@capxul/observability 4.20.0-beta.35 → 4.20.0-beta.37

package/README.md

@@ -201,3 +201,6 @@ Set `privacy: "minimal"` for hosts that must export only closed operation/error
 codes, timings, environment, and validated correlation. This opt-in removes
 free-form logs, provider messages, URLs, bodies, and source paths, including
 span exception events. Default consumers retain the existing redaction policy.
+`minimalCorrelationId` is that projection's correlation rule: a host that shows
+a correlation id to a person checks it first, so the id it shows is one the
+export carries.

package/dist/engineering.d.mts

@@ -7,6 +7,7 @@ export declare const CLI_ENGINEERING_LIMITS: Readonly<{
   records: 80;
   ordinaryRecords: 64;
   recordBytes: 16384;
+  recordFields: 48;
   requests: 5;
   ordinaryRequests: 2;
   requestBytes: 1572864;
@@ -77,6 +78,14 @@ export declare const logEngineeringInfo: (message: string, attributes: Readonly<
 /** Preserve domain exits while preventing the OTLP serializer from seeing raw causes. */
 export declare const makeLeakSafeEngineeringTracer: (delegate: Tracer.Tracer, enabled?: () => boolean) => Tracer.Tracer;
 //#endregion
+//#region src/engineering/minimal.d.ts
+/**
+ * A correlation id the minimal export carries: an identifier with no `/`, not
+ * `0x` hex, and unchanged by the secret mask. The CLI quotes a backend
+ * correlation id as its `ref` only when it passes, so the ref finds a row.
+ */
+export declare const minimalCorrelationId: (value: unknown) => value is string;
+//#endregion
 //#region src/engineering.d.ts
 /** Shared browser/server OTLP layer. OtlpLogger merges with incumbent loggers once. */
 export declare const makeEngineeringTelemetryLayer: (config: EngineeringTelemetryConfig) => Layer.Layer<EngineeringLog | OtlpExporter.Flusher, never, never>;

package/dist/engineering.mjs

@@ -1,4 +1,4 @@
-import { G as CLI_COMMAND_NAMES, K as CLI_INVOCATION_KINDS, W as CLI_CAPABILITIES, _n as redactSecrets, bn as CAPXUL_ERROR_CODES, gn as ORGANIZATION_SETUP_STATUSES, hn as ORGANIZATION_SETUP_REASONS, pn as isCapxulOperation, vn as redactUrlSecrets, xn as FAILURE_MODES, yn as isCredentialField } from "./src-C_wvz630.mjs";
+import { Cn as PROVIDERS, En as FAILURE_MODES, G as CLI_COMMAND_NAMES, K as CLI_INVOCATION_KINDS, Sn as CAPXUL_ERROR_CODES, Tn as isCapxulError, W as CLI_CAPABILITIES, _n as ORGANIZATION_SETUP_REASONS, bn as redactUrlSecrets, hn as isCapxulOperation, q as FAILURE_CLASSES, vn as ORGANIZATION_SETUP_STATUSES, wn as PROVIDER_PROBLEMS, xn as isCredentialField, yn as redactSecrets } from "./src-CkM01SMk.mjs";
 import { Cause, Clock, Context, Deferred, Duration, Effect, Exit, FiberSet, Layer, LogLevel, Logger, Metric, Option, References, Schedule, Stream, Tracer } from "effect";
 import { FetchHttpClient, Headers, HttpBody, HttpClient, HttpClientError, HttpClientResponse } from "effect/http";
 import { OtlpExporter, OtlpLogger, OtlpMetrics, OtlpSerialization, OtlpTracer } from "effect/observability";
@@ -12,6 +12,123 @@ function readField(value, key) {
 	return isRecord(value) ? value[key] : void 0;
 }
 //#endregion
+//#region src/delivery/budget.ts
+/** Fixed admission limits for one CLI invocation and its SDK client. */
+const CLI_ENGINEERING_LIMITS = Object.freeze({
+	records: 80,
+	ordinaryRecords: 64,
+	recordBytes: 16384,
+	recordFields: 48,
+	requests: 5,
+	ordinaryRequests: 2,
+	requestBytes: 1572864,
+	metricSeries: 16,
+	requestTimeoutMs: 1e3
+});
+const metricNames = /* @__PURE__ */ new Set(["capxul.cli.command.count", "capxul.cli.command.duration"]);
+const metricValues = {
+	command: CLI_COMMAND_NAMES,
+	capability: CLI_CAPABILITIES,
+	invocation_kind: CLI_INVOCATION_KINDS,
+	outcome: [
+		"succeeded",
+		"refused",
+		"failed",
+		"cancelled"
+	],
+	capxul_env: [
