stitchkit 0.41.0 → 0.43.0

package/dist/{index-sc67e454.js → index-gex6gxhe.js}

@@ -121,6 +121,9 @@ function mergeMeta(contractMeta, endpointMeta) {
     return { ...contractMeta };
   return { ...contractMeta, ...endpointMeta };
 }
+// src/contract/errors-factory.ts
+import { z as z2 } from "zod";
+
 // src/internal/typed.ts
 function typedEntries(value) {
   return Object.entries(value);
@@ -129,7 +132,7 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 // src/contract/pagination.ts
-import { z as z2 } from "zod";
+import { z as z3 } from "zod";
 
 // src/internal/base64url.ts
 function bytesToBase64Url(bytes) {
@@ -147,7 +150,7 @@ function base64UrlToBytes(segment) {
   return Uint8Array.from(atob(padded), (c) => c.charCodeAt(0));
 }
 // src/internal/errors.ts
-import { z as z3 } from "zod";
+import { z as z4 } from "zod";
 function issuePath(path) {
   return path.length > 0 ? path.map(String).join(".") : "(root)";
 }
@@ -170,7 +173,7 @@ var MAX_DETAIL_ISSUES = 20;
 function errorCode(err) {
   if (AppError.is(err))
     return err.code;
-  if (err instanceof z3.ZodError)
+  if (err instanceof z4.ZodError)
     return "VALIDATION_ERROR";
   return;
 }
@@ -186,7 +189,7 @@ function recordedErrorMessage(code, envelopeMessage, thrown) {
 function normalizeError(err) {
   if (AppError.is(err))
     return err;
-  if (err instanceof z3.ZodError) {
+  if (err instanceof z4.ZodError) {
     return new AppError("VALIDATION_ERROR", formatZodError(err), 400, {
       issues: zodIssues(err).slice(0, MAX_DETAIL_ISSUES)
     });

package/dist/{index-ncqqn1bc.js → index-h2wdcsby.js}

@@ -17,7 +17,7 @@ import {
   runWithRequestContext,
   safeJsonParse,
   validateDeclaredOutput
-} from "./index-sc67e454.js";
+} from "./index-gex6gxhe.js";
 
