@superblocksteam/telemetry 2.0.0-SNAPSHOT.329be19cb7ca892b

package/dist/node/sanitizing-processor.js

@@ -0,0 +1,167 @@
+"use strict";
+/**
+ * Sanitizing Span Processor (Tier 2)
+ *
+ * Sanitizes spans before export per epic-a3-sanitized-traces.
+ * - All spans are passed to localProcessor (full fidelity for local/on-prem retention).
+ * - Only contract-compliant, sanitized spans are exported to Tier 2.
+ * - Fail-closed: when Tier 2 export is disabled, no exporter is attached.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SanitizingSpanProcessor = exports.noopSpanProcessor = void 0;
+const core_1 = require("@opentelemetry/core");
+const policy_js_1 = require("../types/policy.js");
+const BATCH_SIZE = 512;
+/** Max pending spans before dropping. Aligns with BatchSpanProcessor / resilient-exporter queue limits. */
+const MAX_PENDING_EXPORTS = 2048;
+/** No-op span processor for the "local" path when only Tier 2 export is used. */
+class NoopSpanProcessor {
+    onStart() { }
+    onEnd() { }
+    async shutdown() { }
+    async forceFlush() { }
+}
+exports.noopSpanProcessor = new NoopSpanProcessor();
+const EXPORT_INTERVAL_MS = 5000;
+/**
+ * Span processor that sanitizes spans before Tier 2 export.
+ *
+ * CRITICAL: This processor owns the export path. The exporter is internal.
+ * For Tier 1: All spans passed to localProcessor (e.g. no-op or local collector).
+ * For Tier 2: Only contract-compliant spans, sanitized, then batched and exported.
+ *
+ * NOTE: The wrapped tier2Exporter must tolerate concurrent export() calls.
+ * The periodic timer and the batch-size trigger can both fire flushExports()
+ * in the same tick. OTLPTraceExporter is safe; custom exporters should verify.
+ */
+class SanitizingSpanProcessor {
+    exportTimeoutMs;
+    sanitizer;
+    localProcessor;
+    tier2Exporter;
+    logger;
+    pendingExports = [];
+    exportTimer = null;
+    droppedQueueFull = false;
+    /** Tracks in-flight fire-and-forget flushes so shutdown/forceFlush can await them. */
+    inflight = new Set();
+    constructor(policyEvaluator, localProcessor, tier2Exporter, traceSanitizer, logger, exportTimeoutMs = 5000) {
+        this.exportTimeoutMs = exportTimeoutMs;
+        this.sanitizer = traceSanitizer;
+        this.localProcessor = localProcessor;
+        this.logger = logger;
+        this.tier2Exporter = policyEvaluator.isExportEnabled(policy_js_1.TelemetryTier.TIER_2_OPERATIONAL)
+            ? tier2Exporter
+            : null;
+        if (this.tier2Exporter) {
+            this.exportTimer = setInterval(() => this.flushExports("periodic"), EXPORT_INTERVAL_MS);
+            this.exportTimer.unref();
+        }
+    }
+    onStart(span, parentContext) {
+        this.localProcessor.onStart(span, parentContext);
+    }
+    onEnd(span) {
+        this.localProcessor.onEnd(span);
+        if (this.tier2Exporter) {
+            const sanitized = this.sanitizer.sanitize(span);
+            if (sanitized) {
+                if (this.pendingExports.length >= MAX_PENDING_EXPORTS) {
+                    if (!this.droppedQueueFull) {
+                        this.droppedQueueFull = true;
+                        const msg = "Tier 2 pending queue full, dropping new spans until next flush";
+                        const log = this.logger.error ?? this.logger.warn;
+                        log({
+                            component: "SanitizingSpanProcessor",
+                            maxPendingExports: MAX_PENDING_EXPORTS,
+                        }, msg);
+                    }
+                }
+                else {
+                    this.pendingExports.push(sanitized);
+                    if (this.pendingExports.length >= BATCH_SIZE) {
+                        this.flushExports("batch");
+                    }
+                }
+            }
+        }
+    }
+    /** Fire-and-forget batch flush — tracks the in-flight promise so shutdown/forceFlush can await it. */
+    flushExports(phase) {
+        const p = this.flushExportsAsync(phase).finally(() => this.inflight.delete(p));
+        this.inflight.add(p);
+    }
+    /**
+     * Awaitable batch flush for drain paths (shutdown, forceFlush).
