@superblocksteam/telemetry 2.0.93 → 2.0.94-next.1

package/dist/node/safe-logger.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Policy-Aware Safe Logger (Pino Wrapper)
+ *
+ * Wraps a Pino logger to redact forbidden fields (e.g. stack, prompt, code)
+ * from log call arguments so Tier 1 data is not written to stdout/log export.
+ *
+ * @see https://github.com/superblocksteam/engineering/blob/main/projects/o11y-refactor/epics/epic-c4-logging-strategy.md
+ */
+import { type LoggingPolicyConfig } from "./log-processor.js";
+/**
+ * Minimal logger interface compatible with Pino.
+ * Use createSafeLogger(pinoLogger, policy) with a Pino logger instance.
+ */
+export interface SafeLoggerLike {
+    trace(...args: unknown[]): void;
+    debug(...args: unknown[]): void;
+    info(...args: unknown[]): void;
+    warn(...args: unknown[]): void;
+    error(...args: unknown[]): void;
+    fatal(...args: unknown[]): void;
+    child(bindings: Record<string, unknown>): SafeLoggerLike;
+}
+/**
+ * Redact and sanitize a single log argument: key-based (forbidden fields) and
+ * value-based (stack traces, PII, policy redactPatterns). Error instances are
+ * converted to a plain object first. Exported for use by callers (e.g. server
+ * RemoteLogger redactRecord) so stdout and OTLP paths share the same rules.
+ */
+export declare function redactForbiddenFields(arg: unknown, policy: LoggingPolicyConfig): unknown;
+/**
+ * Creates a logger wrapper that redacts policy-forbidden fields from log calls
+ * and applies the policy-effective log level (exportMode + envLevel) so that
+ * both the root and any child loggers respect exportMode (e.g. ERRORS_ONLY → warn floor).
+ *
+ * Use when logging in contexts where output may be exported (e.g. cloud-prem).
+ * Forbidden fields (stack, prompt, code, filePath, etc.) are replaced with
+ * "[REDACTED]" so they never appear in exported logs.
+ *
+ * @param baseLogger - Underlying Pino (or compatible) logger
+ * @param policy - Logging policy (e.g. from getLoggingPolicy(telemetryPolicy))
+ * @param envLevel - Optional env-configured level (e.g. SUPERBLOCKS_SERVER_LOG_LEVEL).
+ *   When provided, base logger level is set from getMinimumPinoLevelFromLoggingPolicy(policy, envLevel)
+ *   so exportMode (e.g. ERRORS_ONLY) is respected; children inherit this level in .child().
+ * @returns A logger that redacts forbidden fields and respects policy level (same interface as baseLogger)
+ *
+ * @example
+ * ```typescript
+ * const policy = getLoggingPolicy(telemetryPolicy);
+ * const safeLogger = createSafeLogger(logger, policy, envs.get('SUPERBLOCKS_SERVER_LOG_LEVEL'));
+ * safeLogger.error({ err, stack: err.stack }, 'Request failed');
+ * // Exported logs see stack: "[REDACTED]"
+ * ```
+ */
+export declare function createSafeLogger<T extends SafeLoggerLike>(baseLogger: T, policy: LoggingPolicyConfig, envLevel?: string): T;
+//# sourceMappingURL=safe-logger.d.ts.map

package/dist/node/safe-logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-logger.d.ts","sourceRoot":"","sources":["../../src/node/safe-logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAE5B;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,IAAI,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAC/B,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC;CAC1D;AA+BD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAaT;AAsCD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,cAAc,EACvD,UAAU,EAAE,CAAC,EACb,MAAM,EAAE,mBAAmB,EAC3B,QAAQ,CAAC,EAAE,MAAM,GAChB,CAAC,CA6EH"}

package/dist/node/safe-logger.js

@@ -0,0 +1,158 @@
+"use strict";
+/**
+ * Policy-Aware Safe Logger (Pino Wrapper)
+ *
+ * Wraps a Pino logger to redact forbidden fields (e.g. stack, prompt, code)
+ * from log call arguments so Tier 1 data is not written to stdout/log export.
+ *
+ * @see https://github.com/superblocksteam/engineering/blob/main/projects/o11y-refactor/epics/epic-c4-logging-strategy.md
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redactForbiddenFields = redactForbiddenFields;
+exports.createSafeLogger = createSafeLogger;
+const log_sanitizer_js_1 = require("../common/log-sanitizer.js");
+const log_processor_js_1 = require("./log-processor.js");
+/** Log level methods only. "child" is handled separately so returned children are also wrapped with createSafeLogger. */
+const LOG_METHODS = new Set([
+    "trace",
+    "debug",
+    "info",
+    "warn",
+    "error",
+    "fatal",
+]);
+/**
+ * Convert an Error to a plain object so it can be redacted like any other object.
