@xeonr/telemetry 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,129 @@
-# Temporary Holding Version
+# @xeonr/telemetry
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Telemetry for Xeonr's Node services: the Node mirror of go-platform's
+`telemetry` package, and the way a Node service meets Plumb's
+`obs.node-telemetry`.
+
+```bash
+node --import @xeonr/telemetry/register dist/server.js   # ES modules
+node --require @xeonr/telemetry/register dist/server.cjs # CommonJS
+```
+
+`register` starts OpenTelemetry before the app loads. The SDK itself is
+[`@lntrn/otel`](https://www.npmjs.com/package/@lntrn/otel), Lantern's add-on
+for the stock `NodeSDK`. This package makes the Xeonr choices on top:
+
+- **OTLP gRPC** to the cluster collector, from `OTEL_EXPORTER_OTLP_ENDPOINT`
+  (Go-style `host:port` or a URL). In-cluster hosts and
+  `OTEL_EXPORTER_OTLP_INSECURE=true` are cleartext. With no endpoint nothing
+  is sent: one `telemetry export disabled` line, and spans still get ids so
+  log lines still carry them.
+- **Resource** from `OTEL_SERVICE_NAME`, `OTEL_SERVICE_NAMESPACE`,
+  `OTEL_SERVICE_VERSION`, `ENV` (else `NODE_ENV`, as `prod`/`dev`) as
+  `deployment.environment`, and the pod name as `service.instance.id`.
+- **AlwaysOn** sampling. **W3C trace context** is the only propagator:
+  baggage is sent only by this package's in-cluster helpers.
+- **A fixed instrumentation list**, never `auto-instrumentations-node`: http,
+  undici (fetch), ioredis, mysql2 (statements masked), pg, aws-sdk,
+  runtime-node, and pino (trace ids on lines, never log export). `/healthz`
+  is not traced. Client spans need a parent: one without becomes nothing
+  rather than a root (`xeonr_telemetry_rootless_client_spans_total` counts
+  the ones dropped).
+- **Runtime metrics**: runtime-node's event loop, heap and GC, and
+  host-metrics' `process.cpu.*` and `process.memory.*` (the pod, not the node).
+- **No log export**: logs go to stdout for the Lantern agent. No HTTP RED
+  histograms: spanmetrics derives RED from the spans.
+- **Identity on every span**, from the request or job it belongs to; URL
+  queries and credentials stripped from URL attributes.
+
+## Identity (§4.2)
+
+```ts
+import { setIdentity, setTeam, setResource } from "@xeonr/telemetry";
+
+// where the service verifies a Xeonr caller itself (its auth interceptor)
+setIdentity({ subject: principal.sub, orgId, clientId, authMethod: "bearer", scopes });
+// in a handler acting on an owned resource
+setTeam(bucket.teamUrn);
+setResource("bucket", bucket.id, bucket.urn);
+```
+
+The keys are generated from go-platform's `telemetry/keys.json`
+(`src/keys.json`, copied byte for byte; `pnpm gen-keys`).
+
+## Connect
+
+```ts
+import { clientInterceptor, peerContextValues, serverInterceptor } from "@xeonr/telemetry/connect";
+
+app.register(fastifyConnectPlugin, {
+  routes,
+  interceptors: [serverInterceptor(), authInterceptor], // telemetry first
+  contextValues: peerContextValues,                     // the TCP peer, for trust
+});
+const transport = createConnectTransport({ baseUrl, interceptors: [clientInterceptor({ peer: "upl-im-api" })] });
+```
+
+The server continues a caller's `traceparent` and honours its origin baggage
+only from a trusted peer (`TRUSTED_PROXY_CIDR`, default `10.0.0.0/8`, as
+go-platform); anyone else's trace becomes a link. Status follows otelconnect:
+only a server-class code is an error.
+
+## Jobs
+
+```ts
+import { runJob, startJob, detach } from "@xeonr/telemetry";
+
+await runJob("upl.trace.reconcile", () => reconcile(), { trigger: "cron" });
+const job = startJob("upl.parse_upload", { trigger: "queue", links });
+// … context.with(job.ctx, …) …
+job.end(err);
+void runJob("upl.index", () => index(id), { ctx: detach(), trigger: "request" }); // from a handler
+```
+
+A job is a root span with `xeonr.job.*` and system identity (or the caller's,
+when started from a request), and counts `xeonr_job_runs_total` and
+`xeonr_job_duration_seconds`.
+
+## Outbound HTTP
+
+```ts
+import { fetchWith, withPeer, baggageFor } from "@xeonr/telemetry";
+
+const discord = fetchWith({ peer: "discord" });          // fetch with peer.service, no baggage
+const api = fetchWith({ peer: "upl-im-api" });           // in-cluster: origin baggage too
+await withPeer("s3", () => s3.send(cmd));                // any other client
+```
+
+## Logging
+
+```ts
+import { logger, withContext } from "@xeonr/telemetry/log";
+
+logger.info({ upload_id }, "parsed");
+```
+
+pino, JSON on stdout as logrus writes it (`level`, `time`, `msg`), with
+`trace_id`, `span_id`, `trace_flags`, the §4.2 fields, `procedure` and `ip`
+from the active context; credentials redacted by key; errors as
+`{type, message, stack, code}` with tokens, emails and URL queries removed.
+An Error line inside a span is mirrored as a span event.
+
+## Shutting down
+
+`register` flushes when the event loop empties. A service that handles
+SIGTERM itself calls `shutdown()` last, after its servers and workers have
+drained; one that does not gets a flush and the signal re-raised.
+
+## Run-time span processors
+
+`addSpanProcessor(p)` adds a processor after boot (the upl-im pipeline's
+run-trace store). It sees the spans started after it. A span event made with
+`localEvent(attrs)` reaches those processors but is never exported: for
+payloads a product shows its own users, which must not reach Lantern.
+
+## Releasing
+
+Bump `"version"` and merge to main: CI (`.xeonr-ci.yaml`, app `telemetry`)
+tests, builds and publishes any version the registry hasn't got, and tags it
+`telemetry-vX.Y.Z`.

