shield360 1.0.1 → 1.2.0

package/dist/otel/__tests__/log-auto.test.js

@@ -0,0 +1,125 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const stream_1 = require("stream");
+const api_logs_1 = require("@opentelemetry/api-logs");
+const sdk_logs_1 = require("@opentelemetry/sdk-logs");
+const app_logs_1 = require("../app-logs");
+const log_auto_1 = require("../log-auto");
+/**
+ * With application logs on, winston and pino loggers the app creates also
+ * write to Shield360, through the real libraries, without changing their own
+ * output; with them off, loggers are created exactly as before.
+ */
+function memory() {
+    const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
+    const provider = new sdk_logs_1.LoggerProvider({ processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })] });
+    return { exporter, provider };
+}
+function sink() {
+    const lines = [];
+    const stream = new stream_1.Writable({
+        write(chunk, _enc, done) {
+            lines.push(String(chunk));
+            done();
+        },
+    });
+    return { lines, stream };
+}
+describe('winston and pino auto bridges', () => {
+    let exporter;
+    beforeEach(() => {
+        const m = memory();
+        exporter = m.exporter;
+        (0, app_logs_1.enableAppLogs)(m.provider, 'info', { captureCodeLocation: false });
+    });
+    afterEach(() => (0, app_logs_1.disableAppLogs)());
+    it('adds the Shield360 transport to winston loggers and keeps their own transports', () => {
+        jest.isolateModules(() => {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const winston = (0, log_auto_1.patchWinston)(require('winston'));
+            try {
+                const own = sink();
+                const logger = winston.createLogger({
+                    level: 'info',
+                    transports: [new winston.transports.Stream({ stream: own.stream })],
+                });
+                logger.info('order placed', { orderId: 'o-1' });
+                logger.warn('api key=k3j4h5g6f7d8s9a0q1w2e3r4 used');
+                logger.debug('below the level');
+                expect(logger.transports).toHaveLength(2);
+                expect(own.lines).toHaveLength(2);
+                const records = exporter.getFinishedLogRecords();
+                expect(records.map((r) => r.body)).toEqual(['order placed', 'api *** used']);
+                expect(records[0].attributes).toEqual({ orderId: 'o-1' });
+                expect(records[1].severityNumber).toBe(api_logs_1.SeverityNumber.WARN);
+                expect(records[0].instrumentationScope.name).toBe('winston');
+                // Patching twice is a no-op; unpatching restores createLogger.
+                expect((0, log_auto_1.patchWinston)(winston).createLogger).toBe(winston.createLogger);
+            }
+            finally {
+                (0, log_auto_1.unpatchWinston)(winston);
+            }
+            const plain = winston.createLogger({ transports: [new winston.transports.Stream({ stream: sink().stream })] });
+            expect(plain.transports).toHaveLength(1);
+        });
+    });
+    it('creates winston loggers unchanged while application logs are off', () => {
+        (0, app_logs_1.disableAppLogs)();
+        jest.isolateModules(() => {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const winston = (0, log_auto_1.patchWinston)(require('winston'));
+            const logger = winston.createLogger({ transports: [new winston.transports.Stream({ stream: sink().stream })] });
+            expect(logger.transports).toHaveLength(1);
+            (0, log_auto_1.unpatchWinston)(winston);
+        });
+    });
+    it('writes pino records to the destination and to Shield360', () => {
+        jest.isolateModules(() => {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const pino = (0, log_auto_1.patchPino)(require('pino'));
+            expect(pino.default).toBe(pino);
+            expect(typeof pino.destination).toBe('function');
+            const own = sink();
+            const logger = pino({ level: 'info' }, own.stream);
+            logger.info({ orderId: 'o-1' }, 'order placed');
+            logger.error(new Error('session=xyz expired'));
+            logger.debug('below the level');
+            expect(own.lines).toHaveLength(2);
+            expect(JSON.parse(own.lines[0]).msg).toBe('order placed');
+            const records = exporter.getFinishedLogRecords();
+            expect(records.map((r) => r.body)).toEqual(['order placed', 'session=*** expired']);
+            expect(records[0].attributes).toEqual({ orderId: 'o-1' });
+            expect(records[1].severityNumber).toBe(api_logs_1.SeverityNumber.ERROR);
+            expect(records[1].attributes['exception.message']).toBe('session=*** expired');
+            // pino(stream) works too.
