@superblocksteam/telemetry 2.0.0-SNAPSHOT.329be19cb7ca892b

package/dist/npm-registry/spans.js

@@ -0,0 +1,91 @@
+"use strict";
+/**
+ * NPM Registry Spans (APPS-4378)
+ *
+ * OTel-native `startActiveSpan` helpers for the four named npm-registry spans.
+ * Using the global tracer (`trace.getTracer`) means LLMObs interop is
+ * automatic: a span started inside an `@llmobs.decorate`'d context becomes a
+ * child of that task span (shared global tracer provider); outside any LLMObs
+ * context (server verify, CLI bootstrap) it is a root span.
+ *
+ * `org_id` rides on spans (per-trace context), never on a metric label. Raw
+ * registry hostnames are bucketed via {@link bucketNpmRegistryHost} before
+ * they reach a span attribute, matching the metric path — the one exception
+ * is the structured-log path, which keeps the raw host (see
+ * {@link auditNpmRegistryHost} in ./sanitize).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NPM_REGISTRY_SPAN_ATTR = exports.NPM_REGISTRY_SPAN = void 0;
+exports.withNpmRegistrySpan = withNpmRegistrySpan;
+exports.npmPackageUnpackedSizeBytes = npmPackageUnpackedSizeBytes;
+const api_1 = require("@opentelemetry/api");
+/** Instrumentation scope for every npm-registry span. */
+const TRACER_NAME = "superblocks.npm-registry";
+/** The four named spans (APPS-4378). */
+exports.NPM_REGISTRY_SPAN = {
+    VERIFY: "npm_registry.verify",
+    LOOKUP_PACKAGE: "npm_registry.lookup_package",
+    PREPARE_FOR_PRIVATE_REGISTRY: "npm_registry.prepare_for_private_registry",
+    SYNC_HOME_NPMRC: "npm_registry.sync_home_npmrc",
+};
+/**
+ * Canonical span-attribute keys, shared across the four spans so the
+ * dimension names never drift between call sites.
+ */
+exports.NPM_REGISTRY_SPAN_ATTR = {
+    ORG_ID: "org_id",
+    /** Bucketed (`public_npm | private | unknown`) — never the raw host. */
+    REGISTRY_HOST: "registry_host",
+    OUTCOME: "outcome",
+    DURATION_MS: "duration_ms",
+    /** Richer `NpmRegistryFetchResult.source` for drill-down. */
+    SOURCE: "source",
+    REGISTRY_CONFIGURED: "registry_configured",
+    /** Tri-valued: `true | false | "unknown"`. */
+    ALLOW_INSTALL_SCRIPTS: "allow_install_scripts",
+    PACKAGE_NAME_BUCKET: "package_name_bucket",
+    /** Span-attribute ONLY — raw byte counts are unbounded, never a metric label. */
+    PACKAGE_UNPACKED_SIZE_BYTES: "package_unpacked_size_bytes",
+};
+/**
+ * Start an active npm-registry span over the global tracer, run `fn`, and
+ * end the span in `finally`. On throw, the error is recorded
+ * (`span.recordException`) and the span status set to ERROR before the throw
+ * propagates. `fn` receives the span so it can attach final attributes
+ * (outcome / duration) once the operation resolves.
+ */
+async function withNpmRegistrySpan(spanName, initialAttributes, fn) {
+    const tracer = api_1.trace.getTracer(TRACER_NAME);
+    return tracer.startActiveSpan(spanName, async (span) => {
+        if (Object.keys(initialAttributes).length > 0) {
+            span.setAttributes(initialAttributes);
+        }
+        try {
+            return await fn(span);
+        }
+        catch (err) {
+            // `recordException` accepts Error | string; narrow rather than cast.
+            span.recordException(err instanceof Error ? err : String(err));
+            span.setStatus({ code: api_1.SpanStatusCode.ERROR });
+            throw err;
+        }
+        finally {
+            span.end();
+        }
+    });
+}
+/**
+ * Coerce a registry-reported `dist.unpackedSize` to a span-safe value: a
+ * finite, non-negative number, else `undefined`. A hostile or buggy registry
+ * cannot smuggle a non-numeric byte count onto the span through this guard.
+ *
+ * Callers MUST omit the attribute when this returns `undefined` rather than
+ * calling `setAttribute(key, undefined)` (some OTel exporters mishandle
+ * undefined values). The lookup call site guards with `if (size !== undefined)`.
+ */
+function npmPackageUnpackedSizeBytes(raw) {
+    return typeof raw === "number" && Number.isFinite(raw) && raw >= 0
+        ? raw
+        : undefined;
+}
+//# sourceMappingURL=spans.js.map

