@canonry/canonry 6.2.0 → 6.3.1

package/dist/{chunk-6EPN4XY5.js → chunk-EV5G5QRR.js}

@@ -9775,14 +9775,14 @@ function breakdownShares(parts) {
   const total = parts.reduce((sum, part) => sum + Math.max(0, part), 0);
   return parts.map((part) => shareOf(part, total) ?? 0);
 }
-function wilsonInterval(successes, n, z71 = 1.96) {
+function wilsonInterval(successes, n, z72 = 1.96) {
   if (!Number.isFinite(n) || n <= 0) return null;
   const s = Math.max(0, Math.min(successes, n));
   const p = s / n;
-  const z210 = z71 * z71;
+  const z210 = z72 * z72;
   const denom = 1 + z210 / n;
   const center = (p + z210 / (2 * n)) / denom;
-  const margin = z71 / denom * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
+  const margin = z72 / denom * Math.sqrt(p * (1 - p) / n + z210 / (4 * n * n));
   return {
     low: round(Math.max(0, center - margin)),
     high: round(Math.min(1, center + margin))
@@ -20105,6 +20105,193 @@ function detectAgentRuntime(env) {
   return AGENT_NONE;
 }
 
+// ../contracts/src/feedback.ts
+import { z as z66 } from "zod";
+
+// ../contracts/src/log-redaction.ts
+var REDACTED = "[REDACTED]";
+var TRUNCATED = "[TRUNCATED]";
+var CIRCULAR = "[CIRCULAR]";
+var UNREADABLE = "[UNREADABLE]";
+var OMITTED = "[OMITTED]";
+var MAX_DEPTH = 6;
+var MAX_ARRAY_ITEMS = 50;
+var MAX_OBJECT_KEYS = 100;
+var MAX_STRING_LENGTH = 4096;
+var secretKey = /api[ _-]?key|authorization|auth(?:entication)?|cookie|password|secret|token|credential/i;
+var escapedSecretAssignment = /\\+["'][\w -]*(?:api[ _-]?key|auth|cookie|password|secret|token|credential)[\w -]*\\+["']\s*:/i;
+var unsafeGraphKey = /^(?:req|res|request|reply|raw|socket|headers?|body|responsebody|apiresponse|rawresponse|providerbody|providerresponse)$/i;
+var providerNameKey = /^provider$/i;
+function isSensitiveDiagnosticQueryKey(key) {
+  return secretKey.test(key) || /^key$/i.test(key);
+}
+function redactLogValue(value) {
+  try {
+    return redactValue(value, 0, /* @__PURE__ */ new WeakSet());
+  } catch {
+    return UNREADABLE;
+  }
+}
+function redactLogString(value) {
+  try {
+    const clipped = value.length > MAX_STRING_LENGTH ? `${value.slice(0, MAX_STRING_LENGTH)}${TRUNCATED}` : value;
+    if (escapedSecretAssignment.test(clipped)) return REDACTED;
+    return redactEmbeddedUrls(clipped).replace(/\b((?:set-cookie|cookie)\s*[:=]\s*)[^\r\n]*(?:\r?\n[ \t][^\r\n]*)*/gi, `$1${REDACTED}`).replace(
+      /(["']?[\w-]*(?:api[ _-]?key|auth|cookie|password|secret|token|credential)[\w-]*["']?\s*[=:]\s*)(?:"(?:\\.|[^"\\])*(?:"|$)|'(?:\\.|[^'\\])*(?:'|$))/gi,
+      `$1${REDACTED}`
+    ).replace(/\b(Bearer|Basic)\s+[^\s,;]+/gi, (_match, scheme) => `${scheme} ${REDACTED}`).replace(
+      /(api[ _-]?key|authorization|auth(?:entication)?|cookie|password|secret|token|credential)\s*([=:])\s*(?!\[REDACTED\])[^\s&,'")\]}]+/gi,
+      `$1$2${REDACTED}`
+    ).slice(0, MAX_STRING_LENGTH);
+  } catch {
+    return UNREADABLE;
+  }
+}
+function redactValue(value, depth, seen, key) {
+  if (key && diagnosticIdentity(key, value) !== void 0) return value;
+  if (key && secretKey.test(key)) return REDACTED;
+  if (key && unsafeGraphKey.test(key)) return OMITTED;
+  if (key && providerNameKey.test(key) && typeof value === "object" && value !== null) return OMITTED;
+  if (value === null || typeof value === "boolean") return value;
+  if (typeof value === "number") return Number.isFinite(value) ? value : String(value);
+  if (typeof value === "string") return redactLogString(value);
+  if (typeof value === "bigint") return value.toString();
+  if (typeof value === "undefined") return void 0;
+  if (typeof value === "symbol" || typeof value === "function") return `[${typeof value}]`;
+  if (depth >= MAX_DEPTH) return TRUNCATED;
+  if (typeof value !== "object") return UNREADABLE;
+  if (seen.has(value)) return CIRCULAR;
+  seen.add(value);
+  try {
+    if (value instanceof Error) return redactError(value, depth, seen);
+    if (Array.isArray(value)) {
+      const output2 = [];
