@o1-labs/mina-archive-node-graphql 0.0.6 → 2.0.0

package/build/src/server/graceful-shutdown.js

@@ -0,0 +1,42 @@
+export { createGracefulShutdown };
+function createGracefulShutdown(options) {
+    const { closeServer, closers = [], timeoutMs, onExit = (code) => process.exit(code), log = (message, error) => error !== undefined ? console.error(message, error) : console.info(message), } = options;
+    let started = false;
+    return async function shutdown(reason, exitCode = 0) {
+        if (started)
+            return;
+        started = true;
+        log(`Shutting down (${reason})…`);
+        let exited = false;
+        const exitOnce = (code) => {
+            if (exited)
+                return;
+            exited = true;
+            onExit(code);
+        };
+        const forceTimer = setTimeout(() => {
+            log('Graceful shutdown timed out; forcing exit.');
+            exitOnce(1);
+        }, timeoutMs);
+        try {
+            await closeServer();
+            for (const close of closers) {
+                try {
+                    await close();
+                }
+                catch (error) {
+                    log('Error during shutdown step', error);
+                }
+            }
+            exitOnce(exitCode);
+        }
+        catch (error) {
+            log('Error closing server', error);
+            exitOnce(1);
+        }
+        finally {
+            clearTimeout(forceTimer);
+        }
+    };
+}
+//# sourceMappingURL=graceful-shutdown.js.map

package/build/src/server/graceful-shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graceful-shutdown.js","sourceRoot":"","sources":["../../../src/server/graceful-shutdown.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAyBlC,SAAS,sBAAsB,CAAC,OAAgC;IAC9D,MAAM,EACJ,WAAW,EACX,OAAO,GAAG,EAAE,EACZ,SAAS,EACT,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EACrC,GAAG,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACvB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAC9E,GAAG,OAAO,CAAC;IAEZ,IAAI,OAAO,GAAG,KAAK,CAAC;IAMpB,OAAO,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,QAAQ,GAAG,CAAC;QACzD,IAAI,OAAO;YAAE,OAAO;QACpB,OAAO,GAAG,IAAI,CAAC;QACf,GAAG,CAAC,kBAAkB,MAAM,IAAI,CAAC,CAAC;QAElC,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,EAAE;YAChC,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,CAAC;QACf,CAAC,CAAC;QAEF,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YACjC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YAClD,QAAQ,CAAC,CAAC,CAAC,CAAC;QACd,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,IAAI,CAAC;YACH,MAAM,WAAW,EAAE,CAAC;YACpB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,IAAI,CAAC;oBACH,MAAM,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;YACnC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/build/src/server/graphql-armor.js

@@ -0,0 +1,39 @@
+import { maxDepthPlugin } from '@escape.tech/graphql-armor-max-depth';
+import { maxAliasesPlugin } from '@escape.tech/graphql-armor-max-aliases';
+import { maxTokensPlugin } from '@escape.tech/graphql-armor-max-tokens';
+import { costLimitPlugin } from '@escape.tech/graphql-armor-cost-limit';
+import { blockFieldSuggestionsPlugin } from '@escape.tech/graphql-armor-block-field-suggestions';
+export { buildArmorPlugins, resolveArmorConfig, ARMOR_DEFAULTS };
+const ARMOR_DEFAULTS = {
+    maxDepth: 12,
+    maxAliases: 15,
+    maxTokens: 1000,
+    maxCost: 5000,
+};
+function intFromEnv(value, fallback) {
+    if (value === undefined || value.trim() === '')
+        return fallback;
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 1)
+        return fallback;
+    return parsed;
+}
+function resolveArmorConfig(env = process.env) {
+    return {
+        maxDepth: intFromEnv(env.GRAPHQL_MAX_DEPTH, ARMOR_DEFAULTS.maxDepth),
+        maxAliases: intFromEnv(env.GRAPHQL_MAX_ALIASES, ARMOR_DEFAULTS.maxAliases),
+        maxTokens: intFromEnv(env.GRAPHQL_MAX_TOKENS, ARMOR_DEFAULTS.maxTokens),
+        maxCost: intFromEnv(env.GRAPHQL_MAX_COST, ARMOR_DEFAULTS.maxCost),
+    };
+}
+function buildArmorPlugins(env = process.env) {
+    const config = resolveArmorConfig(env);
+    return [
+        maxDepthPlugin({ n: config.maxDepth, ignoreIntrospection: true }),
+        maxAliasesPlugin({ n: config.maxAliases }),
+        maxTokensPlugin({ n: config.maxTokens }),
+        costLimitPlugin({ maxCost: config.maxCost, ignoreIntrospection: true }),
+        blockFieldSuggestionsPlugin(),
+    ];
+}
+//# sourceMappingURL=graphql-armor.js.map

