omnigateway 0.9.1 → 0.9.2

package/README.md

@@ -280,6 +280,11 @@ Configuration is environment variables, read from the installation's `.env`:
 | `OMNI_LOG_LEVEL` | No | `info` | Stdout threshold: `debug`, `info`, `warn`, or `error` |
 | `OMNI_LOG_FILE` | No | the systemd journal, when there is one | Where stdout was already redirected, so the Console screen can read it back. Names a file; does not create one |
 | `OMNI_BODY_LOGGING_ALLOWED` | No | unset | Permits request/response body capture on this installation. Read at boot. Capture also needs the runtime setting; see [Recording bodies](docs/operations.md#recording-bodies) |
+| `OMNI_METRICS_TOKEN` | No | unset | Registers authenticated `GET /metrics`; unset means no route |
+| `OMNI_METRICS_MAX_SERIES` | No | `5000` | Series cap before new `api_key_id` values fold to `other` |
+| `OMNI_OTLP_ENDPOINT` | No | unset | Enables OTLP/HTTP span export to `<endpoint>/v1/traces` |
+| `OMNI_OTLP_HEADERS` | No | unset | Comma-separated `k=v` headers sent to the collector |
+| `OMNI_TRACE_SAMPLE` | No | `1.0` | Head sampling ratio from `0` to `1`; inbound sampled trace context is honoured |
 | `OMNI_ROOT` | No | the installation in the current directory, else `~/.config/omnigateway` | Which installation the CLI acts on, when `--root` is not passed |
 | `OMNI_PLUGIN_REGISTRY` | No | the public npm registry | Registry `omni plugin install <name>` resolves through; must be `https://` |
 | `OMNI_CLUSTER_MODE` | No | unset | `true` selects [cluster mode](docs/deploying.md#running-more-than-one-gateway) and requires the two URLs below; unset is one process on SQLite, and then the URLs must be unset too |
@@ -371,6 +376,9 @@ Worth knowing before you deploy it:
   caught earlier.
 - Not in scope: semantic caching, billing.
 
+What is missing on purpose, what is missing for now, and what is designed but not
+built: [docs/roadmap.md](docs/roadmap.md).
+
 ## Security
 
 - Treat `OMNI_ENCRYPTION_KEY`, gateway keys, and the SQLite file as secrets.
@@ -389,10 +397,10 @@ Worth knowing before you deploy it:
   reads stdin — so they stay out of your shell history and the process table.
 - Behind a reverse proxy, set `OMNI_BASE_URL` to the public HTTPS origin so
   OAuth callbacks match what the providers have registered.
-- The gateway talks to your providers and to nobody else. No telemetry, no CDN
-  fonts, no third-party origins. A plugin may declare outbound origins of its
-  own, and `omni plugin verify <id>` shows exactly which ones it asked for — as
-  does its manifest, which is a plain file you can read before installing.
+- The gateway talks to your providers and to nobody else — except your collector, if you name
+  one with `OMNI_OTLP_ENDPOINT`. No CDN fonts or undeclared third-party origins. A plugin may
+  declare outbound origins of its own, and `omni plugin verify <id>` shows exactly which ones it
+  asked for — as does its manifest, which is a plain file you can read before installing.
 - **Plugins run inside the gateway process, with its privileges** — the
   capability context is a guardrail, not a sandbox. Read the
   [security note](#plugins) before installing one you did not write.

package/bin/omni.js

@@ -23967,6 +23967,19 @@ function loadConfig(env) {
   const bodyLoggingAllowed = TRUTHY.has((env.OMNI_BODY_LOGGING_ALLOWED ?? "").trim().toLowerCase());
   const rawLogLevel = env.OMNI_LOG_LEVEL?.trim();
   const logLevel = parseLogLevel(rawLogLevel);
+  const metricsToken = env.OMNI_METRICS_TOKEN?.trim() || null;
+  const rawMaxSeries = env.OMNI_METRICS_MAX_SERIES ?? "5000";
+  const metricsMaxSeries = Number(rawMaxSeries);
+  if (!DECIMAL_INTEGER.test(rawMaxSeries) || metricsMaxSeries < 1) {
+    throw new Error(`OMNI_METRICS_MAX_SERIES must be a positive integer, got "${rawMaxSeries}"`);
+  }
+  const otlpEndpoint = env.OMNI_OTLP_ENDPOINT?.trim().replace(/\/+$/, "") || null;
+  const otlpHeaders = env.OMNI_OTLP_HEADERS?.trim() || null;
+  const rawTraceSample = env.OMNI_TRACE_SAMPLE ?? "1.0";
+  const traceSample = Number(rawTraceSample);
+  if (!Number.isFinite(traceSample) || traceSample < 0 || traceSample > 1) {
+    throw new Error(`OMNI_TRACE_SAMPLE must be between 0 and 1, got "${rawTraceSample}"`);
+  }
   return {
     logLevel: logLevel ?? "info",
     logLevelFallbackFrom: logLevel === null && rawLogLevel ? rawLogLevel : null,
@@ -23980,7 +23993,12 @@ function loadConfig(env) {
     logFile: logFile === undefined || logFile.length === 0 ? null : logFile,
     clusterMode,
     databaseUrl: clusterMode ? databaseUrl ?? null : null,
-    redisUrl: clusterMode ? redisUrl ?? null : null
+    redisUrl: clusterMode ? redisUrl ?? null : null,
+    metricsToken,
+    metricsMaxSeries,
+    otlpEndpoint,
+    otlpHeaders,
+    traceSample
   };
 }
 // packages/control/src/oauth/pending.ts
@@ -24179,7 +24197,8 @@ function codecAdapter(id, capabilities2, codec2, origins) {
       const res = await req.http({
         provider: id,
         ...sendable,
-        signal: req.signal
+        signal: req.signal,
+        ...req.requestId === undefined ? {} : { requestId: req.requestId }
       });
       if (res.status < 200 || res.status >= 300) {
         const text = await res.text().catch(() => "");
@@ -27548,15 +27567,28 @@ function nodeHttpClient(options = {}) {
     const startedAt = now();
     let traced = false;
     const trace = (status, failed = false) => {
-      if (traced || !logger2.enabled("debug"))
+      if (traced)
         return;
       traced = true;
+      const durationMs = now() - startedAt;
+      try {
+        options.onResponseHead?.({
+          provider: req.provider,
+          host: url2.host,
+          path: url2.pathname,
+          ...status === undefined ? {} : { status },
+          durationMs,
+          ...req.requestId === undefined ? {} : { requestId: req.requestId }
+        });
+      } catch {}
+      if (!logger2.enabled("debug"))
+        return;
       logger2.debug("upstream http", {
         provider: req.provider,
         status,
         host: url2.host,
         path: url2.pathname,
-        durationMs: now() - startedAt,
+        durationMs,
         reason: failed ? "transport error" : undefined
       });
     };
@@ -33702,7 +33734,7 @@ function createServiceDeps(input2) {
 }
 
 // apps/cli/src/version.ts
-var VERSION = "0.9.1";
+var VERSION = "0.9.2";
 
 // apps/cli/src/commands/service.ts
 function gatewayArgv(root) {