atabey-shared 0.1.0-beta.0 → 0.1.0

package/dist/modules/observability/audit.js

@@ -0,0 +1,322 @@
+/**
+ * [AUDIT] Structured Audit Log Service
+ *
+ * Records all critical operations in structured JSON format to SQLite.
+ * Queryable, filterable, and traceable.
+ *
+ * [KVKK/GDPR] GDPR and KVKK Art. 4, 5, 11, 12 compliant:
+ * - Sensitive data automatically masked (PII masking)
+ * - Data retention limited (TTL)
+ * - Data subject rights supported (erasure, query)
+ *
+ * Usage:
+ *   Audit.log("user.create", "SUCCESS", { userId: "usr_123" });
+ *   Audit.query({ action: "user.create", status: "FAILED" });
+ */
+import { AUDIT_CHAIN_GENESIS, buildStructuredAuditChainPayload, chainDigest, readChainAnchor, writeChainAnchor, clearChainAnchor, verifyHashChain, } from "./audit-chain.js";
+import { maskObject, maskText } from "../security/pii.js";
+import { databaseHolder } from "../storage/database.js";
+import { logger } from "./logger.js";
+export class Audit {
+    static TABLE = "audit_log";
+    /** Out-of-DB anchor file name for the structured audit chain. */
+    static ANCHOR_NAME = "structured";
+    /** [KVKK] Default data retention period: 30 days */
+    static DEFAULT_RETENTION_DAYS = (() => {
+        const parsed = parseInt(process.env.ATABEY_DATA_RETENTION_DAYS || "30", 10);
+        return Number.isFinite(parsed) && parsed > 0 ? parsed : 30;
+    })();
+    /** [KVKK] Maximum retention for sensitive categories: 90 days */
+    static MAX_RETENTION_DAYS = 90;
+    static initialize() {
+        const db = databaseHolder.getDB();
+        db.exec(`
+            CREATE TABLE IF NOT EXISTS ${this.TABLE} (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                timestamp TEXT NOT NULL,
+                action TEXT NOT NULL,
+                status TEXT NOT NULL,
+                agent TEXT NOT NULL,
+                traceId TEXT,
+                details TEXT,
+                errorMessage TEXT,
+                durationMs INTEGER,
+                dataCategory TEXT DEFAULT 'OPERATIONAL',
+                retentionDays INTEGER DEFAULT ${this.DEFAULT_RETENTION_DAYS},
+                prev_hash TEXT,
+                hash TEXT
+            )
+        `);
+        // Migrate older DBs
+        try {
+            const cols = db.prepare(`PRAGMA table_info(${this.TABLE})`).all().map((c) => c.name);
+            if (!cols.includes("prev_hash"))
+                db.exec(`ALTER TABLE ${this.TABLE} ADD COLUMN prev_hash TEXT`);
+            if (!cols.includes("hash"))
+                db.exec(`ALTER TABLE ${this.TABLE} ADD COLUMN hash TEXT`);
+        }
+        catch {
+            /* ignore */
+        }
+        // Indexes for performance
+        db.exec(`
+            CREATE INDEX IF NOT EXISTS idx_audit_action ON ${this.TABLE}(action);
+            CREATE INDEX IF NOT EXISTS idx_audit_status ON ${this.TABLE}(status);
+            CREATE INDEX IF NOT EXISTS idx_audit_trace ON ${this.TABLE}(traceId);
+            CREATE INDEX IF NOT EXISTS idx_audit_timestamp ON ${this.TABLE}(timestamp);
+            CREATE INDEX IF NOT EXISTS idx_audit_category ON ${this.TABLE}(dataCategory);
+        `);
+    }
+    /**
+     * Refresh the out-of-DB chain anchor after a legitimate deletion
+     * (retention / right-to-erasure). Without this, legitimate deletions would
+     * be indistinguishable from tampering.
+     */
+    static refreshAnchor() {
+        try {
+            const db = databaseHolder.getDB();
+            const row = db.prepare(`SELECT hash FROM ${this.TABLE} WHERE hash IS NOT NULL ORDER BY id DESC LIMIT 1`).get();
+            const count = db.prepare(`SELECT COUNT(*) AS c FROM ${this.TABLE} WHERE hash IS NOT NULL`).get().c;
+            if (row?.hash && count > 0)
+                writeChainAnchor(this.ANCHOR_NAME, row.hash, count);
+            else
+                clearChainAnchor(this.ANCHOR_NAME);
+        }
+        catch {
+            /* ignore */
+        }
+    }
+    /**
+     * Logs a structured audit entry.