+ * Includes name, message, stack, and any own enumerable properties (e.g. code, statusCode).
+ */
+function errorToPlainObject(err) {
+    const obj = {
+        message: err.message,
+        name: err.name,
+        stack: err.stack,
+    };
+    const errRecord = err;
+    for (const key of Object.keys(err)) {
+        if (!Object.prototype.hasOwnProperty.call(obj, key)) {
+            obj[key] = errRecord[key];
+        }
+    }
+    return obj;
+}
+/**
+ * Redact and sanitize a single log argument: key-based (forbidden fields) and
+ * value-based (stack traces, PII, policy redactPatterns). Error instances are
+ * converted to a plain object first. Exported for use by callers (e.g. server
+ * RemoteLogger redactRecord) so stdout and OTLP paths share the same rules.
+ */
+function redactForbiddenFields(arg, policy) {
+    if (arg === null || typeof arg !== "object") {
+        return arg;
+    }
+    if (arg instanceof Error) {
+        return redactForbiddenFields(errorToPlainObject(arg), policy);
+    }
+    return (0, log_sanitizer_js_1.sanitizeLogRecordForExport)(arg, policy.forbiddenFields, policy.redactPatterns, policy.sensitivePatterns);
+}
+function redactArg(arg, policy) {
+    return redactForbiddenFields(arg, policy);
+}
+/**
+ * Redact log call arguments: first arg (merge object) with key+value sanitization,
+ * and message string (second arg) with value-based sanitization (patterns, stack, PII).
+ */
+function redactArgs(args, policy) {
+    if (args.length === 0)
+        return args;
+    const [first, ...rest] = args;
+    const redactedFirst = typeof first === "object" && first !== null
+        ? redactArg(first, policy)
+        : typeof first === "string"
+            ? (0, log_sanitizer_js_1.sanitizeLogMessageForExport)(first, policy.redactPatterns, policy.sensitivePatterns)
+            : first;
+    const redactedRest = rest.map((r, i) => i === 0 && typeof r === "string"
+        ? (0, log_sanitizer_js_1.sanitizeLogMessageForExport)(r, policy.redactPatterns, policy.sensitivePatterns)
+        : r);
+    return [redactedFirst, ...redactedRest];
+}
+/**
+ * Creates a logger wrapper that redacts policy-forbidden fields from log calls
+ * and applies the policy-effective log level (exportMode + envLevel) so that
+ * both the root and any child loggers respect exportMode (e.g. ERRORS_ONLY → warn floor).
+ *
+ * Use when logging in contexts where output may be exported (e.g. cloud-prem).
+ * Forbidden fields (stack, prompt, code, filePath, etc.) are replaced with
+ * "[REDACTED]" so they never appear in exported logs.
+ *
+ * @param baseLogger - Underlying Pino (or compatible) logger
+ * @param policy - Logging policy (e.g. from getLoggingPolicy(telemetryPolicy))
+ * @param envLevel - Optional env-configured level (e.g. SUPERBLOCKS_SERVER_LOG_LEVEL).
+ *   When provided, base logger level is set from getMinimumPinoLevelFromLoggingPolicy(policy, envLevel)
+ *   so exportMode (e.g. ERRORS_ONLY) is respected; children inherit this level in .child().
+ * @returns A logger that redacts forbidden fields and respects policy level (same interface as baseLogger)
+ *
+ * @example
+ * ```typescript
+ * const policy = getLoggingPolicy(telemetryPolicy);
+ * const safeLogger = createSafeLogger(logger, policy, envs.get('SUPERBLOCKS_SERVER_LOG_LEVEL'));
+ * safeLogger.error({ err, stack: err.stack }, 'Request failed');
+ * // Exported logs see stack: "[REDACTED]"
+ * ```
+ */
+function createSafeLogger(baseLogger, policy, envLevel) {
+    if (envLevel !== undefined) {
+        const effectiveLevel = (0, log_processor_js_1.getMinimumPinoLevelFromLoggingPolicy)(policy, envLevel);
+        baseLogger.level = effectiveLevel;
+    }
+    return new Proxy(baseLogger, {
+        get(target, prop) {
+            if (typeof prop === "symbol")
+                return Reflect.get(target, prop);
+            const value = target[prop];
+            if (LOG_METHODS.has(prop) && typeof value === "function") {
+                return (...args) => {
+                    let redacted;
+                    try {
+                        redacted = redactArgs(args, policy);
+                    }
+                    catch {
+                        // Redaction can throw (e.g. Proxy with throwing getters, circular refs).
