@1mcp/agent 0.39.0-beta.2 → 0.39.0-beta.4

package/build/index.d.ts

@@ -1,5 +1,3 @@
 #!/usr/bin/env node
-import { normalizeCliArgv, normalizedArgv } from './utils/cli/normalizedArgv.js';
-import 'source-map-support/register.js';
-export { normalizeCliArgv, normalizedArgv };
+export { normalizeCliArgv, normalizedArgv } from './utils/cli/normalizedArgv.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAIA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEpF,OAAO,gCAAgC,CAAC;AAmBxC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAGA,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC"}

package/build/index.js

@@ -1,134 +1,10 @@
 #!/usr/bin/env node
-import { MCP_SERVER_VERSION } from './constants.js';
-import { globalOptions } from './globalOptions.js';
-import logger from './logger/logger.js';
-import { normalizeCliArgv, normalizedArgv } from './utils/cli/normalizedArgv.js';
-import 'source-map-support/register.js';
-import yargs from 'yargs';
-import { setupAdminCommands } from './commands/admin/index.js';
-import { setupAppCommands } from './commands/app/index.js';
-import { setupAuthCommands } from './commands/auth/index.js';
-import { setupCliSetupCommand } from './commands/cliSetup/index.js';
-import { setupInspectCommand } from './commands/inspect/index.js';
-import { setupInstructionsCommand } from './commands/instructions/index.js';
-import { setupMcpCommands } from './commands/mcp/index.js';
-import { setupPresetCommands } from './commands/preset/index.js';
-import { setupProxyCommand } from './commands/proxy/index.js';
-import { setupRegistryCommands } from './commands/registry/index.js';
-import { setupRunCommand } from './commands/run/index.js';
-import { serverOptions, setupServeCommand } from './commands/serve/index.js';
-import { setupTargetCommands } from './commands/target/index.js';
-import { setupWaitCommand } from './commands/wait/index.js';
-import { configureGlobalLogger } from './logger/configureGlobalLogger.js';
-export { normalizeCliArgv, normalizedArgv };
-// Parse command line arguments and set up commands
-let yargsInstance = yargs(normalizedArgv);
-// Set up base yargs with global options
-yargsInstance = yargsInstance
-    .usage('Usage: $0 [command] [options]')
-    .options(globalOptions)
-    .command('$0', 'Start the 1mcp server (default)', serverOptions, async (argv) => {
-    // Default command - redirect to serve command
-    configureGlobalLogger(argv, argv.transport);
-    const { serveCommand } = await import('./commands/serve/serve.js');
-    await serveCommand(argv);
-})
-    .version(MCP_SERVER_VERSION)
-    .env('ONE_MCP') // Enable environment variable parsing with ONE_MCP prefix
-    .help()
-    .alias('help', 'h')
-    .strict() // Enable strict mode to reject unknown commands
-    .fail((msg, err, yargs) => {
-    // Custom error handler for unknown commands
-    if (msg) {
-        console.error(`❌ Error: ${msg}\n`);
-    }
-    if (err) {
-        console.error(`❌ ${err.message}\n`);
-    }
-    yargs.showHelp();
-    process.exit(1);
-});
-// Register command groups with global options
-yargsInstance = setupAdminCommands(yargsInstance);
-yargsInstance = setupAppCommands(yargsInstance);
-yargsInstance = setupAuthCommands(yargsInstance);
-yargsInstance = setupCliSetupCommand(yargsInstance);
-yargsInstance = setupInstructionsCommand(yargsInstance);
-yargsInstance = setupMcpCommands(yargsInstance);
-yargsInstance = setupPresetCommands(yargsInstance);
-yargsInstance = setupServeCommand(yargsInstance);
-yargsInstance = setupProxyCommand(yargsInstance);
-yargsInstance = setupInspectCommand(yargsInstance);
-yargsInstance = setupRunCommand(yargsInstance);
-yargsInstance = setupWaitCommand(yargsInstance);
-yargsInstance = setupRegistryCommands(yargsInstance);
-yargsInstance = setupTargetCommands(yargsInstance);
-/**
- * Check for conflicting global options (options specified both before and after the command)
- */
-function checkGlobalOptionConflicts(argv) {
-    const globalOptionNames = Object.keys(globalOptions).map((key) => (key.startsWith('--') ? key.slice(2) : key));
-    const globalOptionAliases = Object.values(globalOptions)
-        .map((opt) => ('alias' in opt ? opt.alias : null))
-        .filter(Boolean);
-    const allGlobalOptions = [...globalOptionNames, ...globalOptionAliases];
-    const commandIndex = argv.findIndex((arg) => arg === 'app' ||
-        arg === 'admin' ||
-        arg === 'auth' ||
-        arg === 'cli-setup' ||
-        arg === 'instructions' ||
-        arg === 'mcp' ||
-        arg === 'preset' ||
-        arg === 'serve' ||
-        arg === 'proxy' ||
-        arg === 'inspect' ||
-        arg === 'run' ||
-        arg === 'wait' ||
-        arg === 'target');
-    if (commandIndex === -1)
-        return;
-    const beforeCommandArgs = argv.slice(0, commandIndex);
-    const afterCommandArgs = argv.slice(commandIndex + 1);
-    const beforeGlobalOptions = new Set();
-    const afterGlobalOptions = new Set();
-    // Parse global options before command
-    for (let i = 0; i < beforeCommandArgs.length; i++) {
-        const arg = beforeCommandArgs[i];
-        const optionName = arg.replace(/^--?/, '');
-        if (allGlobalOptions.includes(optionName)) {
-            beforeGlobalOptions.add(optionName);
-        }
-    }
-    // Parse global options after command
