logixia 1.13.0 → 1.13.3

package/dist/index.mjs

@@ -1,368 +1,15 @@
-import { n as internalLog, r as internalWarn, t as internalError } from "./internal-log-Cm8SOWSV.mjs";
+import { n as internalLog, r as internalWarn } from "./internal-log-Cm8SOWSV.mjs";
 import { i as stringifyForLog, n as retrocycle, r as safeStringify, t as decycleValue } from "./safe-stringify-DJ66tW5I.mjs";
 import { i as HttpError, n as DEFAULT_MAX_BUFFER_SIZE, r as DEFAULT_REQUEST_TIMEOUT_MS, t as BatchBuffer } from "./batch-buffer-PGvSgbmd.mjs";
-import { n as createExpressContextMiddleware, r as createFastifyContextHook, t as LogixiaContext } from "./async-context-CwBNMm2E.mjs";
-import { A as resetShutdownHandlers, B as DEFAULT_LOG_COLORS, C as runWithTraceId, D as deregisterFromShutdown, E as _shutdownRegistrySize, F as getOtelMetaFields, G as usePlugin, H as LogLevel, I as initOtelBridge, L as isError, M as redactObject, N as disableOtelBridge, O as flushOnExit, P as getActiveOtelContext, R as normalizeError, S as getTraceContextKey, T as traceStorage, U as PluginRegistry, V as DEFAULT_LOG_LEVELS, W as globalPluginRegistry, _ as TraceContext, a as WebSocketTraceInterceptor, b as extractTraceId, c as __decorateParam, d as __decorate, f as __decorateMetadata, g as TRACE_CONTEXT_KEY, h as DEFAULT_TRACE_HEADERS, i as LogixiaLoggerModule, j as applyRedaction, k as registerForShutdown, l as KafkaTraceInterceptor, m as createLogger$1, n as LOGIXIA_LOGGER_PREFIX, p as LogixiaLogger, r as LOGIXIA_TRACE_CONFIG, s as resolveResponseHeader, t as LOGIXIA_LOGGER_CONFIG, u as LogixiaLoggerService, v as _setActiveContextKey, w as setTraceId, x as getCurrentTraceId, y as createTraceMiddleware, z as serializeError } from "./logitron-logger.module-Bs3XYZgF.mjs";
-import { t as safeToString } from "./coerce.utils-Dxv4_ikC.mjs";
-import "./transport.manager-D6KL3t9V.mjs";
-import { a as BasicSearchEngine, i as CorrelationEngine, n as PatternRecognitionEngine, o as BasicLogIndexer, r as NLPSearchEngine, t as SearchManager } from "./search-CFQRISUv.mjs";
+import "./entry-fields-BJkuPnIg.mjs";
+import { a as _setActiveContextKey, c as getCurrentTraceId, d as sanitizeIncomingId, f as setTraceId, i as TraceContext, l as getTraceContextKey, n as MAX_INCOMING_ID_LENGTH, o as createTraceMiddleware, p as traceStorage, r as TRACE_CONTEXT_KEY, s as extractTraceId, t as DEFAULT_TRACE_HEADERS, u as runWithTraceId } from "./trace.utils-CvXgaiQT.mjs";
+import { n as createExpressContextMiddleware, r as createFastifyContextHook, t as LogixiaContext } from "./async-context-BzJrbfQs.mjs";
+import { A as initOtelBridge, C as registerForShutdown, D as disableOtelBridge, E as redactObject, F as DEFAULT_LOG_LEVELS, I as LogLevel, L as PluginRegistry, M as normalizeError, N as serializeError, O as getActiveOtelContext, P as DEFAULT_LOG_COLORS, R as globalPluginRegistry, S as flushOnExit, T as applyRedaction, _ as LogixiaLoggerService, a as ErrorResponseBuilder, b as _shutdownRegistrySize, c as LogixiaException, d as LOGIXIA_LOGGER_PREFIX, f as LOGIXIA_TRACE_CONFIG, g as KafkaTraceInterceptor, i as LogixiaExceptionFilter, j as isError, k as getOtelMetaFields, l as isLogixiaException, m as WebSocketTraceInterceptor, n as LOGIXIA_EXCEPTION_FILTER_OPTIONS, o as generateRequestId, p as LogixiaLoggerModule, r as LogMethod, s as generateTraceId, t as InjectLogger, u as LOGIXIA_LOGGER_CONFIG, v as LogixiaLogger, w as resetShutdownHandlers, x as deregisterFromShutdown, y as createLogger$1, z as usePlugin } from "./nestjs-extras-ImbuDhs1.mjs";
+import { t as safeToString } from "./coerce.utils-Cu6IUTgX.mjs";
+import { u as stripControlChars } from "./transport.manager-CpdVHEGP.mjs";
