@nodii/telemetry 0.15.0 → 0.17.0

package/dist/audit-buffer.d.ts

@@ -0,0 +1,58 @@
+import type { AuditArgs } from "./audit.js";
+/** Options for {@link AuditBuffer}. */
+export interface AuditBufferOptions {
+    /**
+     * Sink for flushed coalesced rows — typically `(args) => audit.emit(args)`
+     * (Pattern C, out-of-band: the writer owns its own tx). Errors are routed to
+     * {@link AuditBufferOptions.onFlushError}; a rejecting sink never throws out
+     * of `record()`.
+     */
+    flush: (args: AuditArgs) => void | Promise<void>;
+    /** Coalesce window in ms. Default 60_000 (§ 9 default 60s). */
+    windowMs?: number;
+    /**
+     * Upper bound on the per-row `metadata.queries` array, to cap memory under a
+     * read flood. `read_count` stays accurate; queries beyond the cap are dropped
+     * (the count records that they happened). Default 200.
+     */
+    maxQueries?: number;
+    /**
+     * Called when the `flush` sink throws/rejects, instead of the rejection being
+     * swallowed silently. The buffer entry is already removed when this fires, so
+     * a coalesced row CAN be lost on a sink failure — wire this to your logger.
+     */
+    onFlushError?: (err: unknown, key: string) => void;
+}
+/** Per-read input to {@link AuditBuffer.record}. */
+export interface AuditReadRecord {
+    /**
+     * The request path PATTERN (templated, not the concrete path) — e.g.
+     * `/invoices/:id`, NOT `/invoices/inv_123`. Part of the coalesce key so the
+     * same logical endpoint collapses regardless of path params.
+     */
+    requestPathPattern: string;
+    /** Optional per-read query detail appended to `metadata.queries`. */
+    query?: Record<string, unknown>;
+}
+export declare class AuditBuffer {
+    #private;
+    constructor(opts: AuditBufferOptions);
+    /** Number of distinct coalesce keys currently buffered (in-window). */
+    get size(): number;
+    /**
+     * Record one READ. The first read for a key opens the window + schedules its
+     * flush; later reads in the same window bump `read_count` + `last_read_at` and
+     * append `query` (up to `maxQueries`). Do NOT feed mutations here.
+     */
+    record(args: AuditArgs, rec: AuditReadRecord): void;
+    /** Flush + clear the timer for one key (no-op if absent). */
+    flush(key: string): Promise<void>;
+    /** Flush every buffered key (e.g. a periodic safety sweep). */
+    flushAll(): Promise<void>;
+    /**
+     * Graceful shutdown: flush all pending coalesced rows + clear timers. After
+     * `close()`, `record()` throws. Idempotent.
+     */
+    close(): Promise<void>;
+}
+//# sourceMappingURL=audit-buffer.d.ts.map

package/dist/audit-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-buffer.d.ts","sourceRoot":"","sources":["../src/audit-buffer.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,uCAAuC;AACvC,MAAM,WAAW,kBAAkB;IACjC;;;;;OAKG;IACH,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACpD;AAYD,oDAAoD;AACpD,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAoBD,qBAAa,WAAW;;gBAYV,IAAI,EAAE,kBAAkB;IAOpC,uEAAuE;IACvE,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,GAAG,IAAI;IAuCnD,6DAA6D;IACvD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,+DAA+D;IACzD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAO/B;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CA2B7B"}