+		"development",
+		"staging",
+		"production",
+		"local"
+	],
+	unit: [
+		"1",
+		"s",
+		"ms"
+	]
+};
+/** Only this bounded registry is supplied to the CLI's metric producers. */
+var CliMetricRegistry = class extends Map {
+	dropped;
+	enabled;
+	constructor(dropped, enabled = true) {
+		super();
+		this.dropped = dropped;
+		this.enabled = enabled;
+	}
+	set(key, entry) {
+		if (!this.enabled || !metricNames.has(entry.id) || !this.has(key) && this.size >= CLI_ENGINEERING_LIMITS.metricSeries) {
+			this.dropped();
+			return this;
+		}
+		const labels = Object.entries(entry.attributes ?? {});
+		const buckets = readField(entry.hooks.get(Context.empty()), "buckets");
+		if (!["Counter", "Histogram"].includes(entry.type) || (entry.description?.length ?? 0) > 128 || labels.length > 6 || labels.some(([name, value]) => !metricValues[name]?.includes(value)) || entry.type === "Histogram" && (!Array.isArray(buckets) || buckets.length > 32)) {
+			this.dropped();
+			return this;
+		}
+		return super.set(key, entry);
+	}
+};
+/** Shared, closure-owned admission state; no queue or mutable counters are exposed. */
+function makeCliEngineeringBudget() {
+	let records = 0, peakRecords = 0, activeRequests = 0, requestBytes = 0;
+	let peakRequests = 0, peakRequestBytes = 0, dropped = 0;
+	const drop = () => {
+		dropped += 1;
+	};
+	const metricRegistry = new CliMetricRegistry(drop);
+	return Object.freeze({
+		metricRegistry,
+		emptyMetricRegistry: () => new CliMetricRegistry(drop, false),
+		drop,
+		admitRecord(terminal) {
+			if (records >= (terminal ? CLI_ENGINEERING_LIMITS.records : CLI_ENGINEERING_LIMITS.ordinaryRecords)) {
+				drop();
+				return;
+			}
+			records += 1;
+			peakRecords = Math.max(peakRecords, records);
+			let released = false;
+			return () => {
+				if (!released) {
+					released = true;
+					records -= 1;
+				}
+			};
+		},
+		admitRequest(bytes, terminal) {
+			if (bytes > CLI_ENGINEERING_LIMITS.requestBytes || activeRequests >= (terminal ? CLI_ENGINEERING_LIMITS.requests : CLI_ENGINEERING_LIMITS.ordinaryRequests)) {
+				drop();
+				return;
+			}
+			activeRequests += 1;
+			requestBytes += bytes;
+			peakRequests = Math.max(peakRequests, activeRequests);
+			peakRequestBytes = Math.max(peakRequestBytes, requestBytes);
+			return () => {
+				activeRequests -= 1;
+				requestBytes -= bytes;
+			};
+		},
+		snapshot() {
+			return {
+				records,
+				reservedRecordBytes: records * CLI_ENGINEERING_LIMITS.recordBytes,
+				peakRecords,
+				peakReservedRecordBytes: peakRecords * CLI_ENGINEERING_LIMITS.recordBytes,
+				activeRequests,
+				requestBytes,
+				peakRequests,
+				peakRequestBytes,
+				dropped,
+				metricSeries: metricRegistry.size
+			};
+		}
+	});
+}
+//#endregion
 //#region src/delivery/admission.ts
 function newDeliveryState(budget, ownsMetrics) {
 	return {
@@ -55,7 +172,7 @@ function closeDelivery(state) {
 	if (state.ownsMetrics) state.budget.metricRegistry.clear();
 }
 const text = (value) => typeof value === "string" ? value.slice(0, 128) : "capxul.engineering";
-const attributes = (input, limit = 32) => {
+const attributes = (input, limit = CLI_ENGINEERING_LIMITS.recordFields) => {
 	const out = {};
 	let count = 0;
 	let bytes = 0;
@@ -75,6 +192,73 @@ const attributes = (input, limit = 32) => {
 };
 const terminalName = (name) => name === "cli.command.completed" || name === "cli.wallet.step" || CLI_COMMAND_NAMES.some((command) => name === `cli.command.${command}`);
 //#endregion
+//#region ../protocol/src/errors/identifier-mask.ts
+/**
+* A typed prefix over a 64-hex digest, such as `money_execution_<digest>`. A
+* private key has the same 64 hex characters, so only Capxul's own id
+* prefixes make the digest public (docs/rules/redaction.md); any other prefix
+* keeps it masked.
