@nodii/telemetry 0.21.1 → 0.23.0

package/dist/worker-lite/index.d.ts

@@ -0,0 +1,126 @@
+import { type RedactionConfig } from "../redaction.js";
+import type { ActorType } from "../types.js";
+import { type AttrValue, type OtlpResource } from "./otlp-http.js";
+export type { AttrValue } from "./otlp-http.js";
+export type { RedactionConfig } from "../redaction.js";
+/**
+ * The explicit per-request context threaded into each emit — the workerd-safe
+ * analogue of the Node `NodiiContext` (15-telemetry § 6.2 / D41). The Workers
+ * `fetch` handler builds one per request (from inbound headers + auth) and
+ * passes it to every `log.*` / `counter.inc` call. All fields optional so a
+ * pre-context emit (cold boot / unauthenticated probe) still emits — the
+ * envelope substitutes empty-string `tenant_id`/`request_id` exactly as the
+ * Node logger does when no context is active.
+ */
+export interface WorkerContext {
+    /** Bare `tenant_id` per D20. */
+    tenant_id?: string;
+    user_id?: string | null;
+    actor_type?: ActorType;
+    on_behalf_of?: string | null;
+    request_id?: string;
+    intent_id?: string | null;
+    /** Active trace id (hex), if a trace context was propagated in. */
+    trace_id?: string | null;
+    /** Active span id (hex), if a trace context was propagated in. */
+    span_id?: string | null;
+}
+/**
+ * The `fetch` signature the adapter POSTs OTLP/HTTP with. Defaults to the
+ * runtime-global `fetch` (present on workerd + Bun + Node ≥18). Injectable so
+ * tests capture the request WITHOUT a live collector (R1 — a real capturing
+ * fake, not a Noop default).
+ */
+export type FetchLike = (input: string, init: {
+    method: string;
+    headers: Record<string, string>;
+    body: string;
+}) => Promise<{
+    ok: boolean;
+    status: number;
+}>;
+/** Config for {@link createWorkerTelemetry}. All values are passed in. */
+export interface WorkerTelemetryConfig {
+    /**
+     * OTLP/HTTP collector BASE url (Workers env binding), e.g.
+     * `https://otel.dev.nucleus-cloud.in`. The adapter appends the standard
+     * OTLP/HTTP signal paths (`/v1/logs`, `/v1/metrics`). A url that already ends
+     * in a signal path is used verbatim.
+     */
+    collectorUrl: string;
+    /**
+     * Static headers attached to every OTLP/HTTP POST (Workers env binding),
+     * e.g. `{ authorization: "Bearer <aud=nodii-obs JWT>" }` for the
+     * `oidcauthextension` ingress (15-telemetry § 8 / D95). `content-type:
+     * application/json` is set by the adapter and need not be supplied.
+     */
+    headers?: Record<string, string>;
+    /** D60 resource attr — the service id (e.g. `nodii-pager`). */
+    serviceName: string;
+    /** D60 resource attr — deployment env (`dev` | `uat` | `prod`). */
+    env: string;
+    /** D60 resource attr — optional service version. */
+    serviceVersion?: string;
+    /** Free-form extra resource attributes (D60). */
+    resourceAttributes?: Record<string, AttrValue>;
+    /**
+     * Injectable `fetch` (defaults to the runtime global). Supply a capturing
+     * fake in tests to assert the OTLP/HTTP request without a live collector.
+     */
+    fetchImpl?: FetchLike;
+    /**
+     * Called with a one-line diagnostic when an OTLP/HTTP POST fails (non-2xx or
+     * network throw). Telemetry export failure MUST NOT break Workers business
+     * work (15-telemetry § 4.1 / pillar 5 / R1) — the emit path swallows the
+     * error and routes it here. Defaults to `console.warn`.
+     */
+    onExportError?: (message: string, cause: unknown) => void;
+    /**
+     * Extra D15 redaction config, additive on top of the canonical D2 PII-field
+     * list + regex/PAN passes that ALWAYS run on the LOG path (15-telemetry § 7.3,
+     * fail-closed). Mirrors the Node logger's `.redact()` — `extraPaths` masks
+     * additional field-name keys; `scrubPan` toggles the Luhn PAN scrub (default
+     * on). Omit for the canonical passes only.
+     */
+    redaction?: RedactionConfig;
+}
+/** A structured logger over OTLP/HTTP for Workers. */
+export interface WorkerLogger {
+    debug(msg: string, opts?: EmitOpts): Promise<void>;
+    info(msg: string, opts?: EmitOpts): Promise<void>;
+    warn(msg: string, opts?: EmitOpts): Promise<void>;
+    error(msg: string, opts?: EmitOpts): Promise<void>;
+}
+/** Per-emit options: the explicit context + extra structured fields. */
+export interface EmitOpts {
+    /** The explicit per-request context (workerd-safe; no ALS). */
+    context?: WorkerContext;
+    /** Extra structured fields merged into the log-record attributes. */
+    fields?: Record<string, AttrValue | null | undefined>;
+}
+/** A monotonic counter handle over OTLP/HTTP for Workers. */
+export interface WorkerCounter {
+    /** Increment by 1 (or `by`), stamping the D26 trio + labels from `opts`. */
+    inc(opts?: CounterOpts): Promise<void>;
+    inc(by: number, opts?: CounterOpts): Promise<void>;
+}
+/** Per-increment options: the explicit context + extra labels. */
+export interface CounterOpts {
+    context?: WorkerContext;
+    labels?: Record<string, AttrValue | null | undefined>;
+}
+/** The handle returned by {@link createWorkerTelemetry}. */
+export interface WorkerTelemetry {
+    logger: WorkerLogger;
+    /** Register (or fetch) a monotonic counter by name. */
+    counter(name: string): WorkerCounter;
+    /** The resource attrs stamped on every export (for introspection/tests). */
+    readonly resource: OtlpResource;
+}
+/**
+ * Build the workerd-runnable telemetry handle. Config is passed in from Workers
+ * env bindings (NOT `process.env`). Emits structured logs + counters over
+ * OTLP/HTTP via `fetch`.