+      const length = safeArrayLength(value);
+      for (let index = 0; index < Math.min(length, MAX_ARRAY_ITEMS); index++) {
+        output2.push(redactValue(safeProperty(value, String(index)), depth + 1, seen));
+      }
+      if (length > MAX_ARRAY_ITEMS) output2.push(TRUNCATED);
+      return output2;
+    }
+    const output = {};
+    const keys = safeKeys(value);
+    for (const nestedKey of keys.slice(0, MAX_OBJECT_KEYS)) {
+      output[nestedKey] = redactValue(safeProperty(value, nestedKey), depth + 1, seen, nestedKey);
+    }
+    if (keys.length > MAX_OBJECT_KEYS) output.__truncated = true;
+    return output;
+  } catch {
+    return UNREADABLE;
+  } finally {
+    seen.delete(value);
+  }
+}
+function diagnosticIdentity(key, value) {
+  if (typeof value !== "string") return void 0;
+  if (key === "actor" && /^(?:api-key|user):[\w.-]{1,256}$/.test(value)) return value;
+  if (key === "credentialId" && /^[\w.-]{1,256}$/.test(value)) return value;
+  return void 0;
+}
+function redactError(error, depth, seen) {
+  const output = {
+    name: redactLogString(safeErrorString(error, "name")),
+    message: redactLogString(safeErrorString(error, "message"))
+  };
+  const stack = safeErrorString(error, "stack");
+  if (stack) output.stack = redactLogString(stack);
+  for (const key of safeKeys(error).slice(0, MAX_OBJECT_KEYS)) {
+    output[key] = redactValue(safeProperty(error, key), depth + 1, seen, key);
+  }
+  return output;
+}
+function safeKeys(value) {
+  try {
+    return Object.keys(value);
+  } catch {
+    return [];
+  }
+}
+function safeArrayLength(value) {
+  try {
+    return Number.isSafeInteger(value.length) && value.length >= 0 ? value.length : 0;
+  } catch {
+    return 0;
+  }
+}
+function safeProperty(value, key) {
+  try {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key);
+    if (!descriptor || !("value" in descriptor)) return UNREADABLE;
+    return descriptor.value;
+  } catch {
+    return UNREADABLE;
+  }
+}
+function safeErrorString(error, key) {
+  try {
+    const value = error[key];
+    return typeof value === "string" ? value : "";
+  } catch {
+    return UNREADABLE;
+  }
+}
+function redactEmbeddedUrls(value) {
+  return value.replace(/https?:\/\/[^\s<>"']+/gi, (candidate) => {
+    if (candidate.includes(TRUNCATED)) return "[TRUNCATED_URL]";
+    const suffix = candidate.match(/[),.;!?\]}]+$/)?.[0] ?? "";
+    const rawUrl = suffix ? candidate.slice(0, -suffix.length) : candidate;
+    try {
+      const url = new URL(rawUrl);
+      if (url.username || url.password) {
+        url.username = REDACTED;
+        url.password = REDACTED;
+      }
+      for (const key of [...url.searchParams.keys()]) {
+        if (isSensitiveDiagnosticQueryKey(key)) url.searchParams.set(key, REDACTED);
+      }
+      return `${url.toString()}${suffix}`;
+    } catch {
+      return `[REDACTED_URL]${suffix}`;
+    }
+  });
+}
+
+// ../contracts/src/feedback.ts
+var FEEDBACK_KINDS = ["struggle", "bug", "improvement", "other"];
+var feedbackKindSchema = z66.enum(FEEDBACK_KINDS);
+var FEEDBACK_LIMITS = {
+  summary: 500,
+  details: 4e3,
+  area: 40,
+  command: 120,
+  errorCode: 40
+};
+var feedbackSubmissionSchema = z66.object({
+  kind: feedbackKindSchema,
+  summary: z66.string().trim().min(1).max(FEEDBACK_LIMITS.summary),
+  details: z66.string().trim().min(1).max(FEEDBACK_LIMITS.details).optional(),
+  area: z66.string().trim().min(1).max(FEEDBACK_LIMITS.area).optional(),
+  command: z66.string().trim().min(1).max(FEEDBACK_LIMITS.command).optional(),
+  errorCode: z66.string().trim().min(1).max(FEEDBACK_LIMITS.errorCode).optional()
+}).strict();
+var feedbackAcceptedDtoSchema = z66.object({
+  accepted: z66.boolean(),
+  id: z66.string()
+});
+function redactFeedbackText(value, limit) {
+  return truncateUtf16(
+    redactLogString(value).replace(SECRET_FLAG_VALUE, "$1 [REDACTED]").replace(BARE_CREDENTIAL, "[REDACTED]"),
+    limit
+  );
+}
+function truncateUtf16(value, limit) {
