@spinajs/telemetry 2.0.482

package/lib/mjs/health.js

@@ -0,0 +1,107 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { AsyncService, Autoinject, Injectable, Singleton } from '@spinajs/di';
+import { Config } from '@spinajs/configuration';
+/**
+ * A readiness probe for one dependency.
+ *
+ * Register a concrete subclass with `@Injectable( HealthCheck )` and it is
+ * discovered by {@link HealthCheckRunner} via `Array.ofType( HealthCheck )`.
+ * `@spinajs/telemetry` deliberately ships NO concrete checks — a database check
+ * belongs where the database dependency already is, not in the observability
+ * package.
+ *
+ * `check()` may throw; a throw counts as `down`.
+ */
+export class HealthCheck extends AsyncService {
+}
+const RANK = { up: 0, degraded: 1, down: 2 };
+/**
+ * Severity of one check's status, for the reduction in {@link HealthCheckRunner.run}.
+ *
+ * An unrecognised value ranks as `down`, not as harmless: `HealthStatus` is only
+ * enforced at compile time, so a JS consumer ( or a check that forwards a status
+ * from somewhere else ) can return `'DOWN'` or `'UNHEALTHY'`. A plain
+ * `RANK[status] > RANK[worst]` reads `undefined` for those, and `undefined > n`
+ * is false, so a genuinely failing dependency would leave the overall status at
+ * `up` and `/telemetry/ready` would answer 200.
+ */
+function rank(status) {
+    return RANK[status] ?? RANK.down;
+}
+/**
+ * Runs every registered {@link HealthCheck} concurrently, each raced against a
+ * per-check timeout, and reduces the results to one overall status.
+ *
+ * The timeout is the point of the class: a readiness endpoint that can hang is
+ * worse than no readiness endpoint, because a kubelet probe blocks on it.
+ */
+let HealthCheckRunner = class HealthCheckRunner {
+    /**
+     * True when the overall status should be served as HTTP 503.
+     */
+    isFailing(status) {
+        if (status === 'down')
+            return true;
+        return status === 'degraded' && this.FailOnDegraded === true;
+    }
+    async run() {
+        const checks = await Promise.all((this.Checks ?? []).map((c) => this.runOne(c)));
+        let worst = 'up';
+        for (const c of checks) {
+            // The unrecognised status is reduced AS `down`, but the check's own line in
+            // the report keeps the string the check actually returned — that value is
+            // the only clue an operator has that a check is misbehaving, and rewriting
+            // it would hide the misconfiguration behind a correct-looking report.
+            if (rank(c.status) > rank(worst))
+                worst = RANK[c.status] !== undefined ? c.status : 'down';
+        }
+        return { status: worst, checks };
+    }
+    async runOne(check) {
+        const startedAt = Date.now();
+        const timeoutMs = this.TimeoutMs ?? 2000;
+        let timer;
+        try {
+            const result = await Promise.race([
+                check.check(),
+                new Promise((_, reject) => {
+                    timer = setTimeout(() => reject(new Error(`health check timed out after ${timeoutMs}ms`)), timeoutMs);
+                }),
+            ]);
+            return { name: check.Name, status: result.status, message: result.message, data: result.data, durationMs: Date.now() - startedAt };
+        }
+        catch (err) {
+            return { name: check.Name, status: 'down', message: err?.message ?? String(err), durationMs: Date.now() - startedAt };
+        }
+        finally {
+            if (timer)
+                clearTimeout(timer);
+        }
+    }
+};
+__decorate([
+    Autoinject(HealthCheck),
+    __metadata("design:type", Array)
+], HealthCheckRunner.prototype, "Checks", void 0);
+__decorate([
+    Config('telemetry.health.timeoutMs', { defaultValue: 2000 }),
+    __metadata("design:type", Number)
+], HealthCheckRunner.prototype, "TimeoutMs", void 0);
+__decorate([
+    Config('telemetry.health.failOnDegraded', { defaultValue: false }),
+    __metadata("design:type", Boolean)
+], HealthCheckRunner.prototype, "FailOnDegraded", void 0);
+HealthCheckRunner = __decorate([
+    Singleton(),
+    Injectable()
+], HealthCheckRunner);
+export { HealthCheckRunner };
+//# sourceMappingURL=health.js.map

