@bazariodev/docket 0.0.0-stage → 1.0.0

package/dist/redaction/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","sources":["../../src/redaction/index.js"],"sourcesContent":["import { define, isError, own, resolveLimits } from '../core/common.js';\nimport { MARKERS } from '../core/constants.js';\n\nexport function createRedactor(\n  policy = {},\n  { createRedactor: createValueRedactor, TEXT_RULES: providerTextRules } = {},\n) {\n  if (typeof createValueRedactor !== 'function')\n    throw new TypeError('A value redactor factory is required');\n  if (!Array.isArray(policy.text) && !providerTextRules)\n    throw new TypeError('Default text rules are required');\n  const limits = resolveLimits(policy.limits);\n  const version = policy.version ?? '1';\n  if (\n    typeof version !== 'string' ||\n    !version ||\n    version.length > limits.maxStringLength\n  )\n    throw new TypeError('Invalid redaction version');\n  const { fields, unknownFields, hash, text } = policy;\n  const textRules = text ?? Object.values(providerTextRules);\n  const engine = createValueRedactor({\n    fields,\n    unknownFields,\n    hash:\n      typeof hash === 'function' ? (value) => hash.call(policy, value) : hash,\n    limits: { ...limits, maxOutputSize: limits.maxRecordSize },\n    text: text\n      ? textRules.map(({ name, pattern, requiresHash, replace }) => ({\n          name,\n          pattern,\n          requiresHash,\n          replace:\n            typeof replace === 'function'\n              ? function (match) {\n                  return replace.call(this, match, api);\n                }\n              : replace,\n        }))\n      : textRules,\n  });\n  let active;\n  const api = {\n    version,\n    limits,\n    mask: engine.mask,\n    redactText(value) {\n      return (active?.walk ?? engine.createSession()).redactText(value);\n    },\n\n    redactValue(value) {\n      const walk = engine.createSession();\n      const result = walk.redactValue(value);\n      if (active && walk.truncated) active.truncated = true;\n      return JSON.stringify(result).length <= limits.maxRecordSize\n        ? result\n        : MARKERS.LIMIT;\n    },\n\n    redact(draft) {\n      const previous = active;\n      const walk = engine.createSession();\n      active = { walk, truncated: false };\n      try {\n        let didTruncate = false;\n        const record = {};\n        for (const key of [\n          'runId',\n          'seq',\n          'at',\n          'level',\n          'area',\n          'scope',\n          'message',\n        ])\n          define(\n            record,\n            key,\n            typeof draft[key] === 'string' && !['runId', 'level'].includes(key)\n              ? walk.redactText(draft[key])\n              : draft[key],\n          );\n        record.redactionVersion = version;\n        if (draft.context) record.context = walk.redactValue(draft.context);\n        const data = draft.data;\n        if (isError(data)) {\n          const converted = walk.redactValue(data);\n          record.error =\n            typeof converted === 'string'\n              ? { name: 'Error', message: converted }\n              : converted;\n        } else if (data !== undefined) {\n          if (\n            data &&\n            typeof data === 'object' &&\n            !Array.isArray(data) &&\n            [Object.prototype, null].includes(Object.getPrototypeOf(data))\n          ) {\n            const error =\n              walk.fieldRule('error') === 'drop'\n                ? undefined\n                : own(data, 'error');\n            const promoted = isError(error);\n            if (promoted) {\n              const converted = walk.redactError(error, 'error');\n              if (converted !== undefined) record.error = converted;\n            }\n            const values = {};\n            let count = 0;\n            for (const key of Reflect.ownKeys(data)) {\n              if (++count > limits.maxKeys) {\n                define(values, '[truncated]', MARKERS.LIMIT);\n                didTruncate = true;\n                break;\n              }\n              if (key === 'error' && promoted) continue;\n              const descriptor = Object.getOwnPropertyDescriptor(data, key);\n              if (typeof key === 'string' && descriptor?.enumerable)\n                Object.defineProperty(values, key, descriptor);\n            }\n            const converted = walk.redactValue(values);\n            record.fields =\n              converted &&\n              typeof converted === 'object' &&\n              !Array.isArray(converted)\n                ? converted\n                : { value: converted };\n          } else record.fields = { value: walk.redactValue(data) };\n        }\n        if (walk.truncated || active.truncated || didTruncate)\n          record.truncated = true;\n        if (JSON.stringify(record).length > limits.maxRecordSize) {\n          delete record.fields;\n          delete record.context;\n          delete record.error;\n          record.fields = { value: MARKERS.LIMIT };\n          record.truncated = true;\n          if (JSON.stringify(record).length > limits.maxRecordSize)\n            throw new TypeError('Record headers exceed size limit');\n        }\n        return record;\n      } finally {\n        active = previous;\n      }\n    },\n  };\n  if (engine.hash) api.hash = engine.hash;\n  return Object.freeze(api);\n}\n"],"names":["resolveLimits","MARKERS","define","isError","own"],"mappings":";;;;;AAGO,SAAS,cAAc;AAC9B,EAAE,MAAM,GAAG,EAAE;AACb,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,EAAE;AAC7E,EAAE;AACF,EAAE,IAAI,OAAO,mBAAmB,KAAK,UAAU;AAC/C,IAAI,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC;AAC/D,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;AACvD,IAAI,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC;AAC1D,EAAE,MAAM,MAAM,GAAGA,oBAAa,CAAC,MAAM,CAAC,MAAM,CAAC;AAC7C,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG;AACvC,EAAE;AACF,IAAI,OAAO,OAAO,KAAK,QAAQ;AAC/B,IAAI,CAAC,OAAO;AACZ,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;AAC5B;AACA,IAAI,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC;AACpD,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC5D,EAAE,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACrC,IAAI,MAAM;AACV,IAAI,aAAa;AACjB,IAAI,IAAI;AACR,MAAM,OAAO,IAAI,KAAK,UAAU,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI;AAC7E,IAAI,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;AAC9D,IAAI,IAAI,EAAE;AACV,QAAQ,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;AACrE,UAAU,IAAI;AACd,UAAU,OAAO;AACjB,UAAU,YAAY;AACtB,UAAU,OAAO;AACjB,YAAY,OAAO,OAAO,KAAK;AAC/B,gBAAgB,UAAU,KAAK,EAAE;AACjC,kBAAkB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;AACvD,gBAAgB;AAChB,gBAAgB,OAAO;AACvB,SAAS,CAAC;AACV,QAAQ,SAAS;AACjB,GAAG,CAAC;AACJ,EAAE,IAAI,MAAM;AACZ,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,OAAO;AACX,IAAI,MAAM;AACV,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI;AACrB,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC;AACvE,IAAI,CAAC;;AAEL,IAAI,WAAW,CAAC,KAAK,EAAE;AACvB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE;AACzC,MAAM,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AAC5C,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG,IAAI;AAC3D,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;AACrD,UAAU;AACV,UAAUC,iBAAO,CAAC,KAAK;AACvB,IAAI,CAAC;;AAEL,IAAI,MAAM,CAAC,KAAK,EAAE;AAClB,MAAM,MAAM,QAAQ,GAAG,MAAM;AAC7B,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE;AACzC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;AACzC,MAAM,IAAI;AACV,QAAQ,IAAI,WAAW,GAAG,KAAK;AAC/B,QAAQ,MAAM,MAAM,GAAG,EAAE;AACzB,QAAQ,KAAK,MAAM,GAAG,IAAI;AAC1B,UAAU,OAAO;AACjB,UAAU,KAAK;AACf,UAAU,IAAI;AACd,UAAU,OAAO;AACjB,UAAU,MAAM;AAChB,UAAU,OAAO;AACjB,UAAU,SAAS;AACnB,SAAS;AACT,UAAUC,aAAM;AAChB,YAAY,MAAM;AAClB,YAAY,GAAG;AACf,YAAY,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG;AAC9E,gBAAgB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;AAC1C,gBAAgB,KAAK,CAAC,GAAG,CAAC;AAC1B,WAAW;AACX,QAAQ,MAAM,CAAC,gBAAgB,GAAG,OAAO;AACzC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;AAC3E,QAAQ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;AAC/B,QAAQ,IAAIC,cAAO,CAAC,IAAI,CAAC,EAAE;AAC3B,UAAU,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;AAClD,UAAU,MAAM,CAAC,KAAK;AACtB,YAAY,OAAO,SAAS,KAAK;AACjC,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;AACnD,gBAAgB,SAAS;AACzB,QAAQ,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,EAAE;AACvC,UAAU;AACV,YAAY,IAAI;AAChB,YAAY,OAAO,IAAI,KAAK,QAAQ;AACpC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;AAChC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;AACzE,YAAY;AACZ,YAAY,MAAM,KAAK;AACvB,cAAc,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK;AAC1C,kBAAkB;AAClB,kBAAkBC,UAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACpC,YAAY,MAAM,QAAQ,GAAGD,cAAO,CAAC,KAAK,CAAC;AAC3C,YAAY,IAAI,QAAQ,EAAE;AAC1B,cAAc,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;AAChE,cAAc,IAAI,SAAS,KAAK,SAAS,EAAE,MAAM,CAAC,KAAK,GAAG,SAAS;AACnE,YAAY;AACZ,YAAY,MAAM,MAAM,GAAG,EAAE;AAC7B,YAAY,IAAI,KAAK,GAAG,CAAC;AACzB,YAAY,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACrD,cAAc,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE;AAC5C,gBAAgBD,aAAM,CAAC,MAAM,EAAE,aAAa,EAAED,iBAAO,CAAC,KAAK,CAAC;AAC5D,gBAAgB,WAAW,GAAG,IAAI;AAClC,gBAAgB;AAChB,cAAc;AACd,cAAc,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,EAAE;AAC/C,cAAc,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,cAAc,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,EAAE,UAAU;AACnE,gBAAgB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;AAC9D,YAAY;AACZ,YAAY,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACtD,YAAY,MAAM,CAAC,MAAM;AACzB,cAAc,SAAS;AACvB,cAAc,OAAO,SAAS,KAAK,QAAQ;AAC3C,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;AACtC,kBAAkB;AAClB,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE;AACtC,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;AAClE,QAAQ;AACR,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,WAAW;AAC7D,UAAU,MAAM,CAAC,SAAS,GAAG,IAAI;AACjC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE;AAClE,UAAU,OAAO,MAAM,CAAC,MAAM;AAC9B,UAAU,OAAO,MAAM,CAAC,OAAO;AAC/B,UAAU,OAAO,MAAM,CAAC,KAAK;AAC7B,UAAU,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAEA,iBAAO,CAAC,KAAK,EAAE;AAClD,UAAU,MAAM,CAAC,SAAS,GAAG,IAAI;AACjC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;AAClE,YAAY,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC;AACnE,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,MAAM,CAAC,SAAS;AAChB,QAAQ,MAAM,GAAG,QAAQ;AACzB,MAAM;AACN,IAAI,CAAC;AACL,GAAG;AACH,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI;AACzC,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AAC3B;;"}