package/dist/baggage.d.ts

@@ -0,0 +1,21 @@
+import { type Context } from "@opentelemetry/api";
+export declare const HEADER_BAGGAGE = "baggage";
+/** go-platform's connectmw.DefaultTrustedProxyCIDR. */
+export declare const DEFAULT_TRUSTED_PROXY_CIDR = "10.0.0.0/8";
+/** Whether `host` (a host or host:port) is a cluster-internal name: `*.svc`, `*.cluster.local`, or a bare single-label name. IPs and localhost are not. */
+export declare function inCluster(host: string): boolean;
+/** The `baggage` header value for the origin members of `ctx`'s identity, or "" when there are none. */
+export declare function originBaggage(ctx?: Context): string;
+/** Parses a `baggage` header into the origin members, ignoring every other member. */
+export declare function parseOriginBaggage(header: string | null | undefined): Record<string, string>;
+/** Decides peer trust from CIDRs, like go-platform's ClientIPResolver.PeerTrusted. */
+export declare class PeerTrust {
+    #private;
+    /** No CIDRs → DEFAULT_TRUSTED_PROXY_CIDR. An invalid entry throws: a bad trust range must fail at boot. */
+    constructor(cidrs?: readonly string[]);
+    /** From TRUSTED_PROXY_CIDR (comma-separated), as the Go services read it. */
+    static fromEnv(env?: Record<string, string | undefined>): PeerTrust;
+    /** Whether the TCP peer (an IP, "ip:port" or "[v6]:port") is trusted. An unparseable address is not. */
+    trusted(remoteAddress: string | undefined): boolean;
+}
+//# sourceMappingURL=baggage.d.ts.map

package/dist/baggage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"baggage.d.ts","sourceRoot":"","sources":["../src/baggage.ts"],"names":[],"mappings":"AAWA,OAAO,EAAW,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAI3D,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,eAAe,CAAC;AAEvD,2JAA2J;AAC3J,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAQ/C;AAED,wGAAwG;AACxG,wBAAgB,aAAa,CAAC,GAAG,GAAE,OAA0B,GAAG,MAAM,CAmBrE;AAED,sFAAsF;AACtF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiB5F;AAED,sFAAsF;AACtF,qBAAa,SAAS;;IAGrB,2GAA2G;gBAC/F,KAAK,GAAE,SAAS,MAAM,EAAO;IAazC,6EAA6E;IAC7E,MAAM,CAAC,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,SAAS;IAIhF,wGAAwG;IACxG,OAAO,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO;CAUnD"}