package/lib/mjs/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../../src/health.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC9E,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAyBhD;;;;;;;;;;GAUG;AACH,MAAM,OAAgB,WAAY,SAAQ,YAAY;CAKrD;AAED,MAAM,IAAI,GAAiC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAE3E;;;;;;;;;GASG;AACH,SAAS,IAAI,CAAC,MAAoB;IAChC,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC;AACnC,CAAC;AAED;;;;;;GAMG;AAGI,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAU5B;;OAEG;IACI,SAAS,CAAC,MAAoB;QACnC,IAAI,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,MAAM,KAAK,UAAU,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC;IAC/D,CAAC;IAEM,KAAK,CAAC,GAAG;QACd,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAEjF,IAAI,KAAK,GAAiB,IAAI,CAAC;QAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,4EAA4E;YAC5E,0EAA0E;YAC1E,2EAA2E;YAC3E,sEAAsE;YACtE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7F,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,KAAkB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QAEzC,IAAI,KAAiC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAChC,KAAK,CAAC,KAAK,EAAE;gBACb,IAAI,OAAO,CAAgB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;oBACvC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,SAAS,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;gBACxG,CAAC,CAAC;aACH,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACrI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAG,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;QACnI,CAAC;gBAAS,CAAC;YACT,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;CACF,CAAA;AApDW;IADT,UAAU,CAAC,WAAW,CAAC;;iDACS;AAGvB;IADT,MAAM,CAAC,4BAA4B,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;;oDAChC;AAGnB;IADT,MAAM,CAAC,iCAAiC,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;;yDAChC;AARxB,iBAAiB;IAF7B,SAAS,EAAE;IACX,UAAU,EAAE;GACA,iBAAiB,CAsD7B"}

package/lib/mjs/index.d.ts

@@ -0,0 +1,16 @@
+export * from './metrics.js';
+export * from './bootstrap.js';
+export * from './InMemoryPerfSink.js';
+export * from './requestStats.js';
+export * from './timeline.js';
+export * from './routeStats.js';
+export * from './store.js';
+export * from './middleware.js';
+export * from './endpoints.js';
+export * from './PromMetricSink.js';
+export * from './policies/TelemetryTokenPolicy.js';
+export * from './policies/PublicPolicy.js';
+export * from './responses.js';
+export * from './health.js';
+export * from './dto/index.js';
+//# sourceMappingURL=index.d.ts.map

package/lib/mjs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/lib/mjs/index.js

@@ -0,0 +1,16 @@
+export * from './metrics.js';
+export * from './bootstrap.js';
+export * from './InMemoryPerfSink.js';
+export * from './requestStats.js';
+export * from './timeline.js';
+export * from './routeStats.js';
+export * from './store.js';
+export * from './middleware.js';
+export * from './endpoints.js';
+export * from './PromMetricSink.js';
+export * from './policies/TelemetryTokenPolicy.js';
+export * from './policies/PublicPolicy.js';
+export * from './responses.js';
+export * from './health.js';
+export * from './dto/index.js';
+//# sourceMappingURL=index.js.map

package/lib/mjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oCAAoC,CAAC;AACnD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC"}

package/lib/mjs/metrics.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The metric abstraction lives in `@spinajs/telemetry-common`, which depends on nothing but
+ * `@spinajs/di` and prom-client.
+ *
+ * It was extracted for one reason: `@spinajs/orm` publishes connection-pool telemetry, and this
+ * package depends on `@spinajs/http`, `@spinajs/log`, `@spinajs/validation` and
+ * `@spinajs/configuration`. An ORM that depended on `@spinajs/telemetry` would put the whole HTTP
+ * stack underneath every database connection. Same reason `@spinajs/configuration-common` and
+ * `@spinajs/log-common` exist.
+ *
+ * Re-exported here so `import { Metrics } from '@spinajs/telemetry'` keeps working, and so both
+ * packages share ONE `Metrics` class identity — DI resolves the singleton by that identity, and a
+ * second copy would mean a second, separate registry.
+ */
+export * from '@spinajs/telemetry-common';
+//# sourceMappingURL=metrics.d.ts.map

package/lib/mjs/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,cAAc,2BAA2B,CAAC"}