+import { a as BasicSearchEngine, i as CorrelationEngine, n as PatternRecognitionEngine, o as BasicLogIndexer, r as NLPSearchEngine, t as SearchManager } from "./search-DjXSn6v5.mjs";
 import { AsyncLocalStorage } from "node:async_hooks";
-import { Catch, Inject, Optional } from "@nestjs/common";
 
-//#region src/exceptions/exception.ts
-var LogixiaException = class extends Error {
-	constructor(options) {
-		super(options.message, { cause: options.cause });
-		this.name = "LogixiaException";
-		this.errorCode = options.code;
-		this.errorType = options.type;
-		this.httpStatus = options.httpStatus;
-		this.param = options.param;
-		this.details = options.details;
-		this.docUrl = options.docUrl;
-		this.metadata = options.metadata;
-		Object.setPrototypeOf(this, new.target.prototype);
-	}
-};
-/**
-* Returns `true` when `value` is a `LogixiaException` instance.
-*
-* Useful in exception filters or middleware that need to distinguish a
-* `LogixiaException` from a plain `Error` or a framework `HttpException`.
-*
-* @example
-* ```ts
-* if (isLogixiaException(err)) {
-*   console.log(err.errorCode, err.httpStatus);
-* }
-* ```
-*/
-function isLogixiaException(value) {
-	return value instanceof LogixiaException;
-}
-
-//#endregion
-//#region src/exceptions/builder.ts
-/**
-* Generates a trace ID via the shared {@link TraceContext} generator.
-*
-* Delegates to `TraceContext.instance.generate()` so any custom generator
-* configured on `TraceIdConfig.generator` is respected — avoids the silent
-* "builder has its own UUID source" divergence this module had previously.
-*
-* @example `'550e8400-e29b-41d4-a716-446655440000'`
-*/
-function generateTraceId() {
-	return TraceContext.instance.generate();
-}
-/** @deprecated Use `generateTraceId` instead. */
-const generateRequestId = generateTraceId;
-/**
-* Maps an HTTP status code to a human-friendly error type string.
-* Used as a fallback when the exception is a generic `HttpException`.
-*/
-function httpStatusToType(status) {
-	if (status === 400) return "api_error";
-	if (status === 401) return "authentication_error";
-	if (status === 402) return "payment_error";
-	if (status === 403) return "authorization_error";
-	if (status === 404) return "not_found_error";
-	if (status === 408) return "timeout_error";
-	if (status === 409) return "conflict_error";
-	if (status === 422) return "validation_error";
-	if (status === 429) return "rate_limit_error";
-	if (status >= 500) return "server_error";
-	if (status >= 400) return "api_error";
-	return "server_error";
-}
-/**
-* Duck-type check for NestJS `HttpException`.
-* Avoids a hard import on `@nestjs/common` so the builder is usable outside NestJS.
-*/
-function isHttpException(value) {
-	return typeof value === "object" && value !== null && typeof value["getStatus"] === "function" && typeof value["getResponse"] === "function";
-}
-/**
-* Builds the optional `debug` block from an error.
-* Returns `undefined` when there is nothing useful to include.
-*/
-function buildDebug(error, service, durationMs) {
-	const stack = error instanceof Error ? error.stack : void 0;
-	const causeRaw = error instanceof Error ? error.cause : void 0;
-	let cause;
-	if (causeRaw instanceof Error) cause = causeRaw.message;
-	else if (causeRaw !== void 0 && causeRaw !== null) cause = String(causeRaw);
-	if (!stack && !cause && !service && durationMs === void 0) return void 0;
-	return {
-		...stack !== void 0 ? { stack } : {},
-		...cause !== void 0 ? { cause } : {},
-		...service !== void 0 ? { service } : {},
-		...durationMs !== void 0 ? { duration_ms: durationMs } : {}
-	};
-}
-var ErrorResponseBuilder = class {
-	/**
-	* Build a `LogixiaErrorResponse` from any thrown value.