package/dist/redaction/index.d.cts

@@ -0,0 +1,70 @@
+import type { LogValue, Redactor, SerializedError } from "../index.cjs";
+
+export type FieldRule = 'keep' | 'drop' | 'mask' | 'hash';
+export type RedactionLimits = Readonly<Partial<Redactor['limits']>>;
+export type TextRule = Readonly<{
+  name: string;
+  pattern: RegExp;
+  requiresHash?: boolean;
+  replace(this: TextRule, match: string, redactor: Redactor): string;
+}>;
+export type RedactionPolicy = Readonly<{
+  version?: string;
+  hash?: (this: RedactionPolicy, value: string) => string;
+  fields?: Readonly<Record<string, FieldRule>>;
+  unknownFields?: 'keep' | 'drop';
+  text?: readonly TextRule[];
+  limits?: RedactionLimits;
+}>;
+export type ValueRedactionSession = Readonly<{
+  redactValue: (this: ValueRedactionSession, value: unknown) => LogValue;
+  redactText: (this: ValueRedactionSession, text: string) => string;
+  redactError: (
+    this: ValueRedactionSession,
+    value: unknown,
+    field: string,
+  ) => SerializedError | undefined;
+  fieldRule: (
+    this: ValueRedactionSession,
+    name: string,
+  ) => FieldRule | undefined;
+  truncated: boolean;
+}>;
+export type ValueRedactor = Readonly<{
+  limits: Readonly<{
+    maxDepth: number;
+    maxStringLength: number;
+    maxArrayLength: number;
+    maxKeys: number;
+    maxNodes: number;
+    maxOutputSize: number;
+  }>;
+  mask: (value: string) => string;
+  redactValue: (value: unknown) => LogValue;
+  redactText: (text: string) => string;
+  hash?: (value: string) => string;
+  createSession: () => ValueRedactionSession;
+}>;
+export type ValueTextRule = Readonly<{
+  name: string;
+  pattern: RegExp;
+  requiresHash?: boolean;
+  replace: (match: string, redactor: ValueRedactor) => string;
+}>;
+export type CreateValueRedactor = (
+  policy: Readonly<{
+    fields?: Readonly<Record<string, FieldRule>>;
+    unknownFields?: 'keep' | 'drop';
+    hash?: (value: string) => string;
+    limits?: Readonly<RedactionLimits & { maxOutputSize?: number }>;
+    text?: readonly ValueTextRule[];
+  }>,
+) => ValueRedactor;
+export type RedactorProviders = Readonly<{
+  createRedactor: CreateValueRedactor;
+  TEXT_RULES?: Readonly<Record<string, ValueTextRule>>;
+}>;
+export declare function createRedactor(
+  policy: RedactionPolicy | undefined,
+  providers: RedactorProviders,
+): Redactor;

package/dist/redaction/index.d.ts

@@ -0,0 +1,70 @@
+import type { LogValue, Redactor, SerializedError } from '../index.js';
+
+export type FieldRule = 'keep' | 'drop' | 'mask' | 'hash';
+export type RedactionLimits = Readonly<Partial<Redactor['limits']>>;
+export type TextRule = Readonly<{
+  name: string;
+  pattern: RegExp;
+  requiresHash?: boolean;
+  replace(this: TextRule, match: string, redactor: Redactor): string;
+}>;
+export type RedactionPolicy = Readonly<{
+  version?: string;
+  hash?: (this: RedactionPolicy, value: string) => string;
+  fields?: Readonly<Record<string, FieldRule>>;
+  unknownFields?: 'keep' | 'drop';
+  text?: readonly TextRule[];
+  limits?: RedactionLimits;
+}>;
+export type ValueRedactionSession = Readonly<{
+  redactValue: (this: ValueRedactionSession, value: unknown) => LogValue;
+  redactText: (this: ValueRedactionSession, text: string) => string;
+  redactError: (
+    this: ValueRedactionSession,
+    value: unknown,
+    field: string,
+  ) => SerializedError | undefined;
+  fieldRule: (
+    this: ValueRedactionSession,
+    name: string,
+  ) => FieldRule | undefined;
+  truncated: boolean;
+}>;
+export type ValueRedactor = Readonly<{
+  limits: Readonly<{
+    maxDepth: number;
+    maxStringLength: number;
+    maxArrayLength: number;
+    maxKeys: number;
+    maxNodes: number;
+    maxOutputSize: number;
+  }>;
+  mask: (value: string) => string;
+  redactValue: (value: unknown) => LogValue;
+  redactText: (text: string) => string;
+  hash?: (value: string) => string;
+  createSession: () => ValueRedactionSession;
+}>;
+export type ValueTextRule = Readonly<{
+  name: string;
+  pattern: RegExp;
+  requiresHash?: boolean;
+  replace: (match: string, redactor: ValueRedactor) => string;
+}>;
+export type CreateValueRedactor = (
+  policy: Readonly<{
+    fields?: Readonly<Record<string, FieldRule>>;
+    unknownFields?: 'keep' | 'drop';
+    hash?: (value: string) => string;
+    limits?: Readonly<RedactionLimits & { maxOutputSize?: number }>;
+    text?: readonly ValueTextRule[];
+  }>,
+) => ValueRedactor;
+export type RedactorProviders = Readonly<{
+  createRedactor: CreateValueRedactor;
+  TEXT_RULES?: Readonly<Record<string, ValueTextRule>>;
+}>;
+export declare function createRedactor(
+  policy: RedactionPolicy | undefined,
+  providers: RedactorProviders,
+): Redactor;

package/dist/redaction/index.js

@@ -0,0 +1,152 @@
+import { r as resolveLimits, d as define, i as isError, o as own } from '../chunk-LRCHwVuE.js';
+import { M as MARKERS } from '../chunk-CSS3f4_M.js';
+
+function createRedactor(
+  policy = {},
+  { createRedactor: createValueRedactor, TEXT_RULES: providerTextRules } = {},
+) {
+  if (typeof createValueRedactor !== 'function')
+    throw new TypeError('A value redactor factory is required');
+  if (!Array.isArray(policy.text) && !providerTextRules)