+     * [KVKK] Sensitive data is automatically masked.
+     */
+    static log(action, status, options = {}) {
+        const db = databaseHolder.getDB();
+        const requested = options.retentionDays ?? this.DEFAULT_RETENTION_DAYS;
+        const safeRequested = Number.isFinite(requested) && requested >= 0 ? requested : this.DEFAULT_RETENTION_DAYS;
+        const retentionDays = Math.min(safeRequested, this.MAX_RETENTION_DAYS);
+        // [KVKK] PII Masking — mask sensitive data in the details field
+        const maskedDetails = options.details
+            ? maskObject(options.details)
+            : undefined;
+        const maskedError = options.errorMessage
+            ? maskText(options.errorMessage)
+            : undefined;
+        const timestamp = new Date().toISOString();
+        const agent = options.agent || "@manager";
+        const detailsJson = maskedDetails ? JSON.stringify(maskedDetails) : "";
+        const errorMessage = maskedError || "";
+        const traceId = options.traceId || "";
+        const dataCategory = options.dataCategory || "OPERATIONAL";
+        // Append-only hash chain inside a transaction (Phase 1.4)
+        const insert = db.transaction(() => {
+            let prevHash = AUDIT_CHAIN_GENESIS;
+            try {
+                const last = db.prepare(`SELECT hash FROM ${this.TABLE} WHERE hash IS NOT NULL ORDER BY id DESC LIMIT 1`).get();
+                if (last?.hash)
+                    prevHash = last.hash;
+            }
+            catch {
+                /* genesis */
+            }
+            const payload = buildStructuredAuditChainPayload({
+                prevHash,
+                agent,
+                action,
+                status,
+                traceId,
+                timestamp,
+                detailsJson,
+                errorMessage,
+            });
+            const hash = chainDigest(payload);
+            db.prepare(`
+                INSERT INTO ${this.TABLE}
+                    (timestamp, action, status, agent, traceId, details, errorMessage, durationMs, dataCategory, retentionDays, prev_hash, hash)
+                VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+            `).run(timestamp, action, status, agent, options.traceId || null, detailsJson || null, errorMessage || null, options.durationMs || null, dataCategory, retentionDays, prevHash, hash);
+            // Refresh the out-of-DB anchor so tail truncation becomes detectable.
+            const count = db.prepare(`SELECT COUNT(*) AS c FROM ${this.TABLE} WHERE hash IS NOT NULL`).get().c;
+            writeChainAnchor(this.ANCHOR_NAME, hash, count);
+        });
+        insert();
+    }
+    /**
+     * Verify tamper-evident chain for structured audit_log table.
+     */
+    static verifyIntegrity() {
+        const db = databaseHolder.getDB();
+        try {
+            const rows = db.prepare(`SELECT id, prev_hash, hash, agent, action, status, traceId, timestamp, details, errorMessage
+                 FROM ${this.TABLE} ORDER BY id ASC`).all();
+            // Skip unhashed legacy rows at the head; start chain at first hashed row
+            const hashed = rows.filter((r) => r.hash);
+            if (hashed.length === 0) {
+                return { valid: true, checked: 0, reason: "No hashed audit rows yet" };
+            }
+            const anchor = readChainAnchor(this.ANCHOR_NAME);
+            return verifyHashChain(hashed, (row, prevHash) => buildStructuredAuditChainPayload({
+                prevHash,
+                agent: row.agent,
+                action: row.action,
+                status: row.status,
+                traceId: row.traceId || "",
+                timestamp: row.timestamp,
+                detailsJson: row.details || "",
+                errorMessage: row.errorMessage || "",
+            }), {
+                expectedTip: anchor?.tip,
+                expectedCount: anchor?.count,
+            });
+        }
+        catch (err) {
+            return {
+                valid: false,
+                checked: 0,
+                reason: `Verification error: ${err.message}`,
+            };
+        }
+    }
+    /**
+     * Queries audit logs with filters.