+                        // Never emit original args — use a safe fallback so PII/Tier 1 is not exported.
+                        redacted = [
+                            { "[SafeLogger]": "redaction_failed" },
+                            "[SafeLogger] Log omitted: redaction failed",
+                        ];
+                        target.error("[SafeLogger] Redaction failed; log omitted to avoid leaking data");
+                    }
+                    return value.apply(target, redacted);
+                };
+            }
+            if (prop === "child" && typeof value === "function") {
+                return (bindings) => {
+                    // Redact forbidden fields from child bindings so they never appear in log output
+                    // (e.g. user-email from req.logTags would otherwise be merged into every log line)
+                    let redactedBindings;
+                    try {
+                        redactedBindings = redactArg(bindings, policy);
+                    }
+                    catch {
+                        // Never pass original bindings — use empty so PII/Tier 1 is not exported.
+                        redactedBindings = {};
+                        target.error("[SafeLogger] Child bindings omitted: redaction failed");
+                    }
+                    const child = value.call(target, redactedBindings);
+                    // Ensure child respects same level as parent (exportMode / localMaxLevel)
+                    const parentWithLevel = target;
+                    const childWithLevel = child;
+                    if (parentWithLevel.level !== undefined &&
+                        childWithLevel.level !== undefined) {
+                        childWithLevel.level = parentWithLevel.level;
+                    }
+                    return createSafeLogger(child, policy);
+                };
+            }
+            return value;
+        },
+    });
+}
+//# sourceMappingURL=safe-logger.js.map

package/dist/node/safe-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-logger.js","sourceRoot":"","sources":["../../src/node/safe-logger.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AA4DH,sDAgBC;AA8DD,4CAiFC;AAzND,iEAGoC;AACpC,yDAG4B;AAgB5B,yHAAyH;AACzH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC;IAC1B,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAU;IACpC,MAAM,GAAG,GAA4B;QACnC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;IACF,MAAM,SAAS,GAAG,GAAyC,CAAC;IAC5D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,GAAY,EACZ,MAA2B;IAE3B,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,qBAAqB,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,IAAA,6CAA0B,EAC/B,GAAG,EACH,MAAM,CAAC,eAAe,EACtB,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,iBAAiB,CACzB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAY,EAAE,MAA2B;IAC1D,OAAO,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAe,EAAE,MAA2B;IAC9D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnC,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC9B,MAAM,aAAa,GACjB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QACzC,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC;QAC1B,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;YACzB,CAAC,CAAC,IAAA,8CAA2B,EACzB,KAAK,EACL,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,iBAAiB,CACzB;YACH,CAAC,CAAC,KAAK,CAAC;IAEd,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAA,8CAA2B,EACzB,CAAC,EACD,MAAM,CAAC,cAAc,EACrB,MAAM,CAAC,iBAAiB,CACzB;QACH,CAAC,CAAC,CAAC,CACN,CAAC;IAEF,OAAO,CAAC,aAAa,EAAE,GAAG,YAAY,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,SAAgB,gBAAgB,CAC9B,UAAa,EACb,MAA2B,EAC3B,QAAiB;IAEjB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAA,uDAAoC,EACzD,MAAM,EACN,QAAQ,CACT,CAAC;QACD,UAAkD,CAAC,KAAK,GAAG,cAAc,CAAC;IAC7E,CAAC;IAED,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE;QAC3B,GAAG,CAAC,MAAM,EAAE,IAAqB;YAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAe,CAAC,CAAC;YAEtC,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACzD,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;oBAC5B,IAAI,QAAmB,CAAC;oBACxB,IAAI,CAAC;wBACH,QAAQ,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;oBACtC,CAAC;oBAAC,MAAM,CAAC;wBACP,yEAAyE;wBACzE,gFAAgF;wBAChF,QAAQ,GAAG;4BACT,EAAE,cAAc,EAAE,kBAAkB,EAAE;4BACtC,4CAA4C;yBAC7C,CAAC;wBACD,MAAyB,CAAC,KAAK,CAC9B,kEAAkE,CACnE,CAAC;oBACJ,CAAC;oBACD,OAAQ,KAAsC,CAAC,KAAK,CAClD,MAAM,EACN,QAAQ,CACT,CAAC;gBACJ,CAAC,CAAC;YACJ,CAAC;YAED,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;gBACpD,OAAO,CAAC,QAAiC,EAAE,EAAE;oBAC3C,iFAAiF;oBACjF,mFAAmF;oBACnF,IAAI,gBAAyC,CAAC;oBAC9C,IAAI,CAAC;wBACH,gBAAgB,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAG5C,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,0EAA0E;wBAC1E,gBAAgB,GAAG,EAAE,CAAC;wBACrB,MAAyB,CAAC,KAAK,CAC9B,uDAAuD,CACxD,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,GACT,KACD,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;oBACjC,0EAA0E;oBAC1E,MAAM,eAAe,GAAG,MAEvB,CAAC;oBACF,MAAM,cAAc,GAAG,KAEtB,CAAC;oBACF,IACE,eAAe,CAAC,KAAK,KAAK,SAAS;wBACnC,cAAc,CAAC,KAAK,KAAK,SAAS,EAClC,CAAC;wBACD,cAAc,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC;oBAC/C,CAAC;oBACD,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACzC,CAAC,CAAC;YACJ,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAM,CAAC;AACV,CAAC"}

package/dist/node/sanitizing-processor.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Sanitizing Span Processor (Tier 2)
+ *
+ * Sanitizes spans before export per epic-a3-sanitized-traces.
