@capxul/observability 4.20.0-beta.4 → 4.20.0-beta.40

package/dist/engineering.mjs

@@ -1,13 +1,24 @@
-import { _ as CLI_COMMAND_NAMES, an as redactSecrets, en as isCapxulOperation, g as CLI_CAPABILITIES, in as isCredentialField, nn as CAPXUL_ERROR_CODES, on as redactUrlSecrets, rn as FAILURE_MODES, v as CLI_INVOCATION_KINDS } from "./src-CyMef9yy.mjs";
+import { Cn as PROVIDERS, En as FAILURE_MODES, G as CLI_COMMAND_NAMES, K as CLI_INVOCATION_KINDS, Sn as CAPXUL_ERROR_CODES, Tn as isCapxulError, W as CLI_CAPABILITIES, _n as ORGANIZATION_SETUP_REASONS, bn as redactUrlSecrets, hn as isCapxulOperation, q as FAILURE_CLASSES, vn as ORGANIZATION_SETUP_STATUSES, wn as PROVIDER_PROBLEMS, xn as isCredentialField, yn as redactSecrets } from "./src-CyMiJfOK.mjs";
 import { Cause, Clock, Context, Deferred, Duration, Effect, Exit, FiberSet, Layer, LogLevel, Logger, Metric, Option, References, Schedule, Stream, Tracer } from "effect";
-import { FetchHttpClient, Headers, HttpBody, HttpClient, HttpClientError, HttpClientResponse } from "effect/unstable/http";
-import { OtlpExporter, OtlpLogger, OtlpMetrics, OtlpSerialization, OtlpTracer } from "effect/unstable/observability";
-//#region src/engineering-delivery.ts
+import { FetchHttpClient, Headers, HttpBody, HttpClient, HttpClientError, HttpClientResponse } from "effect/http";
+import { OtlpExporter, OtlpLogger, OtlpMetrics, OtlpSerialization, OtlpTracer } from "effect/observability";
+//#region ../protocol/src/primitives/record.ts
+/** A non-null object that is not an array: a value whose fields can be read by name. */
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** The field `key` of `value` when `value` is a record, else undefined. */
+function readField(value, key) {
+	return isRecord(value) ? value[key] : void 0;
+}
+//#endregion
+//#region src/delivery/budget.ts
 /** Fixed admission limits for one CLI invocation and its SDK client. */
 const CLI_ENGINEERING_LIMITS = Object.freeze({
 	records: 80,
 	ordinaryRecords: 64,
 	recordBytes: 16384,
+	recordFields: 48,
 	requests: 5,
 	ordinaryRequests: 2,
 	requestBytes: 1572864,
@@ -52,9 +63,8 @@ var CliMetricRegistry = class extends Map {
 			return this;
 		}
 		const labels = Object.entries(entry.attributes ?? {});
-		const state = entry.hooks.get(Context.empty());
-		const buckets = typeof state === "object" && state !== null && "buckets" in state ? state.buckets : void 0;
-		if (!["Counter", "Histogram"].includes(entry.type) || (entry.description?.length ?? 0) > 128 || labels.length > 6 || labels.some(([name, value]) => !metricValues[name]?.includes(String(value))) || entry.type === "Histogram" && (!Array.isArray(buckets) || buckets.length > 32)) {
+		const buckets = readField(entry.hooks.get(Context.empty()), "buckets");
+		if (!["Counter", "Histogram"].includes(entry.type) || (entry.description?.length ?? 0) > 128 || labels.length > 6 || labels.some(([name, value]) => !metricValues[name]?.includes(value)) || entry.type === "Histogram" && (!Array.isArray(buckets) || buckets.length > 32)) {
 			this.dropped();
 			return this;
 		}
@@ -118,8 +128,51 @@ function makeCliEngineeringBudget() {
 		}
 	});
 }
+//#endregion
+//#region src/delivery/admission.ts
+function newDeliveryState(budget, ownsMetrics) {
+	return {
+		budget,
+		ownsMetrics,
+		closed: Deferred.makeUnsafe(),
+		isClosed: false,
+		metricsRunning: false,
+		logs: [],
+		spans: /* @__PURE__ */ new Map(),
+		terminalBodies: /* @__PURE__ */ new WeakSet(),
+		bodyLeases: /* @__PURE__ */ new WeakMap(),
+		pendingBodies: /* @__PURE__ */ new Set()
+	};
+}
+/** Hold the records a body carries until its request finishes or the body is discarded. */
+function holdBody(state, body, releases) {
+	if (releases.length === 0) return;
+	const lease = {
+		started: false,
+		release: () => {
+			if (!state.pendingBodies.delete(lease)) return;
+			state.bodyLeases.delete(body);
+			for (const release of releases) release();
+		}
+	};
+	state.bodyLeases.set(body, lease);
+	state.pendingBodies.add(lease);
+}
+const discardBody = (state, body) => state.bodyLeases.get(body)?.release();
+const drainLogs = (state) => {
+	for (const release of state.logs.splice(0)) release();
+};
+function closeDelivery(state) {
+	state.isClosed = true;
+	Deferred.doneUnsafe(state.closed, Effect.void);
+	for (const lease of state.pendingBodies) if (!lease.started) lease.release();
+	drainLogs(state);
+	for (const release of state.spans.values()) release();
+	state.spans.clear();
+	if (state.ownsMetrics) state.budget.metricRegistry.clear();
+}
 const text = (value) => typeof value === "string" ? value.slice(0, 128) : "capxul.engineering";
-const attributes = (input, limit = 32) => {
+const attributes = (input, limit = CLI_ENGINEERING_LIMITS.recordFields) => {
 	const out = {};
 	let count = 0;
 	let bytes = 0;
@@ -137,293 +190,76 @@ const attributes = (input, limit = 32) => {
 	} catch {}
 	return out;
 };
-const terminalName = (name) => name === "cli.command.completed" || CLI_COMMAND_NAMES.some((command) => name === `cli.command.${command}`);
-/** Native exporters retain their serialization and scheduling; this owns admission only. */
-function cliEngineeringDelivery(budget, ownsMetrics) {
-	const closed = Deferred.makeUnsafe();
-	let isClosed = false;
-	let metricsRunning = false;
-	const logs = [];
-	const spans = /* @__PURE__ */ new Map();
-	const terminalBodies = /* @__PURE__ */ new WeakSet();
-	const bodyLeases = /* @__PURE__ */ new WeakMap();
-	const pendingBodies = /* @__PURE__ */ new Set();
-	const holdBody = (body, releases) => {
-		if (releases.length === 0) return;
-		const lease = {