-    for (let i = 0; i < afterCommandArgs.length; i++) {
-        const arg = afterCommandArgs[i];
-        const optionName = arg.replace(/^--?/, '');
-        if (allGlobalOptions.includes(optionName)) {
-            afterGlobalOptions.add(optionName);
-        }
-    }
-    // Check for conflicts
-    const conflicts = Array.from(beforeGlobalOptions).filter((opt) => afterGlobalOptions.has(opt));
-    if (conflicts.length > 0) {
-        console.error(`❌ Error: Cannot specify the following global options both before and after the command: ${conflicts.map((opt) => `--${opt}`).join(', ')}`);
-        console.error('   Please specify global options either before OR after the command, not both.');
-        console.error('   Example: 1mcp --config test.json mcp list');
-        console.error('   OR:      1mcp mcp list --config test.json');
-        process.exit(1);
-    }
-}
-/**
- * Main CLI entry point
- */
-async function main() {
-    // Check for global option conflicts before parsing
-    checkGlobalOptionConflicts(['node', 'cli', ...normalizedArgv]);
-    // Let yargs handle all command processing
-    await yargsInstance.parse();
-}
-main().catch((error) => {
-    logger.error('CLI error:', error);
-    process.exit(1);
+import { bootstrapTracing } from './observability/tracing/bootstrap.js';
+export { normalizeCliArgv, normalizedArgv } from './utils/cli/normalizedArgv.js';
+bootstrapTracing();
+// Runtime modules are evaluated only after propagation is installed. esbuild preserves this order in SEA.
+void import('./cli.js').catch(() => {
+    process.stderr.write('CLI bootstrap failed\n');
+    process.exitCode = 1;
 });
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAiB,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,MAAM,MAAM,uBAAuB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAEpF,OAAO,gCAAgC,CAAC;AACxC,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC;AAE5C,mDAAmD;AACnD,IAAI,aAAa,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;AAE1C,wCAAwC;AACxC,aAAa,GAAG,aAAa;KAC1B,KAAK,CAAC,+BAA+B,CAAC;KACtC,OAAO,CAAC,aAAa,CAAC;KACtB,OAAO,CAAC,IAAI,EAAE,iCAAiC,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC9E,8CAA8C;IAC9C,qBAAqB,CAAC,IAAqB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACnE,MAAM,YAAY,CAAC,IAA0C,CAAC,CAAC;AACjE,CAAC,CAAC;KACD,OAAO,CAAC,kBAAkB,CAAC;KAC3B,GAAG,CAAC,SAAS,CAAC,CAAC,0DAA0D;KACzE,IAAI,EAAE;KACN,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC;KAClB,MAAM,EAAE,CAAC,gDAAgD;KACzD,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;IACxB,4CAA4C;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEL,8CAA8C;AAC9C,aAAa,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;AAClD,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAChD,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;AACjD,aAAa,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;AACpD,aAAa,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;AACxD,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAChD,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;AACnD,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;AACjD,aAAa,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;AACjD,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;AACnD,aAAa,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;AAC/C,aAAa,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;AAChD,aAAa,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;AACrD,aAAa,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;AAEnD;;GAEG;AACH,SAAS,0BAA0B,CAAC,IAAc;IAChD,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/G,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;SACrD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACjD,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,gBAAgB,GAAG,CAAC,GAAG,iBAAiB,EAAE,GAAG,mBAAmB,CAAC,CAAC;IAExE,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CACjC,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,KAAK,KAAK;QACb,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,MAAM;QACd,GAAG,KAAK,WAAW;QACnB,GAAG,KAAK,cAAc;QACtB,GAAG,KAAK,KAAK;QACb,GAAG,KAAK,QAAQ;QAChB,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,OAAO;QACf,GAAG,KAAK,SAAS;QACjB,GAAG,KAAK,KAAK;QACb,GAAG,KAAK,MAAM;QACd,GAAG,KAAK,QAAQ,CACnB,CAAC;IAEF,IAAI,YAAY,KAAK,CAAC,CAAC;QAAE,OAAO;IAEhC,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,CAAC;IAEtD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE7C,sCAAsC;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,iBAAiB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE3C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAE3C,IAAI,gBAAgB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAE/F,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CACX,2FAA2F,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3I,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,gFAAgF,CAAC,CAAC;QAChG,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,mDAAmD;IACnD,0BAA0B,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAE/D,0CAA0C;IAC1C,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEjF,gBAAgB,EAAE,CAAC;AACnB,0GAA0G;AAC1G,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;IACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC/C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/build/logger/backgroundSupervisorLogger.d.ts