+ * - All spans are passed to localProcessor (full fidelity for local/on-prem retention).
+ * - Only contract-compliant, sanitized spans are exported to Tier 2.
+ * - Fail-closed: when Tier 2 export is disabled, no exporter is attached.
+ */
+import type { Context } from "@opentelemetry/api";
+import type { ReadableSpan, Span, SpanExporter, SpanProcessor } from "@opentelemetry/sdk-trace-base";
+import { TelemetryPolicyEvaluator } from "../common/policy-evaluator.js";
+import { TraceSanitizer } from "../common/trace-sanitizer.js";
+/** No-op span processor for the "local" path when only Tier 2 export is used. */
+declare class NoopSpanProcessor implements SpanProcessor {
+    onStart(): void;
+    onEnd(): void;
+    shutdown(): Promise<void>;
+    forceFlush(): Promise<void>;
+}
+export declare const noopSpanProcessor: NoopSpanProcessor;
+/** Logger interface for processor messages (e.g. queue full, export failure). */
+interface SanitizingProcessorLogger {
+    error?(obj: object, msg?: string): void;
+    error?(msg: string): void;
+    warn(obj: object, msg?: string): void;
+    warn(msg: string): void;
+}
+/**
+ * Span processor that sanitizes spans before Tier 2 export.
+ *
+ * CRITICAL: This processor owns the export path. The exporter is internal.
+ * For Tier 1: All spans passed to localProcessor (e.g. no-op or local collector).
+ * For Tier 2: Only contract-compliant spans, sanitized, then batched and exported.
+ */
+export declare class SanitizingSpanProcessor implements SpanProcessor {
+    private readonly sanitizer;
+    private readonly localProcessor;
+    private readonly tier2Exporter;
+    private readonly logger;
+    private pendingExports;
+    private exportTimer;
+    private droppedQueueFull;
+    constructor(policyEvaluator: TelemetryPolicyEvaluator, localProcessor: SpanProcessor, tier2Exporter: SpanExporter | null, traceSanitizer: TraceSanitizer, logger: SanitizingProcessorLogger);
+    onStart(span: Span, parentContext: Context): void;
+    onEnd(span: ReadableSpan): void;
+    /**
+     * Sends at most one batch (up to BATCH_SIZE) to the tier-2 exporter.
+     * Does not wait for the export callback. Call in a loop when a full drain
+     * is required (e.g. shutdown, forceFlush).
+     */
+    private flushExports;
+    shutdown(): Promise<void>;
+    forceFlush(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sanitizing-processor.d.ts.map

package/dist/node/sanitizing-processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizing-processor.d.ts","sourceRoot":"","sources":["../../src/node/sanitizing-processor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EACV,YAAY,EACZ,IAAI,EACJ,YAAY,EACZ,aAAa,EACd,MAAM,+BAA+B,CAAC;AAGvC,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAO9D,iFAAiF;AACjF,cAAM,iBAAkB,YAAW,aAAa;IAC9C,OAAO,IAAI,IAAI;IACf,KAAK,IAAI,IAAI;IACP,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IACzB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CAClC;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC;AAGzD,iFAAiF;AACjF,UAAU,yBAAyB;IACjC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,KAAK,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBAAa,uBAAwB,YAAW,aAAa;IAC3D,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAiB;IAC3C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAgB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAsB;IACpD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,cAAc,CAAsB;IAC5C,OAAO,CAAC,WAAW,CAA+C;IAClE,OAAO,CAAC,gBAAgB,CAAS;gBAG/B,eAAe,EAAE,wBAAwB,EACzC,cAAc,EAAE,aAAa,EAC7B,aAAa,EAAE,YAAY,GAAG,IAAI,EAClC,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,yBAAyB;IAoBnC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,GAAG,IAAI;IAIjD,KAAK,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI;IA8B/B;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAkBd,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAczB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;CASlC"}

package/dist/node/sanitizing-processor.js

@@ -0,0 +1,124 @@
+"use strict";
+/**
+ * Sanitizing Span Processor (Tier 2)
+ *
+ * Sanitizes spans before export per epic-a3-sanitized-traces.