+ */
+export declare function createWorkerTelemetry(config: WorkerTelemetryConfig): WorkerTelemetry;
+//# sourceMappingURL=index.d.ts.map

package/dist/worker-lite/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/worker-lite/index.ts"],"names":[],"mappings":"AAwDA,OAAO,EACL,KAAK,eAAe,EAGrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,aAAa,CAAC;AACpE,OAAO,EACL,KAAK,SAAS,EACd,KAAK,YAAY,EAMlB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,gCAAgC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,SAAS,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;IACJ,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd,KACE,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE9C,0EAA0E;AAC1E,MAAM,WAAW,qBAAqB;IACpC;;;;;OAKG;IACH,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,+DAA+D;IAC/D,WAAW,EAAE,MAAM,CAAC;IACpB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C;;;OAGG;IACH,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IAC1D;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,wEAAwE;AACxE,MAAM,WAAW,QAAQ;IACvB,+DAA+D;IAC/D,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,6DAA6D;AAC7D,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,kEAAkE;AAClE,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACvD;AAED,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,YAAY,CAAC;IACrB,uDAAuD;IACvD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAAC;IACrC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAID;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,GAC5B,eAAe,CA2KjB"}

package/dist/worker-lite/index.js

@@ -0,0 +1,241 @@
+// `@nodii/telemetry/worker-lite` — the minimal Cloudflare Workers (workerd)
+// emit adapter.
+//
+// WHY THIS EXISTS (15-telemetry-doctrine § 11 Open Question 3, LIVE):
+//   > "Fourth-substrate (Cloudflare Workers) emit gap. `nodii-pager` (D170)
+//   >  runs on Workers; the Workers-OTLP exporter / minimal `@nodii/telemetry`
+//   >  Workers adapter is TBD and out of current roster scope."
+//
+// The main package (`.`) + the `./worker` subpath boot the Node OTel SDK with
+// gRPC OTLP exporters (`src/otlp-adapter.ts`) and the BullMQ/Redis-Streams
+// worker substrate (`src/worker/`) — both pull `@grpc/grpc-js` + `node:*`, which
+// CANNOT run on workerd. `nodii-pager` (D170, Cloudflare-resident) needs the
+// minimal slice: structured LOGS + COUNTERS emitted over OTLP/HTTP via `fetch`.
+// This module is that slice — NO `node:*`, NO `@opentelemetry/*`, NO gRPC, NO
+// BullMQ. Only `fetch` + Web-standard APIs (workerd-runnable).
+//
+// DOCTRINE CONFORMANCE:
+//   - OTLP is the wire (15-telemetry § 2 / D11). We use OTLP/HTTP (JSON) instead
+//     of OTLP/gRPC because gRPC is Node-only; the collector's `otlphttp` receiver
+//     accepts the same payload tree (`otlp-http.ts`).
+//   - Logs carry the canonical D13 11-field envelope (15-telemetry § 3 →
+//     03-logging § 2), SDK-injected from the supplied context + config — the
+//     SAME `LogEnvelope` type the Node logger forms, so Workers logs are
+//     wire-consistent with Node ones.
+//   - The mandatory correlation trio `tenant_id` / `request_id` / `intent_id`
+//     (15-telemetry § 4.2 / D26) rides every log envelope AND every counter
+//     datapoint. `tenant_id` is the bare key (§ 5.3 / D20) — same key across
+//     signals.
+//   - `service` + `deployment.environment.name` + bare `env` resource attrs on
+//     every export (§ 7.2 / D60).
+//   - D15 SDK-side redaction (§ 7.3 / § 7.5, LOCKED, fail-closed) runs on the
+//     LOG path before serialization — the load-bearing PII pass § 7.1/D41 says
+//     can't be bypassed per-service. On a redaction failure the record is
+//     DROPPED + `telemetry.sdk.redaction_failure_total` increments (drop, not
+//     leak). Reuses the pure (workerd-safe) `src/redaction.ts`.
+//
+// CONTEXT MECHANISM (deliverable requirement 4):
+//   Workers has NO AsyncLocalStorage guarantee (15-telemetry § 6.1 / D40 fixes
+//   ALS for Node/Bun; workerd does not guarantee it, and pulling `node:async_hooks`
+//   would break workerd-safety). So the Workers adapter takes an EXPLICIT
+//   `WorkerContext` argument on every emit (`log.info(msg, { context, ... })`,
+//   `counter.inc({ context, ... })`) rather than an implicit ambient store. The
+//   caller threads its per-request context (already available on the Workers
+//   `fetch(request, env, ctx)` handler) into each emit. This is the workerd-safe
+//   analogue of the Node ALS `NodiiContext` — same fields, explicitly passed.
+//
+// CONFIG (deliverable requirement 5):
+//   All config is PASSED IN (Workers env bindings), never read from
+//   `process.env`. `createWorkerTelemetry({ collectorUrl, headers, serviceName,
+//   env, ... })`.