+            const second = sink();
+            pino(second.stream).warn('disk slow');
+            expect(second.lines).toHaveLength(1);
+            expect(exporter.getFinishedLogRecords().map((r) => r.body)).toContain('disk slow');
+        });
+    });
+    it('creates pino loggers unchanged while application logs are off', () => {
+        (0, app_logs_1.disableAppLogs)();
+        jest.isolateModules(() => {
+            // eslint-disable-next-line @typescript-eslint/no-require-imports
+            const pino = (0, log_auto_1.patchPino)(require('pino'));
+            const own = sink();
+            pino(own.stream).info('x');
+            expect(own.lines).toHaveLength(1);
+            expect(exporter.getFinishedLogRecords()).toHaveLength(0);
+        });
+    });
+    it('leaves pino arguments it cannot bridge alone', () => {
+        const fake = Object.assign(() => undefined, { multistream: () => ({ write: () => true }), destination: () => ({ write: () => true }) });
+        expect((0, log_auto_1.bridgePinoArgs)(fake, [{}, { write: () => true }, 'extra'])).toBeNull();
+        expect((0, log_auto_1.bridgePinoArgs)(fake, ['/var/log/app.log'])).not.toBeNull(); // pino('path'): a file destination
+        expect((0, log_auto_1.bridgePinoArgs)(fake, [{ transport: { target: 'x' } }, { write: () => true }])).toBeNull();
+        expect((0, log_auto_1.bridgePinoArgs)(fake, [[1, 2]])).toBeNull();
+    });
+    it('never throws from a broken module', () => {
+        expect((0, log_auto_1.patchWinston)(undefined)).toBeUndefined();
+        expect((0, log_auto_1.patchWinston)({ createLogger: 'nope' })).toEqual({ createLogger: 'nope' });
+        expect((0, log_auto_1.patchPino)({})).toEqual({});
+    });
+});
+//# sourceMappingURL=log-auto.test.js.map

package/dist/otel/__tests__/log-auto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-auto.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/log-auto.test.ts"],"names":[],"mappings":";;AAAA,mCAAkC;AAClC,sDAAyD;AACzD,sDAA8G;AAC9G,0CAA4D;AAC5D,0CAAsF;AAEtF;;;;GAIG;AACH,SAAS,MAAM;IACb,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,IAAI;IACX,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,iBAAQ,CAAC;QAC1B,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI;YACrB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1B,IAAI,EAAE,CAAC;QACT,CAAC;KACF,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAC3B,CAAC;AAED,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,IAAI,QAAmC,CAAC;IACxC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACtB,IAAA,wBAAa,EAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE,CAAC,IAAA,yBAAc,GAAE,CAAC,CAAC;IAElC,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,iEAAiE;YACjE,MAAM,OAAO,GAAG,IAAA,uBAAY,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;gBACnB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;oBAClC,KAAK,EAAE,MAAM;oBACb,UAAU,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;iBACpE,CAAC,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAChD,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBACrD,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAC1C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;gBACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC;gBAC7E,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,yBAAc,CAAC,IAAI,CAAC,CAAC;gBAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7D,+DAA+D;gBAC/D,MAAM,CAAC,IAAA,uBAAY,EAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC;oBAAS,CAAC;gBACT,IAAA,yBAAc,EAAC,OAAO,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/G,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,IAAA,yBAAc,GAAE,CAAC;QACjB,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,iEAAiE;YACjE,MAAM,OAAO,GAAG,IAAA,uBAAY,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChH,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAA,yBAAc,EAAC,OAAO,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,iEAAiE;YACjE,MAAM,IAAI,GAAG,IAAA,oBAAS,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,cAAc,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC,CAAC;YACpF,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,yBAAc,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC/E,0BAA0B;YAC1B,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,IAAA,yBAAc,GAAE,CAAC;QACjB,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE;YACvB,iEAAiE;YACjE,MAAM,IAAI,GAAG,IAAA,oBAAS,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACxC,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;QACxI,MAAM,CAAC,IAAA,yBAAc,EAAC,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAA,yBAAc,EAAC,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,mCAAmC;QACtG,MAAM,CAAC,IAAA,yBAAc,EAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjG,MAAM,CAAC,IAAA,yBAAc,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,IAAA,uBAAY,EAAC,SAAS,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAChD,MAAM,CAAC,IAAA,uBAAY,EAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,IAAA,oBAAS,EAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/otel/__tests__/log-bridges.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/otel/__tests__/log-bridges.test.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const api_logs_1 = require("@opentelemetry/api-logs");
+const sdk_logs_1 = require("@opentelemetry/sdk-logs");
+const app_logs_1 = require("../app-logs");
+const log_bridges_1 = require("../log-bridges");
+/**
+ * pino, winston and console reach Shield360 only when application logs are
+ * on, with their levels mapped, errors as exception attributes, and never
+ * feeding back into themselves.
