@dudousxd/nestjs-telescope/dist/nest/telescope.module.js

Laravel Telescope-style observability console for NestJS — core: watchers, recorder, correlation, SQLite store, headless API.

var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
    return c > 3 && r && Object.defineProperty(target, key, r), r;
};
var __metadata = (this && this.__metadata) || function (k, v) {
    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
};
var __param = (this && this.__param) || function (paramIndex, decorator) {
    return function (target, key) { decorator(target, key, paramIndex); }
};
var TelescopeModule_1;
// packages/core/src/nest/telescope.module.ts
import 'reflect-metadata';
import { Inject, Module, RequestMethod, } from '@nestjs/common';
import { APP_INTERCEPTOR, DiscoveryModule, ModuleRef } from '@nestjs/core';
import { resolveDashboardAuth } from '../auth/dashboard-auth-config.js';
import { normalizeTelescopePath } from '../config/normalize-path.js';
import { resolveConfig } from '../config/resolve-config.js';
import { ExtensionRegistry } from '../extension/registry.js';
import { QueueMetricsService } from '../metrics/queue-metrics.service.js';
import { ServerStatsService } from '../metrics/server-stats.service.js';
import { StatsService } from '../metrics/stats.service.js';
import { TimeseriesService } from '../metrics/timeseries.service.js';
import { TracesService } from '../metrics/traces.service.js';
import { ProfilerService } from '../profiling/profiler.service.js';
import { PulseService } from '../pulse/pulse.service.js';
import { QueueManagerRegistry } from '../queue/queue-manager.registry.js';
import { ScheduleManagerRegistry } from '../schedule/schedule-manager.registry.js';
import { EntryEvents } from '../sse/entry-events.js';
import { StreamController } from '../sse/stream.controller.js';
import { SqliteStorageProvider } from '../storage/sqlite-storage-provider.js';
import { ClientErrorController } from './client-error.controller.js';
import { dynamicController } from './dynamic-controller.js';
import { createExtensionContext } from './extension-context.factory.js';
import { TelescopeActionGuard } from './telescope-action.guard.js';
import { TelescopeAuthController } from './telescope-auth.controller.js';
import { TelescopeExceptionInterceptor } from './telescope-exception.interceptor.js';
import { TelescopeMcpController } from './telescope-mcp.controller.js';
import { TelescopeOverloadGuard } from './telescope-overload-guard.service.js';
import { TelescopePruner } from './telescope-pruner.service.js';
import { TelescopeRequestMiddleware } from './telescope-request.middleware.js';
import { TelescopeWatcherRegistrar } from './telescope-watcher-registrar.service.js';
import { TelescopeController } from './telescope.controller.js';
import { TelescopeGuard } from './telescope.guard.js';
import { TELESCOPE_CONFIG, TELESCOPE_DASHBOARD_AUTH, TELESCOPE_EXTENSIONS, TELESCOPE_OPTIONS, TELESCOPE_STORAGE, } from './telescope.options.js';
import { TelescopeService } from './telescope.service.js';
/**
 * `@nestjs/common`'s own `GUARDS_METADATA` key, INLINED rather than deep-imported
 * from '@nestjs/common/constants' — that subpath has no extension and a strict
 * ESM resolver 404s on it (same convention as `@dudousxd/nestjs-agent`'s
 * `agent-dashboard.module.ts`). A drift spec imports the real constant (via the
 * resolvable `'@nestjs/common/constants.js'` subpath) and asserts this literal
 * stays byte-identical to it.
 */
const GUARDS_METADATA = '__guards__';
/**
 * Narrows a `guards` entry to a class (constructor) as opposed to an
 * already-instantiated `CanActivate`. Only a class needs a DI provider so Nest
 * can instantiate it — an instance is used by the guards consumer as-is.
 */
function isGuardClass(guard) {
    return typeof guard === 'function';
}
/**
 * Stamp host guards onto the console's API controllers — APPEND, not replace.
 * `TelescopeController` / `StreamController` already carry `@UseGuards(TelescopeGuard)`
 * via their own class decorator; `Reflect.getMetadata` (not `getOwnMetadata`) below
 * walks the fresh `dynamicController(...)` subclass's prototype chain to pick that
 * up BEFORE appending, so a host that sets `guards` never accidentally drops
 * Telescope's own default-deny-in-production gate. A no-op when `guards` is
 * omitted/empty, leaving the inherited metadata (and its prototype-chain fallback)
 * completely untouched.
