@tanvir1971/core 1.0.0

package/dist/errors.js

@@ -0,0 +1,94 @@
+/**
+ * Axiom AI error taxonomy. Every service throws AxiomError (or maps upstream
+ * failures into one) so clients receive a stable machine-readable contract.
+ */
+const HTTP_STATUS = {
+    AXIOM_UNAUTHENTICATED: 401,
+    AXIOM_FORBIDDEN_TENANT: 403,
+    AXIOM_QUOTA_EXCEEDED: 402,
+    AXIOM_RATE_LIMITED: 429,
+    AXIOM_VALIDATION_FAILED: 400,
+    AXIOM_MODEL_NOT_ALLOWED: 403,
+    AXIOM_UPSTREAM_TIMEOUT: 504,
+    AXIOM_UPSTREAM_UNAVAILABLE: 502,
+    AXIOM_ALL_UPSTREAMS_FAILED: 502,
+    AXIOM_SANDBOX_VIOLATION: 400,
+    AXIOM_WEBHOOK_SIGNATURE_INVALID: 401,
+    AXIOM_NOT_FOUND: 404,
+    AXIOM_CONFLICT: 409,
+    AXIOM_INTERNAL: 500,
+};
+export class AxiomError extends Error {
+    code;
+    statusCode;
+    retryable;
+    details;
+    constructor(code, message, options) {
+        super(message);
+        this.name = "AxiomError";
+        this.code = code;
+        this.statusCode = HTTP_STATUS[code];
+        this.retryable = options?.retryable ?? false;
+        if (options?.details !== undefined) {
+            this.details = options.details;
+        }
+        if (options?.cause !== undefined) {
+            this.cause = options.cause;
+        }
+    }
+    toJSON() {
+        return {
+            error: {
+                code: this.code,
+                message: this.message,
+                retryable: this.retryable,
+                ...(this.details !== undefined ? { details: this.details } : {}),
+            },
+        };
+    }
+    static from(error) {
+        if (error instanceof AxiomError) {
+            return error;
+        }
+        return new AxiomError("AXIOM_INTERNAL", toMessage(error), {
+            cause: error,
+            retryable: true,
+        });
+    }
+}
+function toMessage(value) {
+    return value instanceof Error ? value.message : String(value);
+}
+/* ------------------------------ Factories --------------------------------- */
+export const errors = {
+    unauthenticated: (message = "Missing or invalid API key.") => new AxiomError("AXIOM_UNAUTHENTICATED", message),
+    forbiddenTenant: (message = "Resource is outside the caller's tenant scope.") => new AxiomError("AXIOM_FORBIDDEN_TENANT", message),
+    quotaExceeded: (details) => new AxiomError("AXIOM_QUOTA_EXCEEDED", "Token or spend quota exhausted for this period.", {
+        details,
+        retryable: true,
+    }),
+    rateLimited: (retryAfterSeconds) => new AxiomError("AXIOM_RATE_LIMITED", "Too many requests.", {
+        details: { retryAfterSeconds },
+        retryable: true,
+    }),
+    validationFailed: (details) => new AxiomError("AXIOM_VALIDATION_FAILED", "Request failed schema validation.", { details }),
+    modelNotAllowed: (model) => new AxiomError("AXIOM_MODEL_NOT_ALLOWED", `Model '${model}' is not enabled for this tenant.`),
+    upstreamTimeout: (provider) => new AxiomError("AXIOM_UPSTREAM_TIMEOUT", `Upstream provider '${provider}' timed out.`, {
+        retryable: true,
+        details: { provider },
+    }),
+    upstreamUnavailable: (provider) => new AxiomError("AXIOM_UPSTREAM_UNAVAILABLE", `Upstream provider '${provider}' is unavailable.`, {
+        retryable: true,
+        details: { provider },
+    }),
+    allUpstreamsFailed: (attempts) => new AxiomError("AXIOM_ALL_UPSTREAMS_FAILED", "All routed providers failed.", {
+        retryable: true,
+        details: { attempts },
+    }),
+    sandboxViolation: (reason) => new AxiomError("AXIOM_SANDBOX_VIOLATION", `Tool execution blocked: ${reason}`),
+    webhookSignatureInvalid: () => new AxiomError("AXIOM_WEBHOOK_SIGNATURE_INVALID", "Webhook signature verification failed."),