package/dist/audit-buffer.js

@@ -0,0 +1,126 @@
+const DEFAULT_WINDOW_MS = 60_000;
+const DEFAULT_MAX_QUERIES = 200;
+/**
+ * Builds the coalesce key `(actor, resource_type, request_path_pattern)` (§ 9).
+ * Actor is the internal `actorId` when present, else the `actorExternalId`, else
+ * the literal `"anon"` so anonymous reads still coalesce together (they don't
+ * cross-contaminate identified actors — different actor segment).
+ */
+function coalesceKey(args, requestPathPattern) {
+    const actor = args.actorId ?? args.actorExternalId ?? "anon";
+    // tenant_id is part of the key (beyond doctrine §9's literal tuple) so anon /
+    // multi-tenant-actor reads of the same resource never coalesce ACROSS tenants
+    // into one mis-attributed row. Strictly finer — never merges buckets.
+    const tenant = args.tenantId ?? "no-tenant";
+    return `${tenant} ${actor} ${args.resourceType} ${requestPathPattern}`;
+}
+export class AuditBuffer {
+    #flush;
+    #windowMs;
+    #maxQueries;
+    #onFlushError;
+    #entries = new Map();
+    // In-flight TIMER-triggered flushes (fire-and-forget Promises). `close()`
+    // awaits these so a flush that the window timer kicked off just before
+    // shutdown finishes before close() resolves — no lost / mid-flight rows.
+    #inflight = new Set();
+    #closed = false;
+    constructor(opts) {
+        this.#flush = opts.flush;
+        this.#windowMs = opts.windowMs ?? DEFAULT_WINDOW_MS;
+        this.#maxQueries = opts.maxQueries ?? DEFAULT_MAX_QUERIES;
+        this.#onFlushError = opts.onFlushError;
+    }
+    /** Number of distinct coalesce keys currently buffered (in-window). */
+    get size() {
+        return this.#entries.size;
+    }
+    /**
+     * Record one READ. The first read for a key opens the window + schedules its
+     * flush; later reads in the same window bump `read_count` + `last_read_at` and
+     * append `query` (up to `maxQueries`). Do NOT feed mutations here.
+     */
+    record(args, rec) {
+        if (this.#closed) {
+            throw new Error("AuditBuffer.record called after close()");
+        }
+        const key = coalesceKey(args, rec.requestPathPattern);
+        const now = new Date();
+        const existing = this.#entries.get(key);
+        if (existing) {
+            existing.readCount += 1;
+            existing.lastReadAt = now;
+            if (rec.query && existing.queries.length < this.#maxQueries) {
+                existing.queries.push({ ...rec.query }); // snapshot — no caller aliasing
+            }
+            return;
+        }
+        // Snapshot args (incl. its metadata) + the seed query so a caller
+        // reusing/mutating them after record() can't alter the buffered (and later
+        // coalesced) row. The seed respects maxQueries (maxQueries=0 keeps none).
+        const entry = {
+            base: args.metadata
+                ? { ...args, metadata: { ...args.metadata } }
+                : { ...args },
+            readCount: 1,
+            firstReadAt: now,
+            lastReadAt: now,
+            queries: rec.query && this.#maxQueries > 0 ? [{ ...rec.query }] : [],
+            // The window runs from the FIRST read; later reads do not extend it.
+            // Track the timer's flush Promise so close() can await it.
+            timer: setTimeout(() => {
+                const p = this.#flushKey(key);
+                this.#inflight.add(p);
+                void p.finally(() => this.#inflight.delete(p));
+            }, this.#windowMs),
+        };
+        // Don't keep the process alive solely for a pending flush (Node/Bun).
+        entry.timer.unref?.();
+        this.#entries.set(key, entry);
+    }
+    /** Flush + clear the timer for one key (no-op if absent). */
+    async flush(key) {
+        await this.#flushKey(key);
+    }
+    /** Flush every buffered key (e.g. a periodic safety sweep). */
+    async flushAll() {
+        const keys = [...this.#entries.keys()];
+        for (const key of keys) {
+            await this.#flushKey(key);
+        }
+    }
+    /**
+     * Graceful shutdown: flush all pending coalesced rows + clear timers. After
+     * `close()`, `record()` throws. Idempotent.
+     */
+    async close() {
+        this.#closed = true;
+        await this.flushAll();
+        // Drain any TIMER-triggered flush that fired before/during close().
+        if (this.#inflight.size > 0) {
+            await Promise.allSettled([...this.#inflight]);
+        }
+    }
+    async #flushKey(key) {
+        const entry = this.#entries.get(key);
+        if (!entry)
+            return;
+        clearTimeout(entry.timer);
+        this.#entries.delete(key);
+        const coalesced = {
+            ...entry.base,
+            readCount: entry.readCount,
+            firstReadAt: entry.firstReadAt,
+            lastReadAt: entry.lastReadAt,
+            metadata: { ...entry.base.metadata, queries: entry.queries },
+        };
+        try {
+            await this.#flush(coalesced);
+        }
+        catch (err) {
+            if (this.#onFlushError)
+                this.#onFlushError(err, key);
+        }
+    }
+}
+//# sourceMappingURL=audit-buffer.js.map

package/dist/audit-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-buffer.js","sourceRoot":"","sources":["../src/audit-buffer.ts"],"names":[],"mappings":"AAiEA,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAe,EAAE,kBAA0B;IAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,eAAe,IAAI,MAAM,CAAC;IAC7D,8EAA8E;IAC9E,8EAA8E;IAC9E,sEAAsE;IACtE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,IAAI,WAAW,CAAC;IAC5C,OAAO,GAAG,MAAM,IAAI,KAAK,IAAI,IAAI,CAAC,YAAY,IAAI,kBAAkB,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,WAAW;IACb,MAAM,CAA8B;IACpC,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,aAAa,CAAqC;IAClD,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IACnD,0EAA0E;IAC1E,uEAAuE;IACvE,yEAAyE;IAChE,SAAS,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC;IAEhB,YAAY,IAAwB;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,IAAI,iBAAiB,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC1D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,YAAY,CAAC;IACzC,CAAC;IAED,uEAAuE;IACvE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC5B,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,IAAe,EAAE,GAAoB;QAC1C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,SAAS,IAAI,CAAC,CAAC;YACxB,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;YAC1B,IAAI,GAAG,CAAC,KAAK,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC5D,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,gCAAgC;YAC3E,CAAC;YACD,OAAO;QACT,CAAC;QACD,kEAAkE;QAClE,2EAA2E;QAC3E,0EAA0E;QAC1E,MAAM,KAAK,GAAgB;YACzB,IAAI,EAAE,IAAI,CAAC,QAAQ;gBACjB,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,EAAE;gBAC7C,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE;YACf,SAAS,EAAE,CAAC;YACZ,WAAW,EAAE,GAAG;YAChB,UAAU,EAAE,GAAG;YACf,OAAO,EAAE,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;YACpE,qEAAqE;YACrE,2DAA2D;YAC3D,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE;gBACrB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;gBACtB,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;SACnB,CAAC;QACF,sEAAsE;QACtE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,KAAK,CAAC,GAAW;QACrB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtB,oEAAoE;QACpE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,SAAS,GAAc;YAC3B,GAAG,KAAK,CAAC,IAAI;YACb,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,QAAQ,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;SAC7D,CAAC;QACF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,aAAa;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;CACF"}