package/dist/baggage.js

@@ -0,0 +1,117 @@
+/**
+ * Origin baggage and peer trust (observability plan §5.4), as go-platform's
+ * telemetry/baggage.go and connectmw.ClientIPResolver decide them.
+ *
+ * - Members: xeonr.origin.subject, xeonr.origin.service, xeonr.org.id. Nothing else.
+ * - Sent only toward in-cluster hosts; any other destination gets none.
+ * - Honoured only from a trusted TCP peer (TRUSTED_PROXY_CIDR, default
+ *   10.0.0.0/8: the edge and in-cluster callers). From anyone else it is
+ *   ignored, and so is their traceparent.
+ */
+import { BlockList, isIP } from "node:net";
+import { context } from "@opentelemetry/api";
+import { stateFrom } from "./identity.js";
+import { BAGGAGE_KEYS } from "./keys.js";
+export const HEADER_BAGGAGE = "baggage";
+/** go-platform's connectmw.DefaultTrustedProxyCIDR. */
+export const DEFAULT_TRUSTED_PROXY_CIDR = "10.0.0.0/8";
+/** Whether `host` (a host or host:port) is a cluster-internal name: `*.svc`, `*.cluster.local`, or a bare single-label name. IPs and localhost are not. */
+export function inCluster(host) {
+    let h = host.trim().toLowerCase();
+    if (h.startsWith("["))
+        h = h.slice(1, h.indexOf("]"));
+    else if (h.split(":").length === 2)
+        h = h.split(":")[0] ?? "";
+    h = h.replace(/\.$/, "");
+    if (!h || h === "localhost" || isIP(h))
+        return false;
+    if (h.endsWith(".svc") || h.endsWith(".svc.cluster.local") || h.endsWith(".cluster.local"))
+        return true;
+    return !h.includes(".");
+}
+/** The `baggage` header value for the origin members of `ctx`'s identity, or "" when there are none. */
+export function originBaggage(ctx = context.active()) {
+    const id = stateFrom(ctx)?.identity();
+    if (!id)
+        return "";
+    const values = {
+        "xeonr.origin.subject": id.originSubject,
+        "xeonr.origin.service": id.originService,
+        "xeonr.org.id": id.orgId,
+    };
+    const entries = {};
+    for (const k of BAGGAGE_KEYS) {
+        const v = values[k];
+        if (v)
+            entries[k] = { value: v };
+    }
+    if (Object.keys(entries).length === 0)
+        return "";
+    // The global propagator is W3C trace context only (§5.4): baggage is never
+    // injected by an instrumentation, only by these helpers.
+    return Object.entries(entries)
+        .map(([k, { value }]) => `${k}=${encodeURIComponent(value)}`)
+        .join(",");
+}
+/** Parses a `baggage` header into the origin members, ignoring every other member. */
+export function parseOriginBaggage(header) {
+    const out = {};
+    if (!header)
+        return out;
+    for (const part of header.split(",")) {
+        const [kv] = part.split(";");
+        const i = kv?.indexOf("=") ?? -1;
+        if (!kv || i < 0)
+            continue;
+        const k = kv.slice(0, i).trim();
+        if (!BAGGAGE_KEYS.includes(k))
+            continue;
+        try {
+            const v = decodeURIComponent(kv.slice(i + 1).trim());
+            if (v)
+                out[k] = v;
+        }
+        catch {
+            // A malformed member is dropped, as Go's baggage.Parse would drop the header.
+        }
+    }
+    return out;
+}
+/** Decides peer trust from CIDRs, like go-platform's ClientIPResolver.PeerTrusted. */
+export class PeerTrust {
+    #list = new BlockList();
+    /** No CIDRs → DEFAULT_TRUSTED_PROXY_CIDR. An invalid entry throws: a bad trust range must fail at boot. */
+    constructor(cidrs = []) {
+        const valid = cidrs.map((c) => c.trim()).filter(Boolean);
+        for (const c of valid.length ? valid : [DEFAULT_TRUSTED_PROXY_CIDR]) {
+            const [addr, bits] = c.split("/");
+            const family = addr && isIP(addr);
+            const prefix = Number(bits);
+            if (!addr || !family || bits === undefined || !Number.isInteger(prefix) || prefix < 0 || prefix > (family === 4 ? 32 : 128)) {
+                throw new Error(`@xeonr/telemetry: trusted proxy CIDR ${JSON.stringify(c)} is invalid`);
+            }
+            this.#list.addSubnet(addr, prefix, family === 4 ? "ipv4" : "ipv6");
+        }
+    }
+    /** From TRUSTED_PROXY_CIDR (comma-separated), as the Go services read it. */
+    static fromEnv(env = process.env) {
+        return new PeerTrust((env.TRUSTED_PROXY_CIDR ?? "").split(","));
+    }
+    /** Whether the TCP peer (an IP, "ip:port" or "[v6]:port") is trusted. An unparseable address is not. */
+    trusted(remoteAddress) {
+        if (!remoteAddress)
+            return false;
+        let ip = remoteAddress.trim();
+        if (ip.startsWith("["))
+            ip = ip.slice(1, ip.indexOf("]"));
+        else if (!isIP(ip) && ip.split(":").length === 2)
+            ip = ip.split(":")[0] ?? "";
+        if (ip.startsWith("::ffff:") && isIP(ip.slice(7)) === 4)
+            ip = ip.slice(7);
+        const family = isIP(ip);
+        if (!family)
+            return false;
+        return this.#list.check(ip, family === 4 ? "ipv4" : "ipv6");
+    }
+}
+//# sourceMappingURL=baggage.js.map