+// D15 SDK-side redaction (15-telemetry § 7.3 / § 7.5, LOCKED). `redaction.ts` is
+// PURE (zero imports → workerd-safe); we import only its functions + type. This
+// is the load-bearing, fail-closed PII pass that § 7.1/D41 says "can't be
+// bypassed per-service" — so the Workers LOG path runs it exactly like the Node
+// logger (`src/logger.ts`), NOT a per-service bypass.
+import { attemptRedactFields, attemptRedactString, } from "../redaction.js";
+import { buildLogsExportBody, buildMetricsExportBody, buildResource, } from "./otlp-http.js";
+const SCOPE_NAME = "@nodii/telemetry/worker-lite";
+/**
+ * Build the workerd-runnable telemetry handle. Config is passed in from Workers
+ * env bindings (NOT `process.env`). Emits structured logs + counters over
+ * OTLP/HTTP via `fetch`.
+ */
+export function createWorkerTelemetry(config) {
+    const resource = buildResource({
+        serviceName: config.serviceName,
+        env: config.env,
+        serviceVersion: config.serviceVersion,
+        extra: config.resourceAttributes,
+    });
+    // Resolve `fetch` at build time. Default to the runtime global (workerd/Bun/
+    // Node ≥18). We reference `globalThis.fetch` (present on all three) rather
+    // than a bare `fetch` so bundlers don't tree-shake it away.
+    const doFetch = config.fetchImpl ?? globalThis.fetch;
+    const onExportError = config.onExportError ??
+        ((message, cause) => {
+            // eslint-disable-next-line no-console
+            console.warn(`[@nodii/telemetry/worker-lite] ${message}: ${cause instanceof Error ? cause.message : String(cause)}`);
+        });
+    const headers = {
+        "content-type": "application/json",
+        ...config.headers,
+    };
+    const logsUrl = signalUrl(config.collectorUrl, "logs");
+    const metricsUrl = signalUrl(config.collectorUrl, "metrics");
+    async function post(url, body) {
+        try {
+            const res = await doFetch(url, {
+                method: "POST",
+                headers,
+                body: JSON.stringify(body),
+            });
+            if (!res.ok) {
+                onExportError(`OTLP/HTTP export to ${url} returned ${res.status}`, new Error(`status ${res.status}`));
+            }
+        }
+        catch (err) {
+            // Export failure must NEVER break business work (§ 4.1 / R1).
+            onExportError(`OTLP/HTTP export to ${url} failed`, err);
+        }
+    }
+    /**
+     * Emit a single monotonic DELTA counter datapoint over OTLP/HTTP. Shared by
+     * the public `counter().inc()` AND the internal D15 redaction-failure emit
+     * (workerd has no persistent SDK metric registry, so the fail-closed
+     * `telemetry.sdk.redaction_failure_total` is emitted through this same
+     * fetch-based path — best-effort, § 7.3).
+     */
+    async function emitCounter(name, by, attributes) {
+        const nowNano = `${BigInt(Date.now()) * 1000000n}`;
+        const point = {
+            name,
+            value: by,
+            attributes,
+            // Delta window: for a stateless Workers emit each increment IS its own
+            // window, so start == time (a point-in-time delta of `by`).
+            startTimeUnixNano: nowNano,
+            timeUnixNano: nowNano,
+        };
+        await post(metricsUrl, buildMetricsExportBody(resource, SCOPE_NAME, [point]));
+    }
+    async function emitLog(level, msg, opts) {
+        // D15 SDK-side redaction (15-telemetry § 7.3 / § 7.5, LOCKED), run BEFORE
+        // the OTLP record is built — exactly like the Node logger (`src/logger.ts`
+        // emit). Two passes: the regex/PAN scrub on the free-text `msg` and the D2
+        // PII-field-name key match on the structured `fields`. FAIL-CLOSED: if
+        // either pass returns `{ok:false}` (redaction threw), the record is DROPPED
+        // (never emitted unredacted) and `telemetry.sdk.redaction_failure_total`
+        // increments. Better to drop than leak. § 7.1/D41: this pass can't be
+        // bypassed per-service — so the Workers adapter runs it too.
+        //
+        // SCOPING: redaction runs on the LOG path ONLY. Counters carry just the
+        // controlled D26 trio (tenant_id/request_id/intent_id — low-cardinality IDs,
+        // no free text) + caller labels, and worker-lite has NO spans — consistent
+        // with § 7.3 ("logs AND span attributes"), so no counter/span redaction is
+        // needed here.
+        const msgResult = attemptRedactString(msg, config.redaction);
+        if (!msgResult.ok) {
+            await emitRedactionFailure(msgResult.reason);
+            return; // DROP — do not emit the record.
+        }
+        const rawFields = opts?.fields ?? {};
+        const hasFields = Object.keys(rawFields).length > 0;
+        const fieldsResult = hasFields
+            ? attemptRedactFields(rawFields, config.redaction)
+            : { ok: true, redacted: {} };
+        if (!fieldsResult.ok) {
+            await emitRedactionFailure(fieldsResult.reason);
+            return; // DROP — do not emit the record.
+        }
+        const envelope = buildEnvelope(level, msgResult.redacted, config.serviceName, config.env, opts?.context);
+        const record = {
+            envelope,
+            // The redacted fields are a plain record; narrow to the OTLP attr value
+            // type the encoder accepts (it drops any non-primitive / null defensively).
+            fields: fieldsResult.redacted,
+        };
+        await post(logsUrl, buildLogsExportBody(resource, SCOPE_NAME, [record]));
+    }
+    /**
+     * Emit the D15 fail-closed counter (`telemetry.sdk.redaction_failure_total`)
+     * with the `reason` label. Best-effort — a failure to emit this counter must
+     * never itself throw out of the log path (§ 4.1 / R1); `emitCounter` routes
+     * any export error through `onExportError`.
