@open-mercato/telemetry 0.6.7-develop.6834.1.e76f4b8cbc

package/dist/index.js

@@ -0,0 +1,21 @@
+import { withSpan, currentSpan, setAttributes } from "./facade/tracer.js";
+import { counter, histogram, gauge } from "./facade/meter.js";
+import { reportError } from "./facade/report-error.js";
+import { captureTraceContext, continueTrace } from "./facade/propagation.js";
+import { initTelemetry, shutdownTelemetry } from "./init.js";
+import { registerProvider } from "./provider/registry.js";
+export {
+  captureTraceContext,
+  continueTrace,
+  counter,
+  currentSpan,
+  gauge,
+  histogram,
+  initTelemetry,
+  registerProvider,
+  reportError,
+  setAttributes,
+  shutdownTelemetry,
+  withSpan
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts"],
+  "sourcesContent": ["/**\n * Public facade for the telemetry package. Import from `@open-mercato/telemetry`.\n *\n * Vendor-neutral by construction \u2014 nothing here imports `@opentelemetry/*`;\n * only `provider/otlp-provider.ts` does, and it is loaded dynamically.\n */\nexport { withSpan, currentSpan, setAttributes } from './facade/tracer'\nexport { counter, histogram, gauge } from './facade/meter'\nexport { reportError } from './facade/report-error'\nexport type { ReportErrorContext } from './facade/report-error'\nexport { captureTraceContext, continueTrace } from './facade/propagation'\nexport { initTelemetry, shutdownTelemetry } from './init'\nexport { registerProvider } from './provider/registry'\n\nexport type {\n  Span,\n  SpanKind,\n  SpanOptions,\n  TelemetryProvider,\n  TelemetrySignal,\n  TelemetryBackendName,\n  LogRecord,\n  LogLevel,\n  MetricKind,\n  MetricPoint,\n  Attributes,\n  AttributeValue,\n  TraceCarrier,\n  TraceContext,\n} from './types'\n"],
+  "mappings": "AAMA,SAAS,UAAU,aAAa,qBAAqB;AACrD,SAAS,SAAS,WAAW,aAAa;AAC1C,SAAS,mBAAmB;AAE5B,SAAS,qBAAqB,qBAAqB;AACnD,SAAS,eAAe,yBAAyB;AACjD,SAAS,wBAAwB;",
+  "names": []
+}

package/dist/init.js

@@ -0,0 +1,98 @@
+import { isOtlpBackend, readTelemetryEnv, resetTelemetryEnvCache } from "./env.js";
+import { ConsoleProvider } from "./provider/console-provider.js";
+import {
+  getRegisteredProvider,
+  clearActiveProvider,
+  setActiveProvider
+} from "./provider/registry.js";
+import {
+  registerTelemetryRuntime
+} from "@open-mercato/shared/lib/telemetry/runtime";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { registerTelemetryLogger } from "./facade/logger-bridge.js";
+import { captureTraceContext, continueTrace } from "./facade/propagation.js";
+import { recordHttpDuration } from "./facade/http.js";
+import { reportError } from "./facade/report-error.js";
+let initialized = false;
+let activeProvider;
+let disposeLoggerExtension;
+let disposeRuntime;
+const logger = createLogger("telemetry");
+async function initTelemetry() {
+  if (initialized) return;
+  resetTelemetryEnvCache();
+  const env = readTelemetryEnv();
+  const configuredBackend = process.env.TELEMETRY_BACKEND?.trim().toLowerCase() ?? "";
+  const registeredProvider = configuredBackend && configuredBackend !== "noop" ? getRegisteredProvider(configuredBackend) : void 0;
+  if (!env.enabled && !registeredProvider) return;
+  const provider = registeredProvider ?? await resolveProvider(env.backend);
+  if (!provider) {
+    logger.warn("Telemetry backend is unsupported; telemetry remains disabled", {
+      backend: configuredBackend || env.backend
+    });
+    return;
+  }
+  await provider.start();
+  setActiveProvider(provider);
+  activeProvider = provider;
+  disposeLoggerExtension = registerTelemetryLogger(provider);
+  disposeRuntime = registerTelemetryRuntime(createRuntime(provider));
+  initialized = true;
+  logger.info("Telemetry initialized", {
+    backend: provider.name,
+    samplingRatio: env.samplingRatio
+  });
+}
+async function resolveProvider(backend) {
+  const registered = getRegisteredProvider(backend);
+  if (registered) return registered;
+  if (backend === "console") return new ConsoleProvider();
+  if (isOtlpBackend(backend)) return await loadOtlpProvider(backend);
+  return void 0;
+}
+async function loadOtlpProvider(backend) {
+  try {
+    const mod = await import("./provider/otlp-provider.js");
+    return new mod.OtlpProvider({}, backend);
+  } catch (err) {
+    logger.warn("OTLP provider unavailable; falling back to console", {
+      reason: err instanceof Error ? err.message : String(err)
+    });
+    return new ConsoleProvider();
+  }
+}
+async function shutdownTelemetry() {
+  const provider = activeProvider;
+  activeProvider = void 0;
+  initialized = false;
+  disposeLoggerExtension?.();
+  disposeLoggerExtension = void 0;
+  disposeRuntime?.();
+  disposeRuntime = void 0;
+  clearActiveProvider();
+  if (provider) await provider.shutdown();
+}
+function createRuntime(provider) {
+  return {
+    canUseGlobalTracePropagation: () => isOtlpBackend(provider.name) && readTelemetryEnv().trustInboundTrace,
+    captureTraceContext,
+    continueTrace: (carrier, name, fn, options) => continueTrace(carrier, name, () => fn(), options),
+    recordHttpDuration,
+    reportError,
+    shutdown: shutdownTelemetry
+  };
+}
+function resetTelemetryInit() {
+  initialized = false;
+  activeProvider = void 0;
+  disposeLoggerExtension?.();
+  disposeLoggerExtension = void 0;
+  disposeRuntime?.();
+  disposeRuntime = void 0;
+}
+export {
+  initTelemetry,
+  resetTelemetryInit,
+  shutdownTelemetry
+};
+//# sourceMappingURL=init.js.map