-			started: false,
-			release: () => {
-				if (!pendingBodies.delete(lease)) return;
-				bodyLeases.delete(body);
-				for (const release of releases) release();
-			}
-		};
-		bodyLeases.set(body, lease);
-		pendingBodies.add(lease);
-	};
-	const discardBody = (body) => bodyLeases.get(body)?.release();
-	const drainLogs = () => {
-		for (const release of logs.splice(0)) release();
-	};
-	const close = () => {
-		isClosed = true;
-		Deferred.doneUnsafe(closed, Effect.void);
-		for (const lease of pendingBodies) if (!lease.started) lease.release();
-		drainLogs();
-		for (const release of spans.values()) release();
-		spans.clear();
-		if (ownsMetrics) budget.metricRegistry.clear();
-	};
-	return {
-		close,
-		discardBody,
-		metrics(run) {
-			return Effect.suspend(() => {
-				if (isClosed || metricsRunning) return Effect.void;
-				metricsRunning = true;
-				return run.pipe(Effect.ensuring(Effect.sync(() => {
-					metricsRunning = false;
-				})));
-			});
-		},
-		logger(delegate) {
-			return Logger.make((options) => {
-				if (isClosed) return;
-				let release;
-				try {
-					const message = text(Array.isArray(options.message) ? Object.getOwnPropertyDescriptor(options.message, "0")?.value : options.message);
-					release = budget.admitRecord(terminalName(message));
-					if (release === void 0) return;
-					const context = Context.add(options.fiber.context, References.CurrentLogAnnotations, attributes(options.fiber.getRef(References.CurrentLogAnnotations)));
-					const fiber = Object.create(options.fiber);
-					Object.defineProperty(fiber, "getRef", { value: (ref) => Context.get(context, ref) });
-					logs.push(release);
-					delegate.log({
-						...options,
-						message,
-						cause: Cause.empty,
-						fiber
-					});
-				} catch {
-					if (release !== void 0) {
-						const index = logs.indexOf(release);
-						if (index !== -1) logs.splice(index, 1);
-						release();
-					}
-					budget.drop();
-				}
-			});
-		},
-		tracer(delegate) {
-			return Tracer.make({
-				span(options) {
-					const name = text(options.name);
-					const release = isClosed ? void 0 : budget.admitRecord(terminalName(name));
-					const spanOptions = {
-						...options,
-						name,
-						annotations: Context.empty(),
-						links: []
-					};
-					const span = release === void 0 ? new Tracer.NativeSpan({
-						...spanOptions,
-						sampled: false
-					}) : delegate.span(spanOptions);
-					if (release !== void 0) spans.set(span.spanId, release);
-					const wrapped = Object.create(span);
-					let fields = 0, events = 0, links = 0, attributeBytes = 0;
-					let ended = false;
-					Object.defineProperties(wrapped, {
-						attribute: { value: (key, value) => {
-							if (fields >= 32 && !span.attributes.has(key)) {
-								budget.drop();
-								return;
-							}
-							const safe = attributes({ [key]: value }, 1);
-							if (!Object.hasOwn(safe, key)) return;
-							const previous = span.attributes.has(key) ? new TextEncoder().encode(JSON.stringify([key, span.attributes.get(key)])).length : 0;
-							const next = new TextEncoder().encode(JSON.stringify([key, safe[key]])).length;
-							if (attributeBytes - previous + next > 2e3) {
-								budget.drop();
-								return;
-							}
-							attributeBytes += next - previous;
-							if (!span.attributes.has(key)) fields += 1;
-							span.attribute(key, safe[key]);
-						} },
-						event: { value: (eventName, time, attrs) => {
-							if (events++ >= 2) {
-								budget.drop();
-								return;
-							}
-							span.event(text(eventName), time, attributes(attrs ?? {}, 4));
-						} },
-						addLinks: { value: (items) => {
-							for (const item of items.slice(0, Math.max(0, 2 - links))) {
-								if (!/^[a-f0-9]{32}$/u.test(item.span.traceId) || !/^[a-f0-9]{16}$/u.test(item.span.spanId)) {
-									budget.drop();
-									continue;
-								}
-								span.addLinks([{
-									span: Tracer.externalSpan({
-										traceId: item.span.traceId,
-										spanId: item.span.spanId,
-										sampled: item.span.sampled
-									}),
-									attributes: attributes(item.attributes, 4)
-								}]);
-								links += 1;
-							}
-						} },
-						end: { value: (time, exit) => {
-							if (ended) return;
-							ended = true;
-							span.end(time, Exit.isFailure(exit) ? Exit.fail("CLI operation failed") : Exit.void);
-						} }
-					});
-					wrapped.addLinks(options.links ?? []);
-					return wrapped;
-				},
-				...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
-			});
-		},
-		serialization(delegate) {
-			return {
-				logs(data) {
-					const releases = logs.splice(0);
-					try {
-						const body = delegate.logs(data);
-						if (data.resourceLogs.some((r) => r.scopeLogs.some((s) => s.logRecords?.some((l) => l.body?.stringValue === "cli.command.completed")))) terminalBodies.add(body);
-						holdBody(body, releases);
-						return body;
-					} catch (error) {
-						for (const release of releases) release();
-						throw error;
-					}
-				},
-				traces(data) {
-					const releases = [];
-					for (const resource of data.resourceSpans) for (const scope of resource.scopeSpans) for (const span of scope.spans) {
-						const release = spans.get(span.spanId);
-						if (release !== void 0) releases.push(release);
-						spans.delete(span.spanId);
-					}
-					try {
-						const body = delegate.traces(data);
-						if (data.resourceSpans.some((r) => r.scopeSpans.some((s) => s.spans.some((span) => terminalName(span.name))))) terminalBodies.add(body);
-						holdBody(body, releases);
-						return body;
-					} catch (error) {