+  if (value.length <= limit) return value;
+  const cut = value.slice(0, limit);
+  return /[\uD800-\uDBFF]$/.test(cut) ? cut.slice(0, -1) : cut;
+}
+var SECRET_FLAG_VALUE = /(?<=^|[ \t])(--?(?:[a-z\d]+-)*(?:key|token|secret|password|passwd|credential|credentials|auth|authorization|bearer)(?:-[a-z\d]+)*)(?:[ \t]*=[ \t]*|[ \t]+)(?!\[REDACTED\])(?:"[^"\n]*"|'[^'\n]*'|\S+)/gim;
+var BARE_CREDENTIAL = /\b(?:sk-[\w-]{16,}|AIza[\w-]{30,}|pplx-[A-Za-z0-9]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|github_pat_\w{20,}|cnry_[\w-]{16,})/g;
+
 // ../contracts/src/trend-stability.ts
 var MIN_TREND_POINTS = 4;
 function isTrendBaseline(points) {
@@ -20112,14 +20299,14 @@ function isTrendBaseline(points) {
 }
 
 // ../contracts/src/report-sections.ts
-import { z as z66 } from "zod";
+import { z as z67 } from "zod";
 var CLIENT_AUDIENCE = reportAudienceSchema.enum.client;
 var BOTH_AUDIENCES = reportActionAudienceSchema.enum.both;
 var ADVANCED_MODE = visibilityReportResolvedModeSchema.enum.advanced;
 function pluralize(count2, singular, plural = `${singular}s`) {
   return count2 === 1 ? singular : plural;
 }
-var reportSectionIdSchema = z66.enum([
+var reportSectionIdSchema = z67.enum([
   "client-summary",
   "executive-summary",
   "share-of-voice",
@@ -20842,240 +21029,92 @@ var REPORT_SECTION_COPY = {
 };
 
 // ../contracts/src/operational-logs.ts
-import { z as z67 } from "zod";
-var operationalLogLevelSchema = z67.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
-var diagnosticContextSchema = z67.object({
-  runId: z67.string().min(1).max(256).optional(),
-  projectId: z67.string().min(1).max(256).optional(),
-  requestId: z67.string().min(1).max(256).optional(),
-  actor: z67.string().min(1).max(512).optional(),
-  credentialId: z67.string().min(1).max(512).optional(),
-  userAgent: z67.string().min(1).max(512).optional(),
-  actorSession: z67.string().min(1).max(512).optional(),
-  method: z67.string().min(1).max(16).optional(),
-  route: z67.string().min(1).max(256).optional(),
-  operationId: z67.string().min(1).max(256).optional(),
-  jobId: z67.string().min(1).max(256).optional(),
-  taskId: z67.string().min(1).max(256).optional(),
-  traceId: z67.string().min(1).max(256).optional(),
-  provider: z67.string().min(1).max(256).optional(),
-  errorCode: z67.string().min(1).max(128).optional(),
-  attempt: z67.number().finite().optional(),
-  count: z67.number().finite().optional(),
-  total: z67.number().finite().optional(),
-  progress: z67.number().finite().optional(),
-  httpStatus: z67.number().finite().optional(),
-  statusCode: z67.number().finite().optional(),
-  durationMs: z67.number().finite().optional(),
-  bytes: z67.number().finite().optional(),
-  retryAfterMs: z67.number().finite().optional(),
-  retriable: z67.boolean().optional(),
-  retrying: z67.boolean().optional(),
-  cancelled: z67.boolean().optional(),
-  success: z67.boolean().optional()
-}).strict();
-var operationalLogEntryDtoSchema = z67.object({
-  cursor: z67.string().min(1).max(512),
-  ts: z67.string().datetime(),
+import { z as z68 } from "zod";
+var operationalLogLevelSchema = z68.enum(["trace", "debug", "info", "warn", "error", "fatal"]);
+var diagnosticContextSchema = z68.object({
+  runId: z68.string().min(1).max(256).optional(),
+  projectId: z68.string().min(1).max(256).optional(),
+  requestId: z68.string().min(1).max(256).optional(),
+  actor: z68.string().min(1).max(512).optional(),
+  credentialId: z68.string().min(1).max(512).optional(),
+  userAgent: z68.string().min(1).max(512).optional(),
+  actorSession: z68.string().min(1).max(512).optional(),
+  method: z68.string().min(1).max(16).optional(),
+  route: z68.string().min(1).max(256).optional(),
+  operationId: z68.string().min(1).max(256).optional(),
+  jobId: z68.string().min(1).max(256).optional(),
+  taskId: z68.string().min(1).max(256).optional(),
+  traceId: z68.string().min(1).max(256).optional(),
+  provider: z68.string().min(1).max(256).optional(),
