@wrongstack/core 0.310.1 → 0.313.1

package/dist/notifications/index.js

@@ -1,111 +1,6 @@
-// src/notifications/notifier-impl.ts
-function emptyCounters() {
-  return { attempted: 0, delivered: 0, failed: 0, suppressed: 0 };
-}
-var NotifierImpl = class _NotifierImpl {
-  #channels = /* @__PURE__ */ new Map();
-  #counters = /* @__PURE__ */ new Map();
-  /** Soft cap for #counters — prevents unbounded growth if channels are
-   *  repeatedly registered with distinct names. */
-  static #MAX_COUNTERS = 100;
-  // -----------------------------------------------------------------------
-  // Lifecycle
-  // -----------------------------------------------------------------------
-  notify(channels, message) {
-    const names = typeof channels === "string" ? [channels] : channels;
-    if (names.length === 0) return Promise.resolve([]);
-    const results = [];
-    for (const name of names) {
-      const channel = this.#channels.get(name);
-      if (!channel) continue;
-      const counters = this.#counters.get(name) ?? emptyCounters();
-      counters.attempted += 1;
-      this.#counters.set(name, counters);
-      results.push(
-        channel.deliver(message).then(
-          (result) => {
-            if (result.ok) {
-              counters.delivered += 1;
-            } else {
-              counters.failed += 1;
-            }
-            return result;
-          },
-          (err) => {
-            counters.failed += 1;
-            const error = err instanceof Error ? err.message : "unknown rejection";
-            return {
-              ok: false,
-              channel: name,
-              error: `threw: ${error}`,
-              deliveredAt: (/* @__PURE__ */ new Date()).toISOString()
-            };
-          }
-        )
-      );
-    }
-    return Promise.all(results);
-  }
-  registerChannel(channel) {
-    this.#channels.set(channel.name, channel);
-    if (!this.#counters.has(channel.name)) {
-      if (this.#counters.size >= _NotifierImpl.#MAX_COUNTERS) {
-        const oldest = this.#counters.keys().next();
-        if (!oldest.done && oldest.value !== void 0) {
-          this.#counters.delete(oldest.value);
-        }
-      }
-      this.#counters.set(channel.name, emptyCounters());
-    }
-  }
-  unregisterChannel(name) {
-    this.#channels.delete(name);
-  }
-  async channels() {
-    const entries = Array.from(this.#channels.entries());
-    const results = await Promise.allSettled(
-      entries.map(async ([name, channel]) => {
-        try {
-          const ping = await channel.ping();
-          return { name, type: channel.type, ok: ping.ok, error: ping.error };
-        } catch {
-          return { name, type: channel.type, ok: false, error: "ping threw" };
-        }
-      })
-    );
-    return results.map(
-      (r) => r.status === "fulfilled" ? r.value : { name: "unknown", type: "unknown", ok: false, error: "unhandled ping rejection" }
-    );
-  }
-  counters() {
-    let attempted = 0;
-    let delivered = 0;
-    let failed = 0;
-    let suppressed = 0;
-    for (const c of this.#counters.values()) {
-      attempted += c.attempted;
-      delivered += c.delivered;
-      failed += c.failed;
-      suppressed += c.suppressed;
-    }
-    return { attempted, delivered, failed, suppressed };
-  }
-  /**
-   * Return per-channel counters for detailed diagnostics.
-   * Not part of the `Notifier` interface — available on the concrete class.