-	*
-	* @param params - See `BuildParams`.
-	* @returns The unified error response and the HTTP status code to send.
-	*
-	* @remarks
-	* `traceId` does not need to be supplied by the caller in most cases — the
-	* builder reads `TraceContext.instance.getCurrentTraceId()` internally and
-	* falls back to the explicit `traceId` argument only when AsyncLocalStorage
-	* is empty. If neither source yields a value, `meta.trace_id` is omitted.
-	*
-	* @example In a NestJS exception filter
-	* ```ts
-	* const { response, httpStatus } = ErrorResponseBuilder.build<AppCode, AppType>({
-	*   exception,
-	*   // Omit traceId — it will be picked up from ALS automatically.
-	*   path:    request.url,
-	*   service: process.env.SERVICE_NAME,
-	*   startTime: request.startTime,
-	* });
-	*
-	* if (process.env.NODE_ENV === 'production') delete response.debug;
-	* // Echo the resolved traceId back on whatever header your TraceIdConfig says —
-	* // do NOT hardcode 'X-Trace-Id', use `resolveResponseHeader(config)` instead.
-	* if (response.meta.trace_id) {
-	*   response.setHeader(resolveResponseHeader(config) ?? 'X-Trace-Id', response.meta.trace_id);
-	* }
-	* response.status(httpStatus).json(response);
-	* ```
-	*/
-	static build(params) {
-		const { exception, path, service, startTime, traceId: rawTraceId } = params;
-		const traceId = TraceContext.instance.getCurrentTraceId() ?? rawTraceId;
-		const timestamp = (/* @__PURE__ */ new Date()).toISOString();
-		const durationMs = startTime !== void 0 ? Date.now() - startTime : void 0;
-		if (isLogixiaException(exception)) {
-			const debug$1 = buildDebug(exception, service, durationMs);
-			const errorBlock = {
-				type: exception.errorType,
-				code: exception.errorCode,
-				message: exception.message
-			};
-			if (exception.param !== void 0) errorBlock.param = exception.param;
-			if (exception.details !== void 0 && exception.details.length > 0) errorBlock.details = exception.details;
-			if (exception.docUrl !== void 0) errorBlock.doc_url = exception.docUrl;
-			return {
-				response: {
-					success: false,
-					error: errorBlock,
-					meta: {
-						...traceId !== void 0 ? { trace_id: traceId } : {},
-						timestamp,
-						path,
-						status: exception.httpStatus
-					},
-					...debug$1 !== void 0 ? { debug: debug$1 } : {}
-				},
-				httpStatus: exception.httpStatus
-			};
-		}
-		if (isHttpException(exception)) {
-			const status = exception.getStatus();
-			const exResponse = exception.getResponse();
-			let message;
-			if (typeof exResponse === "string") message = exResponse;
-			else if (typeof exResponse === "object" && exResponse !== null && "message" in exResponse) {
-				const raw = exResponse.message;
-				message = Array.isArray(raw) ? raw.join(", ") : String(raw);
-			} else message = exception.message;
-			const type = httpStatusToType(status);
-			const code = `HTTP_${status}`;
-			const debug$1 = buildDebug(exception, service, durationMs);
-			return {
-				response: {
-					success: false,
-					error: {
-						type,
-						code,
-						message
-					},
-					meta: {
-						...traceId !== void 0 ? { trace_id: traceId } : {},
-						timestamp,
-						path,
-						status
-					},
-					...debug$1 !== void 0 ? { debug: debug$1 } : {}
-				},
-				httpStatus: status
-			};
-		}
-		const debug = buildDebug(exception instanceof Error ? exception : new Error(String(exception)), service, durationMs);
-		return {
-			response: {
-				success: false,
-				error: {
-					type: "server_error",
-					code: "INTERNAL_SERVER_ERROR",
-					message: "An unexpected error occurred."
-				},
-				meta: {
-					...traceId !== void 0 ? { trace_id: traceId } : {},
-					timestamp,
-					path,
-					status: 500
-				},
-				...debug !== void 0 ? { debug } : {}
-			},
-			httpStatus: 500
-		};
-	}
-};
-
-//#endregion
-//#region src/core/nestjs-extras.ts
-var _ref;
-/**
-* Inject the Logixia logger registered in the current NestJS DI container.