+  errorCode: z68.string().min(1).max(128).optional(),
+  attempt: z68.number().finite().optional(),
+  count: z68.number().finite().optional(),
+  total: z68.number().finite().optional(),
+  progress: z68.number().finite().optional(),
+  httpStatus: z68.number().finite().optional(),
+  statusCode: z68.number().finite().optional(),
+  durationMs: z68.number().finite().optional(),
+  bytes: z68.number().finite().optional(),
+  retryAfterMs: z68.number().finite().optional(),
+  retriable: z68.boolean().optional(),
+  retrying: z68.boolean().optional(),
+  cancelled: z68.boolean().optional(),
+  success: z68.boolean().optional()
+}).strict();
+var operationalLogEntryDtoSchema = z68.object({
+  cursor: z68.string().min(1).max(512),
+  ts: z68.string().datetime(),
   level: operationalLogLevelSchema,
-  module: z67.string().min(1).max(256),
-  action: z67.string().min(1).max(256),
-  message: z67.string().max(4096).optional(),
-  runId: z67.string().min(1).max(256).optional(),
-  projectId: z67.string().min(1).max(256).optional(),
+  module: z68.string().min(1).max(256),
+  action: z68.string().min(1).max(256),
+  message: z68.string().max(4096).optional(),
+  runId: z68.string().min(1).max(256).optional(),
+  projectId: z68.string().min(1).max(256).optional(),
   context: diagnosticContextSchema
 }).strict();
-var logQuerySchema = z67.object({
+var logQuerySchema = z68.object({
   level: operationalLogLevelSchema.optional(),
-  module: z67.string().trim().min(1).max(256).optional(),
-  runId: z67.string().trim().min(1).max(256).optional(),
-  projectId: z67.string().trim().min(1).max(256).optional(),
-  actor: z67.string().trim().min(1).max(512).optional(),
-  requestId: z67.string().trim().min(1).max(256).optional(),
-  since: z67.string().datetime().optional(),
-  until: z67.string().datetime().optional(),
-  limit: z67.coerce.number().int().min(1).max(200).default(100),
-  cursor: z67.string().trim().min(1).max(512).optional()
+  module: z68.string().trim().min(1).max(256).optional(),
+  runId: z68.string().trim().min(1).max(256).optional(),
+  projectId: z68.string().trim().min(1).max(256).optional(),
+  actor: z68.string().trim().min(1).max(512).optional(),
+  requestId: z68.string().trim().min(1).max(256).optional(),
+  since: z68.string().datetime().optional(),
+  until: z68.string().datetime().optional(),
+  limit: z68.coerce.number().int().min(1).max(200).default(100),
+  cursor: z68.string().trim().min(1).max(512).optional()
 }).strict().superRefine((query, ctx) => {
   if (query.since && query.until && Date.parse(query.since) > Date.parse(query.until)) {
-    ctx.addIssue({ code: z67.ZodIssueCode.custom, path: ["until"], message: '"until" must be on or after "since".' });
+    ctx.addIssue({ code: z68.ZodIssueCode.custom, path: ["until"], message: '"until" must be on or after "since".' });
   }
 });
-var retentionPolicySchema = z67.object({
-  maxEntries: z67.number().int().positive(),
-  maxAgeSeconds: z67.number().int().positive()
+var retentionPolicySchema = z68.object({
+  maxEntries: z68.number().int().positive(),
+  maxAgeSeconds: z68.number().int().positive()
 }).strict();
-var operationalLogListDtoSchema = z67.object({
-  entries: z67.array(operationalLogEntryDtoSchema),
-  nextCursor: z67.string().min(1).max(512).nullable(),
+var operationalLogListDtoSchema = z68.object({
+  entries: z68.array(operationalLogEntryDtoSchema),
+  nextCursor: z68.string().min(1).max(512).nullable(),
   /** Matching entries left after this page. */
-  truncated: z67.number().int().nonnegative(),
+  truncated: z68.number().int().nonnegative(),
   /** Entries evicted by the active retention policy. */
-  dropped: z67.number().int().nonnegative(),
-  retention: z67.enum(["process", "durable"]),
+  dropped: z68.number().int().nonnegative(),
+  retention: z68.enum(["process", "durable"]),
   retentionPolicy: retentionPolicySchema.optional(),
   /** Best-effort persistence failures observed by this store. */
-  captureErrors: z67.number().int().nonnegative().optional(),