package/dist/baggage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baggage.js","sourceRoot":"","sources":["../src/baggage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAgB,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAExC,uDAAuD;AACvD,MAAM,CAAC,MAAM,0BAA0B,GAAG,YAAY,CAAC;AAEvD,2JAA2J;AAC3J,MAAM,UAAU,SAAS,CAAC,IAAY;IACrC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;SACjD,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9D,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,IAAI,CAAC;IACxG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,aAAa,CAAC,MAAe,OAAO,CAAC,MAAM,EAAE;IAC5D,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC;IACtC,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,MAAM,MAAM,GAAuC;QAClD,sBAAsB,EAAE,EAAE,CAAC,aAAa;QACxC,sBAAsB,EAAE,EAAE,CAAC,aAAa;QACxC,cAAc,EAAE,EAAE,CAAC,KAAK;KACxB,CAAC;IACF,MAAM,OAAO,GAAsC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACjD,2EAA2E;IAC3E,yDAAyD;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;SAC5D,IAAI,CAAC,GAAG,CAAC,CAAC;AACb,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,kBAAkB,CAAC,MAAiC;IACnE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM;QAAE,OAAO,GAAG,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACJ,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,IAAI,CAAC;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACR,8EAA8E;QAC/E,CAAC;IACF,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,sFAAsF;AACtF,MAAM,OAAO,SAAS;IACZ,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAEjC,2GAA2G;IAC3G,YAAY,QAA2B,EAAE;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7H,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;YACzF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACpE,CAAC;IACF,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,OAAO,CAAC,MAA0C,OAAO,CAAC,GAAG;QACnE,OAAO,IAAI,SAAS,CAAC,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,wGAAwG;IACxG,OAAO,CAAC,aAAiC;QACxC,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QACjC,IAAI,EAAE,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9E,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;CACD"}

package/dist/boot.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The boot lines `init` writes, in the logger's shape, without loading pino:
+ * `register` runs before the app, and pino must be imported after the
+ * instrumentations are enabled for the pino instrumentation to see it.
+ */
+export declare function bootLine(level: "info" | "warn" | "error", msg: string, fields?: Record<string, unknown>): void;
+//# sourceMappingURL=boot.d.ts.map

package/dist/boot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.d.ts","sourceRoot":"","sources":["../src/boot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI,CAGlH"}

package/dist/boot.js

@@ -0,0 +1,10 @@
+/**
+ * The boot lines `init` writes, in the logger's shape, without loading pino:
+ * `register` runs before the app, and pino must be imported after the
+ * instrumentations are enabled for the pino instrumentation to see it.
+ */
+export function bootLine(level, msg, fields = {}) {
+    const clean = Object.fromEntries(Object.entries(fields).filter(([, v]) => v !== undefined && v !== ""));
+    process.stdout.write(JSON.stringify({ level, time: new Date().toISOString(), msg, ...clean }) + "\n");
+}
+//# sourceMappingURL=boot.js.map

package/dist/boot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boot.js","sourceRoot":"","sources":["../src/boot.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgC,EAAE,GAAW,EAAE,SAAkC,EAAE;IAC3G,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AACvG,CAAC"}