+     */
+    static query(options = {}) {
+        const db = databaseHolder.getDB();
+        const conditions = [];
+        const params = [];
+        if (options.action) {
+            conditions.push("action = ?");
+            params.push(options.action);
+        }
+        if (options.status) {
+            conditions.push("status = ?");
+            params.push(options.status);
+        }
+        if (options.agent) {
+            conditions.push("agent = ?");
+            params.push(options.agent);
+        }
+        if (options.traceId) {
+            conditions.push("traceId = ?");
+            params.push(options.traceId);
+        }
+        if (options.dataCategory) {
+            conditions.push("dataCategory = ?");
+            params.push(options.dataCategory);
+        }
+        if (options.since) {
+            conditions.push("timestamp >= ?");
+            params.push(options.since);
+        }
+        if (options.until) {
+            conditions.push("timestamp <= ?");
+            params.push(options.until);
+        }
+        const where = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+        const limit = options.limit || 50;
+        const offset = options.offset || 0;
+        const rows = db.prepare(`SELECT * FROM ${this.TABLE} ${where} ORDER BY timestamp DESC LIMIT ? OFFSET ?`).all(...params, limit, offset);
+        return rows.map(row => ({
+            ...row,
+            details: row.details ? JSON.parse(row.details) : undefined,
+        }));
+    }
+    /**
+   * [KVKK Art. 11] Deletes records upon data subject request.
+   * Clears all records matching a given traceId or agent.
+   *
+   * @param filter Which records to delete
+   * @returns Number of deleted records
+   */
+    static deleteByFilter(filter) {
+        const db = databaseHolder.getDB();
+        const conditions = [];
+        const params = [];
+        if (filter.traceId) {
+            conditions.push("traceId = ?");
+            params.push(filter.traceId);
+        }
+        if (filter.agent) {
+            conditions.push("agent = ?");
+            params.push(filter.agent);
+        }
+        if (filter.action) {
+            conditions.push("action = ?");
+            params.push(filter.action);
+        }
+        if (filter.olderThanDays) {
+            conditions.push("timestamp < datetime('now', ? || ' days')");
+            params.push(`-${filter.olderThanDays}`);
+        }
+        if (conditions.length === 0)
+            return 0;
+        const result = db.prepare(`DELETE FROM ${this.TABLE} WHERE ${conditions.join(" AND ")}`).run(...params);
+        if (result.changes > 0)
+            this.refreshAnchor();
+        return result.changes;
+    }
+    /**
+     * [KVKK/GDPR] Cleans expired records.
+     * Operates based on each audit record's retentionDays field.
+     * Can be auto-triggered by cron job or each Audit.log() call.
+     *
+     * @returns Number of cleaned records
+     */
+    static cleanExpired() {
+        const db = databaseHolder.getDB();
+        const result = db.prepare(`
+            DELETE FROM ${this.TABLE}
+            WHERE retentionDays IS NOT NULL
+            AND strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-' || retentionDays || ' days')
+        `).run();
+        if (result.changes > 0) {
+            this.refreshAnchor();
+            logger.info(`[AUDIT] Expired records cleaned: ${result.changes}`);
+        }
+        return result.changes;
+    }
+    /**
+     * Returns audit statistics.
+     */
+    static getStats() {
+        const db = databaseHolder.getDB();
+        this.cleanExpired();
+        const total = db.prepare(`SELECT COUNT(*) as count FROM ${this.TABLE}`).get().count;
+        const byStatusRows = db.prepare(`SELECT status, COUNT(*) as count FROM ${this.TABLE} GROUP BY status`).all();
+        const byActionRows = db.prepare(`SELECT action, COUNT(*) as count FROM ${this.TABLE} GROUP BY action ORDER BY count DESC LIMIT 10`).all();
+        const byCategoryRows = db.prepare(`SELECT dataCategory, COUNT(*) as count FROM ${this.TABLE} GROUP BY dataCategory`).all();
+        const errors = db.prepare(`SELECT * FROM ${this.TABLE} WHERE status IN ('FAILED', 'BLOCKED') ORDER BY timestamp DESC LIMIT 10`).all();
+        const expiredCount = db.prepare(`
+                SELECT COUNT(*) as count FROM ${this.TABLE}
+                WHERE retentionDays IS NOT NULL
+                AND strftime('%Y-%m-%d %H:%M:%S', timestamp) < datetime('now', '-' || retentionDays || ' days')
+            `).get().count;
+        return {
+            total,
+            byStatus: Object.fromEntries(byStatusRows.map(r => [r.status, r.count])),
+            byAction: Object.fromEntries(byActionRows.map(r => [r.action, r.count])),
+            byCategory: Object.fromEntries(byCategoryRows.map(r => [r.dataCategory, r.count])),
+            recentErrors: errors.map(row => ({
+                ...row,
+                details: row.details ? JSON.parse(row.details) : undefined,
+            })),
+            expiredCount,
+        };
+    }
+    /**
+     * [KVKK Art. 7] Clears all audit records.