+    notFound: (resource) => new AxiomError("AXIOM_NOT_FOUND", `${resource} not found.`),
+    conflict: (message) => new AxiomError("AXIOM_CONFLICT", message),
+    internal: (cause) => new AxiomError("AXIOM_INTERNAL", "Internal server error.", { cause, retryable: true }),
+};
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAkBH,MAAM,WAAW,GAA6C;IAC5D,qBAAqB,EAAE,GAAG;IAC1B,sBAAsB,EAAE,GAAG;IAC3B,oBAAoB,EAAE,GAAG;IACzB,kBAAkB,EAAE,GAAG;IACvB,uBAAuB,EAAE,GAAG;IAC5B,uBAAuB,EAAE,GAAG;IAC5B,sBAAsB,EAAE,GAAG;IAC3B,0BAA0B,EAAE,GAAG;IAC/B,0BAA0B,EAAE,GAAG;IAC/B,uBAAuB,EAAE,GAAG;IAC5B,+BAA+B,EAAE,GAAG;IACpC,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,GAAG;IACnB,cAAc,EAAE,GAAG;CACpB,CAAC;AAkBF,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAAiB;IACrB,UAAU,CAAS;IACnB,SAAS,CAAU;IACnB,OAAO,CAAW;IAE3B,YACE,IAAoB,EACpB,OAAe,EACf,OAAqE;QAErE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC;QAC7C,IAAI,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QACjC,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjE;SACF,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,KAAc;QACxB,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE;YACxD,KAAK,EAAE,KAAK;YACZ,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;CACF;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,eAAe,EAAE,CAAC,OAAO,GAAG,6BAA6B,EAAE,EAAE,CAC3D,IAAI,UAAU,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAElD,eAAe,EAAE,CAAC,OAAO,GAAG,gDAAgD,EAAE,EAAE,CAC9E,IAAI,UAAU,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAEnD,aAAa,EAAE,CAAC,OAAiB,EAAE,EAAE,CACnC,IAAI,UAAU,CAAC,sBAAsB,EAAE,iDAAiD,EAAE;QACxF,OAAO;QACP,SAAS,EAAE,IAAI;KAChB,CAAC;IAEJ,WAAW,EAAE,CAAC,iBAAyB,EAAE,EAAE,CACzC,IAAI,UAAU,CAAC,oBAAoB,EAAE,oBAAoB,EAAE;QACzD,OAAO,EAAE,EAAE,iBAAiB,EAAE;QAC9B,SAAS,EAAE,IAAI;KAChB,CAAC;IAEJ,gBAAgB,EAAE,CAAC,OAAiB,EAAE,EAAE,CACtC,IAAI,UAAU,CAAC,yBAAyB,EAAE,mCAAmC,EAAE,EAAE,OAAO,EAAE,CAAC;IAE7F,eAAe,EAAE,CAAC,KAAa,EAAE,EAAE,CACjC,IAAI,UAAU,CAAC,yBAAyB,EAAE,UAAU,KAAK,mCAAmC,CAAC;IAE/F,eAAe,EAAE,CAAC,QAAgB,EAAE,EAAE,CACpC,IAAI,UAAU,CAAC,wBAAwB,EAAE,sBAAsB,QAAQ,cAAc,EAAE;QACrF,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,CAAC;IAEJ,mBAAmB,EAAE,CAAC,QAAgB,EAAE,EAAE,CACxC,IAAI,UAAU,CAAC,4BAA4B,EAAE,sBAAsB,QAAQ,mBAAmB,EAAE;QAC9F,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,CAAC;IAEJ,kBAAkB,EAAE,CAAC,QAAqD,EAAE,EAAE,CAC5E,IAAI,UAAU,CAAC,4BAA4B,EAAE,8BAA8B,EAAE;QAC3E,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,QAAQ,EAAE;KACtB,CAAC;IAEJ,gBAAgB,EAAE,CAAC,MAAc,EAAE,EAAE,CACnC,IAAI,UAAU,CAAC,yBAAyB,EAAE,2BAA2B,MAAM,EAAE,CAAC;IAEhF,uBAAuB,EAAE,GAAG,EAAE,CAC5B,IAAI,UAAU,CAAC,iCAAiC,EAAE,wCAAwC,CAAC;IAE7F,QAAQ,EAAE,CAAC,QAAgB,EAAE,EAAE,CAC7B,IAAI,UAAU,CAAC,iBAAiB,EAAE,GAAG,QAAQ,aAAa,CAAC;IAE7D,QAAQ,EAAE,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAExE,QAAQ,EAAE,CAAC,KAAe,EAAE,EAAE,CAC5B,IAAI,UAAU,CAAC,gBAAgB,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;CAChF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export * from "./version.js";
+export * from "./tokens.js";
+export * from "./types.js";
+export * from "./errors.js";
+export * from "./crypto.js";
+export * from "./config.js";
+export * from "./telemetry.js";
+export * from "./metrics.js";
+export * from "./secrets.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,10 @@
+export * from "./version.js";
+export * from "./tokens.js";
+export * from "./types.js";
+export * from "./errors.js";
+export * from "./crypto.js";
+export * from "./config.js";
+export * from "./telemetry.js";
+export * from "./metrics.js";
+export * from "./secrets.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}

package/dist/metrics.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Prometheus / OpenMetrics registry and instrumentation primitives.