package/lib/mjs/metrics.js

@@ -0,0 +1,16 @@
+/**
+ * The metric abstraction lives in `@spinajs/telemetry-common`, which depends on nothing but
+ * `@spinajs/di` and prom-client.
+ *
+ * It was extracted for one reason: `@spinajs/orm` publishes connection-pool telemetry, and this
+ * package depends on `@spinajs/http`, `@spinajs/log`, `@spinajs/validation` and
+ * `@spinajs/configuration`. An ORM that depended on `@spinajs/telemetry` would put the whole HTTP
+ * stack underneath every database connection. Same reason `@spinajs/configuration-common` and
+ * `@spinajs/log-common` exist.
+ *
+ * Re-exported here so `import { Metrics } from '@spinajs/telemetry'` keeps working, and so both
+ * packages share ONE `Metrics` class identity — DI resolves the singleton by that identity, and a
+ * second copy would mean a second, separate registry.
+ */
+export * from '@spinajs/telemetry-common';
+//# sourceMappingURL=metrics.js.map

package/lib/mjs/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,cAAc,2BAA2B,CAAC"}

package/lib/mjs/middleware.d.ts

@@ -0,0 +1,81 @@
+import * as express from 'express';
+import { Log } from '@spinajs/log';
+import { ServerMiddleware, Request as sRequest } from '@spinajs/http';
+import { Counter, Gauge, Histogram } from 'prom-client';
+import { Metrics } from './metrics.js';
+import { TelemetryStore } from './store.js';
+/**
+ * Default metric-name prefix for the HTTP telemetry metrics.
+ */
+export declare const DEFAULT_PREFIX = "http";
+/**
+ * Histogram bucket boundaries ( ms ) for request duration.
+ */
+export declare const DURATION_BUCKETS_MS: number[];
+/**
+ * HTTP request-timing / metrics middleware.
+ *
+ * Times every request and records:
+ *  - `${prefix}_requests_total{method,route,status}` — a Counter,
+ *  - `${prefix}_request_duration_ms{method,route,status}` — a Histogram,
+ *  - `${prefix}_requests_in_flight` — a Gauge,
+ * against the DI-resolved {@link Metrics} registry, and feeds the shared
+ * {@link TelemetryStore} that backs the JSON stats endpoints.
+ *
+ * All of the end-of-request work runs from a `res.on( 'finish' )` handler
+ * registered in `before()` — `ServerMiddleware.after()` is never reached for a
+ * normal matched route, the same reason http's own `AccessLog` / `PerfRollup`
+ * middlewares work this way. A `res.on( 'close' )` handler balances the in-flight
+ * gauge — and only the gauge — for requests the client aborted, where `'finish'`
+ * never fires. Every bit of it is guarded so telemetry can never break a request.
+ */
+export declare class TelemetryMiddleware extends ServerMiddleware {
+    protected Log: Log;
+    /**
+     * The shared aggregates. This middleware is the only writer.
+     */
+    protected Store: TelemetryStore;
+    /**
+     * Metric-name prefix. Set it with the `telemetry.prefix` configuration key —
+     * that is the supported way to re-prefix, and it needs no subclass.
+     *
+     * The precedence implemented in {@link ensureMetrics} is: a value assigned to
+     * this field that differs from {@link DEFAULT_PREFIX} wins, otherwise
+     * `telemetry.prefix` is used, otherwise {@link DEFAULT_PREFIX}. That override
+     * exists for subclasses that are replacing the middleware wholesale — see the
+     * README's "Replacing the middleware" section, which also covers the
+     * double-registration hazard of subclassing. Do NOT subclass merely to change
+     * the prefix.
+     */
+    protected Prefix: string;
+    protected ConfiguredPrefix: string;
+    protected Buckets: number[];
+    protected metrics: Metrics;
+    protected requestsTotal: Counter<string>;
+    protected requestDuration: Histogram<string>;
+    protected inFlight: Gauge<string>;
+    private defined;
+    constructor();
+    /**
+     * Lazily resolve {@link Metrics} and define the metric set on first use.
+     * Idempotent — {@link Metrics.defineMetrics} removes+recreates duplicates.
+     */
+    protected ensureMetrics(): void;
+    /**
+     * Derive a stable, low-cardinality route label. Prefers the matched route
+     * path ( `req.route.path` or `req.storage.route` ) over the raw request path.
+     */
+    protected routeLabel(req: sRequest): string;
+    /**
+     * Do the end-of-request accounting. Called from the response `finish` event,
+     * never from `after()`.
+     */
+    protected onFinish(req: sRequest, res: express.Response): void;
+    before(): (req: sRequest, res: express.Response, next: express.NextFunction) => void;
+    /**
+     * Nothing to do after the controllers — express does not run this for a
+     * matched route. See {@link onFinish}.
+     */
+    after(): null;
+}
+//# sourceMappingURL=middleware.d.ts.map