-						for (const release of releases) release();
-						throw error;
-					}
-				},
-				metrics(data) {
-					const body = delegate.metrics(data);
-					terminalBodies.add(body);
-					return body;
-				}
-			};
-		},
-		transport(client, enabled = () => true) {
-			const retrying = HttpClient.transform(client, (response, request) => Effect.suspend(() => {
-				if (enabled()) return response;
-				budget.drop();
-				return Effect.succeed(HttpClientResponse.fromWeb(request, new Response(null)));
-			})).pipe(HttpClient.transformResponse((response) => Effect.tap(response, (result) => {
-				let received = 0;
-				return Stream.runForEach(result.stream, (chunk) => Effect.sync(() => {
-					received += chunk.byteLength;
-					if (received > 65536) throw new Error("Engineering response limit exceeded");
-				})).pipe(Effect.catchTag("HttpClientError", (error) => error.reason._tag === "EmptyBodyError" ? Effect.void : Effect.fail(error)));
-			}))).pipe(HttpClient.filterStatusOk, HttpClient.retryTransient({
-				times: 1,
-				schedule: Schedule.spaced("100 millis").pipe(Schedule.addDelay(({ input }) => Effect.map(Clock.currentTimeMillis, (now) => {
-					if (!HttpClientError.isHttpClientError(input) || input.reason._tag !== "StatusCodeError" || input.reason.response.status !== 429) return Duration.zero;
-					const header = input.reason.response.headers["retry-after"];
-					const numeric = Number(header);
-					const delay = header === void 0 ? 2e3 : Number.isFinite(numeric) ? numeric * 1e3 : Date.parse(header) - now;
-					return Duration.millis(Number.isFinite(delay) ? Math.min(2e3, Math.max(0, delay)) : 2e3);
-				})))
-			}));
-			return HttpClient.transform(retrying, (response, request) => Effect.suspend(() => {
-				if (isClosed) {
-					discardBody(request.body);
-					return Effect.succeed(HttpClientResponse.fromWeb(request, new Response(null)));
-				}
-				const droppedResponse = () => HttpClientResponse.fromWeb(request, new Response(null, { status: 200 }));
-				if (request.body._tag === "Empty") {
-					discardBody(request.body);
-					return Effect.succeed(droppedResponse());
-				}
-				const bytes = request.body.contentLength;
-				const release = budget.admitRequest(bytes ?? Number.POSITIVE_INFINITY, terminalBodies.has(request.body));
-				if (release === void 0) {
-					discardBody(request.body);
-					return Effect.succeed(droppedResponse());
-				}
-				const lease = bodyLeases.get(request.body);
-				if (lease !== void 0) lease.started = true;
-				return response.pipe(Effect.asVoid, Effect.timeoutOption(CLI_ENGINEERING_LIMITS.requestTimeoutMs), Effect.raceFirst(Deferred.await(closed).pipe(Effect.andThen(Effect.interrupt))), Effect.tap((result) => Effect.sync(() => {
-					if (Option.isNone(result)) budget.drop();
-				})), Effect.catchCause(() => Effect.sync(() => {
-					budget.drop();
-				})), Effect.as(droppedResponse()), Effect.ensuring(Effect.sync(() => {
-					release();
-					discardBody(request.body);
-				})));
-			}));
-		}
-	};
-}
+const terminalName = (name) => name === "cli.command.completed" || name === "cli.wallet.step" || CLI_COMMAND_NAMES.some((command) => name === `cli.command.${command}`);
 //#endregion
-//#region src/engineering.ts
-const ENGINEERING_CAPXUL_ENVS = [
-	"development",
-	"staging",
-	"production",
-	"local"
-];
-const traceHeaderFilter = (_name) => true;
-const credentialHeaderPattern = Object.assign(/./u, { test: (name) => isCredentialField(name, "header") });
-const postHogOtlpEndpoints = (host) => {
-	const base = host.replace(/\/+$/, "");
-	return {
-		logs: `${base}/i/v1/logs`,
-		traces: `${base}/i/v1/traces`,
-		metrics: `${base}/i/v1/metrics`
-	};
-};
-const ENGINEERING_CAPXUL_ENV_SET = new Set(ENGINEERING_CAPXUL_ENVS);
-const ENGINEERING_PRODUCERS = /* @__PURE__ */ new Set(["browser", "server"]);
-const PUBLIC_POSTHOG_AUTHORIZATION = /^Bearer phc_[A-Za-z0-9_-]{1,191}$/u;
-const SAFE_RESOURCE_VALUE = /^[A-Za-z0-9][A-Za-z0-9._+@/-]{0,127}$/u;
-function validateEngineeringPrivacy(config) {
-	if (config.privacy !== void 0 && config.privacy !== "minimal") throw new TypeError("engineering telemetry privacy must be minimal when specified");
-	if (config.privacy === "minimal" && (!/^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(config.sdkVersion) || config.serviceName !== void 0 && !/^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(config.serviceName))) throw new TypeError("minimal engineering resource values must not contain paths");
+//#region ../protocol/src/errors/identifier-mask.ts
+/**
+* A typed prefix over a 64-hex digest, such as `money_execution_<digest>`. A
+* private key has the same 64 hex characters, so only Capxul's own id
+* prefixes make the digest public (docs/rules/redaction.md); any other prefix
+* keeps it masked.
+*/
+const PREFIXED_DIGEST = /\b[a-z]+(?:_[a-z]+)*_[0-9a-f]{64}\b/gu;
+/**
+* The prefixes of Capxul's ids over a 64-hex digest. A client needs the id to
+* recover. A new id of this shape is added here, or its digest is masked at
+* the wire.
+*/
+const CAPXUL_ID_PREFIXES = /* @__PURE__ */ new Set([
+	"invitation",
+	"money_execution",
+	"payment_command",
+	"payroll_run",
+	"permission_assignment",
+	"permission_command",
+	"permission_command_invitation",
+	"permission_invite"
+]);
+/** Marks an id while the text is masked: private-use characters no mask matches. */
+const ID_MARK = /\uE000(\d+)\uE001/gu;
+/**
+* `redactSecrets` with Capxul identifiers kept whole. Each id is set aside
+* first, so a credential label still masks whatever value it names, id-shaped
+* or not; only an unlabelled id comes back.