+ */
+function memory() {
+    const exporter = new sdk_logs_1.InMemoryLogRecordExporter();
+    const provider = new sdk_logs_1.LoggerProvider({ processors: [new sdk_logs_1.SimpleLogRecordProcessor({ exporter })] });
+    return { exporter, provider };
+}
+describe('logger bridges', () => {
+    let exporter;
+    beforeEach(() => {
+        const m = memory();
+        exporter = m.exporter;
+        (0, app_logs_1.enableAppLogs)(m.provider, 'debug', { captureCodeLocation: false });
+    });
+    afterEach(() => {
+        (0, log_bridges_1.releaseConsole)();
+        (0, log_bridges_1.releaseStdio)();
+        (0, app_logs_1.disableAppLogs)();
+    });
+    describe('stdout and stderr', () => {
+        // Fake streams, so the test runner's own output is never part of the test.
+        function fakeStream() {
+            const written = [];
+            const stream = {
+                write(chunk, encoding, callback) {
+                    written.push(typeof chunk === 'string' ? chunk : Buffer.from(chunk).toString('utf8'));
+                    if (typeof encoding === 'function')
+                        encoding();
+                    else if (typeof callback === 'function')
+                        callback();
+                    return true;
+                },
+            };
+            return { stream, written };
+        }
+        it('turns JSON log lines into records with their level, message, fields and error, still writing them', () => {
+            const out = fakeStream();
+            const err = fakeStream();
+            (0, log_bridges_1.captureStdio)({ stdout: out.stream, stderr: err.stream });
+            const line = JSON.stringify({ time: '2026-10-30T00:00:00Z', level: 'info', msg: 'request', service: 'api', requestId: 'r-1', status: 200 });
+            expect(out.stream.write(line + '\n')).toBe(true);
+            err.stream.write(JSON.stringify({ level: 'error', msg: 'tick failed', err: { name: 'TypeError', message: 'boom', stack: 'TypeError: boom\n at x' } }) + '\n');
+            const records = exporter.getFinishedLogRecords();
+            expect(records.map((r) => [r.body, r.severityNumber])).toEqual([
+                ['request', api_logs_1.SeverityNumber.INFO],
+                ['tick failed', api_logs_1.SeverityNumber.ERROR],
+            ]);
+            expect(records[0].attributes).toEqual({ service: 'api', requestId: 'r-1', status: 200 });
+            expect(records[1].attributes).toMatchObject({ 'exception.type': 'TypeError', 'exception.message': 'boom' });
+            expect(records[0].instrumentationScope.name).toBe('stdout');
+            expect(records[1].instrumentationScope.name).toBe('stderr');
+            expect(out.written).toEqual([line + '\n']);
+        });
+        it('joins lines split across writes, takes plain lines as text, and passes callbacks through', () => {
+            const out = fakeStream();
+            const err = fakeStream();
+            (0, log_bridges_1.captureStdio)({ stdout: out.stream, stderr: err.stream });
+            out.stream.write('{"level":"warn","message":"slow ');
+            out.stream.write('query"}\nplain text line\n');
+            err.stream.write(Buffer.from('something broke\n'));
+            const done = jest.fn();
+            out.stream.write('', done);
+            expect(done).toHaveBeenCalledTimes(1);
+            expect(exporter.getFinishedLogRecords().map((r) => [r.body, r.severityNumber])).toEqual([
+                ['slow query', api_logs_1.SeverityNumber.WARN],
+                ['plain text line', api_logs_1.SeverityNumber.INFO],
+                ['something broke', api_logs_1.SeverityNumber.ERROR],
+            ]);
+        });
+        it('masks credentials, never captures the pipeline\'s own output, and puts the streams back on release', () => {
+            const out = fakeStream();
+            const err = fakeStream();
+            const write = out.stream.write;
+            (0, log_bridges_1.captureStdio)({ stdout: out.stream, stderr: err.stream });