package/dist/npm-registry/spans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spans.js","sourceRoot":"","sources":["../../src/npm-registry/spans.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AA+CH,kDAqBC;AAWD,kEAIC;AAjFD,4CAK4B;AAE5B,yDAAyD;AACzD,MAAM,WAAW,GAAG,0BAA0B,CAAC;AAE/C,wCAAwC;AAC3B,QAAA,iBAAiB,GAAG;IAC/B,MAAM,EAAE,qBAAqB;IAC7B,cAAc,EAAE,6BAA6B;IAC7C,4BAA4B,EAAE,2CAA2C;IACzE,eAAe,EAAE,8BAA8B;CACvC,CAAC;AAEX;;;GAGG;AACU,QAAA,sBAAsB,GAAG;IACpC,MAAM,EAAE,QAAQ;IAChB,wEAAwE;IACxE,aAAa,EAAE,eAAe;IAC9B,OAAO,EAAE,SAAS;IAClB,WAAW,EAAE,aAAa;IAC1B,6DAA6D;IAC7D,MAAM,EAAE,QAAQ;IAChB,mBAAmB,EAAE,qBAAqB;IAC1C,8CAA8C;IAC9C,qBAAqB,EAAE,uBAAuB;IAC9C,mBAAmB,EAAE,qBAAqB;IAC1C,iFAAiF;IACjF,2BAA2B,EAAE,6BAA6B;CAClD,CAAC;AAEX;;;;;;GAMG;AACI,KAAK,UAAU,mBAAmB,CACvC,QAAgB,EAChB,iBAA6B,EAC7B,EAA8B;IAE9B,MAAM,MAAM,GAAG,WAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,MAAM,CAAC,eAAe,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACrD,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,qEAAqE;YACrE,IAAI,CAAC,eAAe,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/C,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,2BAA2B,CAAC,GAAY;IACtD,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAChE,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC"}