package/dist/hono/audit-well-known.d.ts

@@ -0,0 +1,47 @@
+import type { MiddlewareHandler } from "hono";
+/**
+ * The audit registry served at `/.well-known/audit-registry.json`, produced by
+ * a service's `audit:codegen` (doctrine § 5.3). Served verbatim — the service's
+ * codegen owns the exact shape; the index signature keeps the plugin
+ * forward-compatible with registry-schema additions.
+ */
+export interface AuditRegistry {
+    service: string;
+    actions?: string[];
+    sensitive_read_methods?: string[];
+    generated_at?: string;
+    [key: string]: unknown;
+}
+/** Canonical well-known path (§ 15.1). */
+export declare const AUDIT_REGISTRY_WELL_KNOWN_PATH = "/.well-known/audit-registry.json";
+/** Options for {@link auditWellKnownPlugin}. */
+export interface AuditWellKnownOptions {
+    /**
+     * The bundled registry object (e.g. `import registry from "./build/audit-registry.json"`),
+     * or a loader returning it (sync or async — e.g. read-from-disk at first
+     * request). Served verbatim as JSON.
+     */
+    registry: AuditRegistry | (() => AuditRegistry | Promise<AuditRegistry>);
+    /** Route path. Default {@link AUDIT_REGISTRY_WELL_KNOWN_PATH}. */
+    path?: string;
+    /**
+     * `Cache-Control` for the response. The registry only changes on deploy, so a
+     * short cache is safe. Default `public, max-age=300`. Pass `""` to omit.
+     */
+    cacheControl?: string;
+}
+/**
+ * Hono middleware that serves the audit registry at the well-known path and
+ * passes every other request through untouched.
+ *
+ * @example
+ *   import { Hono } from "hono";
+ *   import registry from "./build/audit-registry.json";
+ *   import { auditWellKnownPlugin } from "@nodii/telemetry/hono";
+ *
+ *   const app = new Hono();
+ *   app.use(auditWellKnownPlugin({ registry }));
+ *   // GET /.well-known/audit-registry.json -> the bundled registry JSON
+ */
+export declare function auditWellKnownPlugin(opts: AuditWellKnownOptions): MiddlewareHandler;
+//# sourceMappingURL=audit-well-known.d.ts.map

package/dist/hono/audit-well-known.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-well-known.d.ts","sourceRoot":"","sources":["../../src/hono/audit-well-known.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAW,iBAAiB,EAAQ,MAAM,MAAM,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,0CAA0C;AAC1C,eAAO,MAAM,8BAA8B,qCACP,CAAC;AAErC,gDAAgD;AAChD,MAAM,WAAW,qBAAqB;IACpC;;;;OAIG;IACH,QAAQ,EAAE,aAAa,GAAG,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IACzE,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAID;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,qBAAqB,GAC1B,iBAAiB,CAYnB"}

package/dist/hono/audit-well-known.js

@@ -0,0 +1,31 @@
+/** Canonical well-known path (§ 15.1). */
+export const AUDIT_REGISTRY_WELL_KNOWN_PATH = "/.well-known/audit-registry.json";
+const DEFAULT_CACHE_CONTROL = "public, max-age=300";
+/**
+ * Hono middleware that serves the audit registry at the well-known path and
+ * passes every other request through untouched.
+ *
+ * @example
+ *   import { Hono } from "hono";
+ *   import registry from "./build/audit-registry.json";
+ *   import { auditWellKnownPlugin } from "@nodii/telemetry/hono";
+ *
+ *   const app = new Hono();
+ *   app.use(auditWellKnownPlugin({ registry }));
+ *   // GET /.well-known/audit-registry.json -> the bundled registry JSON
+ */
+export function auditWellKnownPlugin(opts) {
+    const path = opts.path ?? AUDIT_REGISTRY_WELL_KNOWN_PATH;
+    const cacheControl = opts.cacheControl ?? DEFAULT_CACHE_CONTROL;
+    return async (c, next) => {
+        if (c.req.method !== "GET" || c.req.path !== path)
+            return next();
+        const registry = typeof opts.registry === "function"
+            ? await opts.registry()
+            : opts.registry;
+        if (cacheControl)
+            c.header("Cache-Control", cacheControl);
+        return c.json(registry);
+    };
+}
+//# sourceMappingURL=audit-well-known.js.map

package/dist/hono/audit-well-known.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-well-known.js","sourceRoot":"","sources":["../../src/hono/audit-well-known.ts"],"names":[],"mappings":"AAmCA,0CAA0C;AAC1C,MAAM,CAAC,MAAM,8BAA8B,GACzC,kCAAkC,CAAC;AAmBrC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAEpD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAClC,IAA2B;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,8BAA8B,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAChE,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,EAAE,CAAC;QACjE,MAAM,QAAQ,GACZ,OAAO,IAAI,CAAC,QAAQ,KAAK,UAAU;YACjC,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE;YACvB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;QACpB,IAAI,YAAY;YAAE,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAC1D,OAAO,CAAC,CAAC,IAAI,CAAC,QAAmC,CAAC,CAAC;IACrD,CAAC,CAAC;AACJ,CAAC"}