-  observedAt: z67.string().datetime()
+  captureErrors: z68.number().int().nonnegative().optional(),
+  observedAt: z68.string().datetime()
 }).strict();
 var OPERATIONAL_LOG_FIELDS_HEADER = "x-canonry-log-fields";
 var OPERATIONAL_LOG_OPT_IN_CONTEXT_FIELDS = ["provider"];
-var diagnosticContextReadSchema = z67.object(diagnosticContextSchema.shape);
-var operationalLogEntryReadSchema = z67.object({ ...operationalLogEntryDtoSchema.shape, context: diagnosticContextReadSchema });
-var operationalLogListReadSchema = z67.object({
+var diagnosticContextReadSchema = z68.object(diagnosticContextSchema.shape);
+var operationalLogEntryReadSchema = z68.object({ ...operationalLogEntryDtoSchema.shape, context: diagnosticContextReadSchema });
+var operationalLogListReadSchema = z68.object({
   ...operationalLogListDtoSchema.shape,
-  entries: z67.array(operationalLogEntryReadSchema),
-  retentionPolicy: z67.object(retentionPolicySchema.shape).optional()
+  entries: z68.array(operationalLogEntryReadSchema),
+  retentionPolicy: z68.object(retentionPolicySchema.shape).optional()
 });
 
-// ../contracts/src/log-redaction.ts
-var REDACTED = "[REDACTED]";
-var TRUNCATED = "[TRUNCATED]";
-var CIRCULAR = "[CIRCULAR]";
-var UNREADABLE = "[UNREADABLE]";
-var OMITTED = "[OMITTED]";
-var MAX_DEPTH = 6;
-var MAX_ARRAY_ITEMS = 50;
-var MAX_OBJECT_KEYS = 100;
-var MAX_STRING_LENGTH = 4096;
-var secretKey = /api[ _-]?key|authorization|auth(?:entication)?|cookie|password|secret|token|credential/i;
-var escapedSecretAssignment = /\\+["'][\w -]*(?:api[ _-]?key|auth|cookie|password|secret|token|credential)[\w -]*\\+["']\s*:/i;
-var unsafeGraphKey = /^(?:req|res|request|reply|raw|socket|headers?|body|responsebody|apiresponse|rawresponse|providerbody|providerresponse)$/i;
-var providerNameKey = /^provider$/i;
-function isSensitiveDiagnosticQueryKey(key) {
-  return secretKey.test(key) || /^key$/i.test(key);
-}
-function redactLogValue(value) {
-  try {
-    return redactValue(value, 0, /* @__PURE__ */ new WeakSet());
-  } catch {
-    return UNREADABLE;
-  }
-}
-function redactLogString(value) {
-  try {
-    const clipped = value.length > MAX_STRING_LENGTH ? `${value.slice(0, MAX_STRING_LENGTH)}${TRUNCATED}` : value;
-    if (escapedSecretAssignment.test(clipped)) return REDACTED;
-    return redactEmbeddedUrls(clipped).replace(/\b((?:set-cookie|cookie)\s*[:=]\s*)[^\r\n]*(?:\r?\n[ \t][^\r\n]*)*/gi, `$1${REDACTED}`).replace(
-      /(["']?[\w-]*(?:api[ _-]?key|auth|cookie|password|secret|token|credential)[\w-]*["']?\s*[=:]\s*)(?:"(?:\\.|[^"\\])*(?:"|$)|'(?:\\.|[^'\\])*(?:'|$))/gi,
-      `$1${REDACTED}`
-    ).replace(/\b(Bearer|Basic)\s+[^\s,;]+/gi, (_match, scheme) => `${scheme} ${REDACTED}`).replace(
-      /(api[ _-]?key|authorization|auth(?:entication)?|cookie|password|secret|token|credential)\s*([=:])\s*(?!\[REDACTED\])[^\s&,'")\]}]+/gi,
-      `$1$2${REDACTED}`
-    ).slice(0, MAX_STRING_LENGTH);
-  } catch {
-    return UNREADABLE;
-  }
-}
-function redactValue(value, depth, seen, key) {
-  if (key && diagnosticIdentity(key, value) !== void 0) return value;
-  if (key && secretKey.test(key)) return REDACTED;
-  if (key && unsafeGraphKey.test(key)) return OMITTED;
-  if (key && providerNameKey.test(key) && typeof value === "object" && value !== null) return OMITTED;
-  if (value === null || typeof value === "boolean") return value;
-  if (typeof value === "number") return Number.isFinite(value) ? value : String(value);
-  if (typeof value === "string") return redactLogString(value);
-  if (typeof value === "bigint") return value.toString();
-  if (typeof value === "undefined") return void 0;
-  if (typeof value === "symbol" || typeof value === "function") return `[${typeof value}]`;
-  if (depth >= MAX_DEPTH) return TRUNCATED;
-  if (typeof value !== "object") return UNREADABLE;
-  if (seen.has(value)) return CIRCULAR;
-  seen.add(value);
-  try {
-    if (value instanceof Error) return redactError(value, depth, seen);
