shield360 1.0.1 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +392 -37
- package/dist/__tests__/build-info.test.d.ts +1 -0
- package/dist/__tests__/build-info.test.js +196 -0
- package/dist/__tests__/build-info.test.js.map +1 -0
- package/dist/__tests__/code-location.test.d.ts +1 -0
- package/dist/__tests__/code-location.test.js +180 -0
- package/dist/__tests__/code-location.test.js.map +1 -0
- package/dist/__tests__/masking.test.d.ts +1 -0
- package/dist/__tests__/masking.test.js +66 -0
- package/dist/__tests__/masking.test.js.map +1 -0
- package/dist/__tests__/pricing-claude-5.test.js +3 -0
- package/dist/__tests__/pricing-claude-5.test.js.map +1 -1
- package/dist/__tests__/register.e2e.test.d.ts +1 -0
- package/dist/__tests__/register.e2e.test.js +264 -0
- package/dist/__tests__/register.e2e.test.js.map +1 -0
- package/dist/__tests__/register.test.js +60 -0
- package/dist/__tests__/register.test.js.map +1 -1
- package/dist/agents/__tests__/agents.test.d.ts +1 -0
- package/dist/agents/__tests__/agents.test.js +529 -0
- package/dist/agents/__tests__/agents.test.js.map +1 -0
- package/dist/agents/index.d.ts +15 -0
- package/dist/agents/index.js +25 -0
- package/dist/agents/index.js.map +1 -0
- package/dist/agents/passport.d.ts +92 -0
- package/dist/agents/passport.js +301 -0
- package/dist/agents/passport.js.map +1 -0
- package/dist/agents/policy.d.ts +24 -0
- package/dist/agents/policy.js +93 -0
- package/dist/agents/policy.js.map +1 -0
- package/dist/agents/replay.d.ts +20 -0
- package/dist/agents/replay.js +47 -0
- package/dist/agents/replay.js.map +1 -0
- package/dist/agents/report.d.ts +30 -0
- package/dist/agents/report.js +93 -0
- package/dist/agents/report.js.map +1 -0
- package/dist/agents/types.d.ts +148 -0
- package/dist/agents/types.js +37 -0
- package/dist/agents/types.js.map +1 -0
- package/dist/agents/verifier.d.ts +33 -0
- package/dist/agents/verifier.js +276 -0
- package/dist/agents/verifier.js.map +1 -0
- package/dist/ai-security/__tests__/bench.test.d.ts +1 -0
- package/dist/ai-security/__tests__/bench.test.js +50 -0
- package/dist/ai-security/__tests__/bench.test.js.map +1 -0
- package/dist/ai-security/__tests__/checks.test.d.ts +1 -0
- package/dist/ai-security/__tests__/checks.test.js +248 -0
- package/dist/ai-security/__tests__/checks.test.js.map +1 -0
- package/dist/ai-security/__tests__/config.test.d.ts +1 -0
- package/dist/ai-security/__tests__/config.test.js +164 -0
- package/dist/ai-security/__tests__/config.test.js.map +1 -0
- package/dist/ai-security/__tests__/detection.test.d.ts +1 -0
- package/dist/ai-security/__tests__/detection.test.js +114 -0
- package/dist/ai-security/__tests__/detection.test.js.map +1 -0
- package/dist/ai-security/__tests__/fixtures.d.ts +8 -0
- package/dist/ai-security/__tests__/fixtures.js +30 -0
- package/dist/ai-security/__tests__/fixtures.js.map +1 -0
- package/dist/ai-security/__tests__/hooks.test.d.ts +1 -0
- package/dist/ai-security/__tests__/hooks.test.js +174 -0
- package/dist/ai-security/__tests__/hooks.test.js.map +1 -0
- package/dist/ai-security/__tests__/stream.test.d.ts +1 -0
- package/dist/ai-security/__tests__/stream.test.js +85 -0
- package/dist/ai-security/__tests__/stream.test.js.map +1 -0
- package/dist/ai-security/config.d.ts +94 -0
- package/dist/ai-security/config.js +241 -0
- package/dist/ai-security/config.js.map +1 -0
- package/dist/ai-security/context.d.ts +45 -0
- package/dist/ai-security/context.js +108 -0
- package/dist/ai-security/context.js.map +1 -0
- package/dist/ai-security/custom-kinds.d.ts +23 -0
- package/dist/ai-security/custom-kinds.js +97 -0
- package/dist/ai-security/custom-kinds.js.map +1 -0
- package/dist/ai-security/events.d.ts +77 -0
- package/dist/ai-security/events.js +153 -0
- package/dist/ai-security/events.js.map +1 -0
- package/dist/ai-security/hooks.d.ts +48 -0
- package/dist/ai-security/hooks.js +461 -0
- package/dist/ai-security/hooks.js.map +1 -0
- package/dist/ai-security/index.d.ts +209 -0
- package/dist/ai-security/index.js +587 -0
- package/dist/ai-security/index.js.map +1 -0
- package/dist/ai-security/injection-rules.json +1024 -0
- package/dist/ai-security/injection.d.ts +46 -0
- package/dist/ai-security/injection.js +635 -0
- package/dist/ai-security/injection.js.map +1 -0
- package/dist/ai-security/jailbreak.d.ts +38 -0
- package/dist/ai-security/jailbreak.js +73 -0
- package/dist/ai-security/jailbreak.js.map +1 -0
- package/dist/ai-security/limits.d.ts +84 -0
- package/dist/ai-security/limits.js +195 -0
- package/dist/ai-security/limits.js.map +1 -0
- package/dist/ai-security/mcp.d.ts +82 -0
- package/dist/ai-security/mcp.js +150 -0
- package/dist/ai-security/mcp.js.map +1 -0
- package/dist/ai-security/output.d.ts +107 -0
- package/dist/ai-security/output.js +390 -0
- package/dist/ai-security/output.js.map +1 -0
- package/dist/ai-security/policy.d.ts +125 -0
- package/dist/ai-security/policy.js +196 -0
- package/dist/ai-security/policy.js.map +1 -0
- package/dist/ai-security/rag.d.ts +70 -0
- package/dist/ai-security/rag.js +174 -0
- package/dist/ai-security/rag.js.map +1 -0
- package/dist/ai-security/tool-rules.json +203 -0
- package/dist/ai-security/tools.d.ts +46 -0
- package/dist/ai-security/tools.js +62 -0
- package/dist/ai-security/tools.js.map +1 -0
- package/dist/budgets/__tests__/budgets.test.d.ts +1 -0
- package/dist/budgets/__tests__/budgets.test.js +134 -0
- package/dist/budgets/__tests__/budgets.test.js.map +1 -0
- package/dist/budgets/auto.d.ts +25 -0
- package/dist/budgets/auto.js +63 -0
- package/dist/budgets/auto.js.map +1 -0
- package/dist/budgets/index.d.ts +110 -0
- package/dist/budgets/index.js +239 -0
- package/dist/budgets/index.js.map +1 -0
- package/dist/config.js +1 -1
- package/dist/config.js.map +1 -1
- package/dist/customer/__tests__/customer.test.d.ts +1 -0
- package/dist/customer/__tests__/customer.test.js +155 -0
- package/dist/customer/__tests__/customer.test.js.map +1 -0
- package/dist/customer/index.d.ts +48 -0
- package/dist/customer/index.js +132 -0
- package/dist/customer/index.js.map +1 -0
- package/dist/feedback/__tests__/feedback.test.d.ts +1 -0
- package/dist/feedback/__tests__/feedback.test.js +80 -0
- package/dist/feedback/__tests__/feedback.test.js.map +1 -0
- package/dist/feedback/index.d.ts +48 -0
- package/dist/feedback/index.js +97 -0
- package/dist/feedback/index.js.map +1 -0
- package/dist/flags/__tests__/flags.test.d.ts +1 -0
- package/dist/flags/__tests__/flags.test.js +301 -0
- package/dist/flags/__tests__/flags.test.js.map +1 -0
- package/dist/flags/client.d.ts +131 -0
- package/dist/flags/client.js +301 -0
- package/dist/flags/client.js.map +1 -0
- package/dist/flags/engine.d.ts +200 -0
- package/dist/flags/engine.js +677 -0
- package/dist/flags/engine.js.map +1 -0
- package/dist/flags/index.d.ts +4 -0
- package/dist/flags/index.js +16 -0
- package/dist/flags/index.js.map +1 -0
- package/dist/guard/__tests__/findings.test.js +28 -9
- package/dist/guard/__tests__/findings.test.js.map +1 -1
- package/dist/guard/__tests__/report.test.js +67 -0
- package/dist/guard/__tests__/report.test.js.map +1 -1
- package/dist/guard/base.d.ts +2 -0
- package/dist/guard/base.js +4 -0
- package/dist/guard/base.js.map +1 -1
- package/dist/guard/findings.d.ts +12 -2
- package/dist/guard/findings.js +19 -49