+     * Used under the "Right to Erasure" provision.
+     * Only authorized users may call this.
+     */
+    static clearAll(confirmationCode) {
+        if (confirmationCode !== "KVKK-RIGHT-TO-ERASURE") {
+            throw new Error("[AUDIT] Invalid confirmation code for data erasure");
+        }
+        const db = databaseHolder.getDB();
+        const result = db.prepare(`DELETE FROM ${this.TABLE}`).run();
+        clearChainAnchor(this.ANCHOR_NAME);
+        logger.info(`[AUDIT] All records cleared (${result.changes} records). KVKK Article 7 compliance.`);
+        return result.changes;
+    }
+}
+//# sourceMappingURL=audit.js.map

package/dist/modules/observability/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../src/modules/observability/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EACH,mBAAmB,EACnB,gCAAgC,EAChC,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAElB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAwBrC,MAAM,OAAO,KAAK;IACN,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;IACnC,iEAAiE;IACzD,MAAM,CAAC,WAAW,GAAG,YAAY,CAAC;IAC1C,oDAAoD;IAC5C,MAAM,CAAC,sBAAsB,GAAG,CAAC,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,EAAE,CAAC;IACL,iEAAiE;IACzD,MAAM,CAAC,kBAAkB,GAAG,EAAE,CAAC;IAEhC,MAAM,CAAC,UAAU;QACpB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,EAAE,CAAC,IAAI,CAAC;yCACyB,IAAI,CAAC,KAAK;;;;;;;;;;;gDAWH,IAAI,CAAC,sBAAsB;;;;SAIlE,CAAC,CAAC;QACH,oBAAoB;QACpB,IAAI,CAAC;YACD,MAAM,IAAI,GAAI,EAAE,CAAC,OAAO,CAAC,qBAAqB,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,EAA8B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAClH,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,4BAA4B,CAAC,CAAC;YAChG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,EAAE,CAAC,IAAI,CAAC,eAAe,IAAI,CAAC,KAAK,uBAAuB,CAAC,CAAC;QAC1F,CAAC;QAAC,MAAM,CAAC;YACL,YAAY;QAChB,CAAC;QACD,0BAA0B;QAC1B,EAAE,CAAC,IAAI,CAAC;6DAC6C,IAAI,CAAC,KAAK;6DACV,IAAI,CAAC,KAAK;4DACX,IAAI,CAAC,KAAK;gEACN,IAAI,CAAC,KAAK;+DACX,IAAI,CAAC,KAAK;SAChE,CAAC,CAAC;IACP,CAAC;IAED;;;;OAIG;IACK,MAAM,CAAC,aAAa;QACxB,IAAI,CAAC;YACD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAClB,oBAAoB,IAAI,CAAC,KAAK,kDAAkD,CACnF,CAAC,GAAG,EAAkC,CAAC;YACxC,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CACrB,6BAA6B,IAAI,CAAC,KAAK,yBAAyB,CACnE,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC5B,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,CAAC;gBAAE,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;;gBAC3E,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACL,YAAY;QAChB,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,GAAG,CACb,MAAc,EACd,MAAmB,EACnB,UASI,EAAE;QAEN,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC,sBAAsB,CAAC;QACvE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC;QAC7G,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAEvE,gEAAgE;QAChE,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO;YACjC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAA4B;YACxD,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY;YACpC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC;YAChC,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC;QAC1C,MAAM,WAAW,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,MAAM,YAAY,GAAG,WAAW,IAAI,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,aAAa,CAAC;QAE3D,0DAA0D;QAC1D,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;YAC/B,IAAI,QAAQ,GAAG,mBAAmB,CAAC;YACnC,IAAI,CAAC;gBACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB,oBAAoB,IAAI,CAAC,KAAK,kDAAkD,CACnF,CAAC,GAAG,EAAkC,CAAC;gBACxC,IAAI,IAAI,EAAE,IAAI;oBAAE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACL,aAAa;YACjB,CAAC;YAED,MAAM,OAAO,GAAG,gCAAgC,CAAC;gBAC7C,QAAQ;gBACR,KAAK;gBACL,MAAM;gBACN,MAAM;gBACN,OAAO;gBACP,SAAS;gBACT,WAAW;gBACX,YAAY;aACf,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YAElC,EAAE,CAAC,OAAO,CAAC;8BACO,IAAI,CAAC,KAAK;;;aAG3B,CAAC,CAAC,GAAG,CACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,KAAK,EACL,OAAO,CAAC,OAAO,IAAI,IAAI,EACvB,WAAW,IAAI,IAAI,EACnB,YAAY,IAAI,IAAI,EACpB,OAAO,CAAC,UAAU,IAAI,IAAI,EAC1B,YAAY,EACZ,aAAa,EACb,QAAQ,EACR,IAAI,CACP,CAAC;YAEF,sEAAsE;YACtE,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CACrB,6BAA6B,IAAI,CAAC,KAAK,yBAAyB,CACnE,CAAC,GAAG,EAAoB,CAAC,CAAC,