package/build/src/server/graphql-armor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphql-armor.js","sourceRoot":"","sources":["../../../src/server/graphql-armor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACtE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AACxE,OAAO,EAAE,2BAA2B,EAAE,MAAM,oDAAoD,CAAC;AAEjG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,cAAc,EAAE,CAAC;AAsBjE,MAAM,cAAc,GAAgB;IAKlC,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,IAAI;IACf,OAAO,EAAE,IAAI;CACd,CAAC;AASF,SAAS,UAAU,CAAC,KAAyB,EAAE,QAAgB;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAiB,OAAO,CAAC,GAAG;IACtD,OAAO;QACL,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,iBAAiB,EAAE,cAAc,CAAC,QAAQ,CAAC;QACpE,UAAU,EAAE,UAAU,CAAC,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,UAAU,CAAC;QAC1E,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,kBAAkB,EAAE,cAAc,CAAC,SAAS,CAAC;QACvE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,gBAAgB,EAAE,cAAc,CAAC,OAAO,CAAC;KAClE,CAAC;AACJ,CAAC;AAQD,SAAS,iBAAiB,CAAC,MAAiB,OAAO,CAAC,GAAG;IACrD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,cAAc,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;QACjE,gBAAgB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1C,eAAe,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QACxC,eAAe,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC;QACvE,2BAA2B,EAAE;KAC9B,CAAC;AACJ,CAAC"}

package/build/src/server/logger.js

@@ -0,0 +1,45 @@
+import { hostname } from 'node:os';
+import pino from 'pino';
+export { createLogger, logger, resolveLogLevel, resolveYogaLogLevel };
+const VALID_LEVELS = new Set([
+    'trace',
+    'debug',
+    'info',
+    'warn',
+    'error',
+    'fatal',
+    'silent',
+]);
+function resolveLogLevel(env = process.env) {
+    const requested = (env.LOG_LEVEL ?? 'info').toLowerCase();
+    return VALID_LEVELS.has(requested)
+        ? requested
+        : 'info';
+}
+function resolveYogaLogLevel(env = process.env) {
+    const level = resolveLogLevel(env);
+    if (level === 'trace')
+        return 'debug';
+    if (level === 'fatal')
+        return 'error';
+    if (level === 'silent')
+        return false;
+    return level;
+}
+function createLogger(env = process.env) {
+    const level = resolveLogLevel(env);
+    return pino({
+        level,
+        base: {
+            pid: process.pid,
+            hostname: hostname(),
+            service: env.JAEGER_SERVICE_NAME ?? 'archive-api',
+        },
+        timestamp: pino.stdTimeFunctions.isoTime,
+        formatters: {
+            level: (label) => ({ level: label }),
+        },
+    });
+}
+const logger = createLogger();
+//# sourceMappingURL=logger.js.map

package/build/src/server/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/server/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,CAAC;AAatE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAe;IACzC,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;CACT,CAAC,CAAC;AAEH,SAAS,eAAe,CACtB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,YAAY,CAAC,GAAG,CAAC,SAAyB,CAAC;QAChD,CAAC,CAAE,SAA0B;QAC7B,CAAC,CAAC,MAAM,CAAC;AACb,CAAC;AAED,SAAS,mBAAmB,CAC1B,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACrC,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAS,YAAY,CACnB,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC;QACV,KAAK;QACL,IAAI,EAAE;YACJ,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,QAAQ,EAAE,QAAQ,EAAE;YACpB,OAAO,EAAE,GAAG,CAAC,mBAAmB,IAAI,aAAa;SAClD;QACD,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO;QACxC,UAAU,EAAE;YAEV,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;SACrC;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC"}