package/dist/init.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/init.ts"],
+  "sourcesContent": ["import type { TelemetryBackendName, TelemetryProvider } from './types'\nimport { isOtlpBackend, readTelemetryEnv, resetTelemetryEnvCache } from './env'\nimport { ConsoleProvider } from './provider/console-provider'\nimport {\n  getRegisteredProvider,\n  clearActiveProvider,\n  setActiveProvider,\n} from './provider/registry'\nimport {\n  registerTelemetryRuntime,\n  type TelemetryRuntime,\n} from '@open-mercato/shared/lib/telemetry/runtime'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { registerTelemetryLogger } from './facade/logger-bridge'\nimport { captureTraceContext, continueTrace } from './facade/propagation'\nimport { recordHttpDuration } from './facade/http'\nimport { reportError } from './facade/report-error'\n\nlet initialized = false\nlet activeProvider: TelemetryProvider | undefined\nlet disposeLoggerExtension: (() => void) | undefined\nlet disposeRuntime: (() => void) | undefined\n\nconst logger = createLogger('telemetry')\n\n/**\n * One-shot bootstrap, invoked from `apps/mercato/instrumentation.ts` (web) and,\n * for cross-boundary propagation, from the queue/worker bootstrap. Resolves the\n * backend from `TELEMETRY_BACKEND`, starts it, and installs it as the active\n * provider. Idempotent and safe to call when telemetry is off (defaults to\n * no-op).\n */\nexport async function initTelemetry(): Promise<void> {\n  if (initialized) return\n\n  // Drop any env snapshot memoized BEFORE the host loaded its `.env` (the CLI\n  // binary imports this package before dotenv runs) so init resolves the backend\n  // from the actual, fully-loaded environment.\n  resetTelemetryEnvCache()\n  const env = readTelemetryEnv()\n  const configuredBackend = process.env.TELEMETRY_BACKEND?.trim().toLowerCase() ?? ''\n  const registeredProvider = configuredBackend && configuredBackend !== 'noop'\n    ? getRegisteredProvider(configuredBackend)\n    : undefined\n  // Explicit off is absolute: do not resolve providers, register hooks, or\n  // install process-wide bridges when the backend is unset/noop/unregistered.\n  if (!env.enabled && !registeredProvider) return\n\n  const provider = registeredProvider ?? await resolveProvider(env.backend)\n  if (!provider) {\n    logger.warn('Telemetry backend is unsupported; telemetry remains disabled', {\n      backend: configuredBackend || env.backend,\n    })\n    return\n  }\n\n  // Only flag initialized AFTER start() succeeds \u2014 a throw here must leave\n  // telemetry re-initializable, not stuck flagged-on with an unstarted provider.\n  await provider.start()\n  setActiveProvider(provider)\n  activeProvider = provider\n  disposeLoggerExtension = registerTelemetryLogger(provider)\n  disposeRuntime = registerTelemetryRuntime(createRuntime(provider))\n  initialized = true\n\n  logger.info('Telemetry initialized', {\n    backend: provider.name,\n    samplingRatio: env.samplingRatio,\n  })\n}\n\nasync function resolveProvider(backend: TelemetryBackendName): Promise<TelemetryProvider | undefined> {\n  const registered = getRegisteredProvider(backend)\n  if (registered) return registered\n\n  if (backend === 'console') return new ConsoleProvider()\n  // signoz | newrelic | otlp \u2014 same OTLP provider, vendor differs only by endpoint.\n  if (isOtlpBackend(backend)) return await loadOtlpProvider(backend)\n  return undefined\n}\n\n/**\n * Dynamically load the OTLP provider so `@opentelemetry/*` (optionalDependencies)\n * is imported only when an OTLP backend is selected. Falls back to console if\n * the OTEL packages are absent rather than crashing the app.\n */\nasync function loadOtlpProvider(backend: TelemetryBackendName): Promise<TelemetryProvider> {\n  try {\n    const mod = await import('./provider/otlp-provider')\n    return new mod.OtlpProvider({}, backend)\n  } catch (err) {\n    logger.warn('OTLP provider unavailable; falling back to console', {\n      reason: err instanceof Error ? err.message : String(err),\n    })\n    return new ConsoleProvider()\n  }\n}\n\n/** Flush + tear down the active backend (shutdown hook / `after()`). */\nexport async function shutdownTelemetry(): Promise<void> {\n  const provider = activeProvider\n  activeProvider = undefined\n  initialized = false\n  disposeLoggerExtension?.()\n  disposeLoggerExtension = undefined\n  disposeRuntime?.()\n  disposeRuntime = undefined\n  clearActiveProvider()\n  if (provider) await provider.shutdown()\n}\n\nfunction createRuntime(provider: TelemetryProvider): TelemetryRuntime {\n  return {\n    canUseGlobalTracePropagation: () =>\n      isOtlpBackend(provider.name as TelemetryBackendName)\n      && readTelemetryEnv().trustInboundTrace,\n    captureTraceContext,\n    continueTrace: (carrier, name, fn, options) =>\n      continueTrace(carrier, name, () => fn(), options),\n    recordHttpDuration,\n    reportError,\n    shutdown: shutdownTelemetry,\n  }\n}\n\n/** Test-only: allow re-init in jest. */\nexport function resetTelemetryInit(): void {\n  initialized = false\n  activeProvider = undefined\n  disposeLoggerExtension?.()\n  disposeLoggerExtension = undefined\n  disposeRuntime?.()\n  disposeRuntime = undefined\n}\n"],
+  "mappings": "AACA,SAAS,eAAe,kBAAkB,8BAA8B;AACxE,SAAS,uBAAuB;AAChC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,OAEK;AACP,SAAS,oBAAoB;AAC7B,SAAS,+BAA+B;AACxC,SAAS,qBAAqB,qBAAqB;AACnD,SAAS,0BAA0B;AACnC,SAAS,mBAAmB;AAE5B,IAAI,cAAc;AAClB,IAAI;AACJ,IAAI;AACJ,IAAI;AAEJ,MAAM,SAAS,aAAa,WAAW;AASvC,eAAsB,gBAA+B;AACnD,MAAI,YAAa;AAKjB,yBAAuB;AACvB,QAAM,MAAM,iBAAiB;AAC7B,QAAM,oBAAoB,QAAQ,IAAI,mBAAmB,KAAK,EAAE,YAAY,KAAK;AACjF,QAAM,qBAAqB,qBAAqB,sBAAsB,SAClE,sBAAsB,iBAAiB,IACvC;AAGJ,MAAI,CAAC,IAAI,WAAW,CAAC,mBAAoB;AAEzC,QAAM,WAAW,sBAAsB,MAAM,gBAAgB,IAAI,OAAO;AACxE,MAAI,CAAC,UAAU;AACb,WAAO,KAAK,gEAAgE;AAAA,MAC1E,SAAS,qBAAqB,IAAI;AAAA,IACpC,CAAC;AACD;AAAA,EACF;AAIA,QAAM,SAAS,MAAM;AACrB,oBAAkB,QAAQ;AAC1B,mBAAiB;AACjB,2BAAyB,wBAAwB,QAAQ;AACzD,mBAAiB,yBAAyB,cAAc,QAAQ,CAAC;AACjE,gBAAc;AAEd,SAAO,KAAK,yBAAyB;AAAA,IACnC,SAAS,SAAS;AAAA,IAClB,eAAe,IAAI;AAAA,EACrB,CAAC;AACH;AAEA,eAAe,gBAAgB,SAAuE;AACpG,QAAM,aAAa,sBAAsB,OAAO;AAChD,MAAI,WAAY,QAAO;AAEvB,MAAI,YAAY,UAAW,QAAO,IAAI,gBAAgB;AAEtD,MAAI,cAAc,OAAO,EAAG,QAAO,MAAM,iBAAiB,OAAO;AACjE,SAAO;AACT;AAOA,eAAe,iBAAiB,SAA2D;AACzF,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,0BAA0B;AACnD,WAAO,IAAI,IAAI,aAAa,CAAC,GAAG,OAAO;AAAA,EACzC,SAAS,KAAK;AACZ,WAAO,KAAK,sDAAsD;AAAA,MAChE,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACzD,CAAC;AACD,WAAO,IAAI,gBAAgB;AAAA,EAC7B;AACF;AAGA,eAAsB,oBAAmC;AACvD,QAAM,WAAW;AACjB,mBAAiB;AACjB,gBAAc;AACd,2BAAyB;AACzB,2BAAyB;AACzB,mBAAiB;AACjB,mBAAiB;AACjB,sBAAoB;AACpB,MAAI,SAAU,OAAM,SAAS,SAAS;AACxC;AAEA,SAAS,cAAc,UAA+C;AACpE,SAAO;AAAA,IACL,8BAA8B,MAC5B,cAAc,SAAS,IAA4B,KAChD,iBAAiB,EAAE;AAAA,IACxB;AAAA,IACA,eAAe,CAAC,SAAS,MAAM,IAAI,YACjC,cAAc,SAAS,MAAM,MAAM,GAAG,GAAG,OAAO;AAAA,IAClD;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAGO,SAAS,qBAA2B;AACzC,gBAAc;AACd,mBAAiB;AACjB,2BAAyB;AACzB,2BAAyB;AACzB,mBAAiB;AACjB,mBAAiB;AACnB;",
+  "names": []
+}

package/dist/nextjs-config.js

@@ -0,0 +1,21 @@
+const telemetryServerExternalPackages = [
+  "@opentelemetry/api",
+  "@opentelemetry/api-logs",
+  "@opentelemetry/core",
+  "@opentelemetry/sdk-node",
+  "@opentelemetry/sdk-trace-node",
+  "@opentelemetry/sdk-logs",
+  "@opentelemetry/sdk-metrics",
+  "@opentelemetry/resources",
+  "@opentelemetry/semantic-conventions",
+  "@opentelemetry/instrumentation",
+  "@opentelemetry/instrumentation-pg",
+  "@opentelemetry/instrumentation-undici",
+  "@opentelemetry/exporter-trace-otlp-http",
+  "@opentelemetry/exporter-logs-otlp-http",
+  "@opentelemetry/exporter-metrics-otlp-http"
+];
+export {
+  telemetryServerExternalPackages
+};
+//# sourceMappingURL=nextjs-config.js.map

package/dist/nextjs-config.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/nextjs-config.ts"],
+  "sourcesContent": ["/**\n * OpenTelemetry packages that must remain real Node modules so runtime\n * instrumentations can patch their targets. This config-only entrypoint has no\n * telemetry runtime imports and is safe to evaluate from `next.config.ts`.\n */\nexport const telemetryServerExternalPackages = [\n  '@opentelemetry/api',\n  '@opentelemetry/api-logs',\n  '@opentelemetry/core',\n  '@opentelemetry/sdk-node',\n  '@opentelemetry/sdk-trace-node',\n  '@opentelemetry/sdk-logs',\n  '@opentelemetry/sdk-metrics',\n  '@opentelemetry/resources',\n  '@opentelemetry/semantic-conventions',\n  '@opentelemetry/instrumentation',\n  '@opentelemetry/instrumentation-pg',\n  '@opentelemetry/instrumentation-undici',\n  '@opentelemetry/exporter-trace-otlp-http',\n  '@opentelemetry/exporter-logs-otlp-http',\n  '@opentelemetry/exporter-metrics-otlp-http',\n] as const\n"],
+  "mappings": "AAKO,MAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;",
+  "names": []
+}