 *
 * Safe to call once per `forRoot`/`forRootAsync` invocation: `dynamicController`
 * builds a BRAND NEW subclass every call (unlike a static singleton controller),
 * so there is no cross-call metadata leakage to guard against here.
 */
function stampGuards(guards, ...controllers) {
    if (guards === undefined || guards.length === 0)
        return;
    for (const controller of controllers) {
        const inherited = Reflect.getMetadata(GUARDS_METADATA, controller) ?? [];
        Reflect.defineMetadata(GUARDS_METADATA, [...inherited, ...guards], controller);
    }
}
const SHARED_PROVIDERS = [
    {
        provide: TELESCOPE_CONFIG,
        useFactory: (options) => resolveConfig(options),
        inject: [TELESCOPE_OPTIONS],
    },
    {
        provide: TELESCOPE_STORAGE,
        useFactory: (options) => options.storage ?? new SqliteStorageProvider(),
        inject: [TELESCOPE_OPTIONS],
    },
    {
        // Boot-validated: a configured dashboardAuth with a missing secret / no hook
        // throws here at provider instantiation (fail closed). `null` when unset.
        provide: TELESCOPE_DASHBOARD_AUTH,
        useFactory: (options) => resolveDashboardAuth(options.dashboardAuth),
        inject: [TELESCOPE_OPTIONS],
    },
    {
        provide: TELESCOPE_EXTENSIONS,
        useFactory: (options, config, moduleRef) => new ExtensionRegistry(options.extensions ?? [], createExtensionContext(moduleRef, config)),
        inject: [TELESCOPE_OPTIONS, TELESCOPE_CONFIG, ModuleRef],
    },
    EntryEvents,
    TelescopeService,
    TelescopeGuard,
    TelescopeActionGuard,
    TelescopePruner,
    QueueMetricsService,
    TimeseriesService,
    TracesService,
    StatsService,
    {
        // Factory (not a bare class) so the host's `pulse` config — notably the
        // `slowRouteMs` slow-route hotspot threshold — reaches PulseService's
        // @Optional() options param. A bare class provider leaves it undefined.
        provide: PulseService,
        useFactory: (options, storage) => new PulseService(storage, options.pulse),
        inject: [TELESCOPE_OPTIONS, TELESCOPE_STORAGE],
    },
    ServerStatsService,
    {
        // Factory so the resolved profiling config + the TelescopeService record sink
        // reach the service. Constructed unconditionally (cheap); it NEVER builds a
        // profiler or loads `node:inspector` while `profiling.enabled` is false.
        provide: ProfilerService,
        useFactory: (config, service) => new ProfilerService(config.profiling, {
            record: (input) => service.record(input),
        }),
        inject: [TELESCOPE_CONFIG, TelescopeService],
    },
    TelescopeRequestMiddleware,
    TelescopeWatcherRegistrar,
    TelescopeOverloadGuard,
    QueueManagerRegistry,
    ScheduleManagerRegistry,
    { provide: APP_INTERCEPTOR, useClass: TelescopeExceptionInterceptor },
];
let TelescopeModule = TelescopeModule_1 = class TelescopeModule {
    moduleOptions;
    constructor(moduleOptions) {
        this.moduleOptions = moduleOptions;
    }
    configure(consumer) {
        // Hosts that call `setGlobalPrefix(...)` should set
        // `registerRequestMiddleware: false` and instead register the capture
        // globally in their bootstrap via `app.use(telescopeRequestCapture(app.get(TelescopeService)))`.
        // Reason: NestJS scopes module middleware (even a `{*splat}` catch-all) to
        // the global-prefix's route table, so only `/` ends up captured. A raw
        // `app.use` runs before all route handlers regardless of prefix.
        if (this.moduleOptions.registerRequestMiddleware === false) {
            return;
        }
        // NestJS 11 / path-to-regexp v8 route syntax: {*splat} is the optional catch-all (the '*' and '(.*)' forms throw). Requires @nestjs/common >= 11 for the middleware path matching.