package/dist/connect.d.ts

@@ -0,0 +1,63 @@
+/**
+ * `@xeonr/telemetry/connect`: Connect ^2 interceptors, the Node counterparts
+ * of go-platform's telemetry.ServerInterceptor (with otelconnect and
+ * RemoteParent) and telemetry.ClientInterceptor.
+ *
+ * Server: one SERVER span per call named `pkg.Service/Method`, with
+ * `rpc.system=connect_rpc`, `rpc.service` and `rpc.method` = the full
+ * procedure (as Lantern shows `rpc.method` for the Go services, and what
+ * dashboards and monitors filter on), and otelconnect's status rule (only a server-class code is an error; the code is in
+ * `rpc.connect_rpc.error_code`). A remote traceparent is continued only from a
+ * trusted peer (TRUSTED_PROXY_CIDR, default 10.0.0.0/8); anyone else's becomes
+ * a link. Origin baggage is honoured only from a trusted peer too. The call
+ * runs with a fresh identity record: the service's auth layer fills it with
+ * `setIdentity`, and it is stamped on the server span when the call ends.
+ *
+ * Client: one CLIENT span per call, `traceparent` on the request, origin
+ * baggage only toward an in-cluster host, `peer.service` from the option.
+ *
+ * Put the server interceptor first, ahead of auth, so a refused call is still
+ * a span with `subject.kind=anonymous`.
+ */
+import { type ContextValues, type Interceptor } from "@connectrpc/connect";
+import { PeerTrust } from "./baggage.ts";
+/** The TCP peer of the call, for the trust decision. Set it with `peerContextValues`. */
+export declare const kPeerAddress: import("@connectrpc/connect").ContextKey<string | undefined>;
+type RequestLike = {
+    socket?: {
+        remoteAddress?: string | undefined;
+    } | undefined;
+    raw?: {
+        socket?: {
+            remoteAddress?: string | undefined;
+        } | undefined;
+    };
+};
+/**
+ * Context values carrying the TCP peer, for the Connect adapter's
+ * `contextValues` option (`@connectrpc/connect-fastify`, `connect-node`,
+ * `connect-express` all pass the request):
+ *
+ * ```ts
+ * app.register(fastifyConnectPlugin, { routes, interceptors, contextValues: peerContextValues });
+ * ```
+ */
+export declare function peerContextValues(req: RequestLike): ContextValues;
+export interface ServerInterceptorOptions {
+    /** Who may continue a trace and send baggage. Default: TRUSTED_PROXY_CIDR, else 10.0.0.0/8. */
+    trust?: PeerTrust;
+    /** `service.name` for the origin of a trace this service starts. Default OTEL_SERVICE_NAME. */
+    serviceName?: string;
+}
+export declare function serverInterceptor(opts?: ServerInterceptorOptions): Interceptor;
+export interface ClientInterceptorOptions {
+    /** `peer.service`: the service being called (`upl-im-api`). */
+    peer?: string;
+    /** Which hosts are in-cluster and get origin baggage. Default `inCluster`. */
+    inCluster?: (host: string) => boolean;
+}
+export declare function clientInterceptor(opts?: ClientInterceptorOptions): Interceptor;
+/** For tests and adapters without `contextValues`: values carrying a given peer. */
+export declare function contextValuesWithPeer(peer: string): ContextValues;
+export {};
+//# sourceMappingURL=connect.d.ts.map

package/dist/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAKN,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAgE,SAAS,EAAE,MAAM,cAAc,CAAC;AAWvG,yFAAyF;AACzF,eAAO,MAAM,YAAY,8DAA0G,CAAC;AAEpI,KAAK,WAAW,GAAG;IAAE,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,GAAG,SAAS,CAAC;IAAC,GAAG,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE;YAAE,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;SAAE,GAAG,SAAS,CAAA;KAAE,CAAA;CAAE,CAAC;AAE1J;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,WAAW,GAAG,aAAa,CAIjE;AAED,MAAM,WAAW,wBAAwB;IACxC,+FAA+F;IAC/F,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,+FAA+F;IAC/F,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,wBAA6B,GAAG,WAAW,CA2DlF;AAED,MAAM,WAAW,wBAAwB;IACxC,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACtC;AAED,wBAAgB,iBAAiB,CAAC,IAAI,GAAE,wBAA6B,GAAG,WAAW,CAsClF;AA4CD,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,CAIjE"}