package/dist/nextjs.js

@@ -0,0 +1,30 @@
+import { isTelemetryBackendEnabled } from "@open-mercato/shared/lib/telemetry/runtime";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { telemetryServerExternalPackages } from "./nextjs-config.js";
+import { recordHttpDuration } from "./facade/http.js";
+const logger = createLogger("telemetry");
+async function registerTelemetryForNextjs() {
+  if (process.env.NEXT_RUNTIME && process.env.NEXT_RUNTIME !== "nodejs") return;
+  if (!isTelemetryBackendEnabled()) return;
+  const { initTelemetry, shutdownTelemetry } = await import("./init.js");
+  try {
+    await initTelemetry();
+  } catch (error) {
+    logger.warn("Init from Next.js instrumentation failed", { err: error });
+    return;
+  }
+  const flush = (signal) => {
+    void shutdownTelemetry().catch(() => {
+    }).finally(() => {
+      process.kill(process.pid, signal);
+    });
+  };
+  process.once("SIGTERM", flush);
+  process.once("SIGINT", flush);
+}
+export {
+  recordHttpDuration,
+  registerTelemetryForNextjs,
+  telemetryServerExternalPackages
+};
+//# sourceMappingURL=nextjs.js.map

package/dist/nextjs.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/nextjs.ts"],
+  "sourcesContent": ["/**\n * Next.js wiring helpers for `@open-mercato/telemetry`.\n *\n * Runtime helpers for an enabled Next.js telemetry integration. Build-time\n * config belongs in `@open-mercato/telemetry/nextjs-config`, which has no\n * runtime imports.\n */\nimport { isTelemetryBackendEnabled } from '@open-mercato/shared/lib/telemetry/runtime'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nexport { telemetryServerExternalPackages } from './nextjs-config'\nexport { recordHttpDuration } from './facade/http'\n\nconst logger = createLogger('telemetry')\n\n/**\n * One-line telemetry bootstrap for a Next.js `instrumentation.ts`. Initializes\n * the active backend (no-op unless `TELEMETRY_BACKEND` is set), degrades to no\n * telemetry on init failure (never bubbles a rejection out of Next's\n * `register()`), and registers a best-effort flush on `SIGTERM`/`SIGINT`. Skips\n * the edge runtime \u2014 the OTEL NodeSDK is Node-only \u2014 so callers may import it\n * unconditionally, though gating the dynamic import on\n * `NEXT_RUNTIME === 'nodejs'` also keeps the SDK off the edge bundle.\n */\nexport async function registerTelemetryForNextjs(): Promise<void> {\n  if (process.env.NEXT_RUNTIME && process.env.NEXT_RUNTIME !== 'nodejs') return\n  if (!isTelemetryBackendEnabled()) return\n  const { initTelemetry, shutdownTelemetry } = await import('./init')\n  try {\n    await initTelemetry()\n  } catch (error) {\n    logger.warn('Init from Next.js instrumentation failed', { err: error })\n    return\n  }\n  // A signal listener suppresses Node's default termination, so after the\n  // best-effort flush the handler re-raises the signal. `once` has already\n  // removed this listener by then, so the re-raise falls through to the default\n  // terminate (or to another component's own handler, e.g. Next's).\n  const flush = (signal: NodeJS.Signals) => {\n    void shutdownTelemetry()\n      .catch(() => {})\n      .finally(() => {\n        process.kill(process.pid, signal)\n      })\n  }\n  process.once('SIGTERM', flush)\n  process.once('SIGINT', flush)\n}\n"],
+  "mappings": "AAOA,SAAS,iCAAiC;AAC1C,SAAS,oBAAoB;AAC7B,SAAS,uCAAuC;AAChD,SAAS,0BAA0B;AAEnC,MAAM,SAAS,aAAa,WAAW;AAWvC,eAAsB,6BAA4C;AAChE,MAAI,QAAQ,IAAI,gBAAgB,QAAQ,IAAI,iBAAiB,SAAU;AACvE,MAAI,CAAC,0BAA0B,EAAG;AAClC,QAAM,EAAE,eAAe,kBAAkB,IAAI,MAAM,OAAO,QAAQ;AAClE,MAAI;AACF,UAAM,cAAc;AAAA,EACtB,SAAS,OAAO;AACd,WAAO,KAAK,4CAA4C,EAAE,KAAK,MAAM,CAAC;AACtE;AAAA,EACF;AAKA,QAAM,QAAQ,CAAC,WAA2B;AACxC,SAAK,kBAAkB,EACpB,MAAM,MAAM;AAAA,IAAC,CAAC,EACd,QAAQ,MAAM;AACb,cAAQ,KAAK,QAAQ,KAAK,MAAM;AAAA,IAClC,CAAC;AAAA,EACL;AACA,UAAQ,KAAK,WAAW,KAAK;AAC7B,UAAQ,KAAK,UAAU,KAAK;AAC9B;",
+  "names": []
+}

package/dist/provider/console-provider.js

@@ -0,0 +1,70 @@
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { serializeError } from "../facade/serialize.js";
+import { runSpan } from "./run-span.js";
+const logger = createLogger("telemetry");
+class ConsoleSpan {
+  constructor(name) {
+    this.name = name;
+    this.attributes = {};
+    this.status = "ok";
+    this.startedAt = Date.now();
+  }
+  setAttribute(key, value) {
+    this.attributes[key] = value;
+  }
+  setAttributes(attributes) {
+    Object.assign(this.attributes, attributes);
+  }
+  recordException(error) {
+    this.status = "error";
+    this.attributes.exception = serializeError(error).message;
+  }
+  setStatus(status) {
+    this.status = status;
+  }
+  end() {
+    logger[this.status === "error" ? "error" : "debug"](`Span ${this.name}`, {
+      span: this.name,
+      durationMs: Date.now() - this.startedAt,
+      status: this.status
+    });
+  }
+}
+class ConsoleProvider {
+  constructor() {
+    this.name = "console";
+    this.supports = ["traces", "metrics"];
+  }
+  async start() {
+  }
+  async shutdown() {
+  }
+  runInSpan(name, _options, fn) {
+    return runSpan(new ConsoleSpan(name), fn);
+  }
+  activeSpan() {
+    return void 0;
+  }
+  activeTraceContext() {
+    return void 0;
+  }
+  inject(_carrier) {
+  }
+  runInRemoteSpan(_carrier, name, _options, fn) {
+    return runSpan(new ConsoleSpan(name), fn);
+  }
+  emitLog(_record) {
+  }
+  recordMetric(point) {
+    logger.debug(`Metric ${point.name}`, {
+      metric: point.name,
+      kind: point.kind,
+      value: point.value,
+      ...point.labels
+    });
+  }
+}
+export {
+  ConsoleProvider
+};
+//# sourceMappingURL=console-provider.js.map