- package/dist/guard/findings.js.map +1 -1
- package/dist/guard/heartbeat.d.ts +34 -0
- package/dist/guard/heartbeat.js +83 -0
- package/dist/guard/heartbeat.js.map +1 -0
- package/dist/guard/integration.d.ts +33 -3
- package/dist/guard/integration.js +106 -32
- package/dist/guard/integration.js.map +1 -1
- package/dist/guard/pipeline.d.ts +10 -1
- package/dist/guard/pipeline.js +14 -0
- package/dist/guard/pipeline.js.map +1 -1
- package/dist/guard/report.d.ts +24 -1
- package/dist/guard/report.js +67 -18
- package/dist/guard/report.js.map +1 -1
- package/dist/index.d.ts +90 -0
- package/dist/index.js +225 -3
- package/dist/index.js.map +1 -1
- package/dist/instrumentation/__tests__/langchain-wrapper.test.js +1 -1
- package/dist/instrumentation/__tests__/langchain-wrapper.test.js.map +1 -1
- package/dist/instrumentation/anthropic/wrapper.js +4 -0
- package/dist/instrumentation/anthropic/wrapper.js.map +1 -1
- package/dist/instrumentation/mcp/wrapper.js +7 -1
- package/dist/instrumentation/mcp/wrapper.js.map +1 -1
- package/dist/instrumentation/openai/wrapper.js +6 -0
- package/dist/instrumentation/openai/wrapper.js.map +1 -1
- package/dist/masking.d.ts +42 -0
- package/dist/masking.js +197 -0
- package/dist/masking.js.map +1 -0
- package/dist/otel/__tests__/app-logs-safety.test.d.ts +1 -0
- package/dist/otel/__tests__/app-logs-safety.test.js +129 -0
- package/dist/otel/__tests__/app-logs-safety.test.js.map +1 -0
- package/dist/otel/__tests__/app-logs.test.d.ts +1 -0
- package/dist/otel/__tests__/app-logs.test.js +269 -0
- package/dist/otel/__tests__/app-logs.test.js.map +1 -0
- package/dist/otel/__tests__/log-auto.test.d.ts +1 -0
- package/dist/otel/__tests__/log-auto.test.js +125 -0
- package/dist/otel/__tests__/log-auto.test.js.map +1 -0
- package/dist/otel/__tests__/log-bridges.test.d.ts +1 -0
- package/dist/otel/__tests__/log-bridges.test.js +170 -0
- package/dist/otel/__tests__/log-bridges.test.js.map +1 -0
- package/dist/otel/__tests__/system-metrics.test.d.ts +1 -0
- package/dist/otel/__tests__/system-metrics.test.js +79 -0
- package/dist/otel/__tests__/system-metrics.test.js.map +1 -0
- package/dist/otel/app-logs.d.ts +80 -0
- package/dist/otel/app-logs.js +195 -0
- package/dist/otel/app-logs.js.map +1 -0
- package/dist/otel/build-info.d.ts +23 -0
- package/dist/otel/build-info.js +176 -0
- package/dist/otel/build-info.js.map +1 -0
- package/dist/otel/code-location.d.ts +49 -0
- package/dist/otel/code-location.js +233 -0
- package/dist/otel/code-location.js.map +1 -0
- package/dist/otel/events.d.ts +1 -0
- package/dist/otel/events.js +21 -12
- package/dist/otel/events.js.map +1 -1
- package/dist/otel/log-auto.d.ts +44 -0
- package/dist/otel/log-auto.js +200 -0
- package/dist/otel/log-auto.js.map +1 -0
- package/dist/otel/log-bridges.d.ts +54 -0
- package/dist/otel/log-bridges.js +307 -0
- package/dist/otel/log-bridges.js.map +1 -0
- package/dist/otel/system-metrics.d.ts +39 -0
- package/dist/otel/system-metrics.js +166 -0
- package/dist/otel/system-metrics.js.map +1 -0
- package/dist/otel/tracing.js +12 -1
- package/dist/otel/tracing.js.map +1 -1
- package/dist/pricing.json +100 -42
- package/dist/protect/__tests__/protect.test.d.ts +1 -0
- package/dist/protect/__tests__/protect.test.js +210 -0
- package/dist/protect/__tests__/protect.test.js.map +1 -0
- package/dist/protect/index.d.ts +103 -0
- package/dist/protect/index.js +196 -0
- package/dist/protect/index.js.map +1 -0
- package/dist/protect/mcp.d.ts +13 -0
- package/dist/protect/mcp.js +49 -0
- package/dist/protect/mcp.js.map +1 -0
- package/dist/protect/mode.d.ts +89 -0
- package/dist/protect/mode.js +134 -0
- package/dist/protect/mode.js.map +1 -0
- package/dist/rasp/__tests__/auto-http.test.d.ts +1 -0
- package/dist/rasp/__tests__/auto-http.test.js +136 -0
- package/dist/rasp/__tests__/auto-http.test.js.map +1 -0
- package/dist/rasp/__tests__/baseline.test.d.ts +1 -0
- package/dist/rasp/__tests__/baseline.test.js +86 -0
- package/dist/rasp/__tests__/baseline.test.js.map +1 -0
- package/dist/rasp/__tests__/benign-corpus.test.d.ts +1 -0
- package/dist/rasp/__tests__/benign-corpus.test.js +68 -0
- package/dist/rasp/__tests__/benign-corpus.test.js.map +1 -0
- package/dist/rasp/__tests__/capture-context.test.d.ts +1 -0
- package/dist/rasp/__tests__/capture-context.test.js +135 -0
- package/dist/rasp/__tests__/capture-context.test.js.map +1 -0
- package/dist/rasp/__tests__/code-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/code-hook.test.js +218 -0
- package/dist/rasp/__tests__/code-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/config-client.test.d.ts +1 -0
- package/dist/rasp/__tests__/config-client.test.js +283 -0
- package/dist/rasp/__tests__/config-client.test.js.map +1 -0
- package/dist/rasp/__tests__/corpus.d.ts +13 -0
- package/dist/rasp/__tests__/corpus.js +111 -0
- package/dist/rasp/__tests__/corpus.js.map +1 -0
- package/dist/rasp/__tests__/custom-rules.test.d.ts +1 -0
- package/dist/rasp/__tests__/custom-rules.test.js +276 -0
- package/dist/rasp/__tests__/custom-rules.test.js.map +1 -0
- package/dist/rasp/__tests__/db-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/db-hook.test.js +438 -0
- package/dist/rasp/__tests__/db-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/deception.test.d.ts +1 -0
- package/dist/rasp/__tests__/deception.test.js +567 -0
- package/dist/rasp/__tests__/deception.test.js.map +1 -0
- package/dist/rasp/__tests__/detect.test.d.ts +1 -0
- package/dist/rasp/__tests__/detect.test.js +276 -0
- package/dist/rasp/__tests__/detect.test.js.map +1 -0
- package/dist/rasp/__tests__/esm-exports.test.d.ts +1 -0
- package/dist/rasp/__tests__/esm-exports.test.js +20 -0
- package/dist/rasp/__tests__/esm-exports.test.js.map +1 -0
- package/dist/rasp/__tests__/fs-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/fs-hook.test.js +241 -0
- package/dist/rasp/__tests__/fs-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/hook-contracts.test.d.ts +1 -0
- package/dist/rasp/__tests__/hook-contracts.test.js +201 -0
- package/dist/rasp/__tests__/hook-contracts.test.js.map +1 -0
- package/dist/rasp/__tests__/hook-kit.d.ts +42 -0
- package/dist/rasp/__tests__/hook-kit.js +139 -0
- package/dist/rasp/__tests__/hook-kit.js.map +1 -0
- package/dist/rasp/__tests__/http-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/http-hook.test.js +250 -0
- package/dist/rasp/__tests__/http-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/iast.test.d.ts +1 -0
- package/dist/rasp/__tests__/iast.test.js +361 -0
- package/dist/rasp/__tests__/iast.test.js.map +1 -0
- package/dist/rasp/__tests__/include-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/include-hook.test.js +122 -0
- package/dist/rasp/__tests__/include-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/middleware.test.d.ts +1 -0
- package/dist/rasp/__tests__/middleware.test.js +302 -0
- package/dist/rasp/__tests__/middleware.test.js.map +1 -0
- package/dist/rasp/__tests__/process-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/process-hook.test.js +238 -0
- package/dist/rasp/__tests__/process-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/reporter.test.d.ts +1 -0
- package/dist/rasp/__tests__/reporter.test.js +114 -0
- package/dist/rasp/__tests__/reporter.test.js.map +1 -0