 // src/tools/coerce.ts
 import { z } from "zod";
@@ -165,22 +165,97 @@ function stringValues(schema) {
   const values = schema.enum.filter((value) => typeof value === "string");
   return values.length === schema.enum.length ? values : null;
 }
+var JSON_SCHEMA_TYPE_ORDER = [
+  "string",
+  "number",
+  "integer",
+  "boolean",
+  "object",
+  "array",
+  "null"
+];
+function jsonSchemaType(value) {
+  switch (value) {
+    case "array":
+    case "boolean":
+    case "integer":
+    case "null":
+    case "number":
+    case "object":
+    case "string":
+      return value;
+    default:
+      return null;
+  }
+}
+function valueType(value) {
+  if (value === null)
+    return "null";
+  if (Array.isArray(value))
+    return "array";
+  if (isRecord(value))
+    return "object";
+  if (typeof value === "string")
+    return "string";
+  if (typeof value === "number")
+    return "number";
+  if (typeof value === "boolean")
+    return "boolean";
+  return null;
+}
+function normalizeTypes(types) {
+  const normalized = new Set(types);
+  if (normalized.has("number"))
+    normalized.delete("integer");
+  return JSON_SCHEMA_TYPE_ORDER.filter((type) => normalized.has(type));
+}
+function combinedBranchTypes(schema) {
+  for (const keyword of ["oneOf", "anyOf"]) {
+    const value = schema[keyword];
+    if (!Array.isArray(value) || value.length === 0)
+      continue;
+    const collected = [];
+    for (const branch of value) {
+      if (!isRecord(branch))
+        return null;
+      const types = typeNames(branch);
+      if (!types)
+        return null;
+      collected.push(...types);
+    }
+    return normalizeTypes(collected);
+  }
+  return null;
+}
 function typeNames(schema) {
-  if (typeof schema.type === "string")
-    return [schema.type];
+  const direct = jsonSchemaType(schema.type);
+  if (direct)
+    return [direct];
   if (Array.isArray(schema.type)) {
-    const values2 = schema.type.filter((value) => typeof value === "string");
-    if (values2.length === schema.type.length)
-      return values2;
-  }
-  const values = stringValues(schema);
-  if (values)
-    return ["string"];
-  if (typeof schema.const === "number")
-    return ["number"];
-  if (typeof schema.const === "boolean")
-    return ["boolean"];
-  return null;
+    const values = [];
+    for (const value of schema.type) {
+      const type = jsonSchemaType(value);
+      if (!type)
+        return null;
+      values.push(type);
+    }
+    return values.length > 0 ? normalizeTypes(values) : null;
+  }
+  if (schema.const !== undefined) {
+    const type = valueType(schema.const);
+    return type ? [type] : null;
+  }
+  if (Array.isArray(schema.enum) && schema.enum.length > 0) {
+    const values = [];
+    for (const value of schema.enum) {
+      const type = valueType(value);
+      if (!type)
+        return null;
+      values.push(type);
+    }
+    return normalizeTypes(values);
+  }
+  return combinedBranchTypes(schema);
 }
 function typeSchema(type, nullable) {
   const schema = { type: nullable ? [type, "null"] : type };
@@ -206,6 +281,8 @@ function commonBaseType(schemas) {
         bases.add(name);
     }
   }
+  if (bases.size === 0)
+    return nullable ? { type: "null" } : {};
   if (bases.size === 1) {
     const [only] = bases;
     return only ? typeSchema(only, nullable) : {};
@@ -213,7 +290,8 @@ function commonBaseType(schemas) {
   if ([...bases].every((name) => name === "integer" || name === "number")) {
     return typeSchema("number", nullable);
   }
-  return {};
+  const types = normalizeTypes(nullable ? [...bases, "null"] : bases);
+  return types.length > 0 ? { type: types } : {};
 }
 function mergePropertySchemas(properties) {
   const schemas = properties.map((property) => nullableProjection(property.schema));
@@ -717,7 +795,7 @@ function toToolName(serviceName, methodName) {
 }
 function assertUniqueToolName(name, taken, surface) {
   if (taken) {
-    throw new Error(`Duplicate ${surface} "${name}" across mounted services`);
+    throw new Error(`Duplicate ${surface} "${name}" across mounted operations`);
   }
 }
 

package/dist/{index-xax049k6.js → index-r6czv7yt.js}

@@ -1,6 +1,6 @@
 import {
-  mapObject
-} from "./index-809wc1tt.js";
+  mapObjectTypeBoundary
+} from "./index-s4qsmgwe.js";
 
