logixia 1.12.6 → 1.13.3

package/dist/index.js

@@ -2,370 +2,16 @@ const require_chunk = require('./chunk-nOFOJqeH.js');
 const require_internal_log = require('./internal-log-BUJYMZbE.js');
 const require_safe_stringify = require('./safe-stringify-DWo3aZp_.js');
 const require_batch_buffer = require('./batch-buffer-BY-mRWIK.js');
-const require_async_context = require('./async-context-CSHWoHMB.js');
-const require_logitron_logger_module = require('./logitron-logger.module-BsDZR5BH.js');
-const require_coerce_utils = require('./coerce.utils-BN980Y9V.js');
-require('./transport.manager-BivyUTtU.js');
-const require_search = require('./search-njTI2hdo.js');
+require('./entry-fields-BvOLFlJ4.js');
+const require_trace_utils = require('./trace.utils-DpBOLDtq.js');
+const require_async_context = require('./async-context-DyQQYq3I.js');
+const require_nestjs_extras = require('./nestjs-extras-DnJ6vrIC.js');
+const require_coerce_utils = require('./coerce.utils-B-LilukN.js');
+const require_transport_manager = require('./transport.manager-Crau3Rle.js');
+const require_search = require('./search-B0MH1SJJ.js');
 let node_async_hooks = require("node:async_hooks");
 node_async_hooks = require_chunk.__toESM(node_async_hooks);
-let __nestjs_common = require("@nestjs/common");
-__nestjs_common = require_chunk.__toESM(__nestjs_common);
 
-//#region src/exceptions/exception.ts
-var LogixiaException = class extends Error {
-	constructor(options) {
-		super(options.message, { cause: options.cause });
-		this.name = "LogixiaException";
-		this.errorCode = options.code;
-		this.errorType = options.type;
-		this.httpStatus = options.httpStatus;
-		this.param = options.param;
-		this.details = options.details;
-		this.docUrl = options.docUrl;
-		this.metadata = options.metadata;
-		Object.setPrototypeOf(this, new.target.prototype);
-	}
-};
-/**
-* Returns `true` when `value` is a `LogixiaException` instance.
-*
-* Useful in exception filters or middleware that need to distinguish a
-* `LogixiaException` from a plain `Error` or a framework `HttpException`.
-*
-* @example
-* ```ts
-* if (isLogixiaException(err)) {
-*   console.log(err.errorCode, err.httpStatus);
-* }
-* ```
-*/
-function isLogixiaException(value) {
-	return value instanceof LogixiaException;
-}
-
-//#endregion
-//#region src/exceptions/builder.ts
-/**
-* Generates a trace ID via the shared {@link TraceContext} generator.
-*
-* Delegates to `TraceContext.instance.generate()` so any custom generator
-* configured on `TraceIdConfig.generator` is respected — avoids the silent
-* "builder has its own UUID source" divergence this module had previously.
-*
-* @example `'550e8400-e29b-41d4-a716-446655440000'`
-*/
-function generateTraceId() {
-	return require_logitron_logger_module.TraceContext.instance.generate();
-}
-/** @deprecated Use `generateTraceId` instead. */
-const generateRequestId = generateTraceId;
-/**
-* Maps an HTTP status code to a human-friendly error type string.
-* Used as a fallback when the exception is a generic `HttpException`.
-*/
-function httpStatusToType(status) {
-	if (status === 400) return "api_error";
-	if (status === 401) return "authentication_error";
-	if (status === 402) return "payment_error";
-	if (status === 403) return "authorization_error";
-	if (status === 404) return "not_found_error";
-	if (status === 408) return "timeout_error";
-	if (status === 409) return "conflict_error";
-	if (status === 422) return "validation_error";
-	if (status === 429) return "rate_limit_error";
-	if (status >= 500) return "server_error";
-	if (status >= 400) return "api_error";
-	return "server_error";
-}
-/**
-* Duck-type check for NestJS `HttpException`.
-* Avoids a hard import on `@nestjs/common` so the builder is usable outside NestJS.
-*/
-function isHttpException(value) {
-	return typeof value === "object" && value !== null && typeof value["getStatus"] === "function" && typeof value["getResponse"] === "function";
-}
-/**
-* Builds the optional `debug` block from an error.
-* Returns `undefined` when there is nothing useful to include.
-*/
-function buildDebug(error, service, durationMs) {
-	const stack = error instanceof Error ? error.stack : void 0;
-	const causeRaw = error instanceof Error ? error.cause : void 0;
-	let cause;
-	if (causeRaw instanceof Error) cause = causeRaw.message;
-	else if (causeRaw !== void 0 && causeRaw !== null) cause = String(causeRaw);
-	if (!stack && !cause && !service && durationMs === void 0) return void 0;
-	return {
-		...stack !== void 0 ? { stack } : {},
-		...cause !== void 0 ? { cause } : {},
-		...service !== void 0 ? { service } : {},
-		...durationMs !== void 0 ? { duration_ms: durationMs } : {}
-	};
-}
-var ErrorResponseBuilder = class {
-	/**
-	* Build a `LogixiaErrorResponse` from any thrown value.
-	*
-	* @param params - See `BuildParams`.
-	* @returns The unified error response and the HTTP status code to send.
-	*
-	* @remarks
-	* `traceId` does not need to be supplied by the caller in most cases — the
-	* builder reads `TraceContext.instance.getCurrentTraceId()` internally and
-	* falls back to the explicit `traceId` argument only when AsyncLocalStorage
-	* is empty. If neither source yields a value, `meta.trace_id` is omitted.