package/dist/testing/in-memory-exporter.d.ts

@@ -0,0 +1,179 @@
+/**
+ * In-Memory Exporters for Testing
+ *
+ * These exporters capture telemetry data in memory for assertion in tests.
+ * No external connections are made.
+ */
+import { ExportResult } from "@opentelemetry/core";
+import type { SpanExporter, ReadableSpan } from "@opentelemetry/sdk-trace-base";
+/**
+ * In-memory span exporter for testing.
+ * Captures all exported spans for assertion.
+ */
+export declare class InMemorySpanExporter implements SpanExporter {
+    private spans;
+    private stopped;
+    /**
+     * Export spans to in-memory storage.
+     */
+    export(spans: ReadableSpan[], resultCallback: (result: ExportResult) => void): void;
+    /**
+     * Shutdown the exporter.
+     */
+    shutdown(): Promise<void>;
+    /**
+     * Force flush (no-op for in-memory).
+     */
+    forceFlush(): Promise<void>;
+    /**
+     * Get all captured spans.
+     */
+    getSpans(): ReadableSpan[];
+    /**
+     * Get the number of captured spans.
+     */
+    getSpanCount(): number;
+    /**
+     * Clear captured spans.
+     */
+    reset(): void;
+    /**
+     * Find spans by name.
+     *
+     * @param name - Span name to search for
+     * @returns Matching spans
+     */
+    findSpansByName(name: string): ReadableSpan[];
+    /**
+     * Find spans by name pattern (regex).
+     *
+     * @param pattern - Regex pattern to match span names
+     * @returns Matching spans
+     */
+    findSpansByPattern(pattern: RegExp): ReadableSpan[];
+    /**
+     * Find spans with a specific attribute value.
+     *
+     * @param key - Attribute key
+     * @param value - Attribute value (or regex for pattern matching)
+     * @returns Matching spans
+     */
+    findSpansByAttribute(key: string, value: string | RegExp): ReadableSpan[];
+    /**
+     * Assert no spans have a specific attribute value.
+     * Useful for ensuring Tier 1 data doesn't leak.
+     *
+     * @param key - Attribute key
+     * @param value - Forbidden attribute value (or regex pattern)
+     * @throws Error if forbidden attribute is found
+     */
+    assertNoAttribute(key: string, value: string | RegExp): void;
+    /**
+     * Assert all spans have a required attribute.
+     *
+     * @param key - Attribute key
+     * @throws Error if any span is missing the attribute
+     */
+    assertAllHaveAttribute(key: string): void;
+    /**
+     * Get span names for debugging.
+     */
+    getSpanNames(): string[];
+}
+/**
+ * Metric data point captured by in-memory exporter.
+ */
+export interface CapturedMetric {
+    name: string;
+    description?: string;
+    unit?: string;
+    type: "counter" | "gauge" | "histogram" | "observable";
+    dataPoints: Array<{
+        value: number;
+        attributes: Record<string, unknown>;
+        timestamp: number;
+    }>;
+}
+/**
+ * In-memory metric exporter for testing.
+ */
+export declare class InMemoryMetricExporter {
+    private metrics;
+    /**
+     * Export metrics to in-memory storage.
+     */
+    export(metrics: CapturedMetric[]): void;
+    /**
+     * Get all captured metrics.
+     */
+    getMetrics(): CapturedMetric[];
+    /**
+     * Find metrics by name.
+     *
+     * @param name - Metric name
+     * @returns Matching metrics
+     */
+    findMetricsByName(name: string): CapturedMetric[];
+    /**
+     * Clear captured metrics.
+     */
+    reset(): void;
+    /**
+     * Assert no metrics have a specific label value.
+     *
+     * @param labelKey - Label key
+     * @param value - Forbidden value
+     * @throws Error if forbidden label is found
+     */
+    assertNoLabel(labelKey: string, value: string | RegExp): void;
+}
+/**
+ * Log record captured by in-memory exporter.
+ */
+export interface CapturedLogRecord {
+    timestamp: number;
+    severityNumber: number;
+    severityText?: string;
+    body?: unknown;
+    attributes: Record<string, unknown>;
+}
+/**
+ * In-memory log exporter for testing.
+ */
+export declare class InMemoryLogExporter {
+    private logs;
+    /**
+     * Export logs to in-memory storage.
+     */
+    export(logs: CapturedLogRecord[]): void;
+    /**
+     * Get all captured logs.
+     */
+    getLogs(): CapturedLogRecord[];
+    /**
+     * Find logs by severity.
+     *
+     * @param severityNumber - Severity level (e.g., 9 for INFO, 13 for WARN, 17 for ERROR)
+     * @returns Matching logs
+     */
+    findLogsBySeverity(severityNumber: number): CapturedLogRecord[];
+    /**
+     * Find logs containing text.
+     *
+     * @param text - Text to search for in log body
+     * @returns Matching logs
+     */
+    findLogsContaining(text: string | RegExp): CapturedLogRecord[];
+    /**
+     * Clear captured logs.
+     */
+    reset(): void;
+    /**
+     * Assert no logs contain sensitive data.
+     *
+     * @param pattern - Pattern to check for (forbidden content)
+     * @throws Error if forbidden content is found
+     */
+    assertNoLogContains(pattern: RegExp): void;
+}
+//# sourceMappingURL=in-memory-exporter.d.ts.map