 // src/contract/define.ts
 import { z } from "zod";
@@ -237,32 +237,68 @@ function appError(code, message, details) {
   throw new AppError(code, message, isStitchErrorCode(code) ? STITCH_ERROR_STATUS[code] : 500, details);
 }
 // src/contract/errors-factory.ts
-function defineErrors(defs) {
-  const errors = mapObject(defs, (code, status) => (message, details, hint) => {
-    throw new AppError(String(code), message, status, details, hint);
+import { z as z2 } from "zod";
+function isErrorDetailsSchema(value) {
+  return value instanceof z2.ZodObject || value instanceof z2.ZodOptional && value.unwrap() instanceof z2.ZodObject;
+}
+function validateDefinition(code, definition) {
+  if (!Number.isInteger(definition.status) || definition.status < 400 || definition.status > 599) {
+    throw new Error(`[stitchkit] Error "${code}" must declare an integer HTTP status from 400 to 599`);
+  }
+  if (definition.details !== undefined && !isErrorDetailsSchema(definition.details)) {
+    throw new Error(`[stitchkit] Error "${code}" details must be a Zod object or optional Zod object`);
+  }
+}
+function defineErrors(source) {
+  const definitions = mapObjectTypeBoundary(source, (code, definition) => {
+    const name = String(code);
+    validateDefinition(name, definition);
+    return Object.freeze({ ...definition });
+  });
+  Object.freeze(definitions);
+  const errors = mapObjectTypeBoundary(definitions, (code, definition) => {
+    const name = String(code);
+    return (options = {}) => {
+      if (definition.details === undefined) {
+        if ("details" in options) {
+          throw new Error(`[stitchkit] Error "${name}" does not declare details`);
+        }
+        return new AppError(name, options.message, definition.status, undefined, options.hint);
+      }
+      const details = definition.details.parse(options.details);
+      return new AppError(name, options.message, definition.status, details, options.hint);
+    };
   });
-  const codes = mapObject(defs, (code) => code);
-  const known = new Set(Object.keys(defs));
-  return {
+  Object.freeze(errors);
+  const codes = mapObjectTypeBoundary(definitions, (code) => String(code));
+  Object.freeze(codes);
+  const known = new Set(Object.keys(definitions));
+  return Object.freeze({
     errors,
     codes,
+    definitions,
     isCode: (code) => known.has(code)
-  };
+  });
 }
 // src/contract/factory.ts
-function createContractFactory() {
-  return {
-    defineContract: (meta, endpoints) => {
-      const validated = defineContract({ prefix: meta.prefix }, endpoints);
-      return {
-        endpoints: validated.endpoints,
-        meta: { ...meta, prefix: meta.prefix, scope: meta.scope }
-      };
-    }
+function createContractFactory(config) {
+  const scoped = (meta, endpoints) => {
+    const validated = defineContract({ prefix: meta.prefix }, endpoints);
+    return {
+      endpoints: validated.endpoints,
+      meta: { ...meta, prefix: meta.prefix, scope: meta.scope }
+    };
   };
+  if (config?.toolExposure !== "explicit")
+    return { defineContract: scoped };
+  const explicit = (meta, endpoints) => {
+    const materialized = mapObjectTypeBoundary(endpoints, (_key, endpoint) => endpoint.expose ? endpoint : { ...endpoint, expose: ["HTTP"] });
+    return scoped(meta, materialized);
+  };
+  return { defineContract: explicit };
 }
 // src/contract/pagination.ts
-import { z as z2 } from "zod";
+import { z as z3 } from "zod";
 
 // src/internal/base64url.ts
 function bytesToBase64Url(bytes) {
@@ -282,9 +318,9 @@ function base64UrlToBytes(segment) {
 
 // src/contract/pagination.ts
 function paginatedSchema(itemSchema) {
-  return z2.object({
-    items: z2.array(itemSchema),
-    nextCursor: z2.string().nullable()
+  return z3.object({
+    items: z3.array(itemSchema),
+    nextCursor: z3.string().nullable()
   });
 }
 function toBase64Url(str) {

package/dist/{index-809wc1tt.js → index-s4qsmgwe.js}

@@ -14,5 +14,8 @@ function mapObject(source, mapper) {
   }
   return result;
 }
+function mapObjectTypeBoundary(source, mapper) {
+  return mapObject(source, (key, value) => mapper(key, value));
+}
 
-export { typedEntries, isRecord, mapObject };
+export { typedEntries, isRecord, mapObject, mapObjectTypeBoundary };

package/dist/index.js

@@ -17,12 +17,12 @@ import {
   parseTrailingWildcard,
   rateLimited,
   unauthorized
-} from "./index-xax049k6.js";
+} from "./index-r6czv7yt.js";
 import {
   isRecord,
   mapObject,
   typedEntries
-} from "./index-809wc1tt.js";
+} from "./index-s4qsmgwe.js";
 
 // src/browser/client-multipart.ts
 function isFileDescriptor(value) {

package/dist/internal/typed.d.ts

@@ -6,4 +6,12 @@ export declare function isRecord(value: unknown): value is Record<string, unknow
 export declare function mapObject<TSource extends object, TResult extends {
     [K in keyof TSource]?: unknown;
 }>(source: TSource, mapper: <K extends keyof TSource>(key: K, value: TSource[K]) => TResult[K] | undefined): TResult;
+/**
+ * Dynamic key-wise factory bridge. Use when runtime construction preserves a
+ * mapped type's key/value relation but TypeScript cannot express the dependent
+ * callback return. The assertion is intentionally isolated at this boundary.
+ */
+export declare function mapObjectTypeBoundary<TSource extends object, TResult extends {
+    [K in keyof TSource]?: unknown;
+}>(source: TSource, mapper: (key: keyof TSource, value: TSource[keyof TSource]) => unknown): TResult;
 //# sourceMappingURL=typed.d.ts.map