+     * Always resolves — times out after exportTimeoutMs if the exporter
+     * never calls its callback (e.g. broken socket, hung downstream).
+     */
+    flushExportsAsync(phase) {
+        if (!this.tier2Exporter || this.pendingExports.length === 0) {
+            return Promise.resolve();
+        }
+        if (this.pendingExports.length < MAX_PENDING_EXPORTS) {
+            this.droppedQueueFull = false;
+        }
+        const batch = this.pendingExports.splice(0, BATCH_SIZE);
+        return new Promise((resolve) => {
+            const timer = setTimeout(() => {
+                this.logger.warn({
+                    component: "SanitizingSpanProcessor",
+                    batchSize: batch.length,
+                    exportTimeoutMs: this.exportTimeoutMs,
+                    phase,
+                }, "Tier 2 span export timed out");
+                resolve();
+            }, this.exportTimeoutMs).unref();
+            try {
+                this.tier2Exporter.export(batch, (result) => {
+                    clearTimeout(timer);
+                    if (result.code !== core_1.ExportResultCode.SUCCESS) {
+                        this.logger.warn({
+                            component: "SanitizingSpanProcessor",
+                            err: result.error,
+                            batchSize: batch.length,
+                        }, "Tier 2 span export failed");
+                    }
+                    resolve();
+                });
+            }
+            catch (err) {
+                clearTimeout(timer);
+                this.logger.warn({
+                    component: "SanitizingSpanProcessor",
+                    err,
+                    batchSize: batch.length,
+                }, "Tier 2 span export threw synchronously");
+                resolve();
+            }
+        });
+    }
+    async shutdown() {
+        if (this.exportTimer) {
+            clearInterval(this.exportTimer);
+            this.exportTimer = null;
+        }
+        while (this.pendingExports.length > 0) {
+            await this.flushExportsAsync("shutdown");
+        }
+        await Promise.allSettled([...this.inflight]);
+        await this.localProcessor.shutdown();
+        if (this.tier2Exporter) {
+            await this.tier2Exporter.shutdown();
+        }
+    }
+    async forceFlush() {
+        while (this.pendingExports.length > 0) {
+            await this.flushExportsAsync("forceFlush");
+        }
+        await Promise.allSettled([...this.inflight]);
+        await this.localProcessor.forceFlush();
+        if (this.tier2Exporter?.forceFlush) {
+            await this.tier2Exporter.forceFlush();
+        }
+    }
+}
+exports.SanitizingSpanProcessor = SanitizingSpanProcessor;
+//# sourceMappingURL=sanitizing-processor.js.map

package/dist/node/sanitizing-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizing-processor.js","sourceRoot":"","sources":["../../src/node/sanitizing-processor.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAGH,8CAAuD;AAUvD,kDAAmD;AAEnD,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,2GAA2G;AAC3G,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,iFAAiF;AACjF,MAAM,iBAAiB;IACrB,OAAO,KAAU,CAAC;IAClB,KAAK,KAAU,CAAC;IAChB,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAClC,KAAK,CAAC,UAAU,KAAmB,CAAC;CACrC;AAEY,QAAA,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AACzD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAehC;;;;;;;;;;GAUG;AACH,MAAa,uBAAuB;IAiBf;IAhBF,SAAS,CAAiB;IAC1B,cAAc,CAAgB;IAC9B,aAAa,CAAsB;IACnC,MAAM,CAA4B;IAC3C,cAAc,GAAmB,EAAE,CAAC;IACpC,WAAW,GAA0C,IAAI,CAAC;IAC1D,gBAAgB,GAAG,KAAK,CAAC;IACjC,sFAAsF;IACrE,QAAQ,GAAG,IAAI,GAAG,EAAiB,CAAC;IAErD,YACE,eAAyC,EACzC,cAA6B,EAC7B,aAAkC,EAClC,cAA8B,EAC9B,MAAiC,EAChB,kBAAkB,IAAI;QAAtB,oBAAe,GAAf,eAAe,CAAO;QAEvC,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC,eAAe,CAClD,yBAAa,CAAC,kBAAkB,CACjC;YACC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EACnC,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAU,EAAE,aAAsB;QACxC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAkB;QACtB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBACtD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;wBAC7B,MAAM,GAAG,GACP,gEAAgE,CAAC;wBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBAClD,GAAG,CACD;4BACE,SAAS,EAAE,yBAAyB;4BACpC,iBAAiB,EAAE,mBAAmB;yBACvC,EACD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;wBAC7C,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,sGAAsG;IAC9F,YAAY,CAAC,KAAiB;QACpC,MAAM,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CACxB,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACK,iBAAiB,CAAC,KAAiB;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACrD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,SAAS,EAAE,yBAAyB;oBACpC,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,eAAe,EAAE,IAAI,CAAC,eAAe;oBACrC,KAAK;iBACN,EACD,8BAA8B,CAC/B,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,KAAK,EAAE,CAAC;YAEjC,IAAI,CAAC;gBACH,IAAI,CAAC,aAAc,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;oBAC3C,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAgB,CAAC,OAAO,EAAE,CAAC;wBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;4BACE,SAAS,EAAE,yBAAyB;4BACpC,GAAG,EAAE,MAAM,CAAC,KAAK;4BACjB,SAAS,EAAE,KAAK,CAAC,MAAM;yBACxB,EACD,2BAA2B,CAC5B,CAAC;oBACJ,CAAC;oBACD,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,IAAI,CACd;oBACE,SAAS,EAAE,yBAAyB;oBACpC,GAAG;oBACH,SAAS,EAAE,KAAK,CAAC,MAAM;iBACxB,EACD,wCAAwC,CACzC,CAAC;gBACF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAjKD,0DAiKC"}

package/dist/node/service-tracers.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Service-scoped tracer factory.