-	*
-	* @example In a NestJS exception filter
-	* ```ts
-	* const { response, httpStatus } = ErrorResponseBuilder.build<AppCode, AppType>({
-	*   exception,
-	*   // Omit traceId — it will be picked up from ALS automatically.
-	*   path:    request.url,
-	*   service: process.env.SERVICE_NAME,
-	*   startTime: request.startTime,
-	* });
-	*
-	* if (process.env.NODE_ENV === 'production') delete response.debug;
-	* // Echo the resolved traceId back on whatever header your TraceIdConfig says —
-	* // do NOT hardcode 'X-Trace-Id', use `resolveResponseHeader(config)` instead.
-	* if (response.meta.trace_id) {
-	*   response.setHeader(resolveResponseHeader(config) ?? 'X-Trace-Id', response.meta.trace_id);
-	* }
-	* response.status(httpStatus).json(response);
-	* ```
-	*/
-	static build(params) {
-		const { exception, path, service, startTime, traceId: rawTraceId } = params;
-		const traceId = require_logitron_logger_module.TraceContext.instance.getCurrentTraceId() ?? rawTraceId;
-		const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-		const durationMs = startTime !== void 0 ? Date.now() - startTime : void 0;
-		if (isLogixiaException(exception)) {
-			const debug$1 = buildDebug(exception, service, durationMs);
-			const errorBlock = {
-				type: exception.errorType,
-				code: exception.errorCode,
-				message: exception.message
-			};
-			if (exception.param !== void 0) errorBlock.param = exception.param;
-			if (exception.details !== void 0 && exception.details.length > 0) errorBlock.details = exception.details;
-			if (exception.docUrl !== void 0) errorBlock.doc_url = exception.docUrl;
-			return {
-				response: {
-					success: false,
-					error: errorBlock,
-					meta: {
-						...traceId !== void 0 ? { trace_id: traceId } : {},
-						timestamp,
-						path,
-						status: exception.httpStatus
-					},
-					...debug$1 !== void 0 ? { debug: debug$1 } : {}
-				},
-				httpStatus: exception.httpStatus
-			};
-		}
-		if (isHttpException(exception)) {
-			const status = exception.getStatus();
-			const exResponse = exception.getResponse();
-			let message;
-			if (typeof exResponse === "string") message = exResponse;
-			else if (typeof exResponse === "object" && exResponse !== null && "message" in exResponse) {
-				const raw = exResponse.message;
-				message = Array.isArray(raw) ? raw.join(", ") : String(raw);
-			} else message = exception.message;
-			const type = httpStatusToType(status);
-			const code = `HTTP_${status}`;
-			const debug$1 = buildDebug(exception, service, durationMs);
-			return {
-				response: {
-					success: false,
-					error: {
-						type,
-						code,
-						message
-					},
-					meta: {
-						...traceId !== void 0 ? { trace_id: traceId } : {},
-						timestamp,
-						path,
-						status
-					},
-					...debug$1 !== void 0 ? { debug: debug$1 } : {}
-				},
-				httpStatus: status
-			};
-		}
-		const debug = buildDebug(exception instanceof Error ? exception : new Error(String(exception)), service, durationMs);
-		return {
-			response: {
-				success: false,
-				error: {
-					type: "server_error",
-					code: "INTERNAL_SERVER_ERROR",
-					message: "An unexpected error occurred."
-				},
-				meta: {
-					...traceId !== void 0 ? { trace_id: traceId } : {},
-					timestamp,
-					path,
-					status: 500
-				},
-				...debug !== void 0 ? { debug } : {}
-			},
-			httpStatus: 500
-		};
-	}
-};
-
-//#endregion
-//#region src/core/nestjs-extras.ts
-var _ref;
-/**
-* Inject the Logixia logger registered in the current NestJS DI container.
-*
-* Equivalent to `@Inject(LOGIXIA_LOGGER_TOKEN)` but without needing to import
-* the internal token constant yourself.
-*
-* @example
-* ```ts
-* constructor(@InjectLogger() private readonly logger: LogixiaLoggerService) {}
-* ```
-*/
-const InjectLogger = () => (0, __nestjs_common.Inject)(`${require_logitron_logger_module.LOGIXIA_LOGGER_PREFIX}SERVICE`);
-/**
-* Method decorator that auto-logs entry, exit, duration, and errors.
-*
-* Preserves the original method's sync/async contract: a synchronous method
-* stays synchronous (returns its value directly, with logs emitted
-* fire-and-forget), and an async method is awaited so exit/error logs reflect
-* the resolved result. Attaches to the logger found on the class instance via a
-* `logger` property (the conventional NestJS name).