package/dist/testing/in-memory-exporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-exporter.d.ts","sourceRoot":"","sources":["../../src/testing/in-memory-exporter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAoB,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAEhF;;;GAGG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,KAAK,CAAsB;IACnC,OAAO,CAAC,OAAO,CAAS;IAExB;;OAEG;IACH,MAAM,CACJ,KAAK,EAAE,YAAY,EAAE,EACrB,cAAc,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAC7C,IAAI;IASP;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzB;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B;;OAEG;IACH,QAAQ,IAAI,YAAY,EAAE;IAI1B;;OAEG;IACH,YAAY,IAAI,MAAM;IAItB;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;;OAKG;IACH,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,EAAE;IAI7C;;;;;OAKG;IACH,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,EAAE;IAInD;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,YAAY,EAAE;IAWzE;;;;;;;OAOG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAgB5D;;;;;OAKG;IACH,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAUzC;;OAEG;IACH,YAAY,IAAI,MAAM,EAAE;CAGzB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,YAAY,CAAC;IACvD,UAAU,EAAE,KAAK,CAAC;QAChB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,OAAO,CAAwB;IAEvC;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI;IAIvC;;OAEG;IACH,UAAU,IAAI,cAAc,EAAE;IAI9B;;;;;OAKG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE;IAIjD;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;;;OAMG;IACH,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;CAiB9D;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED;;GAEG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,IAAI,CAA2B;IAEvC;;OAEG;IACH,MAAM,CAAC,IAAI,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAIvC;;OAEG;IACH,OAAO,IAAI,iBAAiB,EAAE;IAI9B;;;;;OAKG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,iBAAiB,EAAE;IAI/D;;;;;OAKG;IACH,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,iBAAiB,EAAE;IAU9D;;OAEG;IACH,KAAK,IAAI,IAAI;IAIb;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAW3C"}