+     */
+    async function emitRedactionFailure(reason) {
+        await emitCounter("telemetry.sdk.redaction_failure_total", 1, { reason });
+    }
+    const logger = {
+        debug: (msg, opts) => emitLog("debug", msg, opts),
+        info: (msg, opts) => emitLog("info", msg, opts),
+        warn: (msg, opts) => emitLog("warn", msg, opts),
+        error: (msg, opts) => emitLog("error", msg, opts),
+    };
+    function counter(name) {
+        function increment(by, opts) {
+            // D26 trio + caller labels. The trio derives from the explicit context;
+            // bare `tenant_id` per D20.
+            return emitCounter(name, by, {
+                ...contextTrio(opts?.context),
+                ...opts?.labels,
+            });
+        }
+        return {
+            inc(byOrOpts, maybeOpts) {
+                if (typeof byOrOpts === "number") {
+                    return increment(byOrOpts, maybeOpts);
+                }
+                return increment(1, byOrOpts);
+            },
+        };
+    }
+    return { logger, counter, resource };
+}
+/**
+ * Form the D13 11-field log envelope from the explicit context + config. Mirror
+ * of the Node logger's envelope construction (`src/logger.ts` `emit`). The `msg`
+ * passed here is ALREADY D15-redacted by the caller (`emitLog`); this function
+ * only shapes the envelope. Empty-string `tenant_id`/`request_id` substitution
+ * matches the Node logger when no context is active.
+ */
+function buildEnvelope(level, msg, service, env, ctx) {
+    return {
+        level,
+        ts: new Date().toISOString(),
+        msg,
+        service,
+        env,
+        tenant_id: ctx?.tenant_id ?? "",
+        user_id: ctx?.user_id ?? null,
+        on_behalf_of: ctx?.on_behalf_of ?? null,
+        actor_type: ctx?.actor_type,
+        request_id: ctx?.request_id ?? "",
+        trace_id: ctx?.trace_id ?? null,
+        span_id: ctx?.span_id ?? null,
+        intent_id: ctx?.intent_id ?? null,
+    };
+}
+/**
+ * The D26 mandatory span-attribute trio as counter attributes. Bare `tenant_id`
+ * (D20). Only present keys are emitted; the OTLP encoder drops null/undefined.
+ */
+function contextTrio(ctx) {
+    return {
+        tenant_id: ctx?.tenant_id,
+        request_id: ctx?.request_id,
+        intent_id: ctx?.intent_id,
+    };
+}
+/**
+ * Resolve the OTLP/HTTP signal endpoint. If `base` already ends in a `/v1/*`
+ * signal path it is used verbatim; otherwise the standard path is appended
+ * (`<base>/v1/logs`, `<base>/v1/metrics`) per the OTLP/HTTP spec.
+ */
+function signalUrl(base, signal) {
+    const trimmed = base.replace(/\/+$/, "");
+    if (/\/v1\/(logs|metrics|traces)$/.test(trimmed))
+        return trimmed;
+    return `${trimmed}/v1/${signal}`;
+}
+//# sourceMappingURL=index.js.map

package/dist/worker-lite/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/worker-lite/index.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,gBAAgB;AAChB,EAAE;AACF,sEAAsE;AACtE,4EAA4E;AAC5E,+EAA+E;AAC/E,gEAAgE;AAChE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,iFAAiF;AACjF,6EAA6E;AAC7E,gFAAgF;AAChF,8EAA8E;AAC9E,+DAA+D;AAC/D,EAAE;AACF,wBAAwB;AACxB,iFAAiF;AACjF,kFAAkF;AAClF,sDAAsD;AACtD,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,sCAAsC;AACtC,8EAA8E;AAC9E,4EAA4E;AAC5E,6EAA6E;AAC7E,eAAe;AACf,+EAA+E;AAC/E,kCAAkC;AAClC,8EAA8E;AAC9E,+EAA+E;AAC/E,0EAA0E;AAC1E,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,iDAAiD;AACjD,+EAA+E;AAC/E,oFAAoF;AACpF,0EAA0E;AAC1E,+EAA+E;AAC/E,gFAAgF;AAChF,6EAA6E;AAC7E,iFAAiF;AACjF,8EAA8E;AAC9E,EAAE;AACF,sCAAsC;AACtC,oEAAoE;AACpE,gFAAgF;AAChF,kBAAkB;AAElB,iFAAiF;AACjF,gFAAgF;AAChF,0EAA0E;AAC1E,gFAAgF;AAChF,sDAAsD;AACtD,OAAO,EAEL,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAKL,mBAAmB,EACnB,sBAAsB,EACtB,aAAa,GACd,MAAM,gBAAgB,CAAC;AA+HxB,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAElD;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA6B;IAE7B,MAAM,QAAQ,GAAG,aAAa,CAAC;QAC7B,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,KAAK,EAAE,MAAM,CAAC,kBAAkB;KACjC,CAAC,CAAC;IACH,6EAA6E;IAC7E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,OAAO,GACX,MAAM,CAAC,SAAS,IAAK,UAAU,CAAC,KAA8B,CAAC;IACjE,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa;QACpB,CAAC,CAAC,OAAe,EAAE,KAAc,EAAE,EAAE;YACnC,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,kCAAkC,OAAO,KACvC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC,CAAC,CAAC;IAEL,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAG,MAAM,CAAC,OAAO;KAClB,CAAC;IAEF,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;IAE7D,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,IAAa;QAC5C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;gBAC7B,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,aAAa,CACX,uBAAuB,GAAG,aAAa,GAAG,CAAC