package/dist/hono/index.d.ts

@@ -0,0 +1,65 @@
+import type { Context, MiddlewareHandler } from "hono";
+/** Canonical inbound W3C trace-context header (lower-case; Hono headers are case-insensitive). */
+export declare const TRACEPARENT_HEADER = "traceparent";
+/** Options for {@link honoTelemetry}. */
+export interface HonoTelemetryOptions {
+    /**
+     * Honor an inbound W3C `traceparent` header so the SERVER span inherits
+     * the upstream `trace_id` (distributed trace continuity) instead of
+     * starting a fresh root trace. Default `true`.
+     *
+     * A malformed inbound traceparent does NOT throw — `tracer.span` starts a
+     * root span and records the raw value under
+     * `telemetry.inbound_traceparent_malformed` (see `tracer.ts`).
+     *
+     * Set `false` to always start the request as a fresh root SERVER span
+     * (e.g. when the edge is the trusted trace root and upstream values are
+     * not trustworthy).
+     */
+    honorInboundTraceparent?: boolean;
+    /**
+     * Header to read the inbound traceparent from. Defaults to `traceparent`.
+     */
+    traceparentHeader?: string;
+    /**
+     * Customize the SERVER span name. Defaults to the OTel HTTP-semconv
+     * low-cardinality form: `"<METHOD> <route-template>"` when Hono resolved
+     * a route template (e.g. `"GET /users/:id"`), else `"<METHOD>"`. Override
+     * for services that want a different naming scheme.
+     *
+     * Avoid putting the raw `url.path` in the span name — that is HIGH
+     * cardinality (one name per id) and the per-OTel-semconv reason the
+     * default uses the route template, not the concrete path.
+     */
+    spanName?: (c: Context) => string;
+    /**
+     * Extra static attributes stamped on every SERVER span (e.g. a deploy
+     * marker). Per-request attributes should be added by downstream handlers
+     * via `getActiveSpan()` / `withSpanAttributes`.
+     */
+    attributes?: Record<string, unknown>;
+}
+/**
+ * Hono middleware factory that opens ONE OTel SERVER span per HTTP request
+ * and runs the rest of the pipeline INSIDE that span's context, so:
+ *   - every inbound request emits an HTTP SERVER span even on `Bun.serve`
+ *     (which bypasses `@opentelemetry/instrumentation-http`) — D154;
+ *   - child business spans + pg-query/outbox spans nest under it (the span
+ *     is the active stack parent for the downstream scope);
+ *   - the OTel HTTP semantic-convention attributes are stamped
+ *     (`http.request.method`, `url.path`, `url.scheme`,
+ *     `http.response.status_code`, `http.route`, …);
+ *   - span status maps from the response: `5xx` → ERROR (D27), and a
+ *     thrown handler error is recorded + re-thrown so the framework's own
+ *     error handler still runs.
+ *
+ * Mount it FIRST in the pipeline (before auth / context) so it wraps the
+ * full request duration, mirroring edge's `requestContext()`:
+ *
+ *   import { honoTelemetry } from "@nodii/telemetry/hono";
+ *   const app = new Hono();
+ *   app.use("*", honoTelemetry());
+ */
+export declare function honoTelemetry(options?: HonoTelemetryOptions): MiddlewareHandler;
+export { AUDIT_REGISTRY_WELL_KNOWN_PATH, type AuditRegistry, type AuditWellKnownOptions, auditWellKnownPlugin, } from "./audit-well-known.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/hono/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/hono/index.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAgBvD,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,yCAAyC;AACzC,MAAM,WAAW,oBAAoB;IACnC;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;OASG;IACH,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAC;IAClC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAyED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,aAAa,CAC3B,OAAO,GAAE,oBAAyB,GACjC,iBAAiB,CAmGnB;AAGD,OAAO,EACL,8BAA8B,EAC9B,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}