+*/
+function maskKeepingIdentifiers(text, source) {
+	const ids = [];
+	const marked = text.replace(PREFIXED_DIGEST, (id) => {
+		if (!CAPXUL_ID_PREFIXES.has(id.slice(0, -65))) return id;
+		ids.push(id);
+		return `\uE000${String(ids.length - 1)}\uE001`;
+	});
+	const masked = redactSecrets(marked, source);
+	return ids.length === 0 ? masked : masked.replace(ID_MARK, (_, index) => ids[Number(index)] ?? "");
 }
-const validateEngineeringTelemetryConfig = (config) => {
-	let url;
+//#endregion
+//#region ../protocol/src/errors/serialize.ts
+/** Evidence strings are bounded: a provider body cannot inflate a failure. */
+const EVIDENCE_TEXT_MAX = 2e3;
+const UNPRINTABLE = "[unprintable]";
+/**
+* The masked, bounded message of a failure. A factory puts the field name
+* after the words that describe it (`signature is invalid: …`), never before a
+* colon, so the prose mask cannot read the field as a credential label and cut
+* the next word (CAP-441). The message is masked whole, so a second mask on
+* any surface leaves it as it is. A trace span passes its RPC upstream as
+* `source`, so a key in that upstream's URL is masked too.
+*/
+function maskedMessage(error, source) {
 	try {
-		url = new URL(config.host);
+		return boundedText(maskKeepingIdentifiers(error.message, source));
 	} catch {
-		throw new TypeError("engineering telemetry host must be an absolute HTTPS URL");
+		return UNPRINTABLE;
 	}
-	if (url.protocol !== "https:" || url.username.length > 0 || url.password.length > 0 || url.pathname !== "/" || url.search.length > 0 || url.hash.length > 0 || !(url.hostname === "posthog.com" || url.hostname.endsWith(".posthog.com"))) throw new TypeError("engineering telemetry host must be a credential-free HTTPS origin");
-	if (!ENGINEERING_CAPXUL_ENV_SET.has(config.capxulEnv)) throw new TypeError("engineering telemetry capxulEnv is not canonical");
-	if (!ENGINEERING_PRODUCERS.has(config.producer)) throw new TypeError("engineering telemetry producer is not canonical");
-	if (config.enabled !== void 0 && typeof config.enabled !== "boolean" && typeof config.enabled !== "function") throw new TypeError("engineering telemetry enabled must be a boolean or callback");
-	validateEngineeringPrivacy(config);
-	if (!SAFE_RESOURCE_VALUE.test(config.sdkVersion)) throw new TypeError("engineering telemetry sdkVersion must be a bounded safe value");
-	if (config.serviceName !== void 0 && !SAFE_RESOURCE_VALUE.test(config.serviceName)) throw new TypeError("engineering telemetry serviceName must be a bounded safe value");
-	const headerEntries = Object.entries(config.headers);
-	if (headerEntries.length !== 1 || headerEntries[0]?.[0].toLowerCase() !== "authorization" || !PUBLIC_POSTHOG_AUTHORIZATION.test(headerEntries[0]?.[1] ?? "")) throw new TypeError("engineering telemetry headers must contain exactly one public PostHog authorization token");
-	return {
-		...config,
-		host: url.origin,
-		headers: Object.freeze({ authorization: headerEntries[0][1] })
-	};
-};
+}
+/** Text `boundedText` already cut: a second serialize (MCP after the SDK) keeps it as it is. */
+const BOUNDED = new RegExp(`^[\\s\\S]{0,${String(EVIDENCE_TEXT_MAX)}}…\\(\\d{1,7} chars\\)$`);
+function boundedText(masked) {
+	if (masked.length <= EVIDENCE_TEXT_MAX || BOUNDED.test(masked)) return masked;
+	return `${masked.slice(0, EVIDENCE_TEXT_MAX)}…(${String(masked.length)} chars)`;
+}
+//#endregion
+//#region src/engineering/tracer.ts
 const failureText = (failure, key, limit, source) => {
 	if (failure === null || typeof failure !== "object") return void 0;
 	try {
@@ -440,8 +276,20 @@ const failureText = (failure, key, limit, source) => {
 		return;
 	}
 };
+/**
+* A `CapxulError` reads as its failure row reads (`maskedMessage`), so a
+* factory message keeps the word after its field name (CAP-427). The row
+* reads the same error, so the exporter reads nothing more than the row does.
+*/
+const capxulMessage = (failure, source) => {
+	try {
+		return isCapxulError(failure) ? maskedMessage(failure, source).slice(0, 2048) : void 0;
+	} catch {
+		return;
+	}
+};
 const exportFailure = (failure, source) => {
-	const message = failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
+	const message = capxulMessage(failure, source) ?? failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
 	const code = failureText(failure, "code", 128);
 	const error = new Error((code === void 0 ? message : `${message} [code=${code}]`).slice(0, 2048));
 	error.name = failureText(failure, "_tag", 128) ?? failureText(failure, "name", 128) ?? "Error";
@@ -457,7 +305,7 @@ const browserExportClient = (client) => HttpClient.transform(client, (response,
 	if (request.body._tag === "Stream" || request.body._tag === "FormData" || bytes === void 0 || !Number.isSafeInteger(bytes) || bytes < 0 || unfinishedBrowserExportBytes + bytes > BROWSER_KEEPALIVE_BYTES) return;
 	unfinishedBrowserExportBytes += bytes;
 	return bytes;
-}), (bytes) => response.pipe(Effect.provideService(FetchHttpClient.RequestInit, { keepalive: bytes !== void 0 }), Effect.tap((result) => bytes === void 0 ? Effect.void : Stream.runDrain(result.stream).pipe(Effect.catch((error) => error.reason._tag === "EmptyBodyError" ? Effect.void : Effect.fail(error))))), (bytes) => Effect.sync(() => {
+}), (bytes) => response.pipe(Effect.provideService(FetchHttpClient.RequestInit, { keepalive: bytes !== void 0 }), Effect.tap((result) => bytes === void 0 ? Effect.void : Stream.runDrain(result.stream).pipe(Effect.catchIf((error) => error.reason._tag === "EmptyBodyError", () => Effect.void)))), (bytes) => Effect.sync(() => {