-*
-* @example
-* ```ts
-* @LogMethod({ level: 'info', logArgs: true })
-* async processPayment(orderId: string): Promise<void> { … }
-* ```
-*/
-function LogMethod(options = {}) {
-	const { level = "debug", logArgs = true, logResult = false, logErrors = true } = options;
-	return function(target, propertyKey, descriptor) {
-		var _constructor;
-		const originalMethod = descriptor.value;
-		if (typeof originalMethod !== "function") return descriptor;
-		const methodName = String(propertyKey);
-		const className = ((_constructor = target.constructor) === null || _constructor === void 0 ? void 0 : _constructor.name) ?? "Unknown";
-		const label = options.label ?? `${className}.${methodName}`;
-		let _warnedNoLogger = false;
-		const reportLogFailure = (phase, err) => {
-			require_internal_log.internalError(`@LogMethod(${label}) ${phase} log failed: ${String(err)}`);
-		};
-		const emit$1 = (logger$1, phase, message, data) => {
-			const logFnRaw = logger$1[level];
-			const p = (typeof logFnRaw === "function" ? logFnRaw : logger$1.debug).bind(logger$1)(message, data);
-			if (p && typeof p.catch === "function") p.catch((e) => reportLogFailure(phase, e));
-		};
-		const emitError = (logger$1, error, start) => {
-			const err = error instanceof Error ? error : new Error(String(error));
-			const errLog = logger$1.error(err, {
-				method: label,
-				durationMs: Date.now() - start
-			});
-			if (errLog && typeof errLog.catch === "function") errLog.catch((e) => reportLogFailure("error", e));
-		};
-		descriptor.value = function(...args) {
-			const logger$1 = this.logger ?? require_logitron_logger_module.LogixiaLoggerModule._globalLogger ?? void 0;
-			if (!logger$1 && !_warnedNoLogger) {
-				_warnedNoLogger = true;
-				require_internal_log.internalWarn(`@LogMethod on ${label}: no logger available. Either inject LogixiaLoggerService as this.logger or ensure LogixiaLoggerModule is initialised.`);
-			}
-			const start = Date.now();
-			const entry = { method: label };
-			if (logArgs && args.length > 0) entry["args"] = args;
-			if (logger$1) emit$1(logger$1, "entry", `→ ${label}`, entry);
-			const buildExit = (result$1) => {
-				const exit = {
-					method: label,
-					durationMs: Date.now() - start
-				};
-				if (logResult) exit["result"] = result$1;
-				return exit;
-			};
-			let result;
-			try {
-				result = originalMethod.apply(this, args);
-			} catch (error) {
-				if (logger$1 && logErrors) emitError(logger$1, error, start);
-				throw error;
-			}
-			if (result && typeof result.then === "function") return result.then((resolved) => {
-				if (logger$1) emit$1(logger$1, "exit", `← ${label}`, buildExit(resolved));
-				return resolved;
-			}, (error) => {
-				if (logger$1 && logErrors) emitError(logger$1, error, start);
-				throw error;
-			});
-			if (logger$1) emit$1(logger$1, "exit", `← ${label}`, buildExit(result));
-			return result;
-		};
-		return descriptor;
-	};
-}
-let LogixiaExceptionFilter = class LogixiaExceptionFilter$1 {
-	constructor(logger$1, loggerConfig) {
-		this._logger = logger$1 ?? require_logitron_logger_module.LogixiaLoggerModule._globalLogger ?? void 0;
-		this._traceConfig = typeof (loggerConfig === null || loggerConfig === void 0 ? void 0 : loggerConfig.traceId) === "object" ? loggerConfig.traceId : void 0;
-	}
-	catch(exception, host) {
-		var _request$headers;
-		const ctx = host.switchToHttp();
-		const request = ctx.getRequest();
-		const response = ctx.getResponse();
-		const traceId = require_logitron_logger_module.TraceContext.instance.getCurrentTraceId() ?? ((_request$headers = request.headers) === null || _request$headers === void 0 ? void 0 : _request$headers["x-trace-id"]) ?? request.id ?? void 0;
-		const { response: errorResponse, httpStatus } = ErrorResponseBuilder.build({
-			exception,
-			traceId,
-			path: request.url ?? "/",
-			startTime: request.startTime
-		});
-		if (this._logger) {
-			const requestMeta = {
-				method: request.method ?? "",
-				url: request.url ?? "",
-				status: httpStatus,
-				...errorResponse.meta.trace_id !== void 0 ? { trace_id: errorResponse.meta.trace_id } : {}
-			};
-			const onLogFailure = (err) => {
-				require_internal_log.internalError(`ExceptionFilter failed to write log entry: ${String(err)}`);
-			};
-			let logPromise;
-			if (httpStatus >= 500) {
-				const err = exception instanceof Error ? exception : new Error(String(exception));
-				logPromise = this._logger.error(err, requestMeta);
-			} else if (isLogixiaException(exception)) logPromise = this._logger.warn(`[${errorResponse.error.code}] ${errorResponse.error.message}`, requestMeta);
-			else logPromise = this._logger.warn(`[${httpStatus}] ${errorResponse.error.message}`, requestMeta);
-			if (logPromise && typeof logPromise.catch === "function") logPromise.catch(onLogFailure);
-		}
-		if (process.env["NODE_ENV"] === "production") delete errorResponse.debug;
-		if (errorResponse.meta.trace_id) {