-    if (Array.isArray(value)) {
-      const output2 = [];
-      const length = safeArrayLength(value);
-      for (let index = 0; index < Math.min(length, MAX_ARRAY_ITEMS); index++) {
-        output2.push(redactValue(safeProperty(value, String(index)), depth + 1, seen));
-      }
-      if (length > MAX_ARRAY_ITEMS) output2.push(TRUNCATED);
-      return output2;
-    }
-    const output = {};
-    const keys = safeKeys(value);
-    for (const nestedKey of keys.slice(0, MAX_OBJECT_KEYS)) {
-      output[nestedKey] = redactValue(safeProperty(value, nestedKey), depth + 1, seen, nestedKey);
-    }
-    if (keys.length > MAX_OBJECT_KEYS) output.__truncated = true;
-    return output;
-  } catch {
-    return UNREADABLE;
-  } finally {
-    seen.delete(value);
-  }
-}
-function diagnosticIdentity(key, value) {
-  if (typeof value !== "string") return void 0;
-  if (key === "actor" && /^(?:api-key|user):[\w.-]{1,256}$/.test(value)) return value;
-  if (key === "credentialId" && /^[\w.-]{1,256}$/.test(value)) return value;
-  return void 0;
-}
-function redactError(error, depth, seen) {
-  const output = {
-    name: redactLogString(safeErrorString(error, "name")),
-    message: redactLogString(safeErrorString(error, "message"))
-  };
-  const stack = safeErrorString(error, "stack");
-  if (stack) output.stack = redactLogString(stack);
-  for (const key of safeKeys(error).slice(0, MAX_OBJECT_KEYS)) {
-    output[key] = redactValue(safeProperty(error, key), depth + 1, seen, key);
-  }
-  return output;
-}
-function safeKeys(value) {
-  try {
-    return Object.keys(value);
-  } catch {
-    return [];
-  }
-}
-function safeArrayLength(value) {
-  try {
-    return Number.isSafeInteger(value.length) && value.length >= 0 ? value.length : 0;
-  } catch {
-    return 0;
-  }
-}
-function safeProperty(value, key) {
-  try {
-    const descriptor = Object.getOwnPropertyDescriptor(value, key);
-    if (!descriptor || !("value" in descriptor)) return UNREADABLE;
-    return descriptor.value;
-  } catch {
-    return UNREADABLE;
-  }
-}
-function safeErrorString(error, key) {
-  try {
-    const value = error[key];
-    return typeof value === "string" ? value : "";
-  } catch {
-    return UNREADABLE;
-  }
-}
-function redactEmbeddedUrls(value) {
-  return value.replace(/https?:\/\/[^\s<>"']+/gi, (candidate) => {
-    if (candidate.includes(TRUNCATED)) return "[TRUNCATED_URL]";
-    const suffix = candidate.match(/[),.;!?\]}]+$/)?.[0] ?? "";
-    const rawUrl = suffix ? candidate.slice(0, -suffix.length) : candidate;
-    try {
-      const url = new URL(rawUrl);
-      if (url.username || url.password) {
-        url.username = REDACTED;
-        url.password = REDACTED;
-      }
-      for (const key of [...url.searchParams.keys()]) {
-        if (isSensitiveDiagnosticQueryKey(key)) url.searchParams.set(key, REDACTED);
-      }
-      return `${url.toString()}${suffix}`;
-    } catch {
-      return `[REDACTED_URL]${suffix}`;
-    }
-  });
-}
-
 // ../contracts/src/semver.ts
 var STRICT_SEMVER = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[\da-z-]+(?:\.[\da-z-]+)*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?$/i;
 var MAX_SEMVER_LENGTH = 128;
@@ -21139,38 +21178,38 @@ function asRecord(value) {
 }
 
 // ../contracts/src/referral-assessment.ts
-import { z as z68 } from "zod";
-var referralAssessmentQuerySchema = z68.object({
+import { z as z69 } from "zod";
+var referralAssessmentQuerySchema = z69.object({
   startDate: calendarDateSchema,
   endDate: calendarDateSchema,
-  sourceId: z68.string().trim().min(1).optional(),
-  burstThreshold: z68.number().int().min(1).max(1e6).optional(),
-  ratioThreshold: z68.number().min(1).max(1e3).optional(),
-  limit: z68.number().int().min(1).max(500).optional()
-}).strict();
-var countsSchema = z68.object({
-  total: z68.number().int().nonnegative(),
-  paid: z68.number().int().nonnegative(),
-  organic: z68.number().int().nonnegative(),
-  unknown: z68.number().int().nonnegative()
-});