,MAAM,EAAE,EACnD,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,8DAA8D;YAC9D,aAAa,CAAC,uBAAuB,GAAG,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,UAAU,WAAW,CACxB,IAAY,EACZ,EAAU,EACV,UAAwD;QAExD,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,QAAU,EAAE,CAAC;QACrD,MAAM,KAAK,GAAuB;YAChC,IAAI;YACJ,KAAK,EAAE,EAAE;YACT,UAAU;YACV,uEAAuE;YACvE,4DAA4D;YAC5D,iBAAiB,EAAE,OAAO;YAC1B,YAAY,EAAE,OAAO;SACtB,CAAC;QACF,MAAM,IAAI,CACR,UAAU,EACV,sBAAsB,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,OAAO,CACpB,KAAe,EACf,GAAW,EACX,IAA0B;QAE1B,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,uEAAuE;QACvE,4EAA4E;QAC5E,yEAAyE;QACzE,sEAAsE;QACtE,6DAA6D;QAC7D,EAAE;QACF,wEAAwE;QACxE,6EAA6E;QAC7E,2EAA2E;QAC3E,2EAA2E;QAC3E,eAAe;QACf,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7C,OAAO,CAAC,iCAAiC;QAC3C,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,EAAE,MAAM,IAAI,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,SAAS;YAC5B,CAAC,CAAC,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;YAClD,CAAC,CAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAY,CAAC;QAC1C,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,MAAM,oBAAoB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAChD,OAAO,CAAC,iCAAiC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAC5B,KAAK,EACL,SAAS,CAAC,QAAQ,EAClB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,GAAG,EACV,IAAI,EAAE,OAAO,CACd,CAAC;QACF,MAAM,MAAM,GAAoB;YAC9B,QAAQ;YACR,wEAAwE;YACxE,4EAA4E;YAC5E,MAAM,EAAE,YAAY,CAAC,QAGpB;SACF,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAED;;;;;OAKG;IACH,KAAK,UAAU,oBAAoB,CAAC,MAAc;QAChD,MAAM,WAAW,CAAC,uCAAuC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,MAAM,MAAM,GAAiB;QAC3B,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;QACjD,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC/C,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC;QAC/C,KAAK,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC;KAClD,CAAC;IAEF,SAAS,OAAO,CAAC,IAAY;QAC3B,SAAS,SAAS,CAChB,EAAU,EACV,IAA6B;YAE7B,wEAAwE;YACxE,4BAA4B;YAC5B,OAAO,WAAW,CAAC,IAAI,EAAE,EAAE,EAAE;gBAC3B,GAAG,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC;gBAC7B,GAAG,IAAI,EAAE,MAAM;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,GAAG,CAAC,QAA+B,EAAE,SAAuB;gBAC1D,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAChC,CAAC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CACpB,KAAe,EACf,GAAW,EACX,OAAe,EACf,GAAW,EACX,GAA8B;IAE9B,OAAO;QACL,KAAK;QACL,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC5B,GAAG;QACH,OAAO;QACP,GAAG;QACH,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,EAAE;QAC/B,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;QAC7B,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,IAAI;QACvC,UAAU,EAAE,GAAG,EAAE,UAAU;QAC3B,UAAU,EAAE,GAAG,EAAE,UAAU,IAAI,EAAE;QACjC,QAAQ,EAAE,GAAG,EAAE,QAAQ,IAAI,IAAI;QAC/B,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,IAAI;QAC7B,SAAS,EAAE,GAAG,EAAE,SAAS,IAAI,IAAI;KAClC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,GAA8B;IAE9B,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,SAAS;QACzB,UAAU,EAAE,GAAG,EAAE,UAAU;QAC3B,SAAS,EAAE,GAAG,EAAE,SAAS;KAC1B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,MAA0B;IACzD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjE,OAAO,GAAG,OAAO,OAAO,MAAM,EAAE,CAAC;AACnC,CAAC"}

package/dist/worker-lite/otlp-http.d.ts

@@ -0,0 +1,93 @@
+import type { LogEnvelope } from "../types.js";
+/** A primitive attribute value the OTLP KeyValue encoder accepts. */
+export type AttrValue = string | number | boolean;
+/** OTLP `KeyValue` (JSON mapping). */
+export interface OtlpKeyValue {
+    key: string;
+    value: OtlpAnyValue;
+}
+/** OTLP `AnyValue` (JSON mapping) — the subset we emit. */
+export type OtlpAnyValue = {
+    stringValue: string;
+} | {
+    intValue: string;
+} | {
+    doubleValue: number;
+} | {
+    boolValue: boolean;
+};
+/**
+ * Resource attributes stamped on the `resource` of every export (D60). The
+ * adapter builds this once from its config; the builders below take it as-is.
+ */
+export interface OtlpResource {
+    attributes: OtlpKeyValue[];
+}
+/** Encode a single primitive into an OTLP AnyValue. */
+export declare function toAnyValue(v: AttrValue): OtlpAnyValue;
+/** Encode a flat attribute record into the OTLP KeyValue list. */
+export declare function toKeyValues(attrs: Record<string, AttrValue | null | undefined>): OtlpKeyValue[];
+/**
+ * Build the OTLP `resource` from the adapter's resource attributes (D60). The
+ * bare `env` key AND the `deployment.environment.name` semantic key are BOTH
+ * stamped — mirroring `src/otlp-adapter.ts` so the collector's env-filter OTTL
+ * gate (infra request 63337357) resolves Workers signals identically to Node
+ * ones. `service.name` is the OTel semantic-convention key.