-*
-* Equivalent to `@Inject(LOGIXIA_LOGGER_TOKEN)` but without needing to import
-* the internal token constant yourself.
-*
-* @example
-* ```ts
-* constructor(@InjectLogger() private readonly logger: LogixiaLoggerService) {}
-* ```
-*/
-const InjectLogger = () => Inject(`${LOGIXIA_LOGGER_PREFIX}SERVICE`);
-/**
-* Method decorator that auto-logs entry, exit, duration, and errors.
-*
-* Preserves the original method's sync/async contract: a synchronous method
-* stays synchronous (returns its value directly, with logs emitted
-* fire-and-forget), and an async method is awaited so exit/error logs reflect
-* the resolved result. Attaches to the logger found on the class instance via a
-* `logger` property (the conventional NestJS name).
-*
-* @example
-* ```ts
-* @LogMethod({ level: 'info', logArgs: true })
-* async processPayment(orderId: string): Promise<void> { … }
-* ```
-*/
-function LogMethod(options = {}) {
-	const { level = "debug", logArgs = true, logResult = false, logErrors = true } = options;
-	return function(target, propertyKey, descriptor) {
-		var _constructor;
-		const originalMethod = descriptor.value;
-		if (typeof originalMethod !== "function") return descriptor;
-		const methodName = String(propertyKey);
-		const className = ((_constructor = target.constructor) === null || _constructor === void 0 ? void 0 : _constructor.name) ?? "Unknown";
-		const label = options.label ?? `${className}.${methodName}`;
-		let _warnedNoLogger = false;
-		const reportLogFailure = (phase, err) => {
-			internalError(`@LogMethod(${label}) ${phase} log failed: ${String(err)}`);
-		};
-		const emit$1 = (logger$1, phase, message, data) => {
-			const logFnRaw = logger$1[level];
-			const p = (typeof logFnRaw === "function" ? logFnRaw : logger$1.debug).bind(logger$1)(message, data);
-			if (p && typeof p.catch === "function") p.catch((e) => reportLogFailure(phase, e));
-		};
-		const emitError = (logger$1, error, start) => {
-			const err = error instanceof Error ? error : new Error(String(error));
-			const errLog = logger$1.error(err, {
-				method: label,
-				durationMs: Date.now() - start
-			});
-			if (errLog && typeof errLog.catch === "function") errLog.catch((e) => reportLogFailure("error", e));
-		};
-		descriptor.value = function(...args) {
-			const logger$1 = this.logger ?? LogixiaLoggerModule._globalLogger ?? void 0;
-			if (!logger$1 && !_warnedNoLogger) {
-				_warnedNoLogger = true;
-				internalWarn(`@LogMethod on ${label}: no logger available. Either inject LogixiaLoggerService as this.logger or ensure LogixiaLoggerModule is initialised.`);
-			}
-			const start = Date.now();
-			const entry = { method: label };
-			if (logArgs && args.length > 0) entry["args"] = args;
-			if (logger$1) emit$1(logger$1, "entry", `→ ${label}`, entry);
-			const buildExit = (result$1) => {
-				const exit = {
-					method: label,
-					durationMs: Date.now() - start
-				};
-				if (logResult) exit["result"] = result$1;
-				return exit;
-			};
-			let result;
-			try {
-				result = originalMethod.apply(this, args);
-			} catch (error) {
-				if (logger$1 && logErrors) emitError(logger$1, error, start);
-				throw error;
-			}
-			if (result && typeof result.then === "function") return result.then((resolved) => {
-				if (logger$1) emit$1(logger$1, "exit", `← ${label}`, buildExit(resolved));
-				return resolved;
-			}, (error) => {
-				if (logger$1 && logErrors) emitError(logger$1, error, start);
-				throw error;
-			});
-			if (logger$1) emit$1(logger$1, "exit", `← ${label}`, buildExit(result));
-			return result;
-		};
-		return descriptor;
-	};
-}
-let LogixiaExceptionFilter = class LogixiaExceptionFilter$1 {
-	constructor(logger$1, loggerConfig) {
-		this._logger = logger$1 ?? LogixiaLoggerModule._globalLogger ?? void 0;