package/build/src/server/metrics.js

@@ -0,0 +1,72 @@
+import { Registry, collectDefaultMetrics, Counter, Histogram, Gauge, } from 'prom-client';
+export { createMetrics, useMetrics, METRICS_PATH };
+const METRICS_PATH = '/metrics';
+const KNOWN_ROUTES = new Set(['/', '/healthcheck', '/readiness', METRICS_PATH]);
+function createMetrics({ collectDefault = true } = {}) {
+    const registry = new Registry();
+    if (collectDefault)
+        collectDefaultMetrics({ register: registry });
+    const requestsTotal = new Counter({
+        name: 'http_requests_total',
+        help: 'Total HTTP requests',
+        labelNames: ['method', 'route', 'status'],
+        registers: [registry],
+    });
+    const requestDuration = new Histogram({
+        name: 'http_request_duration_seconds',
+        help: 'HTTP request duration in seconds',
+        labelNames: ['method', 'route', 'status'],
+        buckets: [0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2.5, 5, 10],
+        registers: [registry],
+    });
+    const inFlight = new Gauge({
+        name: 'http_requests_in_flight',
+        help: 'HTTP requests currently being processed',
+        registers: [registry],
+    });
+    return { registry, requestsTotal, requestDuration, inFlight };
+}
+function routeOf(rawUrl) {
+    let path;
+    try {
+        path = new URL(rawUrl).pathname;
+    }
+    catch {
+        return 'other';
+    }
+    return KNOWN_ROUTES.has(path) ? path : 'other';
+}
+function useMetrics(metrics = createMetrics()) {
+    const startTimes = new WeakMap();
+    return {
+        async onRequest({ request, url, endResponse, fetchAPI }) {
+            if (url.pathname === METRICS_PATH) {
+                endResponse(new fetchAPI.Response(await metrics.registry.metrics(), {
+                    status: 200,
+                    headers: { 'content-type': metrics.registry.contentType },
+                }));
+                return;
+            }
+            metrics.inFlight.inc();
+            startTimes.set(request, Date.now());
+        },
+        onResponse({ request, response }) {
+            const route = routeOf(request.url);
+            if (route === METRICS_PATH)
+                return;
+            const labels = {
+                method: request.method,
+                route,
+                status: String(response.status),
+            };
+            metrics.requestsTotal.inc(labels);
+            const start = startTimes.get(request);
+            if (start === undefined)
+                return;
+            startTimes.delete(request);
+            metrics.inFlight.dec();
+            metrics.requestDuration.observe(labels, (Date.now() - start) / 1000);
+        },
+    };
+}
+//# sourceMappingURL=metrics.js.map

package/build/src/server/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../../src/server/metrics.ts"],"names":[],"mappings":"AACA,OAAO,EACL,QAAQ,EACR,qBAAqB,EACrB,OAAO,EACP,SAAS,EACT,KAAK,GACN,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AAGnD,MAAM,YAAY,GAAG,UAAU,CAAC;AAGhC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAchF,SAAS,aAAa,CAAC,EAAE,cAAc,GAAG,IAAI,EAAE,GAAG,EAAE;IACnD,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAChC,IAAI,cAAc;QAAE,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAElE,MAAM,aAAa,GAAG,IAAI,OAAO,CAAC;QAChC,IAAI,EAAE,qBAAqB;QAC3B,IAAI,EAAE,qBAAqB;QAC3B,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;QAClD,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,eAAe,GAAG,IAAI,SAAS,CAAC;QACpC,IAAI,EAAE,+BAA+B;QACrC,IAAI,EAAE,kCAAkC;QACxC,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAU;QAClD,OAAO,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC;QACzB,IAAI,EAAE,yBAAyB;QAC/B,IAAI,EAAE,yCAAyC;QAC/C,SAAS,EAAE,CAAC,QAAQ,CAAC;KACtB,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,OAAO,CAAC,MAAc;IAC7B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAMD,SAAS,UAAU,CAAC,UAAmB,aAAa,EAAE;IACpD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAmB,CAAC;IAClD,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE;YACrD,IAAI,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAClC,WAAW,CACT,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE;oBACtD,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;iBAC1D,CAAC,CACH,CAAC;gBACF,OAAO;YACT,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;YAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,KAAK,KAAK,YAAY;gBAAE,OAAO;YAEnC,MAAM,MAAM,GAAG;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK;gBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;aAChC,CAAC;YACF,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO;YAEhC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;QACvE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/src/server/plugins.js