package/dist/testing/in-memory-exporter.js

@@ -0,0 +1,256 @@
+"use strict";
+/**
+ * In-Memory Exporters for Testing
+ *
+ * These exporters capture telemetry data in memory for assertion in tests.
+ * No external connections are made.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryLogExporter = exports.InMemoryMetricExporter = exports.InMemorySpanExporter = void 0;
+const core_1 = require("@opentelemetry/core");
+/**
+ * In-memory span exporter for testing.
+ * Captures all exported spans for assertion.
+ */
+class InMemorySpanExporter {
+    spans = [];
+    stopped = false;
+    /**
+     * Export spans to in-memory storage.
+     */
+    export(spans, resultCallback) {
+        if (this.stopped) {
+            resultCallback({ code: core_1.ExportResultCode.FAILED });
+            return;
+        }
+        this.spans.push(...spans);
+        resultCallback({ code: core_1.ExportResultCode.SUCCESS });
+    }
+    /**
+     * Shutdown the exporter.
+     */
+    shutdown() {
+        this.stopped = true;
+        return Promise.resolve();
+    }
+    /**
+     * Force flush (no-op for in-memory).
+     */
+    forceFlush() {
+        return Promise.resolve();
+    }
+    /**
+     * Get all captured spans.
+     */
+    getSpans() {
+        return [...this.spans];
+    }
+    /**
+     * Get the number of captured spans.
+     */
+    getSpanCount() {
+        return this.spans.length;
+    }
+    /**
+     * Clear captured spans.
+     */
+    reset() {
+        this.spans = [];
+    }
+    /**
+     * Find spans by name.
+     *
+     * @param name - Span name to search for
+     * @returns Matching spans
+     */
+    findSpansByName(name) {
+        return this.spans.filter((s) => s.name === name);
+    }
+    /**
+     * Find spans by name pattern (regex).
+     *
+     * @param pattern - Regex pattern to match span names
+     * @returns Matching spans
+     */
+    findSpansByPattern(pattern) {
+        return this.spans.filter((s) => pattern.test(s.name));
+    }
+    /**
+     * Find spans with a specific attribute value.
+     *
+     * @param key - Attribute key
+     * @param value - Attribute value (or regex for pattern matching)
+     * @returns Matching spans
+     */
+    findSpansByAttribute(key, value) {
+        return this.spans.filter((s) => {
+            const attr = s.attributes[key];
+            if (attr === undefined)
+                return false;
+            if (value instanceof RegExp) {
+                return value.test(String(attr));
+            }
+            return attr === value;
+        });
+    }
+    /**
+     * Assert no spans have a specific attribute value.
+     * Useful for ensuring Tier 1 data doesn't leak.
+     *
+     * @param key - Attribute key
+     * @param value - Forbidden attribute value (or regex pattern)
+     * @throws Error if forbidden attribute is found
+     */
+    assertNoAttribute(key, value) {
+        for (const span of this.spans) {
+            const attr = span.attributes[key];
+            if (attr === undefined)
+                continue;
+            const matches = value instanceof RegExp ? value.test(String(attr)) : attr === value;
+            if (matches) {
+                throw new Error(`Found forbidden attribute ${key}=${String(attr)} on span "${span.name}"`);
+            }
+        }
+    }
+    /**
+     * Assert all spans have a required attribute.
+     *
+     * @param key - Attribute key
+     * @throws Error if any span is missing the attribute
+     */
+    assertAllHaveAttribute(key) {
+        for (const span of this.spans) {
+            if (span.attributes[key] === undefined) {
+                throw new Error(`Span "${span.name}" is missing required attribute "${key}"`);
+            }
+        }
+    }
+    /**
+     * Get span names for debugging.
+     */
+    getSpanNames() {
+        return this.spans.map((s) => s.name);
+    }
+}
+exports.InMemorySpanExporter = InMemorySpanExporter;
+/**
+ * In-memory metric exporter for testing.
+ */
+class InMemoryMetricExporter {
+    metrics = [];
+    /**
+     * Export metrics to in-memory storage.
+     */
+    export(metrics) {
+        this.metrics.push(...metrics);
+    }
+    /**
+     * Get all captured metrics.
+     */
+    getMetrics() {
+        return [...this.metrics];
+    }
+    /**
+     * Find metrics by name.
+     *
+     * @param name - Metric name
+     * @returns Matching metrics
+     */
+    findMetricsByName(name) {
+        return this.metrics.filter((m) => m.name === name);
+    }
+    /**
+     * Clear captured metrics.
+     */
+    reset() {
+        this.metrics = [];
+    }
+    /**
+     * Assert no metrics have a specific label value.
+     *
+     * @param labelKey - Label key
+     * @param value - Forbidden value
+     * @throws Error if forbidden label is found
+     */
+    assertNoLabel(labelKey, value) {
+        for (const metric of this.metrics) {
+            for (const dp of metric.dataPoints) {
+                const label = dp.attributes[labelKey];
+                if (label === undefined)
+                    continue;
+                const matches = value instanceof RegExp ? value.test(String(label)) : label === value;
+                if (matches) {
+                    throw new Error(`Found forbidden label ${labelKey}=${String(label)} on metric "${metric.name}"`);
+                }
+            }
+        }
+    }
+}
+exports.InMemoryMetricExporter = InMemoryMetricExporter;
+/**
+ * In-memory log exporter for testing.
+ */
+class InMemoryLogExporter {
+    logs = [];
+    /**
+     * Export logs to in-memory storage.
+     */
+    export(logs) {
+        this.logs.push(...logs);
+    }
+    /**
+     * Get all captured logs.
+     */
+    getLogs() {
+        return [...this.logs];
+    }
+    /**
+     * Find logs by severity.
+     *
+     * @param severityNumber - Severity level (e.g., 9 for INFO, 13 for WARN, 17 for ERROR)
+     * @returns Matching logs
+     */
+    findLogsBySeverity(severityNumber) {
+        return this.logs.filter((l) => l.severityNumber === severityNumber);
+    }
+    /**
+     * Find logs containing text.
+     *
+     * @param text - Text to search for in log body
+     * @returns Matching logs
+     */
+    findLogsContaining(text) {
+        return this.logs.filter((l) => {
+            if (l.body === undefined)
+                return false;
+            const bodyStr = String(l.body);
+            return text instanceof RegExp
+                ? text.test(bodyStr)
+                : bodyStr.includes(text);
+        });
+    }
+    /**
+     * Clear captured logs.
+     */
+    reset() {
+        this.logs = [];
+    }
+    /**
+     * Assert no logs contain sensitive data.
+     *
+     * @param pattern - Pattern to check for (forbidden content)
+     * @throws Error if forbidden content is found
+     */
+    assertNoLogContains(pattern) {
+        for (const log of this.logs) {
+            if (log.body === undefined)
+                continue;
+            const bodyStr = String(log.body);
+            if (pattern.test(bodyStr)) {
+                throw new Error(`Found forbidden content in log: ${bodyStr.slice(0, 100)}...`);
+            }
+        }
+    }
+}
+exports.InMemoryLogExporter = InMemoryLogExporter;
+//# sourceMappingURL=in-memory-exporter.js.map