@@ -0,0 +1,4 @@
+import type { BackgroundSupervisorEvent } from '../core/server/backgroundRuntimeSupervisor.js';
+/** Supervisor startup precedes worker logging configuration; retain the same typed local boundary. */
+export declare function appendSupervisorEvent(logFile: string, event: BackgroundSupervisorEvent): void;
+//# sourceMappingURL=backgroundSupervisorLogger.d.ts.map

package/build/logger/backgroundSupervisorLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backgroundSupervisorLogger.d.ts","sourceRoot":"","sources":["../../src/logger/backgroundSupervisorLogger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,iDAAiD,CAAC;AAIjG,sGAAsG;AACtG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAa7F"}

package/build/logger/backgroundSupervisorLogger.js

@@ -0,0 +1,21 @@
+import fs from 'node:fs';
+import { normalizeEvent } from '../observability/events/normalize.js';
+import { ownData } from '../observability/privacy/fields.js';
+/** Supervisor startup precedes worker logging configuration; retain the same typed local boundary. */
+export function appendSupervisorEvent(logFile, event) {
+    const kind = ownData(event, 'event');
+    if (typeof kind !== 'string')
+        return;
+    const exit = ownData(event, 'exit');
+    const normalized = normalizeEvent(`supervisor.${kind}`, {
+        supervisorPid: ownData(event, 'supervisorPid'),
+        runtimePid: ownData(event, 'runtimePid'),
+        restartAttempt: ownData(event, 'restartAttempt'),
+        delayMs: ownData(event, 'delayMs'),
+        exitCode: ownData(exit, 'code'),
+        error: ownData(exit, 'error'),
+    });
+    if (normalized)
+        fs.appendFileSync(logFile, `${JSON.stringify(normalized)}\n`, { encoding: 'utf8', mode: 0o600 });
+}
+//# sourceMappingURL=backgroundSupervisorLogger.js.map

package/build/logger/backgroundSupervisorLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backgroundSupervisorLogger.js","sourceRoot":"","sources":["../../src/logger/backgroundSupervisorLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AAGzB,OAAO,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAE/D,sGAAsG;AACtG,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,KAAgC;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,cAAc,CAAC,cAAc,IAAI,EAAE,EAAE;QACtD,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC;QAC9C,UAAU,EAAE,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC;QACxC,cAAc,EAAE,OAAO,CAAC,KAAK,EAAE,gBAAgB,CAAC;QAChD,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC;QAClC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QAC/B,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;KAC9B,CAAC,CAAC;IACH,IAAI,UAAU;QAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACnH,CAAC"}

package/build/logger/diagnosticRedaction.d.ts

@@ -0,0 +1,3 @@
+/** Apply the active Runtime Scope's exact-value secret boundary to local diagnostic text. */
+export declare function redactRuntimeScopeDiagnosticText(text: string): string;
+//# sourceMappingURL=diagnosticRedaction.d.ts.map

package/build/logger/diagnosticRedaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticRedaction.d.ts","sourceRoot":"","sources":["../../src/logger/diagnosticRedaction.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,wBAAgB,gCAAgC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CASrE"}