package/dist/hono/index.js

@@ -0,0 +1,219 @@
+// `@nodii/telemetry/hono` — the HTTP SERVER-span middleware for Bun-served
+// Hono apps (D154: HTTP auto-instrumentation ON-by-default).
+//
+// Spec: `global/15-telemetry-doctrine.md` § 7.1 (D154 — HTTP+gRPC server
+//       spans ON by default) + `nodii-libs/features/telemetry.md` § 5.9
+//       (Hono middleware adapter) + § 5.11 (auto-instrumentation defaults).
+//
+// WHY THIS EXISTS (the gap it closes):
+//   `@opentelemetry/instrumentation-http` works by monkey-patching Node's
+//   built-in `http`/`https` modules. `Bun.serve` does NOT route through
+//   those modules — it has its own native HTTP server — so the standard
+//   OTel HTTP instrumentation NEVER fires on a Bun process. Every
+//   Bun-based Nodii service (auth, hr, edge, …) therefore emits ZERO HTTP
+//   SERVER spans despite D154 mandating HTTP instrumentation on-by-default
+//   (verified empirically: auth 0 server spans, hr 0 server spans).
+//
+//   This middleware restores the D154 guarantee at the framework layer:
+//   one OTel SERVER span per inbound HTTP request, with the OTel HTTP
+//   semantic-convention attributes, run with the rest of the Hono pipeline
+//   nested INSIDE the span's context so child business spans (and the
+//   pg-query / outbox spans) parent correctly onto the request span.
+//
+//   It GENERALIZES the bespoke `edge.request` request-span bridge that
+//   `nodii-edge`'s `requestContext()` middleware hand-rolls today (see
+//   `nodii-edge/src/lib/middleware/request-context.ts`). Once a service
+//   adopts this adapter, edge can retire its private copy.
+//
+// REAL SPANS (R1): the span is produced by the lib's own `tracer.span`,
+// which routes through the mandatory-attribute SpanProcessor (D26) and the
+// installed OTLP exporter (`installOtlpAdapter` → `_setSpanEmitter`). There
+// is NO Noop path here — when no OTLP adapter is installed the span still
+// flows to whatever emitter is set (the default no-op emitter is a
+// TEST-ONLY seam, never a production default; production calls
+// `installOtlpAdapter`).
+//
+// SCOPE: TS only. Hono is a TypeScript framework, so this lives behind a
+// TS subpath exactly like `/lambda` + `/worker`. The Python (FastAPI /
+// starlette) and Go HTTP middleware are SEPARATE adapters in their
+// respective language trees (§ 5.9) and are OUT OF SCOPE for this file.
+import { ATTR_ERROR_TYPE, ATTR_HTTP_REQUEST_METHOD, ATTR_HTTP_RESPONSE_STATUS_CODE, ATTR_HTTP_ROUTE, ATTR_NETWORK_PROTOCOL_VERSION, ATTR_SERVER_ADDRESS, ATTR_URL_PATH, ATTR_URL_QUERY, ATTR_URL_SCHEME, ATTR_USER_AGENT_ORIGINAL, } from "@opentelemetry/semantic-conventions";
+import { tracer } from "../tracer.js";
+/** Canonical inbound W3C trace-context header (lower-case; Hono headers are case-insensitive). */
+export const TRACEPARENT_HEADER = "traceparent";
+/** Prefer the proxy-forwarded scheme; fall back to the request URL; default `https`. */
+function urlScheme(c) {
+    const fwd = c.req.header("x-forwarded-proto");
+    if (fwd) {
+        const first = fwd.split(",")[0];
+        if (first)
+            return first.trim();
+    }
+    try {
+        return new URL(c.req.url).protocol.replace(":", "");
+    }
+    catch {
+        return "https";
+    }
+}
+/** The `url.query` component (without the leading `?`), or undefined when absent. */
+function urlQuery(c) {
+    try {
+        const q = new URL(c.req.url).search;
+        return q ? q.slice(1) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Resolve the low-cardinality route TEMPLATE for the request (e.g.
+ * `/users/:id`), or `undefined` when no concrete handler route matched
+ * (e.g. a 404, where only the `/*` middleware route is present).
+ *
+ * `c.req.routePath` is only meaningful AFTER `next()` (once the matching
+ * handler has run). Because this middleware needs the template at
+ * span-OPEN (before `next()`), it reads `c.req.matchedRoutes` — which Hono
+ * populates at match time, before dispatch — and takes the most specific
+ * matched route: the last one whose path is NOT a `/*` / `/` middleware
+ * wildcard and whose method is NOT the `ALL` middleware pseudo-method.
+ */
+function resolveRouteTemplate(c) {
+    const matched = c.req
+        .matchedRoutes;
+    if (Array.isArray(matched)) {
+        for (let i = matched.length - 1; i >= 0; i--) {
+            const r = matched[i];
+            const p = r?.path;
+            if (p && p !== "/*" && p !== "/" && r?.method !== "ALL")
+                return p;
+        }
+        return undefined;
+    }
+    // Fallback for Hono builds without `matchedRoutes`: `routePath` (only set
+    // post-match, so this path is for the post-`next()` re-read).
+    const route = c.req.routePath;
+    if (route && route !== "/*" && route !== "/")
+        return route;
+    return undefined;
+}
+/**
+ * Default SERVER span name per OTel HTTP semconv: `"<METHOD> <route>"`
+ * (low cardinality — uses the route TEMPLATE, never the concrete path)
+ * when Hono matched a concrete handler route, else just `"<METHOD>"`.
+ */
+function defaultSpanName(c) {
+    const method = c.req.method;
+    const route = resolveRouteTemplate(c);
+    return route ? `${method} ${route}` : method;
+}
+/**
+ * Hono middleware factory that opens ONE OTel SERVER span per HTTP request
+ * and runs the rest of the pipeline INSIDE that span's context, so:
+ *   - every inbound request emits an HTTP SERVER span even on `Bun.serve`
+ *     (which bypasses `@opentelemetry/instrumentation-http`) — D154;