-var referralAssessmentSchema = z68.object({
-  scope: z68.object({
-    project: z68.string(),
-    sourceId: z68.string().nullable(),
-    attribution: z68.literal("project-source-only"),
-    unavailableDimensions: z68.array(z68.enum(["property", "target", "market"]))
+  sourceId: z69.string().trim().min(1).optional(),
+  burstThreshold: z69.number().int().min(1).max(1e6).optional(),
+  ratioThreshold: z69.number().min(1).max(1e3).optional(),
+  limit: z69.number().int().min(1).max(500).optional()
+}).strict();
+var countsSchema = z69.object({
+  total: z69.number().int().nonnegative(),
+  paid: z69.number().int().nonnegative(),
+  organic: z69.number().int().nonnegative(),
+  unknown: z69.number().int().nonnegative()
+});
+var referralAssessmentSchema = z69.object({
+  scope: z69.object({
+    project: z69.string(),
+    sourceId: z69.string().nullable(),
+    attribution: z69.literal("project-source-only"),
+    unavailableDimensions: z69.array(z69.enum(["property", "target", "market"]))
   }),
-  window: z68.object({ startDate: calendarDateSchema, endDate: calendarDateSchema, timeZone: z68.literal("UTC") }),
-  rule: z68.object({
-    version: z68.literal("hourly-normalized-path-v1"),
-    burstThreshold: z68.number().int().positive(),
-    ratioThreshold: z68.number().positive(),
-    calibration: z68.enum(["uncalibrated-default", "request-override"]),
-    grouping: z68.array(z68.string()),
-    confirmsAutomation: z68.literal(false)
+  window: z69.object({ startDate: calendarDateSchema, endDate: calendarDateSchema, timeZone: z69.literal("UTC") }),
+  rule: z69.object({
+    version: z69.literal("hourly-normalized-path-v1"),
+    burstThreshold: z69.number().int().positive(),
+    ratioThreshold: z69.number().positive(),
+    calibration: z69.enum(["uncalibrated-default", "request-override"]),
+    grouping: z69.array(z69.string()),
+    confirmsAutomation: z69.literal(false)
   }),
-  totals: z68.object({
+  totals: z69.object({
     raw: countsSchema,
     redirects: countsSchema,
     subresources: countsSchema,
@@ -21178,42 +21217,42 @@ var referralAssessmentSchema = z68.object({
     suspected: countsSchema,
     adjustedEstimate: countsSchema
   }),
-  bursts: z68.array(z68.object({
-    sourceId: z68.string(),
-    product: z68.string(),
-    landingPathNormalized: z68.string(),
-    tsHour: z68.string(),
+  bursts: z69.array(z69.object({
+    sourceId: z69.string(),
+    product: z69.string(),
+    landingPathNormalized: z69.string(),
+    tsHour: z69.string(),
     counts: countsSchema
   })),
-  evidence: z68.object({ total: z68.number().int().nonnegative(), returned: z68.number().int().nonnegative(), truncated: z68.boolean() }),
-  comparison: z68.object({
-    status: z68.literal("unavailable"),
-    serverCountable: z68.number().int().nonnegative(),
-    serverObservation: z68.enum(["missing", "observed-zero", "observed-positive"]),
+  evidence: z69.object({ total: z69.number().int().nonnegative(), returned: z69.number().int().nonnegative(), truncated: z69.boolean() }),
+  comparison: z69.object({
+    status: z69.literal("unavailable"),
+    serverCountable: z69.number().int().nonnegative(),
+    serverObservation: z69.enum(["missing", "observed-zero", "observed-positive"]),
     /**
      * Dimension-deduplicated GA AI sessions. With no stored AI row in the
      * window: `0` (`observed-zero`) when the latest GA sync queried the whole
      * window (GA4 omits zero rows), else `null` (`missing`).
      */
-    gaSessions: z68.number().int().nonnegative().nullable(),
-    gaObservation: z68.enum(["missing", "observed-zero", "observed-positive"]),
+    gaSessions: z69.number().int().nonnegative().nullable(),
+    gaObservation: z69.enum(["missing", "observed-zero", "observed-positive"]),
     /**
      * Descriptive quotient only (`serverCountable / gaSessions`, a multiplier
      * where 3 is three times as many, never a percent), rounded to 2
      * decimals. Not a matched, coverage-complete comparison.