package/build/logger/diagnosticRedaction.js

@@ -0,0 +1,12 @@
+import { getRuntimeScopeEnvironment } from '../config/runtimeScopeEnv.js';
+/** Apply the active Runtime Scope's exact-value secret boundary to local diagnostic text. */
+export function redactRuntimeScopeDiagnosticText(text) {
+    try {
+        const secrets = [...new Set(Object.values(getRuntimeScopeEnvironment()).filter((value) => value.length > 0))].sort((left, right) => right.length - left.length);
+        return secrets.reduce((value, secret) => value.split(secret).join('[REDACTED]'), text);
+    }
+    catch {
+        return '[OMITTED: Runtime Scope redaction unavailable]';
+    }
+}
+//# sourceMappingURL=diagnosticRedaction.js.map

package/build/logger/diagnosticRedaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnosticRedaction.js","sourceRoot":"","sources":["../../src/logger/diagnosticRedaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E,6FAA6F;AAC7F,MAAM,UAAU,gCAAgC,CAAC,IAAY;IAC3D,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAChH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAC5C,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,gDAAgD,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/build/logger/httpDiagnostics.d.ts

@@ -0,0 +1,25 @@
+export declare const HTTP_BODY_CAPTURE_BYTES = 8192;
+export type HttpDiagnosticEvent = 'http.request' | 'http.request-context' | 'http.response-start' | 'http.response' | 'http.request-body' | 'http.response-body';
+export interface HttpDiagnosticFields {
+    requestId: string;
+    method: string;
+    path: string;
+    statusCode?: number;
+    duration?: number;
+    aborted?: boolean;
+    contentType?: string;
+    body?: string;
+    bodyOmitted?: boolean;
+    responseBytes?: number;
+    rpcMethod?: string;
+}
+/** Local-only diagnostic snapshot: no getters, proxies, toJSON, or caller objects survive. */
+export declare function sanitizeHttpBody(value: unknown): string;
+export declare function sanitizeHttpPath(value: unknown): string;
+export declare function httpContentType(value: unknown): string;
+/** Extract complete JSON SSE data frames; never retain opaque endpoint or partial frames. */
+export declare function parseHttpResponseBody(text: string, contentType: string): {
+    body: unknown;
+    omitted: boolean;
+};
+//# sourceMappingURL=httpDiagnostics.d.ts.map

package/build/logger/httpDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpDiagnostics.d.ts","sourceRoot":"","sources":["../../src/logger/httpDiagnostics.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAO5C,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,sBAAsB,GACtB,qBAAqB,GACrB,eAAe,GACf,mBAAmB,GACnB,oBAAoB,CAAC;AACzB,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,8FAA8F;AAC9F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA6CvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAavD;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQtD;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CA4B5G"}