package/dist/internal/typed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typed.d.ts","sourceRoot":"","sources":["../../src/internal/typed.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,CAAC,GACP,KAAK,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAE/C;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,SAAS,CACvB,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GACrF,OAAO,CAOT"}
+{"version":3,"file":"typed.d.ts","sourceRoot":"","sources":["../../src/internal/typed.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,CAAC,GACP,KAAK,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAE/C;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,SAAS,CACvB,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GACrF,OAAO,CAOT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,OAAO,GACrE,OAAO,CAKT"}

package/dist/node.js

@@ -3,7 +3,7 @@ import {
   createImplement,
   createSocketIOServer,
   implement
-} from "./index-4e1c0hsw.js";
+} from "./index-esqmem78.js";
 import"./index-6jypn22c.js";
 import"./index-x3fcszf8.js";
 import {
@@ -15,7 +15,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-sc67e454.js";
+} from "./index-gex6gxhe.js";
 // src/server/node.ts
 import { serve } from "srvx";
 async function serveNode(config) {

package/dist/observability/audit.d.ts

@@ -1,8 +1,9 @@
 import type { ToolCallHooks } from '../tools/execute';
+import { type RequestContext } from './context';
 import type { RequestEvent } from './event';
 import { type SanitizeOptions } from './sanitize';
-/** Config for `createAuditHook`. */
-export interface AuditConfig {
+/** One isolated RequestEvent sink and its sanitisation policy. */
+export interface RequestEventSinkConfig {
     /**
      * The sink — persists one audit event. It runs fire-and-forget and its own
      * errors are swallowed, so a slow or failing write never blocks or breaks the
@@ -14,19 +15,30 @@ export interface AuditConfig {
     /** Payload sanitisation tuning — passed through to `sanitizePayload`. */
     sanitize?: SanitizeOptions;
 }
-/** What `createAuditHook` returns — one wiring point per surface. */
-export interface AuditHook {
-    /**
-     * Wrap the HTTP fetch handler — audits every request from its final
-     * response (success and error alike). Compose it INSIDE `wrapInRequestContext`
-     * (it reads that context for trace ids, timing and identity).
-     */
-    http: <S>(handler: (req: Request, server: S) => Promise<Response>) => (req: Request, server: S) => Promise<Response>;
-    /**
-     * Tool-call hooks — audits every MCP / agent tool call. Pass as `hooks` to
-     * `createMcpHandler`, `createStdioMcpServer` or `mountAgent`.
-     */
+export interface RequestObservabilityConfig extends RequestEventSinkConfig {
+    /** Clone and record JSON request bodies. Default false. */
+    includePayload?: boolean;
+}
+export interface ObservabilityConfig {
+    request?: RequestObservabilityConfig;
+    tools?: RequestEventSinkConfig;
+}
+/** The one HTTP completion snapshot produced by the handler. */
+export interface HttpRequestCompletion {
+    context: RequestContext;
+    statusCode: number;
+    durationMs: number;
+    payload?: Promise<unknown>;
+}
+/** Server-facing request projection returned by `createObservability`. */
+export interface HttpRequestObserver {
+    includePayload: boolean;
+    complete(completion: HttpRequestCompletion): void;
+}
+/** What `createObservability` returns — one wiring point per enabled surface. */
+export interface Observability {
+    request?: HttpRequestObserver;
     toolCall: ToolCallHooks;
 }
-export declare function createAuditHook(config: AuditConfig): AuditHook;
+export declare function createObservability(config: ObservabilityConfig): Observability;
 //# sourceMappingURL=audit.d.ts.map

package/dist/observability/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAElE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,oCAAoC;AACpC,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,IAAI,EAAE,CAAC,CAAC,EACN,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,KACpD,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpD;;;OAGG;IACH,QAAQ,EAAE,aAAa,CAAC;CACzB;AA8BD,wBAAgB,eAAe,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CA6G9D"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACnD;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;CACzB;AAsCD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CA0G9E"}

package/dist/observability/event.d.ts

@@ -2,8 +2,8 @@ import type { HttpMethod, TransportSource } from '../contract';
 import type { JsonValue } from './sanitize';
 /**
  * A normalised audit event — one shape for a completed call on any surface
- * (an HTTP request, an MCP tool call, an agent tool call). `createAuditHook`
- * produces it and hands it to the project's `write` sink. The project maps it
+ * (an HTTP request, an MCP tool call, an agent tool call). `createObservability`
+ * produces it and hands it to the configured surface sink. The project maps it
  * onto its own audit table; stitchkit owns the normalisation.
  */
 export interface RequestEvent {

