ [OTelAttribute.TIMESTAMP]: event.timestamp,
48
+ [OTelAttribute.CLIENT_ID]: event.clientId,
49
+ [OTelAttribute.STATUS]: event.status,
50
+ };
51
+ if (event.userId)
52
+ attrs[OTelAttribute.USER_ID] = event.userId;
53
+ if (event.ipAddress)
54
+ attrs[OTelAttribute.IP_ADDRESS] = event.ipAddress;
55
+ if (event.userAgent)
56
+ attrs[OTelAttribute.USER_AGENT] = event.userAgent;
57
+ if (event.resource)
58
+ attrs[OTelAttribute.RESOURCE] = event.resource;
59
+ if (event.resourceId)
60
+ attrs[OTelAttribute.RESOURCE_ID] = event.resourceId;
61
+ if (event.toolName)
62
+ attrs[OTelAttribute.TOOL_NAME] = event.toolName;
63
+ if (event.apiGroup)
64
+ attrs[OTelAttribute.API_GROUP] = event.apiGroup;
65
+ if (event.duration !== undefined)
66
+ attrs[OTelAttribute.DURATION_MS] = event.duration;
67
+ if (event.memoryUsed !== undefined)
68
+ attrs[OTelAttribute.MEMORY_BYTES] = event.memoryUsed;
69
+ if (event.llmCallsCount !== undefined)
70
+ attrs[OTelAttribute.LLM_CALLS] = event.llmCallsCount;
71
+ if (event.httpCallsCount !== undefined)
72
+ attrs[OTelAttribute.HTTP_CALLS] = event.httpCallsCount;
73
+ if (event.riskScore !== undefined)
74
+ attrs[OTelAttribute.RISK_SCORE] = event.riskScore;
75
+ if (event.securityEvents && event.securityEvents.length > 0) {
76
+ attrs[OTelAttribute.SECURITY_EVENTS] = JSON.stringify(event.securityEvents);
77
+ attrs[OTelAttribute.SECURITY_EVENTS_COUNT] = event.securityEvents.length;
78
+ }
79
+ if (event.error) {
80
+ attrs[OTelAttribute.ERROR_MESSAGE] = event.error.message;
81
+ if (event.error.code)
82
+ attrs[OTelAttribute.ERROR_CODE] = event.error.code;
83
+ if (event.error.stack)
84
+ attrs[OTelAttribute.ERROR_STACK] = event.error.stack;
85
+ }
86
+ if (event.annotations) {
87
+ Object.assign(attrs, this.flattenObject(event.annotations, ATTRIBUTE_PREFIX_TOOL));
88
+ }
89
+ if (event.metadata) {
90
+ Object.assign(attrs, this.flattenObject(event.metadata, ATTRIBUTE_PREFIX_METADATA));
91
+ }
92
+ return attrs;
93
+ }
94
+ handleEvent(span, event) {
95
+ switch (event.eventType) {
96
+ case 'execution':
97
+ if (event.action === 'start') {
98
+ span.addEvent('Execution started', {
99
+ 'client.id': event.clientId,
100
+ 'resource.id': event.resourceId,
101
+ });
102
+ }
103
+ else if (event.action === 'complete') {
104
+ span.addEvent('Execution completed', {
105
+ duration_ms: event.duration,
106
+ status: event.status,
107
+ llm_calls: event.llmCallsCount,
108
+ });
109
+ }
110
+ else if (event.action === 'pause') {
111
+ span.addEvent('Execution paused', {
112
+ status: event.status,
113
+ });
114
+ }
115
+ else if (event.action === 'resume') {
116
+ span.addEvent('Execution resumed', {
117
+ 'resource.id': event.resourceId,
118
+ });
119
+ }
120
+ break;
121
+ case 'tool_call':
122
+ span.addEvent(`Tool ${event.action}`, {
123
+ 'tool.name': event.toolName,
124
+ 'api.group': event.apiGroup,
125
+ duration_ms: event.duration,
126
+ });
127
+ if (event.input) {
128
+ span.setAttribute(OTelAttribute.TOOL_INPUT_SIZE, JSON.stringify(event.input).length);
129
+ }
130
+ if (event.output) {
131
+ span.setAttribute(OTelAttribute.TOOL_OUTPUT_SIZE, JSON.stringify(event.output).length);
132
+ }
133
+ break;
134
+ case 'llm_call':
135
+ span.addEvent('LLM call', {
136
+ duration_ms: event.duration,
137
+ });
138
+ break;
139
+ case 'approval':
140
+ span.addEvent(`Approval ${event.action}`, {
141
+ 'tool.name': event.toolName,
142
+ });
143
+ break;
144
+ case 'error':
145
+ if (event.error) {
146
+ span.addEvent('Error occurred', {
147
+ 'error.message': event.error.message,
148
+ 'error.code': event.error.code,
149
+ });
150
+ span.recordException(new Error(event.error.message));
151
+ }
152
+ break;
153
+ case 'client_init':
154
+ span.addEvent('Client initialized', {
155
+ 'client.id': event.clientId,
156
+ });
157
+ break;
158
+ }
159
+ if (event.securityEvents && event.securityEvents.length > 0) {