 	if (bytes !== void 0) unfinishedBrowserExportBytes -= bytes;
 })));
 const spanUpstream = (span) => {
@@ -477,11 +325,29 @@ function redactHttpPath(path, fullUrl, source) {
 	const prefix = path.startsWith("/") ? origin : "";
 	return redactUrlSecrets(`${prefix}${path}`, source).slice(prefix.length, prefix.length + 2048);
 }
+/** A span whose prototype is `span`: it answers every Span member until an own property overrides it. */
+function inheritSpan(span) {
+	const wrapped = Object.create(span);
+	Object.defineProperties(wrapped, {
+		traceId: { get: () => span.traceId },
+		spanId: { get: () => span.spanId },
+		attributes: { get: () => span.attributes },
+		event: {
+			value: span.event.bind(span),
+			configurable: true
+		},
+		addLinks: {
+			value: span.addLinks.bind(span),
+			configurable: true
+		}
+	});
+	return wrapped;
+}
 /** Preserve domain exits while preventing the OTLP serializer from seeing raw causes. */
 const makeLeakSafeEngineeringTracer = (delegate, enabled = () => true) => Tracer.make({
 	span(options) {
 		const span = enabled() ? delegate.span(options) : new Tracer.NativeSpan(options);
-		const wrapped = Object.create(span);
+		const wrapped = inheritSpan(span);
 		Object.defineProperty(wrapped, "attribute", { value: (name, value) => {
 			const source = spanUpstream(span);
 			const header = /^http\.(?:request|response)\.header\.(.+)$/u.exec(name)?.[1];
@@ -521,20 +387,303 @@ const makeLeakSafeEngineeringTracer = (delegate, enabled = () => true) => Tracer
 	},
 	...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
 });
+//#endregion
+//#region src/delivery/records.ts
+function admittedLogger(state, delegate) {
+	return Logger.make((options) => {
+		if (state.isClosed) return;
+		let release;
+		try {
+			const message = text(Array.isArray(options.message) ? Object.getOwnPropertyDescriptor(options.message, "0")?.value : options.message);
+			release = state.budget.admitRecord(terminalName(message));
+			if (release === void 0) return;
+			const context = Context.add(options.fiber.context, References.CurrentLogAnnotations, attributes(options.fiber.getRef(References.CurrentLogAnnotations)));
+			const fiber = Object.create(options.fiber);
+			Object.defineProperty(fiber, "getRef", { value: (ref) => Context.get(context, ref) });
+			state.logs.push(release);
+			delegate.log({
+				...options,
+				message,
+				cause: Cause.empty,
+				fiber
+			});
+		} catch {
+			if (release !== void 0) {
+				const index = state.logs.indexOf(release);
+				if (index !== -1) state.logs.splice(index, 1);
+				release();
+			}
+			state.budget.drop();
+		}
+	});
+}
+function admittedTracer(state, delegate) {
+	return Tracer.make({
+		span(options) {
+			const name = text(options.name);
+			const release = state.isClosed ? void 0 : state.budget.admitRecord(terminalName(name));
+			const spanOptions = {
+				...options,
+				name,
+				annotations: Context.empty(),
+				links: []
+			};
+			const span = release === void 0 ? new Tracer.NativeSpan({
+				...spanOptions,
+				sampled: false
+			}) : delegate.span(spanOptions);
+			if (release !== void 0) state.spans.set(span.spanId, release);
+			const wrapped = boundedSpan(state, span);
+			wrapped.addLinks(options.links ?? []);
+			return wrapped;
+		},
+		...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
+	});
+}
+/**
+* The span as a producer sees it: at most `recordFields` fields and 2000
+* attribute bytes, 2 events, 2 links.
+*/
+function boundedSpan(state, span) {
+	const { budget } = state;
+	const wrapped = inheritSpan(span);
+	let fields = 0, events = 0, links = 0, attributeBytes = 0;
+	let ended = false;
+	Object.defineProperties(wrapped, {
+		attribute: { value: (key, value) => {
+			if (fields >= CLI_ENGINEERING_LIMITS.recordFields && !span.attributes.has(key)) {
+				budget.drop();
+				return;
+			}
+			const safe = attributes({ [key]: value }, 1);
+			if (!Object.hasOwn(safe, key)) return;
+			const previous = span.attributes.has(key) ? new TextEncoder().encode(JSON.stringify([key, span.attributes.get(key)])).length : 0;
+			const next = new TextEncoder().encode(JSON.stringify([key, safe[key]])).length;
+			if (attributeBytes - previous + next > 2e3) {
+				budget.drop();
+				return;
+			}
+			attributeBytes += next - previous;
+			if (!span.attributes.has(key)) fields += 1;
+			span.attribute(key, safe[key]);
+		} },
+		event: { value: (eventName, time, attrs) => {
+			if (events++ >= 2) {
+				budget.drop();
+				return;
+			}
+			span.event(text(eventName), time, attributes(attrs ?? {}, 4));
+		} },
+		addLinks: { value: (items) => {
+			for (const item of items.slice(0, Math.max(0, 2 - links))) {
+				if (!/^[a-f0-9]{32}$/u.test(item.span.traceId) || !/^[a-f0-9]{16}$/u.test(item.span.spanId)) {
+					budget.drop();
+					continue;
+				}
+				span.addLinks([{
+					span: Tracer.externalSpan({
+						traceId: item.span.traceId,
+						spanId: item.span.spanId,
+						sampled: item.span.sampled
+					}),
+					attributes: attributes(item.attributes, 4)
+				}]);
+				links += 1;
+			}
+		} },
+		end: { value: (time, exit) => {
+			if (ended) return;
+			ended = true;
+			span.end(time, Exit.isFailure(exit) ? Exit.fail("CLI operation failed") : Exit.void);
+		} }
+	});
+	return wrapped;
+}
+//#endregion
+//#region src/delivery/requests.ts
+function admittedSerialization(state, delegate) {
+	return {
+		logs(data) {
+			const releases = state.logs.splice(0);
+			try {
+				const body = delegate.logs(data);
+				if (data.resourceLogs.some((r) => r.scopeLogs.some((s) => s.logRecords?.some((l) => terminalName(l.body?.stringValue ?? ""))))) state.terminalBodies.add(body);