-			const traceHeader = require_logitron_logger_module.resolveResponseHeader(this._traceConfig);
-			if (traceHeader) response.setHeader(traceHeader, errorResponse.meta.trace_id);
-		}
-		if (httpStatus === 429) response.setHeader("Retry-After", "60");
-		response.status(httpStatus).json(errorResponse);
-	}
-};
-LogixiaExceptionFilter = require_logitron_logger_module.__decorate([
-	(0, __nestjs_common.Catch)(),
-	require_logitron_logger_module.__decorateParam(0, (0, __nestjs_common.Optional)()),
-	require_logitron_logger_module.__decorateParam(0, (0, __nestjs_common.Inject)(`${require_logitron_logger_module.LOGIXIA_LOGGER_PREFIX}SERVICE`)),
-	require_logitron_logger_module.__decorateParam(1, (0, __nestjs_common.Optional)()),
-	require_logitron_logger_module.__decorateParam(1, (0, __nestjs_common.Inject)(require_logitron_logger_module.LOGIXIA_LOGGER_CONFIG)),
-	require_logitron_logger_module.__decorateMetadata("design:paramtypes", [Object, typeof (_ref = typeof Partial !== "undefined" && Partial) === "function" ? _ref : Object])
-], LogixiaExceptionFilter);
-
-//#endregion
 //#region src/formatters/json.formatter.ts
 /**
 * Build a JSON.stringify replacer that replaces circular references with the
@@ -403,7 +49,7 @@ var JsonFormatter = class {
 		if (this.includeContext && entry.context) formatted.context = entry.context;
 		formatted.message = entry.message;
 		if (entry.payload && Object.keys(entry.payload).length > 0) formatted.payload = this.serializePayload(entry.payload);
-		if (entry.error) formatted.error = require_logitron_logger_module.serializeError(entry.error);
+		if (entry.error) formatted.error = require_nestjs_extras.serializeError(entry.error);
 		formatted.meta = {
 			pid: process.pid,
 			hostname: process.env.HOSTNAME || "unknown",
@@ -417,7 +63,7 @@ var JsonFormatter = class {
 		for (const [key, value] of Object.entries(payload)) {
 			if (key === "__proto__" || key === "constructor" || key === "prototype") continue;
 			try {
-				if (value instanceof Error) serialized[key] = require_logitron_logger_module.serializeError(value);
+				if (value instanceof Error) serialized[key] = require_nestjs_extras.serializeError(value);
 				else if (value instanceof Date) serialized[key] = value.toISOString();
 				else if (typeof value === "function") serialized[key] = "[Function]";
 				else if (typeof value === "symbol") serialized[key] = value.toString();
@@ -433,8 +79,7 @@ var JsonFormatter = class {
 
 //#endregion
 //#region src/formatters/text.formatter.ts
-const CONTROL_CHARS_RE = /[\x00-\x08\x0B-\x1F\x7F-\x9F]/g;
-const stripControls = (value) => require_coerce_utils.safeToString(value).replace(CONTROL_CHARS_RE, "");
+const stripControls = (value) => require_transport_manager.stripControlChars(require_coerce_utils.safeToString(value));
 var TextFormatter = class TextFormatter {
 	constructor(options = {}) {
 		this.colorize = options.colorize ?? true;
@@ -482,7 +127,7 @@ var TextFormatter = class TextFormatter {
 			parts.push(`[${context}]`);
 		}
 		const safeMessage = stripControls(entry.message);
-		const message = this.colorize && entry.level === require_logitron_logger_module.LogLevel.ERROR ? `${this.colors.error}${safeMessage}${this.colors.reset}` : safeMessage;
+		const message = this.colorize && entry.level === require_nestjs_extras.LogLevel.ERROR ? `${this.colors.error}${safeMessage}${this.colors.reset}` : safeMessage;
 		parts.push(message);
 		if (entry.payload && Object.keys(entry.payload).length > 0) {
 			const payload = this.formatPayload(entry.payload);
@@ -586,6 +231,15 @@ function registerLevelSignal(logger$1, options = {}) {
 		process.removeListener(signal, handler);
 	};
 }
+/** Maximum accepted request body size for the level control handler. */
+const MAX_BODY_BYTES = 16 * 1024;
+function isJsonContentType(req) {
+	var _req$headers;
+	const raw = (_req$headers = req.headers) === null || _req$headers === void 0 ? void 0 : _req$headers["content-type"];
+	const value = Array.isArray(raw) ? raw[0] : raw;
+	if (typeof value !== "string") return false;
+	return value.split(";")[0].trim().toLowerCase() === "application/json";
+}
 const VALID_LEVELS = new Set([
 	"error",
 	"warn",
@@ -604,7 +258,16 @@ const VALID_LEVELS = new Set([
 *
 * Custom levels are accepted too: any level the logger already knows passes
 * through. Unknown levels are rejected with 400 so a typo can't silently mute
-* logging. Mount behind your own auth — this intentionally has none.
+* logging.
+*
+* **SECURITY: this handler has NO authentication or authorization.** Anyone who
+* can reach it can silence logging or turn on verbose output. Always mount it
+* behind your own auth (and on an internal-only route/port), never on a public
+* listener.
+*
+* Mutating requests must send `Content-Type: application/json` (otherwise 415,
+* which also keeps cross-site form posts out) and a body of at most 16 KB
+* (otherwise 413).