+ * - All spans are passed to localProcessor (full fidelity for local/on-prem retention).
+ * - Only contract-compliant, sanitized spans are exported to Tier 2.
+ * - Fail-closed: when Tier 2 export is disabled, no exporter is attached.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SanitizingSpanProcessor = exports.noopSpanProcessor = void 0;
+const core_1 = require("@opentelemetry/core");
+const policy_js_1 = require("../types/policy.js");
+const BATCH_SIZE = 512;
+/** Max pending spans before dropping. Aligns with BatchSpanProcessor / resilient-exporter queue limits. */
+const MAX_PENDING_EXPORTS = 2048;
+/** No-op span processor for the "local" path when only Tier 2 export is used. */
+class NoopSpanProcessor {
+    onStart() { }
+    onEnd() { }
+    async shutdown() { }
+    async forceFlush() { }
+}
+exports.noopSpanProcessor = new NoopSpanProcessor();
+const EXPORT_INTERVAL_MS = 5000;
+/**
+ * Span processor that sanitizes spans before Tier 2 export.
+ *
+ * CRITICAL: This processor owns the export path. The exporter is internal.
+ * For Tier 1: All spans passed to localProcessor (e.g. no-op or local collector).
+ * For Tier 2: Only contract-compliant spans, sanitized, then batched and exported.
+ */
+class SanitizingSpanProcessor {
+    sanitizer;
+    localProcessor;
+    tier2Exporter;
+    logger;
+    pendingExports = [];
+    exportTimer = null;
+    droppedQueueFull = false;
+    constructor(policyEvaluator, localProcessor, tier2Exporter, traceSanitizer, logger) {
+        this.sanitizer = traceSanitizer;
+        this.localProcessor = localProcessor;
+        this.logger = logger;
+        this.tier2Exporter = policyEvaluator.isExportEnabled(policy_js_1.TelemetryTier.TIER_2_OPERATIONAL)
+            ? tier2Exporter
+            : null;
+        if (this.tier2Exporter) {
+            this.exportTimer = setInterval(() => this.flushExports(), EXPORT_INTERVAL_MS);
+            this.exportTimer.unref();
+        }
+    }
+    onStart(span, parentContext) {
+        this.localProcessor.onStart(span, parentContext);
+    }
+    onEnd(span) {
+        this.localProcessor.onEnd(span);
+        if (this.tier2Exporter) {
+            const sanitized = this.sanitizer.sanitize(span);
+            if (sanitized) {
+                if (this.pendingExports.length >= MAX_PENDING_EXPORTS) {
+                    if (!this.droppedQueueFull) {
+                        this.droppedQueueFull = true;
+                        const msg = "Tier 2 pending queue full, dropping new spans until next flush";
+                        const log = this.logger.error ?? this.logger.warn;
+                        log({
+                            component: "SanitizingSpanProcessor",
+                            maxPendingExports: MAX_PENDING_EXPORTS,
+                        }, msg);
+                    }
+                }
+                else {
+                    this.pendingExports.push(sanitized);
+                    if (this.pendingExports.length >= BATCH_SIZE) {
+                        this.flushExports();
+                    }
+                }
+            }
+        }
+    }
+    /**
+     * Sends at most one batch (up to BATCH_SIZE) to the tier-2 exporter.
+     * Does not wait for the export callback. Call in a loop when a full drain
+     * is required (e.g. shutdown, forceFlush).