-		this._traceConfig = typeof (loggerConfig === null || loggerConfig === void 0 ? void 0 : loggerConfig.traceId) === "object" ? loggerConfig.traceId : void 0;
-	}
-	catch(exception, host) {
-		var _request$headers;
-		const ctx = host.switchToHttp();
-		const request = ctx.getRequest();
-		const response = ctx.getResponse();
-		const traceId = TraceContext.instance.getCurrentTraceId() ?? ((_request$headers = request.headers) === null || _request$headers === void 0 ? void 0 : _request$headers["x-trace-id"]) ?? request.id ?? void 0;
-		const { response: errorResponse, httpStatus } = ErrorResponseBuilder.build({
-			exception,
-			traceId,
-			path: request.url ?? "/",
-			startTime: request.startTime
-		});
-		if (this._logger) {
-			const requestMeta = {
-				method: request.method ?? "",
-				url: request.url ?? "",
-				status: httpStatus,
-				...errorResponse.meta.trace_id !== void 0 ? { trace_id: errorResponse.meta.trace_id } : {}
-			};
-			const onLogFailure = (err) => {
-				internalError(`ExceptionFilter failed to write log entry: ${String(err)}`);
-			};
-			let logPromise;
-			if (httpStatus >= 500) {
-				const err = exception instanceof Error ? exception : new Error(String(exception));
-				logPromise = this._logger.error(err, requestMeta);
-			} else if (isLogixiaException(exception)) logPromise = this._logger.warn(`[${errorResponse.error.code}] ${errorResponse.error.message}`, requestMeta);
-			else logPromise = this._logger.warn(`[${httpStatus}] ${errorResponse.error.message}`, requestMeta);
-			if (logPromise && typeof logPromise.catch === "function") logPromise.catch(onLogFailure);
-		}
-		if (process.env["NODE_ENV"] === "production") delete errorResponse.debug;
-		if (errorResponse.meta.trace_id) {
-			const traceHeader = resolveResponseHeader(this._traceConfig);
-			if (traceHeader) response.setHeader(traceHeader, errorResponse.meta.trace_id);
-		}
-		if (httpStatus === 429) response.setHeader("Retry-After", "60");
-		response.status(httpStatus).json(errorResponse);
-	}
-};
-LogixiaExceptionFilter = __decorate([
-	Catch(),
-	__decorateParam(0, Optional()),
-	__decorateParam(0, Inject(`${LOGIXIA_LOGGER_PREFIX}SERVICE`)),
-	__decorateParam(1, Optional()),
-	__decorateParam(1, Inject(LOGIXIA_LOGGER_CONFIG)),
-	__decorateMetadata("design:paramtypes", [Object, typeof (_ref = typeof Partial !== "undefined" && Partial) === "function" ? _ref : Object])
-], LogixiaExceptionFilter);
-
-//#endregion
 //#region src/formatters/json.formatter.ts
 /**
 * Build a JSON.stringify replacer that replaces circular references with the
@@ -430,8 +77,7 @@ var JsonFormatter = class {
 
 //#endregion
 //#region src/formatters/text.formatter.ts
-const CONTROL_CHARS_RE = /[\x00-\x08\x0B-\x1F\x7F-\x9F]/g;
-const stripControls = (value) => safeToString(value).replace(CONTROL_CHARS_RE, "");
+const stripControls = (value) => stripControlChars(safeToString(value));
 var TextFormatter = class TextFormatter {
 	constructor(options = {}) {
 		this.colorize = options.colorize ?? true;
@@ -583,6 +229,15 @@ function registerLevelSignal(logger$1, options = {}) {
 		process.removeListener(signal, handler);
 	};
 }
+/** Maximum accepted request body size for the level control handler. */
+const MAX_BODY_BYTES = 16 * 1024;
+function isJsonContentType(req) {
+	var _req$headers;
+	const raw = (_req$headers = req.headers) === null || _req$headers === void 0 ? void 0 : _req$headers["content-type"];
+	const value = Array.isArray(raw) ? raw[0] : raw;
+	if (typeof value !== "string") return false;
+	return value.split(";")[0].trim().toLowerCase() === "application/json";
+}
 const VALID_LEVELS = new Set([
 	"error",
 	"warn",
@@ -601,7 +256,16 @@ const VALID_LEVELS = new Set([
 *
 * Custom levels are accepted too: any level the logger already knows passes
 * through. Unknown levels are rejected with 400 so a typo can't silently mute
-* logging. Mount behind your own auth — this intentionally has none.