package/build/logger/httpDiagnostics.js

@@ -0,0 +1,125 @@
+import { types } from 'node:util';
+import { ownData } from '../observability/privacy/fields.js';
+import { redactRuntimeScopeDiagnosticText } from './diagnosticRedaction.js';
+import { sanitizeForLogging } from './secureLogger.js';
+export const HTTP_BODY_CAPTURE_BYTES = 8192;
+const MAX_NODES = 256;
+const MAX_DEPTH = 6;
+const MAX_INPUT_STRING_BYTES = 32768;
+const SENSITIVE_KEY = /authorization|cookie|password|passwd|secret|token|api.?key|private.?key|credential|signature|nonce|proof|verifier|challenge|session.?id|baggage|^state$|^code$/i;
+/** Local-only diagnostic snapshot: no getters, proxies, toJSON, or caller objects survive. */
+export function sanitizeHttpBody(value) {
+    let nodes = 0;
+    const seen = new WeakSet();
+    function copy(input, depth) {
+        if (++nodes > MAX_NODES || depth > MAX_DEPTH)
+            return '[TRUNCATED]';
+        if (input === null || input === undefined)
+            return input ?? null;
+        if (typeof input === 'string') {
+            if (Buffer.byteLength(input) > MAX_INPUT_STRING_BYTES)
+                return '[OMITTED: oversized string]';
+            return sanitizeForLogging(redactRuntimeScopeDiagnosticText(input));
+        }
+        if (typeof input === 'number')
+            return Number.isFinite(input) ? input : null;
+        if (typeof input === 'boolean')
+            return input;
+        if (typeof input !== 'object' || types.isProxy(input))
+            return '[UNAVAILABLE]';
+        if (ArrayBuffer.isView(input))
+            return '[OMITTED: binary body]';
+        if (seen.has(input))
+            return '[CIRCULAR]';
+        seen.add(input);
+        if (Array.isArray(input)) {
+            const length = Math.min(input.length, MAX_NODES - nodes);
+            const result = Array.from({ length }, (_, index) => copy(ownData(input, String(index)), depth + 1));
+            if (length < input.length)
+                result.push('[TRUNCATED]');
+            return result;
+        }
+        const result = Object.create(null);
+        for (const key of Object.getOwnPropertyNames(input)) {
+            if (nodes >= MAX_NODES) {
+                result['[TRUNCATED]'] = true;
+                break;
+            }
+            const data = ownData(input, key);
+            const sanitizedKey = Buffer.byteLength(key) > 1024 ? '[OVERSIZED_KEY]' : sanitizeForLogging(redactRuntimeScopeDiagnosticText(key));
+            const safeKey = typeof sanitizedKey === 'string' ? sanitizedKey : '[KEY]';
+            const numericErrorCode = key === 'code' && typeof data === 'number' && data < 0;
+            if (SENSITIVE_KEY.test(key) && !numericErrorCode) {
+                nodes++;
+                result[safeKey] = '[REDACTED]';
+            }
+            else {
+                result[safeKey] = copy(data, depth + 1);
+            }
+        }
+        return result;
+    }
+    const serialized = JSON.stringify(copy(value, 0));
+    // Never cut through a secret or a JSON value: oversized snapshots are omitted wholesale.
+    return Buffer.byteLength(serialized) <= HTTP_BODY_CAPTURE_BYTES ? serialized : '[OMITTED: body exceeds 8192 bytes]';
+}
+export function sanitizeHttpPath(value) {
+    if (typeof value !== 'string')
+        return 'unknown';
+    // Query values can carry OAuth codes and tokens; retain only the endpoint.
+    const path = value.split('?', 1)[0];
+    if (Buffer.byteLength(path) > 1024)
+        return '[OMITTED: oversized path]';
+    let decoded;
+    try {
+        decoded = decodeURIComponent(path);
+    }
+    catch {
+        return '[OMITTED: invalid encoded path]';
+    }
+    const sanitized = sanitizeForLogging(decoded);
+    return typeof sanitized === 'string' ? sanitized : 'unknown';
+}
+export function httpContentType(value) {
+    if (typeof value !== 'string')
+        return 'unknown';
+    const mediaType = value.split(';', 1)[0].trim().toLowerCase();
+    return ['application/json', 'text/event-stream', 'text/plain', 'text/html', 'application/octet-stream'].includes(mediaType)
+        ? mediaType
+        : 'other';
+}
+/** Extract complete JSON SSE data frames; never retain opaque endpoint or partial frames. */
+export function parseHttpResponseBody(text, contentType) {
+    if (contentType === 'text/event-stream') {
+        if (text && !/\r?\n\r?\n$/.test(text))
+            return { body: '[OMITTED: incomplete SSE frame]', omitted: true };
+        let omitted = false;
+        const body = text.split(/\r?\n\r?\n/).flatMap((frame) => {
+            const data = frame
+                .split(/\r?\n/)
+                .filter((line) => line.startsWith('data:'))
+                .map((line) => line.slice(5).trimStart())
+                .join('\n');
+            if (!data)
+                return [];
+            try {
+                return [JSON.parse(data)];
+            }
+            catch {
+                omitted = true;
+                return ['[OMITTED: non-JSON SSE data]'];
+            }
+        });
+        return { body, omitted };
+    }
+    if (contentType === 'application/json') {
+        try {
+            return { body: JSON.parse(text), omitted: false };
+        }
+        catch {
+            return { body: '[OMITTED: invalid JSON response]', omitted: true };
+        }
+    }
+    return { body: text, omitted: false };
+}
+//# sourceMappingURL=httpDiagnostics.js.map