+            out.stream.write(JSON.stringify({ level: 'info', msg: 'login', password: 'hunter2-secret' }) + '\n');
+            err.stream.write('OTLPExporterError: Bad Request\n');
+            const records = exporter.getFinishedLogRecords();
+            expect(records).toHaveLength(1);
+            expect(JSON.stringify(records[0].attributes)).not.toContain('hunter2-secret');
+            (0, log_bridges_1.releaseStdio)();
+            expect(out.stream.write).toBe(write);
+            out.stream.write('after release\n');
+            expect(exporter.getFinishedLogRecords()).toHaveLength(1);
+        });
+    });
+    it('turns pino JSON lines into records, with levels, attributes and errors', () => {
+        const stream = (0, log_bridges_1.pinoStream)();
+        stream.write(JSON.stringify({ level: 30, time: 1, msg: 'order placed', orderId: 'o-1', pid: 1, hostname: 'h' }) + '\n');
+        stream.write(JSON.stringify({ level: 50, msg: 'payment failed', err: { type: 'TypeError', message: 'boom', stack: 'TypeError: boom\n at x' } }) + '\n');
+        const records = exporter.getFinishedLogRecords();
+        expect(records.map((r) => [r.body, r.severityNumber])).toEqual([
+            ['order placed', api_logs_1.SeverityNumber.INFO],
+            ['payment failed', api_logs_1.SeverityNumber.ERROR],
+        ]);
+        expect(records[0].attributes).toEqual({ orderId: 'o-1' });
+        expect(records[1].attributes).toMatchObject({ 'exception.type': 'TypeError', 'exception.message': 'boom' });
+        expect(records[0].instrumentationScope.name).toBe('pino');
+        expect((0, log_bridges_1.pinoLevel)(60)).toBe('fatal');
+        expect((0, log_bridges_1.pinoLevel)(10)).toBe('debug');
+    });
+    it('builds a winston transport on the app\'s own Transport class', () => {
+        class FakeTransport {
+            constructor(options) {
+                this.options = options;
+                this.emitted = [];
+            }
+            emit(event) {
+                this.emitted.push(event);
+                return true;
+            }
+        }
+        const Transport = (0, log_bridges_1.winstonTransport)(FakeTransport);
+        const t = new Transport();
+        const done = jest.fn();
+        t.log({ level: 'warn', message: 'disk slow', [Symbol.for('level')]: 'warn', route: '/checkout' }, done);
+        expect(done).toHaveBeenCalled();
+        const record = exporter.getFinishedLogRecords()[0];
+        expect(record.body).toBe('disk slow');
+        expect(record.severityNumber).toBe(api_logs_1.SeverityNumber.WARN);
+        expect(record.attributes).toEqual({ route: '/checkout' });
+        expect((0, log_bridges_1.winstonLevel)('emerg')).toBe('fatal');
+    });
+    it('copies console output, still printing it, and stops on release', () => {
+        const printed = [];
+        const real = console.warn;
+        console.warn = (...args) => void printed.push(args);
+        try {
+            (0, log_bridges_1.captureConsole)();
+            console.warn('cache miss', { key: 'k' });
+            console.warn(new Error('kaput'));
+            (0, log_bridges_1.releaseConsole)();
+            console.warn('after release');
+        }
+        finally {
+            console.warn = real;
+        }
+        expect(printed).toHaveLength(3);
+        const records = exporter.getFinishedLogRecords();
+        expect(records.map((r) => r.body)).toEqual(['cache miss {"key":"k"}', 'kaput']);
+        expect(records[1].attributes).toMatchObject({ 'exception.message': 'kaput' });
+    });
+    it('never captures the telemetry pipeline\'s own messages, and caps records per second', () => {
+        const stream = (0, log_bridges_1.pinoStream)({ maxPerSecond: 2 });
+        stream.write(JSON.stringify({ level: 50, msg: 'OTLPExporterError: Bad Request' }));
+        stream.write(JSON.stringify({ level: 30, msg: '@opentelemetry/api: Registered a global' }));
+        for (let i = 0; i < 5; i++)