+				holdBody(state, body, releases);
+				return body;
+			} catch (error) {
+				for (const release of releases) release();
+				throw error;
+			}
+		},
+		traces(data) {
+			const releases = [];
+			for (const resource of data.resourceSpans) for (const scope of resource.scopeSpans) for (const span of scope.spans) {
+				const release = state.spans.get(span.spanId);
+				if (release !== void 0) releases.push(release);
+				state.spans.delete(span.spanId);
+			}
+			try {
+				const body = delegate.traces(data);
+				if (data.resourceSpans.some((r) => r.scopeSpans.some((s) => s.spans.some((span) => terminalName(span.name))))) state.terminalBodies.add(body);
+				holdBody(state, body, releases);
+				return body;
+			} catch (error) {
+				for (const release of releases) release();
+				throw error;
+			}
+		},
+		metrics(data) {
+			const body = delegate.metrics(data);
+			state.terminalBodies.add(body);
+			return body;
+		}
+	};
+}
+/** A 429's Retry-After, bounded to two seconds; any other failure retries at once. */
+const retryAfter = Schedule.spaced("100 millis").pipe(Schedule.addDelay(({ input }) => Effect.map(Clock.currentTimeMillis, (now) => {
+	if (!HttpClientError.isHttpClientError(input) || input.reason._tag !== "StatusCodeError" || input.reason.response.status !== 429) return Duration.zero;
+	const header = input.reason.response.headers["retry-after"];
+	const numeric = Number(header);
+	const delay = header === void 0 ? 2e3 : Number.isFinite(numeric) ? numeric * 1e3 : Date.parse(header) - now;
+	return Duration.millis(Number.isFinite(delay) ? Math.min(2e3, Math.max(0, delay)) : 2e3);
+})));
+function admittedTransport(state, client, enabled = () => true) {
+	const { budget } = state;
+	const retrying = HttpClient.transform(client, (response, request) => Effect.suspend(() => {
+		if (enabled()) return response;
+		budget.drop();
+		return Effect.succeed(HttpClientResponse.fromWeb(request, new Response(null)));
+	})).pipe(HttpClient.transformResponse((response) => Effect.tap(response, (result) => {
+		let received = 0;
+		return Stream.runForEach(result.stream, (chunk) => Effect.sync(() => {
+			received += chunk.byteLength;
+			if (received > 65536) throw new Error("Engineering response limit exceeded");
+		})).pipe(Effect.catchReason("HttpClientError", "EmptyBodyError", () => Effect.void));
+	}))).pipe(HttpClient.filterStatusOk, HttpClient.retryTransient({
+		times: 1,
+		schedule: retryAfter
+	}));
+	return HttpClient.transform(retrying, (response, request) => Effect.suspend(() => {
+		if (state.isClosed) {
+			discardBody(state, request.body);
+			return Effect.succeed(HttpClientResponse.fromWeb(request, new Response(null)));
+		}
+		const droppedResponse = () => HttpClientResponse.fromWeb(request, new Response(null, { status: 200 }));
+		if (request.body._tag === "Empty") {
+			discardBody(state, request.body);
+			return Effect.succeed(droppedResponse());
+		}
+		const bytes = request.body.contentLength;
+		const release = budget.admitRequest(bytes ?? Number.POSITIVE_INFINITY, state.terminalBodies.has(request.body));
+		if (release === void 0) {
+			discardBody(state, request.body);
+			return Effect.succeed(droppedResponse());
+		}
+		const lease = state.bodyLeases.get(request.body);
+		if (lease !== void 0) lease.started = true;
+		return response.pipe(Effect.asVoid, Effect.timeoutOption(CLI_ENGINEERING_LIMITS.requestTimeoutMs), Effect.raceFirst(Deferred.await(state.closed).pipe(Effect.andThen(Effect.interrupt))), Effect.tap((result) => Effect.sync(() => {
+			if (Option.isNone(result)) budget.drop();
+		})), Effect.catchCause(() => Effect.sync(() => {
+			budget.drop();
+		})), Effect.as(droppedResponse()), Effect.ensuring(Effect.sync(() => {
+			release();
+			discardBody(state, request.body);
+		})));
+	}));
+}
+//#endregion
+//#region src/engineering-delivery.ts
+/** Native exporters retain their serialization and scheduling; this owns admission only. */
+function cliEngineeringDelivery(budget, ownsMetrics) {
+	const state = newDeliveryState(budget, ownsMetrics);
+	return {
+		close: () => closeDelivery(state),
+		discardBody: (body) => discardBody(state, body),
+		metrics(run) {
+			return Effect.suspend(() => {
+				if (state.isClosed || state.metricsRunning) return Effect.void;
+				state.metricsRunning = true;
+				return run.pipe(Effect.ensuring(Effect.sync(() => {
+					state.metricsRunning = false;
+				})));
+			});
+		},
+		logger: (delegate) => admittedLogger(state, delegate),
+		tracer: (delegate) => admittedTracer(state, delegate),
+		serialization: (delegate) => admittedSerialization(state, delegate),
+		transport: (client, enabled) => admittedTransport(state, client, enabled)
+	};
+}
+//#endregion
+//#region src/engineering/config.ts
+const ENGINEERING_CAPXUL_ENVS = [
+	"development",
+	"staging",
+	"production",
+	"local"
+];
+const traceHeaderFilter = (_name) => true;
+const credentialHeaderPattern = Object.assign(/./u, { exec: (name) => isCredentialField(name, "header") ? Object.assign([name], {
+	index: 0,
+	input: name
+}) : null });
+const postHogOtlpEndpoints = (host) => {
+	const base = host.replace(/\/+$/, "");
+	return {
+		logs: `${base}/i/v1/logs`,
+		traces: `${base}/i/v1/traces`,
+		metrics: `${base}/i/v1/metrics`
+	};
+};
+const ENGINEERING_CAPXUL_ENV_SET = new Set(ENGINEERING_CAPXUL_ENVS);
+const ENGINEERING_PRODUCERS = /* @__PURE__ */ new Set(["browser", "server"]);
+const PUBLIC_POSTHOG_AUTHORIZATION = /^Bearer phc_[A-Za-z0-9_-]{1,191}$/u;
+const SAFE_RESOURCE_VALUE = /^[A-Za-z0-9][A-Za-z0-9._+@/-]{0,127}$/u;
+function validateEngineeringPrivacy(config) {