+* logging.
+*
+* **SECURITY: this handler has NO authentication or authorization.** Anyone who
+* can reach it can silence logging or turn on verbose output. Always mount it
+* behind your own auth (and on an internal-only route/port), never on a public
+* listener.
+*
+* Mutating requests must send `Content-Type: application/json` (otherwise 415,
+* which also keeps cross-site form posts out) and a body of at most 16 KB
+* (otherwise 413).
 */
 function createLevelControlHandler(logger$1, options = {}) {
 	const allowed = options.allowedLevels && options.allowedLevels.length > 0 ? new Set(options.allowedLevels.map((l) => l.toLowerCase())) : VALID_LEVELS;
@@ -648,8 +312,7 @@ function createLevelControlHandler(logger$1, options = {}) {
 				return;
 			}
 			if (logger$1.setNamespaceLevels) {
-				const coerced = {};
-				for (const [pat, lvl] of Object.entries(nl)) coerced[pat] = String(lvl).toLowerCase();
+				const coerced = Object.fromEntries(Object.entries(nl).map(([pat, lvl]) => [pat, String(lvl).toLowerCase()]));
 				logger$1.setNamespaceLevels(coerced);
 			} else internalWarn("level control: logger does not support setNamespaceLevels — ignored");
 		}
@@ -662,17 +325,48 @@ function createLevelControlHandler(logger$1, options = {}) {
 			return;
 		}
 		if (method === "POST" || method === "PUT" || method === "PATCH") {
+			var _req$headers2;
+			if (!isJsonContentType(req)) {
+				send(res, 415, { error: "Content-Type must be application/json" });
+				return;
+			}
+			const declared = Number((_req$headers2 = req.headers) === null || _req$headers2 === void 0 ? void 0 : _req$headers2["content-length"]);
+			if (Number.isFinite(declared) && declared > MAX_BODY_BYTES) {
+				send(res, 413, { error: "request body too large" });
+				return;
+			}
 			const maybeBody = req.body;
-			if (maybeBody !== void 0 && typeof req.on !== "function") {
-				applyBody(res, typeof maybeBody === "string" ? maybeBody : JSON.stringify(maybeBody));
+			if (maybeBody !== void 0) {
+				let text;
+				if (typeof maybeBody === "string") text = maybeBody;
+				else if (Buffer.isBuffer(maybeBody)) text = maybeBody.toString("utf8");
+				else text = JSON.stringify(maybeBody);
+				if (Buffer.byteLength(text) > MAX_BODY_BYTES) {
+					send(res, 413, { error: "request body too large" });
+					return;
+				}
+				applyBody(res, text);
 				return;
 			}
 			if (typeof req.on === "function") {
 				let raw = "";
+				let size = 0;
+				let rejected = false;
 				req.on("data", (chunk) => {
-					raw += String(chunk ?? "");
+					if (rejected) return;
+					const piece = Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk ?? "");
+					size += Buffer.byteLength(piece);
+					if (size > MAX_BODY_BYTES) {
+						rejected = true;
+						raw = "";
+						send(res, 413, { error: "request body too large" });
+						return;
+					}
+					raw += piece;
+				});
+				req.on("end", () => {
+					if (!rejected) applyBody(res, raw);
 				});
-				req.on("end", () => applyBody(res, raw));
 				return;
 			}
 			applyBody(res, "");
@@ -1037,6 +731,10 @@ const DEFAULT_BUCKETS = [
 	5e3,
 	1e4
 ];
+const MAX_LABEL_VALUE_LENGTH = 256;
+const DEFAULT_MAX_LABEL_SETS = 1e3;
+/** Label value used for the series that absorbs label sets beyond the cardinality cap. */
+const OVERFLOW_LABEL_VALUE = "__overflow__";
 function buildLabelKey(config, entry) {
 	const labelNames = config.labels ?? [];
 	if (labelNames.length === 0) return "{}";
@@ -1044,10 +742,16 @@ function buildLabelKey(config, entry) {
 	const payload = entry.payload ?? {};
 	for (const name of labelNames) {
 		const raw = name === "level" ? entry.level : payload[name];