+            stream.write(JSON.stringify({ level: 30, msg: `m${i}` }));
+        expect(exporter.getFinishedLogRecords().map((r) => r.body)).toEqual(['m0', 'm1']);
+        let t = 0;
+        const allow = (0, log_bridges_1.createLimiter)(1, () => t);
+        expect([allow(), allow()]).toEqual([true, false]);
+        t = 1000;
+        expect(allow()).toBe(true);
+    });
+    it('sends nothing while application logs are off', () => {
+        (0, app_logs_1.disableAppLogs)();
+        (0, log_bridges_1.pinoStream)().write(JSON.stringify({ level: 30, msg: 'x' }));
+        expect(exporter.getFinishedLogRecords()).toHaveLength(0);
+    });
+});
+//# sourceMappingURL=log-bridges.test.js.map

package/dist/otel/__tests__/log-bridges.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-bridges.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/log-bridges.test.ts"],"names":[],"mappings":";;AAAA,sDAAyD;AACzD,sDAA8G;AAC9G,0CAA4D;AAC5D,gDAAkK;AAElK;;;;GAIG;AACH,SAAS,MAAM;IACb,MAAM,QAAQ,GAAG,IAAI,oCAAyB,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,yBAAc,CAAC,EAAE,UAAU,EAAE,CAAC,IAAI,mCAAwB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,QAAmC,CAAC;IACxC,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC;QACnB,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QACtB,IAAA,wBAAa,EAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,GAAG,EAAE;QACb,IAAA,4BAAc,GAAE,CAAC;QACjB,IAAA,0BAAY,GAAE,CAAC;QACf,IAAA,yBAAc,GAAE,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACjC,2EAA2E;QAC3E,SAAS,UAAU;YACjB,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG;gBACb,KAAK,CAAC,KAA0B,EAAE,QAAkB,EAAE,QAAkB;oBACtE,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBACtF,IAAI,OAAO,QAAQ,KAAK,UAAU;wBAAG,QAAuB,EAAE,CAAC;yBAC1D,IAAI,OAAO,QAAQ,KAAK,UAAU;wBAAG,QAAuB,EAAE,CAAC;oBACpE,OAAO,IAAI,CAAC;gBACd,CAAC;aACF,CAAC;YACF,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QAC7B,CAAC;QAED,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;YAC3G,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,IAAA,0BAAY,EAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5I,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YAC9J,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBAC7D,CAAC,SAAS,EAAE,yBAAc,CAAC,IAAI,CAAC;gBAChC,CAAC,aAAa,EAAE,yBAAc,CAAC,KAAK,CAAC;aACtC,CAAC,CAAC;YACH,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACzF,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5G,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC5D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0FAA0F,EAAE,GAAG,EAAE;YAClG,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,IAAA,0BAAY,EAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC/C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC;YACnD,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;gBACtF,CAAC,YAAY,EAAE,yBAAc,CAAC,IAAI,CAAC;gBACnC,CAAC,iBAAiB,EAAE,yBAAc,CAAC,IAAI,CAAC;gBACxC,CAAC,iBAAiB,EAAE,yBAAc,CAAC,KAAK,CAAC;aAC1C,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,oGAAoG,EAAE,GAAG,EAAE;YAC5G,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/B,IAAA,0BAAY,EAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,MAAM,EAAE,GAAG,CAAC,MAAe,EAAE,CAAC,CAAC;YAC3E,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;YACrG,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;YACjD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;YAC9E,IAAA,0BAAY,GAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACxH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACxJ,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,CAAC,cAAc,EAAE,yBAAc,CAAC,IAAI,CAAC;YACrC,CAAC,gBAAgB,EAAE,yBAAc,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5G,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAA,uBAAS,EAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAA,uBAAS,EAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,aAAa;YAEjB,YAAmB,OAAiC;gBAAjC,YAAO,GAAP,OAAO,CAA0B;gBADpD,YAAO,GAAa,EAAE,CAAC;YACgC,CAAC;YACxD,IAAI,CAAC,KAAa;gBAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzB,OAAO,IAAI,CAAC;YACd,CAAC;SACF;QACD,MAAM,SAAS,GAAG,IAAA,8BAAgB,EAAC,aAAa,CAAC,CAAC;QAClD,MAAM,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,EAAE,EAAE,CAAC;QACvB,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,yBAAc,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAA,0BAAY,EAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,OAAO,GAAgB,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,CAAC;YACH,IAAA,4BAAc,GAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACzC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,IAAA,4BAAc,GAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;QACtB,CAAC;QACD,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACjD,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,MAAM,GAAG,IAAA,wBAAU,EAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,yCAAyC,EAAE,CAAC,CAAC,CAAC;QAC5F,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,MAAM,KAAK,GAAG,IAAA,2BAAa,EAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAClD,CAAC,GAAG,IAAI,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,IAAA,yBAAc,GAAE,CAAC;QACjB,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/otel/__tests__/system-metrics.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/otel/__tests__/system-metrics.test.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const sdk_metrics_1 = require("@opentelemetry/sdk-metrics");
+const system_metrics_1 = require("../system-metrics");
+/**
+ * Host and process metrics are opt-in, named the way Shield360's
+ * Infrastructure view reads them, and never throw into the application.
+ */
+class TestReader extends sdk_metrics_1.MetricReader {
+    constructor() {
+        super({ aggregationTemporalitySelector: (_t) => sdk_metrics_1.AggregationTemporality.CUMULATIVE });
+    }
+    async onForceFlush() { }
+    async onShutdown() { }
+}
+describe('system metrics', () => {
+    const originalEnv = process.env;
+    beforeEach(() => {
+        process.env = { ...originalEnv };
+        delete process.env.SHIELD360_COLLECT_SYSTEM_METRICS;
+    });
+    afterAll(() => {
+        process.env = originalEnv;
+    });
+    it('is off unless asked for', () => {
+        expect((0, system_metrics_1.resolveCollectSystemMetrics)()).toBe(false);
+        process.env.SHIELD360_COLLECT_SYSTEM_METRICS = 'true';
+        expect((0, system_metrics_1.resolveCollectSystemMetrics)()).toBe(true);
+        expect((0, system_metrics_1.resolveCollectSystemMetrics)(false)).toBe(false);
+    });
+    it('computes CPU busy from two samples', () => {
+        expect((0, system_metrics_1.cpuBusy)({ idle: 100, total: 200 }, { idle: 150, total: 400 })).toBeCloseTo(0.75);
+        expect((0, system_metrics_1.cpuBusy)({ idle: 1, total: 1 }, { idle: 1, total: 1 })).toBeNull();
+    });
+    it('exports the gauges with host.name, skipping readings that are not available', async () => {
+        const reader = new TestReader();
+        const provider = new sdk_metrics_1.MeterProvider({ readers: [reader] });
+        const sampler = {
+            host: () => 0.42,
+            process: () => null,
+            memory: () => ({ used: 3, total: 4 }),
+            rss: () => 123,
+            loopDelaySeconds: () => 0.015,
+            stop: jest.fn(),
+        };
+        (0, system_metrics_1.setupSystemMetrics)(provider.getMeter('test'), sampler);
+        const { resourceMetrics } = await reader.collect();
+        const metrics = resourceMetrics.scopeMetrics.flatMap((s) => s.metrics);
+        const value = (name) => metrics.find((m) => m.descriptor.name === name)?.dataPoints[0];
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.systemCpu)?.value).toBeCloseTo(0.42);
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.systemMemoryUtilization)?.value).toBeCloseTo(0.75);
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.systemMemoryUsage)?.attributes).toMatchObject({ state: 'used' });
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.processMemory)?.value).toBe(123);
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.eventLoopDelay)?.value).toBeCloseTo(0.015);