+ */
+export declare function buildResource(attrs: {
+    serviceName: string;
+    env: string;
+    serviceVersion?: string;
+    extra?: Record<string, AttrValue>;
+}): OtlpResource;
+/**
+ * Flatten a D13 `LogEnvelope` + caller fields into the OTLP log-record
+ * attribute list. Mirrors `src/otlp-adapter.ts` `buildLogAttributes` so a
+ * Workers log row is shaped identically to a Node one: bare `tenant_id` (D20),
+ * `request_id`, and the optional identity/correlation keys.
+ */
+export declare function buildLogAttributes(envelope: LogEnvelope, fields: Record<string, AttrValue | null | undefined>): OtlpKeyValue[];
+/** A single log record to encode (envelope + already-formed extra fields). */
+export interface WorkerLogRecord {
+    envelope: LogEnvelope;
+    fields: Record<string, AttrValue | null | undefined>;
+}
+/**
+ * Build an OTLP/HTTP `ExportLogsServiceRequest` JSON body from a batch of log
+ * records under one resource. `timeUnixNano` is derived from the envelope `ts`
+ * ISO-8601 timestamp (the log emit time), matching the Node adapter's
+ * `timestamp: Date.now()` intent but preserving the envelope's own instant.
+ */
+export declare function buildLogsExportBody(resource: OtlpResource, scopeName: string, records: readonly WorkerLogRecord[]): {
+    resourceLogs: unknown[];
+};
+/** A single counter datapoint to encode. */
+export interface WorkerCounterPoint {
+    name: string;
+    /** Monotonic-sum increment for this export window. */
+    value: number;
+    attributes: Record<string, AttrValue | null | undefined>;
+    /** Emission instant, unix-nanos as a decimal string. */
+    timeUnixNano: string;
+    /** Start of the delta window, unix-nanos as a decimal string. */
+    startTimeUnixNano: string;
+}
+/**
+ * Build an OTLP/HTTP `ExportMetricsServiceRequest` JSON body for a batch of
+ * counter datapoints under one resource. Every counter is emitted as a
+ * monotonic `sum` with **DELTA** temporality (`aggregationTemporality: 1`) —
+ * matching D21 (delta temporality for counters) and the Node adapter's
+ * `AggregationTemporality.DELTA`. One OTLP `metric` per distinct counter name;
+ * datapoints with the same name group under it.
+ */
+export declare function buildMetricsExportBody(resource: OtlpResource, scopeName: string, points: readonly WorkerCounterPoint[]): {
+    resourceMetrics: unknown[];
+};
+/**
+ * Convert an ISO-8601 timestamp to unix-nanoseconds as a decimal string (the
+ * OTLP proto-JSON encoding for `fixed64` time fields). Millisecond precision
+ * (JS `Date` granularity) padded to nanos. Falls back to the current instant
+ * for an unparseable input rather than emitting `NaN`.
+ */
+export declare function isoToUnixNano(iso: string): string;
+//# sourceMappingURL=otlp-http.d.ts.map

package/dist/worker-lite/otlp-http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp-http.d.ts","sourceRoot":"","sources":["../../src/worker-lite/otlp-http.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,WAAW,EAAY,MAAM,aAAa,CAAC;AAEzD,qEAAqE;AACrE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAElD,sCAAsC;AACtC,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,2DAA2D;AAC3D,MAAM,MAAM,YAAY,GACpB;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GACvB;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpB;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,GACvB;IAAE,SAAS,EAAE,OAAO,CAAA;CAAE,CAAC;AAE3B;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAeD,uDAAuD;AACvD,wBAAgB,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG,YAAY,CAQrD;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CACzB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,GAClD,YAAY,EAAE,CAOhB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACnC,GAAG,YAAY,CAYf;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,WAAW,EACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,GACnD,YAAY,EAAE,CAehB;AAED,8EAA8E;AAC9E,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;CACtD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC;IAAE,YAAY,EAAE,OAAO,EAAE,CAAA;CAAE,CAsB7B;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACzD,wDAAwD;IACxD,YAAY,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,YAAY,EACtB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,SAAS,kBAAkB,EAAE,GACpC;IAAE,eAAe,EAAE,OAAO,EAAE,CAAA;CAAE,CA6BhC;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAIjD"}

package/dist/worker-lite/otlp-http.js

@@ -0,0 +1,179 @@
+// OTLP/HTTP (JSON) payload builders for the Cloudflare Workers adapter.
+//
+// workerd (Cloudflare Workers) CANNOT run the Node OTel SDK gRPC exporters
+// (`@opentelemetry/exporter-*-otlp-grpc`) that `src/otlp-adapter.ts` wires —
+// those pull `@grpc/grpc-js` + `node:*`. The Workers runtime exposes only
+// `fetch` + Web-standard APIs, so this module hand-builds the OTLP/HTTP JSON
+// envelope (the same wire the collector's `otlphttp` receiver accepts) and the
+// adapter POSTs it with `fetch`. NO `@opentelemetry/*` import, NO `node:*`
+// import — purely data-shaping over plain objects.
+//
+// The JSON shape follows the OTLP/HTTP spec's ExportLogsServiceRequest /
+// ExportMetricsServiceRequest (opentelemetry-proto → JSON mapping): a
+// `resourceLogs[]` / `resourceMetrics[]` tree with a `resource.attributes`
+// KeyValue list, one `scopeLogs` / `scopeMetrics` entry, and the records.