+     */
+    flushExports() {
+        if (!this.tier2Exporter || this.pendingExports.length === 0) {
+            return;
+        }
+        if (this.pendingExports.length < MAX_PENDING_EXPORTS) {
+            this.droppedQueueFull = false;
+        }
+        const batch = this.pendingExports.splice(0, BATCH_SIZE);
+        this.tier2Exporter.export(batch, (result) => {
+            if (result.code !== core_1.ExportResultCode.SUCCESS) {
+                this.logger.warn({ component: "SanitizingSpanProcessor", err: result.error }, "Tier 2 span export failed");
+            }
+        });
+    }
+    async shutdown() {
+        if (this.exportTimer) {
+            clearInterval(this.exportTimer);
+            this.exportTimer = null;
+        }
+        while (this.pendingExports.length > 0) {
+            this.flushExports();
+        }
+        await this.localProcessor.shutdown();
+        if (this.tier2Exporter) {
+            await this.tier2Exporter.shutdown();
+        }
+    }
+    async forceFlush() {
+        while (this.pendingExports.length > 0) {
+            this.flushExports();
+        }
+        await this.localProcessor.forceFlush();
+        if (this.tier2Exporter?.forceFlush) {
+            await this.tier2Exporter.forceFlush();
+        }
+    }
+}
+exports.SanitizingSpanProcessor = SanitizingSpanProcessor;
+//# sourceMappingURL=sanitizing-processor.js.map

package/dist/node/sanitizing-processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitizing-processor.js","sourceRoot":"","sources":["../../src/node/sanitizing-processor.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AASH,8CAAuD;AAIvD,kDAAmD;AAEnD,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,2GAA2G;AAC3G,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAEjC,iFAAiF;AACjF,MAAM,iBAAiB;IACrB,OAAO,KAAU,CAAC;IAClB,KAAK,KAAU,CAAC;IAChB,KAAK,CAAC,QAAQ,KAAmB,CAAC;IAClC,KAAK,CAAC,UAAU,KAAmB,CAAC;CACrC;AAEY,QAAA,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AACzD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAUhC;;;;;;GAMG;AACH,MAAa,uBAAuB;IACjB,SAAS,CAAiB;IAC1B,cAAc,CAAgB;IAC9B,aAAa,CAAsB;IACnC,MAAM,CAA4B;IAC3C,cAAc,GAAmB,EAAE,CAAC;IACpC,WAAW,GAA0C,IAAI,CAAC;IAC1D,gBAAgB,GAAG,KAAK,CAAC;IAEjC,YACE,eAAyC,EACzC,cAA6B,EAC7B,aAAkC,EAClC,cAA8B,EAC9B,MAAiC;QAEjC,IAAI,CAAC,SAAS,GAAG,cAAc,CAAC;QAChC,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,aAAa,GAAG,eAAe,CAAC,eAAe,CAClD,yBAAa,CAAC,kBAAkB,CACjC;YACC,CAAC,CAAC,aAAa;YACf,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAC5B,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,EAAE,EACzB,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAU,EAAE,aAAsB;QACxC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAkB;QACtB,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,SAAS,EAAE,CAAC;gBACd,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBACtD,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBAC3B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;wBAC7B,MAAM,GAAG,GACP,gEAAgE,CAAC;wBACnE,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;wBAClD,GAAG,CACD;4BACE,SAAS,EAAE,yBAAyB;4BACpC,iBAAiB,EAAE,mBAAmB;yBACvC,EACD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACpC,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;wBAC7C,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;OAIG;IACK,YAAY;QAClB,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;YACrD,IAAI,CAAC,gBAAgB,GAAG,KAAK,CAAC;QAChC,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,uBAAgB,CAAC,OAAO,EAAE,CAAC;gBAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,EAAE,SAAS,EAAE,yBAAyB,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAC3D,2BAA2B,CAC5B,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QACtC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC;QACxC,CAAC;IACH,CAAC;CACF;AAlHD,0DAkHC"}

package/dist/node/traced-socket.d.ts

@@ -5,7 +5,9 @@
  * Server-specific behavior (like error handling) is injected via callbacks.
  */
 import { IncomingHttpHeaders } from "http";
+import { Tracer } from "@opentelemetry/api";
 import { ISocket, ISocketClient, MethodHandler, RequestContextBase, SocketMessage, SocketError, MethodHandlers, GenericMiddleware, SocketTimeouts } from "@superblocksteam/shared";
+import { TelemetryTier } from "../types/policy.js";
 /**
  * PinoLogger interface compatible with pino.
  */
@@ -24,12 +26,28 @@ interface WebSocketLike {
     addEventListener(type: string, listener: (event: unknown) => void): void;
     removeEventListener(type: string, listener: (event: unknown) => void): void;
 }
+/**
+ * Policy evaluator type (avoids circular dependency on full init).
+ * Use TelemetryPolicyEvaluator from @superblocksteam/telemetry for policy-aware attribute filtering.
+ */
+export type TracedSocketPolicyEvaluator = {
+    evaluate: (tier: TelemetryTier) => {
+        export: boolean;
+    };
+};
 /**
  * Configuration options for TracedSocket.