+ *   - child business spans + pg-query/outbox spans nest under it (the span
+ *     is the active stack parent for the downstream scope);
+ *   - the OTel HTTP semantic-convention attributes are stamped
+ *     (`http.request.method`, `url.path`, `url.scheme`,
+ *     `http.response.status_code`, `http.route`, …);
+ *   - span status maps from the response: `5xx` → ERROR (D27), and a
+ *     thrown handler error is recorded + re-thrown so the framework's own
+ *     error handler still runs.
+ *
+ * Mount it FIRST in the pipeline (before auth / context) so it wraps the
+ * full request duration, mirroring edge's `requestContext()`:
+ *
+ *   import { honoTelemetry } from "@nodii/telemetry/hono";
+ *   const app = new Hono();
+ *   app.use("*", honoTelemetry());
+ */
+export function honoTelemetry(options = {}) {
+    const honorInbound = options.honorInboundTraceparent ?? true;
+    const traceparentHeader = options.traceparentHeader ?? TRACEPARENT_HEADER;
+    const nameOf = options.spanName ?? defaultSpanName;
+    const staticAttrs = options.attributes;
+    return async (c, next) => {
+        const inboundTraceparent = honorInbound
+            ? c.req.header(traceparentHeader)
+            : undefined;
+        // Build the entry attributes per the OTel HTTP semconv. Status code +
+        // route are set AFTER `next()` (route may only resolve once matched;
+        // status is the response status).
+        const scheme = urlScheme(c);
+        const query = urlQuery(c);
+        const host = c.req.header("host");
+        const userAgent = c.req.header("user-agent");
+        const entryAttrs = {
+            [ATTR_HTTP_REQUEST_METHOD]: c.req.method,
+            [ATTR_URL_PATH]: c.req.path,
+            [ATTR_URL_SCHEME]: scheme,
+            ...(query !== undefined ? { [ATTR_URL_QUERY]: query } : {}),
+            ...(host ? { [ATTR_SERVER_ADDRESS]: host } : {}),
+            ...(userAgent ? { [ATTR_USER_AGENT_ORIGINAL]: userAgent } : {}),
+            [ATTR_NETWORK_PROTOCOL_VERSION]: "1.1",
+            ...(staticAttrs ?? {}),
+        };
+        await tracer.span(
+        // Span name is resolved at span-OPEN against the request line; the
+        // route template is also stamped post-`next()` once matched.
+        nameOf(c), async (span) => {
+            // Run the rest of the Hono pipeline INSIDE the SERVER span so
+            // downstream `tracer.span` calls nest under it (the lib's active
+            // span stack makes this span the parent for the downstream scope).
+            //
+            // NOTE on error capture: when a handler throws, Hono CATCHES it
+            // inside its own dispatch (compose) — whether or not an `onError`
+            // handler is registered — sets `c.error` + a 500 response, and
+            // `next()` RESOLVES normally (it does NOT re-throw past us). So the
+            // canonical way to observe the handler exception from middleware is
+            // `c.error` after `next()`, NOT a try/catch here. The try/catch is
+            // kept as a belt-and-suspenders for the rare case where an error
+            // genuinely propagates out of `next()` (e.g. a middleware that
+            // throws AFTER the response is built).
+            try {
+                await next();
+            }
+            catch (err) {
+                span.recordException(err);
+                span.setAttribute(ATTR_ERROR_TYPE, err instanceof Error ? err.name : "Error");
+                throw err;
+            }
+            // Post-pipeline: stamp the resolved route template + response
+            // status.
+            const route = resolveRouteTemplate(c);
+            if (route)
+                span.setAttribute(ATTR_HTTP_ROUTE, route);
+            // Capture the handler exception Hono stashed on `c.error` (present
+            // in both the `onError` and default-500 paths). This records the
+            // real `exception` span event + sets ERROR status per D27 — the
+            // information `instrumentation-http` would have captured.
+            const handlerError = c.error;
+            if (handlerError) {
+                span.recordException(handlerError);
+                span.setAttribute(ATTR_ERROR_TYPE, handlerError instanceof Error ? handlerError.name : "Error");
+                span.setStatus("ERROR");
+            }
+            const status = c.res.status;
+            span.setAttribute(ATTR_HTTP_RESPONSE_STATUS_CODE, status);
+            // D27 HTTP status mapping: 5xx → ERROR; 4xx is a client error and
+            // stays UNSET (the server behaved correctly). `error.type` carries
+            // the status string on 5xx for filterable error analytics. (When a
+            // handler exception was already recorded above, the span is ERROR
+            // regardless; the status-derived `error.type` still applies on 5xx.)
+            if (status >= 500) {
+                span.setAttribute(ATTR_ERROR_TYPE, String(status));
+                span.setStatus("ERROR", `http_status_${status}`);
+            }
+        }, {
+            kind: "SERVER",
+            attributes: entryAttrs,
+            // Inherit the inbound trace when present (distributed continuity);
+            // malformed values fall back to root + a forensic attr (no throw).
+            ...(inboundTraceparent ? { parent: inboundTraceparent } : {}),
+        });
+    };
+}
+// ---- audit-registry well-known route (audit doctrine § 15.1 / § 5.3) ----
+export { AUDIT_REGISTRY_WELL_KNOWN_PATH, auditWellKnownPlugin, } from "./audit-well-known.js";
+//# sourceMappingURL=index.js.map