package/dist/testing/in-memory-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-exporter.js","sourceRoot":"","sources":["../../src/testing/in-memory-exporter.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEH,8CAAqE;AAGrE;;;GAGG;AACH,MAAa,oBAAoB;IACvB,KAAK,GAAmB,EAAE,CAAC;IAC3B,OAAO,GAAG,KAAK,CAAC;IAExB;;OAEG;IACH,MAAM,CACJ,KAAqB,EACrB,cAA8C;QAE9C,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,cAAc,CAAC,EAAE,IAAI,EAAE,uBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QAC1B,cAAc,CAAC,EAAE,IAAI,EAAE,uBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACnD,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAED;;;;;;OAMG;IACH,oBAAoB,CAAC,GAAW,EAAE,KAAsB;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACrC,IAAI,KAAK,YAAY,MAAM,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,IAAI,KAAK,KAAK,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;OAOG;IACH,iBAAiB,CAAC,GAAW,EAAE,KAAsB;QACnD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YAEjC,MAAM,OAAO,GACX,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;YAEtE,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,KAAK,CACb,6BAA6B,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,GAAG,CAC1E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CAAC,GAAW;QAChC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CACb,SAAS,IAAI,CAAC,IAAI,oCAAoC,GAAG,GAAG,CAC7D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AA3ID,oDA2IC;AAiBD;;GAEG;AACH,MAAa,sBAAsB;IACzB,OAAO,GAAqB,EAAE,CAAC;IAEvC;;OAEG;IACH,MAAM,CAAC,OAAyB;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,IAAY;QAC5B,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrD,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED;;;;;;OAMG;IACH,aAAa,CAAC,QAAgB,EAAE,KAAsB;QACpD,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;gBACnC,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,KAAK,KAAK,SAAS;oBAAE,SAAS;gBAElC,MAAM,OAAO,GACX,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC;gBAExE,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,GAAG,CAChF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;CACF;AA1DD,wDA0DC;AAaD;;GAEG;AACH,MAAa,mBAAmB;IACtB,IAAI,GAAwB,EAAE,CAAC;IAEvC;;OAEG;IACH,MAAM,CAAC,IAAyB;QAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,OAAO;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,cAAsB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;IACtE,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,IAAqB;QACtC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,KAAK,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,OAAO,IAAI,YAAY,MAAM;gBAC3B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;gBACpB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,CAAC;IAED;;;;;OAKG;IACH,mBAAmB,CAAC,OAAe;QACjC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAC9D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAnED,kDAmEC"}

package/dist/testing/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Testing Utilities
+ *
+ * In-memory exporters and test helpers for telemetry assertions.
+ */
+export { InMemorySpanExporter, InMemoryMetricExporter, InMemoryLogExporter, type CapturedMetric, type CapturedLogRecord, } from "./in-memory-exporter.js";
+export { initTestTelemetry, getTestTelemetryInstance, resetTestTelemetry, getTestTracer, withTestSpan, type TestTelemetryInstance, } from "./test-init.js";
+export { captureMetrics, type CapturedPoint, type MetricsCapture, } from "./metrics-capture.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,iBAAiB,GACvB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,cAAc,EACd,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAC"}

