metrics

type Metrics struct {
	Tracer trace.Tracer
	Meter  metric.Meter

	EventsReceived       metric.Int64Counter
	EventsResponseTimeMs metric.Int64Histogram
	OpTotal              metric.Int64Counter
	OpDurationMs         metric.Int64Histogram

	// SecretMaterialized increments once per (tenant_slug, secret_name)
	// reference the processor's splice resolves for an op (cache hit
	// or miss — both count as a reference). Lets operators detect a
	// runaway op that materializes the same secret thousands of times
	// per second, AND see the per-tenant access pattern for audit/
	// quota purposes. NEVER record the cleartext or the cleartext
	// length here — only the names.
	SecretMaterialized metric.Int64Counter

	// TelemetryDropped counts tenant metric intents the request-end
	// telemetry processor dropped, tagged tenant slug + drop reason
	// (validation failure, no exporter config, export error, …). This
	// is the chassis-side diagnostic for "my metrics aren't arriving".
	// NEVER record metric names or values here — only counts + reason.
	TelemetryDropped metric.Int64Counter

	// WebSearchRequests counts txco://web/search calls, tagged tenant slug
	// + outcome (`ok` or the error code without its txco_web_ prefix).
	// NEVER record the query or a result here.
	WebSearchRequests metric.Int64Counter
	// contains filtered or unexported fields
}