package/lib/mjs/middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.d.ts","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,SAAS,CAAC;AAGnC,OAAO,EAAU,GAAG,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEtE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,OAAO,EAAa,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;GAEG;AACH,eAAO,MAAM,cAAc,SAAS,CAAC;AAErC;;GAEG;AACH,eAAO,MAAM,mBAAmB,UAA0D,CAAC;AAO3F;;;;;;;;;;;;;;;;GAgBG;AACH,qBACa,mBAAoB,SAAQ,gBAAgB;IAEvD,SAAS,CAAC,GAAG,EAAG,GAAG,CAAC;IAEpB;;OAEG;IAEH,SAAS,CAAC,KAAK,EAAG,cAAc,CAAC;IAEjC;;;;;;;;;;;OAWG;IACH,SAAS,CAAC,MAAM,SAAkB;IAGlC,SAAS,CAAC,gBAAgB,EAAG,MAAM,CAAC;IAGpC,SAAS,CAAC,OAAO,EAAG,MAAM,EAAE,CAAC;IAE7B,SAAS,CAAC,OAAO,EAAG,OAAO,CAAC;IAC5B,SAAS,CAAC,aAAa,EAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,SAAS,CAAC,eAAe,EAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,SAAS,CAAC,QAAQ,EAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAEnC,OAAO,CAAC,OAAO,CAAS;;IASxB;;;OAGG;IACH,SAAS,CAAC,aAAa,IAAI,IAAI;IAmC/B;;;OAGG;IACH,SAAS,CAAC,UAAU,CAAC,GAAG,EAAE,QAAQ,GAAG,MAAM;IAO3C;;;OAGG;IACH,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,GAAG,IAAI;IA0BvD,MAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI;IA0C3F;;;OAGG;IACI,KAAK,IAAI,IAAI;CAGrB"}