+*/
+const PREFIXED_DIGEST = /\b[a-z]+(?:_[a-z]+)*_[0-9a-f]{64}\b/gu;
+/**
+* The prefixes of Capxul's ids over a 64-hex digest. A client needs the id to
+* recover. A new id of this shape is added here, or its digest is masked at
+* the wire.
+*/
+const CAPXUL_ID_PREFIXES = /* @__PURE__ */ new Set([
+	"invitation",
+	"money_execution",
+	"payment_command",
+	"payroll_run",
+	"permission_assignment",
+	"permission_command",
+	"permission_command_invitation",
+	"permission_invite"
+]);
+/** Marks an id while the text is masked: private-use characters no mask matches. */
+const ID_MARK = /\uE000(\d+)\uE001/gu;
+/**
+* `redactSecrets` with Capxul identifiers kept whole. Each id is set aside
+* first, so a credential label still masks whatever value it names, id-shaped
+* or not; only an unlabelled id comes back.
+*/
+function maskKeepingIdentifiers(text, source) {
+	const ids = [];
+	const marked = text.replace(PREFIXED_DIGEST, (id) => {
+		if (!CAPXUL_ID_PREFIXES.has(id.slice(0, -65))) return id;
+		ids.push(id);
+		return `\uE000${String(ids.length - 1)}\uE001`;
+	});
+	const masked = redactSecrets(marked, source);
+	return ids.length === 0 ? masked : masked.replace(ID_MARK, (_, index) => ids[Number(index)] ?? "");
+}
+//#endregion
+//#region ../protocol/src/errors/serialize.ts
+/** Evidence strings are bounded: a provider body cannot inflate a failure. */
+const EVIDENCE_TEXT_MAX = 2e3;
+const UNPRINTABLE = "[unprintable]";
+/**
+* The masked, bounded message of a failure. A factory puts the field name
+* after the words that describe it (`signature is invalid: …`), never before a
+* colon, so the prose mask cannot read the field as a credential label and cut
+* the next word (CAP-441). The message is masked whole, so a second mask on
+* any surface leaves it as it is. A trace span passes its RPC upstream as
+* `source`, so a key in that upstream's URL is masked too.
+*/
+function maskedMessage(error, source) {
+	try {
+		return boundedText(maskKeepingIdentifiers(error.message, source));
+	} catch {
+		return UNPRINTABLE;
+	}
+}
+/** Text `boundedText` already cut: a second serialize (MCP after the SDK) keeps it as it is. */
+const BOUNDED = new RegExp(`^[\\s\\S]{0,${String(EVIDENCE_TEXT_MAX)}}…\\(\\d{1,7} chars\\)$`);
+function boundedText(masked) {
+	if (masked.length <= EVIDENCE_TEXT_MAX || BOUNDED.test(masked)) return masked;
+	return `${masked.slice(0, EVIDENCE_TEXT_MAX)}…(${String(masked.length)} chars)`;
+}
+//#endregion
 //#region src/engineering/tracer.ts
 const failureText = (failure, key, limit, source) => {
 	if (failure === null || typeof failure !== "object") return void 0;
@@ -92,8 +276,20 @@ const failureText = (failure, key, limit, source) => {
 		return;
 	}
 };
+/**
+* A `CapxulError` reads as its failure row reads (`maskedMessage`), so a
+* factory message keeps the word after its field name (CAP-427). The row
+* reads the same error, so the exporter reads nothing more than the row does.