+ * Shared across TypeScript services to export standard /metrics endpoints
+ * consumed by Prometheus and Grafana (O5, Milestone 5.1).
+ */
+export interface MetricLabels {
+    [key: string]: string | number;
+}
+export declare class Counter {
+    readonly name: string;
+    readonly help: string;
+    private values;
+    constructor(name: string, help: string);
+    inc(labels?: MetricLabels, value?: number): void;
+    get(labels?: MetricLabels): number;
+    reset(): void;
+    toPrometheus(): string;
+}
+export declare class Gauge {
+    readonly name: string;
+    readonly help: string;
+    private values;
+    constructor(name: string, help: string);
+    set(value: number, labels?: MetricLabels): void;
+    inc(labels?: MetricLabels, value?: number): void;
+    dec(labels?: MetricLabels, value?: number): void;
+    get(labels?: MetricLabels): number;
+    reset(): void;
+    toPrometheus(): string;
+}
+export declare const DEFAULT_LATENCY_BUCKETS: number[];
+export declare class Histogram {
+    readonly name: string;
+    readonly help: string;
+    private values;
+    readonly buckets: readonly number[];
+    constructor(name: string, help: string, buckets?: readonly number[]);
+    observe(value: number, labels?: MetricLabels): void;
+    reset(): void;
+    toPrometheus(): string;
+}
+export declare class MetricsRegistry {
+    private counters;
+    private gauges;
+    private histograms;
+    registerCounter(name: string, help: string): Counter;
+    registerGauge(name: string, help: string): Gauge;
+    registerHistogram(name: string, help: string, buckets?: readonly number[]): Histogram;
+    getMetricsAsText(): string;
+    clear(): void;
+}
+export declare const globalMetrics: MetricsRegistry;
+export interface HttpMetrics {
+    durationHistogram: Histogram;
+    requestsTotal: Counter;
+    errorsTotal: Counter;
+    record(method: string, route: string, statusCode: number, durationSeconds: number): void;
+}
+export declare function createHttpMetrics(serviceName: string, registry?: MetricsRegistry): HttpMetrics;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;CAChC;AAoBD,qBAAa,OAAO;aAIA,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;IAJ9B,OAAO,CAAC,MAAM,CAA+D;gBAG3D,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM;IAG9B,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,SAAI,GAAG,IAAI;IAO3C,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM;IAIlC,KAAK,IAAI,IAAI;IAIb,YAAY,IAAI,MAAM;CAcvB;AAED,qBAAa,KAAK;aAIE,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;IAJ9B,OAAO,CAAC,MAAM,CAA+D;gBAG3D,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM;IAG9B,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI;IAK/C,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,SAAI,GAAG,IAAI;IAM3C,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,SAAI,GAAG,IAAI;IAM3C,GAAG,CAAC,MAAM,CAAC,EAAE,YAAY,GAAG,MAAM;IAIlC,KAAK,IAAI,IAAI;IAIb,YAAY,IAAI,MAAM;CAcvB;AAED,eAAO,MAAM,uBAAuB,UAEnC,CAAC;AASF,qBAAa,SAAS;aAKF,IAAI,EAAE,MAAM;aACZ,IAAI,EAAE,MAAM;IAL9B,OAAO,CAAC,MAAM,CAA2C;IACzD,SAAgB,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;gBAGzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EAC5B,OAAO,GAAE,SAAS,MAAM,EAA4B;IAKtD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI;IAsBnD,KAAK,IAAI,IAAI;IAIb,YAAY,IAAI,MAAM;CAqCvB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,UAAU,CAAgC;IAElD,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IASpD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK;IAShD,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,SAAS,MAAM,EAA4B,GACnD,SAAS;IASZ,gBAAgB,IAAI,MAAM;IAc1B,KAAK,IAAI,IAAI;CAKd;AAED,eAAO,MAAM,aAAa,iBAAwB,CAAC;AAEnD,MAAM,WAAW,WAAW;IAC1B,iBAAiB,EAAE,SAAS,CAAC;IAC7B,aAAa,EAAE,OAAO,CAAC;IACvB,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1F;AAED,wBAAgB,iBAAiB,CAC/B,WAAW,EAAE,MAAM,EACnB,QAAQ,GAAE,eAA+B,GACxC,WAAW,CAoCb"}

package/dist/metrics.js

@@ -0,0 +1,249 @@
+/**
+ * Prometheus / OpenMetrics registry and instrumentation primitives.