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.processCpu)).toBeUndefined();
+        expect(value(system_metrics_1.SYSTEM_METRIC_NAMES.systemCpu)?.attributes['host.name']).toBeTruthy();
+        await provider.shutdown();
+    });
+    it('keeps a failing sampler from throwing', async () => {
+        const reader = new TestReader();
+        const provider = new sdk_metrics_1.MeterProvider({ readers: [reader] });
+        const boom = () => {
+            throw new Error('no');
+        };
+        (0, system_metrics_1.setupSystemMetrics)(provider.getMeter('test'), { host: boom, process: boom, memory: boom, rss: boom, loopDelaySeconds: boom });
+        await expect(reader.collect()).resolves.toBeDefined();
+        await provider.shutdown();
+    });
+    it('samples Node itself', () => {
+        const sampler = (0, system_metrics_1.nodeSampler)();
+        expect(sampler.memory().total).toBeGreaterThan(0);
+        expect(sampler.rss()).toBeGreaterThan(0);
+        sampler.host();
+        const busy = sampler.host();
+        expect(busy === null || (busy >= 0 && busy <= 1)).toBe(true);
+        sampler.stop();
+    });
+});
+//# sourceMappingURL=system-metrics.test.js.map

package/dist/otel/__tests__/system-metrics.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-metrics.test.js","sourceRoot":"","sources":["../../../src/otel/__tests__/system-metrics.test.ts"],"names":[],"mappings":";;AAAA,4DAAiH;AACjH,sDAA+H;AAE/H;;;GAGG;AACH,MAAM,UAAW,SAAQ,0BAAY;IACnC;QACE,KAAK,CAAC,EAAE,8BAA8B,EAAE,CAAC,EAAkB,EAAE,EAAE,CAAC,oCAAsB,CAAC,UAAU,EAAE,CAAC,CAAC;IACvG,CAAC;IACS,KAAK,CAAC,YAAY,KAAmB,CAAC;IACtC,KAAK,CAAC,UAAU,KAAmB,CAAC;CAC/C;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAChC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,CAAC,GAAG,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,QAAQ,CAAC,GAAG,EAAE;QACZ,OAAO,CAAC,GAAG,GAAG,WAAW,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,IAAA,4CAA2B,GAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,gCAAgC,GAAG,MAAM,CAAC;QACtD,MAAM,CAAC,IAAA,4CAA2B,GAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,IAAA,4CAA2B,EAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,IAAA,wBAAO,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACxF,MAAM,CAAC,IAAA,wBAAO,EAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,2BAAa,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;YAChB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI;YACnB,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACrC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG;YACd,gBAAgB,EAAE,GAAG,EAAE,CAAC,KAAK;YAC7B,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE;SAChB,CAAC;QACF,IAAA,mCAAkB,EAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QACnD,MAAM,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;QAC/F,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,uBAAuB,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,iBAAiB,CAAC,EAAE,UAAU,CAAC,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClE,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,oCAAmB,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;QACnF,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,2BAAa,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,IAAA,mCAAkB,EAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAW,CAAC,CAAC;QACvI,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtD,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,OAAO,GAAG,IAAA,4BAAW,GAAE,CAAC;QAC9B,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/otel/app-logs.d.ts

@@ -0,0 +1,80 @@
+/**
+ * Application logs to Shield360, when asked for.
+ *
+ * Shield360 ingests OTLP logs on the same per-API-key route as traces. The
+ * logger here writes OpenTelemetry log records through the SDK's own
+ * LoggerProvider (otel/events.ts), so they go to the same destination with the
+ * same Authorization header as the spans, and carry the trace and span ids of
+ * whatever span is active when they are written.