package/lib/mjs/middleware.js

@@ -0,0 +1,207 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Autoinject, DI, Injectable } from '@spinajs/di';
+import { Config } from '@spinajs/configuration';
+import { Logger, Log } from '@spinajs/log';
+import { ServerMiddleware } from '@spinajs/http';
+import { Metrics } from './metrics.js';
+import { TelemetryStore } from './store.js';
+/**
+ * Default metric-name prefix for the HTTP telemetry metrics.
+ */
+export const DEFAULT_PREFIX = 'http';
+/**
+ * Histogram bucket boundaries ( ms ) for request duration.
+ */
+export const DURATION_BUCKETS_MS = [5, 10, 25, 50, 100, 250, 500, 1000, 2500, 5000, 10000];
+/**
+ * Storage key under `req.storage` holding the per-request start time.
+ */
+const START_KEY = '__telemetryStart';
+/**
+ * HTTP request-timing / metrics middleware.
+ *
+ * Times every request and records:
+ *  - `${prefix}_requests_total{method,route,status}` — a Counter,
+ *  - `${prefix}_request_duration_ms{method,route,status}` — a Histogram,
+ *  - `${prefix}_requests_in_flight` — a Gauge,
+ * against the DI-resolved {@link Metrics} registry, and feeds the shared
+ * {@link TelemetryStore} that backs the JSON stats endpoints.
+ *
+ * All of the end-of-request work runs from a `res.on( 'finish' )` handler
+ * registered in `before()` — `ServerMiddleware.after()` is never reached for a
+ * normal matched route, the same reason http's own `AccessLog` / `PerfRollup`
+ * middlewares work this way. A `res.on( 'close' )` handler balances the in-flight
+ * gauge — and only the gauge — for requests the client aborted, where `'finish'`
+ * never fires. Every bit of it is guarded so telemetry can never break a request.
+ */
+let TelemetryMiddleware = class TelemetryMiddleware extends ServerMiddleware {
+    constructor() {
+        super();
+        /**
+         * Metric-name prefix. Set it with the `telemetry.prefix` configuration key —
+         * that is the supported way to re-prefix, and it needs no subclass.
+         *
+         * The precedence implemented in {@link ensureMetrics} is: a value assigned to
+         * this field that differs from {@link DEFAULT_PREFIX} wins, otherwise
+         * `telemetry.prefix` is used, otherwise {@link DEFAULT_PREFIX}. That override
+         * exists for subclasses that are replacing the middleware wholesale — see the
+         * README's "Replacing the middleware" section, which also covers the
+         * double-registration hazard of subclassing. Do NOT subclass merely to change
+         * the prefix.
+         */
+        this.Prefix = DEFAULT_PREFIX;
+        this.defined = false;
+        // Needs req.storage ( ReqStorage = -2 ) and sits alongside RequestId /
+        // AccessLog ( Order 2 ).
+        this.Order = 2;
+    }
+    /**
+     * Lazily resolve {@link Metrics} and define the metric set on first use.
+     * Idempotent — {@link Metrics.defineMetrics} removes+recreates duplicates.
+     */
+    ensureMetrics() {
+        if (this.defined)
+            return;
+        this.metrics = DI.get(Metrics) ?? DI.resolve(Metrics);
+        // A subclass that overrode Prefix keeps it; otherwise configuration wins.
+        const prefix = this.Prefix !== DEFAULT_PREFIX ? this.Prefix : this.ConfiguredPrefix ?? DEFAULT_PREFIX;
+        const map = this.metrics.defineMetrics(prefix, [
+            {
+                name: 'requests_total',
+                help: 'Total number of HTTP requests',
+                type: 'counter',
+                labelNames: ['method', 'route', 'status'],
+            },
+            {
+                name: 'request_duration_ms',
+                help: 'HTTP request duration in milliseconds',
+                type: 'histogram',
+                labelNames: ['method', 'route', 'status'],
+                buckets: this.Buckets ?? DURATION_BUCKETS_MS,
+            },
+            {
+                name: 'requests_in_flight',
+                help: 'Number of HTTP requests currently in flight',
+                type: 'gauge',
+            },
+        ]);
+        this.requestsTotal = map['requests_total'];
+        this.requestDuration = map['request_duration_ms'];
+        this.inFlight = map['requests_in_flight'];
+        this.defined = true;
+    }
+    /**
+     * Derive a stable, low-cardinality route label. Prefers the matched route
+     * path ( `req.route.path` or `req.storage.route` ) over the raw request path.
+     */
+    routeLabel(req) {
+        const anyReq = req;
+        const matched = anyReq.route?.path ?? req.storage?.route;
+        if (typeof matched === 'string' && matched.length > 0)
+            return matched;
+        return req.path ?? anyReq.originalUrl ?? 'unknown';
+    }
+    /**
+     * Do the end-of-request accounting. Called from the response `finish` event,
+     * never from `after()`.
+     */
+    onFinish(req, res) {
+        try {
+            const start = req.storage?.[START_KEY];
+            const durationMs = start !== undefined ? Number(process.hrtime.bigint() - start) / 1e6 : 0;
+            const method = req.method ?? 'GET';
+            // Read the route label HERE, not in before(): `req.route` is only
+            // populated once the router has matched.
+            const route = this.routeLabel(req);
+            const status = res.statusCode;
+            const labels = { method, route, status: String(status) };
+            // Balance before()'s inc() FIRST: a throw from anything below would
+            // otherwise strand the gauge one higher for the rest of the process.
+            this.inFlight.dec();
+            this.requestDuration.observe(labels, durationMs);
+            this.requestsTotal.inc(labels);
+            this.Store.record(method, route, status, durationMs);
+        }
+        catch (err) {
+            this.Log?.warn(err, 'telemetry finish handler failed');
+        }
+    }
+    before() {
+        return (req, res, next) => {
+            try {
+                this.ensureMetrics();
+                req.storage[START_KEY] = process.hrtime.bigint();
+                this.inFlight.inc();
+                // The inc() above must be balanced exactly once, whichever event wins.
+                // 'finish' does NOT fire when the client disconnects mid-response, only
+                // 'close' does — without the 'close' arm the gauge drifts monotonically
+                // upward for the life of the process behind a load balancer with client
+                // timeouts. On a normal request both fire, 'finish' first, so the flag
+                // is what keeps the gauge from being decremented twice.
+                let settled = false;
+                res.on('finish', () => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    this.onFinish(req, res);
+                });
+                res.on('close', () => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    // Aborted request: balance the gauge and NOTHING else. `res.statusCode`
+                    // is still the un-sent default here, so recording it would pollute the
+                    // status-class counters and the route stats with a response that was
+                    // never sent.
+                    try {
+                        this.inFlight.dec();
+                    }
+                    catch (err) {
+                        this.Log?.warn(err, 'telemetry close handler failed');
+                    }
+                });
+            }
+            catch (err) {
+                this.Log?.warn(err, 'telemetry before() failed');
+            }
+            next();
+        };
+    }
+    /**
+     * Nothing to do after the controllers — express does not run this for a
+     * matched route. See {@link onFinish}.
+     */
+    after() {
+        return null;
+    }
+};
+__decorate([
+    Logger('telemetry'),
+    __metadata("design:type", Log)
+], TelemetryMiddleware.prototype, "Log", void 0);
+__decorate([
+    Autoinject(TelemetryStore),
+    __metadata("design:type", TelemetryStore)
+], TelemetryMiddleware.prototype, "Store", void 0);
+__decorate([
+    Config('telemetry.prefix', { defaultValue: DEFAULT_PREFIX }),
+    __metadata("design:type", String)
+], TelemetryMiddleware.prototype, "ConfiguredPrefix", void 0);
+__decorate([
+    Config('telemetry.buckets', { defaultValue: DURATION_BUCKETS_MS }),
+    __metadata("design:type", Array)
+], TelemetryMiddleware.prototype, "Buckets", void 0);
+TelemetryMiddleware = __decorate([
+    Injectable(ServerMiddleware),
+    __metadata("design:paramtypes", [])
+], TelemetryMiddleware);
+export { TelemetryMiddleware };
+//# sourceMappingURL=middleware.js.map