 */
 function createLevelControlHandler(logger$1, options = {}) {
 	const allowed = options.allowedLevels && options.allowedLevels.length > 0 ? new Set(options.allowedLevels.map((l) => l.toLowerCase())) : VALID_LEVELS;
@@ -651,8 +314,7 @@ function createLevelControlHandler(logger$1, options = {}) {
 				return;
 			}
 			if (logger$1.setNamespaceLevels) {
-				const coerced = {};
-				for (const [pat, lvl] of Object.entries(nl)) coerced[pat] = String(lvl).toLowerCase();
+				const coerced = Object.fromEntries(Object.entries(nl).map(([pat, lvl]) => [pat, String(lvl).toLowerCase()]));
 				logger$1.setNamespaceLevels(coerced);
 			} else require_internal_log.internalWarn("level control: logger does not support setNamespaceLevels — ignored");
 		}
@@ -665,17 +327,48 @@ function createLevelControlHandler(logger$1, options = {}) {
 			return;
 		}
 		if (method === "POST" || method === "PUT" || method === "PATCH") {
+			var _req$headers2;
+			if (!isJsonContentType(req)) {
+				send(res, 415, { error: "Content-Type must be application/json" });
+				return;
+			}
+			const declared = Number((_req$headers2 = req.headers) === null || _req$headers2 === void 0 ? void 0 : _req$headers2["content-length"]);
+			if (Number.isFinite(declared) && declared > MAX_BODY_BYTES) {
+				send(res, 413, { error: "request body too large" });
+				return;
+			}
 			const maybeBody = req.body;
-			if (maybeBody !== void 0 && typeof req.on !== "function") {
-				applyBody(res, typeof maybeBody === "string" ? maybeBody : JSON.stringify(maybeBody));
+			if (maybeBody !== void 0) {
+				let text;
+				if (typeof maybeBody === "string") text = maybeBody;
+				else if (Buffer.isBuffer(maybeBody)) text = maybeBody.toString("utf8");
+				else text = JSON.stringify(maybeBody);
+				if (Buffer.byteLength(text) > MAX_BODY_BYTES) {
+					send(res, 413, { error: "request body too large" });
+					return;
+				}
+				applyBody(res, text);
 				return;
 			}
 			if (typeof req.on === "function") {
 				let raw = "";
+				let size = 0;
+				let rejected = false;
 				req.on("data", (chunk) => {
-					raw += String(chunk ?? "");
+					if (rejected) return;
+					const piece = Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk ?? "");
+					size += Buffer.byteLength(piece);
+					if (size > MAX_BODY_BYTES) {
+						rejected = true;
+						raw = "";
+						send(res, 413, { error: "request body too large" });
+						return;
+					}
+					raw += piece;
+				});
+				req.on("end", () => {
+					if (!rejected) applyBody(res, raw);
 				});
-				req.on("end", () => applyBody(res, raw));
 				return;
 			}
 			applyBody(res, "");
@@ -783,7 +476,7 @@ function emit(logger$1, state, options, extra) {
 	if (extra) Object.assign(payload, extra);
 	payload[durationField] = Date.now() - state.startMs;
 	if (includeTrace) {
-		const traceId = require_logitron_logger_module.getCurrentTraceId();
+		const traceId = require_trace_utils.getCurrentTraceId();
 		if (traceId !== void 0 && payload["traceId"] === void 0) payload["traceId"] = traceId;
 	}
 	const p = logger$1.logLevel(level, message, payload);
@@ -1040,6 +733,10 @@ const DEFAULT_BUCKETS = [
 	5e3,
 	1e4
 ];
+const MAX_LABEL_VALUE_LENGTH = 256;
+const DEFAULT_MAX_LABEL_SETS = 1e3;
+/** Label value used for the series that absorbs label sets beyond the cardinality cap. */
+const OVERFLOW_LABEL_VALUE = "__overflow__";
 function buildLabelKey(config, entry) {
 	const labelNames = config.labels ?? [];
 	if (labelNames.length === 0) return "{}";
@@ -1047,10 +744,16 @@ function buildLabelKey(config, entry) {
 	const payload = entry.payload ?? {};
 	for (const name of labelNames) {
 		const raw = name === "level" ? entry.level : payload[name];
-		pairs[sanitizePromName(name)] = raw !== void 0 && raw !== null ? String(raw) : "";
+		pairs[sanitizePromName(name)] = raw !== void 0 && raw !== null ? String(raw).slice(0, MAX_LABEL_VALUE_LENGTH) : "";
 	}
 	return JSON.stringify(pairs);
 }
+/** Label key of the shared overflow series for a metric (all label values `__overflow__`). */
+function buildOverflowKey(config) {
+	const names = config.labels ?? [];
+	if (names.length === 0) return "{}";
+	return JSON.stringify(Object.fromEntries(names.map((n) => [sanitizePromName(n), OVERFLOW_LABEL_VALUE])));
+}
 function renderLabels(labelKey) {
 	if (labelKey === "{}") return "";
 	const obj = JSON.parse(labelKey);
@@ -1087,10 +790,13 @@ function sanitizePromName(name) {
 * ```
 */
 var MetricsPlugin = class {
-	constructor(map) {
+	constructor(map, options = {}) {
 		this.name = "logixia-metrics";
 		this.metricState = /* @__PURE__ */ new Map();
+		this.overflowKeys = /* @__PURE__ */ new Map();
 		this.map = map;
+		const max = options.maxLabelSets;
+		this.maxLabelSets = typeof max === "number" && Number.isFinite(max) && max >= 1 ? Math.floor(max) : DEFAULT_MAX_LABEL_SETS;
 		this.initAllState();
 	}
 	onInit() {}
@@ -1099,16 +805,19 @@ var MetricsPlugin = class {
 		for (const [rawName, config] of Object.entries(this.map)) {
 			const state = this.metricState.get(rawName);
 			if (!state) continue;
-			const labelKey = buildLabelKey(config, entry);
+			const rawLabelKey = buildLabelKey(config, entry);
+			const overflowKey = this.overflowKeys.get(rawName) ?? "{}";
 			if (config.type === "counter" && state.type === "counter") {
 				if (config.levelFilter && entry.level !== config.levelFilter) continue;
 				if (config.field !== void 0 && payload[config.field] !== config.value) continue;
+				const labelKey = this.capLabelKey(state.values, rawLabelKey, overflowKey);
 				state.values.set(labelKey, (state.values.get(labelKey) ?? 0) + 1);
 			} else if (config.type === "histogram" && state.type === "histogram") {
 				const raw = payload[config.field];
 				if (raw === void 0 || raw === null) continue;
 				const val = Number(raw);
 				if (Number.isNaN(val)) continue;
+				const labelKey = this.capLabelKey(state.counts, rawLabelKey, overflowKey);
 				if (!state.counts.has(labelKey)) {
 					state.counts.set(labelKey, Array.from({ length: state.buckets.length + 1 }).fill(0));
 					state.sums.set(labelKey, 0);
@@ -1124,7 +833,7 @@ var MetricsPlugin = class {
 				if (raw === void 0 || raw === null) continue;
 				const val = Number(raw);
 				if (Number.isNaN(val)) continue;
-				state.values.set(labelKey, val);
+				state.values.set(this.capLabelKey(state.values, rawLabelKey, overflowKey), val);
 			}
 		}
 		return entry;
@@ -1225,10 +934,19 @@ var MetricsPlugin = class {
 			res.end(body);
 		};
 	}
+	/**
+	* Return `labelKey` when it is already tracked or there is room for it;
+	* otherwise the shared overflow series key.