-   */
-  perChannelCounters() {
-    const result = {};
-    for (const [name, c] of this.#counters) {
-      result[name] = {
-        attempted: c.attempted,
-        delivered: c.delivered,
-        failed: c.failed
-      };
-    }
-    return result;
-  }
-};
+import {
+  NotifierImpl
+} from "../chunk-PHH7LD45.js";
 export {
   NotifierImpl
 };

package/dist/observability/index.js

@@ -1,3 +1,20 @@
+import {
+  emitProcessCompleted,
+  emitProcessOutput,
+  emitProcessStarted,
+  redactCommand,
+  redactCommandArgs,
+  runWithProcessTelemetry
+} from "../chunk-NDBIPFNY.js";
+import {
+  runWithNetworkTelemetry,
+  startNetworkTelemetryMonitor
+} from "../chunk-HA4ZYA6T.js";
+import {
+  toErrorMessage
+} from "../chunk-TBRL2RCC.js";
+import "../chunk-PFZO3C6H.js";
+
 // src/observability/metrics.ts
 var RESERVOIR_SIZE = 1024;
 function labelKey(labels) {
@@ -195,11 +212,6 @@ var NoopMetricsSink = class {
   }
 };
 
-// src/utils/error.ts
-function toErrorMessage(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-
 // src/observability/health.ts
 var SEVERITY = {
   healthy: 0,
@@ -358,280 +370,6 @@ function metricToolName(name) {
   return name.startsWith("mcp__") ? "mcp_proxy" : name;
 }
 
-// src/observability/process-telemetry.ts
-import { AsyncLocalStorage } from "node:async_hooks";
-import { createHash } from "node:crypto";
-
-// src/utils/expect-defined.ts
-function expectDefined(value, label) {
-  if (value === null || value === void 0) {
-    const err = new Error(label ? `Expected ${label} to be defined` : "Expected value to be defined");
-    err.name = "ExpectDefinedError";
-    throw err;
-  }
-  return value;
-}
-
-// src/observability/redact-command.ts
-var SENSITIVE_FLAG_PATTERNS = [
-  // --flag=value  or  --flag "value"  (value captured up to next space or comma)
-  /--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)(?:[=\s,][^\s]*)?/gi,
-  // -t short flag (token): attached (-tVALUE), separated (-t VALUE), or -t=VALUE.
-  // The separator group is optional so the attached form (the common one) matches.
-  // (?<![-\w]) anchors to a token start so we don't match the `-t` inside `--token`.
-  // The value must be token-like (>= 8 chars) so ordinary combined flags such
-  // as `tar -tf` / `ssh -tt` are not eaten. Global flag: EVERY occurrence is
-  // redacted, not just the first. Synced with packages/tools _redact-command.ts.
-  /(?<![-\w])-t(?:[=\s]+)?[^\s,-]{8,}/g,
-  // -p|-password|-a (redis auth) short flags: attached + separated + =value.
-  // Same token-start anchor; over-redaction is an accepted tradeoff for a
-  // redaction function (false positive = cosmetic noise; false negative = leak).
-  /(?<![-\w])-(?:password|p|a)(?:[=\s]+)?[^\s,-]+/gi,
-  // env var–style secrets: TOKEN=x, API_KEY=y, etc.
-  /(?:TOKEN|API_KEY|API_SECRET|AUTH_TOKEN|GITHUB_TOKEN|GH_TOKEN|BEARER|JWT|OAUTH|CREDENTIAL|SECRET|PRIVATE_KEY|PASSWORD|PASSWD|PASSPHRASE)\s*[=:]\s*[^\s,]+/gi,
-  // Generic high-entropy look: base64 strings >32 chars or hex strings >32 digits — but only
-  // when preceded by a flag name (e.g. --github-token=EyJ...). Global flag so
-  // every such flag in the command line is redacted, not just the first.