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM,EAAE,CAAC;IACb,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,eAAe;QACzB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB;wBACQ,IAAI,CAAC,KAAK,kBAAkB,CACvC,CAAC,GAAG,EAWH,CAAC;YAEH,yEAAyE;YACzE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;YAC3E,CAAC;YAED,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,eAAe,CAClB,MAAM,EACN,CAAC,GAAG,EAAE,QAAQ,EAAE,EAAE,CACd,gCAAgC,CAAC;gBAC7B,QAAQ;gBACR,KAAK,EAAE,GAAG,CAAC,KAAK;gBAChB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE;gBAC9B,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE;aACvC,CAAC,EACN;gBACI,WAAW,EAAE,MAAM,EAAE,GAAG;gBACxB,aAAa,EAAE,MAAM,EAAE,KAAK;aAC/B,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO;gBACH,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,uBAAwB,GAAa,CAAC,OAAO,EAAE;aAC1D,CAAC;QACN,CAAC;IACL,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,KAAK,CAAC,UAUhB,EAAE;QACF,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACnF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACnF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAChF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACtF,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAAC,CAAC;QACrG,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QACrF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAErF,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAEnC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CACnB,iBAAiB,IAAI,CAAC,KAAK,IAAI,KAAK,2CAA2C,CAClF,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,MAAM,CAAmD,CAAC;QAElF,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACpB,GAAG,GAAG;YACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7D,CAAC,CAAC,CAAC;IACR,CAAC;IAED;;;;;;KAMC;IACM,MAAM,CAAC,cAAc,CAAC,MAK5B;QACG,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QACpF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QACjF,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC7D,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEtC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,eAAe,IAAI,CAAC,KAAK,UAAU,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAChE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QAEjB,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,YAAY;QACtB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;0BACR,IAAI,CAAC,KAAK;;;SAG3B,CAAC,CAAC,GAAG,EAAE,CAAC;QACT,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,CAAC,oCAAoC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC;IAED;;OAEG;IACI,MAAM,CAAC,QAAQ;QAQlB,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,MAAM,KAAK,GAAI,EAAE,CAAC,OAAO,CAAC,iCAAiC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAwB,CAAC,KAAK,CAAC;QAE3G,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAC3B,yCAAyC,IAAI,CAAC,KAAK,kBAAkB,CACxE,CAAC,GAAG,EAA8C,CAAC;QAEpD,MAAM,YAAY,GAAG,EAAE,CAAC,OAAO,CAC3B,yCAAyC,IAAI,CAAC,KAAK,+CAA+C,CACrG,CAAC,GAAG,EAA8C,CAAC;QAEpD,MAAM,cAAc,GAAG,EAAE,CAAC,OAAO,CAC7B,+CAA+C,IAAI,CAAC,KAAK,wBAAwB,CACpF,CAAC,GAAG,EAAoD,CAAC;QAE1D,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CACrB,iBAAiB,IAAI,CAAC,KAAK,yEAAyE,CACvG,CAAC,GAAG,EAAoD,CAAC;QAE1D,MAAM,YAAY,GACd,EAAE,CAAC,OAAO,CAAC;gDACyB,IAAI,CAAC,KAAK;;;aAG7C,CAAC,CAAC,GAAG,EACT,CAAC,KAAK,CAAC;QAER,OAAO;YACH,KAAK;YACL,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACxE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAClF,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7B,GAAG,GAAG;gBACN,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;aAC7D,CAAC,CAAC;YACH,YAAY;SACf,CAAC;IACN,CAAC;IAED;;;;OAIG;IACI,MAAM,CAAC,QAAQ,CAAC,gBAAwB;QAC3C,IAAI,gBAAgB,KAAK,uBAAuB,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,EAAE,GAAG,cAAc,CAAC,KAAK,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7D,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,gCAAgC,MAAM,CAAC,OAAO,uCAAuC,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,OAAO,CAAC;IAC1B,CAAC"}

package/dist/modules/observability/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./logger.js";
+export * from "./otel.js";
+export * from "./audit.js";
+export * from "./audit-chain.js";

package/dist/modules/observability/index.js

@@ -0,0 +1,5 @@
+export * from "./logger.js";
+export * from "./otel.js";
+export * from "./audit.js";