- package/dist/rasp/__tests__/route.test.d.ts +1 -0
- package/dist/rasp/__tests__/route.test.js +46 -0
- package/dist/rasp/__tests__/route.test.js.map +1 -0
- package/dist/rasp/__tests__/rule-expr.test.d.ts +1 -0
- package/dist/rasp/__tests__/rule-expr.test.js +151 -0
- package/dist/rasp/__tests__/rule-expr.test.js.map +1 -0
- package/dist/rasp/__tests__/rule-phases.test.d.ts +1 -0
- package/dist/rasp/__tests__/rule-phases.test.js +271 -0
- package/dist/rasp/__tests__/rule-phases.test.js.map +1 -0
- package/dist/rasp/__tests__/sinks-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/sinks-hook.test.js +177 -0
- package/dist/rasp/__tests__/sinks-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/targets.test.d.ts +1 -0
- package/dist/rasp/__tests__/targets.test.js +82 -0
- package/dist/rasp/__tests__/targets.test.js.map +1 -0
- package/dist/rasp/__tests__/template-hook.test.d.ts +1 -0
- package/dist/rasp/__tests__/template-hook.test.js +254 -0
- package/dist/rasp/__tests__/template-hook.test.js.map +1 -0
- package/dist/rasp/__tests__/upload.test.d.ts +1 -0
- package/dist/rasp/__tests__/upload.test.js +81 -0
- package/dist/rasp/__tests__/upload.test.js.map +1 -0
- package/dist/rasp/__tests__/vpatch-engine.test.d.ts +1 -0
- package/dist/rasp/__tests__/vpatch-engine.test.js +177 -0
- package/dist/rasp/__tests__/vpatch-engine.test.js.map +1 -0
- package/dist/rasp/auto-http.d.ts +6 -0
- package/dist/rasp/auto-http.js +194 -0
- package/dist/rasp/auto-http.js.map +1 -0
- package/dist/rasp/baseline.d.ts +35 -0
- package/dist/rasp/baseline.js +91 -0
- package/dist/rasp/baseline.js.map +1 -0
- package/dist/rasp/capture.d.ts +76 -0
- package/dist/rasp/capture.js +304 -0
- package/dist/rasp/capture.js.map +1 -0
- package/dist/rasp/config-client.d.ts +122 -0
- package/dist/rasp/config-client.js +337 -0
- package/dist/rasp/config-client.js.map +1 -0
- package/dist/rasp/context.d.ts +65 -0
- package/dist/rasp/context.js +68 -0
- package/dist/rasp/context.js.map +1 -0
- package/dist/rasp/custom-rules.d.ts +68 -0
- package/dist/rasp/custom-rules.js +222 -0
- package/dist/rasp/custom-rules.js.map +1 -0
- package/dist/rasp/data/default-rules.json +199 -0
- package/dist/rasp/data/default-sinks.json +4 -0
- package/dist/rasp/data/dnslog-domains.json +11 -0
- package/dist/rasp/deception.d.ts +70 -0
- package/dist/rasp/deception.js +220 -0
- package/dist/rasp/deception.js.map +1 -0
- package/dist/rasp/detect.d.ts +68 -0
- package/dist/rasp/detect.js +671 -0
- package/dist/rasp/detect.js.map +1 -0
- package/dist/rasp/engine.d.ts +107 -0
- package/dist/rasp/engine.js +330 -0
- package/dist/rasp/engine.js.map +1 -0
- package/dist/rasp/hooks/code.d.ts +20 -0
- package/dist/rasp/hooks/code.js +334 -0
- package/dist/rasp/hooks/code.js.map +1 -0
- package/dist/rasp/hooks/db.d.ts +48 -0
- package/dist/rasp/hooks/db.js +322 -0
- package/dist/rasp/hooks/db.js.map +1 -0
- package/dist/rasp/hooks/esm.d.ts +7 -0
- package/dist/rasp/hooks/esm.js +18 -0
- package/dist/rasp/hooks/esm.js.map +1 -0
- package/dist/rasp/hooks/fs.d.ts +3 -0
- package/dist/rasp/hooks/fs.js +206 -0
- package/dist/rasp/hooks/fs.js.map +1 -0
- package/dist/rasp/hooks/http.d.ts +4 -0
- package/dist/rasp/hooks/http.js +213 -0
- package/dist/rasp/hooks/http.js.map +1 -0
- package/dist/rasp/hooks/include.d.ts +9 -0
- package/dist/rasp/hooks/include.js +79 -0
- package/dist/rasp/hooks/include.js.map +1 -0
- package/dist/rasp/hooks/marks.d.ts +2 -0
- package/dist/rasp/hooks/marks.js +16 -0
- package/dist/rasp/hooks/marks.js.map +1 -0
- package/dist/rasp/hooks/process.d.ts +22 -0
- package/dist/rasp/hooks/process.js +191 -0
- package/dist/rasp/hooks/process.js.map +1 -0
- package/dist/rasp/hooks/sinks.d.ts +54 -0
- package/dist/rasp/hooks/sinks.js +329 -0
- package/dist/rasp/hooks/sinks.js.map +1 -0
- package/dist/rasp/hooks/template.d.ts +21 -0
- package/dist/rasp/hooks/template.js +152 -0
- package/dist/rasp/hooks/template.js.map +1 -0
- package/dist/rasp/iast-rules.d.ts +82 -0
- package/dist/rasp/iast-rules.js +240 -0
- package/dist/rasp/iast-rules.js.map +1 -0
- package/dist/rasp/iast-scope.d.ts +29 -0
- package/dist/rasp/iast-scope.js +54 -0
- package/dist/rasp/iast-scope.js.map +1 -0
- package/dist/rasp/iast.d.ts +81 -0
- package/dist/rasp/iast.js +272 -0
- package/dist/rasp/iast.js.map +1 -0
- package/dist/rasp/index.d.ts +52 -0
- package/dist/rasp/index.js +280 -0
- package/dist/rasp/index.js.map +1 -0
- package/dist/rasp/lexers.d.ts +32 -0
- package/dist/rasp/lexers.js +444 -0
- package/dist/rasp/lexers.js.map +1 -0
- package/dist/rasp/middleware.d.ts +155 -0
- package/dist/rasp/middleware.js +568 -0
- package/dist/rasp/middleware.js.map +1 -0
- package/dist/rasp/model-output.d.ts +14 -0
- package/dist/rasp/model-output.js +107 -0
- package/dist/rasp/model-output.js.map +1 -0
- package/dist/rasp/normalize.d.ts +23 -0
- package/dist/rasp/normalize.js +140 -0
- package/dist/rasp/normalize.js.map +1 -0
- package/dist/rasp/reporter.d.ts +60 -0
- package/dist/rasp/reporter.js +230 -0
- package/dist/rasp/reporter.js.map +1 -0
- package/dist/rasp/rule-expr.d.ts +236 -0
- package/dist/rasp/rule-expr.js +1253 -0
- package/dist/rasp/rule-expr.js.map +1 -0
- package/dist/rasp/template.d.ts +53 -0
- package/dist/rasp/template.js +336 -0
- package/dist/rasp/template.js.map +1 -0
- package/dist/rasp/types.d.ts +110 -0
- package/dist/rasp/types.js +51 -0
- package/dist/rasp/types.js.map +1 -0
- package/dist/rasp/vpatch.d.ts +55 -0
- package/dist/rasp/vpatch.js +120 -0
- package/dist/rasp/vpatch.js.map +1 -0
- package/dist/register.js +52 -11
- package/dist/register.js.map +1 -1
- package/dist/semantic-convention.d.ts +2 -0
- package/dist/semantic-convention.js +5 -0
- package/dist/semantic-convention.js.map +1 -1
- package/dist/types.d.ts +96 -0
- package/dist/zero-code.d.ts +8 -0
- package/dist/zero-code.js +38 -0
- package/dist/zero-code.js.map +1 -0
- package/package.json +18 -2
package/dist/masking.js
ADDED
|
@@ -0,0 +1,197 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* Credential masking shared by RASP snippets and application logs.
|
|
4
|
+
*
|
|
5
|
+
* The contract is sdk/rasp/README.md ("Masking"), checked by
|
|
6
|
+
* sdk/rasp/testdata/masking.json; every Shield360 SDK applies it the same
|
|
7
|
+
* way. In short:
|
|
8
|
+
*
|
|
9
|
+
* 1. A credential pair (`password=x`, `"api_key": "x"`, `Authorization:
|
|
10
|
+
* Bearer x`) keeps its name and loses its value, quotes kept.
|
|
11
|
+
* 2. A `Bearer <credential>` keeps the word and loses the credential.
|
|
12
|
+
* 3. A run of 20 or more token characters (`A-Z a-z 0-9 _ - + / = .`) is
|
|
13
|
+
* masked when it is opaque: it holds `+`, ends in `=`, or one of its pieces
|
|
14
|
+
* (split on `. / - _ =`) of 8 or more characters is not a readable word.
|
|
15
|
+
* Dotted, slashed and CamelCase identifiers (class names, package and file
|
|
16
|
+
* paths) survive; keys, hashes, base64, JWTs and UUIDs do not.
|
|
17
|
+
*
|
|
18
|
+
* Masking runs over the value plus 1,024 characters of look-ahead before it
|
|
19
|
+
* is cut, so a credential that crosses the cut is never left half visible.
|
|
20
|
+
* An attribute whose name is a credential (`password`, `x-api-key`,
|
|
21
|
+
* `sessionId`...) is masked whole; lists and maps are masked item by item.