      */
-    observedRatio: z68.number().nonnegative().nullable(),
+    observedRatio: z69.number().nonnegative().nullable(),
     /** Compares the rounded `observedRatio` with `rule.ratioThreshold`. */
-    observedRatioAboveThreshold: z68.boolean().nullable(),
-    ratio: z68.null(),
-    reasons: z68.array(z68.string()),
-    gaScope: z68.literal("project")
+    observedRatioAboveThreshold: z69.boolean().nullable(),
+    ratio: z69.null(),
+    reasons: z69.array(z69.string()),
+    gaScope: z69.literal("project")
   }),
-  caveats: z68.array(z68.string())
+  caveats: z69.array(z69.string())
 });
 
 // ../contracts/src/tolerant-read.ts
-import { z as z69 } from "zod";
+import { z as z70 } from "zod";
 var WRAPPER_TYPES = /* @__PURE__ */ new Set(["optional", "nullable", "default", "prefault", "readonly", "catch", "nonoptional"]);
 var DEPTH_LIMIT = 64;
 function defOf(schema) {
@@ -21224,9 +21263,9 @@ function cloneWith(schema, changes) {
 }
 function openPrimitive(values) {
   if (values.length === 0) return void 0;
-  if (values.every((value) => typeof value === "string")) return z69.string();
-  if (values.every((value) => typeof value === "number")) return z69.number();
-  if (values.every((value) => typeof value === "boolean")) return z69.boolean();
+  if (values.every((value) => typeof value === "string")) return z70.string();
+  if (values.every((value) => typeof value === "number")) return z70.number();
+  if (values.every((value) => typeof value === "boolean")) return z70.boolean();
   return void 0;
 }
 function walk2(schema, open, memo, depth) {
@@ -21240,7 +21279,7 @@ function walk2(schema, open, memo, depth) {
     const shape = Object.fromEntries(Object.entries(schema.shape).map(([key, child]) => [key, next(child)]));
     const declared = def.catchall;
     const catchall = open.get(schema) ?? (declared && defOf(declared).type !== "never" ? next(declared) : void 0);
-    result = catchall ? z69.object(shape).catchall(catchall) : z69.object(shape);
+    result = catchall ? z70.object(shape).catchall(catchall) : z70.object(shape);
   } else if (WRAPPER_TYPES.has(def.type)) {
     const inner = def.innerType;
     const mapped = next(inner);
@@ -21257,10 +21296,10 @@ function walk2(schema, open, memo, depth) {
     const options = def.options;
     const mapped = options.map(next);
     const changed = mapped.some((option, index) => option !== options[index]);
-    result = !changed ? schema : def.discriminator ? z69.union(mapped) : cloneWith(schema, { options: mapped });
+    result = !changed ? schema : def.discriminator ? z70.union(mapped) : cloneWith(schema, { options: mapped });
   } else if (def.type === "record") {
     const keyType = def.keyType, valueType = def.valueType;
-    const mappedKey = defOf(keyType).type === "enum" ? z69.string() : keyType;
+    const mappedKey = defOf(keyType).type === "enum" ? z70.string() : keyType;
     const mappedValue = next(valueType);
     result = mappedKey === keyType && mappedValue === valueType ? schema : cloneWith(schema, { keyType: mappedKey, valueType: mappedValue });
   } else if (def.type === "intersection") {
@@ -21276,7 +21315,7 @@ function walk2(schema, open, memo, depth) {
     result = changed ? cloneWith(schema, { items: mappedItems, rest: mappedRest }) : schema;
   } else if (def.type === "lazy") {
     const getter = def.getter;
-    result = z69.lazy(() => next(getter()));
+    result = z70.lazy(() => next(getter()));
   } else if (def.type === "enum") {
     result = openPrimitive(Object.values(def.entries)) ?? schema;
   } else if (def.type === "literal") {
@@ -21291,8 +21330,8 @@ function tolerantReadSchema(schema, options = {}) {
 }
 
 // ../contracts/src/sentiment-read.ts
-import { z as z70 } from "zod";
-var OPEN_COUNTS = { openKeys: [[sentimentCountsSchema, z70.number().int().nonnegative()]] };
+import { z as z71 } from "zod";
+var OPEN_COUNTS = { openKeys: [[sentimentCountsSchema, z71.number().int().nonnegative()]] };
 var sentimentSettingsReadSchema = tolerantReadSchema(sentimentSettingsSchema, OPEN_COUNTS);
 var sentimentSummaryReadSchema = tolerantReadSchema(sentimentSummarySchema, OPEN_COUNTS);
 var sentimentEvidencePageReadSchema = tolerantReadSchema(sentimentEvidencePageSchema, OPEN_COUNTS);
@@ -22228,6 +22267,15 @@ export {
   AGENT_NONE,
   normalizeAgentSlug,
   detectAgentRuntime,
+  isSensitiveDiagnosticQueryKey,
+  redactLogValue,
+  redactLogString,
+  diagnosticIdentity,
+  FEEDBACK_KINDS,
+  FEEDBACK_LIMITS,
+  feedbackSubmissionSchema,
+  feedbackAcceptedDtoSchema,
+  redactFeedbackText,
   MIN_TREND_POINTS,
   isTrendBaseline,
   ReportSectionIds,
@@ -22295,10 +22343,6 @@ export {
   OPERATIONAL_LOG_FIELDS_HEADER,
   OPERATIONAL_LOG_OPT_IN_CONTEXT_FIELDS,
   operationalLogListReadSchema,
-  isSensitiveDiagnosticQueryKey,
-  redactLogValue,
-  redactLogString,
-  diagnosticIdentity,
   isStrictSemver,
   compareSemver,
   CANONRY_NPM_PACKAGE_URL,