+*/
+const capxulMessage = (failure, source) => {
+	try {
+		return isCapxulError(failure) ? maskedMessage(failure, source).slice(0, 2048) : void 0;
+	} catch {
+		return;
+	}
+};
 const exportFailure = (failure, source) => {
-	const message = failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
+	const message = capxulMessage(failure, source) ?? failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
 	const code = failureText(failure, "code", 128);
 	const error = new Error((code === void 0 ? message : `${message} [code=${code}]`).slice(0, 2048));
 	error.name = failureText(failure, "_tag", 128) ?? failureText(failure, "name", 128) ?? "Error";
@@ -244,7 +440,10 @@ function admittedTracer(state, delegate) {
 		...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
 	});
 }
-/** The span as a producer sees it: at most 32 fields and 2000 attribute bytes, 2 events, 2 links. */
+/**
+* The span as a producer sees it: at most `recordFields` fields and 2000
+* attribute bytes, 2 events, 2 links.
+*/
 function boundedSpan(state, span) {
 	const { budget } = state;
 	const wrapped = inheritSpan(span);
@@ -252,7 +451,7 @@ function boundedSpan(state, span) {
 	let ended = false;
 	Object.defineProperties(wrapped, {
 		attribute: { value: (key, value) => {
-			if (fields >= 32 && !span.attributes.has(key)) {
+			if (fields >= CLI_ENGINEERING_LIMITS.recordFields && !span.attributes.has(key)) {
 				budget.drop();
 				return;
 			}
@@ -301,122 +500,6 @@ function boundedSpan(state, span) {
 	return wrapped;
 }
 //#endregion
-//#region src/delivery/budget.ts
-/** Fixed admission limits for one CLI invocation and its SDK client. */
-const CLI_ENGINEERING_LIMITS = Object.freeze({
-	records: 80,
-	ordinaryRecords: 64,
-	recordBytes: 16384,
-	requests: 5,
-	ordinaryRequests: 2,
-	requestBytes: 1572864,
-	metricSeries: 16,
-	requestTimeoutMs: 1e3
-});
-const metricNames = /* @__PURE__ */ new Set(["capxul.cli.command.count", "capxul.cli.command.duration"]);
-const metricValues = {
-	command: CLI_COMMAND_NAMES,
-	capability: CLI_CAPABILITIES,
-	invocation_kind: CLI_INVOCATION_KINDS,
-	outcome: [
-		"succeeded",
-		"refused",
-		"failed",
-		"cancelled"
-	],
-	capxul_env: [
-		"development",
-		"staging",
-		"production",
-		"local"
-	],
-	unit: [
-		"1",
-		"s",
-		"ms"
-	]
-};
-/** Only this bounded registry is supplied to the CLI's metric producers. */
-var CliMetricRegistry = class extends Map {
-	dropped;
-	enabled;
-	constructor(dropped, enabled = true) {
-		super();
-		this.dropped = dropped;
-		this.enabled = enabled;
-	}
-	set(key, entry) {
-		if (!this.enabled || !metricNames.has(entry.id) || !this.has(key) && this.size >= CLI_ENGINEERING_LIMITS.metricSeries) {
-			this.dropped();
-			return this;
-		}
-		const labels = Object.entries(entry.attributes ?? {});
-		const buckets = readField(entry.hooks.get(Context.empty()), "buckets");
-		if (!["Counter", "Histogram"].includes(entry.type) || (entry.description?.length ?? 0) > 128 || labels.length > 6 || labels.some(([name, value]) => !metricValues[name]?.includes(value)) || entry.type === "Histogram" && (!Array.isArray(buckets) || buckets.length > 32)) {
-			this.dropped();
-			return this;
-		}
-		return super.set(key, entry);
-	}
-};
-/** Shared, closure-owned admission state; no queue or mutable counters are exposed. */
-function makeCliEngineeringBudget() {