|
|
22
|
+
*/
|
|
23
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
24
|
+
exports.MAX_TARGET_LENGTH = exports.MASK = exports.LOOKAHEAD = void 0;
|
|
25
|
+
exports.isOpaque = isOpaque;
|
|
26
|
+
exports.maskSecrets = maskSecrets;
|
|
27
|
+
exports.maskTarget = maskTarget;
|
|
28
|
+
exports.maskText = maskText;
|
|
29
|
+
exports.isSensitiveKey = isSensitiveKey;
|
|
30
|
+
exports.maskValue = maskValue;
|
|
31
|
+
exports.LOOKAHEAD = 1024;
|
|
32
|
+
exports.MASK = '***';
|
|
33
|
+
const KEY = '(?:pass(?:word|wd|phrase)?|pwd|secret|token|api[_-]?key|access[_-]?key|private[_-]?key' +
|
|
34
|
+
'|client[_-]?secret|auth(?:orization)?|bearer|cookie|session(?:[_-]?id)?|credentials?)';
|
|
35
|
+
const PAIR = new RegExp('(' +
|
|
36
|
+
KEY +
|
|
37
|
+
`["']?[ \\t]*[=:][ \\t]*)` +
|
|
38
|
+
`("(?:[^"\\\\]|\\\\.)*"?|'(?:[^'\\\\]|\\\\.)*'?` +
|
|
39
|
+
`|(?:(?:bearer|basic|digest|negotiate|token)[ \\t]+)?[^ \\t\\r\\n\\f\\x0B&;,'"]+)`, 'gi');
|
|
40
|
+
const BEARER = /(bearer[ \t]+)[A-Za-z0-9._~+/=-]+/gi;
|
|
41
|
+
const RUN = /[A-Za-z0-9_\-+/=.]{20,}/g;
|
|
42
|
+
const PIECE_SPLIT = /[./\-_=]/;
|
|
43
|
+
const READABLE = /^[A-Za-z]+[0-9]{0,4}$/;
|
|
44
|
+
const VOWELS = new Set('aeiouyAEIOUY');
|
|
45
|
+
const SENSITIVE_WORDS = new Set([
|
|
46
|
+
'password',
|
|
47
|
+
'passwd',
|
|
48
|
+
'passphrase',
|
|
49
|
+
'pwd',
|
|
50
|
+
'secret',
|
|
51
|
+
'token',
|
|
52
|
+
'apikey',
|
|
53
|
+
'authorization',
|
|
54
|
+
'cookie',
|
|
55
|
+
'credential',
|
|
56
|
+
'credentials',
|
|
57
|
+
'bearer',
|
|
58
|
+
'otp',
|
|
59
|
+
'signature',
|
|
60
|
+
'privatekey',
|
|
61
|
+
'sessionid',
|
|
62
|
+
'jwt',
|
|
63
|
+
'accesskey',
|
|
64
|
+
'secretkey',
|
|
65
|
+
]);
|
|
66
|
+
const SENSITIVE_PAIRS = new Set(['api key', 'private key', 'access key', 'secret key', 'session id']);
|
|
67
|
+
const isUpper = (c) => c >= 'A' && c <= 'Z';
|
|
68
|
+
const isLower = (c) => c >= 'a' && c <= 'z';
|
|
69
|
+
const isDigit = (c) => c >= '0' && c <= '9';
|
|
70
|
+
function readable(piece) {
|
|
71
|
+
if (!READABLE.test(piece))
|
|
72
|
+
return false;
|
|
73
|
+
let letters = 0;
|
|
74
|
+
let vowels = 0;
|
|
75
|
+
let upperRun = 0;
|
|
76
|
+
let longest = 0;
|
|
77
|
+
let transitions = 0;
|
|
78
|
+
let previous = '';
|
|
79
|
+
for (const c of piece) {
|
|
80
|
+
if (isDigit(c))
|
|
81
|
+
continue;
|
|
82
|
+
letters += 1;
|
|
83
|
+
if (VOWELS.has(c))
|
|
84
|
+
vowels += 1;
|
|
85
|
+
if (isUpper(c)) {
|
|
86
|
+
upperRun += 1;
|
|
87
|
+
longest = Math.max(longest, upperRun);
|
|
88
|
+
if (isLower(previous))
|
|
89
|
+
transitions += 1;
|
|
90
|
+
}
|
|
91
|
+
else {
|
|
92
|
+
upperRun = 0;
|
|
93
|
+
}
|
|
94
|
+
previous = c;
|
|
95
|
+
}
|
|
96
|
+
return vowels * 5 >= letters && longest <= 6 && transitions * 3 <= letters;
|
|
97
|
+
}
|
|
98
|
+
/** Whether a run of 20+ token characters reads as a secret rather than an identifier. */
|
|
99
|
+
function isOpaque(run) {
|
|
100
|
+
if (run.includes('+') || run.endsWith('='))
|
|
101
|
+
return true;
|
|
102
|
+
return run.split(PIECE_SPLIT).some((p) => p.length >= 8 && !readable(p));
|
|
103
|
+
}
|
|
104
|
+
function maskCredentials(value) {
|
|
105
|
+
return value
|
|
106
|
+
.replace(PAIR, (_m, name, v) => {
|
|
107
|
+
if (v.startsWith('"'))
|
|
108
|
+
return `${name}"${exports.MASK}"`;
|
|
109
|
+
if (v.startsWith("'"))
|
|
110
|
+
return `${name}'${exports.MASK}'`;
|
|
111
|
+
return name + exports.MASK;
|
|
112
|
+
})
|
|
113
|
+
.replace(BEARER, (_m, word) => word + exports.MASK);
|
|
114
|
+
}
|
|
115
|
+
/** `value` with credentials and opaque tokens masked; nothing is cut. */
|
|
116
|
+
function maskSecrets(value) {
|
|
117
|
+
return maskCredentials(value).replace(RUN, (run) => (isOpaque(run) ? exports.MASK : run));
|
|
118
|
+
}
|
|
119
|
+
// Allow-list targets (README "Masking", "Targets"): the strict long-token rule,
|
|
120
|
+
// piece by piece between `/` and `.`.
|
|
121
|
+
const TARGET_LONG_TOKEN = /[A-Za-z0-9_\-+/]{20,}={0,2}/g;
|
|
122
|
+
exports.MAX_TARGET_LENGTH = 256;
|
|
123
|
+
/**
|
|
124
|
+
* An allow-list target as an event carries it: the credential rules on the
|
|
125
|
+
* whole target, a `/` segment holding `@` (userinfo) as `***`, then the
|
|
126
|
+
* strict long-token rule piece by piece between `/` and `.`; never cut.
|
|
127
|
+
* Undefined when empty, holding a control character or longer than 256
|
|
128
|
+
* characters.