package/dist/connect.js

@@ -0,0 +1,200 @@
+/**
+ * `@xeonr/telemetry/connect`: Connect ^2 interceptors, the Node counterparts
+ * of go-platform's telemetry.ServerInterceptor (with otelconnect and
+ * RemoteParent) and telemetry.ClientInterceptor.
+ *
+ * Server: one SERVER span per call named `pkg.Service/Method`, with
+ * `rpc.system=connect_rpc`, `rpc.service` and `rpc.method` = the full
+ * procedure (as Lantern shows `rpc.method` for the Go services, and what
+ * dashboards and monitors filter on), and otelconnect's status rule (only a server-class code is an error; the code is in
+ * `rpc.connect_rpc.error_code`). A remote traceparent is continued only from a
+ * trusted peer (TRUSTED_PROXY_CIDR, default 10.0.0.0/8); anyone else's becomes
+ * a link. Origin baggage is honoured only from a trusted peer too. The call
+ * runs with a fresh identity record: the service's auth layer fills it with
+ * `setIdentity`, and it is stamped on the server span when the call ends.
+ *
+ * Client: one CLIENT span per call, `traceparent` on the request, origin
+ * baggage only toward an in-cluster host, `peer.service` from the option.
+ *
+ * Put the server interceptor first, ahead of auth, so a refused call is still
+ * a span with `subject.kind=anonymous`.
+ */
+import { Code, ConnectError, createContextKey as createConnectContextKey, createContextValues, } from "@connectrpc/connect";
+import { context, propagation, ROOT_CONTEXT, SpanKind, SpanStatusCode, trace } from "@opentelemetry/api";
+import { HEADER_BAGGAGE, inCluster, originBaggage, parseOriginBaggage, PeerTrust } from "./baggage.js";
+import { attributes, State, withState } from "./identity.js";
+import { KeyScopes } from "./keys.js";
+import { KEY_PEER_SERVICE } from "./processor.js";
+import { sanitize } from "./sanitize.js";
+const TRACER = "@xeonr/telemetry/connect";
+/** otelconnect's server-class codes: only these mark a server span as an error. */
+const SERVER_ERROR_CODES = new Set([Code.Unknown, Code.DeadlineExceeded, Code.Unimplemented, Code.Internal, Code.Unavailable, Code.DataLoss]);
+/** The TCP peer of the call, for the trust decision. Set it with `peerContextValues`. */
+export const kPeerAddress = createConnectContextKey(undefined, { description: "xeonr.telemetry.peer_address" });
+/**
+ * Context values carrying the TCP peer, for the Connect adapter's
+ * `contextValues` option (`@connectrpc/connect-fastify`, `connect-node`,
+ * `connect-express` all pass the request):
+ *
+ * ```ts
+ * app.register(fastifyConnectPlugin, { routes, interceptors, contextValues: peerContextValues });
+ * ```
+ */
+export function peerContextValues(req) {
+    const values = createContextValues();
+    values.set(kPeerAddress, req.socket?.remoteAddress ?? req.raw?.socket?.remoteAddress);
+    return values;
+}
+export function serverInterceptor(opts = {}) {
+    const trust = opts.trust ?? PeerTrust.fromEnv();
+    const service = opts.serviceName ?? process.env.OTEL_SERVICE_NAME?.trim() ?? "";
+    return (next) => async (req) => {
+        const procedure = `${req.service.typeName}/${req.method.name}`;
+        const peer = req.contextValues.get(kPeerAddress);
+        const trusted = trust.trusted(peer);
+        const s = new State();
+        s.service = service;
+        s.procedure = procedure;
+        s.ip = (trusted ? req.header.get("x-real-ip")?.trim() : stripPort(peer)) ?? "";
+        decideOrigin(s, req.header.get(HEADER_BAGGAGE), trusted);
+        // Under an HTTP server span (connect-node on HTTP/1.1, which the http
+        // instrumentation sees), the call is its child. Otherwise (HTTP/2, which
+        // it does not see) the remote parent is decided here.
+        const links = [];
+        let parent = context.active();
+        const local = trace.getSpanContext(parent);
+        if (!local || !trace.isSpanContextValid(local)) {
+            const getter = { get: (h, k) => h.get(k) ?? undefined, keys: (h) => [...h.keys()] };
+            const remoteSc = trace.getSpanContext(propagation.extract(ROOT_CONTEXT, req.header, getter));
+            if (remoteSc && trace.isSpanContextValid(remoteSc)) {
+                if (trusted)
+                    parent = trace.setSpanContext(parent, remoteSc);
+                else
+                    links.push({ context: remoteSc });
+            }
+        }
+        parent = withState(parent, s);
+        const span = trace.getTracer(TRACER).startSpan(procedure, {
+            kind: SpanKind.SERVER,
+            links,
+            attributes: { "rpc.system": "connect_rpc", "rpc.service": req.service.typeName, "rpc.method": procedure },
+        }, parent);
+        s.root = span;
+        const ctx = trace.setSpan(parent, span);
+        const finish = (err) => {
+            const id = s.identity();
+            span.setAttributes(attributes(id));
+            if (id.scopes?.length)
+                span.setAttribute(KeyScopes, id.scopes);
+            if (err !== undefined)
+                serverError(span, err);
+            span.end();
+        };
+        try {
+            const res = await context.with(ctx, () => next(req));
+            if (res.stream)
+                return { ...res, message: endWhenDone(res.message, finish) };
+            finish();
+            return res;
+        }
+        catch (err) {
+            finish(err);
+            throw err;
+        }
+    };
+}
+export function clientInterceptor(opts = {}) {
+    const isInCluster = opts.inCluster ?? inCluster;
+    return (next) => async (req) => {
+        const procedure = `${req.service.typeName}/${req.method.name}`;
+        const attrs = { "rpc.system": "connect_rpc", "rpc.service": req.service.typeName, "rpc.method": procedure };
+        if (opts.peer)
+            attrs[KEY_PEER_SERVICE] = opts.peer;
+        const span = trace.getTracer(TRACER).startSpan(procedure, { kind: SpanKind.CLIENT, attributes: attrs });
+        const ctx = trace.setSpan(context.active(), span);
+        propagation.inject(ctx, req.header, { set: (h, k, v) => h.set(k, v) });
+        let host = "";
+        try {
+            host = new URL(req.url).host;
+        }
+        catch {
+            // An unparseable URL is not in-cluster.
+        }
+        const b = isInCluster(host) ? originBaggage(ctx) : "";
+        if (b)
+            req.header.set(HEADER_BAGGAGE, b);
+        else
+            req.header.delete(HEADER_BAGGAGE);
+        const finish = (err) => {
+            if (err !== undefined) {
+                const ce = ConnectError.from(err);
+                span.setAttribute("rpc.connect_rpc.error_code", Code[ce.code]);
+                span.setStatus({ code: SpanStatusCode.ERROR, message: sanitize(ce.rawMessage) });
+            }
+            span.end();
+        };
+        try {
+            const res = await context.with(ctx, () => next(req));
+            if (res.stream)
+                return { ...res, message: endWhenDone(res.message, finish) };
+            finish();
+            return res;
+        }
+        catch (err) {
+            finish(err);
+            throw err;
+        }
+    };
+}
+function serverError(span, err) {
+    // What the client sees: anything not a ConnectError goes out as internal.
+    const ce = err instanceof ConnectError ? err : ConnectError.from(err, Code.Internal);
+    span.setAttribute("rpc.connect_rpc.error_code", Code[ce.code]);
+    if (!SERVER_ERROR_CODES.has(ce.code))
+        return;
+    const message = sanitize(ce.rawMessage);
+    span.addEvent("exception", { "exception.type": err instanceof Error ? err.name : "ConnectError", "exception.message": message });
+    span.setStatus({ code: SpanStatusCode.ERROR, message });
+}
+async function* endWhenDone(messages, finish) {
+    try {
+        yield* messages;
+        finish();
+    }
+    catch (err) {
+        finish(err);
+        throw err;
+    }
+}
+/** go-platform's state.decideOrigin: the first hop with no trusted origin baggage is the entry. */
+function decideOrigin(s, header, trusted) {
+    s.originDecided = true;
+    s.entry = true;
+    if (!trusted || !header)
+        return;
+    const b = parseOriginBaggage(header);
+    const subject = b["xeonr.origin.subject"];
+    const service = b["xeonr.origin.service"];
+    if (subject || service) {
+        s.entry = false;
+        if (subject)
+            s.id.originSubject = subject;
+        if (service)
+            s.id.originService = service;
+    }
+    s.baggageOrgId = b["xeonr.org.id"] ?? "";
+}
+function stripPort(addr) {
+    if (!addr)
+        return undefined;
+    if (addr.startsWith("["))
+        return addr.slice(1, addr.indexOf("]"));
+    return addr.split(":").length === 2 ? addr.split(":")[0] : addr;
+}
+/** For tests and adapters without `contextValues`: values carrying a given peer. */
+export function contextValuesWithPeer(peer) {
+    const values = createContextValues();
+    values.set(kPeerAddress, peer);
+    return values;
+}
+//# sourceMappingURL=connect.js.map