+ * Shared across TypeScript services to export standard /metrics endpoints
+ * consumed by Prometheus and Grafana (O5, Milestone 5.1).
+ */
+function formatLabels(labels) {
+    if (!labels)
+        return "";
+    const entries = Object.entries(labels).filter(([, v]) => v !== undefined && v !== null);
+    if (entries.length === 0)
+        return "";
+    const formatted = entries
+        .map(([k, v]) => `${k}="${String(v).replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n")}"`)
+        .join(",");
+    return `{${formatted}}`;
+}
+function labelsKey(labels) {
+    if (!labels)
+        return "";
+    return Object.entries(labels)
+        .sort(([a], [b]) => a.localeCompare(b))
+        .map(([k, v]) => `${k}=${v}`)
+        .join(",");
+}
+export class Counter {
+    name;
+    help;
+    values = new Map();
+    constructor(name, help) {
+        this.name = name;
+        this.help = help;
+    }
+    inc(labels, value = 1) {
+        if (value < 0)
+            throw new Error("Counter value must be non-negative");
+        const key = labelsKey(labels);
+        const current = this.values.get(key)?.value ?? 0;
+        this.values.set(key, { value: current + value, labels });
+    }
+    get(labels) {
+        return this.values.get(labelsKey(labels))?.value ?? 0;
+    }
+    reset() {
+        this.values.clear();
+    }
+    toPrometheus() {
+        const lines = [
+            `# HELP ${this.name} ${this.help}`,
+            `# TYPE ${this.name} counter`,
+        ];
+        if (this.values.size === 0) {
+            lines.push(`${this.name} 0`);
+        }
+        else {
+            for (const { value, labels } of this.values.values()) {
+                lines.push(`${this.name}${formatLabels(labels)} ${value}`);
+            }
+        }
+        return lines.join("\n");
+    }
+}
+export class Gauge {
+    name;
+    help;
+    values = new Map();
+    constructor(name, help) {
+        this.name = name;
+        this.help = help;
+    }
+    set(value, labels) {
+        const key = labelsKey(labels);
+        this.values.set(key, { value, labels });
+    }
+    inc(labels, value = 1) {
+        const key = labelsKey(labels);
+        const current = this.values.get(key)?.value ?? 0;
+        this.values.set(key, { value: current + value, labels });
+    }
+    dec(labels, value = 1) {
+        const key = labelsKey(labels);
+        const current = this.values.get(key)?.value ?? 0;
+        this.values.set(key, { value: current - value, labels });
+    }
+    get(labels) {
+        return this.values.get(labelsKey(labels))?.value ?? 0;
+    }
+    reset() {
+        this.values.clear();
+    }
+    toPrometheus() {
+        const lines = [
+            `# HELP ${this.name} ${this.help}`,
+            `# TYPE ${this.name} gauge`,
+        ];
+        if (this.values.size === 0) {
+            lines.push(`${this.name} 0`);
+        }
+        else {
+            for (const { value, labels } of this.values.values()) {
+                lines.push(`${this.name}${formatLabels(labels)} ${value}`);
+            }
+        }
+        return lines.join("\n");
+    }
+}
+export const DEFAULT_LATENCY_BUCKETS = [
+    0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1, 2, 5, 10,
+];
+export class Histogram {
+    name;
+    help;
+    values = new Map();
+    buckets;
+    constructor(name, help, buckets = DEFAULT_LATENCY_BUCKETS) {
+        this.name = name;
+        this.help = help;
+        this.buckets = [...buckets].sort((a, b) => a - b);
+    }
+    observe(value, labels) {
+        const key = labelsKey(labels);
+        let state = this.values.get(key);
+        if (!state) {
+            state = {
+                count: 0,
+                sum: 0,
+                buckets: new Array(this.buckets.length).fill(0),
+                labels,
+            };
+            this.values.set(key, state);
+        }
+        state.count += 1;
+        state.sum += value;
+        for (let i = 0; i < this.buckets.length; i++) {
+            const bound = this.buckets[i];
+            if (bound !== undefined && value <= bound) {
+                state.buckets[i] = (state.buckets[i] ?? 0) + 1;
+            }
+        }
+    }
+    reset() {
+        this.values.clear();
+    }
+    toPrometheus() {
+        const lines = [
+            `# HELP ${this.name} ${this.help}`,
+            `# TYPE ${this.name} histogram`,
+        ];
+        if (this.values.size === 0) {