|
|
129
|
+
*/
|
|
130
|
+
function maskTarget(raw) {
|
|
131
|
+
if (!raw)
|
|
132
|
+
return undefined;
|
|
133
|
+
const out = maskCredentials(raw)
|
|
134
|
+
.split('/')
|
|
135
|
+
.map((segment) => (segment.includes('@') ? exports.MASK : segment))
|
|
136
|
+
.join('/')
|
|
137
|
+
.split(/([/.])/)
|
|
138
|
+
.map((piece) => (piece === '/' || piece === '.' ? piece : piece.replace(TARGET_LONG_TOKEN, exports.MASK)))
|
|
139
|
+
.join('');
|
|
140
|
+
// eslint-disable-next-line no-control-regex
|
|
141
|
+
if (!out || out.length > exports.MAX_TARGET_LENGTH || /[\u0000-\u001f\u007f]/.test(out))
|
|
142
|
+
return undefined;
|
|
143
|
+
return out;
|
|
144
|
+
}
|
|
145
|
+
/** At most `limit` characters of `value`, masked before it is cut. */
|
|
146
|
+
function maskText(value, limit) {
|
|
147
|
+
return maskSecrets(value.slice(0, limit + exports.LOOKAHEAD)).slice(0, limit);
|
|
148
|
+
}
|
|
149
|
+
function words(key) {
|
|
150
|
+
const out = [];
|
|
151
|
+
for (const chunk of key.split(/[^A-Za-z0-9]+/)) {
|
|
152
|
+
let start = 0;
|
|
153
|
+
for (let i = 1; i < chunk.length; i++) {
|
|
154
|
+
const a = chunk[i - 1];
|
|
155
|
+
const b = chunk[i];
|
|
156
|
+
const next = i + 1 < chunk.length ? chunk[i + 1] : '';
|
|
157
|
+
const lowerToUpper = (isLower(a) || isDigit(a)) && isUpper(b);
|
|
158
|
+
const acronymEnd = isUpper(a) && isUpper(b) && isLower(next);
|
|
159
|
+
if (lowerToUpper || acronymEnd) {
|
|
160
|
+
out.push(chunk.slice(start, i));
|
|
161
|
+
start = i;
|
|
162
|
+
}
|
|
163
|
+
}
|
|
164
|
+
if (chunk)
|
|
165
|
+
out.push(chunk.slice(start));
|
|
166
|
+
}
|
|
167
|
+
return out.filter(Boolean).map((w) => w.toLowerCase());
|
|
168
|
+
}
|
|
169
|
+
/** Whether an attribute name names a credential (`password`, `x-api-key`, `sessionId`). */
|
|
170
|
+
function isSensitiveKey(key) {
|
|
171
|
+
const w = words(key);
|
|
172
|
+
if (w.some((word) => SENSITIVE_WORDS.has(word)))
|
|
173
|
+
return true;
|
|
174
|
+
for (let i = 0; i + 1 < w.length; i++)
|
|
175
|
+
if (SENSITIVE_PAIRS.has(`${w[i]} ${w[i + 1]}`))
|
|
176
|
+
return true;
|
|
177
|
+
return false;
|
|
178
|
+
}
|
|
179
|
+
/** An attribute value as it may leave the process (strings at most `limit` characters). */
|
|
180
|
+
function maskValue(key, value, limit) {
|
|
181
|
+
if (value === null || value === undefined)
|
|
182
|
+
return value;
|
|
183
|
+
if (isSensitiveKey(key))
|
|
184
|
+
return exports.MASK;
|
|
185
|
+
if (typeof value === 'string')
|
|
186
|
+
return maskText(value, limit);
|
|
187
|
+
if (Array.isArray(value))
|
|
188
|
+
return value.map((v) => maskValue(key, v, limit));
|
|
189
|
+
if (typeof value === 'object') {
|
|
190
|
+
const out = {};
|
|
191
|
+
for (const [k, v] of Object.entries(value))
|
|
192
|
+
out[k] = maskValue(k, v, limit);
|
|
193
|
+
return out;
|
|
194
|
+
}
|
|
195
|
+
return value;
|
|
196
|
+
}
|
|
197
|
+
//# sourceMappingURL=masking.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"masking.js","sourceRoot":"","sources":["../src/masking.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;;;AA0EH,4BAGC;AAaD,kCAEC;AAcD,gCAYC;AAGD,4BAEC;AAuBD,wCAKC;AAGD,8BAWC;AAnKY,QAAA,SAAS,GAAG,IAAI,CAAC;AACjB,QAAA,IAAI,GAAG,KAAK,CAAC;AAE1B,MAAM,GAAG,GACP,wFAAwF;IACxF,uFAAuF,CAAC;AAC1F,MAAM,IAAI,GAAG,IAAI,MAAM,CACrB,GAAG;IACD,GAAG;IACH,0BAA0B;IAC1B,gDAAgD;IAChD,kFAAkF,EACpF,IAAI,CACL,CAAC;AACF,MAAM,MAAM,GAAG,qCAAqC,CAAC;AACrD,MAAM,GAAG,GAAG,0BAA0B,CAAC;AACvC,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;AAEvC,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,KAAK;IACL,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,aAAa;IACb,QAAQ;IACR,KAAK;IACL,WAAW;IACX,YAAY;IACZ,WAAW;IACX,KAAK;IACL,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAEtG,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AACpD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AACpD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC;AAEpD,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAO,CAAC,CAAC,CAAC;YAAE,SAAS;QACzB,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACf,QAAQ,IAAI,CAAC,CAAC;YACd,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,CAAC;gBAAE,WAAW,IAAI,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,CAAC,CAAC;QACf,CAAC;QACD,QAAQ,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,MAAM,GAAG,CAAC,IAAI,OAAO,IAAI,OAAO,IAAI,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC;AAC7E,CAAC;AAED,yFAAyF;AACzF,SAAgB,QAAQ,CAAC,GAAW;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACxD,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,CAAS,EAAE,EAAE;QAC7C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,IAAI,YAAI,GAAG,CAAC;QACjD,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,IAAI,IAAI,YAAI,GAAG,CAAC;QACjD,OAAO,IAAI,GAAG,YAAI,CAAC;IACrB,CAAC,CAAC;SACD,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,GAAG,YAAI,CAAC,CAAC;AACxD,CAAC;AAED,yEAAyE;AACzE,SAAgB,WAAW,CAAC,KAAa;IACvC,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACpF,CAAC;AAED,gFAAgF;AAChF,sCAAsC;AACtC,MAAM,iBAAiB,GAAG,8BAA8B,CAAC;AAC5C,QAAA,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;;;;GAMG;AACH,SAAgB,UAAU,CAAC,GAAuB;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC;SAC7B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SAC1D,IAAI,CAAC,GAAG,CAAC;SACT,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,iBAAiB,EAAE,YAAI,CAAC,CAAC,CAAC;SACjG,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,4CAA4C;IAC5C,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,yBAAiB,IAAI,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAClG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sEAAsE;AACtE,SAAgB,QAAQ,CAAC,KAAa,EAAE,KAAa;IACnD,OAAO,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,iBAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACvB,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACnB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7D,IAAI,YAAY,IAAI,UAAU,EAAE,CAAC;gBAC/B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChC,KAAK,GAAG,CAAC,CAAC;YACZ,CAAC;QACH,CAAC;QACD,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,2FAA2F;AAC3F,SAAgB,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC;IACnG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAgB,SAAS,CAAC,GAAW,EAAE,KAAc,EAAE,KAAa;IAClE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,cAAc,CAAC,GAAG,CAAC;QAAE,OAAO,YAAI,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACvG,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,129 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
const sdk_logs_1 = require("@opentelemetry/sdk-logs");
|
|
4
|
+
const engine_1 = require("../../rasp/engine");
|
|
5
|
+
const app_logs_1 = require("../app-logs");
|
|
6
|
+
/**
|
|
7
|
+
* What leaves the process: credentials and long tokens masked with the RASP
|
|
8
|
+
* snippet rules, long values cut, the SDK's own scopes never sent, a storm
|
|
9
|
+
* capped per logger, the call site recorded, and nothing thrown into the app.
|
|
10
|
+
* The Python SDK carries the same tests.
|
|
11
|
+
*/
|
|
12
|
+
function memory() {
|
|
13
|
+
const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
|
|
14
|
+
const provider = new sdk_logs_1.LoggerProvider({ processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })] });
|
|
15
|
+
return { exporter, provider };
|
|
16
|
+
}
|
|
17
|
+
describe('application log safety', () => {
|
|
18
|
+
afterEach(() => (0, app_logs_1.disableAppLogs)());
|
|
19
|
+
it('masks credentials and long tokens in the body', () => {
|
|
20
|
+
const { exporter, provider } = memory();
|
|
21
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
22
|
+
const log = (0, app_logs_1.createLogger)('auth');
|
|
23
|
+
log.info('login password=hunter2 for ann');
|
|
24
|
+
log.info('key k3j4h5g6f7d8s9a0q1w2e3r4 used');
|
|
25
|
+
expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['login password=*** for ann', 'key *** used']);
|
|
26
|
+
});
|
|
27
|
+
it('masks string attributes, but not the code location or exception type', () => {
|
|
28
|
+
const { exporter, provider } = memory();
|
|
29
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
30
|
+
const err = new TypeError('token=abc123 rejected');
|
|
31
|
+
(0, app_logs_1.createLogger)().error(err, { header: 'Authorization: xyz', count: 3 });
|
|
32
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
33
|
+
expect(record.attributes.header).toBe('Authorization: ***');
|
|
34
|
+
expect(record.attributes.count).toBe(3);
|
|
35
|
+
expect(record.attributes['exception.type']).toBe('TypeError');
|
|
36
|
+
expect(record.attributes['exception.message']).toBe('token=*** rejected');
|
|
37
|
+
expect(String(record.attributes['exception.stacktrace'])).not.toContain('token=abc123');
|
|
38
|
+
expect(record.body).toBe('token=*** rejected');
|
|
39
|
+
expect(String(record.attributes['code.file.path'])).toContain('app-logs-safety.test.ts');