+export * from "./audit-chain.js";
+//# sourceMappingURL=index.js.map

package/dist/modules/observability/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/modules/observability/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/modules/observability/logger.d.ts

@@ -0,0 +1,31 @@
+export declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    FATAL = 4
+}
+export interface LoggerConfig {
+    minLevel: LogLevel;
+    enableColors: boolean;
+    jsonFormat: boolean;
+    logFile?: string;
+    enablePiiMasking: boolean;
+    piiWarning: boolean;
+    useStderr?: boolean;
+}
+export declare class EnterpriseLogger {
+    private config;
+    private static instance;
+    private constructor();
+    static getInstance(): EnterpriseLogger;
+    configure(config: Partial<LoggerConfig>): void;
+    private formatMessage;
+    private log;
+    debug(message: string, meta?: unknown): void;
+    info(message: string, meta?: unknown): void;
+    warn(message: string, meta?: unknown): void;
+    error(message: string, meta?: unknown): void;
+    fatal(message: string, meta?: unknown): void;
+}
+export declare const logger: EnterpriseLogger;

package/dist/modules/observability/logger.js

@@ -0,0 +1,153 @@
+import chalk from "chalk";
+import path from "path";
+import { appendFile, ensureDir } from "../primitives/fs.js";
+import { containsPII, maskObject, maskText } from "../security/pii.js";
+/** JSON.stringify that tolerates circular references instead of throwing. */
+function safeStringify(value) {
+    const seen = new WeakSet();
+    try {
+        return JSON.stringify(value, (_key, v) => {
+            if (typeof v === "object" && v !== null) {
+                if (typeof Buffer !== "undefined" && Buffer.isBuffer(v))
+                    return `<Buffer ${v.length} bytes>`;
+                if (v instanceof Uint8Array)
+                    return `<bytes ${v.length}>`;
+                if (seen.has(v))
+                    return "[Circular]";
+                seen.add(v);
+            }
+            return v;
+        });
+    }
+    catch {
+        return "[Unserializable]";
+    }
+}
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
+    LogLevel[LogLevel["INFO"] = 1] = "INFO";
+    LogLevel[LogLevel["WARN"] = 2] = "WARN";
+    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
+    LogLevel[LogLevel["FATAL"] = 4] = "FATAL";
+})(LogLevel || (LogLevel = {}));
+export class EnterpriseLogger {
+    config;
+    static instance;
+    constructor() {
+        const isProd = process.env.NODE_ENV === "production";
+        const isStdio = process.env.MCP_TRANSPORT === "stdio";
+        this.config = {
+            minLevel: isProd ? LogLevel.INFO : LogLevel.DEBUG,
+            enableColors: !isProd && !isStdio,
+            jsonFormat: isProd,
+            enablePiiMasking: true, // KVKK: PII masking ON by default
+            piiWarning: true,
+            useStderr: isStdio,
+        };
+    }
+    static getInstance() {
+        if (!EnterpriseLogger.instance) {
+            EnterpriseLogger.instance = new EnterpriseLogger();
+        }
+        return EnterpriseLogger.instance;
+    }
+    configure(config) {
+        this.config = { ...this.config, ...config };
+        if (this.config.logFile) {
+            try {
+                ensureDir(path.dirname(this.config.logFile));
+            }
+            catch (err) {
+                // Directly write to stderr — using console here would be circular
+                process.stderr.write(`[Logger] Failed to create log directory: ${err}\n`);
+            }
+        }
+    }
+    formatMessage(level, message, meta) {
+        const timestamp = new Date().toISOString();
+        const pid = process.pid;
+        // [KVKK] PII masking — mask sensitive data before logging
+        const safeMessage = this.config.enablePiiMasking ? maskText(message) : message;
+        const safeMeta = this.config.enablePiiMasking && meta ? maskObject(meta) : meta;
+        // [KVKK] Warn if PII detected in production (safe against circular meta)
+        if (this.config.piiWarning && (containsPII(message) || (meta !== undefined && containsPII(safeStringify(meta))))) {
+            // Only pollute stderr in non-JSON mode so structured streams stay clean.