package/dist/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EACN,IAAI,EACJ,YAAY,EACZ,gBAAgB,IAAI,uBAAuB,EAC3C,mBAAmB,GAGnB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAwB,MAAM,oBAAoB,CAAC;AAC/H,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,mFAAmF;AACnF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;AAEpJ,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,uBAAuB,CAAqB,SAAS,EAAE,EAAE,WAAW,EAAE,8BAA8B,EAAE,CAAC,CAAC;AAIpI;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB;IACjD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC;AACf,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAChF,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,IAAI,GAAG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEpC,MAAM,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC;QACtB,CAAC,CAAC,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC;QACxB,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/E,YAAY,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC;QAEzD,sEAAsE;QACtE,yEAAyE;QACzE,sDAAsD;QACtD,MAAM,KAAK,GAAW,EAAE,CAAC;QACzB,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,CAAU,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC9G,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7F,IAAI,QAAQ,IAAI,KAAK,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpD,IAAI,OAAO;oBAAE,MAAM,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;;oBACxD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YACxC,CAAC;QACF,CAAC;QACD,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAE9B,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAC7C,SAAS,EACT;YACC,IAAI,EAAE,QAAQ,CAAC,MAAM;YACrB,KAAK;YACL,UAAU,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE;SACzG,EACD,MAAM,CACN,CAAC;QACF,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,CAAC,GAAa,EAAE,EAAE;YAChC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACnC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM;gBAAE,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,GAAG,KAAK,SAAS;gBAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7E,MAAM,EAAE,CAAC;YACT,OAAO,GAAG,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AASD,MAAM,UAAU,iBAAiB,CAAC,OAAiC,EAAE;IACpE,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC;IAChD,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9B,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC/D,MAAM,KAAK,GAA2B,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;QACpI,IAAI,IAAI,CAAC,IAAI;YAAE,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACxG,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;QAClD,WAAW,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAU,EAAE,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAEhG,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,wCAAwC;QACzC,CAAC;QACD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;;YACpC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEvC,MAAM,MAAM,GAAG,CAAC,GAAa,EAAE,EAAE;YAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACvB,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC/D,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAClF,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7E,MAAM,EAAE,CAAC;YACT,OAAO,GAAG,CAAC;QACZ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,MAAM,GAAG,CAAC;QACX,CAAC;IACF,CAAC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAU,EAAE,GAAY;IAC5C,0EAA0E;IAC1E,MAAM,EAAE,GAAG,GAAG,YAAY,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrF,IAAI,CAAC,YAAY,CAAC,4BAA4B,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC;QAAE,OAAO;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,gBAAgB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;IACjI,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,WAAW,CAAI,QAA0B,EAAE,MAA+B;IACzF,IAAI,CAAC;QACJ,KAAK,CAAC,CAAC,QAAQ,CAAC;QAChB,MAAM,EAAE,CAAC;IACV,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,CAAC,CAAC;QACZ,MAAM,GAAG,CAAC;IACX,CAAC;AACF,CAAC;AAED,mGAAmG;AACnG,SAAS,YAAY,CAAC,CAAQ,EAAE,MAAqB,EAAE,OAAgB;IACtE,CAAC,CAAC,aAAa,GAAG,IAAI,CAAC;IACvB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;IACf,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO;IAChC,MAAM,CAAC,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAC1C,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;QACxB,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;QAChB,IAAI,OAAO;YAAE,CAAC,CAAC,EAAE,CAAC,aAAa,GAAG,OAAO,CAAC;QAC1C,IAAI,OAAO;YAAE,CAAC,CAAC,EAAE,CAAC,aAAa,GAAG,OAAO,CAAC;IAC3C,CAAC;IACD,CAAC,CAAC,YAAY,GAAG,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,IAAwB;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,qBAAqB,CAAC,IAAY;IACjD,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/fetch.d.ts