|
|
40
|
+
expect(typeof record.attributes['code.line.number']).toBe('number');
|
|
41
|
+
});
|
|
42
|
+
it('leaves the code location out when captureCodeLocation is off', () => {
|
|
43
|
+
const { exporter, provider } = memory();
|
|
44
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
45
|
+
(0, app_logs_1.createLogger)().info('plain');
|
|
46
|
+
expect(exporter.getFinishedLogRecords()[0].attributes).toEqual({});
|
|
47
|
+
});
|
|
48
|
+
it('cuts long bodies and attributes', () => {
|
|
49
|
+
const { exporter, provider } = memory();
|
|
50
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
51
|
+
(0, app_logs_1.createLogger)().info('a '.repeat(20000), { note: 'b '.repeat(5000) });
|
|
52
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
53
|
+
expect(String(record.body)).toHaveLength(app_logs_1.MAX_BODY_LENGTH);
|
|
54
|
+
expect(String(record.attributes.note)).toHaveLength(app_logs_1.MAX_ATTRIBUTE_LENGTH);
|
|
55
|
+
});
|
|
56
|
+
it('never sends the SDK\'s own scopes', () => {
|
|
57
|
+
const { exporter, provider } = memory();
|
|
58
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
59
|
+
(0, app_logs_1.createLogger)('shield360').warn('sdk');
|
|
60
|
+
(0, app_logs_1.createLogger)('shield360.flags').warn('sdk');
|
|
61
|
+
(0, app_logs_1.createLogger)('opentelemetry').warn('otel');
|
|
62
|
+
(0, app_logs_1.createLogger)('@opentelemetry/exporter').warn('otel');
|
|
63
|
+
(0, app_logs_1.createLogger)('shield360_app').warn('not ours');
|
|
64
|
+
expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['not ours']);
|
|
65
|
+
expect((0, app_logs_1.isOwnScope)('Shield360')).toBe(true);
|
|
66
|
+
expect((0, app_logs_1.isOwnScope)('app')).toBe(false);
|
|
67
|
+
});
|
|
68
|
+
it('sends at most maxPerSecond records a second per logger (500 by default)', () => {
|
|
69
|
+
const { exporter, provider } = memory();
|
|
70
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
71
|
+
const capped = (0, app_logs_1.createLogger)('storm', { maxPerSecond: 3 });
|
|
72
|
+
for (let i = 0; i < 10; i++)
|
|
73
|
+
capped.info(`m${i}`);
|
|
74
|
+
expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['m0', 'm1', 'm2']);
|
|
75
|
+
const unbounded = (0, app_logs_1.createLogger)('default');
|
|
76
|
+
for (let i = 0; i < 600; i++)
|
|
77
|
+
unbounded.info('x');
|
|
78
|
+
expect(exporter.getFinishedLogRecords()).toHaveLength(3 + 500);
|
|
79
|
+
});
|
|
80
|
+
it('never throws into the application when the pipeline fails', () => {
|
|
81
|
+
const throwing = {
|
|
82
|
+
getLogger: () => ({
|
|
83
|
+
emit: () => {
|
|
84
|
+
throw new Error('endpoint down');
|
|
85
|
+
},
|
|
86
|
+
}),
|
|
87
|
+
};
|
|
88
|
+
(0, app_logs_1.enableAppLogs)(throwing);
|
|
89
|
+
expect(() => (0, app_logs_1.createLogger)().error('still fine')).not.toThrow();
|
|
90
|
+
});
|
|
91
|
+
it('keeps RASP snippets as they were', () => {
|
|
92
|
+
expect((0, engine_1.maskSnippet)('password=hunter2&x=1')).toBe('password=***&x=1');
|
|
93
|
+
expect((0, engine_1.maskSnippet)('t k3j4h5g6f7d8s9a0q1w2e3r4')).toBe('t ***');
|
|
94
|
+
expect((0, engine_1.maskSnippet)('a '.repeat(100))).toHaveLength(64);
|
|
95
|
+
});
|
|
96
|
+
});
|
|
97
|
+
describe('application log masking by the shared contract', () => {
|
|
98
|
+
afterEach(() => (0, app_logs_1.disableAppLogs)());
|
|
99
|
+
it('masks a whole value under a credential name, and lists item by item', () => {
|
|
100
|
+
const { exporter, provider } = memory();
|
|
101
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
102
|
+
(0, app_logs_1.createLogger)().info('sign-in', { password: 'pw1', 'x-api-key': 'short', sessionId: 42, tags: ['token=abc', 'ok'], user: 'ann' });
|
|
103
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
104
|
+
expect(record.attributes).toEqual({ password: '***', 'x-api-key': '***', sessionId: '***', tags: ['token=***', 'ok'], user: 'ann' });
|
|
105
|
+
});
|
|
106
|
+
it('masks quoted credentials and the credential after Bearer', () => {
|
|
107
|
+
const { exporter, provider } = memory();
|
|
108
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
109
|
+
(0, app_logs_1.createLogger)().info('{"password":"pw1","user":"ann"} Authorization: Bearer abc sent Bearer xyz');
|
|
110
|
+
expect(exporter.getFinishedLogRecords()[0].body).toBe('{"password":"***","user":"ann"} Authorization: *** sent Bearer ***');
|
|
111
|
+
});
|
|
112
|
+
it('masks a token that crosses the cut instead of leaving its start', () => {
|
|
113
|
+
const { exporter, provider } = memory();
|
|
114
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
115
|
+
(0, app_logs_1.createLogger)().info('a'.repeat(app_logs_1.MAX_BODY_LENGTH - 10) + ' 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b');
|
|
116
|
+
const body = String(exporter.getFinishedLogRecords()[0].body);
|
|
117
|
+
expect(body.endsWith(' ***')).toBe(true);
|
|
118
|
+
expect(body).not.toContain('9f86');
|
|
119
|
+
});
|
|
120
|
+
it('keeps exception class names and file paths readable', () => {
|
|
121
|
+
const { exporter, provider } = memory();
|
|
122
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
123
|
+
(0, app_logs_1.createLogger)().error(Object.assign(new Error('java.lang.ArrayIndexOutOfBoundsException at /srv/app/orders/OrderService.ts'), { name: 'ArrayIndexOutOfBoundsError' }));
|
|
124
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
125
|
+
expect(record.body).toBe('java.lang.ArrayIndexOutOfBoundsException at /srv/app/orders/OrderService.ts');
|
|
126
|
+
expect(String(record.attributes['exception.stacktrace'])).toContain('app-logs-safety.test.ts');
|
|
127
|
+
});
|
|
128
|
+
});
|
|
129
|
+
//# sourceMappingURL=app-logs-safety.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"app-logs-safety.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/app-logs-safety.test.ts"],"names":[],"mappings":";;AAAA,sDAA8G;AAC9G,8CAAgD;AAChD,0CAOqB;AAErB;;;;;GAKG;AACH,SAAS,MAAM;IACb,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAc,GAAE,CAAC,CAAC;IAElC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,uBAAY,EAAC,MAAM,CAAC,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QAC9C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,EAAE,cAAc,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACnD,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACxF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACzF,MAAM,CAAC,OAAO,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,0BAAe,CAAC,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,+BAAoB,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,EAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,IAAA,uBAAY,EAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAA,uBAAY,EAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAA,uBAAY,EAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrD,IAAA,uBAAY,EAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAA,qBAAU,EAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAA,qBAAU,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAA,uBAAY,EAAC,OAAO,EAAE,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACxF,MAAM,SAAS,GAAG,IAAA,uBAAY,EAAC,SAAS,CAAC,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,QAAQ,GAAG;YACf,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChB,IAAI,EAAE,GAAG,EAAE;oBACT,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;gBACnC,CAAC;aACF,CAAC;SACH,CAAC;QACF,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,IAAA,oBAAW,EAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAA,oBAAW,EAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,CAAC,IAAA,oBAAW,EAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAc,GAAE,CAAC,CAAC;IAElC,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjI,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACjG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC9H,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,0BAAe,GAAG,EAAE,CAAC,GAAG,2CAA2C,CAAC,CAAC;QACpG,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;QACxC,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,6EAA6E,CAAC,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;QACtK,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,6EAA6E,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|
|
@@ -0,0 +1,269 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
const api_1 = require("@opentelemetry/api");
|
|
37
|
+
const api_logs_1 = require("@opentelemetry/api-logs");
|
|
38
|
+
const context_async_hooks_1 = require("@opentelemetry/context-async-hooks");
|
|
39
|
+
const sdk_logs_1 = require("@opentelemetry/sdk-logs");
|
|
40
|
+
const sdk_trace_base_1 = require("@opentelemetry/sdk-trace-base");
|
|
41
|
+
const app_logs_1 = require("../app-logs");
|
|
42
|
+
/**
|
|
43
|
+
* Application logs reach Shield360 only when asked for, through the SDK's own
|
|
44
|
+
* LoggerProvider, and linked to the span that was active when they were written.