160
+ for (const secEvent of event.securityEvents) {
161
+ span.addEvent('Security event', {
162
+ 'security.event': secEvent,
163
+ 'security.risk_score': event.riskScore,
164
+ });
165
+ }
166
+ }
167
+ }
168
+ recordMetrics(event) {
169
+ const commonAttrs = {
170
+ client_id: event.clientId,
171
+ event_type: event.eventType,
172
+ status: event.status,
173
+ };
174
+ switch (event.eventType) {
175
+ case 'execution':
176
+ this.executionCounter.add(1, {
177
+ ...commonAttrs,
178
+ action: event.action,
179
+ });
180
+ if (event.duration !== undefined) {
181
+ this.executionDuration.record(event.duration, {
182
+ ...commonAttrs,
183
+ action: event.action,
184
+ });
185
+ }
186
+ break;
187
+ case 'tool_call':
188
+ this.toolCallCounter.add(1, {
189
+ ...commonAttrs,
190
+ tool_name: event.toolName,
191
+ api_group: event.apiGroup,
192
+ });
193
+ if (event.duration !== undefined) {
194
+ this.toolDuration.record(event.duration, {
195
+ ...commonAttrs,
196
+ tool_name: event.toolName,
197
+ });
198
+ }
199
+ break;
200
+ case 'llm_call':
201
+ this.llmCallCounter.add(1, commonAttrs);
202
+ break;
203
+ case 'approval':
204
+ this.approvalCounter.add(1, {
205
+ ...commonAttrs,
206
+ action: event.action,
207
+ });
208
+ break;
209
+ }
210
+ if (event.securityEvents && event.securityEvents.length > 0) {
211
+ const securityEventCounter = this.meter.createCounter(OTelCounter.SECURITY_EVENTS, METRIC_CONFIGS[OTelCounter.SECURITY_EVENTS]);
212
+ securityEventCounter.add(event.securityEvents.length, {
213
+ ...commonAttrs,
214
+ risk_score: event.riskScore,
215
+ });
216
+ }
217
+ }
218
+ flattenObject(obj, prefix) {
219
+ const result = {};
220
+ if (!obj || typeof obj !== 'object')
221
+ return result;
222
+ for (const [key, value] of Object.entries(obj)) {
223
+ const fullKey = `${prefix}.${key}`;
224
+ if (value === null || value === undefined) {
225
+ continue;
226
+ }
227
+ if (typeof value === 'object' && !Array.isArray(value)) {
228
+ Object.assign(result, this.flattenObject(value, fullKey));
229
+ }
230
+ else if (Array.isArray(value)) {
231
+ result[fullKey] = JSON.stringify(value);
232
+ }
233
+ else {
234
+ result[fullKey] = value;
235
+ }
236
+ }
237
+ return result;
238
+ }
239
+ }
240
+ //# sourceMappingURL=opentelemetry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"opentelemetry.js","sourceRoot":"","sources":["../../src/audit/opentelemetry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAQ,MAAM,oBAAoB,CAAC;AAEnF,OAAO,EACN,WAAW,EACX,aAAa,EACb,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,yBAAyB,GACzB,MAAM,mBAAmB,CAAC;AAE3B;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAClC,IAAI,GAAG,eAAe,CAAC;IACf,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC3C,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAE1C,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAClD,WAAW,CAAC,gBAAgB,EAC5B,cAAc,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAC5C,CAAC;IAEM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CACjD,WAAW,CAAC,WAAW,EACvB,cAAc,CAAC,WAAW,CAAC,WAAW,CAAC,CACvC,CAAC;IAEM,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAChD,WAAW,CAAC,SAAS,EACrB,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,CACrC,CAAC;IAEM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CACjD,WAAW,CAAC,eAAe,EAC3B,cAAc,CAAC,WAAW,CAAC,eAAe,CAAC,CAC3C,CAAC;IAEM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CACrD,aAAa,CAAC,kBAAkB,EAChC,cAAc,CAAC,aAAa,CAAC,kBAAkB,CAAC,CAChD,CAAC;IAEM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAChD,aAAa,CAAC,aAAa,EAC3B,cAAc,CAAC,aAAa,CAAC,aAAa,CAAC,CAC3C,CAAC;IAEF,KAAK,CAAC,KAAK,CAAC,KAAiB;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE;YAC5E,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,KAAK,IAAI,EAAE;YACpE,IAAI,CAAC;gBACJ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBAC9B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAU,EAAE,CAAC;gBACrB,IAAI,CAAC,SAAS,CAAC;oBACd,IAAI,EAAE,cAAc,CAAC,KAAK;oBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;iBACtB,CAAC,CAAC;gBACH,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;oBAAS,CAAC;gBACV,IAAI,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAoB;QACpC,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;IAEO,eAAe,CAAC,KAAiB;QACxC,MAAM,KAAK,GAAwB;YAClC,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,OAAO;YACvC,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,SAAS;YAC3C,CAAC,aAAa,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,MAAM;YAC1C,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,SAAS;YAE1C,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,QAAQ;YACzC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM;SACpC,CAAC;QAEF,IAAI,KAAK,CAAC,MAAM;YAAE,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;QAC9D,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACvE,IAAI,KAAK,CAAC,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QAEvE,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACnE,IAAI,KAAK,CAAC,UAAU;YAAE,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAE1E,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpE,IAAI,KAAK,CAAC,QAAQ;YAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QAEpE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC;QACpF,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QACzF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;QAC5F,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;QAE/F,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;QACrF,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,aAAa,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC5E,KAAK,CAAC,aAAa,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;QAC1E,CAAC;QAED,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,aAAa,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;YACzD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI;gBAAE,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;YACzE,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAC7E,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,qBAAqB,CAAC,CAAC,CAAC;QACpF,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,WAAW,CAAC,IAAU,EAAE,KAAiB;QAChD,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;YACzB,KAAK,WAAW;gBACf,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBAC9B,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE;wBAClC,WAAW,EAAE,KAAK,CAAC,QAAQ;wBAC3B,aAAa,EAAE,KAAK,CAAC,UAAU;qBAC/B,CAAC,CAAC;gBACJ,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;oBACxC,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE;wBACpC,WAAW,EAAE,KAAK,CAAC,QAAQ;wBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;wBACpB,SAAS,EAAE,KAAK,CAAC,aAAa;qBAC9B,CAAC,CAAC;gBACJ,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;oBACrC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE;wBACjC,MAAM,EAAE,KAAK,CAAC,MAAM;qBACpB,CAAC,CAAC;gBACJ,CAAC;qBAAM,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACtC,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE;wBAClC,aAAa,EAAE,KAAK,CAAC,UAAU;qBAC/B,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM;YAEP,KAAK,WAAW;gBACf,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,CAAC,MAAM,EAAE,EAAE;oBACrC,WAAW,EAAE,KAAK,CAAC,QAAQ;oBAC3B,WAAW,EAAE,KAAK,CAAC,QAAQ;oBAC3B,WAAW,EAAE,KAAK,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;gBACtF,CAAC;gBACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClB,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC;gBACxF,CAAC;gBACD,MAAM;YAEP,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE;oBACzB,WAAW,EAAE,KAAK,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,MAAM;YAEP,KAAK,UAAU;gBACd,IAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,CAAC,MAAM,EAAE,EAAE;oBACzC,WAAW,EAAE,KAAK,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,MAAM;YAEP,KAAK,OAAO;gBACX,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;oBACjB,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;wBAC/B,eAAe,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO;wBACpC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;qBAC9B,CAAC,CAAC;oBACH,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtD,CAAC;gBACD,MAAM;YAEP,KAAK,aAAa;gBACjB,IAAI,CAAC,QAAQ,CAAC,oBAAoB,EAAE;oBACnC,WAAW,EAAE,KAAK,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,MAAM;QACR,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC7C,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE;oBAC/B,gBAAgB,EAAE,QAAQ;oBAC1B,qBAAqB,EAAE,KAAK,CAAC,SAAS;iBACtC,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,KAAiB;QACtC,MAAM,WAAW,GAAwB;YACxC,SAAS,EAAE,KAAK,CAAC,QAAQ;YACzB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CAAC;QAEF,QAAQ,KAAK,CAAC,SAAS,EAAE,CAAC;YACzB,KAAK,WAAW;gBACf,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE;oBAC5B,GAAG,WAAW;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBAEH,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;wBAC7C,GAAG,WAAW;wBACd,MAAM,EAAE,KAAK,CAAC,MAAM;qBACpB,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM;YAEP,KAAK,WAAW;gBACf,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE;oBAC3B,GAAG,WAAW;oBACd,SAAS,EAAE,KAAK,CAAC,QAAQ;oBACzB,SAAS,EAAE,KAAK,CAAC,QAAQ;iBACzB,CAAC,CAAC;gBAEH,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;wBACxC,GAAG,WAAW;wBACd,SAAS,EAAE,KAAK,CAAC,QAAQ;qBACzB,CAAC,CAAC;gBACJ,CAAC;gBACD,MAAM;YAEP,KAAK,UAAU;gBACd,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;gBACxC,MAAM;YAEP,KAAK,UAAU;gBACd,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE;oBAC3B,GAAG,WAAW;oBACd,MAAM,EAAE,KAAK,CAAC,MAAM;iBACpB,CAAC,CAAC;gBACH,MAAM;QACR,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,MAAM,oBAAoB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CACpD,WAAW,CAAC,eAAe,EAC3B,cAAc,CAAC,WAAW,CAAC,eAAe,CAAC,CAC3C,CAAC;YACF,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE;gBACrD,GAAG,WAAW;gBACd,UAAU,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAEO,aAAa,CAAC,GAAQ,EAAE,MAAc;QAC7C,MAAM,MAAM,GAAwB,EAAE,CAAC;QACvC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAEnD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC;YACnC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC3C,SAAS;YACV,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3D,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACzC,CAAC;iBAAM,CAAC;gBACP,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACF,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;CACD"}
@@ -0,0 +1,111 @@
1
+ /**
2
+ * OpenTelemetry Metrics Definitions
3
+
4
+ /**
5
+ * Counter metric names
6
+ */
7
+ export declare enum OTelCounter {
8
+ EXECUTIONS_TOTAL = "atp.executions.total",
9
+ TOOLS_CALLS = "atp.tools.calls",
10
+ LLM_CALLS = "atp.llm.calls",
11
+ APPROVALS_TOTAL = "atp.approvals.total",
12
+ SECURITY_EVENTS = "atp.security.events"
13
+ }
14
+ /**
15
+ * Histogram metric names
16
+ */
17
+ export declare enum OTelHistogram {
18
+ EXECUTION_DURATION = "atp.execution.duration",
19
+ TOOL_DURATION = "atp.tool.duration"
20
+ }
21
+ /**
22
+ * Span/trace names
23
+ */
24
+ export declare enum OTelSpan {
25
+ EXECUTION_START = "atp.execution.start",
26
+ EXECUTION_COMPLETE = "atp.execution.complete",
27
+ EXECUTION_PAUSE = "atp.execution.pause",
28
+ EXECUTION_RESUME = "atp.execution.resume",
29
+ EXECUTION_ERROR = "atp.execution.error",
30
+ TOOL_CALL = "atp.tool_call",
31
+ LLM_CALL = "atp.llm_call",
32
+ APPROVAL_REQUEST = "atp.approval.request",
33
+ APPROVAL_RESPONSE = "atp.approval.response",
34
+ CLIENT_INIT = "atp.client_init",
35
+ ERROR = "atp.error"
36
+ }
37
+ /**
38
+ * Attribute names (for consistent span/metric attributes)
39
+ */