+ *
+ * Nothing is sent unless it is turned on: `captureLogs: true` in init(), or
+ * SHIELD360_CAPTURE_LOGS=true. Until then every logger is a no-op, so a
+ * library can create one at import time without deciding for the application.
+ *
+ * Every record, from Shield360.logger() or a bridge (log-bridges.ts), passes
+ * the same checks as the Python SDK's handler: the level; never the SDK's own
+ * scopes (`shield360`, `opentelemetry`); at most `maxPerSecond` records a
+ * second per logger (500 by default); masking by the contract every SDK
+ * shares (sdk/rasp/README.md, "Masking"): credential pairs, bearer
+ * credentials and opaque tokens in the body and attributes, the whole value of
+ * an attribute named like a credential, lists and maps item by item, readable
+ * identifiers kept (not `code.*` or `exception.type`); the body and stack
+ * trace cut to 16,384 characters after masking, other strings to 4,096; and
+ * the application call site as `code.function.name`,
+ * `code.file.path` and `code.line.number` unless captureCodeLocation is off.
+ */
+import { LogAttributes } from '@opentelemetry/api-logs';
+export type LogLevel = 'debug' | 'info' | 'warn' | 'error' | 'fatal';
+export interface Shield360Logger {
+    debug(message: string | Error, attributes?: LogAttributes): void;
+    info(message: string | Error, attributes?: LogAttributes): void;
+    warn(message: string | Error, attributes?: LogAttributes): void;
+    error(message: string | Error, attributes?: LogAttributes): void;
+    fatal(message: string | Error, attributes?: LogAttributes): void;
+}
+interface ProviderLike {
+    getLogger(name: string): {
+        emit(record: Record<string, unknown>): void;
+    };
+}
+export declare const DEFAULT_LOG_LEVEL: LogLevel;
+export declare const DEFAULT_LOGGER_NAME = "app";
+export declare const DEFAULT_MAX_PER_SECOND = 500;
+export declare const MAX_BODY_LENGTH = 16384;
+export declare const MAX_ATTRIBUTE_LENGTH = 4096;
+export type AppLogsOptions = {
+    /** Record the application call site (code.*). Default true. */
+    captureCodeLocation?: boolean;
+    /** Directory code.file.path is made relative to (init()'s codeRoot). */
+    codeRoot?: string;
+};
+export type LoggerOptions = {
+    /** Records per second at most (default 500); the rest are dropped. */
+    maxPerSecond?: number;
+};
+/** A fixed-window limiter: true for at most `maxPerSecond` calls in each second. */
+export declare function createLimiter(maxPerSecond?: number, now?: () => number): () => boolean;
+/** Whether a scope is the SDK's own (`shield360`, `opentelemetry`, or below them). */
+export declare function isOwnScope(name: string): boolean;
+/**
+ * An attribute value as it may leave the process (sdk/rasp/README.md, Masking):
+ * the whole value under a credential name, strings masked then cut, lists and
+ * maps item by item; code.* and exception.type as they are.
+ */
+export declare function maskAttribute(key: string, value: unknown): unknown;
+/** The option, else SHIELD360_CAPTURE_LOGS, else off. */
+export declare function resolveCaptureLogs(option?: boolean): boolean;
+/** The option, else SHIELD360_LOG_LEVEL, else `info`. Unknown names fall back to `info`. */
+export declare function resolveLogLevel(option?: string): LogLevel;
+/** Start sending: records at `level` and above go through `logProvider`. */
+export declare function enableAppLogs(logProvider: ProviderLike, level?: LogLevel, options?: AppLogsOptions): void;
+/** Stop sending; every logger goes back to a no-op. */
+export declare function disableAppLogs(): void;
+export declare function appLogsEnabled(): boolean;
+/**
+ * A logger whose records go to Shield360 when application logs are on
+ * (`captureLogs: true` or SHIELD360_CAPTURE_LOGS=true), and nowhere otherwise.
+ * `name` becomes the record's instrumentation scope; it defaults to `app`.
+ */
+export declare function createLogger(name?: string, options?: LoggerOptions): Shield360Logger;
+export {};