+ *
+ * `service.name` lives on the OTel Resource, and a process has exactly one
+ * primary Resource (set at SDK init). Datadog maps that resource `service.name`
+ * to LLM-Obs `ml_app`, so emitting a subset of spans under a different `ml_app`
+ * requires a provider with a different Resource — not a span attribute (which is
+ * forbidden) nor a second SDK (also forbidden outside this package).
+ *
+ * This factory lazily creates one additional `BasicTracerProvider` per
+ * non-default service name, each carrying a Resource derived from the base via
+ * {@link withServiceName} and sharing the SAME span processor (and therefore the
+ * same sanitization + export pipeline) as the primary SDK. See APPS-5082.
+ *
+ * Side effect: `service.name` also drives the Datadog APM `service`, so spans
+ * emitted under a secondary name surface as a separate APM service entity (not
+ * just a separate LLM-Obs `ml_app`).
+ */
+import { type Tracer } from "@opentelemetry/api";
+import type { Resource } from "@opentelemetry/resources";
+import { type SpanProcessor } from "@opentelemetry/sdk-trace-base";
+/**
+ * A factory for tracers bound to a specific `service.name`.
+ */
+export interface ServiceTracers {
+    /**
+     * Get a tracer that emits spans under `serviceName`. When `serviceName` equals
+     * the default service, the primary (globally registered) provider is used.
+     *
+     * @param name - Instrumentation scope name
+     * @param serviceName - Service identity for emitted spans' resource
+     */
+    getTracer(name: string, serviceName: string): Tracer;
+    /** Flush spans buffered by any secondary providers. */
+    shutdown(): Promise<void>;
+}
+/**
+ * Create a service-scoped tracer factory.
+ *
+ * @param config - Factory configuration
+ * @param config.baseResource - The primary SDK resource to derive from
+ * @param config.defaultServiceName - The primary service name (uses the global provider)
+ * @param config.serviceVersion - Instrumentation version passed to getTracer
+ * @param config.spanProcessor - Span processor shared with secondary providers (omit to disable export)
+ */
+export declare function createServiceTracers(config: {
+    baseResource: Resource;
+    defaultServiceName: string;
+    serviceVersion: string;
+    spanProcessor?: SpanProcessor;
+}): ServiceTracers;
+//# sourceMappingURL=service-tracers.d.ts.map

package/dist/node/service-tracers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-tracers.d.ts","sourceRoot":"","sources":["../../src/node/service-tracers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAS,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,+BAA+B,CAAC;AAIvC;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;;;OAMG;IACH,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IACrD,uDAAuD;IACvD,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,YAAY,EAAE,QAAQ,CAAC;IACvB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B,GAAG,cAAc,CAsDjB"}

package/dist/node/service-tracers.js

@@ -0,0 +1,81 @@
+"use strict";
+/**
+ * Service-scoped tracer factory.
+ *
+ * `service.name` lives on the OTel Resource, and a process has exactly one
+ * primary Resource (set at SDK init). Datadog maps that resource `service.name`
+ * to LLM-Obs `ml_app`, so emitting a subset of spans under a different `ml_app`
+ * requires a provider with a different Resource — not a span attribute (which is
+ * forbidden) nor a second SDK (also forbidden outside this package).