+    throw new TypeError('Default text rules are required');
+  const limits = resolveLimits(policy.limits);
+  const version = policy.version ?? '1';
+  if (
+    typeof version !== 'string' ||
+    !version ||
+    version.length > limits.maxStringLength
+  )
+    throw new TypeError('Invalid redaction version');
+  const { fields, unknownFields, hash, text } = policy;
+  const textRules = text ?? Object.values(providerTextRules);
+  const engine = createValueRedactor({
+    fields,
+    unknownFields,
+    hash:
+      typeof hash === 'function' ? (value) => hash.call(policy, value) : hash,
+    limits: { ...limits, maxOutputSize: limits.maxRecordSize },
+    text: text
+      ? textRules.map(({ name, pattern, requiresHash, replace }) => ({
+          name,
+          pattern,
+          requiresHash,
+          replace:
+            typeof replace === 'function'
+              ? function (match) {
+                  return replace.call(this, match, api);
+                }
+              : replace,
+        }))
+      : textRules,
+  });
+  let active;
+  const api = {
+    version,
+    limits,
+    mask: engine.mask,
+    redactText(value) {
+      return (active?.walk ?? engine.createSession()).redactText(value);
+    },
+
+    redactValue(value) {
+      const walk = engine.createSession();
+      const result = walk.redactValue(value);
+      if (active && walk.truncated) active.truncated = true;
+      return JSON.stringify(result).length <= limits.maxRecordSize
+        ? result
+        : MARKERS.LIMIT;
+    },
+
+    redact(draft) {
+      const previous = active;
+      const walk = engine.createSession();
+      active = { walk, truncated: false };
+      try {
+        let didTruncate = false;
+        const record = {};
+        for (const key of [
+          'runId',
+          'seq',
+          'at',
+          'level',
+          'area',
+          'scope',
+          'message',
+        ])
+          define(
+            record,
+            key,
+            typeof draft[key] === 'string' && !['runId', 'level'].includes(key)
+              ? walk.redactText(draft[key])
+              : draft[key],
+          );
+        record.redactionVersion = version;
+        if (draft.context) record.context = walk.redactValue(draft.context);
+        const data = draft.data;
+        if (isError(data)) {
+          const converted = walk.redactValue(data);
+          record.error =
+            typeof converted === 'string'
+              ? { name: 'Error', message: converted }
+              : converted;
+        } else if (data !== undefined) {
+          if (
+            data &&
+            typeof data === 'object' &&
+            !Array.isArray(data) &&
+            [Object.prototype, null].includes(Object.getPrototypeOf(data))
+          ) {
+            const error =
+              walk.fieldRule('error') === 'drop'
+                ? undefined
+                : own(data, 'error');
+            const promoted = isError(error);
+            if (promoted) {
+              const converted = walk.redactError(error, 'error');
+              if (converted !== undefined) record.error = converted;
+            }
+            const values = {};
+            let count = 0;
+            for (const key of Reflect.ownKeys(data)) {
+              if (++count > limits.maxKeys) {
+                define(values, '[truncated]', MARKERS.LIMIT);
+                didTruncate = true;
+                break;
+              }
+              if (key === 'error' && promoted) continue;
+              const descriptor = Object.getOwnPropertyDescriptor(data, key);
+              if (typeof key === 'string' && descriptor?.enumerable)
+                Object.defineProperty(values, key, descriptor);
+            }
+            const converted = walk.redactValue(values);
+            record.fields =
+              converted &&
+              typeof converted === 'object' &&
+              !Array.isArray(converted)
+                ? converted
+                : { value: converted };
+          } else record.fields = { value: walk.redactValue(data) };
+        }
+        if (walk.truncated || active.truncated || didTruncate)
+          record.truncated = true;
+        if (JSON.stringify(record).length > limits.maxRecordSize) {
+          delete record.fields;
+          delete record.context;
+          delete record.error;
+          record.fields = { value: MARKERS.LIMIT };
+          record.truncated = true;
+          if (JSON.stringify(record).length > limits.maxRecordSize)
+            throw new TypeError('Record headers exceed size limit');
+        }
+        return record;
+      } finally {
+        active = previous;
+      }
+    },
+  };
+  if (engine.hash) api.hash = engine.hash;
+  return Object.freeze(api);
+}
+
+export { createRedactor };
+//# sourceMappingURL=index.js.map