+ *
+ * Supports both server (HTTP upgrade with requestHeaders) and client/dev (tracer-only) use cases
+ * for a single consolidated implementation per W3C context propagation epic.
  */
 export interface TracedSocketConfig {
-    /** Request headers from the WebSocket upgrade request */
-    requestHeaders: IncomingHttpHeaders;
+    /** Request headers from the WebSocket upgrade request (for W3C trace context extraction). Defaults to {}. */
+    requestHeaders?: IncomingHttpHeaders;
+    /** Tracer instance. Defaults to trace.getTracer("superblocks-ws", "0.0.0"). */
+    tracer?: Tracer;
+    /** Policy evaluator for tier-aware attribute filtering (e.g. from getTelemetryInstance()). */
+    policyEvaluator?: TracedSocketPolicyEvaluator;
     /** Optional error handler to get HTTP status from errors */
     getResponseMetaByError?: (error: Error, logger: PinoLogger) => {
         status: number;
@@ -54,7 +72,9 @@ export interface TracedSocketOptions {
 /**
  * TracedSocket extends ISocket to add OpenTelemetry tracing capabilities.
  *
- * It manages spans for WebSocket handler calls to provide detailed tracing information.
+ * We override decorateToSend so that outbound request messages carry W3C
+ * traceparent/tracestate, enabling trace continuity for both inbound and
+ * outbound use (server and vite-plugin-file-sync).
  */
 export declare class TracedSocket<ImplementedMethods, CallableMethods, RequestContext extends RequestContextBase> extends ISocket<ImplementedMethods, CallableMethods, RequestContext> {
     private activeSpanByRequestId;
@@ -62,9 +82,33 @@ export declare class TracedSocket<ImplementedMethods, CallableMethods, RequestCo
     private lastActiveSpan;
     private readonly requestHeaders;
     private readonly tracer;
+    private readonly policyEvaluator?;
     private readonly setHttpStatusFromError;
     constructor(ws: WebSocketLike, requestHandlers: MethodHandlers<ImplementedMethods, CallableMethods, RequestContext>, globalMiddlewares: GenericMiddleware<CallableMethods, RequestContext>[], config: TracedSocketConfig, options: TracedSocketOptions);
+    /**
+     * Injects W3C trace context (traceparent/tracestate) into outbound request messages
+     * so that receiver-side spans can be linked. Used for both response paths and
+     * outbound calls (e.g. vite-plugin callEditorClients/callLibraryClients, server-initiated socket.call.*).
+     */
+    protected decorateToSend(message: SocketMessage): SocketMessage;
     protected callHandler<Params, Result, CallableMethodsInner, RequestContextInner extends RequestContextBase>(handler: MethodHandler<Params, Result, CallableMethodsInner, RequestContextInner>, params: Params, ctx: RequestContextInner, client: ISocketClient<CallableMethodsInner>, next: () => Promise<Result>): Promise<Result>;
+    /**
+     * Extract parent trace context from HTTP upgrade request headers (W3C Trace Context).
+     * Enables trace continuity from HTTP → WebSocket per epic-c2-context-propagation.
+     */
+    private extractParentContext;
+    /**
+     * Whether to attach Tier 1 attributes (e.g. user email) to spans.
+     * Attach PII when Tier 1 is exported (e.g. CLOUD: all tiers go to Superblocks-owned infra).
+     * Omit PII when Tier 1 is local-only (e.g. CLOUD_PREM: Tier 2 export must not contain PII).
+     * When there is no policy evaluator, do not attach Tier 1 (safe default for PII).
+     */
+    private shouldAttachTier1Attributes;
+    /**
+     * Placeholder for Tier 1 attributes when omitted. Call only when shouldAttachTier1Attributes() is false.
+     * Distinguishes: policy evaluator present but Tier 1 not allowed vs no policy evaluator provided.