package/dist/provider/console-provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/provider/console-provider.ts"],
+  "sourcesContent": ["import type {\n  LogRecord,\n  MetricPoint,\n  Span,\n  SpanOptions,\n  TelemetryProvider,\n  TelemetrySignal,\n  TraceCarrier,\n  TraceContext,\n} from '../types'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { serializeError } from '../facade/serialize'\nimport { runSpan } from './run-span'\n\nconst logger = createLogger('telemetry')\n\n/**\n * Dev backend: prints span timings and metric points to stdout (via the shared\n * logger). It does NOT handle logs \u2014 the facade's logger already writes those to\n * stdout, so `emitLog` is a no-op here to avoid duplication.\n */\nclass ConsoleSpan implements Span {\n  private readonly attributes: Record<string, unknown> = {}\n  private status: 'ok' | 'error' = 'ok'\n  private readonly startedAt = Date.now()\n\n  constructor(private readonly name: string) {}\n\n  setAttribute(key: string, value: string | number | boolean): void {\n    this.attributes[key] = value\n  }\n  setAttributes(attributes: Record<string, string | number | boolean | undefined>): void {\n    Object.assign(this.attributes, attributes)\n  }\n  recordException(error: unknown): void {\n    this.status = 'error'\n    this.attributes.exception = serializeError(error).message\n  }\n  setStatus(status: 'ok' | 'error'): void {\n    this.status = status\n  }\n  end(): void {\n    logger[this.status === 'error' ? 'error' : 'debug'](`Span ${this.name}`, {\n      span: this.name,\n      durationMs: Date.now() - this.startedAt,\n      status: this.status,\n    })\n  }\n}\n\nexport class ConsoleProvider implements TelemetryProvider {\n  readonly name = 'console'\n  readonly supports: readonly TelemetrySignal[] = ['traces', 'metrics']\n\n  async start(): Promise<void> {}\n  async shutdown(): Promise<void> {}\n\n  runInSpan<T>(name: string, _options: SpanOptions, fn: (span: Span) => T): T {\n    return runSpan(new ConsoleSpan(name), fn)\n  }\n\n  activeSpan(): Span | undefined {\n    return undefined\n  }\n\n  activeTraceContext(): TraceContext | undefined {\n    // ConsoleSpan carries no real trace ids (dev-only timing print).\n    return undefined\n  }\n\n  inject(_carrier: TraceCarrier): void {}\n\n  runInRemoteSpan<T>(_carrier: TraceCarrier, name: string, _options: SpanOptions, fn: (span: Span) => T): T {\n    return runSpan(new ConsoleSpan(name), fn)\n  }\n\n  emitLog(_record: LogRecord): void {}\n\n  recordMetric(point: MetricPoint): void {\n    logger.debug(`Metric ${point.name}`, {\n      metric: point.name,\n      kind: point.kind,\n      value: point.value,\n      ...point.labels,\n    })\n  }\n}\n"],
+  "mappings": "AAUA,SAAS,oBAAoB;AAC7B,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AAExB,MAAM,SAAS,aAAa,WAAW;AAOvC,MAAM,YAA4B;AAAA,EAKhC,YAA6B,MAAc;AAAd;AAJ7B,SAAiB,aAAsC,CAAC;AACxD,SAAQ,SAAyB;AACjC,SAAiB,YAAY,KAAK,IAAI;AAAA,EAEM;AAAA,EAE5C,aAAa,KAAa,OAAwC;AAChE,SAAK,WAAW,GAAG,IAAI;AAAA,EACzB;AAAA,EACA,cAAc,YAAyE;AACrF,WAAO,OAAO,KAAK,YAAY,UAAU;AAAA,EAC3C;AAAA,EACA,gBAAgB,OAAsB;AACpC,SAAK,SAAS;AACd,SAAK,WAAW,YAAY,eAAe,KAAK,EAAE;AAAA,EACpD;AAAA,EACA,UAAU,QAA8B;AACtC,SAAK,SAAS;AAAA,EAChB;AAAA,EACA,MAAY;AACV,WAAO,KAAK,WAAW,UAAU,UAAU,OAAO,EAAE,QAAQ,KAAK,IAAI,IAAI;AAAA,MACvE,MAAM,KAAK;AAAA,MACX,YAAY,KAAK,IAAI,IAAI,KAAK;AAAA,MAC9B,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,EACH;AACF;AAEO,MAAM,gBAA6C;AAAA,EAAnD;AACL,SAAS,OAAO;AAChB,SAAS,WAAuC,CAAC,UAAU,SAAS;AAAA;AAAA,EAEpE,MAAM,QAAuB;AAAA,EAAC;AAAA,EAC9B,MAAM,WAA0B;AAAA,EAAC;AAAA,EAEjC,UAAa,MAAc,UAAuB,IAA0B;AAC1E,WAAO,QAAQ,IAAI,YAAY,IAAI,GAAG,EAAE;AAAA,EAC1C;AAAA,EAEA,aAA+B;AAC7B,WAAO;AAAA,EACT;AAAA,EAEA,qBAA+C;AAE7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,UAA8B;AAAA,EAAC;AAAA,EAEtC,gBAAmB,UAAwB,MAAc,UAAuB,IAA0B;AACxG,WAAO,QAAQ,IAAI,YAAY,IAAI,GAAG,EAAE;AAAA,EAC1C;AAAA,EAEA,QAAQ,SAA0B;AAAA,EAAC;AAAA,EAEnC,aAAa,OAA0B;AACrC,WAAO,MAAM,UAAU,MAAM,IAAI,IAAI;AAAA,MACnC,QAAQ,MAAM;AAAA,MACd,MAAM,MAAM;AAAA,MACZ,OAAO,MAAM;AAAA,MACb,GAAG,MAAM;AAAA,IACX,CAAC;AAAA,EACH;AACF;",
+  "names": []
+}

package/dist/provider/noop-provider.js

@@ -0,0 +1,45 @@
+const NOOP_SPAN = {
+  setAttribute() {
+  },
+  setAttributes() {
+  },
+  recordException() {
+  },
+  setStatus() {
+  },
+  end() {
+  }
+};
+class NoopProvider {
+  constructor() {
+    this.name = "noop";
+    this.supports = [];
+  }
+  async start() {
+  }
+  async shutdown() {
+  }
+  runInSpan(_name, _options, fn) {
+    return fn(NOOP_SPAN);
+  }
+  activeSpan() {
+    return void 0;
+  }
+  activeTraceContext() {
+    return void 0;
+  }
+  inject(_carrier) {
+  }
+  runInRemoteSpan(_carrier, _name, _options, fn) {
+    return fn(NOOP_SPAN);
+  }
+  emitLog(_record) {
+  }
+  recordMetric(_point) {
+  }
+}
+export {
+  NOOP_SPAN,
+  NoopProvider
+};
+//# sourceMappingURL=noop-provider.js.map

package/dist/provider/noop-provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/provider/noop-provider.ts"],
+  "sourcesContent": ["import type {\n  LogRecord,\n  MetricPoint,\n  Span,\n  SpanOptions,\n  TelemetryProvider,\n  TelemetrySignal,\n  TraceCarrier,\n  TraceContext,\n} from '../types'\n\n/** A span that does nothing \u2014 used when telemetry is off. */\nexport const NOOP_SPAN: Span = {\n  setAttribute() {},\n  setAttributes() {},\n  recordException() {},\n  setStatus() {},\n  end() {},\n}\n\n/**\n * The default backend: a hard no-op. `runInSpan` still runs `fn` (so app logic\n * is unaffected); everything else is a cheap return. The heavy OTEL SDK is\n * never imported on this path.\n */\nexport class NoopProvider implements TelemetryProvider {\n  readonly name = 'noop'\n  readonly supports: readonly TelemetrySignal[] = []\n\n  async start(): Promise<void> {}\n  async shutdown(): Promise<void> {}\n\n  runInSpan<T>(_name: string, _options: SpanOptions, fn: (span: Span) => T): T {\n    return fn(NOOP_SPAN)\n  }\n\n  activeSpan(): Span | undefined {\n    return undefined\n  }\n\n  activeTraceContext(): TraceContext | undefined {\n    return undefined\n  }\n\n  inject(_carrier: TraceCarrier): void {}\n\n  runInRemoteSpan<T>(_carrier: TraceCarrier, _name: string, _options: SpanOptions, fn: (span: Span) => T): T {\n    return fn(NOOP_SPAN)\n  }\n\n  emitLog(_record: LogRecord): void {}\n  recordMetric(_point: MetricPoint): void {}\n}\n"],
+  "mappings": "AAYO,MAAM,YAAkB;AAAA,EAC7B,eAAe;AAAA,EAAC;AAAA,EAChB,gBAAgB;AAAA,EAAC;AAAA,EACjB,kBAAkB;AAAA,EAAC;AAAA,EACnB,YAAY;AAAA,EAAC;AAAA,EACb,MAAM;AAAA,EAAC;AACT;AAOO,MAAM,aAA0C;AAAA,EAAhD;AACL,SAAS,OAAO;AAChB,SAAS,WAAuC,CAAC;AAAA;AAAA,EAEjD,MAAM,QAAuB;AAAA,EAAC;AAAA,EAC9B,MAAM,WAA0B;AAAA,EAAC;AAAA,EAEjC,UAAa,OAAe,UAAuB,IAA0B;AAC3E,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEA,aAA+B;AAC7B,WAAO;AAAA,EACT;AAAA,EAEA,qBAA+C;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,UAA8B;AAAA,EAAC;AAAA,EAEtC,gBAAmB,UAAwB,OAAe,UAAuB,IAA0B;AACzG,WAAO,GAAG,SAAS;AAAA,EACrB;AAAA,EAEA,QAAQ,SAA0B;AAAA,EAAC;AAAA,EACnC,aAAa,QAA2B;AAAA,EAAC;AAC3C;",
+  "names": []
+}