+//
+// The log record shape reuses the canonical D13 11-field `LogEnvelope`
+// (15-telemetry § 3 → 03-logging § 2) EXACTLY so Workers logs are wire-consistent
+// with the Node adapter's logs (`src/otlp-adapter.ts` buildLogAttributes) — the
+// same bare `tenant_id` key (D20), the same `request_id` / `intent_id` / `trace_id`
+// correlation keys (D26/D3), the same `service` + `deployment.environment.name`
+// resource attrs (D60). A counter datapoint carries the D26 mandatory
+// span-attribute trio (`tenant_id`, `request_id`, `intent_id`) as its attributes
+// when a context is supplied, so Workers metrics correlate per-tenant too (D20).
+/**
+ * SeverityNumber per the OTLP logs spec (same numeric mapping the Node adapter
+ * derives via `@opentelemetry/api-logs` SeverityNumber): DEBUG=5, INFO=9,
+ * WARN=13, ERROR=17. Kept as a local constant so this module adds NO
+ * `@opentelemetry/*` dependency (workerd-safety).
+ */
+const SEVERITY_NUMBER = {
+    debug: 5,
+    info: 9,
+    warn: 13,
+    error: 17,
+};
+/** Encode a single primitive into an OTLP AnyValue. */
+export function toAnyValue(v) {
+    if (typeof v === "boolean")
+        return { boolValue: v };
+    if (typeof v === "number") {
+        // Integers → intValue (string per proto-JSON int64 rule); non-integers →
+        // doubleValue. Matches how the collector round-trips numeric attributes.
+        return Number.isInteger(v) ? { intValue: String(v) } : { doubleValue: v };
+    }
+    return { stringValue: v };
+}
+/** Encode a flat attribute record into the OTLP KeyValue list. */
+export function toKeyValues(attrs) {
+    const out = [];
+    for (const [key, v] of Object.entries(attrs)) {
+        if (v === null || v === undefined)
+            continue;
+        out.push({ key, value: toAnyValue(v) });
+    }
+    return out;
+}
+/**
+ * Build the OTLP `resource` from the adapter's resource attributes (D60). The
+ * bare `env` key AND the `deployment.environment.name` semantic key are BOTH
+ * stamped — mirroring `src/otlp-adapter.ts` so the collector's env-filter OTTL
+ * gate (infra request 63337357) resolves Workers signals identically to Node
+ * ones. `service.name` is the OTel semantic-convention key.
+ */
+export function buildResource(attrs) {
+    const kv = {
+        "service.name": attrs.serviceName,
+        "deployment.environment.name": attrs.env,
+        // Bare `env` — the collector env-filter OTTL gate keys on this exact name.
+        env: attrs.env,
+        ...(attrs.serviceVersion
+            ? { "service.version": attrs.serviceVersion }
+            : {}),
+        ...attrs.extra,
+    };
+    return { attributes: toKeyValues(kv) };
+}
+/**
+ * Flatten a D13 `LogEnvelope` + caller fields into the OTLP log-record
+ * attribute list. Mirrors `src/otlp-adapter.ts` `buildLogAttributes` so a
+ * Workers log row is shaped identically to a Node one: bare `tenant_id` (D20),
+ * `request_id`, and the optional identity/correlation keys.
+ */
+export function buildLogAttributes(envelope, fields) {
+    const attrs = {
+        "service.name": envelope.service,
+        "deployment.environment.name": envelope.env,
+        tenant_id: envelope.tenant_id,
+        request_id: envelope.request_id,
+        ...(envelope.user_id ? { user_id: envelope.user_id } : {}),
+        ...(envelope.actor_type ? { actor_type: envelope.actor_type } : {}),
+        ...(envelope.on_behalf_of ? { on_behalf_of: envelope.on_behalf_of } : {}),
+        ...(envelope.intent_id ? { intent_id: envelope.intent_id } : {}),
+        ...(envelope.trace_id ? { "telemetry.trace_id": envelope.trace_id } : {}),
+        ...(envelope.span_id ? { "telemetry.span_id": envelope.span_id } : {}),
+        ...fields,
+    };
+    return toKeyValues(attrs);
+}
+/**
+ * Build an OTLP/HTTP `ExportLogsServiceRequest` JSON body from a batch of log
+ * records under one resource. `timeUnixNano` is derived from the envelope `ts`
+ * ISO-8601 timestamp (the log emit time), matching the Node adapter's
+ * `timestamp: Date.now()` intent but preserving the envelope's own instant.
+ */
+export function buildLogsExportBody(resource, scopeName, records) {
+    const logRecords = records.map((r) => {
+        const timeUnixNano = isoToUnixNano(r.envelope.ts);
+        return {
+            timeUnixNano,
+            observedTimeUnixNano: timeUnixNano,
+            severityNumber: SEVERITY_NUMBER[r.envelope.level],
+            severityText: r.envelope.level,
+            body: { stringValue: r.envelope.msg },
+            attributes: buildLogAttributes(r.envelope, r.fields),
+            ...(r.envelope.trace_id ? { traceId: r.envelope.trace_id } : {}),
+            ...(r.envelope.span_id ? { spanId: r.envelope.span_id } : {}),
+        };
+    });
+    return {
+        resourceLogs: [
+            {
+                resource,
+                scopeLogs: [{ scope: { name: scopeName }, logRecords }],
+            },
+        ],
+    };
+}
+/**
+ * Build an OTLP/HTTP `ExportMetricsServiceRequest` JSON body for a batch of
+ * counter datapoints under one resource. Every counter is emitted as a
+ * monotonic `sum` with **DELTA** temporality (`aggregationTemporality: 1`) —
+ * matching D21 (delta temporality for counters) and the Node adapter's
+ * `AggregationTemporality.DELTA`. One OTLP `metric` per distinct counter name;
+ * datapoints with the same name group under it.