+            for (const b of this.buckets) {
+                lines.push(`${this.name}_bucket{le="${b}"} 0`);
+            }
+            lines.push(`${this.name}_bucket{le="+Inf"} 0`);
+            lines.push(`${this.name}_sum 0`);
+            lines.push(`${this.name}_count 0`);
+        }
+        else {
+            for (const state of this.values.values()) {
+                const baseLabels = state.labels ?? {};
+                for (let i = 0; i < this.buckets.length; i++) {
+                    const bound = this.buckets[i];
+                    const count = state.buckets[i] ?? 0;
+                    if (bound !== undefined) {
+                        lines.push(`${this.name}_bucket${formatLabels({ ...baseLabels, le: bound })} ${count}`);
+                    }
+                }
+                lines.push(`${this.name}_bucket${formatLabels({ ...baseLabels, le: "+Inf" })} ${state.count}`);
+                lines.push(`${this.name}_sum${formatLabels(baseLabels)} ${state.sum}`);
+                lines.push(`${this.name}_count${formatLabels(baseLabels)} ${state.count}`);
+            }
+        }
+        return lines.join("\n");
+    }
+}
+export class MetricsRegistry {
+    counters = new Map();
+    gauges = new Map();
+    histograms = new Map();
+    registerCounter(name, help) {
+        let counter = this.counters.get(name);
+        if (!counter) {
+            counter = new Counter(name, help);
+            this.counters.set(name, counter);
+        }
+        return counter;
+    }
+    registerGauge(name, help) {
+        let gauge = this.gauges.get(name);
+        if (!gauge) {
+            gauge = new Gauge(name, help);
+            this.gauges.set(name, gauge);
+        }
+        return gauge;
+    }
+    registerHistogram(name, help, buckets = DEFAULT_LATENCY_BUCKETS) {
+        let histogram = this.histograms.get(name);
+        if (!histogram) {
+            histogram = new Histogram(name, help, buckets);
+            this.histograms.set(name, histogram);
+        }
+        return histogram;
+    }
+    getMetricsAsText() {
+        const parts = [];
+        for (const c of this.counters.values()) {
+            parts.push(c.toPrometheus());
+        }
+        for (const g of this.gauges.values()) {
+            parts.push(g.toPrometheus());
+        }
+        for (const h of this.histograms.values()) {
+            parts.push(h.toPrometheus());
+        }
+        return parts.join("\n\n") + "\n";
+    }
+    clear() {
+        this.counters.clear();
+        this.gauges.clear();
+        this.histograms.clear();
+    }
+}
+export const globalMetrics = new MetricsRegistry();
+export function createHttpMetrics(serviceName, registry = globalMetrics) {
+    const durationHistogram = registry.registerHistogram("http_server_request_duration_seconds", "HTTP server request duration in seconds");
+    const requestsTotal = registry.registerCounter("http_server_requests_total", "Total count of HTTP server requests");
+    const errorsTotal = registry.registerCounter("http_server_requests_errors_total", "Total count of HTTP server 5xx errors");
+    return {
+        durationHistogram,
+        requestsTotal,
+        errorsTotal,
+        record(method, route, statusCode, durationSeconds) {
+            const labels = {
+                job: serviceName,
+                method: method.toUpperCase(),
+                route: route || "unknown",
+                status: String(statusCode),
+            };
+            durationHistogram.observe(durationSeconds, labels);
+            requestsTotal.inc(labels);
+            if (statusCode >= 500) {
+                errorsTotal.inc({
+                    job: serviceName,
+                    method: method.toUpperCase(),
+                    route: route || "unknown",
+                });
+            }
+        },
+    };
+}
+//# sourceMappingURL=metrics.js.map