-	let records = 0, peakRecords = 0, activeRequests = 0, requestBytes = 0;
-	let peakRequests = 0, peakRequestBytes = 0, dropped = 0;
-	const drop = () => {
-		dropped += 1;
-	};
-	const metricRegistry = new CliMetricRegistry(drop);
-	return Object.freeze({
-		metricRegistry,
-		emptyMetricRegistry: () => new CliMetricRegistry(drop, false),
-		drop,
-		admitRecord(terminal) {
-			if (records >= (terminal ? CLI_ENGINEERING_LIMITS.records : CLI_ENGINEERING_LIMITS.ordinaryRecords)) {
-				drop();
-				return;
-			}
-			records += 1;
-			peakRecords = Math.max(peakRecords, records);
-			let released = false;
-			return () => {
-				if (!released) {
-					released = true;
-					records -= 1;
-				}
-			};
-		},
-		admitRequest(bytes, terminal) {
-			if (bytes > CLI_ENGINEERING_LIMITS.requestBytes || activeRequests >= (terminal ? CLI_ENGINEERING_LIMITS.requests : CLI_ENGINEERING_LIMITS.ordinaryRequests)) {
-				drop();
-				return;
-			}
-			activeRequests += 1;
-			requestBytes += bytes;
-			peakRequests = Math.max(peakRequests, activeRequests);
-			peakRequestBytes = Math.max(peakRequestBytes, requestBytes);
-			return () => {
-				activeRequests -= 1;
-				requestBytes -= bytes;
-			};
-		},
-		snapshot() {
-			return {
-				records,
-				reservedRecordBytes: records * CLI_ENGINEERING_LIMITS.recordBytes,
-				peakRecords,
-				peakReservedRecordBytes: peakRecords * CLI_ENGINEERING_LIMITS.recordBytes,
-				activeRequests,
-				requestBytes,
-				peakRequests,
-				peakRequestBytes,
-				dropped,
-				metricSeries: metricRegistry.size
-			};
-		}
-	});
-}
-//#endregion
 //#region src/delivery/requests.ts
 function admittedSerialization(state, delegate) {
 	return {
@@ -564,8 +647,8 @@ const validateEngineeringTelemetryConfig = (config) => {
 	let url;
 	try {
 		url = new URL(config.host);
-	} catch {
-		throw new TypeError("engineering telemetry host must be an absolute HTTPS URL");
+	} catch (cause) {
+		throw new TypeError("engineering telemetry host must be an absolute HTTPS URL", { cause });
 	}
 	if (url.protocol !== "https:" || url.username.length > 0 || url.password.length > 0 || url.pathname !== "/" || url.search.length > 0 || url.hash.length > 0 || !(url.hostname === "posthog.com" || url.hostname.endsWith(".posthog.com"))) throw new TypeError("engineering telemetry host must be a credential-free HTTPS origin");
 	if (!ENGINEERING_CAPXUL_ENV_SET.has(config.capxulEnv)) throw new TypeError("engineering telemetry capxulEnv is not canonical");
@@ -625,7 +708,8 @@ const MINIMAL_CORRELATIONS = /* @__PURE__ */ new Set([
 	"correlation_id",
 	"journey_id",
 	"invocation_id",
-	"posthogDistinctId"
+	"posthogDistinctId",
+	"failure_correlation_id"
 ]);
 const MINIMAL_METRIC_LABELS = /* @__PURE__ */ new Set([
 	"command",
@@ -638,6 +722,12 @@ const MINIMAL_METRIC_LABELS = /* @__PURE__ */ new Set([
 const MINIMAL_METRIC_NAMES = /* @__PURE__ */ new Set(["capxul.cli.command.count", "capxul.cli.command.duration"]);
 const traceId = (value) => typeof value === "string" && /^(?!0+$)[0-9a-f]{32}$/u.test(value);
 const spanId = (value) => typeof value === "string" && /^(?!0+$)[0-9a-f]{16}$/u.test(value);
+/**
+* A correlation id the minimal export carries: an identifier with no `/`, not
+* `0x` hex, and unchanged by the secret mask. The CLI quotes a backend
+* correlation id as its `ref` only when it passes, so the ref finds a row.