package/dist/observability/index.d.ts

@@ -2,11 +2,11 @@
  * `stitchkit/observability` — the audit layer one level above the raw hooks.
  *
  * W3C trace context, an `AsyncLocalStorage` request context, payload
- * sanitisation, a normalised `RequestEvent`, and `createAuditHook` to wire it
- * all into one sink. A project's logging becomes a table plus a `write`
- * function — nothing else.
+ * sanitisation, a normalised `RequestEvent`, and `createObservability` to wire
+ * framework-owned HTTP completion plus canonical tool hooks into independent
+ * sinks.
  */
-export { type AuditConfig, type AuditHook, createAuditHook } from './audit';
+export { createObservability, type HttpRequestCompletion, type HttpRequestObserver, type Observability, type ObservabilityConfig, type RequestEventSinkConfig, type RequestObservabilityConfig, } from './audit';
 export { getRequestContext, getTraceId, getUserId, type RequestContext, runWithRequestContext, setRequestDimensions, setRequestEndpoint, setRequestError, setRequestUser, type WrapRequestContextOptions, wrapInRequestContext, } from './context';
 export type { RequestEvent } from './event';
 export { type JsonValue, measureSize, redact, type SanitizeOptions, type SizeMeasure, sanitizePayload, truncatePreview, } from './sanitize';

package/dist/observability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,SAAS,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,cAAc,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,KAAK,yBAAyB,EAC9B,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,WAAW,EACX,MAAM,EACN,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,cAAc,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,KAAK,yBAAyB,EAC9B,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,WAAW,EACX,MAAM,EACN,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}

package/dist/observability/index.js

@@ -16,7 +16,7 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-sc67e454.js";
+} from "../index-gex6gxhe.js";
 
 // src/observability/sanitize.ts
 var DEFAULT_SENSITIVE_KEYS = /(password|passwd|pwd|secret|token|apikey|api[-_ ]?key|auth|authorization|bearer|session|cookie|init[-_ ]?data|credential|private[-_ ]?key)/i;
@@ -100,7 +100,6 @@ function measureSize(value) {
 }
 