|
|
45
|
+
*/
|
|
46
|
+
function memoryProvider() {
|
|
47
|
+
const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
|
|
48
|
+
const provider = new sdk_logs_1.LoggerProvider({
|
|
49
|
+
processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })],
|
|
50
|
+
});
|
|
51
|
+
return { exporter, provider };
|
|
52
|
+
}
|
|
53
|
+
describe('application logs', () => {
|
|
54
|
+
const originalEnv = process.env;
|
|
55
|
+
beforeEach(() => {
|
|
56
|
+
process.env = { ...originalEnv };
|
|
57
|
+
delete process.env.SHIELD360_CAPTURE_LOGS;
|
|
58
|
+
delete process.env.SHIELD360_LOG_LEVEL;
|
|
59
|
+
(0, app_logs_1.disableAppLogs)();
|
|
60
|
+
});
|
|
61
|
+
afterEach(() => {
|
|
62
|
+
process.env = originalEnv;
|
|
63
|
+
(0, app_logs_1.disableAppLogs)();
|
|
64
|
+
});
|
|
65
|
+
describe('opt-in', () => {
|
|
66
|
+
it('is off by default', () => {
|
|
67
|
+
expect((0, app_logs_1.resolveCaptureLogs)()).toBe(false);
|
|
68
|
+
expect((0, app_logs_1.resolveCaptureLogs)(undefined)).toBe(false);
|
|
69
|
+
});
|
|
70
|
+
it('turns on with the option or SHIELD360_CAPTURE_LOGS', () => {
|
|
71
|
+
expect((0, app_logs_1.resolveCaptureLogs)(true)).toBe(true);
|
|
72
|
+
process.env.SHIELD360_CAPTURE_LOGS = 'true';
|
|
73
|
+
expect((0, app_logs_1.resolveCaptureLogs)()).toBe(true);
|
|
74
|
+
});
|
|
75
|
+
it('lets an explicit false win over the environment', () => {
|
|
76
|
+
process.env.SHIELD360_CAPTURE_LOGS = 'true';
|
|
77
|
+
expect((0, app_logs_1.resolveCaptureLogs)(false)).toBe(false);
|
|
78
|
+
});
|
|
79
|
+
it('sends nothing while off, even with a provider about', () => {
|
|
80
|
+
const { exporter } = memoryProvider();
|
|
81
|
+
(0, app_logs_1.createLogger)('svc').error('nobody asked');
|
|
82
|
+
expect(exporter.getFinishedLogRecords()).toHaveLength(0);
|
|
83
|
+
});
|
|
84
|
+
});
|
|
85
|
+
describe('level', () => {
|
|
86
|
+
it('defaults to info and reads SHIELD360_LOG_LEVEL', () => {
|
|
87
|
+
expect((0, app_logs_1.resolveLogLevel)()).toBe('info');
|
|
88
|
+
process.env.SHIELD360_LOG_LEVEL = 'WARNING';
|
|
89
|
+
expect((0, app_logs_1.resolveLogLevel)()).toBe('warn');
|
|
90
|
+
expect((0, app_logs_1.resolveLogLevel)('error')).toBe('error');
|
|
91
|
+
expect((0, app_logs_1.resolveLogLevel)('critical')).toBe('fatal');
|
|
92
|
+
expect((0, app_logs_1.resolveLogLevel)('loud')).toBe('info');
|
|
93
|
+
});
|
|
94
|
+
it('drops records below the minimum and keeps the rest', () => {
|
|
95
|
+
const { exporter, provider } = memoryProvider();
|
|
96
|
+
(0, app_logs_1.enableAppLogs)(provider, 'warn');
|
|
97
|
+
const log = (0, app_logs_1.createLogger)('svc');
|
|
98
|
+
log.debug('d');
|
|
99
|
+
log.info('i');
|
|
100
|
+
log.warn('w');
|
|
101
|
+
log.error('e');
|
|
102
|
+
log.fatal('f');
|
|
103
|
+
const records = exporter.getFinishedLogRecords();
|
|
104
|
+
expect(records.map((r) => r.body)).toEqual(['w', 'e', 'f']);
|
|
105
|
+
expect(records.map((r) => r.severityNumber)).toEqual([
|
|
106
|
+
api_logs_1.SeverityNumber.WARN,
|
|
107
|
+
api_logs_1.SeverityNumber.ERROR,
|
|
108
|
+
api_logs_1.SeverityNumber.FATAL,
|
|
109
|
+
]);
|
|
110
|
+
expect(records.map((r) => r.severityText)).toEqual(['WARN', 'ERROR', 'FATAL']);
|
|
111
|
+
});
|
|
112
|
+
});
|
|
113
|
+
it('writes the message as the body, the attributes as given and the scope name', () => {
|
|
114
|
+
const { exporter, provider } = memoryProvider();
|
|
115
|
+
(0, app_logs_1.enableAppLogs)(provider, 'info', { captureCodeLocation: false });
|
|
116
|
+
(0, app_logs_1.createLogger)('checkout').info('order placed', { 'order.id': 'o-1', items: 3 });
|
|
117
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
118
|
+
expect(record.body).toBe('order placed');
|
|
119
|
+
expect(record.severityNumber).toBe(api_logs_1.SeverityNumber.INFO);
|
|
120
|
+
expect(record.severityText).toBe('INFO');
|
|
121
|
+
expect(record.attributes).toEqual({ 'order.id': 'o-1', items: 3 });
|
|
122
|
+
expect(record.instrumentationScope.name).toBe('checkout');
|
|
123
|
+
});
|
|
124
|
+
it('records an Error as exception attributes', () => {
|
|
125
|
+
const { exporter, provider } = memoryProvider();
|
|
126
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
127
|
+
(0, app_logs_1.createLogger)().error(new TypeError('bad input'));
|
|
128
|
+
const [record] = exporter.getFinishedLogRecords();
|
|
129
|
+
expect(record.body).toBe('bad input');
|
|
130
|
+
expect(record.attributes['exception.type']).toBe('TypeError');
|
|
131
|
+
expect(record.attributes['exception.message']).toBe('bad input');
|
|
132
|
+
expect(String(record.attributes['exception.stacktrace'])).toContain('TypeError');
|
|
133
|
+
expect(record.instrumentationScope.name).toBe('app');
|
|
134
|
+
});
|
|
135
|
+
it('stops sending once turned off again', () => {
|
|
136
|
+
const { exporter, provider } = memoryProvider();
|
|
137
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
138
|
+
const log = (0, app_logs_1.createLogger)();
|
|
139
|
+
(0, app_logs_1.disableAppLogs)();
|
|
140
|
+
log.error('after');
|
|
141
|
+
expect(exporter.getFinishedLogRecords()).toHaveLength(0);
|
|
142
|
+
});
|
|
143
|
+
it('links a record to the active span', () => {
|
|
144
|
+
const contextManager = new context_async_hooks_1.AsyncLocalStorageContextManager().enable();
|
|
145
|
+
api_1.context.setGlobalContextManager(contextManager);
|
|
146
|
+
try {
|
|
147
|
+
const { exporter, provider } = memoryProvider();
|
|
148
|
+
(0, app_logs_1.enableAppLogs)(provider);
|
|
149
|
+
const tracer = new sdk_trace_base_1.BasicTracerProvider().getTracer('test');
|
|
150
|
+
let traceId = '';
|
|
151
|
+
let spanId = '';
|
|
152
|
+
tracer.startActiveSpan('work', (span) => {
|
|
153
|
+
traceId = span.spanContext().traceId;
|
|
154
|
+
spanId = span.spanContext().spanId;
|
|
155
|
+
(0, app_logs_1.createLogger)().info('inside');
|
|
156
|
+
span.end();
|
|
157
|
+
});
|
|
158
|
+
(0, app_logs_1.createLogger)().info('outside');
|
|
159
|
+
const [inside, outside] = exporter.getFinishedLogRecords();
|
|
160
|
+
expect(inside.spanContext?.traceId).toBe(traceId);
|
|
161
|
+
expect(inside.spanContext?.spanId).toBe(spanId);
|
|
162
|
+
expect(outside.spanContext).toBeUndefined();
|
|
163
|
+
expect(api_1.trace.getActiveSpan()).toBeUndefined();
|
|
164
|
+
}
|
|
165
|
+
finally {
|
|
166
|
+
api_1.context.disable();
|
|
167
|
+
}
|
|
168
|
+
});
|
|
169
|
+
});
|
|
170
|
+
describe('Shield360.init and application logs', () => {
|
|
171
|
+
const originalEnv = process.env;
|
|
172
|
+
let exporterArgs;
|
|
173
|
+
beforeEach(() => {
|
|
174
|
+
jest.resetModules();
|
|
175
|
+
exporterArgs = jest.fn();
|
|
176
|
+
process.env = { ...originalEnv };
|
|
177
|
+
for (const name of [
|
|
178
|
+
'SHIELD360_CAPTURE_LOGS',
|
|
179
|
+
'SHIELD360_CAPTURE_STDIO',
|
|
180
|
+
'SHIELD360_LOG_LEVEL',
|
|
181
|
+
'OTEL_EXPORTER_OTLP_ENDPOINT',
|
|
182
|
+
'OTEL_EXPORTER_OTLP_HEADERS',
|
|
183
|
+
'OTEL_LOGS_EXPORTER',
|
|
184
|
+
'SHIELD360_URL',
|
|
185
|
+
'SHIELD360_API_KEY',
|
|
186
|
+
]) {
|
|
187
|
+
delete process.env[name];
|
|
188
|
+
}
|
|
189
|
+
// Tracing is covered elsewhere; here it would only load instrumentations.