@@ -2,38 +2,54 @@ import { useLogger } from '@envelop/core';
 import { useGraphQlJit } from '@envelop/graphql-jit';
 import { useDisableIntrospection } from '@envelop/disable-introspection';
 import { useOpenTelemetry } from '@envelop/opentelemetry';
-import { inspect } from 'node:util';
 import { initJaegerProvider } from '../tracing/jaeger-tracing.js';
+import { parseBoolean } from '../config.js';
+import { useMetrics } from './metrics.js';
+import { useRateLimit } from './rate-limit.js';
+import { buildArmorPlugins } from './graphql-armor.js';
+import { logger } from './logger.js';
+import { useRequestLogging, requestIdFor } from './request-logging.js';
 export { buildPlugins };
 async function buildPlugins() {
     const plugins = [];
+    plugins.push(useRequestLogging());
+    plugins.push(useRateLimit());
+    plugins.push(...buildArmorPlugins());
+    if (parseBoolean(process.env.ENABLE_METRICS)) {
+        plugins.push(useMetrics());
+    }
     plugins.push(useGraphQlJit());
-    if (process.env.ENABLE_LOGGING) {
-        const provider = await initJaegerProvider();
+    let provider;
+    if (parseBoolean(process.env.ENABLE_LOGGING)) {
+        provider = await initJaegerProvider();
         plugins.push(useOpenTelemetry({
             resolvers: true,
             variables: true,
             result: true,
         }, provider));
     }
-    if (!process.env.ENABLE_INTROSPECTION) {
+    if (!parseBoolean(process.env.ENABLE_INTROSPECTION)) {
         plugins.push(useDisableIntrospection());
     }
     plugins.push(useLogger({
-        logFn: (eventName, args) => {
+        logFn: (_eventName, args) => {
             if (args?.result?.errors) {
-                console.debug(eventName, inspect(args.args.contextValue.params, {
-                    showHidden: false,
-                    depth: null,
-                    colors: true,
-                }), inspect(args.result.errors, {
-                    showHidden: false,
-                    depth: null,
-                    colors: true,
-                }));
+                const request = args?.args?.contextValue?.request;
+                logger.error({
+                    requestId: request ? requestIdFor(request) : undefined,
+                    variables: args?.args?.variableValues,
+                    errors: args.result.errors.map((error) => ({
+                        message: error.message,
+                        path: error.path,
+                        locations: error.locations,
+                        stack: error.originalError?.stack ?? error.stack,
+                        code: error.originalError
+                            ?.code,
+                    })),
+                }, 'graphql execution errors');
             }
         },
     }));
-    return plugins;
+    return { plugins, provider };
 }
 //# sourceMappingURL=plugins.js.map

package/build/src/server/plugins.js.map

@@ -1 +1 @@
-{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../../src/server/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,KAAK,UAAU,YAAY;IAEzB,MAAM,OAAO,GAAU,EAAE,CAAC;IAC1B,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAE9B,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CACV,gBAAgB,CACd;YACE,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;SACb,EACD,QAAQ,CACT,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;QACR,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBACzB,OAAO,CAAC,KAAK,CACX,SAAS,EACT,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;oBACrC,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;iBACb,CAAC,EACF,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;oBAC1B,UAAU,EAAE,KAAK;oBACjB,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,IAAI;iBACb,CAAC,CACH,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC"}
+{"version":3,"file":"plugins.js","sourceRoot":"","sources":["../../../src/server/plugins.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAI1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEvE,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,KAAK,UAAU,YAAY;IAEzB,MAAM,OAAO,GAAU,EAAE,CAAC;IAG1B,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAIlC,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAI7B,OAAO,CAAC,IAAI,CAAC,GAAG,iBAAiB,EAAE,CAAC,CAAC;IAErC,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAE7C,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7B,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAG9B,IAAI,QAAyC,CAAC;IAC9C,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QAC7C,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;QACtC,OAAO,CAAC,IAAI,CACV,gBAAgB,CACd;YACE,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,IAAI;SACb,EAID,QAA6D,CAC9D,CACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,CAAC,IAAI,CACV,SAAS,CAAC;QACR,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,EAAE,EAAE;YAC1B,IAAI,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,OAE7B,CAAC;gBACd,MAAM,CAAC,KAAK,CACV;oBACE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;oBACtD,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc;oBACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAmB,EAAE,EAAE,CAAC,CAAC;wBACvD,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,IAAI,KAAK,CAAC,KAAK;wBAChD,IAAI,EAAG,KAAK,CAAC,aAA+C;4BAC1D,EAAE,IAAI;qBACT,CAAC,CAAC;iBACJ,EACD,0BAA0B,CAC3B,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC,CACH,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/build/src/server/rate-limit.js