+*/
+const minimalCorrelationId = (value) => typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value) && !/^0x[0-9a-f]+$/iu.test(value) && redactSecrets(value) === value;
 const minimalName = (value) => typeof value === "string" && (MINIMAL_LOG_NAMES.has(value) || isCapxulOperation(value) || CLI_COMMAND_NAMES.some((command) => value === `cli.command.${command}`)) ? value : "capxul.engineering";
 const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 	["outcome", [
@@ -649,6 +739,8 @@ const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 	]],
 	["mode", FAILURE_MODES],
 	["failure_mode", FAILURE_MODES],
+	["failure_class", FAILURE_CLASSES],
+	["problem", PROVIDER_PROBLEMS],
 	["capxul_env", ENGINEERING_CAPXUL_ENVS],
 	["producer", ["browser", "server"]],
 	["command", CLI_COMMAND_NAMES],
@@ -677,7 +769,7 @@ const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 		"healStaleCache",
 		"walletReady"
 	]],
-	["provider", ["better-auth", "oidc"]],
+	["provider", [...PROVIDERS, "oidc"]],
 	["cli_identity_kind", ["anonymous", "identified"]],
 	["output_mode", ["human", "json"]],
 	["setup_status", ORGANIZATION_SETUP_STATUSES],
@@ -696,25 +788,36 @@ const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 const MINIMAL_CODE_KEYS = /* @__PURE__ */ new Set([
 	"error.code",
 	"error_code",
+	"error_kind",
 	"failure_code",
-	"refusal_code",
-	"capxul_error_code"
+	"refusal_code"
 ]);
 const MINIMAL_VERSION_KEYS = /* @__PURE__ */ new Set([
 	"sdk_version",
 	"cli_version",
 	"release"
 ]);
+/** The failure row's identifiers that the `none` text policy lets through (ADR-0039 D6). */
+const MINIMAL_FAILURE_IDENTIFIERS = /* @__PURE__ */ new Set([
+	"provider_operation",
+	"provider_code",
+	"field"
+]);
+/** What raised a failure: its layer (`convex`, `sdk`), and a CLI defect's error name. */
+const MINIMAL_FAILURE_ORIGINS = /* @__PURE__ */ new Set(["failure_layer", "failure_error_name"]);
 function minimalStringValue(key, text) {
 	if (key === "operation") return isCapxulOperation(text);
 	if (key === "organization_id") return /^org_[0-9A-Za-z]+$/u.test(text);
 	if (MINIMAL_CODE_KEYS.has(key)) return MINIMAL_ERROR_CODES.has(text);
 	if (MINIMAL_VERSION_KEYS.has(key)) return /^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(text);
+	if (MINIMAL_FAILURE_IDENTIFIERS.has(key)) return /^[A-Za-z0-9_][A-Za-z0-9_.:/[\]-]{0,127}$/u.test(text) && redactSecrets(text) === text;
+	if (MINIMAL_FAILURE_ORIGINS.has(key)) return /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/u.test(text) && redactSecrets(text) === text;
+	if (key === "request_id") return /^[0-9a-f]{16}$/u.test(text);
 	if (key === "trace_id") return traceId(text);
 	if (key === "span_id" || key === "parent_span_id") return spanId(text);
 	const values = MINIMAL_ENUM_VALUES.get(key);
 	if (values !== void 0) return values.includes(text);
-	return MINIMAL_CORRELATIONS.has(key) && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(text) && !/^0x[0-9a-f]+$/iu.test(text) && redactSecrets(text) === text;
+	return MINIMAL_CORRELATIONS.has(key) && minimalCorrelationId(text);
 }
 /** A named privacy projection, separate from the default credential-only redaction policy. */
 function minimalAttributes(attributes, metric = false) {
@@ -1033,4 +1136,4 @@ const makeEngineeringTelemetryLayer = (config) => {
 	});
 };
 //#endregion
-export { CLI_ENGINEERING_LIMITS, ENGINEERING_CAPXUL_ENVS, flushEngineeringTelemetry, logEngineeringInfo, makeCliEngineeringBudget, makeEngineeringTelemetryLayer, makeLeakSafeEngineeringTracer, postHogOtlpEndpoints, traceHeaderFilter };
+export { CLI_ENGINEERING_LIMITS, ENGINEERING_CAPXUL_ENVS, flushEngineeringTelemetry, logEngineeringInfo, makeCliEngineeringBudget, makeEngineeringTelemetryLayer, makeLeakSafeEngineeringTracer, minimalCorrelationId, postHogOtlpEndpoints, traceHeaderFilter };