+     */
+    private getTier1OmittedPlaceholder;
     protected handleMessage(message: SocketMessage): Promise<void>;
     request<Params, Result>(method: string, params: Params, authorization?: string): Promise<Result>;
     protected respond<Result>(requestId: number, result: Result): void;

package/dist/node/traced-socket.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"traced-socket.d.ts","sourceRoot":"","sources":["../../src/node/traced-socket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAkB3C,OAAO,EACL,OAAO,EACP,aAAa,EACb,aAAa,EAEb,kBAAkB,EAClB,aAAa,EACb,WAAW,EAUX,cAAc,EACd,iBAAiB,EACjB,cAAc,EAEf,MAAM,yBAAyB,CAAC;AAEjC;;GAEG;AACH,UAAU,UAAU;IAClB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAKD;;GAEG;AACH,UAAU,aAAa;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7E;AAOD;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,cAAc,EAAE,mBAAmB,CAAC;IACpC,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,CACvB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,KACf;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3D,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACjC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KAClC,CAAC;CACH;AAgED;;;;GAIG;AACH,qBAAa,YAAY,CACvB,kBAAkB,EAClB,eAAe,EACf,cAAc,SAAS,kBAAkB,CACzC,SAAQ,OAAO,CAAC,kBAAkB,EAAE,eAAe,EAAE,cAAc,CAAC;IACpE,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAI7B;gBAGR,EAAE,EAAE,aAAa,EACjB,eAAe,EAAE,cAAc,CAC7B,kBAAkB,EAClB,eAAe,EACf,cAAc,CACf,EACD,iBAAiB,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EACvE,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB;cAiCd,WAAW,CACzB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,SAAS,kBAAkB,EAE9C,OAAO,EAAE,aAAa,CACpB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,CACpB,EACD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,MAAM,CAAC;cA+DF,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAqF7D,OAAO,CAAC,MAAM,EAAE,MAAM,EAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAmBlB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAmClE,SAAS,CAAC,YAAY,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,WAAW,EAClB,SAAS,CAAC,EAAE,KAAK,GAChB,IAAI;IA4BP,OAAO,CAAC,QAAQ;IAST,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;CAsBpC"}
+{"version":3,"file":"traced-socket.d.ts","sourceRoot":"","sources":["../../src/node/traced-socket.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAWL,MAAM,EACP,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EACL,OAAO,EACP,aAAa,EACb,aAAa,EAEb,kBAAkB,EAClB,aAAa,EACb,WAAW,EAUX,cAAc,EACd,iBAAiB,EACjB,cAAc,EAEf,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AASnD;;GAEG;AACH,UAAU,UAAU;IAClB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;CAC3C;AAKD;;GAEG;AACH,UAAU,aAAa;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI,CAAC;IACvC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;IACzE,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,GAAG,IAAI,CAAC;CAC7E;AAOD;;;GAGG;AACH,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,CAAC,IAAI,EAAE,aAAa,KAAK;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,CAAC;CACxD,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,6GAA6G;IAC7G,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,+EAA+E;IAC/E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,eAAe,CAAC,EAAE,2BAA2B,CAAC;IAC9C,4DAA4D;IAC5D,sBAAsB,CAAC,EAAE,CACvB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,UAAU,KACf;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC3D,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,MAAM,CAAC,EAAE;QACP,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QAClC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;QACjC,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;KAClC,CAAC;CACH;AAgED;;;;;;GAMG;AACH,qBAAa,YAAY,CACvB,kBAAkB,EAClB,eAAe,EACf,cAAc,SAAS,kBAAkB,CACzC,SAAQ,OAAO,CAAC,kBAAkB,EAAE,eAAe,EAAE,cAAc,CAAC;IACpE,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,qBAAqB,CAA2B;IACxD,OAAO,CAAC,cAAc,CAAmB;IACzC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAA8B;IAC/D,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAI7B;gBAGR,EAAE,EAAE,aAAa,EACjB,eAAe,EAAE,cAAc,CAC7B,kBAAkB,EAClB,eAAe,EACf,cAAc,CACf,EACD,iBAAiB,EAAE,iBAAiB,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EACvE,MAAM,EAAE,kBAAkB,EAC1B,OAAO,EAAE,mBAAmB;IAkC9B;;;;OAIG;IACH,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa;cAc/C,WAAW,CACzB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,SAAS,kBAAkB,EAE9C,OAAO,EAAE,aAAa,CACpB,MAAM,EACN,MAAM,EACN,oBAAoB,EACpB,mBAAmB,CACpB,EACD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,mBAAmB,EACxB,MAAM,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAC3C,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,GAC1B,OAAO,CAAC,MAAM,CAAC;IA+ElB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAI5B;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IASnC;;;OAGG;IACH,OAAO,CAAC,0BAA0B;cAMlB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IA2F7D,OAAO,CAAC,MAAM,EAAE,MAAM,EAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,aAAa,CAAC,EAAE,MAAM,GACrB,OAAO,CAAC,MAAM,CAAC;IAmBlB,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAmClE,SAAS,CAAC,YAAY,CACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,WAAW,EAClB,SAAS,CAAC,EAAE,KAAK,GAChB,IAAI;IA4BP,OAAO,CAAC,QAAQ;IAST,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI;CAsBpC"}