package/build/logger/httpDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"httpDiagnostics.js","sourceRoot":"","sources":["../../src/logger/httpDiagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAE/D,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAC5C,MAAM,SAAS,GAAG,GAAG,CAAC;AACtB,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,aAAa,GACjB,iKAAiK,CAAC;AAuBpK,8FAA8F;AAC9F,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,IAAI,GAAG,IAAI,OAAO,EAAU,CAAC;IACnC,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa;QACzC,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,KAAK,GAAG,SAAS;YAAE,OAAO,aAAa,CAAC;QACnE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,IAAI,IAAI,CAAC;QAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,sBAAsB;gBAAE,OAAO,6BAA6B,CAAC;YAC5F,OAAO,kBAAkB,CAAC,gCAAgC,CAAC,KAAK,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,eAAe,CAAC;QAC9E,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,wBAAwB,CAAC;QAC/D,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,GAAG,KAAK,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACpG,IAAI,MAAM,GAAG,KAAK,CAAC,MAAM;gBAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;QACvF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;gBACvB,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;gBAC7B,MAAM;YACR,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACjC,MAAM,YAAY,GAChB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,kBAAkB,CAAC,gCAAgC,CAAC,GAAG,CAAC,CAAC,CAAC;YAChH,MAAM,OAAO,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1E,MAAM,gBAAgB,GAAG,GAAG,KAAK,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,CAAC;YAChF,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACjD,KAAK,EAAE,CAAC;gBACR,MAAM,CAAC,OAAO,CAAC,GAAG,YAAY,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAClD,yFAAyF;IACzF,OAAO,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,uBAAuB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oCAAoC,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,2EAA2E;IAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,2BAA2B,CAAC;IACvE,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iCAAiC,CAAC;IAC3C,CAAC;IACD,MAAM,SAAS,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC,QAAQ,CAC9G,SAAS,CACV;QACC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,WAAmB;IACrE,IAAI,WAAW,KAAK,mBAAmB,EAAE,CAAC;QACxC,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,iCAAiC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACzG,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACtD,MAAM,IAAI,GAAG,KAAK;iBACf,KAAK,CAAC,OAAO,CAAC;iBACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;iBAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;iBACxC,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,GAAG,IAAI,CAAC;gBACf,OAAO,CAAC,8BAA8B,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,WAAW,KAAK,kBAAkB,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,IAAI,EAAE,kCAAkC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACrE,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC"}

package/build/logger/localDiagnosticRecord.d.ts

@@ -0,0 +1,11 @@
+export type LocalDiagnosticLevel = 'info' | 'debug' | 'warn' | 'error';
+export type LocalDiagnosticEvent = `${'backend' | 'tool' | 'config' | 'schema' | 'capability' | 'oauth' | 'session'}.${string}`;
+export interface LocalDiagnosticRecord {
+    readonly level: LocalDiagnosticLevel;
+    readonly event: LocalDiagnosticEvent;
+    readonly details: string;
+}
+/** Internal sanitizer admission; never an API for caller-constructed diagnostic records. */
+export declare function admitLocalDiagnosticRecord(record: LocalDiagnosticRecord): void;
+export declare function isLocalDiagnosticRecord(record: LocalDiagnosticRecord): boolean;
+//# sourceMappingURL=localDiagnosticRecord.d.ts.map

package/build/logger/localDiagnosticRecord.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localDiagnosticRecord.d.ts","sourceRoot":"","sources":["../../src/logger/localDiagnosticRecord.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;AACvE,MAAM,MAAM,oBAAoB,GAC9B,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC;AAC/F,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,4FAA4F;AAC5F,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAE9E;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAE9E"}

package/build/logger/localDiagnosticRecord.js

@@ -0,0 +1,9 @@
+const admittedRecords = new WeakSet();
+/** Internal sanitizer admission; never an API for caller-constructed diagnostic records. */
+export function admitLocalDiagnosticRecord(record) {
+    admittedRecords.add(record);
+}
+export function isLocalDiagnosticRecord(record) {
+    return admittedRecords.has(record);
+}
+//# sourceMappingURL=localDiagnosticRecord.js.map

package/build/logger/localDiagnosticRecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localDiagnosticRecord.js","sourceRoot":"","sources":["../../src/logger/localDiagnosticRecord.ts"],"names":[],"mappings":"AAQA,MAAM,eAAe,GAAG,IAAI,OAAO,EAAU,CAAC;AAE9C,4FAA4F;AAC5F,MAAM,UAAU,0BAA0B,CAAC,MAA6B;IACtE,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAA6B;IACnE,OAAO,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACrC,CAAC"}