package/lib/mjs/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/middleware.ts"],"names":[],"mappings":";;;;;;;;;AACA,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAuB,MAAM,eAAe,CAAC;AAGtE,OAAO,EAAE,OAAO,EAAa,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC;AAErC;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;AAE3F;;GAEG;AACH,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC;;;;;;;;;;;;;;;;GAgBG;AAEI,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,gBAAgB;IAqCvD;QACE,KAAK,EAAE,CAAC;QA5BV;;;;;;;;;;;WAWG;QACO,WAAM,GAAG,cAAc,CAAC;QAa1B,YAAO,GAAG,KAAK,CAAC;QAItB,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACjB,CAAC;IAED;;;OAGG;IACO,aAAa;QACrB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAEzB,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEtD,0EAA0E;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,IAAI,cAAc,CAAC;QAEtG,MAAM,GAAG,GAAc,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE;YACxD;gBACE,IAAI,EAAE,gBAAgB;gBACtB,IAAI,EAAE,+BAA+B;gBACrC,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;aAC1C;YACD;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,uCAAuC;gBAC7C,IAAI,EAAE,WAAW;gBACjB,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC;gBACzC,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,mBAAmB;aAC7C;YACD;gBACE,IAAI,EAAE,oBAAoB;gBAC1B,IAAI,EAAE,6CAA6C;gBACnD,IAAI,EAAE,OAAO;aACd;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC,gBAAgB,CAAoB,CAAC;QAC9D,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,qBAAqB,CAAsB,CAAC;QACvE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,oBAAoB,CAAkB,CAAC;QAC3D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED;;;OAGG;IACO,UAAU,CAAC,GAAa;QAChC,MAAM,MAAM,GAAG,GAAU,CAAC;QAC1B,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,IAAK,GAAG,CAAC,OAAe,EAAE,KAAK,CAAC;QAClE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QACtE,OAAO,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC;IACrD,CAAC;IAED;;;OAGG;IACO,QAAQ,CAAC,GAAa,EAAE,GAAqB;QACrD,IAAI,CAAC;YACH,MAAM,KAAK,GAAI,GAAG,CAAC,OAAe,EAAE,CAAC,SAAS,CAAuB,CAAC;YACtE,MAAM,UAAU,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3F,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC;YAEnC,kEAAkE;YAClE,yCAAyC;YACzC,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACnC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC;YAC9B,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAEzD,oEAAoE;YACpE,qEAAqE;YACrE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;YAEpB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACjD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAE/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAY,EAAE,iCAAiC,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAEM,MAAM;QACX,OAAO,CAAC,GAAa,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;YAC1E,IAAI,CAAC;gBACH,IAAI,CAAC,aAAa,EAAE,CAAC;gBACpB,GAAG,CAAC,OAAe,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;gBAEpB,uEAAuE;gBACvE,wEAAwE;gBACxE,wEAAwE;gBACxE,wEAAwE;gBACxE,uEAAuE;gBACvE,wDAAwD;gBACxD,IAAI,OAAO,GAAG,KAAK,CAAC;gBAEpB,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACpB,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAC1B,CAAC,CAAC,CAAC;gBAEH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;oBACnB,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBAEf,wEAAwE;oBACxE,uEAAuE;oBACvE,qEAAqE;oBACrE,cAAc;oBACd,IAAI,CAAC;wBACH,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;oBACtB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAY,EAAE,gCAAgC,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAY,EAAE,2BAA2B,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACI,KAAK;QACV,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AA3KW;IADT,MAAM,CAAC,WAAW,CAAC;8BACJ,GAAG;gDAAC;AAMV;IADT,UAAU,CAAC,cAAc,CAAC;8BACT,cAAc;kDAAC;AAiBvB;IADT,MAAM,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;;6DACzB;AAG1B;IADT,MAAM,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,mBAAmB,EAAE,CAAC;;oDACtC;AA5BlB,mBAAmB;IAD/B,UAAU,CAAC,gBAAgB,CAAC;;GAChB,mBAAmB,CA6K/B"}