|
|
190
|
+
jest.doMock('../tracing', () => ({ __esModule: true, default: { setup: jest.fn() } }));
|
|
191
|
+
jest.doMock('@opentelemetry/exporter-logs-otlp-http', () => ({
|
|
192
|
+
OTLPLogExporter: class {
|
|
193
|
+
constructor(config) {
|
|
194
|
+
exporterArgs(config);
|
|
195
|
+
}
|
|
196
|
+
export(_records, done) {
|
|
197
|
+
done({ code: 0 });
|
|
198
|
+
}
|
|
199
|
+
shutdown() {
|
|
200
|
+
return Promise.resolve();
|
|
201
|
+
}
|
|
202
|
+
forceFlush() {
|
|
203
|
+
return Promise.resolve();
|
|
204
|
+
}
|
|
205
|
+
},
|
|
206
|
+
}));
|
|
207
|
+
});
|
|
208
|
+
afterEach(async () => {
|
|
209
|
+
// init() with captureLogs copies console output; put console back.
|
|
210
|
+
const bridges = await Promise.resolve().then(() => __importStar(require('../log-bridges')));
|
|
211
|
+
bridges.releaseConsole();
|
|
212
|
+
bridges.releaseStdio();
|
|
213
|
+
process.env = originalEnv;
|
|
214
|
+
jest.dontMock('../tracing');
|
|
215
|
+
jest.dontMock('@opentelemetry/exporter-logs-otlp-http');
|
|
216
|
+
});
|
|
217
|
+
async function load() {
|
|
218
|
+
const { logs } = await Promise.resolve().then(() => __importStar(require('@opentelemetry/api-logs')));
|
|
219
|
+
logs.disable();
|
|
220
|
+
const { default: Shield360 } = await Promise.resolve().then(() => __importStar(require('../../index')));
|
|
221
|
+
const { appLogsEnabled } = await Promise.resolve().then(() => __importStar(require('../app-logs')));
|
|
222
|
+
return { Shield360, appLogsEnabled };
|
|
223
|
+
}
|
|
224
|
+
it('leaves application logs off by default', async () => {
|
|
225
|
+
const { Shield360, appLogsEnabled } = await load();
|
|
226
|
+
Shield360.init({ disableMetrics: true, disableEvents: true });
|
|
227
|
+
expect(appLogsEnabled()).toBe(false);
|
|
228
|
+
expect(exporterArgs).not.toHaveBeenCalled();
|
|
229
|
+
});
|
|
230
|
+
it('sends to <SHIELD360_URL>/api/ingest/otlp/v1/logs with the key as bearer, as traces do', async () => {
|
|
231
|
+
const { Shield360, appLogsEnabled } = await load();
|
|
232
|
+
Shield360.init({
|
|
233
|
+
shield360Url: 'https://app.shield360.ai/',
|
|
234
|
+
shield360ApiKey: 'k-1',
|
|
235
|
+
captureLogs: true,
|
|
236
|
+
disableMetrics: true,
|
|
237
|
+
disableEvents: true,
|
|
238
|
+
});
|
|
239
|
+
expect(appLogsEnabled()).toBe(true);
|
|
240
|
+
expect(exporterArgs).toHaveBeenCalledWith({
|
|
241
|
+
url: 'https://app.shield360.ai/api/ingest/otlp/v1/logs',
|
|
242
|
+
headers: { Authorization: 'Bearer k-1' },
|
|
243
|
+
});
|
|
244
|
+
expect(Shield360.options.otlpEndpoint).toBe('https://app.shield360.ai/api/ingest/otlp');
|
|
245
|
+
});
|
|
246
|
+
it('turns on from SHIELD360_CAPTURE_LOGS', async () => {
|
|
247
|
+
process.env.SHIELD360_CAPTURE_LOGS = 'true';
|
|
248
|
+
process.env.SHIELD360_URL = 'https://app.shield360.ai';
|
|
249
|
+
process.env.SHIELD360_API_KEY = 'k-2';
|
|
250
|
+
const { Shield360, appLogsEnabled } = await load();
|
|
251
|
+
Shield360.init({ disableMetrics: true });
|
|
252
|
+
expect(appLogsEnabled()).toBe(true);
|
|
253
|
+
// One provider, shared by GenAI events and application logs.
|
|
254
|
+
expect(exporterArgs).toHaveBeenCalledTimes(1);
|
|
255
|
+
});
|
|
256
|
+
it('with SHIELD360_CAPTURE_STDIO takes stdout and stderr instead of console, so a line is sent once', async () => {
|
|
257
|
+
process.env.SHIELD360_CAPTURE_LOGS = 'true';
|
|
258
|
+
process.env.SHIELD360_CAPTURE_STDIO = 'true';
|
|
259
|
+
const consoleLog = console.log;
|
|
260
|
+
const stdoutWrite = process.stdout.write;
|
|
261
|
+
const { Shield360 } = await load();
|
|
262
|
+
Shield360.init({ disableMetrics: true, disableEvents: true });
|
|
263
|
+
expect(console.log).toBe(consoleLog);
|
|
264
|
+
expect(process.stdout.write).not.toBe(stdoutWrite);
|
|
265
|
+
(await Promise.resolve().then(() => __importStar(require('../log-bridges')))).releaseStdio();
|
|
266
|
+
expect(process.stdout.write).toBe(stdoutWrite);
|
|
267
|
+
});
|
|
268
|
+
});
|
|
269
|
+
//# sourceMappingURL=app-logs.test.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"app-logs.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/app-logs.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,4CAAoD;AACpD,sDAAyD;AACzD,4EAAqF;AACrF,sDAIiC;AACjC,kEAAoE;AACpE,0CAMqB;AAErB;;;GAGG;AACH,SAAS,cAAc;IACrB,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC;QAClC,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;KACzD,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC1C,OAAO,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QACvC,IAAA,yBAAc,GAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,IAAA,yBAAc,GAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;YAC3B,MAAM,CAAC,IAAA,6BAAkB,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzC,MAAM,CAAC,IAAA,6BAAkB,EAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,CAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAA,6BAAkB,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;YAC5C,MAAM,CAAC,IAAA,6BAAkB,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YACtC,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC1C,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CAAC,IAAA,0BAAe,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAC;YAC5C,MAAM,CAAC,IAAA,0BAAe,GAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,CAAC,IAAA,0BAAe,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,CAAC,IAAA,0BAAe,EAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YAChD,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,GAAG,GAAG,IAAA,uBAAY,EAAC,KAAK,CAAC,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACd,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACf,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC;gBACnD,yBAAc,CAAC,IAAI;gBACnB,yBAAc,CAAC,KAAK;gBACpB,yBAAc,CAAC,KAAK;aACrB,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;QAChE,IAAA,uBAAY,EAAC,UAAU,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,yBAAc,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,IAAA,uBAAY,GAAE,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9D,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACjF,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;QAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAA,uBAAY,GAAE,CAAC;QAC3B,IAAA,yBAAc,GAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,cAAc,GAAG,IAAI,qDAA+B,EAAE,CAAC,MAAM,EAAE,CAAC;QACtE,aAAO,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,CAAC;YAChD,IAAA,wBAAa,EAAC,QAAQ,CAAC,CAAC;YACxB,MAAM,MAAM,GAAG,IAAI,oCAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,MAAM,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBACtC,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC;gBACrC,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC;gBACnC,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC,CAAC,CAAC;YACH,IAAA,uBAAY,GAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAE/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YAC3D,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,CAAC,WAAK,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,CAAC;gBAAS,CAAC;YACT,aAAO,CAAC,OAAO,EAAE,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,IAAI,YAAuB,CAAC;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,YAAY,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI;YACjB,wBAAwB;YACxB,yBAAyB;YACzB,qBAAqB;YACrB,6BAA6B;YAC7B,4BAA4B;YAC5B,oBAAoB;YACpB,eAAe;YACf,mBAAmB;SACpB,EAAE,CAAC;YACF,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,0EAA0E;QAC1E,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,IAAI,CAAC,MAAM,CAAC,wCAAwC,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3D,eAAe,EAAE;gBACf,YAAY,MAAe;oBACzB,YAAY,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;gBACD,MAAM,CAAC,QAAiB,EAAE,IAAmC;oBAC3D,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpB,CAAC;gBACD,QAAQ;oBACN,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;gBACD,UAAU;oBACR,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;aACF;SACF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,mEAAmE;QACnE,MAAM,OAAO,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAC/C,OAAO,CAAC,cAAc,EAAE,CAAC;QACzB,OAAO,CAAC,YAAY,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,CAAC,wCAAwC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,KAAK,UAAU,IAAI;QACjB,MAAM,EAAE,IAAI,EAAE,GAAG,wDAAa,yBAAyB,GAAC,CAAC;QACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;QAC3D,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,aAAa,GAAC,CAAC;QACvD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;IACvC,CAAC;IAED,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC;YACb,YAAY,EAAE,2BAA2B;YACzC,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,IAAI;YACjB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,IAAI;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,CAAC;YACxC,GAAG,EAAE,kDAAkD;YACvD,OAAO,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,0BAA0B,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,KAAK,CAAC;QACtC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnD,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,6DAA6D;QAC7D,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,MAAM,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,MAAM,CAAC;QAC7C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;QAC/B,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC,wDAAa,gBAAgB,GAAC,CAAC,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export {};
|