+	if (config.privacy !== void 0 && config.privacy !== "minimal") throw new TypeError("engineering telemetry privacy must be minimal when specified");
+	if (config.privacy === "minimal" && (!/^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(config.sdkVersion) || config.serviceName !== void 0 && !/^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(config.serviceName))) throw new TypeError("minimal engineering resource values must not contain paths");
+}
+const validateEngineeringTelemetryConfig = (config) => {
+	let url;
+	try {
+		url = new URL(config.host);
+	} catch (cause) {
+		throw new TypeError("engineering telemetry host must be an absolute HTTPS URL", { cause });
+	}
+	if (url.protocol !== "https:" || url.username.length > 0 || url.password.length > 0 || url.pathname !== "/" || url.search.length > 0 || url.hash.length > 0 || !(url.hostname === "posthog.com" || url.hostname.endsWith(".posthog.com"))) throw new TypeError("engineering telemetry host must be a credential-free HTTPS origin");
+	if (!ENGINEERING_CAPXUL_ENV_SET.has(config.capxulEnv)) throw new TypeError("engineering telemetry capxulEnv is not canonical");
+	if (!ENGINEERING_PRODUCERS.has(config.producer)) throw new TypeError("engineering telemetry producer is not canonical");
+	if (config.enabled !== void 0 && typeof config.enabled !== "boolean" && typeof config.enabled !== "function") throw new TypeError("engineering telemetry enabled must be a boolean or callback");
+	validateEngineeringPrivacy(config);
+	if (!SAFE_RESOURCE_VALUE.test(config.sdkVersion)) throw new TypeError("engineering telemetry sdkVersion must be a bounded safe value");
+	if (config.serviceName !== void 0 && !SAFE_RESOURCE_VALUE.test(config.serviceName)) throw new TypeError("engineering telemetry serviceName must be a bounded safe value");
+	const headerEntries = Object.entries(config.headers);
+	if (headerEntries.length !== 1 || headerEntries[0]?.[0].toLowerCase() !== "authorization" || !PUBLIC_POSTHOG_AUTHORIZATION.test(headerEntries[0]?.[1] ?? "")) throw new TypeError("engineering telemetry headers must contain exactly one public PostHog authorization token");
+	return {
+		...config,
+		host: url.origin,
+		headers: Object.freeze({ authorization: headerEntries[0][1] })
+	};
+};
+//#endregion
+//#region src/engineering/minimal.ts
 const MINIMAL_LOG_NAMES = /* @__PURE__ */ new Set([
 	"capxul_sdk_operation",
 	"identity.transition",
 	"convex.connection.changed",
 	"convex.action.connection_lost",
 	"cli.command.completed",
-	"cli.sdk.operation.failed"
+	"cli.sdk.operation.failed",
+	"cli.signer.wait",
+	"cli.wallet.step"
 ]);
 const MINIMAL_ERROR_CODES = /* @__PURE__ */ new Set([
 	...CAPXUL_ERROR_CODES,
 	"CLI_USAGE",
 	"CLI_CONFIG",
 	"CLI_STORAGE",
-	"CLI_DEFECT"
+	"CLI_DEFECT",
+	"CLI_DEADLINE"
 ]);
 const MINIMAL_NUMBERS = /* @__PURE__ */ new Set([
 	"schema_version",
@@ -546,13 +695,21 @@ const MINIMAL_NUMBERS = /* @__PURE__ */ new Set([
 	"http_status",
 	"rpc.code",
 	"connection_count",
-	"connection_retries"
+	"connection_retries",
+	"elapsed_ms",
+	"total_ms",
+	"token_calls",
+	"call",
+	"attempt",
+	"bridge_protocol_version",
+	"httpStatus"
 ]);
 const MINIMAL_CORRELATIONS = /* @__PURE__ */ new Set([
 	"correlation_id",
 	"journey_id",
 	"invocation_id",
-	"posthogDistinctId"
+	"posthogDistinctId",
+	"failure_correlation_id"
 ]);
 const MINIMAL_METRIC_LABELS = /* @__PURE__ */ new Set([
 	"command",
@@ -565,6 +722,12 @@ const MINIMAL_METRIC_LABELS = /* @__PURE__ */ new Set([
 const MINIMAL_METRIC_NAMES = /* @__PURE__ */ new Set(["capxul.cli.command.count", "capxul.cli.command.duration"]);
 const traceId = (value) => typeof value === "string" && /^(?!0+$)[0-9a-f]{32}$/u.test(value);
 const spanId = (value) => typeof value === "string" && /^(?!0+$)[0-9a-f]{16}$/u.test(value);
+/**
+* A correlation id the minimal export carries: an identifier with no `/`, not
+* `0x` hex, and unchanged by the secret mask. The CLI quotes a backend
+* correlation id as its `ref` only when it passes, so the ref finds a row.
+*/
+const minimalCorrelationId = (value) => typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(value) && !/^0x[0-9a-f]+$/iu.test(value) && redactSecrets(value) === value;
 const minimalName = (value) => typeof value === "string" && (MINIMAL_LOG_NAMES.has(value) || isCapxulOperation(value) || CLI_COMMAND_NAMES.some((command) => value === `cli.command.${command}`)) ? value : "capxul.engineering";
 const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 	["outcome", [
@@ -576,13 +739,46 @@ const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 	]],
 	["mode", FAILURE_MODES],
 	["failure_mode", FAILURE_MODES],
+	["failure_class", FAILURE_CLASSES],
+	["problem", PROVIDER_PROBLEMS],
 	["capxul_env", ENGINEERING_CAPXUL_ENVS],
 	["producer", ["browser", "server"]],
 	["command", CLI_COMMAND_NAMES],
 	["capability", CLI_CAPABILITIES],
 	["invocation_kind", CLI_INVOCATION_KINDS],
-	["cli_identity_kind", ["anonymous"]],
+	["diagnostic_scope", [
+		"openfort.step",
+		"openfort.token",
+		"openfort.encryptionSession",
+		"openfort.embeddedState",
+		"openfort.storageCleared",
+		"openfort.configure",
+		"openfort.get",
+		"openfort.address",
+		"openfort.staleCacheHeal",
+		"openfort.signerRecovery",
+		"openfort.signerStatusListener"
+	]],
+	["step", [
+		"initialize",
+		"token",
+		"encryptionSession",
+		"embeddedState",
+		"configure",
+		"get",
+		"healStaleCache",
+		"walletReady"
+	]],
+	["provider", [...PROVIDERS, "oidc"]],
+	["cli_identity_kind", ["anonymous", "identified"]],
 	["output_mode", ["human", "json"]],
+	["setup_status", ORGANIZATION_SETUP_STATUSES],