package/dist/redaction/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sources":["../../src/redaction/index.js"],"sourcesContent":["import { define, isError, own, resolveLimits } from '../core/common.js';\nimport { MARKERS } from '../core/constants.js';\n\nexport function createRedactor(\n  policy = {},\n  { createRedactor: createValueRedactor, TEXT_RULES: providerTextRules } = {},\n) {\n  if (typeof createValueRedactor !== 'function')\n    throw new TypeError('A value redactor factory is required');\n  if (!Array.isArray(policy.text) && !providerTextRules)\n    throw new TypeError('Default text rules are required');\n  const limits = resolveLimits(policy.limits);\n  const version = policy.version ?? '1';\n  if (\n    typeof version !== 'string' ||\n    !version ||\n    version.length > limits.maxStringLength\n  )\n    throw new TypeError('Invalid redaction version');\n  const { fields, unknownFields, hash, text } = policy;\n  const textRules = text ?? Object.values(providerTextRules);\n  const engine = createValueRedactor({\n    fields,\n    unknownFields,\n    hash:\n      typeof hash === 'function' ? (value) => hash.call(policy, value) : hash,\n    limits: { ...limits, maxOutputSize: limits.maxRecordSize },\n    text: text\n      ? textRules.map(({ name, pattern, requiresHash, replace }) => ({\n          name,\n          pattern,\n          requiresHash,\n          replace:\n            typeof replace === 'function'\n              ? function (match) {\n                  return replace.call(this, match, api);\n                }\n              : replace,\n        }))\n      : textRules,\n  });\n  let active;\n  const api = {\n    version,\n    limits,\n    mask: engine.mask,\n    redactText(value) {\n      return (active?.walk ?? engine.createSession()).redactText(value);\n    },\n\n    redactValue(value) {\n      const walk = engine.createSession();\n      const result = walk.redactValue(value);\n      if (active && walk.truncated) active.truncated = true;\n      return JSON.stringify(result).length <= limits.maxRecordSize\n        ? result\n        : MARKERS.LIMIT;\n    },\n\n    redact(draft) {\n      const previous = active;\n      const walk = engine.createSession();\n      active = { walk, truncated: false };\n      try {\n        let didTruncate = false;\n        const record = {};\n        for (const key of [\n          'runId',\n          'seq',\n          'at',\n          'level',\n          'area',\n          'scope',\n          'message',\n        ])\n          define(\n            record,\n            key,\n            typeof draft[key] === 'string' && !['runId', 'level'].includes(key)\n              ? walk.redactText(draft[key])\n              : draft[key],\n          );\n        record.redactionVersion = version;\n        if (draft.context) record.context = walk.redactValue(draft.context);\n        const data = draft.data;\n        if (isError(data)) {\n          const converted = walk.redactValue(data);\n          record.error =\n            typeof converted === 'string'\n              ? { name: 'Error', message: converted }\n              : converted;\n        } else if (data !== undefined) {\n          if (\n            data &&\n            typeof data === 'object' &&\n            !Array.isArray(data) &&\n            [Object.prototype, null].includes(Object.getPrototypeOf(data))\n          ) {\n            const error =\n              walk.fieldRule('error') === 'drop'\n                ? undefined\n                : own(data, 'error');\n            const promoted = isError(error);\n            if (promoted) {\n              const converted = walk.redactError(error, 'error');\n              if (converted !== undefined) record.error = converted;\n            }\n            const values = {};\n            let count = 0;\n            for (const key of Reflect.ownKeys(data)) {\n              if (++count > limits.maxKeys) {\n                define(values, '[truncated]', MARKERS.LIMIT);\n                didTruncate = true;\n                break;\n              }\n              if (key === 'error' && promoted) continue;\n              const descriptor = Object.getOwnPropertyDescriptor(data, key);\n              if (typeof key === 'string' && descriptor?.enumerable)\n                Object.defineProperty(values, key, descriptor);\n            }\n            const converted = walk.redactValue(values);\n            record.fields =\n              converted &&\n              typeof converted === 'object' &&\n              !Array.isArray(converted)\n                ? converted\n                : { value: converted };\n          } else record.fields = { value: walk.redactValue(data) };\n        }\n        if (walk.truncated || active.truncated || didTruncate)\n          record.truncated = true;\n        if (JSON.stringify(record).length > limits.maxRecordSize) {\n          delete record.fields;\n          delete record.context;\n          delete record.error;\n          record.fields = { value: MARKERS.LIMIT };\n          record.truncated = true;\n          if (JSON.stringify(record).length > limits.maxRecordSize)\n            throw new TypeError('Record headers exceed size limit');\n        }\n        return record;\n      } finally {\n        active = previous;\n      }\n    },\n  };\n  if (engine.hash) api.hash = engine.hash;\n  return