@@ -0,0 +1,143 @@
+export { useRateLimit, createRateLimiter, resolveRateLimitConfig, RATE_LIMIT_DEFAULTS, };
+const EXEMPT_PATHS = new Set(['/healthcheck', '/readiness']);
+const RATE_LIMIT_DEFAULTS = {
+    max: 600,
+    windowMs: 60_000,
+    trustProxy: 0,
+    trustProxyConfigured: false,
+};
+function intFromEnv(value, fallback) {
+    if (value === undefined || value.trim() === '')
+        return fallback;
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 0)
+        return fallback;
+    return parsed;
+}
+function hopsFromEnv(value) {
+    if (value === undefined || value.trim() === '')
+        return undefined;
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed < 0)
+        return undefined;
+    return parsed;
+}
+function resolveRateLimitConfig(env = process.env) {
+    const hops = hopsFromEnv(env.TRUST_PROXY);
+    return {
+        max: intFromEnv(env.RATE_LIMIT_MAX, RATE_LIMIT_DEFAULTS.max),
+        windowMs: Math.max(1, intFromEnv(env.RATE_LIMIT_WINDOW_MS, RATE_LIMIT_DEFAULTS.windowMs)),
+        trustProxy: hops ?? RATE_LIMIT_DEFAULTS.trustProxy,
+        trustProxyConfigured: hops !== undefined,
+    };
+}
+function createRateLimiter(config, now = Date.now) {
+    const buckets = new Map();
+    function check(id) {
+        const time = now();
+        let bucket = buckets.get(id);
+        if (!bucket || time >= bucket.resetAt) {
+            bucket = { count: 0, resetAt: time + config.windowMs };
+            buckets.set(id, bucket);
+        }
+        bucket.count += 1;
+        return {
+            allowed: bucket.count <= config.max,
+            limit: config.max,
+            remaining: Math.max(0, config.max - bucket.count),
+            resetAt: bucket.resetAt,
+        };
+    }
+    function prune() {
+        const time = now();
+        for (const [id, bucket] of buckets) {
+            if (time >= bucket.resetAt)
+                buckets.delete(id);
+        }
+    }
+    return { check, prune, size: () => buckets.size };
+}
+function socketAddress(serverContext) {
+    const ctx = serverContext;
+    return ctx?.req?.socket?.remoteAddress ?? ctx?.socket?.remoteAddress ?? 'unknown';
+}
+function clientId(request, serverContext, trustProxy) {
+    if (trustProxy <= 0)
+        return socketAddress(serverContext);
+    const forwarded = request.headers
+        .get('x-forwarded-for')
+        ?.split(',')
+        .map((part) => part.trim())
+        .filter(Boolean);
+    if (forwarded?.length) {
+        const client = forwarded[forwarded.length - trustProxy];
+        if (client)
+            return client;
+    }
+    const realIp = request.headers.get('x-real-ip')?.trim();
+    if (realIp)
+        return realIp;
+    return socketAddress(serverContext);
+}
+function useRateLimit(env = process.env, warn = console.warn) {
+    const config = resolveRateLimitConfig(env);
+    if (config.max <= 0)
+        return {};
+    if (!config.trustProxyConfigured) {
+        warn('[rate-limit] TRUST_PROXY is not set — rate limiting is DISABLED. No ' +
+            'default is safe: keying on the socket address behind a load balancer ' +
+            'puts every client in one bucket, and trusting X-Forwarded-For without ' +
+            'a hop count lets any caller bypass the limit. Set TRUST_PROXY=0 for ' +
+            'a directly-exposed server, or to the number of proxy hops in front of ' +
+            'this API. NOTE: a GCP external Application Load Balancer appends TWO ' +
+            'entries (client IP, then forwarding-rule IP), so a bare GCP LB is 2, ' +
+            'plus 1 per extra in-cluster proxy. Set RATE_LIMIT_MAX=0 to silence this.');
+        return {};
+    }
+    const limiter = createRateLimiter(config);
+    let warnedAboutProxy = config.trustProxy > 0;
+    const warnIfProxied = (request) => {
+        const chain = request.headers.get('x-forwarded-for');
+        if (warnedAboutProxy || chain === null)
+            return;
+        warnedAboutProxy = true;
+        const hops = chain.split(',').filter((part) => part.trim()).length;
+        warn('[rate-limit] TRUST_PROXY=0 but requests carry X-Forwarded-For — every ' +
+            'client behind the proxy shares one rate-limit bucket. Set TRUST_PROXY ' +
+            `to the number of proxy hops in front of this API (observed chain ` +
+            `length: ${hops}) to bucket clients individually.`);
+    };
+    const sweep = setInterval(() => limiter.prune(), config.windowMs);
+    if (typeof sweep.unref === 'function')
+        sweep.unref();
+    return {
+        onRequest({ request, serverContext, url, endResponse, fetchAPI }) {
+            if (EXEMPT_PATHS.has(url.pathname))
+                return;
+            if (request.method === 'OPTIONS')
+                return;
+            warnIfProxied(request);
+            const result = limiter.check(clientId(request, serverContext, config.trustProxy));
+            if (result.allowed)
+                return;
+            const retryAfter = Math.max(1, Math.ceil((result.resetAt - Date.now()) / 1000));
+            endResponse(new fetchAPI.Response(JSON.stringify({
+                errors: [
+                    {
+                        message: 'Too many requests. Please retry later.',
+                        extensions: { code: 'RATE_LIMITED' },
+                    },
+                ],
+            }), {
+                status: 429,
+                headers: {
+                    'content-type': 'application/json',
+                    'retry-after': String(retryAfter),
+                    'x-ratelimit-limit': String(result.limit),
+                    'x-ratelimit-remaining': String(result.remaining),
+                },
+            }));
+        },
+    };
+}
+//# sourceMappingURL=rate-limit.js.map