+ */
+export function buildMetricsExportBody(resource, scopeName, points) {
+    const byName = new Map();
+    for (const p of points) {
+        const bucket = byName.get(p.name);
+        if (bucket)
+            bucket.push(p);
+        else
+            byName.set(p.name, [p]);
+    }
+    const metrics = [...byName.entries()].map(([name, pts]) => ({
+        name,
+        sum: {
+            // 1 = AGGREGATION_TEMPORALITY_DELTA (OTLP metrics proto enum). D21.
+            aggregationTemporality: 1,
+            isMonotonic: true,
+            dataPoints: pts.map((p) => ({
+                asInt: String(Math.trunc(p.value)),
+                startTimeUnixNano: p.startTimeUnixNano,
+                timeUnixNano: p.timeUnixNano,
+                attributes: toKeyValues(p.attributes),
+            })),
+        },
+    }));
+    return {
+        resourceMetrics: [
+            {
+                resource,
+                scopeMetrics: [{ scope: { name: scopeName }, metrics }],
+            },
+        ],
+    };
+}
+/**
+ * Convert an ISO-8601 timestamp to unix-nanoseconds as a decimal string (the
+ * OTLP proto-JSON encoding for `fixed64` time fields). Millisecond precision
+ * (JS `Date` granularity) padded to nanos. Falls back to the current instant
+ * for an unparseable input rather than emitting `NaN`.
+ */
+export function isoToUnixNano(iso) {
+    const ms = Date.parse(iso);
+    const epochMs = Number.isNaN(ms) ? Date.now() : ms;
+    return `${BigInt(epochMs) * 1000000n}`;
+}
+//# sourceMappingURL=otlp-http.js.map

package/dist/worker-lite/otlp-http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otlp-http.js","sourceRoot":"","sources":["../../src/worker-lite/otlp-http.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,EAAE;AACF,2EAA2E;AAC3E,6EAA6E;AAC7E,0EAA0E;AAC1E,6EAA6E;AAC7E,+EAA+E;AAC/E,2EAA2E;AAC3E,mDAAmD;AACnD,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,2EAA2E;AAC3E,0EAA0E;AAC1E,EAAE;AACF,uEAAuE;AACvE,kFAAkF;AAClF,gFAAgF;AAChF,oFAAoF;AACpF,gFAAgF;AAChF,sEAAsE;AACtE,iFAAiF;AACjF,iFAAiF;AA4BjF;;;;;GAKG;AACH,MAAM,eAAe,GAA6B;IAChD,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,EAAE;CACV,CAAC;AAEF,uDAAuD;AACvD,MAAM,UAAU,UAAU,CAAC,CAAY;IACrC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,yEAAyE;QACzE,yEAAyE;QACzE,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAC5B,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,WAAW,CACzB,KAAmD;IAEnD,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,KAK7B;IACC,MAAM,EAAE,GAA8B;QACpC,cAAc,EAAE,KAAK,CAAC,WAAW;QACjC,6BAA6B,EAAE,KAAK,CAAC,GAAG;QACxC,2EAA2E;QAC3E,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,cAAc;YACtB,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,cAAc,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,KAAK,CAAC,KAAK;KACf,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAqB,EACrB,MAAoD;IAEpD,MAAM,KAAK,GAAiD;QAC1D,cAAc,EAAE,QAAQ,CAAC,OAAO;QAChC,6BAA6B,EAAE,QAAQ,CAAC,GAAG;QAC3C,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,MAAM;KACV,CAAC;IACF,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAQD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAsB,EACtB,SAAiB,EACjB,OAAmC;IAEnC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACnC,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClD,OAAO;YACL,YAAY;YACZ,oBAAoB,EAAE,YAAY;YAClC,cAAc,EAAE,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACjD,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;YAC9B,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE;YACrC,UAAU,EAAE,kBAAkB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,YAAY,EAAE;YACZ;gBACE,QAAQ;gBACR,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,CAAC;aACxD;SACF;KACF,CAAC;AACJ,CAAC;AAcD;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAsB,EACtB,SAAiB,EACjB,MAAqC;IAErC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACtB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1D,IAAI;QACJ,GAAG,EAAE;YACH,oEAAoE;YACpE,sBAAsB,EAAE,CAAC;YACzB,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAClC,iBAAiB,EAAE,CAAC,CAAC,iBAAiB;gBACtC,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;aACtC,CAAC,CAAC;SACJ;KACF,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,eAAe,EAAE;YACf;gBACE,QAAQ;gBACR,YAAY,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC;aACxD;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,QAAU,EAAE,CAAC;AAC3C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nodii/telemetry",
-  "version": "0.21.1",
+  "version": "0.23.0",
   "description": "Substrate observability library for the Nodii microservice stack — OTel wrapper, log envelope, intent lifecycle, audit signal, agent registry, context propagation. Spec: planning hub docKey=telemetry.",
   "license": "MIT",
   "type": "module",
@@ -34,6 +34,10 @@
     "./worker": {
       "types": "./dist/worker/index.d.ts",
       "default": "./dist/worker/index.js"
+    },
+    "./worker-lite": {
+      "types": "./dist/worker-lite/index.d.ts",
+      "default": "./dist/worker-lite/index.js"
     }
   },
   "files": [