-		pairs[sanitizePromName(name)] = raw !== void 0 && raw !== null ? String(raw) : "";
+		pairs[sanitizePromName(name)] = raw !== void 0 && raw !== null ? String(raw).slice(0, MAX_LABEL_VALUE_LENGTH) : "";
 	}
 	return JSON.stringify(pairs);
 }
+/** Label key of the shared overflow series for a metric (all label values `__overflow__`). */
+function buildOverflowKey(config) {
+	const names = config.labels ?? [];
+	if (names.length === 0) return "{}";
+	return JSON.stringify(Object.fromEntries(names.map((n) => [sanitizePromName(n), OVERFLOW_LABEL_VALUE])));
+}
 function renderLabels(labelKey) {
 	if (labelKey === "{}") return "";
 	const obj = JSON.parse(labelKey);
@@ -1084,10 +788,13 @@ function sanitizePromName(name) {
 * ```
 */
 var MetricsPlugin = class {
-	constructor(map) {
+	constructor(map, options = {}) {
 		this.name = "logixia-metrics";
 		this.metricState = /* @__PURE__ */ new Map();
+		this.overflowKeys = /* @__PURE__ */ new Map();
 		this.map = map;
+		const max = options.maxLabelSets;
+		this.maxLabelSets = typeof max === "number" && Number.isFinite(max) && max >= 1 ? Math.floor(max) : DEFAULT_MAX_LABEL_SETS;
 		this.initAllState();
 	}
 	onInit() {}
@@ -1096,16 +803,19 @@ var MetricsPlugin = class {
 		for (const [rawName, config] of Object.entries(this.map)) {
 			const state = this.metricState.get(rawName);
 			if (!state) continue;
-			const labelKey = buildLabelKey(config, entry);
+			const rawLabelKey = buildLabelKey(config, entry);
+			const overflowKey = this.overflowKeys.get(rawName) ?? "{}";
 			if (config.type === "counter" && state.type === "counter") {
 				if (config.levelFilter && entry.level !== config.levelFilter) continue;
 				if (config.field !== void 0 && payload[config.field] !== config.value) continue;
+				const labelKey = this.capLabelKey(state.values, rawLabelKey, overflowKey);
 				state.values.set(labelKey, (state.values.get(labelKey) ?? 0) + 1);
 			} else if (config.type === "histogram" && state.type === "histogram") {
 				const raw = payload[config.field];
 				if (raw === void 0 || raw === null) continue;
 				const val = Number(raw);
 				if (Number.isNaN(val)) continue;
+				const labelKey = this.capLabelKey(state.counts, rawLabelKey, overflowKey);
 				if (!state.counts.has(labelKey)) {
 					state.counts.set(labelKey, Array.from({ length: state.buckets.length + 1 }).fill(0));
 					state.sums.set(labelKey, 0);
@@ -1121,7 +831,7 @@ var MetricsPlugin = class {
 				if (raw === void 0 || raw === null) continue;
 				const val = Number(raw);
 				if (Number.isNaN(val)) continue;
-				state.values.set(labelKey, val);
+				state.values.set(this.capLabelKey(state.values, rawLabelKey, overflowKey), val);
 			}
 		}
 		return entry;
@@ -1222,10 +932,19 @@ var MetricsPlugin = class {
 			res.end(body);
 		};
 	}
+	/**
+	* Return `labelKey` when it is already tracked or there is room for it;
+	* otherwise the shared overflow series key.
+	*/
+	capLabelKey(series, labelKey, overflowKey) {
+		if (series.has(labelKey) || series.size < this.maxLabelSets) return labelKey;
+		return overflowKey;
+	}
 	initAllState() {
 		for (const [rawName, config] of Object.entries(this.map)) this.initSingleState(rawName, config);
 	}
 	initSingleState(rawName, config) {
+		this.overflowKeys.set(rawName, buildOverflowKey(config));
 		if (config.type === "counter") this.metricState.set(rawName, {
 			type: "counter",
 			values: /* @__PURE__ */ new Map()
@@ -1271,9 +990,11 @@ var MetricsPlugin = class {
 * logger.use(metrics);
 * app.get('/metrics', metrics.expressHandler());
 * ```
+*
+* Pass `{ maxLabelSets }` to change the per-metric label cardinality cap (default 1000).