package/dist/testing/index.js

@@ -0,0 +1,21 @@
+"use strict";
+/**
+ * Testing Utilities
+ *
+ * In-memory exporters and test helpers for telemetry assertions.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.captureMetrics = exports.withTestSpan = exports.getTestTracer = exports.resetTestTelemetry = exports.getTestTelemetryInstance = exports.initTestTelemetry = exports.InMemoryLogExporter = exports.InMemoryMetricExporter = exports.InMemorySpanExporter = void 0;
+var in_memory_exporter_js_1 = require("./in-memory-exporter.js");
+Object.defineProperty(exports, "InMemorySpanExporter", { enumerable: true, get: function () { return in_memory_exporter_js_1.InMemorySpanExporter; } });
+Object.defineProperty(exports, "InMemoryMetricExporter", { enumerable: true, get: function () { return in_memory_exporter_js_1.InMemoryMetricExporter; } });
+Object.defineProperty(exports, "InMemoryLogExporter", { enumerable: true, get: function () { return in_memory_exporter_js_1.InMemoryLogExporter; } });
+var test_init_js_1 = require("./test-init.js");
+Object.defineProperty(exports, "initTestTelemetry", { enumerable: true, get: function () { return test_init_js_1.initTestTelemetry; } });
+Object.defineProperty(exports, "getTestTelemetryInstance", { enumerable: true, get: function () { return test_init_js_1.getTestTelemetryInstance; } });
+Object.defineProperty(exports, "resetTestTelemetry", { enumerable: true, get: function () { return test_init_js_1.resetTestTelemetry; } });
+Object.defineProperty(exports, "getTestTracer", { enumerable: true, get: function () { return test_init_js_1.getTestTracer; } });
+Object.defineProperty(exports, "withTestSpan", { enumerable: true, get: function () { return test_init_js_1.withTestSpan; } });
+var metrics_capture_js_1 = require("./metrics-capture.js");
+Object.defineProperty(exports, "captureMetrics", { enumerable: true, get: function () { return metrics_capture_js_1.captureMetrics; } });
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/testing/index.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,iEAMiC;AAL/B,6HAAA,oBAAoB,OAAA;AACpB,+HAAA,sBAAsB,OAAA;AACtB,4HAAA,mBAAmB,OAAA;AAKrB,+CAOwB;AANtB,iHAAA,iBAAiB,OAAA;AACjB,wHAAA,wBAAwB,OAAA;AACxB,kHAAA,kBAAkB,OAAA;AAClB,6GAAA,aAAa,OAAA;AACb,4GAAA,YAAY,OAAA;AAId,2DAI8B;AAH5B,oHAAA,cAAc,OAAA"}

package/dist/testing/metrics-capture.d.ts

@@ -0,0 +1,29 @@
+/**
+ * In-memory metric capture for tests.
+ *
+ * `initTestTelemetry` registers only a tracer provider, so instruments have
+ * nowhere to record and its `metricExporter` always reads back empty. This
+ * installs a real SDK MeterProvider as the global and flattens what it
+ * collects into (name, attributes, value) triples.
+ *
+ * Installing a provider also re-binds instruments written against the lazy
+ * pattern, so a module imported before the harness ran still records.
+ */
+export interface CapturedPoint {
+    attributes: Record<string, unknown>;
+    /** Histogram data points only. */
+    count?: number;
+    /** Histogram data points only. */
+    sum?: number;
+    /** Counter and gauge data points only. */
+    value?: number;
+}
+export interface MetricsCapture {
+    /** Every data point recorded since the last read. */
+    collect: () => Promise<CapturedPoint[]>;
+    /** Data points for one metric name, recorded since the last read. */
+    pointsFor: (metricName: string) => Promise<CapturedPoint[]>;
+    shutdown: () => Promise<void>;
+}
+export declare function captureMetrics(): MetricsCapture;
+//# sourceMappingURL=metrics-capture.d.ts.map

package/dist/testing/metrics-capture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics-capture.d.ts","sourceRoot":"","sources":["../../src/testing/metrics-capture.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAWH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,0CAA0C;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,qDAAqD;IACrD,OAAO,EAAE,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACxC,qEAAqE;IACrE,SAAS,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5D,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED,wBAAgB,cAAc,IAAI,cAAc,CA+D/C"}