package/dist/hono/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/hono/index.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6DAA6D;AAC7D,EAAE;AACF,yEAAyE;AACzE,wEAAwE;AACxE,4EAA4E;AAC5E,EAAE;AACF,uCAAuC;AACvC,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,kEAAkE;AAClE,0EAA0E;AAC1E,2EAA2E;AAC3E,oEAAoE;AACpE,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,2EAA2E;AAC3E,sEAAsE;AACtE,qEAAqE;AACrE,EAAE;AACF,uEAAuE;AACvE,uEAAuE;AACvE,wEAAwE;AACxE,2DAA2D;AAC3D,EAAE;AACF,wEAAwE;AACxE,2EAA2E;AAC3E,4EAA4E;AAC5E,0EAA0E;AAC1E,mEAAmE;AACnE,+DAA+D;AAC/D,yBAAyB;AACzB,EAAE;AACF,yEAAyE;AACzE,uEAAuE;AACvE,mEAAmE;AACnE,wEAAwE;AAGxE,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,8BAA8B,EAC9B,eAAe,EACf,6BAA6B,EAC7B,mBAAmB,EACnB,aAAa,EACb,cAAc,EACd,eAAe,EACf,wBAAwB,GACzB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAGtC,kGAAkG;AAClG,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAyChD,wFAAwF;AACxF,SAAS,SAAS,CAAC,CAAU;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAC9C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CAAC,CAAU;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACpC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAQD;;;;;;;;;;;GAWG;AACH,SAAS,oBAAoB,CAAC,CAAU;IACtC,MAAM,OAAO,GAAI,CAAC,CAAC,GAAqD;SACrE,aAAa,CAAC;IACjB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,MAAM,KAAK,KAAK;gBAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,0EAA0E;IAC1E,8DAA8D;IAC9D,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;IAC9B,IAAI,KAAK,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,CAAU;IACjC,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC5B,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACtC,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAC3B,UAAgC,EAAE;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC;IAC7D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,kBAAkB,CAAC;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;IAEvC,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,kBAAkB,GAAG,YAAY;YACrC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;QAEd,sEAAsE;QACtE,qEAAqE;QACrE,kCAAkC;QAClC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE7C,MAAM,UAAU,GAA4B;YAC1C,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;YACxC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;YAC3B,CAAC,eAAe,CAAC,EAAE,MAAM;YACzB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,mBAAmB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,wBAAwB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,CAAC,6BAA6B,CAAC,EAAE,KAAK;YACtC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;SACvB,CAAC;QAEF,MAAM,MAAM,CAAC,IAAI;QACf,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,CAAC,CAAC,CAAC,EACT,KAAK,EAAE,IAAU,EAAE,EAAE;YACnB,8DAA8D;YAC9D,iEAAiE;YACjE,mEAAmE;YACnE,EAAE;YACF,gEAAgE;YAChE,kEAAkE;YAClE,+DAA+D;YAC/D,oEAAoE;YACpE,oEAAoE;YACpE,mEAAmE;YACnE,iEAAiE;YACjE,+DAA+D;YAC/D,uCAAuC;YACvC,IAAI,CAAC;gBACH,MAAM,IAAI,EAAE,CAAC;YACf,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC1B,IAAI,CAAC,YAAY,CACf,eAAe,EACf,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC1C,CAAC;gBACF,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,8DAA8D;YAC9D,UAAU;YACV,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,KAAK;gBAAE,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAErD,mEAAmE;YACnE,iEAAiE;YACjE,gEAAgE;YAChE,0DAA0D;YAC1D,MAAM,YAAY,GAAI,CAAoC,CAAC,KAAK,CAAC;YACjE,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;gBACnC,IAAI,CAAC,YAAY,CACf,eAAe,EACf,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAC5D,CAAC;gBACF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAC;YAC1D,kEAAkE;YAClE,mEAAmE;YACnE,mEAAmE;YACnE,kEAAkE;YAClE,qEAAqE;YACrE,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;gBAClB,IAAI,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBACnD,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,eAAe,MAAM,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,EACD;YACE,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,UAAU;YACtB,mEAAmE;YACnE,mEAAmE;YACnE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CACF,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,OAAO,EACL,8BAA8B,EAG9B,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}

