@composed-di/instrumentation-core 0.6.0-alpha

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './serviceInstrumentation';
+export * from './instrument';
+export * from './redaction';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAA;AACxC,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA"}

package/dist/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./serviceInstrumentation"), exports);
+__exportStar(require("./instrument"), exports);
+__exportStar(require("./redaction"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAwC;AACxC,+CAA4B;AAC5B,8CAA2B"}

package/dist/instrument.d.ts

@@ -0,0 +1,72 @@
+import { ServiceFactory, ServiceKey, ServiceModule } from '@composed-di/core';
+import type { ServiceInstrumentation } from './serviceInstrumentation';
+import type { RedactionRule } from './redaction';
+type GenericFactory = ServiceFactory<unknown, readonly ServiceKey<any>[]>;
+/**
+ * Configuration for {@link instrument}. Capture policy lives here, not in
+ * the ServiceInstrumentation implementations: what an implementation
+ * receives is exactly what it is allowed to record, so no implementation
+ * carries its own capture flags or redaction logic.
+ */
+export interface InstrumentOptions {
+    /**
+     * The instrumentation notified of service lifecycle events and method
+     * calls.
+     */
+    instrumentation: ServiceInstrumentation;
+    /**
+     * Deliver method arguments to the instrumentation (as
+     * MethodCallContext.args). Off by default: arguments may be large or
+     * contain secrets, and they end up wherever the instrumentation exports
+     * them. When off, the instrumentation never sees the arguments at all.
+     */
+    captureArguments?: boolean;
+    /**
+     * Deliver method call return / resolved values to the instrumentation
+     * (as the success outcome's `value`). Off by default, for the same
+     * reasons as `captureArguments`. When off, the instrumentation never
+     * sees the values at all. Initialize and dispose outcomes never carry a
+     * value: the service instance is not useful information to report.
+     */
+    captureResults?: boolean;
+    /**
+     * Per-service redaction applied to whatever the capture flags let
+     * through: matched arguments and success values are blanked (or run
+     * through the rule's custom mask) before the instrumentation sees them.
+     * The capture flags are the primary gate — when capture is off there is
+     * nothing to redact, and rules cannot re-enable delivery.
+     */
+    redactionRules?: readonly RedactionRule<any>[];
+}
+/**
+ * Wraps service factories with instrumentation, so the given
+ * ServiceInstrumentation is notified when a service is initialized or
+ * disposed and when a method is called on a service instance, and may
+ * return an EventSpan per operation to observe its completion. Service
+ * instances are wrapped in a Proxy to observe method calls, and errors
+ * are rethrown after being reported, so behavior is otherwise unchanged.
+ *
+ * ServiceModule entries are flattened into their factories, so an
+ * already-built module can be instrumented as a whole. Compose the result
+ * with `ServiceModule.from`:
+ *
+ * @example
+ * ```ts
+ * const module = ServiceModule.from(
+ *   instrument([db, cache, api], {
+ *     instrumentation: otel,
+ *     captureArguments: true,
+ *     captureResults: true,
+ *     redactionRules: [redactionRule(VaultKey).redact('getSecret').build()],
+ *   }),
+ * );
+ * ```
+ *
+ * @param entries - An array of ServiceModule or factory instances to wrap.
+ * @param options - The instrumentation to notify, plus the capture and
+ * redaction policy applied before anything reaches it.
+ * @return The wrapped factories, ready to be passed to ServiceModule.from.
+ */
+export declare function instrument(entries: (ServiceModule | GenericFactory)[], options: InstrumentOptions): GenericFactory[];
+export {};
+//# sourceMappingURL=instrument.d.ts.map

package/dist/instrument.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrument.d.ts","sourceRoot":"","sources":["../src/instrument.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC7E,OAAO,KAAK,EAGV,sBAAsB,EACvB,MAAM,0BAA0B,CAAA;AACjC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,KAAK,cAAc,GAAG,cAAc,CAAC,OAAO,EAAE,SAAS,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AAEzE;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,eAAe,EAAE,sBAAsB,CAAA;IAEvC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAE1B;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IAExB;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,SAAS,aAAa,CAAC,GAAG,CAAC,EAAE,CAAA;CAC/C;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,CAAC,aAAa,GAAG,cAAc,CAAC,EAAE,EAC3C,OAAO,EAAE,iBAAiB,GACzB,cAAc,EAAE,CAIlB"}