Object.freeze(api);\n}\n"],"names":[],"mappings":";;;AAGO,SAAS,cAAc;AAC9B,EAAE,MAAM,GAAG,EAAE;AACb,EAAE,EAAE,cAAc,EAAE,mBAAmB,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,EAAE;AAC7E,EAAE;AACF,EAAE,IAAI,OAAO,mBAAmB,KAAK,UAAU;AAC/C,IAAI,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC;AAC/D,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;AACvD,IAAI,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC;AAC1D,EAAE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;AAC7C,EAAE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG;AACvC,EAAE;AACF,IAAI,OAAO,OAAO,KAAK,QAAQ;AAC/B,IAAI,CAAC,OAAO;AACZ,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;AAC5B;AACA,IAAI,MAAM,IAAI,SAAS,CAAC,2BAA2B,CAAC;AACpD,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM;AACtD,EAAE,MAAM,SAAS,GAAG,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;AAC5D,EAAE,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACrC,IAAI,MAAM;AACV,IAAI,aAAa;AACjB,IAAI,IAAI;AACR,MAAM,OAAO,IAAI,KAAK,UAAU,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,IAAI;AAC7E,IAAI,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE;AAC9D,IAAI,IAAI,EAAE;AACV,QAAQ,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM;AACrE,UAAU,IAAI;AACd,UAAU,OAAO;AACjB,UAAU,YAAY;AACtB,UAAU,OAAO;AACjB,YAAY,OAAO,OAAO,KAAK;AAC/B,gBAAgB,UAAU,KAAK,EAAE;AACjC,kBAAkB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;AACvD,gBAAgB;AAChB,gBAAgB,OAAO;AACvB,SAAS,CAAC;AACV,QAAQ,SAAS;AACjB,GAAG,CAAC;AACJ,EAAE,IAAI,MAAM;AACZ,EAAE,MAAM,GAAG,GAAG;AACd,IAAI,OAAO;AACX,IAAI,MAAM;AACV,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI;AACrB,IAAI,UAAU,CAAC,KAAK,EAAE;AACtB,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,UAAU,CAAC,KAAK,CAAC;AACvE,IAAI,CAAC;;AAEL,IAAI,WAAW,CAAC,KAAK,EAAE;AACvB,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE;AACzC,MAAM,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;AAC5C,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,GAAG,IAAI;AAC3D,MAAM,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC;AACrD,UAAU;AACV,UAAU,OAAO,CAAC,KAAK;AACvB,IAAI,CAAC;;AAEL,IAAI,MAAM,CAAC,KAAK,EAAE;AAClB,MAAM,MAAM,QAAQ,GAAG,MAAM;AAC7B,MAAM,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,EAAE;AACzC,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE;AACzC,MAAM,IAAI;AACV,QAAQ,IAAI,WAAW,GAAG,KAAK;AAC/B,QAAQ,MAAM,MAAM,GAAG,EAAE;AACzB,QAAQ,KAAK,MAAM,GAAG,IAAI;AAC1B,UAAU,OAAO;AACjB,UAAU,KAAK;AACf,UAAU,IAAI;AACd,UAAU,OAAO;AACjB,UAAU,MAAM;AAChB,UAAU,OAAO;AACjB,UAAU,SAAS;AACnB,SAAS;AACT,UAAU,MAAM;AAChB,YAAY,MAAM;AAClB,YAAY,GAAG;AACf,YAAY,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG;AAC9E,gBAAgB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;AAC1C,gBAAgB,KAAK,CAAC,GAAG,CAAC;AAC1B,WAAW;AACX,QAAQ,MAAM,CAAC,gBAAgB,GAAG,OAAO;AACzC,QAAQ,IAAI,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC;AAC3E,QAAQ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI;AAC/B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE;AAC3B,UAAU,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;AAClD,UAAU,MAAM,CAAC,KAAK;AACtB,YAAY,OAAO,SAAS,KAAK;AACjC,gBAAgB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS;AACnD,gBAAgB,SAAS;AACzB,QAAQ,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,EAAE;AACvC,UAAU;AACV,YAAY,IAAI;AAChB,YAAY,OAAO,IAAI,KAAK,QAAQ;AACpC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;AAChC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC;AACzE,YAAY;AACZ,YAAY,MAAM,KAAK;AACvB,cAAc,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK;AAC1C,kBAAkB;AAClB,kBAAkB,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACpC,YAAY,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;AAC3C,YAAY,IAAI,QAAQ,EAAE;AAC1B,cAAc,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC;AAChE,cAAc,IAAI,SAAS,KAAK,SAAS,EAAE,MAAM,CAAC,KAAK,GAAG,SAAS;AACnE,YAAY;AACZ,YAAY,MAAM,MAAM,GAAG,EAAE;AAC7B,YAAY,IAAI,KAAK,GAAG,CAAC;AACzB,YAAY,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACrD,cAAc,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE;AAC5C,gBAAgB,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC;AAC5D,gBAAgB,WAAW,GAAG,IAAI;AAClC,gBAAgB;AAChB,cAAc;AACd,cAAc,IAAI,GAAG,KAAK,OAAO,IAAI,QAAQ,EAAE;AAC/C,cAAc,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3E,cAAc,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,EAAE,UAAU;AACnE,gBAAgB,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,UAAU,CAAC;AAC9D,YAAY;AACZ,YAAY,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;AACtD,YAAY,MAAM,CAAC,MAAM;AACzB,cAAc,SAAS;AACvB,cAAc,OAAO,SAAS,KAAK,QAAQ;AAC3C,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS;AACtC,kBAAkB;AAClB,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE;AACtC,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;AAClE,QAAQ;AACR,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,WAAW;AAC7D,UAAU,MAAM,CAAC,SAAS,GAAG,IAAI;AACjC,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE;AAClE,UAAU,OAAO,MAAM,CAAC,MAAM;AAC9B,UAAU,OAAO,MAAM,CAAC,OAAO;AAC/B,UAAU,OAAO,MAAM,CAAC,KAAK;AAC7B,UAAU,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;AAClD,UAAU,MAAM,CAAC,SAAS,GAAG,IAAI;AACjC,UAAU,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,MAAM,CAAC,aAAa;AAClE,YAAY,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC;AACnE,QAAQ;AACR,QAAQ,OAAO,MAAM;AACrB,MAAM,CAAC,SAAS;AAChB,QAAQ,MAAM,GAAG,QAAQ;AACzB,MAAM;AACN,IAAI,CAAC;AACL,GAAG;AACH,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI;AACzC,EAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;AAC3B;;"}

package/dist/sip/index.cjs

@@ -0,0 +1,336 @@
+'use strict';
+
+var constants = require('../chunk-BLf-eCDO.cjs');
+
+const SIP_ERRORS = /* @__PURE__ */ Object.freeze({
+  CALLBACK: 'SIP display-name callback must return a string without controls',