package/lib/mjs/package.json

@@ -0,0 +1 @@
+{"type":"module"}

package/lib/mjs/policies/PublicPolicy.d.ts

@@ -0,0 +1,16 @@
+import { BasePolicy, IController, IRoute, Request } from '@spinajs/http';
+/**
+ * A policy that permits everything. Used as the explicit default for the
+ * liveness / readiness endpoints, which must be reachable by kubelet probes and
+ * load balancers that cannot carry a token.
+ *
+ * This exists so the config can name a real class. Leaving the policy config
+ * key empty would work, but the http layer logs `No policy named ... is
+ * registered` on every boot for an unresolvable value, which reads like a
+ * misconfiguration.
+ */
+export declare class PublicPolicy extends BasePolicy {
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(_req: Request): Promise<void>;
+}
+//# sourceMappingURL=PublicPolicy.d.ts.map

package/lib/mjs/policies/PublicPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/PublicPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE;;;;;;;;;GASG;AACH,qBACa,YAAa,SAAQ,UAAU;IACnC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAI3D,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAG7C"}

package/lib/mjs/policies/PublicPolicy.js

@@ -0,0 +1,31 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { Injectable } from '@spinajs/di';
+import { BasePolicy } from '@spinajs/http';
+/**
+ * A policy that permits everything. Used as the explicit default for the
+ * liveness / readiness endpoints, which must be reachable by kubelet probes and
+ * load balancers that cannot carry a token.
+ *
+ * This exists so the config can name a real class. Leaving the policy config
+ * key empty would work, but the http layer logs `No policy named ... is
+ * registered` on every boot for an unresolvable value, which reads like a
+ * misconfiguration.
+ */
+let PublicPolicy = class PublicPolicy extends BasePolicy {
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    execute(_req) {
+        return Promise.resolve();
+    }
+};
+PublicPolicy = __decorate([
+    Injectable(BasePolicy)
+], PublicPolicy);
+export { PublicPolicy };
+//# sourceMappingURL=PublicPolicy.js.map