+ *
+ * This factory lazily creates one additional `BasicTracerProvider` per
+ * non-default service name, each carrying a Resource derived from the base via
+ * {@link withServiceName} and sharing the SAME span processor (and therefore the
+ * same sanitization + export pipeline) as the primary SDK. See APPS-5082.
+ *
+ * Side effect: `service.name` also drives the Datadog APM `service`, so spans
+ * emitted under a secondary name surface as a separate APM service entity (not
+ * just a separate LLM-Obs `ml_app`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createServiceTracers = createServiceTracers;
+const api_1 = require("@opentelemetry/api");
+const sdk_trace_base_1 = require("@opentelemetry/sdk-trace-base");
+const resource_js_1 = require("../common/resource.js");
+/**
+ * Create a service-scoped tracer factory.
+ *
+ * @param config - Factory configuration
+ * @param config.baseResource - The primary SDK resource to derive from
+ * @param config.defaultServiceName - The primary service name (uses the global provider)
+ * @param config.serviceVersion - Instrumentation version passed to getTracer
+ * @param config.spanProcessor - Span processor shared with secondary providers (omit to disable export)
+ */
+function createServiceTracers(config) {
+    const { baseResource, defaultServiceName, serviceVersion, spanProcessor } = config;
+    // One secondary provider per non-default service name.
+    const providers = new Map();
+    let shutdownCalled = false;
+    return {
+        getTracer(name, serviceName) {
+            // Default service (or a blank name, which would yield an empty ml_app)
+            // uses the globally registered provider — the primary SDK's when traces
+            // are enabled, otherwise the API's no-op provider. After shutdown we also
+            // route here so a late call (e.g. an in-flight request during graceful
+            // shutdown) never resurrects a secondary provider on the closing pipeline.
+            if (shutdownCalled ||
+                !serviceName.trim() ||
+                serviceName === defaultServiceName) {
+                return api_1.trace.getTracer(name, serviceVersion);
+            }
+            let provider = providers.get(serviceName);
+            if (!provider) {
+                provider = new sdk_trace_base_1.BasicTracerProvider({
+                    resource: (0, resource_js_1.withServiceName)(baseResource, serviceName),
+                    // Share the primary span processor so sanitization + export are
+                    // identical. The primary SDK owns its lifecycle (shutdown), so we
+                    // never shut the shared processor down from here — see shutdown().
+                    spanProcessors: spanProcessor ? [spanProcessor] : [],
+                });
+                providers.set(serviceName, provider);
+            }
+            return provider.getTracer(name, serviceVersion);
+        },
+        async shutdown() {
+            shutdownCalled = true;
+            // Every secondary provider shares the one primary span processor, so flush
+            // it once rather than N times through each provider. Flush only — the
+            // primary SDK owns the processor's shutdown; closing it here would
+            // double-close it. Swallow+log so a flush failure can't reject (which
+            // would block the caller's primary sdk.shutdown()) nor vanish silently.
+            try {
+                await spanProcessor?.forceFlush();
+            }
+            catch (error) {
+                console.warn("[Telemetry] Secondary-service tracer flush failed during shutdown:", error);
+            }
+            providers.clear();
+        },
+    };
+}
+//# sourceMappingURL=service-tracers.js.map

package/dist/node/service-tracers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-tracers.js","sourceRoot":"","sources":["../../src/node/service-tracers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;AAoCH,oDA2DC;AA7FD,4CAAwD;AAExD,kEAGuC;AAEvC,uDAAwD;AAkBxD;;;;;;;;GAQG;AACH,SAAgB,oBAAoB,CAAC,MAKpC;IACC,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,GACvE,MAAM,CAAC;IACT,uDAAuD;IACvD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACzD,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,OAAO;QACL,SAAS,CAAC,IAAY,EAAE,WAAmB;YACzC,uEAAuE;YACvE,wEAAwE;YACxE,0EAA0E;YAC1E,uEAAuE;YACvE,2EAA2E;YAC3E,IACE,cAAc;gBACd,CAAC,WAAW,CAAC,IAAI,EAAE;gBACnB,WAAW,KAAK,kBAAkB,EAClC,CAAC;gBACD,OAAO,WAAK,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC/C,CAAC;YAED,IAAI,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,IAAI,oCAAmB,CAAC;oBACjC,QAAQ,EAAE,IAAA,6BAAe,EAAC,YAAY,EAAE,WAAW,CAAC;oBACpD,gEAAgE;oBAChE,kEAAkE;oBAClE,mEAAmE;oBACnE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE;iBACrD,CAAC,CAAC;gBACH,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,cAAc,GAAG,IAAI,CAAC;YACtB,2EAA2E;YAC3E,sEAAsE;YACtE,mEAAmE;YACnE,sEAAsE;YACtE,wEAAwE;YACxE,IAAI,CAAC;gBACH,MAAM,aAAa,EAAE,UAAU,EAAE,CAAC;YACpC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,oEAAoE,EACpE,KAAK,CACN,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,KAAK,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/node/traced-socket.d.ts

@@ -0,0 +1,120 @@
+/**
+ * TracedSocket for WebSocket connections with OpenTelemetry tracing.