+  RESULT_LIMIT: 'SIP display name exceeds maxStringLength',
+  OUTPUT_LIMIT: 'SIP output exceeds its size limit',
+});
+
+const sdpRule = (name, pattern, replace) =>
+  Object.freeze({ name, pattern, replace });
+
+function hasUnclosedQuote(text) {
+  let quoted = false;
+  let escaped = false;
+  for (const character of text) {
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (character === '\\') {
+      escaped = true;
+      continue;
+    }
+    if (character === '"') quoted = !quoted;
+  }
+  return quoted;
+}
+
+function resize(budget, change) {
+  budget.size += change;
+  if (budget.size > budget.limit) throw new RangeError(SIP_ERRORS.OUTPUT_LIMIT);
+}
+
+function readDisplayName(value) {
+  const name = value.trim();
+  for (const character of name) {
+    const code = character.charCodeAt(0);
+    if ((code < 32 && code !== 9) || (code >= 127 && code <= 159)) return null;
+  }
+  if (name.startsWith('"')) {
+    if (!/^"(?:\\[\s\S]|[^"\\])*"$/.test(name)) return null;
+    return name.slice(1, -1).replace(/\\([\s\S])/g, '$1');
+  }
+  return /["\\]/.test(name) ? null : name;
+}
+
+function hasValidParameters(value) {
+  return /^(?:[ \t]*;[ \t]*[\w.!%*+`'~-]+(?:[ \t]*=[ \t]*(?:[\w.!%*+`'~-]+|\[[\da-f:.]+\]|"(?:[^"\\\r\n]|\\[^\r\n])*"))?)*[ \t]*$/i.test(
+    value,
+  );
+}
+
+function isBareIdentity(value) {
+  if (/^\s*(?:(?:sips?:|tel:)[^\s<>"\\]+|\*)\s*$/i.test(value)) return true;
+  const address = /^[ \t]*(?:sips?:|tel:)[^\s<>;?"\\]+/i.exec(value);
+  return Boolean(address) && hasValidParameters(value.slice(address[0].length));
+}
+
+function parseIdentity(value) {
+  const parts = [];
+  let start = 0;
+  let angle = -1;
+  let close = -1;
+  let inAddress = false;
+  let quoted = false;
+  let escaped = false;
+  const append = (end) => {
+    const segment = value.slice(start, end);
+    let name = null;
+    if (angle < 0) {
+      if (!isBareIdentity(segment)) return false;
+    } else {
+      if (!hasValidParameters(value.slice(close + 1, end))) return false;
+      name = readDisplayName(value.slice(start, angle));
+      if (name === null) return false;
+    }
+    parts.push({ start, end, angle, name });
+    return true;
+  };
+  for (let index = 0; index < value.length; index++) {
+    const character = value[index];
+    if (escaped) {
+      escaped = false;
+      continue;
+    }
+    if (quoted && character === '\\') {
+      escaped = true;
+      continue;
+    }
+    if (character === '"') quoted = !quoted;
+    if (quoted) continue;
+    if (character === '<') {
+      if (
+        angle >= 0 ||
+        !/^(?:sips?:|tel:)/i.test(value.slice(index + 1, index + 6))
+      )
+        return null;
+      angle = index;
+      inAddress = true;
+    } else if (character === '>') {
+      if (
+        !inAddress ||
+        !/^(?:sips?:|tel:)[^\s<>"\\]+$/i.test(value.slice(angle + 1, index))
+      )
+        return null;
+      inAddress = false;
+      close = index;
+    } else if (character === ',' && !inAddress) {
+      if (!append(index)) return null;
+      start = index + 1;
+      angle = -1;
+      close = -1;
+    }
+  }
+  return quoted || inAddress || !append(value.length) ? null : parts;
+}
+
+function redactIdentity(value, redactor, redactDisplayName, budget) {
+  const segments = parseIdentity(value);
+  if (!segments) {
+    const replacement = ` ${constants.MARKERS.MASK}`;
+    resize(budget, replacement.length - value.length);
+    return replacement;
+  }
+  const parts = [];
+  for (const { start, end, angle, name } of segments) {
+    if (name === null) {
+      parts.push(value.slice(start, end));
+      continue;
+    }
+    let result = '';
+    if (name)
+      result = redactDisplayName ? redactDisplayName(name) : constants.MARKERS.MASK;
+    if (typeof result !== 'string') throw new TypeError(SIP_ERRORS.CALLBACK);
+    if (result.length > redactor.limits.maxStringLength)
+      throw new RangeError(SIP_ERRORS.RESULT_LIMIT);
+    let length = result ? 4 + result.length : 1;
+    for (const character of result) {
+      const code = character.charCodeAt(0);
+      if (code < 32 || (code >= 127 && code <= 159))
+        throw new TypeError(SIP_ERRORS.CALLBACK);
+      if (character === '"' || character === '\\') length++;
+    }
+    resize(budget, length - (angle - start));
+    const prefix = result ? ` "${result.replace(/["\\]/g, '\\$&')}" ` : ' ';
+    parts.push(`${prefix}${value.slice(angle, end)}`);
+  }
+  return parts.join(',');
+}
+function createSdpTextRules(TEXT_RULES) {
+  return Object.freeze([
+    sdpRule(
+      'ice',
+      /a=ice-(?:pwd|ufrag):[^\r\n\\"]*/gi,
+      (match) => `${match.slice(0, match.indexOf(':') + 1)}[redacted]`,
+    ),
+    sdpRule('sdes', /a=crypto:[^\r\n\\"]*/gi, () => 'a=crypto:[redacted]'),
+    sdpRule(
+      'fingerprint',
+      /a=fingerprint:[^\r\n\\"]*/gi,
+      () => 'a=fingerprint:[redacted]',
+    ),
+    sdpRule(
+      'origin',
+      /(?:^|[\r\n]|\\[rn])o=[^\s]+/g,
+      (match) => `${match.slice(0, match.indexOf('o=') + 2)}[redacted]`,
+    ),
+    sdpRule(
+      'mediaIdentity',
+      /a=(?:msid|identity):[^\r\n\\"]*/gi,
+      (match) => `${match.slice(0, match.indexOf(':') + 1)}[redacted]`,
+    ),
+    sdpRule(
+      'sourceIdentity',
+      /(?:^|[\r\n])a=ssrc:\d+[ \t]+(?:cname|msid|mslabel|label):[^\r\n]*/gi,