@@ -0,0 +1,19 @@
+export interface FetchOptions {
+    /** `peer.service`: who is being called (`discord`, `upl-im-api`). */
+    peer?: string;
+    /** Send origin baggage when the host is in-cluster (go-platform's WithOriginBaggage). Default true. */
+    baggage?: boolean;
+    /** Which hosts are in-cluster. Default `inCluster`. */
+    inCluster?: (host: string) => boolean;
+    /** The fetch to wrap. Default `globalThis.fetch`. */
+    fetch?: typeof fetch;
+}
+/** A `fetch` for one peer. */
+export declare function fetchWith(opts?: FetchOptions): typeof fetch;
+/**
+ * The `baggage` header for a request to `url`: the origin members when the
+ * host is in-cluster, else "". For HTTP clients other than fetch (axios,
+ * got): set it when non-empty, and run the call inside `withPeer`.
+ */
+export declare function baggageFor(url: string, isInCluster?: (host: string) => boolean): string;
+//# sourceMappingURL=fetch.d.ts.map

package/dist/fetch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../src/fetch.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,YAAY;IAC5B,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,uDAAuD;IACvD,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACtC,qDAAqD;IACrD,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACrB;AAED,8BAA8B;AAC9B,wBAAgB,SAAS,CAAC,IAAI,GAAE,YAAiB,GAAG,OAAO,KAAK,CAW/D;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAmB,GAAG,MAAM,CAQlG"}