package/lib/mjs/policies/PublicPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublicPolicy.js","sourceRoot":"","sources":["../../../src/policies/PublicPolicy.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAgC,MAAM,eAAe,CAAC;AAEzE;;;;;;;;;GASG;AAEI,IAAM,YAAY,GAAlB,MAAM,YAAa,SAAQ,UAAU;IACnC,SAAS,CAAC,OAAe,EAAE,SAAsB;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,OAAO,CAAC,IAAa;QAC1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;CACF,CAAA;AARY,YAAY;IADxB,UAAU,CAAC,UAAU,CAAC;GACV,YAAY,CAQxB"}

package/lib/mjs/policies/TelemetryTokenPolicy.d.ts

@@ -0,0 +1,19 @@
+import { BasePolicy, IController, IRoute, Request } from '@spinajs/http';
+import { Log } from '@spinajs/log';
+/**
+ * Shared-token guard for the telemetry endpoints. Reads the expected token from
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
+ * The header name is deliberately unchanged from the retired
+ * `@spinajs/metrics` package so existing scrape configs keep working.
+ *
+ * Bypassed entirely in development.
+ */
+export declare class TelemetryTokenPolicy extends BasePolicy {
+    protected Log: Log;
+    protected Token: string;
+    protected isDev: boolean;
+    protected HEADER_TOKEN_FIELD: string;
+    isEnabled(_action: IRoute, _instance: IController): boolean;
+    execute(req: Request): Promise<void>;
+}
+//# sourceMappingURL=TelemetryTokenPolicy.d.ts.map

package/lib/mjs/policies/TelemetryTokenPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TelemetryTokenPolicy.d.ts","sourceRoot":"","sources":["../../../src/policies/TelemetryTokenPolicy.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAEzE,OAAO,EAAE,GAAG,EAAU,MAAM,cAAc,CAAC;AAG3C;;;;;;;GAOG;AACH,qBACa,oBAAqB,SAAQ,UAAU;IAElD,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;IAGnB,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;IAGxB,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC;IAEzB,SAAS,CAAC,kBAAkB,SAAqB;IAE1C,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,OAAO;IAIrD,OAAO,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAgBlD"}

package/lib/mjs/policies/TelemetryTokenPolicy.js

@@ -0,0 +1,62 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Config } from '@spinajs/configuration';
+import { BasePolicy } from '@spinajs/http';
+import { Forbidden } from '@spinajs/exceptions';
+import { Log, Logger } from '@spinajs/log';
+import { Injectable } from '@spinajs/di';
+/**
+ * Shared-token guard for the telemetry endpoints. Reads the expected token from
+ * `telemetry.auth.token` and compares it against the `x-metrics-token` header.
+ * The header name is deliberately unchanged from the retired
+ * `@spinajs/metrics` package so existing scrape configs keep working.
+ *
+ * Bypassed entirely in development.
+ */
+let TelemetryTokenPolicy = class TelemetryTokenPolicy extends BasePolicy {
+    constructor() {
+        super(...arguments);
+        this.HEADER_TOKEN_FIELD = 'x-metrics-token';
+    }
+    isEnabled(_action, _instance) {
+        return true;
+    }
+    async execute(req) {
+        if (this.isDev) {
+            return;
+        }
+        const token = req.headers[this.HEADER_TOKEN_FIELD];
+        if (!token) {
+            this.Log.warn(`No token is set for restricted area, header field: ${this.HEADER_TOKEN_FIELD}, policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
+            throw new Forbidden('access token is not set');
+        }
+        if (token !== this.Token) {
+            this.Log.warn(`Invalid access token received, header field: ${this.HEADER_TOKEN_FIELD}, policy: TelemetryTokenPolicy, ip: ${req.storage.realIp}`);
+            throw new Forbidden('invalid access token');
+        }
+    }
+};
+__decorate([
+    Logger('Security'),
+    __metadata("design:type", Log)
+], TelemetryTokenPolicy.prototype, "Log", void 0);
+__decorate([
+    Config('telemetry.auth.token'),
+    __metadata("design:type", String)
+], TelemetryTokenPolicy.prototype, "Token", void 0);
+__decorate([
+    Config('configuration.isDevelopment'),
+    __metadata("design:type", Boolean)
+], TelemetryTokenPolicy.prototype, "isDev", void 0);
+TelemetryTokenPolicy = __decorate([
+    Injectable(BasePolicy)
+], TelemetryTokenPolicy);
+export { TelemetryTokenPolicy };
+//# sourceMappingURL=TelemetryTokenPolicy.js.map