package/dist/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../src/metrics.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,SAAS,YAAY,CAAC,MAAqB;IACzC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC;IACxF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO;SACtB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC;SACxG,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,OAAO,IAAI,SAAS,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,SAAS,CAAC,MAAqB;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;SAC5B,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,OAAO,OAAO;IAIA;IACA;IAJV,MAAM,GAAG,IAAI,GAAG,EAAoD,CAAC;IAE7E,YACkB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC3B,CAAC;IAEJ,GAAG,CAAC,MAAqB,EAAE,KAAK,GAAG,CAAC;QAClC,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACrE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,MAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAa;YACtB,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;YAClC,UAAU,IAAI,CAAC,IAAI,UAAU;SAC9B,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,KAAK;IAIE;IACA;IAJV,MAAM,GAAG,IAAI,GAAG,EAAoD,CAAC;IAE7E,YACkB,IAAY,EACZ,IAAY;QADZ,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;IAC3B,CAAC;IAEJ,GAAG,CAAC,KAAa,EAAE,MAAqB;QACtC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,GAAG,CAAC,MAAqB,EAAE,KAAK,GAAG,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,MAAqB,EAAE,KAAK,GAAG,CAAC;QAClC,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,GAAG,CAAC,MAAqB;QACvB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAa;YACtB,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;YAClC,UAAU,IAAI,CAAC,IAAI,QAAQ;SAC5B,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/B,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE;CACtD,CAAC;AASF,MAAM,OAAO,SAAS;IAKF;IACA;IALV,MAAM,GAAG,IAAI,GAAG,EAAgC,CAAC;IACzC,OAAO,CAAoB;IAE3C,YACkB,IAAY,EACZ,IAAY,EAC5B,UAA6B,uBAAuB;QAFpC,SAAI,GAAJ,IAAI,CAAQ;QACZ,SAAI,GAAJ,IAAI,CAAQ;QAG5B,IAAI,CAAC,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,MAAqB;QAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG;gBACN,KAAK,EAAE,CAAC;gBACR,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/C,MAAM;aACP,CAAC;YACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC;QACjB,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC;QACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;gBAC1C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAa;YACtB,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE;YAClC,UAAU,IAAI,CAAC,IAAI,YAAY;SAChC,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,sBAAsB,CAAC,CAAC;YAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,QAAQ,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;gBACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;wBACxB,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,IAAI,UAAU,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,KAAK,EAAE,CAC5E,CAAC;oBACJ,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,IAAI,UAAU,YAAY,CAAC,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CACnF,CAAC;gBACF,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,IAAI,OAAO,YAAY,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,GAAG,EAAE,CAC3D,CAAC;gBACF,KAAK,CAAC,IAAI,CACR,GAAG,IAAI,CAAC,IAAI,SAAS,YAAY,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAC/D,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAClB,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAClC,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;IAElD,eAAe,CAAC,IAAY,EAAE,IAAY;QACxC,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,IAAY;QACtC,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,iBAAiB,CACf,IAAY,EACZ,IAAY,EACZ,UAA6B,uBAAuB;QAEpD,IAAI,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,gBAAgB;QACd,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;IACnC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,eAAe,EAAE,CAAC;AASnD,MAAM,UAAU,iBAAiB,CAC/B,WAAmB,EACnB,WAA4B,aAAa;IAEzC,MAAM,iBAAiB,GAAG,QAAQ,CAAC,iBAAiB,CAClD,sCAAsC,EACtC,yCAAyC,CAC1C,CAAC;IACF,MAAM,aAAa,GAAG,QAAQ,CAAC,eAAe,CAC5C,4BAA4B,EAC5B,qCAAqC,CACtC,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,CAC1C,mCAAmC,EACnC,uCAAuC,CACxC,CAAC;IAEF,OAAO;QACL,iBAAiB;QACjB,aAAa;QACb,WAAW;QACX,MAAM,CAAC,MAAc,EAAE,KAAa,EAAE,UAAkB,EAAE,eAAuB;YAC/E,MAAM,MAAM,GAAG;gBACb,GAAG,EAAE,WAAW;gBAChB,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;gBAC5B,KAAK,EAAE,KAAK,IAAI,SAAS;gBACzB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;aAC3B,CAAC;YACF,iBAAiB,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;YACnD,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;gBACtB,WAAW,CAAC,GAAG,CAAC;oBACd,GAAG,EAAE,WAAW;oBAChB,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE;oBAC5B,KAAK,EAAE,KAAK,IAAI,SAAS;iBAC1B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/secrets.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Secret scrubbing (X6). Central redaction engine used by every service so
+ * that sensitive headers, API keys, and bearer tokens never reach stdout
+ * logs or OpenTelemetry span attributes.