+	*/
+	capLabelKey(series, labelKey, overflowKey) {
+		if (series.has(labelKey) || series.size < this.maxLabelSets) return labelKey;
+		return overflowKey;
+	}
 	initAllState() {
 		for (const [rawName, config] of Object.entries(this.map)) this.initSingleState(rawName, config);
 	}
 	initSingleState(rawName, config) {
+		this.overflowKeys.set(rawName, buildOverflowKey(config));
 		if (config.type === "counter") this.metricState.set(rawName, {
 			type: "counter",
 			values: /* @__PURE__ */ new Map()
@@ -1274,9 +992,11 @@ var MetricsPlugin = class {
 * logger.use(metrics);
 * app.get('/metrics', metrics.expressHandler());
 * ```
+*
+* Pass `{ maxLabelSets }` to change the per-metric label cardinality cap (default 1000).
 */
-function createMetricsPlugin(map) {
-	return new MetricsPlugin(map);
+function createMetricsPlugin(map, options) {
+	return new MetricsPlugin(map, options);
 }
 
 //#endregion
@@ -1295,22 +1015,22 @@ const DEFAULT_CONFIG = {
 	},
 	silent: false,
 	levelOptions: {
-		level: require_logitron_logger_module.LogLevel.INFO,
+		level: require_nestjs_extras.LogLevel.INFO,
 		levels: {
-			[require_logitron_logger_module.LogLevel.ERROR]: 0,
-			[require_logitron_logger_module.LogLevel.WARN]: 1,
-			[require_logitron_logger_module.LogLevel.INFO]: 2,
-			[require_logitron_logger_module.LogLevel.DEBUG]: 3,
-			[require_logitron_logger_module.LogLevel.TRACE]: 4,
-			[require_logitron_logger_module.LogLevel.VERBOSE]: 5
+			[require_nestjs_extras.LogLevel.ERROR]: 0,
+			[require_nestjs_extras.LogLevel.WARN]: 1,
+			[require_nestjs_extras.LogLevel.INFO]: 2,
+			[require_nestjs_extras.LogLevel.DEBUG]: 3,
+			[require_nestjs_extras.LogLevel.TRACE]: 4,
+			[require_nestjs_extras.LogLevel.VERBOSE]: 5
 		},
 		colors: {
-			[require_logitron_logger_module.LogLevel.ERROR]: "red",
-			[require_logitron_logger_module.LogLevel.WARN]: "yellow",
-			[require_logitron_logger_module.LogLevel.INFO]: "blue",
-			[require_logitron_logger_module.LogLevel.DEBUG]: "green",
-			[require_logitron_logger_module.LogLevel.TRACE]: "gray",
-			[require_logitron_logger_module.LogLevel.VERBOSE]: "cyan"
+			[require_nestjs_extras.LogLevel.ERROR]: "red",
+			[require_nestjs_extras.LogLevel.WARN]: "yellow",
+			[require_nestjs_extras.LogLevel.INFO]: "blue",
+			[require_nestjs_extras.LogLevel.DEBUG]: "green",
+			[require_nestjs_extras.LogLevel.TRACE]: "gray",
+			[require_nestjs_extras.LogLevel.VERBOSE]: "cyan"
 		}
 	},
 	fields: {
@@ -1329,14 +1049,14 @@ const DEFAULT_CONFIG = {
 * @param config - Logger configuration
 * @returns Typed logger instance
 */
-const createLogger = require_logitron_logger_module.createLogger;
+const createLogger = require_nestjs_extras.createLogger;
 /**
 * Create a new Logixia logger service for NestJS
 * @param config - Logger configuration
 * @returns LogixiaLoggerService instance
 */
 function createLoggerService(config) {
-	return new require_logitron_logger_module.LogixiaLoggerService({
+	return new require_nestjs_extras.LogixiaLoggerService({
 		...DEFAULT_CONFIG,
 		...config
 	});
@@ -1344,7 +1064,7 @@ function createLoggerService(config) {
 /**
 * Default logger instance
 */
-const logger = new require_logitron_logger_module.LogixiaLogger(DEFAULT_CONFIG);
+const logger = new require_nestjs_extras.LogixiaLogger(DEFAULT_CONFIG);
 /**
 * Export default configuration for reference
 */
@@ -1354,104 +1074,108 @@ exports.BasicLogIndexer = require_search.BasicLogIndexer;
 exports.BasicSearchEngine = require_search.BasicSearchEngine;
 exports.CorrelationEngine = require_search.CorrelationEngine;
 exports.DEFAULT_CONFIG = DEFAULT_CONFIG;
-exports.DEFAULT_LOG_COLORS = require_logitron_logger_module.DEFAULT_LOG_COLORS;
-exports.DEFAULT_LOG_LEVELS = require_logitron_logger_module.DEFAULT_LOG_LEVELS;
-exports.DEFAULT_TRACE_HEADERS = require_logitron_logger_module.DEFAULT_TRACE_HEADERS;
-exports.ErrorResponseBuilder = ErrorResponseBuilder;
-exports.InjectLogger = InjectLogger;
+exports.DEFAULT_LOG_COLORS = require_nestjs_extras.DEFAULT_LOG_COLORS;
+exports.DEFAULT_LOG_LEVELS = require_nestjs_extras.DEFAULT_LOG_LEVELS;
+exports.DEFAULT_TRACE_HEADERS = require_trace_utils.DEFAULT_TRACE_HEADERS;