-  /--\w*(?:token|key|secret|password|passwd|auth|credential)\w*[=\s,][A-Za-z0-9+/=]{32,}/g
-];
-function redactCommand(cmd) {
-  let result = cmd;
-  for (const pattern of SENSITIVE_FLAG_PATTERNS) {
-    result = result.replace(pattern, (match) => {
-      const eq = match.indexOf("=");
-      const sp = match.search(/\s/);
-      const delim = eq !== -1 ? "=" : sp !== -1 ? match[sp] : null;
-      if (delim !== null) {
-        const flag = match.slice(0, match.indexOf(expectDefined(delim)) + 1);
-        return `${flag}[REDACTED]`;
-      }
-      if (match.startsWith("--")) {
-        return match;
-      }
-      return `${match.slice(0, 2)}[REDACTED]`;
-    });
-  }
-  return result;
-}
-var BARE_SENSITIVE_LONG_FLAG = /^--(?:token|password|passwd|pwd|secret|api[-_]?key|api[-_]?secret|auth|credential|private[-_]?key|access[-_]?key|github[-_]?token|gh[-_]?token|bearer|jwt|oauth|pin|pincode|passphrase|access[-_]?token)$/i;
-var BARE_SENSITIVE_SHORT_FLAG = /^-(?:p|t|a)$/i;
-function redactCommandArgs(command, args) {
-  const redactedCommand = redactCommand(command);
-  const redactedArgs = args.map((a) => redactCommand(a));
-  for (let i = 0; i < redactedArgs.length - 1; i++) {
-    const flag = redactedArgs[i];
-    const next = redactedArgs[i + 1];
-    if (flag === void 0 || next === void 0) continue;
-    const isBareSensitive = (BARE_SENSITIVE_LONG_FLAG.test(flag) || BARE_SENSITIVE_SHORT_FLAG.test(flag)) && !flag.includes("[REDACTED]");
-    if (isBareSensitive && !next.startsWith("-")) {
-      redactedArgs[i + 1] = "[REDACTED]";
-    }
-  }
-  return { command: redactedCommand, args: redactedArgs };
-}
-
-// src/observability/process-telemetry.ts
-var storage = new AsyncLocalStorage();
-function runWithProcessTelemetry(context, run) {
-  return storage.run(context, run);
-}
-function emitProcessStarted(event) {
-  const { command, args } = redactCommandArgs(event.command, event.args);
-  emit("process.started", { ...event, command, args });
-}
-function emitProcessOutput(input) {
-  const bytes = Buffer.byteLength(input.chunk);
-  emit("process.output", {
-    ...input.pid !== void 0 ? { pid: input.pid } : {},
-    stream: input.stream,
-    bytes,
-    chunkHash: createHash("sha256").update(input.chunk).digest("hex"),
-    at: (/* @__PURE__ */ new Date()).toISOString()
-  });
-}
-function emitProcessCompleted(event) {
-  emit("process.completed", event);
-}
-function emit(name, event) {
-  const context = storage.getStore();
-  if (!context) return;
-  const { events, ...identity2 } = context;
-  events.emit(name, { ...identity2, ...event });
-}
-
-// src/observability/network-telemetry.ts
-import { AsyncLocalStorage as AsyncLocalStorage2 } from "node:async_hooks";
-import { createHash as createHash2, randomUUID } from "node:crypto";
-import { channel } from "node:diagnostics_channel";
-var storage2 = new AsyncLocalStorage2();
-var requests = /* @__PURE__ */ new WeakMap();
-var users = 0;
-var unsubscribe;
-function runWithNetworkTelemetry(context, run) {
-  return storage2.run(context, run);
-}
-function startNetworkTelemetryMonitor() {
-  users++;
-  if (!unsubscribe) unsubscribe = subscribe();
-  let stopped = false;
-  return () => {
-    if (stopped) return;
-    stopped = true;
-    users--;
-    if (users <= 0) {
-      unsubscribe?.();
-      unsubscribe = void 0;
-      users = 0;
-    }
-  };
-}
-function subscribe() {
-  const create = channel("undici:request:create");
-  const headers = channel("undici:request:headers");
-  const error = channel("undici:request:error");
-  const onCreate = (message) => {
-    const context = storage2.getStore();
-    const request = objectField(message, "request");
-    if (!context || !request) return;
-    const target = safeTarget(request);
-    const startedAt = (/* @__PURE__ */ new Date()).toISOString();
-    const requestBytes = numberField(request, "contentLength");
-    const state = {
-      ...context,
-      requestId: randomUUID(),
-      ...target,
-      ...requestBytes !== void 0 ? { requestBytes } : {},
-      startedAt,
-      startedNs: process.hrtime.bigint()
-    };
-    requests.set(request, state);
-    context.events.emit("network.request.started", {
-      ...identity(state),
-      requestId: state.requestId,
-      method: state.method,
-      scheme: state.scheme,
-      serverAddress: state.serverAddress,
-      ...state.serverPort !== void 0 ? { serverPort: state.serverPort } : {},