package/build/logger/localDiagnostics.d.ts

@@ -0,0 +1,5 @@
+import { type LocalDiagnosticEvent, type LocalDiagnosticLevel } from './localDiagnosticRecord.js';
+export type { LocalDiagnosticEvent, LocalDiagnosticLevel, LocalDiagnosticRecord } from './localDiagnosticRecord.js';
+/** Fail-open local diagnostics, separate from typed events, trace context, and exporters. */
+export declare function writeLocalDiagnostic(level: LocalDiagnosticLevel, event: LocalDiagnosticEvent, fields: Record<string, unknown> | (() => Record<string, unknown>)): void;
+//# sourceMappingURL=localDiagnostics.d.ts.map

package/build/logger/localDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"localDiagnostics.d.ts","sourceRoot":"","sources":["../../src/logger/localDiagnostics.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,EAE1B,MAAM,4BAA4B,CAAC;AAGpC,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAwDpH,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAChE,IAAI,CAsCN"}

package/build/logger/localDiagnostics.js

@@ -0,0 +1,116 @@
+import { types } from 'node:util';
+import { ownData } from '../observability/privacy/fields.js';
+import { redactRuntimeScopeDiagnosticText } from './diagnosticRedaction.js';
+import { sanitizeHttpBody } from './httpDiagnostics.js';
+import { admitLocalDiagnosticRecord, } from './localDiagnosticRecord.js';
+import logger, { writeLocalDiagnosticRecord } from './logger.js';
+function diagnosticText(value) {
+    if (Buffer.byteLength(value) > 32768)
+        return '[OMITTED: oversized string]';
+    // Error text may contain credential URLs or headers, even outside structured fields.
+    return redactRuntimeScopeDiagnosticText(value)
+        .replace(/\b[a-z][a-z0-9+.-]*:\/\/[^\s<>"']+/gi, (url) => {
+        try {
+            const parsed = new URL(url);
+            parsed.username = '';
+            parsed.password = '';
+            parsed.search = '';
+            parsed.hash = '';
+            return parsed.toString();
+        }
+        catch {
+            return '[OMITTED: invalid URL]';
+        }
+    })
+        .replace(/\b(?:authorization|(?:set-)?cookie)\s*[:=][^\r\n]*/gi, '[REDACTED HEADER]')
+        .replace(/\b(?:session[\s_-]*(?:id|identifier)|(?:oauth|authorization)[\s_-]*(?:code|state))(?:\s+header)?\s*(?:[:=]\s*)?(?:"[^"\r\n]*"|'[^'\r\n]*'|[^\s,;:)]+)/gi, '[REDACTED IDENTIFIER]')
+        .replace(/\b(client|server|backend|template)\s+([^:\r\n]+):[^:\r\n]+(?=:)/gi, '$1 $2:[REDACTED IDENTIFIER]')
+        .replace(/\b(client|server|backend|template)\s+(['"])([^:'"\r\n]+):[^'"\r\n]+\2/gi, '$1 $2$3:[REDACTED IDENTIFIER]$2');
+}
+function errorSnapshot(error, debug, depth = 0) {
+    if (depth >= 4)
+        return '[TRUNCATED: error causes]';
+    if (typeof error === 'string')
+        return diagnosticText(error);
+    if (!error || typeof error !== 'object' || types.isProxy(error))
+        return '[UNAVAILABLE: error]';
+    const result = Object.create(null);
+    // No caller accessors, SDK serialization hooks, or arbitrary prototype fields.
+    let name = ownData(error, 'name');
+    if (name === undefined && types.isNativeError(error)) {
+        const prototype = Object.getPrototypeOf(error);
+        if (prototype && typeof prototype === 'object' && !types.isProxy(prototype))
+            name = ownData(prototype, 'name');
+    }
+    if (typeof name === 'string')
+        result.name = diagnosticText(name);
+    const message = ownData(error, 'message');
+    if (typeof message === 'string')
+        result.message = diagnosticText(message);
+    const code = ownData(error, 'code');
+    if (typeof code === 'string')
+        result.errorCode = diagnosticText(code);
+    else if (typeof code === 'number')
+        result.errorCode = code;
+    const cause = ownData(error, 'cause') ?? ownData(ownData(error, 'data'), 'cause');
+    if (cause !== undefined)
+        result.cause = errorSnapshot(cause, debug, depth + 1);
+    if (debug) {
+        const stack = ownData(error, 'stack');
+        if (typeof stack === 'string')
+            result.stack = diagnosticText(stack);
+    }
+    return result;
+}
+/** Fail-open local diagnostics, separate from typed events, trace context, and exporters. */
+export function writeLocalDiagnostic(level, event, fields) {
+    try {
+        if (!logger.isLevelEnabled(level))
+            return;
+        if (!/^(backend|tool|config|schema|capability|oauth|session)\.[a-z][a-z0-9.-]{0,95}$/.test(event))
+            return;
+        const input = typeof fields === 'function' ? fields() : fields;
+        let nodes = 0;
+        function snapshot(value, depth) {
+            if (++nodes > 256 || depth > 6)
+                return '[TRUNCATED]';
+            if (typeof value === 'string')
+                return diagnosticText(value);
+            if (!value || typeof value !== 'object')
+                return value;
+            if (types.isProxy(value))
+                return '[UNAVAILABLE]';
+            if (types.isNativeError(value))
+                return errorSnapshot(value, level === 'debug');
+            if (ArrayBuffer.isView(value))
+                return '[OMITTED: binary data]';
+            if (Array.isArray(value)) {
+                const count = Math.min(value.length, 256 - nodes);
+                const values = Array.from({ length: count }, (_, index) => snapshot(ownData(value, String(index)), depth + 1));
+                if (count < value.length)
+                    values.push('[TRUNCATED]');
+                return values;
+            }
+            const result = Object.create(null);
+            for (const key of Object.getOwnPropertyNames(value)) {
+                if (nodes >= 256)
+                    break;
+                const data = ownData(value, key);
+                result[diagnosticText(key)] =
+                    key === 'error' ? errorSnapshot(data, level === 'debug') : snapshot(data, depth + 1);
+            }
+            return result;
+        }
+        const record = Object.freeze({
+            level,
+            event,
+            details: sanitizeHttpBody(snapshot(input, 0)),
+        });
+        admitLocalDiagnosticRecord(record);
+        writeLocalDiagnosticRecord(record);
+    }
+    catch {
+        // Diagnostic failures must never change request, recovery, or reload behavior.
+    }
+}
+//# sourceMappingURL=localDiagnostics.js.map