+exports.ErrorResponseBuilder = require_nestjs_extras.ErrorResponseBuilder;
+exports.InjectLogger = require_nestjs_extras.InjectLogger;
 exports.JsonFormatter = JsonFormatter;
 Object.defineProperty(exports, 'KafkaTraceInterceptor', {
   enumerable: true,
   get: function () {
-    return require_logitron_logger_module.KafkaTraceInterceptor;
+    return require_nestjs_extras.KafkaTraceInterceptor;
   }
 });
-exports.LOGIXIA_LOGGER_CONFIG = require_logitron_logger_module.LOGIXIA_LOGGER_CONFIG;
-exports.LOGIXIA_LOGGER_PREFIX = require_logitron_logger_module.LOGIXIA_LOGGER_PREFIX;
-exports.LOGIXIA_TRACE_CONFIG = require_logitron_logger_module.LOGIXIA_TRACE_CONFIG;
-exports.LogLevel = require_logitron_logger_module.LogLevel;
-exports.LogMethod = LogMethod;
+exports.LOGIXIA_EXCEPTION_FILTER_OPTIONS = require_nestjs_extras.LOGIXIA_EXCEPTION_FILTER_OPTIONS;
+exports.LOGIXIA_LOGGER_CONFIG = require_nestjs_extras.LOGIXIA_LOGGER_CONFIG;
+exports.LOGIXIA_LOGGER_PREFIX = require_nestjs_extras.LOGIXIA_LOGGER_PREFIX;
+exports.LOGIXIA_TRACE_CONFIG = require_nestjs_extras.LOGIXIA_TRACE_CONFIG;
+exports.LogLevel = require_nestjs_extras.LogLevel;
+exports.LogMethod = require_nestjs_extras.LogMethod;
 exports.LogixiaContext = require_async_context.LogixiaContext;
-exports.LogixiaException = LogixiaException;
+exports.LogixiaException = require_nestjs_extras.LogixiaException;
 Object.defineProperty(exports, 'LogixiaExceptionFilter', {
   enumerable: true,
   get: function () {
-    return LogixiaExceptionFilter;
+    return require_nestjs_extras.LogixiaExceptionFilter;
   }
 });
-exports.LogixiaLogger = require_logitron_logger_module.LogixiaLogger;
+exports.LogixiaLogger = require_nestjs_extras.LogixiaLogger;
 Object.defineProperty(exports, 'LogixiaLoggerModule', {
   enumerable: true,
   get: function () {
-    return require_logitron_logger_module.LogixiaLoggerModule;
+    return require_nestjs_extras.LogixiaLoggerModule;
   }
 });
 Object.defineProperty(exports, 'LogixiaLoggerService', {
   enumerable: true,
   get: function () {
-    return require_logitron_logger_module.LogixiaLoggerService;
+    return require_nestjs_extras.LogixiaLoggerService;
   }
 });
+exports.MAX_INCOMING_ID_LENGTH = require_trace_utils.MAX_INCOMING_ID_LENGTH;
 exports.MetricsPlugin = MetricsPlugin;
 exports.NLPSearchEngine = require_search.NLPSearchEngine;
+exports.OVERFLOW_LABEL_VALUE = OVERFLOW_LABEL_VALUE;
 exports.OtlpLogTransport = OtlpLogTransport;
 exports.PatternRecognitionEngine = require_search.PatternRecognitionEngine;
-exports.PluginRegistry = require_logitron_logger_module.PluginRegistry;
+exports.PluginRegistry = require_nestjs_extras.PluginRegistry;
 exports.SearchManager = require_search.SearchManager;
-exports.TRACE_CONTEXT_KEY = require_logitron_logger_module.TRACE_CONTEXT_KEY;
+exports.TRACE_CONTEXT_KEY = require_trace_utils.TRACE_CONTEXT_KEY;
 exports.TextFormatter = TextFormatter;
-exports.TraceContext = require_logitron_logger_module.TraceContext;
+exports.TraceContext = require_trace_utils.TraceContext;
 Object.defineProperty(exports, 'WebSocketTraceInterceptor', {
   enumerable: true,
   get: function () {
-    return require_logitron_logger_module.WebSocketTraceInterceptor;
+    return require_nestjs_extras.WebSocketTraceInterceptor;
   }
 });
-exports._setActiveContextKey = require_logitron_logger_module._setActiveContextKey;
-exports._shutdownRegistrySize = require_logitron_logger_module._shutdownRegistrySize;
+exports._setActiveContextKey = require_trace_utils._setActiveContextKey;
+exports._shutdownRegistrySize = require_nestjs_extras._shutdownRegistrySize;
 exports.addEventFields = addEventFields;
-exports.applyRedaction = require_logitron_logger_module.applyRedaction;
+exports.applyRedaction = require_nestjs_extras.applyRedaction;
 exports.createExpressContextMiddleware = require_async_context.createExpressContextMiddleware;
 exports.createFastifyContextHook = require_async_context.createFastifyContextHook;
 exports.createLevelControlHandler = createLevelControlHandler;
 exports.createLogger = createLogger;
 exports.createLoggerService = createLoggerService;