package/dist/provider/otlp-provider.js

@@ -0,0 +1,212 @@
+import {
+  trace,
+  metrics,
+  context,
+  isSpanContextValid,
+  defaultTextMapGetter,
+  defaultTextMapSetter,
+  SpanStatusCode,
+  SpanKind as OtelSpanKind
+} from "@opentelemetry/api";
+import { W3CTraceContextPropagator } from "@opentelemetry/core";
+import { logs, SeverityNumber } from "@opentelemetry/api-logs";
+import { NodeSDK } from "@opentelemetry/sdk-node";
+import { resourceFromAttributes } from "@opentelemetry/resources";
+import { ATTR_SERVICE_NAME } from "@opentelemetry/semantic-conventions";
+import {
+  BatchSpanProcessor,
+  ParentBasedSampler,
+  TraceIdRatioBasedSampler
+} from "@opentelemetry/sdk-trace-node";
+import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
+import { OTLPLogExporter } from "@opentelemetry/exporter-logs-otlp-http";
+import { OTLPMetricExporter } from "@opentelemetry/exporter-metrics-otlp-http";
+import { BatchLogRecordProcessor } from "@opentelemetry/sdk-logs";
+import { PeriodicExportingMetricReader } from "@opentelemetry/sdk-metrics";
+import { PgInstrumentation } from "@opentelemetry/instrumentation-pg";
+import { UndiciInstrumentation } from "@opentelemetry/instrumentation-undici";
+import { readTelemetryEnv } from "../env.js";
+import { redactAttributes, redactPii } from "../facade/redact.js";
+import { serializeError } from "../facade/serialize.js";
+import { runSpan } from "./run-span.js";
+const TRACER_NAME = "open-mercato";
+const queuePropagator = new W3CTraceContextPropagator();
+const W3C_TRACEPARENT = "traceparent";
+const W3C_TRACESTATE = "tracestate";
+const BACKUP_TRACEPARENT = "x-original-traceparent";
+const BACKUP_TRACESTATE = "x-original-tracestate";
+const backupHeaderPropagator = {
+  inject(ctx, carrier, setter) {
+    const tmp = {};
+    queuePropagator.inject(ctx, tmp, defaultTextMapSetter);
+    for (const [key, value] of Object.entries(tmp)) setter.set(carrier, key, value);
+    if (tmp[W3C_TRACEPARENT]) setter.set(carrier, BACKUP_TRACEPARENT, tmp[W3C_TRACEPARENT]);
+    if (tmp[W3C_TRACESTATE]) setter.set(carrier, BACKUP_TRACESTATE, tmp[W3C_TRACESTATE]);
+  },
+  extract(ctx, carrier, getter) {
+    if (!readTelemetryEnv().trustInboundTrace) return ctx;
+    const first = (value) => Array.isArray(value) ? value[0] : value;
+    const backupTraceparent = first(getter.get(carrier, BACKUP_TRACEPARENT));
+    if (backupTraceparent) {
+      const backupCarrier = { [W3C_TRACEPARENT]: backupTraceparent };
+      const backupTracestate = first(getter.get(carrier, BACKUP_TRACESTATE));
+      if (backupTracestate) backupCarrier[W3C_TRACESTATE] = backupTracestate;
+      return queuePropagator.extract(ctx, backupCarrier, defaultTextMapGetter);
+    }
+    return queuePropagator.extract(ctx, carrier, getter);
+  },
+  fields: () => [...queuePropagator.fields(), BACKUP_TRACEPARENT, BACKUP_TRACESTATE]
+};
+function cleanAttributes(attributes) {
+  const out = {};
+  if (!attributes) return out;
+  for (const [key, value] of Object.entries(redactAttributes(attributes))) {
+    if (value !== void 0) out[key] = value;
+  }
+  return out;
+}
+const SPAN_KIND = {
+  internal: OtelSpanKind.INTERNAL,
+  server: OtelSpanKind.SERVER,
+  client: OtelSpanKind.CLIENT,
+  producer: OtelSpanKind.PRODUCER,
+  consumer: OtelSpanKind.CONSUMER
+};
+const SEVERITY = {
+  debug: SeverityNumber.DEBUG,
+  info: SeverityNumber.INFO,
+  warn: SeverityNumber.WARN,
+  error: SeverityNumber.ERROR
+};
+class OtelSpan {
+  constructor(span) {
+    this.span = span;
+  }
+  setAttribute(key, value) {
+    const redacted = cleanAttributes({ [key]: value })[key];
+    if (redacted !== void 0) this.span.setAttribute(key, redacted);
+  }
+  setAttributes(attributes) {
+    this.span.setAttributes(cleanAttributes(attributes));
+  }
+  recordException(error) {
+    this.span.recordException(serializeError(error));
+  }
+  setStatus(status, message) {
+    this.span.setStatus({
+      code: status === "error" ? SpanStatusCode.ERROR : SpanStatusCode.OK,
+      message: message ? redactPii(message) : void 0
+    });
+  }
+  end() {
+    this.span.end();
+  }
+}
+const PG_INSTRUMENTATION_OPTIONS = { enhancedDatabaseReporting: false };
+class OtlpProvider {
+  constructor(options = {}, name = "otlp") {
+    this.options = options;
+    this.supports = ["traces", "metrics", "logs", "errors"];
+    this.instruments = /* @__PURE__ */ new Map();
+    this.name = name;
+  }
+  async start() {
+    if (this.sdk) return;
+    const env = readTelemetryEnv();
+    this.sdk = new NodeSDK({
+      resource: resourceFromAttributes({ [ATTR_SERVICE_NAME]: env.serviceName }),
+      // Global propagation roots requests by default. Both standard and backup
+      // inbound headers are honored only when TELEMETRY_TRUST_INBOUND_TRACE is
+      // explicitly enabled behind trusted infrastructure.
+      textMapPropagator: backupHeaderPropagator,
+      // Parent-based so child spans follow the trace's sampling decision; root
+      // spans sample at the configured ratio.
+      sampler: new ParentBasedSampler({ root: new TraceIdRatioBasedSampler(env.samplingRatio) }),
+      spanProcessors: this.options.spanProcessors ?? [new BatchSpanProcessor(new OTLPTraceExporter())],
+      logRecordProcessors: this.options.logRecordProcessors ?? [
+        new BatchLogRecordProcessor({ exporter: new OTLPLogExporter() })
+      ],
+      metricReaders: this.options.metricReaders ?? [
+        new PeriodicExportingMetricReader({ exporter: new OTLPMetricExporter() })
+      ],
+      instrumentations: this.options.instrumentations ?? [
+        new PgInstrumentation(PG_INSTRUMENTATION_OPTIONS),
+        new UndiciInstrumentation()
+      ]
+    });
+    this.sdk.start();
+  }
+  async shutdown() {
+    if (!this.sdk) return;
+    await this.sdk.shutdown();
+    this.sdk = void 0;
+  }
+  runInSpan(name, options, fn) {
+    const tracer = trace.getTracer(TRACER_NAME);
+    return tracer.startActiveSpan(
+      name,
+      { kind: options.kind ? SPAN_KIND[options.kind] : void 0, attributes: cleanAttributes(options.attributes) },
+      (otelSpan) => runSpan(new OtelSpan(otelSpan), fn)
+    );
+  }
+  activeSpan() {
+    const active = trace.getActiveSpan();
+    return active ? new OtelSpan(active) : void 0;
+  }
+  activeTraceContext() {
+    const ctx = trace.getActiveSpan()?.spanContext();
+    if (!ctx || !isSpanContextValid(ctx)) return void 0;
+    return { traceId: ctx.traceId, spanId: ctx.spanId };
+  }
+  inject(carrier) {
+    queuePropagator.inject(context.active(), carrier, defaultTextMapSetter);
+  }
+  runInRemoteSpan(carrier, name, options, fn) {
+    const parent = queuePropagator.extract(context.active(), carrier, defaultTextMapGetter);
+    const tracer = trace.getTracer(TRACER_NAME);
+    return context.with(
+      parent,
+      () => tracer.startActiveSpan(
+        name,
+        { kind: options.kind ? SPAN_KIND[options.kind] : void 0, attributes: cleanAttributes(options.attributes) },
+        (otelSpan) => runSpan(new OtelSpan(otelSpan), fn)
+      )
+    );
+  }
+  emitLog(record) {
+    const attributes = cleanAttributes(record.attributes);
+    if (record.error) {
+      attributes["exception.type"] = redactPii(record.error.name);
+      attributes["exception.message"] = redactPii(record.error.message);
+      if (record.error.stack) attributes["exception.stacktrace"] = redactPii(record.error.stack);
+    }
+    logs.getLogger(TRACER_NAME).emit({
+      severityNumber: SEVERITY[record.level],
+      severityText: record.level,
+      body: redactPii(record.message),
+      attributes
+    });
+  }
+  recordMetric(point) {
+    const labels = cleanAttributes(point.labels);
+    const instrument = this.getInstrument(point);
+    if (point.kind === "counter") instrument.add(point.value, labels);
+    else instrument.record(point.value, labels);
+  }
+  getInstrument(point) {
+    const key = `${point.kind}:${point.name}`;
+    let instrument = this.instruments.get(key);
+    if (!instrument) {
+      const meter = metrics.getMeter(TRACER_NAME);
+      const opts = point.unit ? { unit: point.unit } : void 0;
+      instrument = point.kind === "counter" ? meter.createCounter(point.name, opts) : point.kind === "histogram" ? meter.createHistogram(point.name, opts) : meter.createGauge(point.name, opts);
+      this.instruments.set(key, instrument);
+    }
+    return instrument;
+  }
+}
+export {
+  OtlpProvider,
+  PG_INSTRUMENTATION_OPTIONS
+};
+//# sourceMappingURL=otlp-provider.js.map