package/build/logger/localDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localDiagnostics.js","sourceRoot":"","sources":["../../src/logger/localDiagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,OAAO,EAAE,MAAM,sCAAsC,CAAC;AAE/D,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,0BAA0B,GAI3B,MAAM,4BAA4B,CAAC;AACpC,OAAO,MAAM,EAAE,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAIjE,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,KAAK;QAAE,OAAO,6BAA6B,CAAC;IAC3E,qFAAqF;IACrF,OAAO,gCAAgC,CAAC,KAAK,CAAC;SAC3C,OAAO,CAAC,sCAAsC,EAAE,CAAC,GAAG,EAAE,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5B,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,GAAG,EAAE,CAAC;YACrB,MAAM,CAAC,MAAM,GAAG,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,wBAAwB,CAAC;QAClC,CAAC;IACH,CAAC,CAAC;SACD,OAAO,CAAC,sDAAsD,EAAE,mBAAmB,CAAC;SACpF,OAAO,CACN,yJAAyJ,EACzJ,uBAAuB,CACxB;SACA,OAAO,CAAC,mEAAmE,EAAE,6BAA6B,CAAC;SAC3G,OAAO,CACN,yEAAyE,EACzE,iCAAiC,CAClC,CAAC;AACN,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAc,EAAE,KAAK,GAAG,CAAC;IAC9D,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,2BAA2B,CAAC;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC/F,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;IACvF,+EAA+E;IAC/E,IAAI,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,IAAI,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC1C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,SAAS,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;SACjE,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,oBAAoB,CAClC,KAA2B,EAC3B,KAA2B,EAC3B,MAAiE;IAEjE,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1C,IAAI,CAAC,gFAAgF,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO;QAC1G,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAC/D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;YAC7C,IAAI,EAAE,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC;YACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,OAAO,eAAe,CAAC;YACjD,IAAI,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC;gBAAE,OAAO,aAAa,CAAC,KAAK,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC;YAC/E,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;gBAAE,OAAO,wBAAwB,CAAC;YAC/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC;gBAClD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/G,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM;oBAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACrD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,MAAM,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAA4B,CAAC;YACvF,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpD,IAAI,KAAK,IAAI,GAAG;oBAAE,MAAM;gBACxB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBACjC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;oBACzB,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAA0B,MAAM,CAAC,MAAM,CAAC;YAClD,KAAK;YACL,KAAK;YACL,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;SAC9C,CAAC,CAAC;QACH,0BAA0B,CAAC,MAAM,CAAC,CAAC;QACnC,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,+EAA+E;IACjF,CAAC;AACH,CAAC"}