package/dist/index.d.ts

@@ -13,6 +13,8 @@ export type { CounterHandle, GaugeHandle, HistogramHandle, MetricKind, MetricReg
 export { _getAuditChain, _hasAnyAuditWriter, _resetAuditChainForTests, _resetDefaultAuditWriterForTests, _resetAuditWriterForTests, _setAuditChain, _setAuditWriter, _setDefaultAuditWriterProvider, audit, AUDIT_ACTOR_KINDS, AUDIT_OUTCOMES, } from "./audit.js";
 export type { ActorKind, ActorStamp, AuditArgs, AuditChainAdapter, AuditEvent, AuditEventRow, AuditOutcome, AuditWriter, DefaultAuditWriterProvider, } from "./audit.js";
 export { TelemetryAuditWriterMissing } from "./audit.js";
+export { AuditBuffer } from "./audit-buffer.js";
+export type { AuditBufferOptions, AuditReadRecord, } from "./audit-buffer.js";
 export { configureTelemetry } from "./configure.js";
 export type { ConfigureTelemetryOptions } from "./configure.js";
 export { intent, IntentTypeNotRegistered } from "./intent.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EACV,WAAW,EACX,aAAa,EACb,OAAO,EACP,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EACV,aAAa,EACb,WAAW,EACX,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,KAAK,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,YAAY,EACV,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmCA,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACnD,YAAY,EACV,WAAW,EACX,aAAa,EACb,OAAO,EACP,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,YAAY,EACV,oBAAoB,EACpB,IAAI,EACJ,QAAQ,EACR,WAAW,EACX,UAAU,EACV,UAAU,EACV,UAAU,GACX,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5E,YAAY,EACV,aAAa,EACb,WAAW,EACX,eAAe,EACf,UAAU,EACV,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,KAAK,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,SAAS,EACT,UAAU,EACV,SAAS,EACT,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,0BAA0B,GAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,YAAY,EACV,kBAAkB,EAClB,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,YAAY,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,YAAY,EACV,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,EACvB,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,wBAAwB,EACxB,YAAY,EACZ,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -13,6 +13,12 @@
 //                                 force-flush-on-return so spans/metrics/
 //                                 logs survive the post-handler freeze.
 //                                 First consumer: s2s-auth-service.
+//   - @nodii/telemetry/hono     — HTTP SERVER-span middleware (D154). One
+//                                 OTel SERVER span per request for Bun-served
+//                                 Hono apps, which `instrumentation-http`
+//                                 BYPASSES (Bun.serve doesn't use Node http).
+//                                 Generalizes edge's bespoke `edge.request`
+//                                 request-span bridge. TS-only subpath.
 //
 // Not yet shipped (D44 § 6.5 lists them; no implementation exists yet —
 // they are tracked as follow-on requests, NOT advertised as vapor):
@@ -35,6 +41,7 @@ export { forensicParentValue, parseTraceparent, resolveSpanParent, } from "./tra
 export { metrics, MetricVocabularyError, recordMetric } from "./metrics.js";
 export { _getAuditChain, _hasAnyAuditWriter, _resetAuditChainForTests, _resetDefaultAuditWriterForTests, _resetAuditWriterForTests, _setAuditChain, _setAuditWriter, _setDefaultAuditWriterProvider, audit, AUDIT_ACTOR_KINDS, AUDIT_OUTCOMES, } from "./audit.js";
 export { TelemetryAuditWriterMissing } from "./audit.js";
+export { AuditBuffer } from "./audit-buffer.js";
 export { configureTelemetry } from "./configure.js";
 export { intent, IntentTypeNotRegistered } from "./intent.js";
 export { agentInvocable, readAgentRegistry, AGENT_INVOCABLE_METADATA, } from "./agent-invocable.js";

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,0EAA0E;AAC1E,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,8DAA8D;AAC9D,mDAAmD;AACnD,EAAE;AACF,oEAAoE;AACpE,gBAAgB;AAChB,EAAE;AACF,oEAAoE;AACpE,gEAAgE;AAChE,0DAA0D;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOnD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAWjD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAS5E,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,KAAK,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AAYpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AA0BrD,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,mEAAmE;AACnE,0EAA0E;AAC1E,wEAAwE;AACxE,oEAAoE;AACpE,0EAA0E;AAC1E,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,EAAE;AACF,wEAAwE;AACxE,oEAAoE;AACpE,uEAAuE;AACvE,8DAA8D;AAC9D,mDAAmD;AACnD,EAAE;AACF,oEAAoE;AACpE,gBAAgB;AAChB,EAAE;AACF,oEAAoE;AACpE,gEAAgE;AAChE,0DAA0D;AAE1D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,UAAU,EACV,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAOnD,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAWjD,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAS5E,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,wBAAwB,EACxB,gCAAgC,EAChC,yBAAyB,EACzB,cAAc,EACd,eAAe,EACf,8BAA8B,EAC9B,KAAK,EACL,iBAAiB,EACjB,cAAc,GACf,MAAM,YAAY,CAAC;AAYpB,OAAO,EAAE,2BAA2B,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhD,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpD,OAAO,EAAE,MAAM,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,UAAU,EACV,cAAc,EACd,WAAW,GACZ,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,WAAW,EACX,cAAc,EACd,eAAe,GAChB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AA0BrD,OAAO,EACL,uBAAuB,EACvB,eAAe,EACf,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,YAAY,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodii/telemetry",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Substrate observability library for the Nodii microservice stack — OTel wrapper, log envelope, intent lifecycle, audit signal, agent registry, context propagation. Spec: planning hub docKey=telemetry.",
   "license": "MIT",
   "type": "module",
@@ -27,6 +27,10 @@
       "types": "./dist/lambda/index.d.ts",
       "default": "./dist/lambda/index.js"
     },
+    "./hono": {
+      "types": "./dist/hono/index.d.ts",
+      "default": "./dist/hono/index.js"
+    },
     "./worker": {
       "types": "./dist/worker/index.d.ts",
       "default": "./dist/worker/index.js"
@@ -87,7 +91,7 @@
     }
   },
   "devDependencies": {
-    "@nodii/audit-chain": "0.10.0",
+    "@nodii/audit-chain": "0.11.1",
     "drizzle-orm": "^0.45.2",
     "hono": "^4.4.0",
     "ioredis": "^5.4.0",