package/dist/provider/otlp-provider.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/provider/otlp-provider.ts"],
+  "sourcesContent": ["/**\n * The ONLY file in this package that imports `@opentelemetry/*`. Loaded via\n * dynamic `import()` from `init.ts` (so the heavy SDK never loads when telemetry\n * is off), and the OTEL packages live in `optionalDependencies`.\n *\n * Serves any OTLP backend \u2014 the endpoint + headers come from the standard\n * `OTEL_EXPORTER_OTLP_*` env vars, read by the exporters directly.\n */\nimport {\n  trace,\n  metrics,\n  context,\n  isSpanContextValid,\n  defaultTextMapGetter,\n  defaultTextMapSetter,\n  SpanStatusCode,\n  SpanKind as OtelSpanKind,\n  type Span as OtelApiSpan,\n  type TextMapPropagator,\n  type Counter,\n  type Histogram,\n  type Gauge,\n} from '@opentelemetry/api'\nimport { W3CTraceContextPropagator } from '@opentelemetry/core'\nimport { logs, SeverityNumber } from '@opentelemetry/api-logs'\nimport { NodeSDK } from '@opentelemetry/sdk-node'\nimport type { Instrumentation } from '@opentelemetry/instrumentation'\nimport { resourceFromAttributes } from '@opentelemetry/resources'\nimport { ATTR_SERVICE_NAME } from '@opentelemetry/semantic-conventions'\nimport {\n  BatchSpanProcessor,\n  ParentBasedSampler,\n  TraceIdRatioBasedSampler,\n  type SpanProcessor,\n} from '@opentelemetry/sdk-trace-node'\nimport { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http'\nimport { OTLPLogExporter } from '@opentelemetry/exporter-logs-otlp-http'\nimport { OTLPMetricExporter } from '@opentelemetry/exporter-metrics-otlp-http'\nimport { BatchLogRecordProcessor, type LogRecordProcessor } from '@opentelemetry/sdk-logs'\nimport { PeriodicExportingMetricReader, type IMetricReader } from '@opentelemetry/sdk-metrics'\nimport { PgInstrumentation } from '@opentelemetry/instrumentation-pg'\nimport { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici'\n\nimport type {\n  Attributes,\n  AttributeValue,\n  LogLevel,\n  LogRecord,\n  MetricPoint,\n  Span,\n  SpanKind,\n  SpanOptions,\n  TelemetryProvider,\n  TelemetrySignal,\n  TraceCarrier,\n  TraceContext,\n} from '../types'\nimport { readTelemetryEnv } from '../env'\nimport { redactAttributes, redactPii } from '../facade/redact'\nimport { serializeError } from '../facade/serialize'\nimport { runSpan } from './run-span'\n\nconst TRACER_NAME = 'open-mercato'\n\n/**\n * Queue/event trace propagation rides a dedicated W3C propagator on the payload\n * `_trace` carrier \u2014 deliberately NOT the global propagator below.\n */\nconst queuePropagator = new W3CTraceContextPropagator()\n\nconst W3C_TRACEPARENT = 'traceparent'\nconst W3C_TRACESTATE = 'tracestate'\n// Backup headers that mirror the W3C context but a proxy/LB won't rewrite.\nconst BACKUP_TRACEPARENT = 'x-original-traceparent'\nconst BACKUP_TRACESTATE = 'x-original-tracestate'\n\n/**\n * Global propagator: standard W3C plus a backup copy\n * (`x-original-traceparent`), with explicit inbound trust.\n *\n * The problem: a load balancer (e.g. GCP's) reads the inbound `traceparent`,\n * creates its own span, and **rewrites** `traceparent` to point at that span \u2014\n * which our backend never sees. With plain W3C extraction every request becomes a\n * child of that unexported span: no request is a root, and root-span / trace-group\n * views come up empty.\n *\n * The fix (the industry \"backup header\" pattern): on inject we also write\n * `x-original-traceparent`, which the LB leaves untouched. A backup header is\n * still caller-controlled at an HTTP boundary, so its mere\n * presence is not proof that one of our services created it. Extraction ignores\n * both standard and backup headers by default.\n *\n * `TELEMETRY_TRUST_INBOUND_TRACE=true` enables both extraction paths for a\n * deployment behind a trusted upstream. Our dedicated queue/event carrier is\n * unaffected \u2014 it uses `queuePropagator` directly, not this global one.\n */\nconst backupHeaderPropagator: TextMapPropagator = {\n  inject(ctx, carrier, setter) {\n    // Inject into a plain temp carrier so we can mirror the values regardless of\n    // the real carrier's setter shape, then copy both standard + backup headers.\n    const tmp: Record<string, string> = {}\n    queuePropagator.inject(ctx, tmp, defaultTextMapSetter)\n    for (const [key, value] of Object.entries(tmp)) setter.set(carrier, key, value)\n    if (tmp[W3C_TRACEPARENT]) setter.set(carrier, BACKUP_TRACEPARENT, tmp[W3C_TRACEPARENT])\n    if (tmp[W3C_TRACESTATE]) setter.set(carrier, BACKUP_TRACESTATE, tmp[W3C_TRACESTATE])\n  },\n  extract(ctx, carrier, getter) {\n    // Both the standard and backup headers are caller-controlled at an HTTP\n    // boundary. Trust neither unless the deployment explicitly opts in.\n    if (!readTelemetryEnv().trustInboundTrace) return ctx\n    const first = (value: string | string[] | undefined): string | undefined =>\n      Array.isArray(value) ? value[0] : value\n    const backupTraceparent = first(getter.get(carrier, BACKUP_TRACEPARENT))\n    if (backupTraceparent) {\n      const backupCarrier: Record<string, string> = { [W3C_TRACEPARENT]: backupTraceparent }\n      const backupTracestate = first(getter.get(carrier, BACKUP_TRACESTATE))\n      if (backupTracestate) backupCarrier[W3C_TRACESTATE] = backupTracestate\n      return queuePropagator.extract(ctx, backupCarrier, defaultTextMapGetter)\n    }\n    return queuePropagator.extract(ctx, carrier, getter)\n  },\n  fields: () => [...queuePropagator.fields(), BACKUP_TRACEPARENT, BACKUP_TRACESTATE],\n}\n\nfunction cleanAttributes(attributes?: Attributes): Record<string, AttributeValue> {\n  const out: Record<string, AttributeValue> = {}\n  if (!attributes) return out\n  for (const [key, value] of Object.entries(redactAttributes(attributes))) {\n    if (value !