package/build/src/server/rate-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rate-limit.js","sourceRoot":"","sources":["../../../src/server/rate-limit.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,sBAAsB,EACtB,mBAAmB,GACpB,CAAC;AAIF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AA+B7D,MAAM,mBAAmB,GAAoB;IAC3C,GAAG,EAAE,GAAG;IACR,QAAQ,EAAE,MAAM;IAChB,UAAU,EAAE,CAAC;IACb,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AASF,SAAS,UAAU,CAAC,KAAyB,EAAE,QAAgB;IAC7D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,QAAQ,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7D,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,sBAAsB,CAAC,MAAiB,OAAO,CAAC,GAAG;IAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,UAAU,CAAC,GAAG,CAAC,cAAc,EAAE,mBAAmB,CAAC,GAAG,CAAC;QAC5D,QAAQ,EAAE,IAAI,CAAC,GAAG,CAChB,CAAC,EACD,UAAU,CAAC,GAAG,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CACnE;QACD,UAAU,EAAE,IAAI,IAAI,mBAAmB,CAAC,UAAU;QAClD,oBAAoB,EAAE,IAAI,KAAK,SAAS;KACzC,CAAC;AACJ,CAAC;AAcD,SAAS,iBAAiB,CACxB,MAAiD,EACjD,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8C,CAAC;IAEtE,SAAS,KAAK,CAAC,EAAU;QACvB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,IAAI,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1B,CAAC;QACD,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,GAAG;YACnC,KAAK,EAAE,MAAM,CAAC,GAAG;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;YACjD,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC;IACJ,CAAC;IAGD,SAAS,KAAK;QACZ,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACnC,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AAOD,SAAS,aAAa,CAAC,aAAsB;IAC3C,MAAM,GAAG,GAAG,aAAgC,CAAC;IAC7C,OAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,IAAI,GAAG,EAAE,MAAM,EAAE,aAAa,IAAI,SAAS,CAAC;AACpF,CAAC;AAiBD,SAAS,QAAQ,CACf,OAAgB,EAChB,aAAsB,EACtB,UAAkB;IAElB,IAAI,UAAU,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC,aAAa,CAAC,CAAC;IAEzD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO;SAC9B,GAAG,CAAC,iBAAiB,CAAC;QACvB,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;QAItB,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC;QACxD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAID,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC;IACxD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,OAAO,aAAa,CAAC,aAAa,CAAC,CAAC;AACtC,CAAC;AAMD,SAAS,YAAY,CACnB,MAAiB,OAAO,CAAC,GAAG,EAC5B,OAAkC,OAAO,CAAC,IAAI;IAE9C,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAE/B,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACjC,IAAI,CACF,sEAAsE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,uEAAuE;YACvE,0EAA0E,CAC7E,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAM1C,IAAI,gBAAgB,GAAG,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,CAAC,OAAgB,EAAE,EAAE;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,gBAAgB,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC/C,gBAAgB,GAAG,IAAI,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACnE,IAAI,CACF,wEAAwE;YACtE,wEAAwE;YACxE,mEAAmE;YACnE,WAAW,IAAI,mCAAmC,CACrD,CAAC;IACJ,CAAC,CAAC;IAGF,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClE,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU;QAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAErD,OAAO;QACL,SAAS,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE;YAC9D,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,OAAO;YAI3C,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO;YACzC,aAAa,CAAC,OAAO,CAAC,CAAC;YAEvB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAC1B,QAAQ,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,CACpD,CAAC;YACF,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAE3B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;YAChF,WAAW,CACT,IAAI,QAAQ,CAAC,QAAQ,CACnB,IAAI,CAAC,SAAS,CAAC;gBACb,MAAM,EAAE;oBACN;wBACE,OAAO,EAAE,wCAAwC;wBACjD,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE;qBACrC;iBACF;aACF,CAAC,EACF;gBACE,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC;oBACjC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;oBACzC,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;iBAClD;aACF,CACF,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/src/server/readiness.js