-      pathHash: state.pathHash,
-      queryKeys: queryKeys(request),
-      ...state.requestBytes !== void 0 ? { requestBytes: state.requestBytes } : {},
-      startedAt
-    });
-  };
-  const onHeaders = (message) => {
-    const request = objectField(message, "request");
-    if (!request) return;
-    const state = requests.get(request);
-    if (!state) return;
-    requests.delete(request);
-    const response = objectField(message, "response");
-    const responseBytes = contentLength(response);
-    state.events.emit("network.request.completed", {
-      ...identity(state),
-      requestId: state.requestId,
-      method: state.method,
-      scheme: state.scheme,
-      serverAddress: state.serverAddress,
-      ...state.serverPort !== void 0 ? { serverPort: state.serverPort } : {},
-      pathHash: state.pathHash,
-      statusCode: numberField(response, "statusCode") ?? 0,
-      durationMs: elapsed(state.startedNs),
-      ...state.requestBytes !== void 0 ? { requestBytes: state.requestBytes } : {},
-      ...responseBytes !== void 0 ? { responseBytes } : {},
-      completedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  };
-  const onError = (message) => {
-    const request = objectField(message, "request");
-    if (!request) return;
-    const state = requests.get(request);
-    if (!state) return;
-    requests.delete(request);
-    const err = objectField(message, "error");
-    const errorCode = stringField(err, "code");
-    state.events.emit("network.request.failed", {
-      ...identity(state),
-      requestId: state.requestId,
-      method: state.method,
-      scheme: state.scheme,
-      serverAddress: state.serverAddress,
-      ...state.serverPort !== void 0 ? { serverPort: state.serverPort } : {},
-      pathHash: state.pathHash,
-      durationMs: elapsed(state.startedNs),
-      errorName: stringField(err, "name") ?? "Error",
-      ...errorCode ? { errorCode } : {},
-      failedAt: (/* @__PURE__ */ new Date()).toISOString()
-    });
-  };
-  create.subscribe(onCreate);
-  headers.subscribe(onHeaders);
-  error.subscribe(onError);
-  return () => {
-    create.unsubscribe(onCreate);
-    headers.unsubscribe(onHeaders);
-    error.unsubscribe(onError);
-  };
-}
-function identity(state) {
-  return {
-    sessionId: state.sessionId,
-    ...state.traceId ? { traceId: state.traceId } : {},
-    ...state.agentId ? { agentId: state.agentId } : {},
-    ...state.toolCallId ? { toolCallId: state.toolCallId } : {},
-    ...state.attemptId ? { attemptId: state.attemptId } : {},
-    initiator: state.initiator,
-    operationName: state.operationName
-  };
-}
-function safeTarget(request) {
-  const origin = String(request.origin ?? "");
-  const path = String(request.path ?? "");
-  let url;
-  try {
-    url = new URL(path, origin);
-  } catch {
-    url = new URL("http://invalid.local/");
-  }
-  return {
-    method: String(request.method ?? "GET").toUpperCase(),
-    scheme: url.protocol.replace(":", ""),
-    serverAddress: url.hostname,
-    ...url.port ? { serverPort: Number(url.port) } : {},
-    pathHash: hash(url.pathname)
-  };
-}
-function queryKeys(request) {
-  try {
-    return [...new URL(String(request.path ?? ""), String(request.origin ?? "")).searchParams.keys()].filter((v, i, a) => a.indexOf(v) === i).slice(0, 50);
-  } catch {
-    return [];
-  }
-}
-function contentLength(response) {
-  const raw = response?.headers;
-  if (!Array.isArray(raw)) return void 0;
-  for (let index = 0; index < raw.length - 1; index += 2) if (String(raw[index]).toLowerCase() === "content-length") {
-    const value = Number(String(raw[index + 1]));
-    return Number.isFinite(value) ? value : void 0;
-  }
-  return void 0;
-}
-function objectField(value, key) {
-  return value && typeof value === "object" && value[key] && typeof value[key] === "object" ? value[key] : void 0;
-}
-function stringField(value, key) {
-  return typeof value?.[key] === "string" ? value[key] : void 0;
-}
-function numberField(value, key) {
-  return typeof value?.[key] === "number" ? value[key] : void 0;
-}
-function elapsed(start) {
-  return Number(process.hrtime.bigint() - start) / 1e6;
-}
-function hash(value) {
-  return createHash2("sha256").update(value).digest("hex");
-}
-
 // src/observability/prometheus.ts
 import { timingSafeEqual } from "node:crypto";
 var NUMBER_FORMAT_INFINITY = "NaN";