40
+ export declare enum OTelAttribute {
41
+ EVENT_ID = "atp.event.id",
42
+ EVENT_TYPE = "atp.event.type",
43
+ EVENT_ACTION = "atp.event.action",
44
+ TIMESTAMP = "atp.timestamp",
45
+ CLIENT_ID = "atp.client.id",
46
+ USER_ID = "atp.user.id",
47
+ IP_ADDRESS = "atp.ip_address",
48
+ USER_AGENT = "atp.user_agent",
49
+ STATUS = "atp.status",
50
+ RESOURCE = "atp.resource",
51
+ RESOURCE_ID = "atp.resource.id",
52
+ TOOL_NAME = "atp.tool.name",
53
+ TOOL_INPUT_SIZE = "tool.input_size",
54
+ TOOL_OUTPUT_SIZE = "tool.output_size",
55
+ API_GROUP = "atp.api.group",
56
+ DURATION_MS = "atp.duration_ms",
57
+ MEMORY_BYTES = "atp.memory_bytes",
58
+ LLM_CALLS = "atp.llm_calls",
59
+ HTTP_CALLS = "atp.http_calls",
60
+ RISK_SCORE = "atp.security.risk_score",
61
+ SECURITY_EVENTS = "atp.security.events",
62
+ SECURITY_EVENTS_COUNT = "atp.security.events_count",
63
+ ERROR_MESSAGE = "atp.error.message",
64
+ ERROR_CODE = "atp.error.code",
65
+ ERROR_STACK = "atp.error.stack"
66
+ }
67
+ /**
68
+ * Metric configurations
69
+ */
70
+ export declare const METRIC_CONFIGS: {
71
+ readonly "atp.executions.total": {
72
+ readonly description: "Total number of executions";
73
+ readonly unit: "1";
74
+ };
75
+ readonly "atp.tools.calls": {
76
+ readonly description: "Tool call count";
77
+ readonly unit: "1";
78
+ };
79
+ readonly "atp.llm.calls": {
80
+ readonly description: "LLM call count";
81
+ readonly unit: "1";
82
+ };
83
+ readonly "atp.approvals.total": {
84
+ readonly description: "Approval request count";
85
+ readonly unit: "1";
86
+ };
87
+ readonly "atp.security.events": {
88
+ readonly description: "Security events count";
89
+ readonly unit: "1";
90
+ };
91
+ readonly "atp.execution.duration": {
92
+ readonly description: "Execution duration in milliseconds";
93
+ readonly unit: "ms";
94
+ };
95
+ readonly "atp.tool.duration": {
96
+ readonly description: "Tool execution duration";
97
+ readonly unit: "ms";
98
+ };
99
+ };
100
+ /**
101
+ * OpenTelemetry tracer and meter names
102
+ */
103
+ export declare const OTEL_SERVICE_NAME = "agent-tool-protocol";
104
+ export declare const OTEL_TRACER_NAME = "agent-tool-protocol";
105
+ export declare const OTEL_METER_NAME = "agent-tool-protocol";
106
+ /**
107
+ * Attribute prefixes for custom metadata
108
+ */
109
+ export declare const ATTRIBUTE_PREFIX_TOOL = "atp.tool";
110
+ export declare const ATTRIBUTE_PREFIX_METADATA = "atp.metadata";
111
+ //# sourceMappingURL=otel-metrics.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"otel-metrics.d.ts","sourceRoot":"","sources":["../../src/audit/otel-metrics.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,oBAAY,WAAW;IACtB,gBAAgB,yBAAyB;IACzC,WAAW,oBAAoB;IAC/B,SAAS,kBAAkB;IAC3B,eAAe,wBAAwB;IACvC,eAAe,wBAAwB;CACvC;AAED;;GAEG;AACH,oBAAY,aAAa;IACxB,kBAAkB,2BAA2B;IAC7C,aAAa,sBAAsB;CACnC;AAED;;GAEG;AACH,oBAAY,QAAQ;IACnB,eAAe,wBAAwB;IACvC,kBAAkB,2BAA2B;IAC7C,eAAe,wBAAwB;IACvC,gBAAgB,yBAAyB;IACzC,eAAe,wBAAwB;IACvC,SAAS,kBAAkB;IAC3B,QAAQ,iBAAiB;IACzB,gBAAgB,yBAAyB;IACzC,iBAAiB,0BAA0B;IAC3C,WAAW,oBAAoB;IAC/B,KAAK,cAAc;CACnB;AAED;;GAEG;AACH,oBAAY,aAAa;IACxB,QAAQ,iBAAiB;IACzB,UAAU,mBAAmB;IAC7B,YAAY,qBAAqB;IACjC,SAAS,kBAAkB;IAE3B,SAAS,kBAAkB;IAC3B,OAAO,gBAAgB;IACvB,UAAU,mBAAmB;IAC7B,UAAU,mBAAmB;IAC7B,MAAM,eAAe;IAErB,QAAQ,iBAAiB;IACzB,WAAW,oBAAoB;IAE/B,SAAS,kBAAkB;IAC3B,eAAe,oBAAoB;IACnC,gBAAgB,qBAAqB;IACrC,SAAS,kBAAkB;IAE3B,WAAW,oBAAoB;IAC/B,YAAY,qBAAqB;IACjC,SAAS,kBAAkB;IAC3B,UAAU,mBAAmB;IAE7B,UAAU,4BAA4B;IACtC,eAAe,wBAAwB;IACvC,qBAAqB,8BAA8B;IAEnD,aAAa,sBAAsB;IACnC,UAAU,mBAAmB;IAC7B,WAAW,oBAAoB;CAC/B;AAED;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6BjB,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,iBAAiB,wBAAwB,CAAC;AACvD,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AACtD,eAAO,MAAM,eAAe,wBAAwB,CAAC;AAErD;;GAEG;AACH,eAAO,MAAM,qBAAqB,aAAa,CAAC;AAChD,eAAO,MAAM,yBAAyB,iBAAiB,CAAC"}