        // No .exclude(): under a global prefix .exclude() doesn't work with the catch-all route — it
        // forces NestJS into route-by-route matching so only '/' is captured. Telescope's own routes
        // (the /telescope dashboard, API and assets) are skipped inside TelescopeRequestMiddleware instead.
        consumer
            .apply(TelescopeRequestMiddleware)
            .forRoutes({ path: '{*splat}', method: RequestMethod.ALL });
    }
    static forRoot(options = {}) {
        const path = normalizeTelescopePath(options.path);
        // Built ahead of the controllers array (rather than inline) so `stampGuards`
        // can be applied to the EXACT dynamic subclass instances that get registered.
        const apiController = dynamicController(TelescopeController, `${path}/api`);
        const streamController = dynamicController(StreamController, `${path}/api`);
        stampGuards(options.guards, apiController, streamController);
        return {
            module: TelescopeModule_1,
            imports: [DiscoveryModule, ...(options.imports ?? [])],
            controllers: [
                // The auth controller mounts BEFORE the gated API controller so its
                // /api/auth/* routes resolve ahead of the catch-all and stay ungated
                // (it carries no @UseGuards(TelescopeGuard)).
                dynamicController(TelescopeAuthController, `${path}/api/auth`),
                // Public front-end error ingestion — also ungated (ordinary browsers
                // hit it). It enforces its own opt-in/rate-limit/authorize knobs and
                // 404s while disabled. Mounts before the catch-all gated controller.
                dynamicController(ClientErrorController, `${path}/api/client-errors`),
                // MCP server — ungated by TelescopeGuard (it enforces its own Bearer
                // token / dev-only check); mounts before the catch-all gated controller.
                dynamicController(TelescopeMcpController, `${path}/api/mcp`),
                apiController,
                streamController,
            ],
            providers: [
                { provide: TELESCOPE_OPTIONS, useValue: options },
                // Class guards need a DI provider so Nest can instantiate them in THIS
                // module's context (where `imports` above resolves their dependencies).
                // An already-instantiated guard needs none — it's used as-is.
                ...(options.guards ?? []).filter(isGuardClass),
                ...SHARED_PROVIDERS,
            ],
            exports: [
                TelescopeService,
                TELESCOPE_STORAGE,
                TELESCOPE_EXTENSIONS,
                QueueMetricsService,
                TimeseriesService,
                TracesService,
                StatsService,
                PulseService,
                ServerStatsService,
                ProfilerService,
            ],
        };
    }
    static forRootAsync(config) {
        const path = normalizeTelescopePath(config.path);
        const apiController = dynamicController(TelescopeController, `${path}/api`);
        const streamController = dynamicController(StreamController, `${path}/api`);
        stampGuards(config.guards, apiController, streamController);
        return {
            module: TelescopeModule_1,
            imports: [DiscoveryModule, ...(config.imports ?? [])],
            controllers: [
                dynamicController(TelescopeAuthController, `${path}/api/auth`),
                dynamicController(ClientErrorController, `${path}/api/client-errors`),
                // MCP server — ungated by TelescopeGuard (it enforces its own Bearer
                // token / dev-only check); mounts before the catch-all gated controller.
                dynamicController(TelescopeMcpController, `${path}/api/mcp`),
                apiController,
                streamController,
            ],
            providers: [
                {
                    provide: TELESCOPE_OPTIONS,
                    useFactory: config.useFactory,
                    inject: config.inject ?? [],
                },
                ...(config.guards ?? []).filter(isGuardClass),
                ...SHARED_PROVIDERS,
            ],
            exports: [
                TelescopeService,
                TELESCOPE_STORAGE,
                TELESCOPE_EXTENSIONS,
                QueueMetricsService,
                TimeseriesService,
                TracesService,
                StatsService,
                PulseService,
                ServerStatsService,
                ProfilerService,
            ],
        };
    }
};
TelescopeModule = TelescopeModule_1 = __decorate([
    Module({}),
    __param(0, Inject(TELESCOPE_OPTIONS)),
    __metadata("design:paramtypes", [Object])
], TelescopeModule);
export { TelescopeModule };
//# sourceMappingURL=telescope.module.js.map