== undefined) out[key] = value\n  }\n  return out\n}\n\nconst SPAN_KIND: Record<SpanKind, OtelSpanKind> = {\n  internal: OtelSpanKind.INTERNAL,\n  server: OtelSpanKind.SERVER,\n  client: OtelSpanKind.CLIENT,\n  producer: OtelSpanKind.PRODUCER,\n  consumer: OtelSpanKind.CONSUMER,\n}\n\nconst SEVERITY: Record<LogLevel, SeverityNumber> = {\n  debug: SeverityNumber.DEBUG,\n  info: SeverityNumber.INFO,\n  warn: SeverityNumber.WARN,\n  error: SeverityNumber.ERROR,\n}\n\n/** Adapts an OTEL span to the vendor-neutral `Span` interface. */\nclass OtelSpan implements Span {\n  constructor(private readonly span: OtelApiSpan) {}\n  setAttribute(key: string, value: AttributeValue): void {\n    const redacted = cleanAttributes({ [key]: value })[key]\n    if (redacted !== undefined) this.span.setAttribute(key, redacted)\n  }\n  setAttributes(attributes: Attributes): void {\n    this.span.setAttributes(cleanAttributes(attributes))\n  }\n  recordException(error: unknown): void {\n    // Redact message + stack before they leave the process (Privacy): the auto\n    // record-on-throw path (run-span) and reportError both pass raw errors here.\n    this.span.recordException(serializeError(error))\n  }\n  setStatus(status: 'ok' | 'error', message?: string): void {\n    this.span.setStatus({\n      code: status === 'error' ? SpanStatusCode.ERROR : SpanStatusCode.OK,\n      message: message ? redactPii(message) : undefined,\n    })\n  }\n  end(): void {\n    this.span.end()\n  }\n}\n\n/**\n * Test seam: override the SDK's exporters/instrumentations so tests can use\n * in-memory exporters (deterministic, no network) instead of the OTLP defaults.\n * Production passes nothing \u2014 the OTLP defaults apply.\n */\nexport type OtlpProviderOptions = {\n  spanProcessors?: SpanProcessor[]\n  logRecordProcessors?: LogRecordProcessor[]\n  metricReaders?: IMetricReader[]\n  instrumentations?: Instrumentation[]\n}\n\n/**\n * PII guard (telemetry spec Privacy / R12). The single source of truth for pg\n * instrumentation config: `enhancedDatabaseReporting: false` means bound SQL\n * parameter VALUES are NOT captured \u2014 only the statement shape ($1, $2). User\n * data lives in those params, so this must never be flipped on. Asserted by a\n * regression test.\n */\nexport const PG_INSTRUMENTATION_OPTIONS = { enhancedDatabaseReporting: false } as const\n\nexport class OtlpProvider implements TelemetryProvider {\n  /** The configured backend name (signoz | newrelic | otlp) \u2014 all OTLP, vendor differs only by endpoint. */\n  readonly name: string\n  readonly supports: readonly TelemetrySignal[] = ['traces', 'metrics', 'logs', 'errors']\n\n  private sdk: NodeSDK | undefined\n  private readonly instruments = new Map<string, Counter | Histogram | Gauge>()\n\n  constructor(private readonly options: OtlpProviderOptions = {}, name = 'otlp') {\n    this.name = name\n  }\n\n  async start(): Promise<void> {\n    if (this.sdk) return\n    const env = readTelemetryEnv()\n\n    this.sdk = new NodeSDK({\n      resource: resourceFromAttributes({ [ATTR_SERVICE_NAME]: env.serviceName }),\n      // Global propagation roots requests by default. Both standard and backup\n      // inbound headers are honored only when TELEMETRY_TRUST_INBOUND_TRACE is\n      // explicitly enabled behind trusted infrastructure.\n      textMapPropagator: backupHeaderPropagator,\n      // Parent-based so child spans follow the trace's sampling decision; root\n      // spans sample at the configured ratio.\n      sampler: new ParentBasedSampler({ root: new TraceIdRatioBasedSampler(env.samplingRatio) }),\n      spanProcessors: this.options.spanProcessors ?? [new BatchSpanProcessor(new OTLPTraceExporter())],\n      logRecordProcessors: this.options.logRecordProcessors ?? [\n        new BatchLogRecordProcessor({ exporter: new OTLPLogExporter() }),\n      ],\n      metricReaders: this.options.metricReaders ?? [\n        new PeriodicExportingMetricReader({ exporter: new OTLPMetricExporter() }),\n      ],\n      instrumentations: this.options.instrumentations ?? [\n        new PgInstrumentation(PG_INSTRUMENTATION_OPTIONS),\n        new UndiciInstrumentation(),\n      ],\n    })\n    this.sdk.start()\n  }\n\n  async shutdown(): Promise<void> {\n    if (!this.sdk) return\n    await this.sdk.shutdown()\n    this.sdk = undefined\n  }\n\n  runInSpan<T>(name: string, options: SpanOptions, fn: (span: Span) => T): T {\n    const tracer = trace.getTracer(TRACER_NAME)\n    return tracer.startActiveSpan(\n      name,\n      { kind: options.kind ? SPAN_KIND[options.kind] : undefined, attributes: cleanAttributes(options.attributes) },\n      (otelSpan) => runSpan(new OtelSpan(otelSpan), fn),\n    )\n  }\n\n  activeSpan(): Span | undefined {\n    const active = trace.getActiveSpan()\n    return active ? new OtelSpan(active) : undefined\n  }\n\n  activeTraceContext(): TraceContext | undefined {\n    const ctx = trace.getActiveSpan()?.spanContext()\n    if (!ctx || !isSpanContextValid(ctx)) return undefined\n    return { traceId: ctx.traceId, spanId: ctx.spanId }\n  }\n\n  inject(carrier: TraceCarrier): void {\n    queuePropagator.inject(context.active(), carrier, defaultTextMapSetter)\n  }\n\n  runInRemoteSpan<T>(carrier: TraceCarrier, name: string, options: SpanOptions, fn: (span: Span) => T): T {\n    const parent = queuePropagator.extract(context.active(), carrier, defaultTextMapGetter)\n    const tracer = trace.getTracer(TRACER_NAME)\n    return context.with(parent, () =>\n      tracer.startActiveSpan(\n        name,\n        { kind: options.kind ? SPAN_KIND[options.kind] : undefined, attributes: cleanAttributes(options.attributes) },\n        (otelSpan) => runSpan(new OtelSpan(otelSpan), fn),\n      ),\n    )\n  }\n\n  emitLog(record: LogRecord): void {\n    const attributes: Record<string, AttributeValue> = cleanAttributes(record.attributes)\n    if (record.error) {\n      attributes['exception.type'] = redactPii(record.error.name)\n      attributes['exception.message'] = redactPii(record.error.message)\n      if (record.error.stack) attributes['exception.stacktrace'] = redactPii(record.error.stack)\n    }\n    logs.getLogger(TRACER_NAME).emit({\n      severityNumber: SEVERITY[record.level],\n      severityText: record.level,\n      body: redactPii(record.message),\n      attributes,\n    })\n  }\n\n  recordMetric(point: MetricPoint): void {\n    const labels = cleanAttributes(point.labels)\n    const instrument = this.getInstrument(point)\n    if (point.kind === 'counter') (instrument as Counter).add(point.value, labels)\n    else (instrument as Histogram | Gauge).record(point.value, labels)\n  }\n\n  private getInstrument(point: MetricPoint): Counter | Histogram | Gauge {\n    const key = `${point.kind}:${point.name}`\n    let instrument = this.instruments.get(key)\n    if (!instrument) {\n      const meter = metrics.getMeter(TRACER_NAME)\n      const opts = point.unit ? { unit: point.unit } : undefined\n      instrument =\n        point.kind === 'counter'\n          ? meter.createCounter(point.name, opts)\n          : point.kind === 'histogram'\n            ? meter.createHistogram(point.name, opts)\n            : meter.createGauge(point.name, opts)\n      this.instruments.set(key, instrument)\n    }\n    return instrument\n  }\n}\n"],