@@ -0,0 +1,45 @@
+export { useReadiness, READINESS_PATH };
+const READINESS_PATH = '/readiness';
+const DEFAULT_PING_TIMEOUT_MS = 2000;
+function pingTimeoutFromEnv(value) {
+    const parsed = Number(value);
+    return Number.isFinite(parsed) && parsed > 0
+        ? parsed
+        : DEFAULT_PING_TIMEOUT_MS;
+}
+async function pingWithin(db, timeoutMs) {
+    let timer;
+    const timedOut = new Promise((resolve) => {
+        timer = setTimeout(() => {
+            console.warn(`[readiness] database ping exceeded ${timeoutMs}ms`);
+            resolve(false);
+        }, timeoutMs);
+    });
+    const answered = Promise.resolve()
+        .then(() => db.ping())
+        .catch(() => false);
+    try {
+        return await Promise.race([answered, timedOut]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+function useReadiness(db, timeoutMs = pingTimeoutFromEnv(process.env.READINESS_PING_TIMEOUT_MS)) {
+    return {
+        async onRequest({ url, endResponse, fetchAPI }) {
+            if (url.pathname.replace(/\/$/, '') !== READINESS_PATH)
+                return;
+            const ready = await pingWithin(db, timeoutMs);
+            endResponse(new fetchAPI.Response(JSON.stringify({ status: ready ? 'ready' : 'not ready' }), {
+                status: ready ? 200 : 503,
+                headers: {
+                    'content-type': 'application/json',
+                    'cache-control': 'no-store',
+                },
+            }));
+        },
+    };
+}
+//# sourceMappingURL=readiness.js.map

package/build/src/server/readiness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/server/readiness.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AAQxC,MAAM,cAAc,GAAG,YAAY,CAAC;AAMpC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,SAAS,kBAAkB,CAAC,KAAyB;IACnD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC;QAC1C,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,uBAAuB,CAAC;AAC9B,CAAC;AAGD,KAAK,UAAU,UAAU,CACvB,EAAiC,EACjC,SAAiB;IAEjB,IAAI,KAAgD,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;QAChD,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YACtB,OAAO,CAAC,IAAI,CAAC,sCAAsC,SAAS,IAAI,CAAC,CAAC;YAClE,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,EAAE,SAAS,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE;SAC/B,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAOD,SAAS,YAAY,CACnB,EAAiC,EACjC,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAErE,OAAO;QACL,KAAK,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE;YAC5C,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,cAAc;gBAAE,OAAO;YAE/D,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9C,WAAW,CACT,IAAI,QAAQ,CAAC,QAAQ,CACnB,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,EACzD;gBACE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACzB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,eAAe,EAAE,UAAU;iBAC5B;aACF,CACF,CACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/src/server/request-logging.js

@@ -0,0 +1,58 @@
+import { randomUUID } from 'node:crypto';
+import { logger as defaultLogger } from './logger.js';
+export { useRequestLogging, requestIdFor };
+const QUIET_PATHS = new Set(['/healthcheck', '/readiness']);
+const MAX_REQUEST_ID_LENGTH = 128;
+const UNSAFE_REQUEST_ID_CHARS = /[^\x20-\x7e]|["\\]/g;
+const requestIds = new WeakMap();
+function requestIdFor(request) {
+    return requestIds.get(request);
+}
+function sanitizeRequestId(raw) {
+    if (!raw)
+        return randomUUID();
+    const cleaned = raw
+        .replace(UNSAFE_REQUEST_ID_CHARS, '')
+        .slice(0, MAX_REQUEST_ID_LENGTH)
+        .trim();
+    return cleaned.length > 0 ? cleaned : randomUUID();
+}
+function pathOf(rawUrl) {
+    try {
+        return new URL(rawUrl).pathname;
+    }
+    catch {
+        return rawUrl;
+    }
+}
+function useRequestLogging(log = defaultLogger) {
+    const startTimes = new WeakMap();
+    return {
+        onRequest({ request }) {
+            const id = sanitizeRequestId(request.headers.get('x-request-id'));
+            requestIds.set(request, id);
+            startTimes.set(request, Date.now());
+        },
+        onResponse({ request, response }) {
+            const path = pathOf(request.url);
+            if (QUIET_PATHS.has(path))
+                return;
+            let id = requestIds.get(request);
+            let start = startTimes.get(request);
+            if (id === undefined || start === undefined) {
+                id = sanitizeRequestId(request.headers.get('x-request-id'));
+                start = Date.now();
+                requestIds.set(request, id);
+                startTimes.set(request, start);
+            }
+            log.info({
+                requestId: id,
+                method: request.method,
+                path,
+                status: response.status,
+                durationMs: Date.now() - start,
+            }, 'request completed');
+        },
+    };
+}
+//# sourceMappingURL=request-logging.js.map