 // src/observability/audit.ts
-var BODY_METHODS = new Set(["POST", "PUT", "PATCH", "DELETE"]);
 function toolErrorMessage(result) {
   const { details, hint } = result;
   if (isRecord(details) && typeof details.message === "string") {
@@ -114,64 +113,71 @@ function auditErrorMessage(result, thrown) {
 function readString(value) {
   return typeof value === "string" ? value : undefined;
 }
-function createAuditHook(config) {
-  const { write, filter, sanitize } = config;
-  const emit = async (event) => {
+function createEmitter(config) {
+  return async (event) => {
     try {
-      if (filter && !filter(event))
+      if (config.filter && !config.filter(event))
         return;
-      await write(event);
+      await config.write(event);
     } catch {}
   };
-  const http = (handler) => {
-    return async (req, server) => {
-      const bodyClone = BODY_METHODS.has(req.method) ? req.clone() : null;
-      const res = await handler(req, server);
-      const ctx = getRequestContext();
-      if (ctx) {
-        const durationMs = Math.round(Number(process.hrtime.bigint() - ctx.startedAt) / 1e6);
-        (async () => {
-          let body;
-          if (bodyClone) {
-            try {
-              body = await bodyClone.json();
-            } catch {
-              body = undefined;
-            }
+}
+function createObservability(config) {
+  const request = config.request ? {
+    includePayload: config.request.includePayload ?? false,
+    complete: ({ context, statusCode, durationMs, payload }) => {
+      const requestConfig = config.request;
+      if (!requestConfig)
+        return;
+      const emit = createEmitter(requestConfig);
+      (async () => {
+        let body;
+        if (payload) {
+          try {
+            body = await payload;
+          } catch {
+            body = undefined;
           }
-          await emit({
-            source: ctx.source,
-            method: ctx.method,
-            path: ctx.path,
-            ...ctx.serviceName !== undefined && { serviceName: ctx.serviceName },
-            ...ctx.action !== undefined && { action: ctx.action },
-            ...ctx.dimensions !== undefined && { dimensions: ctx.dimensions },
-            traceId: ctx.trace.traceId,
-            spanId: ctx.trace.spanId,
-            parentSpanId: ctx.trace.parentSpanId,
-            ok: res.status < 400,
-            statusCode: res.status,
-            durationMs,
-            errorCode: ctx.error?.code,
-            errorMessage: ctx.error?.message,
-            ...ctx.error?.details !== undefined && {
-              errorDetail: sanitizePayload(ctx.error.details, sanitize)
-            },
-            payload: sanitizePayload(body, sanitize),
-            resultSize: null,
-            responseBytes: 0,
-            userId: ctx.userId,
-            ipAddress: ctx.ipAddress,
-            userAgent: ctx.userAgent,
-            startedAt: new Date(Date.now() - durationMs)
-          });
-        })();
-      }
-      return res;
-    };
-  };
-  const toolCall = {
+        }
+        await emit({
+          source: context.source,
+          method: context.method,
+          path: context.path,
+          ...context.serviceName !== undefined && {
+            serviceName: context.serviceName
+          },
+          ...context.action !== undefined && { action: context.action },
+          ...context.dimensions !== undefined && {
+            dimensions: context.dimensions
+          },
+          traceId: context.trace.traceId,
+          spanId: context.trace.spanId,
+          parentSpanId: context.trace.parentSpanId,
+          ok: statusCode < 400,
+          statusCode,
+          durationMs,
+          errorCode: context.error?.code,
+          errorMessage: context.error?.message,
+          ...context.error?.details !== undefined && {
+            errorDetail: sanitizePayload(context.error.details, requestConfig.sanitize)
+          },
+          payload: sanitizePayload(body, requestConfig.sanitize),
+          resultSize: null,
+          responseBytes: 0,
+          userId: context.userId,
+          ipAddress: context.ipAddress,
+          userAgent: context.userAgent,
+          startedAt: new Date(Date.now() - durationMs)
+        });
+      })();
+    }
+  } : undefined;
+  const toolCall = config.tools ? {
     afterToolCall: ({ toolName, args, result, durationMs, context, endpoint, error }) => {
+      const toolConfig = config.tools;
+      if (!toolConfig)
+        return;
+      const emit = createEmitter(toolConfig);
       const requestCtx = getRequestContext();
       const span = requestCtx ? childSpan(requestCtx.trace) : createTraceContext();
       const measure = result.ok ? measureSize(result.data) : { resultSize: null, responseBytes: 0 };
@@ -182,7 +188,9 @@ function createAuditHook(config) {
         path: `/${context.source}/${toolName}`,
         serviceName: endpoint.serviceName,
         action: endpoint.key,
-        ...requestCtx?.dimensions !== undefined && { dimensions: requestCtx.dimensions },
+        ...requestCtx?.dimensions !== undefined && {
+          dimensions: requestCtx.dimensions
+        },
         toolName,
         traceId: span.traceId,
         spanId: span.spanId,
@@ -193,9 +201,9 @@ function createAuditHook(config) {
         errorCode: result.ok ? undefined : result.code,
         errorMessage: result.ok ? undefined : auditErrorMessage(result, error),
         ...!result.ok && result.details !== undefined && {
-          errorDetail: sanitizePayload(result.details, sanitize)
+          errorDetail: sanitizePayload(result.details, toolConfig.sanitize)
         },
-        payload: sanitizePayload(args, sanitize),
+        payload: sanitizePayload(args, toolConfig.sanitize),
         resultSize: measure.resultSize,
         responseBytes: measure.responseBytes,
         userId: readString(context.userId),
@@ -206,8 +214,11 @@ function createAuditHook(config) {
         startedAt: new Date(Date.now() - durationMs)
       });
     }
+  } : undefined;
+  return {
+    ...request && { request },
+    toolCall: toolCall ?? {}
   };
-  return { http, toolCall };
 }
 export {
   wrapInRequestContext,
@@ -227,6 +238,6 @@ export {
   getRequestContext,
   formatTraceparent,
   createTraceContext,
-  createAuditHook,
+  createObservability,
   childSpan
 };