+  "mappings": "AAQA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AAAA,OAMP;AACP,SAAS,iCAAiC;AAC1C,SAAS,MAAM,sBAAsB;AACrC,SAAS,eAAe;AAExB,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,yBAAyB;AAClC,SAAS,uBAAuB;AAChC,SAAS,0BAA0B;AACnC,SAAS,+BAAwD;AACjE,SAAS,qCAAyD;AAClE,SAAS,yBAAyB;AAClC,SAAS,6BAA6B;AAgBtC,SAAS,wBAAwB;AACjC,SAAS,kBAAkB,iBAAiB;AAC5C,SAAS,sBAAsB;AAC/B,SAAS,eAAe;AAExB,MAAM,cAAc;AAMpB,MAAM,kBAAkB,IAAI,0BAA0B;AAEtD,MAAM,kBAAkB;AACxB,MAAM,iBAAiB;AAEvB,MAAM,qBAAqB;AAC3B,MAAM,oBAAoB;AAsB1B,MAAM,yBAA4C;AAAA,EAChD,OAAO,KAAK,SAAS,QAAQ;AAG3B,UAAM,MAA8B,CAAC;AACrC,oBAAgB,OAAO,KAAK,KAAK,oBAAoB;AACrD,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,EAAG,QAAO,IAAI,SAAS,KAAK,KAAK;AAC9E,QAAI,IAAI,eAAe,EAAG,QAAO,IAAI,SAAS,oBAAoB,IAAI,eAAe,CAAC;AACtF,QAAI,IAAI,cAAc,EAAG,QAAO,IAAI,SAAS,mBAAmB,IAAI,cAAc,CAAC;AAAA,EACrF;AAAA,EACA,QAAQ,KAAK,SAAS,QAAQ;AAG5B,QAAI,CAAC,iBAAiB,EAAE,kBAAmB,QAAO;AAClD,UAAM,QAAQ,CAAC,UACb,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AACpC,UAAM,oBAAoB,MAAM,OAAO,IAAI,SAAS,kBAAkB,CAAC;AACvE,QAAI,mBAAmB;AACrB,YAAM,gBAAwC,EAAE,CAAC,eAAe,GAAG,kBAAkB;AACrF,YAAM,mBAAmB,MAAM,OAAO,IAAI,SAAS,iBAAiB,CAAC;AACrE,UAAI,iBAAkB,eAAc,cAAc,IAAI;AACtD,aAAO,gBAAgB,QAAQ,KAAK,eAAe,oBAAoB;AAAA,IACzE;AACA,WAAO,gBAAgB,QAAQ,KAAK,SAAS,MAAM;AAAA,EACrD;AAAA,EACA,QAAQ,MAAM,CAAC,GAAG,gBAAgB,OAAO,GAAG,oBAAoB,iBAAiB;AACnF;AAEA,SAAS,gBAAgB,YAAyD;AAChF,QAAM,MAAsC,CAAC;AAC7C,MAAI,CAAC,WAAY,QAAO;AACxB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,iBAAiB,UAAU,CAAC,GAAG;AACvE,QAAI,UAAU,OAAW,KAAI,GAAG,IAAI;AAAA,EACtC;AACA,SAAO;AACT;AAEA,MAAM,YAA4C;AAAA,EAChD,UAAU,aAAa;AAAA,EACvB,QAAQ,aAAa;AAAA,EACrB,QAAQ,aAAa;AAAA,EACrB,UAAU,aAAa;AAAA,EACvB,UAAU,aAAa;AACzB;AAEA,MAAM,WAA6C;AAAA,EACjD,OAAO,eAAe;AAAA,EACtB,MAAM,eAAe;AAAA,EACrB,MAAM,eAAe;AAAA,EACrB,OAAO,eAAe;AACxB;AAGA,MAAM,SAAyB;AAAA,EAC7B,YAA6B,MAAmB;AAAnB;AAAA,EAAoB;AAAA,EACjD,aAAa,KAAa,OAA6B;AACrD,UAAM,WAAW,gBAAgB,EAAE,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG;AACtD,QAAI,aAAa,OAAW,MAAK,KAAK,aAAa,KAAK,QAAQ;AAAA,EAClE;AAAA,EACA,cAAc,YAA8B;AAC1C,SAAK,KAAK,cAAc,gBAAgB,UAAU,CAAC;AAAA,EACrD;AAAA,EACA,gBAAgB,OAAsB;AAGpC,SAAK,KAAK,gBAAgB,eAAe,KAAK,CAAC;AAAA,EACjD;AAAA,EACA,UAAU,QAAwB,SAAwB;AACxD,SAAK,KAAK,UAAU;AAAA,MAClB,MAAM,WAAW,UAAU,eAAe,QAAQ,eAAe;AAAA,MACjE,SAAS,UAAU,UAAU,OAAO,IAAI;AAAA,IAC1C,CAAC;AAAA,EACH;AAAA,EACA,MAAY;AACV,SAAK,KAAK,IAAI;AAAA,EAChB;AACF;AAqBO,MAAM,6BAA6B,EAAE,2BAA2B,MAAM;AAEtE,MAAM,aAA0C;AAAA,EAQrD,YAA6B,UAA+B,CAAC,GAAG,OAAO,QAAQ;AAAlD;AAL7B,SAAS,WAAuC,CAAC,UAAU,WAAW,QAAQ,QAAQ;AAGtF,SAAiB,cAAc,oBAAI,IAAyC;AAG1E,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,MAAM,QAAuB;AAC3B,QAAI,KAAK,IAAK;AACd,UAAM,MAAM,iBAAiB;AAE7B,SAAK,MAAM,IAAI,QAAQ;AAAA,MACrB,UAAU,uBAAuB,EAAE,CAAC,iBAAiB,GAAG,IAAI,YAAY,CAAC;AAAA;AAAA;AAAA;AAAA,MAIzE,mBAAmB;AAAA;AAAA;AAAA,MAGnB,SAAS,IAAI,mBAAmB,EAAE,MAAM,IAAI,yBAAyB,IAAI,aAAa,EAAE,CAAC;AAAA,MACzF,gBAAgB,KAAK,QAAQ,kBAAkB,CAAC,IAAI,mBAAmB,IAAI,kBAAkB,CAAC,CAAC;AAAA,MAC/F,qBAAqB,KAAK,QAAQ,uBAAuB;AAAA,QACvD,IAAI,wBAAwB,EAAE,UAAU,IAAI,gBAAgB,EAAE,CAAC;AAAA,MACjE;AAAA,MACA,eAAe,KAAK,QAAQ,iBAAiB;AAAA,QAC3C,IAAI,8BAA8B,EAAE,UAAU,IAAI,mBAAmB,EAAE,CAAC;AAAA,MAC1E;AAAA,MACA,kBAAkB,KAAK,QAAQ,oBAAoB;AAAA,QACjD,IAAI,kBAAkB,0BAA0B;AAAA,QAChD,IAAI,sBAAsB;AAAA,MAC5B;AAAA,IACF,CAAC;AACD,SAAK,IAAI,MAAM;AAAA,EACjB;AAAA,EAEA,MAAM,WAA0B;AAC9B,QAAI,CAAC,KAAK,IAAK;AACf,UAAM,KAAK,IAAI,SAAS;AACxB,SAAK,MAAM;AAAA,EACb;AAAA,EAEA,UAAa,MAAc,SAAsB,IAA0B;AACzE,UAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,WAAO,OAAO;AAAA,MACZ;AAAA,MACA,EAAE,MAAM,QAAQ,OAAO,UAAU,QAAQ,IAAI,IAAI,QAAW,YAAY,gBAAgB,QAAQ,UAAU,EAAE;AAAA,MAC5G,CAAC,aAAa,QAAQ,IAAI,SAAS,QAAQ,GAAG,EAAE;AAAA,IAClD;AAAA,EACF;AAAA,EAEA,aAA+B;AAC7B,UAAM,SAAS,MAAM,cAAc;AACnC,WAAO,SAAS,IAAI,SAAS,MAAM,IAAI;AAAA,EACzC;AAAA,EAEA,qBAA+C;AAC7C,UAAM,MAAM,MAAM,cAAc,GAAG,YAAY;AAC/C,QAAI,CAAC,OAAO,CAAC,mBAAmB,GAAG,EAAG,QAAO;AAC7C,WAAO,EAAE,SAAS,IAAI,SAAS,QAAQ,IAAI,OAAO;AAAA,EACpD;AAAA,EAEA,OAAO,SAA6B;AAClC,oBAAgB,OAAO,QAAQ,OAAO,GAAG,SAAS,oBAAoB;AAAA,EACxE;AAAA,EAEA,gBAAmB,SAAuB,MAAc,SAAsB,IAA0B;AACtG,UAAM,SAAS,gBAAgB,QAAQ,QAAQ,OAAO,GAAG,SAAS,oBAAoB;AACtF,UAAM,SAAS,MAAM,UAAU,WAAW;AAC1C,WAAO,QAAQ;AAAA,MAAK;AAAA,MAAQ,MAC1B,OAAO;AAAA,QACL;AAAA,QACA,EAAE,MAAM,QAAQ,OAAO,UAAU,QAAQ,IAAI,IAAI,QAAW,YAAY,gBAAgB,QAAQ,UAAU,EAAE;AAAA,QAC5G,CAAC,aAAa,QAAQ,IAAI,SAAS,QAAQ,GAAG,EAAE;AAAA,MAClD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,QAAQ,QAAyB;AAC/B,UAAM,aAA6C,gBAAgB,OAAO,UAAU;AACpF,QAAI,OAAO,OAAO;AAChB,iBAAW,gBAAgB,IAAI,UAAU,OAAO,MAAM,IAAI;AAC1D,iBAAW,mBAAmB,IAAI,UAAU,OAAO,MAAM,OAAO;AAChE,UAAI,OAAO,MAAM,MAAO,YAAW,sBAAsB,IAAI,UAAU,OAAO,MAAM,KAAK;AAAA,IAC3F;AACA,SAAK,UAAU,WAAW,EAAE,KAAK;AAAA,MAC/B,gBAAgB,SAAS,OAAO,KAAK;AAAA,MACrC,cAAc,OAAO;AAAA,MACrB,MAAM,UAAU,OAAO,OAAO;AAAA,MAC9B;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,OAA0B;AACrC,UAAM,SAAS,gBAAgB,MAAM,MAAM;AAC3C,UAAM,aAAa,KAAK,cAAc,KAAK;AAC3C,QAAI,MAAM,SAAS,UAAW,CAAC,WAAuB,IAAI,MAAM,OAAO,MAAM;AAAA,QACxE,CAAC,WAAiC,OAAO,MAAM,OAAO,MAAM;AAAA,EACnE;AAAA,EAEQ,cAAc,OAAiD;AACrE,UAAM,MAAM,GAAG,MAAM,IAAI,IAAI,MAAM,IAAI;AACvC,QAAI,aAAa,KAAK,YAAY,IAAI,GAAG;AACzC,QAAI,CAAC,YAAY;AACf,YAAM,QAAQ,QAAQ,SAAS,WAAW;AAC1C,YAAM,OAAO,MAAM,OAAO,EAAE,MAAM,MAAM,KAAK,IAAI;AACjD,mBACE,MAAM,SAAS,YACX,MAAM,cAAc,MAAM,MAAM,IAAI,IACpC,MAAM,SAAS,cACb,MAAM,gBAAgB,MAAM,MAAM,IAAI,IACtC,MAAM,YAAY,MAAM,MAAM,IAAI;AAC1C,WAAK,YAAY,IAAI,KAAK,UAAU;AAAA,IACtC;AACA,WAAO;AAAA,EACT;AACF;",
+  "names": []
+}