 */
-function createMetricsPlugin(map) {
-	return new MetricsPlugin(map);
+function createMetricsPlugin(map, options) {
+	return new MetricsPlugin(map, options);
 }
 
 //#endregion
@@ -1347,5 +1068,5 @@ const logger = new LogixiaLogger(DEFAULT_CONFIG);
 */
 
 //#endregion
-export { BasicLogIndexer, BasicSearchEngine, CorrelationEngine, DEFAULT_CONFIG, DEFAULT_LOG_COLORS, DEFAULT_LOG_LEVELS, DEFAULT_TRACE_HEADERS, ErrorResponseBuilder, InjectLogger, JsonFormatter, KafkaTraceInterceptor, LOGIXIA_LOGGER_CONFIG, LOGIXIA_LOGGER_PREFIX, LOGIXIA_TRACE_CONFIG, LogLevel, LogMethod, LogixiaContext, LogixiaException, LogixiaExceptionFilter, LogixiaLogger, LogixiaLoggerModule, LogixiaLoggerService, MetricsPlugin, NLPSearchEngine, OtlpLogTransport, PatternRecognitionEngine, PluginRegistry, SearchManager, TRACE_CONTEXT_KEY, TextFormatter, TraceContext, WebSocketTraceInterceptor, _setActiveContextKey, _shutdownRegistrySize, addEventFields, applyRedaction, createExpressContextMiddleware, createFastifyContextHook, createLevelControlHandler, createLogger, createLoggerService, createMetricsPlugin, createTraceMiddleware, createTypedLogger, decycleValue, defineLogSchema, deregisterFromShutdown, disableOtelBridge, extractTraceId, flushOnExit, generateRequestId, generateTraceId, getActiveOtelContext, getCurrentTraceId, getEventFields, getOtelMetaFields, getTraceContextKey, globalPluginRegistry, initOtelBridge, isError, isLogixiaException, logger, normalizeError, redactObject, registerForShutdown, registerLevelSignal, resetShutdownHandlers, retrocycle, runWithTraceId, safeStringify, serializeError, setEventField, setTraceId, stringifyForLog, toOtelSeverity, traceStorage, usePlugin, wideEventMiddleware, withWideEvent };
+export { BasicLogIndexer, BasicSearchEngine, CorrelationEngine, DEFAULT_CONFIG, DEFAULT_LOG_COLORS, DEFAULT_LOG_LEVELS, DEFAULT_TRACE_HEADERS, ErrorResponseBuilder, InjectLogger, JsonFormatter, KafkaTraceInterceptor, LOGIXIA_EXCEPTION_FILTER_OPTIONS, LOGIXIA_LOGGER_CONFIG, LOGIXIA_LOGGER_PREFIX, LOGIXIA_TRACE_CONFIG, LogLevel, LogMethod, LogixiaContext, LogixiaException, LogixiaExceptionFilter, LogixiaLogger, LogixiaLoggerModule, LogixiaLoggerService, MAX_INCOMING_ID_LENGTH, MetricsPlugin, NLPSearchEngine, OVERFLOW_LABEL_VALUE, OtlpLogTransport, PatternRecognitionEngine, PluginRegistry, SearchManager, TRACE_CONTEXT_KEY, TextFormatter, TraceContext, WebSocketTraceInterceptor, _setActiveContextKey, _shutdownRegistrySize, addEventFields, applyRedaction, createExpressContextMiddleware, createFastifyContextHook, createLevelControlHandler, createLogger, createLoggerService, createMetricsPlugin, createTraceMiddleware, createTypedLogger, decycleValue, defineLogSchema, deregisterFromShutdown, disableOtelBridge, extractTraceId, flushOnExit, generateRequestId, generateTraceId, getActiveOtelContext, getCurrentTraceId, getEventFields, getOtelMetaFields, getTraceContextKey, globalPluginRegistry, initOtelBridge, isError, isLogixiaException, logger, normalizeError, redactObject, registerForShutdown, registerLevelSignal, resetShutdownHandlers, retrocycle, runWithTraceId, safeStringify, sanitizeIncomingId, serializeError, setEventField, setTraceId, stringifyForLog, toOtelSeverity, traceStorage, usePlugin, wideEventMiddleware, withWideEvent };
 //# sourceMappingURL=index.mjs.map