 exports.createMetricsPlugin = createMetricsPlugin;
-exports.createTraceMiddleware = require_logitron_logger_module.createTraceMiddleware;
+exports.createTraceMiddleware = require_trace_utils.createTraceMiddleware;
 exports.createTypedLogger = createTypedLogger;
 exports.decycleValue = require_safe_stringify.decycleValue;
 exports.defineLogSchema = defineLogSchema;
-exports.deregisterFromShutdown = require_logitron_logger_module.deregisterFromShutdown;
-exports.disableOtelBridge = require_logitron_logger_module.disableOtelBridge;
-exports.extractTraceId = require_logitron_logger_module.extractTraceId;
-exports.flushOnExit = require_logitron_logger_module.flushOnExit;
-exports.generateRequestId = generateRequestId;
-exports.generateTraceId = generateTraceId;
-exports.getActiveOtelContext = require_logitron_logger_module.getActiveOtelContext;
-exports.getCurrentTraceId = require_logitron_logger_module.getCurrentTraceId;
+exports.deregisterFromShutdown = require_nestjs_extras.deregisterFromShutdown;
+exports.disableOtelBridge = require_nestjs_extras.disableOtelBridge;
+exports.extractTraceId = require_trace_utils.extractTraceId;
+exports.flushOnExit = require_nestjs_extras.flushOnExit;
+exports.generateRequestId = require_nestjs_extras.generateRequestId;
+exports.generateTraceId = require_nestjs_extras.generateTraceId;
+exports.getActiveOtelContext = require_nestjs_extras.getActiveOtelContext;
+exports.getCurrentTraceId = require_trace_utils.getCurrentTraceId;
 exports.getEventFields = getEventFields;
-exports.getOtelMetaFields = require_logitron_logger_module.getOtelMetaFields;
-exports.getTraceContextKey = require_logitron_logger_module.getTraceContextKey;
-exports.globalPluginRegistry = require_logitron_logger_module.globalPluginRegistry;
-exports.initOtelBridge = require_logitron_logger_module.initOtelBridge;
-exports.isError = require_logitron_logger_module.isError;
-exports.isLogixiaException = isLogixiaException;
+exports.getOtelMetaFields = require_nestjs_extras.getOtelMetaFields;
+exports.getTraceContextKey = require_trace_utils.getTraceContextKey;
+exports.globalPluginRegistry = require_nestjs_extras.globalPluginRegistry;
+exports.initOtelBridge = require_nestjs_extras.initOtelBridge;
+exports.isError = require_nestjs_extras.isError;
+exports.isLogixiaException = require_nestjs_extras.isLogixiaException;
 exports.logger = logger;
-exports.normalizeError = require_logitron_logger_module.normalizeError;
-exports.redactObject = require_logitron_logger_module.redactObject;
-exports.registerForShutdown = require_logitron_logger_module.registerForShutdown;
+exports.normalizeError = require_nestjs_extras.normalizeError;
+exports.redactObject = require_nestjs_extras.redactObject;
+exports.registerForShutdown = require_nestjs_extras.registerForShutdown;
 exports.registerLevelSignal = registerLevelSignal;
-exports.resetShutdownHandlers = require_logitron_logger_module.resetShutdownHandlers;
+exports.resetShutdownHandlers = require_nestjs_extras.resetShutdownHandlers;
 exports.retrocycle = require_safe_stringify.retrocycle;
-exports.runWithTraceId = require_logitron_logger_module.runWithTraceId;
+exports.runWithTraceId = require_trace_utils.runWithTraceId;
 exports.safeStringify = require_safe_stringify.safeStringify;
-exports.serializeError = require_logitron_logger_module.serializeError;
+exports.sanitizeIncomingId = require_trace_utils.sanitizeIncomingId;
+exports.serializeError = require_nestjs_extras.serializeError;
 exports.setEventField = setEventField;
-exports.setTraceId = require_logitron_logger_module.setTraceId;
+exports.setTraceId = require_trace_utils.setTraceId;
 exports.stringifyForLog = require_safe_stringify.stringifyForLog;
 exports.toOtelSeverity = toOtelSeverity;
-exports.traceStorage = require_logitron_logger_module.traceStorage;
-exports.usePlugin = require_logitron_logger_module.usePlugin;
+exports.traceStorage = require_trace_utils.traceStorage;
+exports.usePlugin = require_nestjs_extras.usePlugin;
 exports.wideEventMiddleware = wideEventMiddleware;
 exports.withWideEvent = withWideEvent;
 //# sourceMappingURL=index.js.map