+ *
+ * This is a generic implementation that can be used across services.
+ * Server-specific behavior (like error handling) is injected via callbacks.
+ */
+import { IncomingHttpHeaders } from "http";
+import { Tracer } from "@opentelemetry/api";
+import { ISocket, ISocketClient, MethodHandler, RequestContextBase, SocketMessage, SocketError, MethodHandlers, GenericMiddleware, SocketTimeouts } from "@superblocksteam/shared";
+import { TelemetryTier } from "../types/policy.js";
+/**
+ * PinoLogger interface compatible with pino.
+ */
+interface PinoLogger {
+    error: (obj: object, msg?: string) => void;
+    info: (obj: object, msg?: string) => void;
+    warn: (obj: object, msg?: string) => void;
+}
+/**
+ * WebSocket interface (subset of isomorphic-ws).
+ */
+interface WebSocketLike {
+    readonly readyState: number;
+    close(code?: number, reason?: string): void;
+    send(data: string | ArrayBuffer): void;
+    addEventListener(type: string, listener: (event: unknown) => void): void;
+    removeEventListener(type: string, listener: (event: unknown) => void): void;
+}
+/**
+ * Policy evaluator type (avoids circular dependency on full init).
+ * Use TelemetryPolicyEvaluator from @superblocksteam/telemetry for policy-aware attribute filtering.
+ */
+export type TracedSocketPolicyEvaluator = {
+    evaluate: (tier: TelemetryTier) => {
+        export: boolean;
+    };
+};
+/**
+ * Configuration options for TracedSocket.
+ *
+ * Supports both server (HTTP upgrade with requestHeaders) and client/dev (tracer-only) use cases
+ * for a single consolidated implementation per W3C context propagation epic.
+ */
+export interface TracedSocketConfig {
+    /** Request headers from the WebSocket upgrade request (for W3C trace context extraction). Defaults to {}. */
+    requestHeaders?: IncomingHttpHeaders;
+    /** Tracer instance. Defaults to trace.getTracer("superblocks-ws", "0.0.0"). */
+    tracer?: Tracer;
+    /** Policy evaluator for tier-aware attribute filtering (e.g. from getTelemetryInstance()). */
+    policyEvaluator?: TracedSocketPolicyEvaluator;
+    /** Optional error handler to get HTTP status from errors */
+    getResponseMetaByError?: (error: Error, logger: PinoLogger) => {
+        status: number;
+        message: string;
+    };
+}
+/**
+ * Socket options passed to ISocket.
+ */
+export interface TracedSocketOptions {
+    onClose: (event: {
+        code: number;
+        reason: string;
+    }) => void;
+    timeouts?: SocketTimeouts;
+    logger?: {
+        error: (message?: string) => void;
+        info: (message?: string) => void;
+        warn: (message?: string) => void;
+    };
+}
+/**
+ * TracedSocket extends ISocket to add OpenTelemetry tracing capabilities.
+ *
+ * We override decorateToSend so that outbound request messages carry W3C
+ * traceparent/tracestate, enabling trace continuity for both inbound and
+ * outbound use (server and vite-plugin-file-sync).