+	["setup_reason", ORGANIZATION_SETUP_REASONS],
+	["signer_stage", [
+		"address",
+		"readiness",
+		"sign"
+	]],
 	["unit", [
 		"1",
 		"s",
@@ -592,24 +788,36 @@ const MINIMAL_ENUM_VALUES = /* @__PURE__ */ new Map([
 const MINIMAL_CODE_KEYS = /* @__PURE__ */ new Set([
 	"error.code",
 	"error_code",
+	"error_kind",
 	"failure_code",
-	"refusal_code",
-	"capxul_error_code"
+	"refusal_code"
 ]);
 const MINIMAL_VERSION_KEYS = /* @__PURE__ */ new Set([
 	"sdk_version",
 	"cli_version",
 	"release"
 ]);
+/** The failure row's identifiers that the `none` text policy lets through (ADR-0039 D6). */
+const MINIMAL_FAILURE_IDENTIFIERS = /* @__PURE__ */ new Set([
+	"provider_operation",
+	"provider_code",
+	"field"
+]);
+/** What raised a failure: its layer (`convex`, `sdk`), and a CLI defect's error name. */
+const MINIMAL_FAILURE_ORIGINS = /* @__PURE__ */ new Set(["failure_layer", "failure_error_name"]);
 function minimalStringValue(key, text) {
 	if (key === "operation") return isCapxulOperation(text);
+	if (key === "organization_id") return /^org_[0-9A-Za-z]+$/u.test(text);
 	if (MINIMAL_CODE_KEYS.has(key)) return MINIMAL_ERROR_CODES.has(text);
 	if (MINIMAL_VERSION_KEYS.has(key)) return /^[A-Za-z0-9][A-Za-z0-9._+@-]{0,127}$/u.test(text);
+	if (MINIMAL_FAILURE_IDENTIFIERS.has(key)) return /^[A-Za-z0-9_][A-Za-z0-9_.:/[\]-]{0,127}$/u.test(text) && redactSecrets(text) === text;
+	if (MINIMAL_FAILURE_ORIGINS.has(key)) return /^[A-Za-z_][A-Za-z0-9_.-]{0,63}$/u.test(text) && redactSecrets(text) === text;
+	if (key === "request_id") return /^[0-9a-f]{16}$/u.test(text);
 	if (key === "trace_id") return traceId(text);
 	if (key === "span_id" || key === "parent_span_id") return spanId(text);
 	const values = MINIMAL_ENUM_VALUES.get(key);
 	if (values !== void 0) return values.includes(text);
-	return MINIMAL_CORRELATIONS.has(key) && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u.test(text) && !/^0x[0-9a-f]+$/iu.test(text) && redactSecrets(text) === text;
+	return MINIMAL_CORRELATIONS.has(key) && minimalCorrelationId(text);
 }
 /** A named privacy projection, separate from the default credential-only redaction policy. */
 function minimalAttributes(attributes, metric = false) {
@@ -628,6 +836,8 @@ function minimalAttributes(attributes, metric = false) {
 		}] : [];
 	});
 }
+//#endregion
+//#region src/engineering/metric-points.ts
 const finiteProtocolNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
 const protocolCount = (value, maximum = Number.MAX_SAFE_INTEGER) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && value <= maximum ? value : void 0;
 const protocolFlags = (value) => protocolCount(Object.getOwnPropertyDescriptor(value, "flags")?.value, 4294967295);
@@ -677,6 +887,8 @@ function minimalHistogramPoints(points) {
 		}];
 	});
 }
+//#endregion
+//#region src/engineering/serialization.ts
 function minimalSerialization(config) {
 	const service = config.serviceName ?? "capxul-sdk";
 	const resource = { attributes: Object.entries({
@@ -767,7 +979,7 @@ function minimalSerialization(config) {
 						const gauge = metric.gauge === void 0 ? void 0 : { dataPoints: minimalNumberPoints(metric.gauge.dataPoints) };
 						const sum = metric.sum === void 0 ? void 0 : {
 							aggregationTemporality: protocolCount(metric.sum.aggregationTemporality, 2) ?? 0,
-							isMonotonic: metric.sum.isMonotonic === true,
+							isMonotonic: metric.sum.isMonotonic,
 							dataPoints: minimalNumberPoints(metric.sum.dataPoints)
 						};
 						const histogram = metric.histogram === void 0 ? void 0 : {
@@ -797,14 +1009,18 @@ function minimalSerialization(config) {
 		}
 	};
 }
+//#endregion
+//#region src/engineering/logs.ts
 /** Attempt to drain all engineering signals; completion does not prove ingestion. */
 const flushEngineeringTelemetry = Effect.flatMap(OtlpExporter.Flusher, (flusher) => flusher.flush);
 var EngineeringLog = class extends Context.Service()("capxul/EngineeringLog") {};
 /** Deliver an owned engineering record without changing the caller's console verbosity. */
 const logEngineeringInfo = (message, attributes) => {
 	const record = Effect.logInfo(message).pipe(Effect.annotateLogs(attributes));
-	return Effect.flatMap(LogLevel.isEnabled("Info"), (visible) => visible ? record : Effect.flatMap(EngineeringLog, (logger) => record.pipe(Effect.provideService(Logger.CurrentLoggers, /* @__PURE__ */ new Set([logger])), Effect.provideService(References.MinimumLogLevel, "All"))));
+	return Effect.flatMap(LogLevel.isEnabled("Info"), (visible) => visible ? record : Effect.flatMap(Effect.serviceOption(EngineeringLog), (logger) => logger._tag === "None" ? Effect.void : record.pipe(Effect.provideService(Logger.CurrentLoggers, /* @__PURE__ */ new Set([logger.value])), Effect.provideService(References.MinimumLogLevel, "All"))));
 };
+//#endregion
+//#region src/engineering.ts
 /** Shared browser/server OTLP layer. OtlpLogger merges with incumbent loggers once. */
 const makeEngineeringTelemetryLayer = (config) => {
 	const validated = validateEngineeringTelemetryConfig(config);
@@ -920,4 +1136,4 @@ const makeEngineeringTelemetryLayer = (config) => {
 	});
 };
 //#endregion
-export { CLI_ENGINEERING_LIMITS, ENGINEERING_CAPXUL_ENVS, flushEngineeringTelemetry, logEngineeringInfo, makeCliEngineeringBudget, makeEngineeringTelemetryLayer, makeLeakSafeEngineeringTracer, postHogOtlpEndpoints, traceHeaderFilter };
+export { CLI_ENGINEERING_LIMITS, ENGINEERING_CAPXUL_ENVS, flushEngineeringTelemetry, logEngineeringInfo, makeCliEngineeringBudget, makeEngineeringTelemetryLayer, makeLeakSafeEngineeringTracer, minimalCorrelationId, postHogOtlpEndpoints, traceHeaderFilter };