package/build/src/server/request-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-logging.js","sourceRoot":"","sources":["../../../src/server/request-logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,aAAa,CAAC;AAGtD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC;AAG3C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC,CAAC;AAE5D,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAOtD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAmB,CAAC;AAElD,SAAS,YAAY,CAAC,OAAgB;IACpC,OAAO,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAkB;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,UAAU,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;SACpC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;SAC/B,IAAI,EAAE,CAAC;IACV,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAQD,SAAS,iBAAiB,CAAC,MAAc,aAAa;IACpD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAmB,CAAC;IAClD,OAAO;QACL,SAAS,CAAC,EAAE,OAAO,EAAE;YACnB,MAAM,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;YAClE,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC5B,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,UAAU,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;YAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO;YAElC,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjC,IAAI,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,EAAE,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAG5C,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC5D,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBACnB,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC5B,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,GAAG,CAAC,IAAI,CACN;gBACE,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,EACD,mBAAmB,CACpB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/src/server/server.js

@@ -1,25 +1,50 @@
+import { inspect } from 'node:util';
 import { createYoga } from 'graphql-yoga';
 import { createServer } from 'http';
 import { schema } from '../resolvers.js';
-export { BLOCK_RANGE_SIZE, ENABLE_BLOCK_TRANSACTION_DETAILS, buildServer };
-const LOG_LEVEL = process.env.LOG_LEVEL || 'info';
+import { parseBoolean } from '../config.js';
+import { useReadiness } from './readiness.js';
+import { resolveCorsOptions, warnIfCorsDisabled } from './cors.js';
+import { logger, resolveYogaLogLevel } from './logger.js';
+export { BLOCK_RANGE_SIZE, ZKAPP_COMMAND_RANGE_SIZE, ZKAPP_COMMAND_ACCOUNT_UPDATE_LIMIT, ENABLE_BLOCK_TRANSACTION_DETAILS, ENABLE_ZKAPP_COMMANDS_QUERY, buildYoga, buildServer, };
 const BLOCK_RANGE_SIZE = Number(process.env.BLOCK_RANGE_SIZE) || 10000;
-const ENABLE_BLOCK_TRANSACTION_DETAILS = process.env.ENABLE_BLOCK_TRANSACTION_DETAILS === 'true';
-function buildServer(context, plugins) {
-    const yoga = createYoga({
+const ENABLE_BLOCK_TRANSACTION_DETAILS = parseBoolean(process.env.ENABLE_BLOCK_TRANSACTION_DETAILS);
+const ENABLE_ZKAPP_COMMANDS_QUERY = parseBoolean(process.env.ENABLE_ZKAPP_COMMANDS_QUERY);
+const ZKAPP_COMMAND_RANGE_SIZE = Number(process.env.ZKAPP_COMMAND_RANGE_SIZE) || 1000;
+const ZKAPP_COMMAND_ACCOUNT_UPDATE_LIMIT = Number(process.env.ZKAPP_COMMAND_ACCOUNT_UPDATE_LIMIT) || 5000;
+const YOGA_LOG_LEVEL = resolveYogaLogLevel();
+const yogaLog = (level) => (...args) => {
+    const err = args.find((arg) => arg instanceof Error);
+    const msg = args
+        .filter((arg) => !(arg instanceof Error))
+        .map((arg) => typeof arg === 'string' ? arg : inspect(arg, { depth: 3 }))
+        .join(' ');
+    logger[level](err ? { err } : {}, msg || 'yoga');
+};
+function buildYoga(context, plugins) {
+    const cors = resolveCorsOptions();
+    return createYoga({
         schema,
-        logging: LOG_LEVEL,
+        logging: YOGA_LOG_LEVEL === false
+            ? false
+            : {
+                debug: yogaLog('debug'),
+                info: yogaLog('info'),
+                warn: yogaLog('warn'),
+                error: yogaLog('error'),
+            },
         graphqlEndpoint: '/',
         landingPage: false,
         healthCheckEndpoint: '/healthcheck',
-        graphiql: process.env.ENABLE_GRAPHIQL === 'true' ? true : false,
-        plugins,
-        cors: {
-            origin: process.env.CORS_ORIGIN ?? '*',
-            methods: ['GET', 'POST'],
-        },
+        graphiql: parseBoolean(process.env.ENABLE_GRAPHIQL),
+        maskedErrors: { isDev: false },
+        plugins: [useReadiness(context.db_client), ...plugins],
+        cors,
         context,
     });
-    return createServer(yoga);
+}
+function buildServer(context, plugins) {
+    warnIfCorsDisabled(resolveCorsOptions());
+    return createServer(buildYoga(context, plugins));
 }
 //# sourceMappingURL=server.js.map