+            if (!this.config.jsonFormat) {
+                process.stderr.write(`[PII WARNING] Potential PII detected in log at ${timestamp}\n`);
+            }
+        }
+        if (this.config.jsonFormat) {
+            return safeStringify({
+                timestamp,
+                level: LogLevel[level],
+                pid,
+                message: safeMessage,
+                meta: safeMeta,
+            });
+        }
+        const levelName = LogLevel[level].padEnd(5);
+        let coloredLevel = levelName;
+        if (this.config.enableColors) {
+            switch (level) {
+                case LogLevel.DEBUG:
+                    coloredLevel = chalk.blue(levelName);
+                    break;
+                case LogLevel.INFO:
+                    coloredLevel = chalk.green(levelName);
+                    break;
+                case LogLevel.WARN:
+                    coloredLevel = chalk.yellow(levelName);
+                    break;
+                case LogLevel.ERROR:
+                    coloredLevel = chalk.red(levelName);
+                    break;
+                case LogLevel.FATAL:
+                    coloredLevel = chalk.bgRed.white.bold(levelName);
+                    break;
+            }
+        }
+        const metaStr = safeMeta ? ` | Meta: ${JSON.stringify(safeMeta)}` : "";
+        return `[${timestamp}] [PID:${pid}] [${coloredLevel}]: ${safeMessage}${metaStr}`;
+    }
+    log(level, message, meta) {
+        if (level < this.config.minLevel)
+            return;
+        const formatted = this.formatMessage(level, message, meta);
+        // Route to stderr for ERROR/FATAL, or when useStderr / MCP stdio transport is active.
+        // Using process.write directly here is intentional — this IS the logger.
+        if (this.config.useStderr || process.env.MCP_TRANSPORT === "stdio" || level >= LogLevel.ERROR) {
+            process.stderr.write(formatted + "\n");
+        }
+        else {
+            process.stdout.write(formatted + "\n");
+        }
+        // Output to file if configured
+        if (this.config.logFile) {
+            try {
+                appendFile(this.config.logFile, formatted + "\n");
+            }
+            catch (err) {
+                // Directly write to stderr — using console here would be circular
+                process.stderr.write(`[Logger] Failed to write to log file: ${err}\n`);
+            }
+        }
+    }
+    debug(message, meta) {
+        this.log(LogLevel.DEBUG, message, meta);
+    }
+    info(message, meta) {
+        this.log(LogLevel.INFO, message, meta);
+    }
+    warn(message, meta) {
+        this.log(LogLevel.WARN, message, meta);
+    }
+    error(message, meta) {
+        this.log(LogLevel.ERROR, message, meta);
+    }
+    fatal(message, meta) {
+        this.log(LogLevel.FATAL, message, meta);
+    }
+}
+export const logger = EnterpriseLogger.getInstance();
+//# sourceMappingURL=logger.js.map

package/dist/modules/observability/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../../src/modules/observability/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEvE,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAc;IACjC,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,IAAI,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;YACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACtC,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,OAAO,WAAW,CAAC,CAAC,MAAM,SAAS,CAAC;gBAC7F,IAAI,CAAC,YAAY,UAAU;oBAAE,OAAO,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;gBAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;oBAAE,OAAO,YAAY,CAAC;gBACrC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChB,CAAC;YACD,OAAO,CAAC,CAAC;QACb,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,kBAAkB,CAAC;IAC9B,CAAC;AACL,CAAC;AAED,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAChB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,yCAAS,CAAA;AACb,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AAYD,MAAM,OAAO,gBAAgB;IACjB,MAAM,CAAe;IACrB,MAAM,CAAC,QAAQ,CAAmB;IAE1C;QACI,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,OAAO,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG;YACV,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK;YACjD,YAAY,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO;YACjC,UAAU,EAAE,MAAM;YAClB,gBAAgB,EAAE,IAAI,EAAE,kCAAkC;YAC1D,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,OAAO;SACrB,CAAC;IACN,CAAC;IAEM,MAAM,CAAC,WAAW;QACrB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,CAAC;YAC7B,gBAAgB,CAAC,QAAQ,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,gBAAgB,CAAC,QAAQ,CAAC;IACrC,CAAC;IAEM,SAAS,CAAC,MAA6B;QAC1C,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;QAE5C,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACjD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,kEAAkE;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,GAAG,IAAI,CAAC,CAAC;YAC9E,CAAC;QACL,CAAC;IACL,CAAC;IAEO,aAAa,CAAC,KAAe,EAAE,OAAe,EAAE,IAAc;QAClE,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QAExB,0DAA0D;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEhF,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/G,yEAAyE;YACzE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,SAAS,IAAI,CAAC,CAAC;YAC1F,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;YACzB,OAAO,aAAa,CAAC;gBACjB,SAAS;gBACT,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;gBACtB,GAAG;gBACH,OAAO,EAAE,WAAW;gBACpB,IAAI,EAAE,QAAQ;aACjB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,YAAY,GAAG,SAAS,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YAC3B,QAAQ,KAAK,EAAE,CAAC;gBACZ,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrC,MAAM;gBACV,KAAK,QAAQ,CAAC,IAAI;oBACd,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACtC,MAAM;gBACV,KAAK,QAAQ,CAAC,IAAI;oBACd,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBACvC,MAAM;gBACV,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;oBACpC,MAAM;gBACV,KAAK,QAAQ,CAAC,KAAK;oBACf,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM;YACd,CAAC;QACL,CAAC;QAED,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,SAAS,UAAU,GAAG,MAAM,YAAY,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC;IACrF,CAAC;IAEO,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAc;QACxD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO;QAEzC,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QAE3D,sFAAsF;QACtF,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,OAAO,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;YAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,+BAA+B;QAC/B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtB,IAAI,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC,CAAC;YACtD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,kEAAkE;gBAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,GAAG,IAAI,CAAC,CAAC;YAC3E,CAAC;QACL,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEM,IAAI,CAAC,OAAe,EAAE,IAAc;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,IAAI,CAAC,OAAe,EAAE,IAAc;QACvC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IAEM,KAAK,CAAC,OAAe,EAAE,IAAc;QACxC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC"}

package/dist/modules/observability/otel.d.ts

@@ -0,0 +1,39 @@
+/**
+ * OpenTelemetry-compatible tracing without an SDK dependency.
+ *
+ * Produces W3C Trace Context ids and OTLP-shaped span records, written as
+ * JSON Lines to `.atabey/telemetry/otel.jsonl` (and optionally pushed to an
+ * OTLP/HTTP collector via OTEL_EXPORTER_OTLP_ENDPOINT). This lets enterprise
+ * teams ship Atabey's tool spans to Datadog/Jaeger/Grafana/ELK without Atabey
+ * taking a hard dependency on the OTel SDK.
+ */
+export interface SpanAttributes {
+    [key: string]: string | number | boolean | undefined;
+}
+export interface SpanRecord {
+    traceId: string;
+    spanId: string;
+    parentSpanId?: string;
+    name: string;
+    startTimeUnixNano: string;
+    endTimeUnixNano: string;
+    attributes: Record<string, string | number | boolean>;
+    status: "OK" | "ERROR";
+}
+export declare function newTraceId(): string;
+export declare function newSpanId(): string;
+/** W3C traceparent header for the given ids. */
+export declare function formatTraceparent(traceId: string, spanId: string, sampled?: boolean): string;
+/**
+ * Emit a span record. Best-effort: telemetry must never break tool execution.
+ */
+export declare function emitSpan(projectRoot: string, span: {
+    name: string;
+    traceId: string;
+    spanId: string;
+    parentSpanId?: string;
+    startMs: number;
+    endMs: number;
+    attributes?: SpanAttributes;
+    status?: "OK" | "ERROR";
+}): SpanRecord;