+      (match) =>
+        `${match.slice(0, match.indexOf(':', match.indexOf(':') + 1) + 1)}[redacted]`,
+    ),
+    sdpRule(
+      'serializedSourceIdentity',
+      /(?:\\[rn]|(?<="))a=ssrc:\d+[ \t]+(?:cname|msid|mslabel|label):(?:\\(?![rn])[^\r\n]|[^\r\n\\"])*/gi,
+      (match) =>
+        `${match.slice(0, match.indexOf(':', match.indexOf(':') + 1) + 1)}[redacted]`,
+    ),
+    sdpRule(
+      'localAddress',
+      /(?<![\w-])[\w-]+\.local\b/gi,
+      () => '[local-address]',
+    ),
+    sdpRule(
+      'turn',
+      /(?:"(?:credential|password|username)"\s*:\s*(?:"(?:\\.|[^"\\])*"|[^,}\s]+)|(?:credential|password|username)\s*=\s*(?:"(?:\\.|[^"\\])*"|[^,}\s]+))/gi,
+      (match) => `${match.slice(0, match.search(/[:=]/) + 1)}"[redacted]"`,
+    ),
+    TEXT_RULES.ipv4,
+    TEXT_RULES.ipv6,
+    TEXT_RULES.urlCredentials,
+    TEXT_RULES.sipUri,
+    TEXT_RULES.telUri,
+    sdpRule('dtmf', /Signal\s*=\s*[^\r\n]+/gi, () => 'Signal=*'),
+  ]);
+}
+
+function describeSipMessage(text) {
+  const first = text.split(/\r?\n/, 1)[0];
+  const result = {};
+  if (/^SIP\/2\.0\s+\d{3}/i.test(first))
+    result.status = Number(first.split(/\s+/)[1]);
+  else {
+    const match = /^([A-Z]+)\s+\S+\s+SIP\/2\.0/i.exec(first);
+    if (match) result.method = match[1];
+  }
+  const callId = /^(?:Call-ID|i)\s*:\s*([^\r\n]+)/im.exec(text);
+  const cseq = /^CSeq\s*:\s*([^\r\n]+)/im.exec(text);
+  if (callId) result.callId = callId[1].trim();
+  if (cseq) result.cseq = cseq[1].trim();
+  return Object.freeze(result);
+}
+
+function redactSipMessage(
+  text,
+  { redactor, redactDisplayName },
+  TEXT_RULES,
+  SDP_TEXT_RULES,
+) {
+  if (
+    redactDisplayName !== undefined &&
+    typeof redactDisplayName !== 'function'
+  )
+    throw new TypeError(SIP_ERRORS.CALLBACK);
+  const limit = redactor.limits.maxStringLength * 4;
+  if (text.length > limit) return constants.MARKERS.LIMIT;
+  const unfolded = text.replace(/\r?\n[ \t]+/g, ' ');
+  const separator = /\r?\n\r?\n/.exec(unfolded);
+  let headers = separator ? unfolded.slice(0, separator.index) : unfolded;
+  let body = separator
+    ? unfolded.slice(separator.index + separator[0].length)
+    : '';
+  headers = headers.split(/\r?\n/).join('\r\n');
+  const budget = {
+    size: headers.length + body.length + (separator ? 4 : 0),
+    limit,
+  };
+  resize(budget, 0);
+  const replace = (value, pattern, render) =>
+    value.replace(pattern, (match) => {
+      const replacement = render(match);
+      resize(budget, replacement.length - match.length);
+      return replacement;
+    });
+  const contentType =
+    /^(?:Content-Type|c)\s*:\s*([^;\r\n]+)/im
+      .exec(headers)?.[1]
+      .trim()
+      .toLowerCase() ?? 'unknown';
+  headers = replace(
+    headers,
+    /^(?:(?:Proxy-)?Authorization|WWW-Authenticate|Proxy-Authenticate)\s*:[^\r\n]*/gim,
+    (header) =>
+      hasUnclosedQuote(header)
+        ? `${header.slice(0, header.indexOf(':'))}: [redacted]`
+        : header.replace(
+            /\b(username|response|nonce|cnonce|opaque)\s*=\s*(?:"(?:\\.|[^"\\])*"|[^,\s]+)/gi,
+            (_, key) => `${key}="[redacted]"`,
+          ),
+  );
+  headers = headers
+    .split(/\r?\n/)
+    .map((line) => {
+      const header =
+        /^((?:From|To|Contact|P-Asserted-Identity|P-Preferred-Identity|Refer-To|Referred-By|Diversion|History-Info|Remote-Party-ID|P-Called-Party-ID|Reply-To|f|t|m|r|b)\s*:)(.*)$/i.exec(
+          line,
+        );
+      if (!header) return line;
+      const value = redactIdentity(
+        header[2],
+        redactor,
+        redactDisplayName,
+        budget,
+      );
+      return `${header[1]}${value}`;
+    })
+    .join('\r\n');
+  for (const rule of [
+    TEXT_RULES.urlCredentials,
+    TEXT_RULES.sipUri,
+    TEXT_RULES.telUri,
+  ])
+    headers = replace(headers, rule.pattern, (match) => rule.replace(match));
+  if (body) {
+    if (
+      contentType === 'application/sdp' ||
+      contentType === 'application/dtmf-relay'
+    ) {
+      for (const rule of SDP_TEXT_RULES)
+        body = replace(body, rule.pattern, (match) => rule.replace(match));
+    } else {
+      const replacement = `[${contentType} ${new TextEncoder().encode(body).length} bytes]`;
+      resize(budget, replacement.length - body.length);
+      body = replacement;
+    }
+  }
+  const addresses = (value) => {
+    const ipv4 = replace(value, TEXT_RULES.ipv4.pattern, (match) =>
+      TEXT_RULES.ipv4.replace(match),
+    );
+    return replace(ipv4, TEXT_RULES.ipv6.pattern, (match) =>
+      TEXT_RULES.ipv6.replace(match),
+    );
+  };
+  return `${addresses(headers)}${separator ? `\r\n\r\n${body}` : ''}`;
+}
+
+function createSipTools(textRules) {
+  if (
+    !textRules?.ipv4 ||
+    !textRules.ipv6 ||
+    !textRules.urlCredentials ||
+    !textRules.sipUri ||
+    !textRules.telUri
+  )
+    throw new TypeError('SIP text rules are required');
+  const SDP_TEXT_RULES = createSdpTextRules(textRules);
+  return Object.freeze({
+    SDP_TEXT_RULES,
+    redactSipMessage: (text, options) =>
+      redactSipMessage(text, options, textRules, SDP_TEXT_RULES),
+    describeSipMessage,
+  });
+}
+
+exports.createSipTools = createSipTools;
+exports.describeSipMessage = describeSipMessage;
+//# sourceMappingURL=index.cjs.map