+ */
+/** Header names scrubbed from any serialized request context. */
+export declare const SENSITIVE_HEADERS: readonly ["authorization", "x-api-key", "x-axiom-signature", "x-goog-api-key", "cookie", "set-cookie", "proxy-authorization"];
+export declare const REDACTED = "[REDACTED]";
+/** Redact a single string value that may embed credentials. */
+export declare function scrubText(value: string): string;
+/** Serialize a headers object with every sensitive header redacted. */
+export declare function scrubHeaders(headers: Record<string, string>): Record<string, string>;
+/**
+ * Deep-scrub an arbitrary object (log payloads, span attribute bags):
+ * sensitive-named keys are redacted outright, string values are pattern-scrubbed.
+ */
+export declare function scrubObject<T>(input: T): T;
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export interface Logger {
+    debug(message: string, fields?: Record<string, unknown>): void;
+    info(message: string, message2?: Record<string, unknown>): void;
+    warn(message: string, fields?: Record<string, unknown>): void;
+    error(message: string, fields?: Record<string, unknown>): void;
+}
+export interface SafeLoggerOptions {
+    /** Default: process.stdout / process.stderr. Injectable for tests. */
+    write?: (line: string) => void;
+}
+/**
+ * Structured JSON-lines logger that scrubs every message and field before
+ * writing. All services should log through this instead of console.log so a
+ * leaked provider key in an error message cannot reach stdout.
+ */
+export declare function createSafeLogger(options?: SafeLoggerOptions): Logger;
+/** Guard used before attaching an attribute to a span. */
+export declare function scrubSpanAttribute(name: string, value: string): string;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmBH,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,+HAQpB,CAAC;AAcX,eAAO,MAAM,QAAQ,eAAe,CAAC;AAOrC,+DAA+D;AAC/D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAM/C;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpF;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAE1C;AAcD,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAChE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9D,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAChE;AAED,MAAM,WAAW,iBAAiB;IAChC,sEAAsE;IACtE,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,iBAAsB,GAAG,MAAM,CAiBxE;AAED,0DAA0D;AAC1D,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEtE"}

package/dist/secrets.js

@@ -0,0 +1,113 @@
+/**
+ * Secret scrubbing (X6). Central redaction engine used by every service so
+ * that sensitive headers, API keys, and bearer tokens never reach stdout
+ * logs or OpenTelemetry span attributes.
+ */
+/** Attribute/field names that must never be emitted verbatim. */
+const SENSITIVE_NAME_FRAGMENTS = [
+    "authorization",
+    "api-key",
+    "apikey",
+    "api_key",
+    "x-api-key",
+    "x-axiom-signature",
+    "signature",
+    "token",
+    "secret",
+    "password",
+    "cookie",
+    "session",
+    "credential",
+];
+/** Header names scrubbed from any serialized request context. */
+export const SENSITIVE_HEADERS = [
+    "authorization",
+    "x-api-key",
+    "x-axiom-signature",
+    "x-goog-api-key",
+    "cookie",
+    "set-cookie",
+    "proxy-authorization",
+];
+/** Value patterns that look like credentials even under an innocent key. */
+const VALUE_PATTERNS = [
+    { id: "bearer", re: /\bBearer\s+[A-Za-z0-9\-._~+/=]{8,}/gi },
+    { id: "openai-key", re: /\bsk-[A-Za-z0-9_-]{16,}\b/g },
+    { id: "groq-key", re: /\bgsk_[A-Za-z0-9]{16,}\b/g },
+    { id: "mistral-key", re: /\beyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
+    { id: "aws-key", re: /\bAKIA[0-9A-Z]{16}\b/g },
+    { id: "hmac-hex", re: /\bsha256=[a-f0-9]{32,}\b/gi },
+    { id: "stripe-key", re: /\b(sk|rk)_(test|live)_[A-Za-z0-9]{16,}\b/g },
+    { id: "private-key", re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g },
+];
+export const REDACTED = "[REDACTED]";
+function isSensitiveName(name) {
+    const lower = name.toLowerCase();
+    return SENSITIVE_NAME_FRAGMENTS.some((fragment) => lower.includes(fragment));
+}
+/** Redact a single string value that may embed credentials. */
+export function scrubText(value) {
+    let out = value;
+    for (const { re } of VALUE_PATTERNS) {
+        out = out.replace(re, REDACTED);
+    }
+    return out;
+}
+/** Serialize a headers object with every sensitive header redacted. */
+export function scrubHeaders(headers) {
+    const out = {};
+    for (const [name, value] of Object.entries(headers)) {
+        out[name] = isSensitiveName(name) ? REDACTED : scrubText(value);
+    }
+    return out;
+}
+/**
+ * Deep-scrub an arbitrary object (log payloads, span attribute bags):
+ * sensitive-named keys are redacted outright, string values are pattern-scrubbed.
