@obsunified/collector 2.2.1 → 2.3.0

package/dist/{ingest-auth-C5-8Mly5.d.ts → ingest-auth-BmP5-f96.d.ts}

@@ -135,6 +135,37 @@ interface CollectorEnv {
     /** @deprecated Use DASHBOARD_PASSWORD instead */
     TELEMETRY_QUERY_TOKEN?: string;
 }
+/**
+ * Optional string settings on `CollectorEnv` that host adapters (such as
+ * `apps/collector-node`) forward directly from the process environment after
+ * trimming whitespace and coercing blank strings to `undefined`.
+ */
+declare const COLLECTOR_OPTIONAL_STRING_ENV_KEYS: readonly ["RETENTION_HOURS", "ANTHROPIC_API_KEY", "OPENAI_API_KEY", "OPENAI_BASE_URL", "NARRATIVE_MODEL", "NARRATIVE_BUDGET_PER_HOUR", "ALERT_WEBHOOK_ALLOW_PRIVATE", "MAX_BODY_BYTES", "TELEMETRY_REDACT_FIELDS", "OBS_PAYLOAD_CAPTURE_DEFAULT"];
+/**
+ * String settings on `CollectorEnv` that require explicit host handling (e.g.
+ * required auth secrets, CORS origin parsing, Worker-only self-instrumentation
+ * vars, or deprecated Worker tokens) and must not be blindly forwarded by the
+ * generic optional-env loop.
+ */
+declare const COLLECTOR_HOST_MANAGED_ENV_KEYS: readonly ["INGEST_KEY", "DASHBOARD_PASSWORD", "DASHBOARD_TOKEN", "ALLOWED_ORIGINS", "ALLOW_UNAUTHENTICATED", "OBS_DASHBOARD_INGEST_KEY", "OBS_COLLECTOR_SELF_URL", "OBS_SELF_AWAIT_EXPORTS", "TELEMETRY_INGEST_TOKEN", "USAGE_INGEST_TOKEN", "TELEMETRY_QUERY_TOKEN"];
+declare const COLLECTOR_STRING_ENV_MANIFEST: {
+    readonly forwarded: readonly ["RETENTION_HOURS", "ANTHROPIC_API_KEY", "OPENAI_API_KEY", "OPENAI_BASE_URL", "NARRATIVE_MODEL", "NARRATIVE_BUDGET_PER_HOUR", "ALERT_WEBHOOK_ALLOW_PRIVATE", "MAX_BODY_BYTES", "TELEMETRY_REDACT_FIELDS", "OBS_PAYLOAD_CAPTURE_DEFAULT"];
+    readonly hostManaged: readonly ["INGEST_KEY", "DASHBOARD_PASSWORD", "DASHBOARD_TOKEN", "ALLOWED_ORIGINS", "ALLOW_UNAUTHENTICATED", "OBS_DASHBOARD_INGEST_KEY", "OBS_COLLECTOR_SELF_URL", "OBS_SELF_AWAIT_EXPORTS", "TELEMETRY_INGEST_TOKEN", "USAGE_INGEST_TOKEN", "TELEMETRY_QUERY_TOKEN"];
+};
+type CollectorOptionalStringEnvKey = (typeof COLLECTOR_OPTIONAL_STRING_ENV_KEYS)[number];
+type CollectorHostManagedEnvKey = (typeof COLLECTOR_HOST_MANAGED_ENV_KEYS)[number];
+type CollectorManifestStringEnvKey = CollectorOptionalStringEnvKey | CollectorHostManagedEnvKey;
+type CollectorObjectBindingKey = "DB" | "REPLAYS_BUCKET" | "PROFILES_BUCKET" | "TAIL_HUB";
+type CollectorStringEnvKey = Exclude<keyof CollectorEnv, CollectorObjectBindingKey>;
+/**
+ * Verifies that every string key in `declaredKeys` is categorized in either
+ * `COLLECTOR_OPTIONAL_STRING_ENV_KEYS` or `COLLECTOR_HOST_MANAGED_ENV_KEYS`
+ * without overlap. Throws if any key is uncategorized or duplicated.
+ */
+declare function assertCollectorEnvManifestCompleteness(declaredKeys: readonly string[], manifest?: {
+    readonly forwarded: readonly string[];
+    readonly hostManaged: readonly string[];
+}): void;
 interface CollectorRouteContext {
     hono: Context<{
         Bindings: CollectorEnv;
@@ -171,4 +202,4 @@ declare function createIngestAuth(config?: {
     };
 }>;
 
-export { type ChildSpanRunner as C, type Logger as L, type CollectorApp as a, type CollectorEnv as b, type CollectorRouteContext as c, consoleLogger as d, createIngestAuth as e, resetIngestAuthCache as r };
+export { COLLECTOR_HOST_MANAGED_ENV_KEYS as C, type Logger as L, COLLECTOR_OPTIONAL_STRING_ENV_KEYS as a, COLLECTOR_STRING_ENV_MANIFEST as b, type ChildSpanRunner as c, type CollectorApp as d, type CollectorEnv as e, type CollectorHostManagedEnvKey as f, type CollectorManifestStringEnvKey as g, type CollectorObjectBindingKey as h, type CollectorOptionalStringEnvKey as i, type CollectorRouteContext as j, type CollectorStringEnvKey as k, assertCollectorEnvManifestCompleteness as l, consoleLogger as m, createIngestAuth as n, resetIngestAuthCache as r };

package/dist/{openai-GSJZGFGL.js → openai-VDKVVZAV.js}

@@ -1,7 +1,7 @@
 import {
   LlmCallError,
   askEvidenceReferences
-} from "./chunk-ZSF5XP3B.js";
+} from "./chunk-RASSTGNB.js";
 
 // src/lib/openai.ts
 import { EVIDENCE_REFERENCE_CONTRACT } from "@obsunified/types";
@@ -381,4 +381,4 @@ export {
   generateNarrativeOpenAI,
   runAskOpenAI
 };
-//# sourceMappingURL=openai-GSJZGFGL.js.map
+//# sourceMappingURL=openai-VDKVVZAV.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@obsunified/collector",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "description": "Plugin-based observability collector runtime with pluggable SQL/blob storage.",
   "license": "MIT",
   "repository": {
@@ -32,14 +32,13 @@
   "files": [
     "dist",
     "src",
-    "migrations",
     "README.md"
   ],
   "sideEffects": false,
   "dependencies": {
     "@bufbuild/protobuf": "^2.11.0",
     "@obsunified/pprof-decoder": "2.0.2",
-    "@obsunified/types": "2.2.0"
+    "@obsunified/types": "2.3.0"
   },
   "peerDependencies": {
     "hono": "^4.7.0",
@@ -67,6 +66,8 @@
     "build": "tsup",
     "type-check": "tsc --noEmit",
     "test": "vitest run --passWithNoTests",
+    "check:migrations": "vitest run src/migrations/parity.test.ts",
+    "check:db-parity": "node scripts/check-db-parity.mjs",
     "bench": "vitest bench --run",
     "codegen": "PATH=\"$PWD/node_modules/.bin:$PATH\" buf generate"
   }