+ */
+export declare class TracedSocket<ImplementedMethods, CallableMethods, RequestContext extends RequestContextBase> extends ISocket<ImplementedMethods, CallableMethods, RequestContext> {
+    private activeSpanByRequestId;
+    private middlewareSpanByReqId;
+    private lastActiveSpan;
+    private readonly requestHeaders;
+    private readonly tracer;
+    private readonly policyEvaluator?;
+    private readonly setHttpStatusFromError;
+    constructor(ws: WebSocketLike, requestHandlers: MethodHandlers<ImplementedMethods, CallableMethods, RequestContext>, globalMiddlewares: GenericMiddleware<CallableMethods, RequestContext>[], config: TracedSocketConfig, options: TracedSocketOptions);
+    /**
+     * Injects W3C trace context (traceparent/tracestate) into outbound request messages
+     * so that receiver-side spans can be linked. Used for both response paths and
+     * outbound calls (e.g. vite-plugin callEditorClients/callLibraryClients, server-initiated socket.call.*).
+     */
+    protected decorateToSend(message: SocketMessage): SocketMessage;
+    protected callHandler<Params, Result, CallableMethodsInner, RequestContextInner extends RequestContextBase>(handler: MethodHandler<Params, Result, CallableMethodsInner, RequestContextInner>, params: Params, ctx: RequestContextInner, client: ISocketClient<CallableMethodsInner>, next: () => Promise<Result>): Promise<Result>;
+    /**
+     * Extract parent trace context from HTTP upgrade request headers (W3C Trace Context).
+     * Enables trace continuity from HTTP → WebSocket per epic-c2-context-propagation.
+     */
+    private extractParentContext;
+    /**
+     * Whether to attach Tier 1 attributes (e.g. user email) to spans.
+     * Attach PII when Tier 1 is exported (e.g. CLOUD: all tiers go to Superblocks-owned infra).
+     * Omit PII when Tier 1 is local-only (e.g. CLOUD_PREM: Tier 2 export must not contain PII).
+     * When there is no policy evaluator, do not attach Tier 1 (safe default for PII).
+     */
+    private shouldAttachTier1Attributes;
+    /**
+     * Placeholder for Tier 1 attributes when omitted. Call only when shouldAttachTier1Attributes() is false.
+     * Distinguishes: policy evaluator present but Tier 1 not allowed vs no policy evaluator provided.
+     */
+    private getTier1OmittedPlaceholder;
+    protected handleMessage(message: SocketMessage): Promise<void>;
+    request<Params, Result>(method: string, params: Params, authorization?: string): Promise<Result>;
+    protected respond<Result>(requestId: number, result: Result): void;
+    protected respondError(requestId: number, error: SocketError, exception?: Error): void;
+    private addEvent;
+    close(reason?: string): void;
+}
+export {};
+//# sourceMappingURL=traced-socket.d.ts.map

package/dist/node/traced-socket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-socket.d.ts","sourceRoot":"","sources":["../../src/node/traced-socket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAE3C,OAAO,EAWL,MAAM,EACP,MAAM,oBAAoB,CAAC;AAM5B,OAAO,EACL,OAAO,EACP,aAAa,EACb,aAAa,EAEb,kBAAkB,EAClB,aAAa,EACb,WAAW,EAUX,cAAc,EACd,iBAAiB,EACjB,cAAc,EAEf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASnD;;GAEG;AACH,UAAU,UAAU;IAClB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAKD;;GAEG;AACH,UAAU,aAAa;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7E;AAOD;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;CACxD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,6GAA6G;IAC7G,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,2BAA2B,CAAC;IAC9C,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,CACvB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,KACf;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3D,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACjC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KAClC,CAAC;CACH;AAgED;;;;;;GAMG;AACH,qBAAa,YAAY,CACvB,kBAAkB,EAClB,eAAe,EACf,cAAc,SAAS,kBAAkB,CACzC,SAAQ,OAAO,CAAC,kBAAkB,EAAE,eAAe,EAAE,cAAc,CAAC;IACpE,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA8B;IAC/D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAI7B;gBAGR,EAAE,EAAE,aAAa,EACjB,eAAe,EAAE,cAAc,CAC7B,kBAAkB,EAClB,eAAe,EACf,cAAc,CACf,EACD,iBAAiB,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EACvE,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB;IAkC9B;;;;OAIG;IACH,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa;cAc/C,WAAW,CACzB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,SAAS,kBAAkB,EAE9C,OAAO,EAAE,aAAa,CACpB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,CACpB,EACD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,MAAM,CAAC;IA+ElB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IASnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;cAMlB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA2F7D,OAAO,CAAC,MAAM,EAAE,MAAM,EAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAmBlB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAmClE,SAAS,CAAC,YAAY,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,WAAW,EAClB,SAAS,CAAC,EAAE,KAAK,GAChB,IAAI;IA4BP,OAAO,CAAC,QAAQ;IAST,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;CAsBpC"}