+ */
+export function scrubObject(input) {
+    return scrubValue(input);
+}
+function scrubValue(value, depth = 0) {
+    if (depth > 12 || value === null || value === undefined)
+        return value;
+    if (typeof value === "string")
+        return scrubText(value);
+    if (typeof value !== "object")
+        return value;
+    if (Array.isArray(value))
+        return value.map((item) => scrubValue(item, depth + 1));
+    const out = {};
+    for (const [key, item] of Object.entries(value)) {
+        out[key] = isSensitiveName(key) ? REDACTED : scrubValue(item, depth + 1);
+    }
+    return out;
+}
+/**
+ * Structured JSON-lines logger that scrubs every message and field before
+ * writing. All services should log through this instead of console.log so a
+ * leaked provider key in an error message cannot reach stdout.
+ */
+export function createSafeLogger(options = {}) {
+    const write = options.write ?? ((line) => process.stdout.write(`${line}\n`));
+    const emit = (level, message, fields) => {
+        const record = {
+            level,
+            time: new Date().toISOString(),
+            message: scrubText(message),
+            ...(fields ? scrubObject(fields) : {}),
+        };
+        write(JSON.stringify(record));
+    };
+    return {
+        debug: (m, f) => emit("debug", m, f),
+        info: (m, f) => emit("info", m, f),
+        warn: (m, f) => emit("warn", m, f),
+        error: (m, f) => emit("error", m, f),
+    };
+}
+/** Guard used before attaching an attribute to a span. */
+export function scrubSpanAttribute(name, value) {
+    return isSensitiveName(name) ? REDACTED : scrubText(value);
+}
+//# sourceMappingURL=secrets.js.map

package/dist/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../src/secrets.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,iEAAiE;AACjE,MAAM,wBAAwB,GAAG;IAC/B,eAAe;IACf,SAAS;IACT,QAAQ;IACR,SAAS;IACT,WAAW;IACX,mBAAmB;IACnB,WAAW;IACX,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,YAAY;CACJ,CAAC;AAEX,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,eAAe;IACf,WAAW;IACX,mBAAmB;IACnB,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,qBAAqB;CACb,CAAC;AAEX,4EAA4E;AAC5E,MAAM,cAAc,GAAsC;IACxD,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,sCAAsC,EAAE;IAC5D,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,4BAA4B,EAAE;IACtD,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,2BAA2B,EAAE;IACnD,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,oEAAoE,EAAE;IAC/F,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,uBAAuB,EAAE;IAC9C,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,4BAA4B,EAAE;IACpD,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,2CAA2C,EAAE;IACrE,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,6EAA6E,EAAE;CACzG,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,KAAa;IACrC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,cAAc,EAAE,CAAC;QACpC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAA+B;IAC1D,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAI,KAAQ;IACrC,OAAO,UAAU,CAAC,KAAK,CAAM,CAAC;AAChC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC3C,IAAI,KAAK,GAAG,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAgBD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA6B,EAAE;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,MAAgC,EAAQ,EAAE;QACxF,MAAM,MAAM,GAAG;YACb,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC9B,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC;YAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,WAAW,CAAC,MAAM,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAClC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC"}