package/dist/instrument.js

@@ -0,0 +1,203 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.instrument = instrument;
+const core_1 = require("@composed-di/core");
+/**
+ * Wraps service factories with instrumentation, so the given
+ * ServiceInstrumentation is notified when a service is initialized or
+ * disposed and when a method is called on a service instance, and may
+ * return an EventSpan per operation to observe its completion. Service
+ * instances are wrapped in a Proxy to observe method calls, and errors
+ * are rethrown after being reported, so behavior is otherwise unchanged.
+ *
+ * ServiceModule entries are flattened into their factories, so an
+ * already-built module can be instrumented as a whole. Compose the result
+ * with `ServiceModule.from`:
+ *
+ * @example
+ * ```ts
+ * const module = ServiceModule.from(
+ *   instrument([db, cache, api], {
+ *     instrumentation: otel,
+ *     captureArguments: true,
+ *     captureResults: true,
+ *     redactionRules: [redactionRule(VaultKey).redact('getSecret').build()],
+ *   }),
+ * );
+ * ```
+ *
+ * @param entries - An array of ServiceModule or factory instances to wrap.
+ * @param options - The instrumentation to notify, plus the capture and
+ * redaction policy applied before anything reaches it.
+ * @return The wrapped factories, ready to be passed to ServiceModule.from.
+ */
+function instrument(entries, options) {
+    return entries
+        .flatMap((e) => (e instanceof core_1.ServiceModule ? e.factories : [e]))
+        .map((factory) => makeObservable(options, factory));
+}
+function makeCapture(options, key) {
+    var _a, _b, _c;
+    const rule = (_a = options.redactionRules) === null || _a === void 0 ? void 0 : _a.find((r) => r.key === key);
+    const captureArguments = (_b = options.captureArguments) !== null && _b !== void 0 ? _b : false;
+    const captureResults = (_c = options.captureResults) !== null && _c !== void 0 ? _c : false;
+    return {
+        args: (functionName, args) => captureArguments
+            ? rule
+                ? rule.maskArgs(functionName, args)
+                : args
+            : undefined,
+        success: (functionName, value) => captureResults
+            ? {
+                type: 'success',
+                value: rule ? rule.maskResult(functionName, value) : value,
+            }
+            : { type: 'success' },
+    };
+}
+/**
+ * Wraps a given service factory with instrumentation to notify a
+ * ServiceInstrumentation of lifecycle events and method calls.
+ *
+ * For each of initialize, dispose, and method calls, the instrumentation
+ * is invoked at the start of the operation and may return an EventSpan
+ * whose `end` is called with the outcome when the operation finishes.
+ * Errors are rethrown after being reported.
+ *
+ * @param options The instrumentation to notify and the capture policy.
+ * @param delegate The original service factory to be instrumented.
+ * @return A new service factory that provides the same dependencies but includes event notification logic.
+ */
+function makeObservable(options, delegate) {
+    const instrumentation = options.instrumentation;
+    const key = delegate.provides;
+    const capture = makeCapture(options, key);
+    return core_1.ServiceFactory.singleton({
+        scope: delegate.scope,
+        provides: delegate.provides,
+        dependsOn: delegate.dependsOn,
+        initialize: (...args) => __awaiter(this, void 0, void 0, function* () {
+            var _a;
+            const span = (_a = instrumentation.onInitialize) === null || _a === void 0 ? void 0 : _a.call(instrumentation, { key });
+            if (!span) {
+                return delegate.initialize(...args);
+            }
+            try {
+                const instance = yield span.run(() => delegate.initialize(...args));
+                span.end({ type: 'success' });
+                return observeMethodCalls(instance, instrumentation, key, capture);
+            }
+            catch (error) {
+                span.end({ type: 'failure', error });
+                throw error;
+            }
+        }),
+        dispose: () => {
+            var _a;
+            const dispose = delegate.dispose;
+            if (dispose) {
+                const span = (_a = instrumentation.onDispose) === null || _a === void 0 ? void 0 : _a.call(instrumentation, { key });
+                if (span) {
+                    try {
+                        span.run(dispose);
+                        span.end({ type: 'success' });
+                    }
+                    catch (error) {
+                        span.end({ type: 'failure', error });
+                        throw error;
+                    }
+                }
+            }
+        },
+    });
+}
+/**
+ * Wraps an object with a Proxy to notify the instrumentation of method calls.
+ *
+ * Methods returning a promise report their outcome when the promise
+ * settles, not when the method returns.
+ *
+ * @param thing The object whose method calls need to be observed.
+ * @param instrumentation The instrumentation notified of method call events.
+ * @param key The service key used to identify the service in events.
+ * @param capture The capture policy deciding what argument and result
+ * values (if any) are delivered with each event.
+ * @return A Proxy wrapping the input object, with all method calls being reported.
+ */
+function observeMethodCalls(thing, instrumentation, key, capture) {
+    if (typeof thing !== 'object' || thing === null) {
+        return thing;
+    }
+    const className = classNameOf(thing);
+    return new Proxy(thing, {
+        get(target, prop) {
+            const value = Reflect.get(target, prop);
+            if (typeof value === 'function' && typeof prop === 'string') {
+                return (...args) => {
+                    var _a;
+                    const span = (_a = instrumentation.onMethodCall) === null || _a === void 0 ? void 0 : _a.call(instrumentation, {
+                        key,
+                        className,
+                        functionName: prop,
+                        args: capture.args(prop, args),
+                    });
+                    try {
+                        const result = invokeWithin(span, () => value.apply(target, args));
+                        if (result instanceof Promise) {
+                            return result.then((resolved) => {
+                                span === null || span === void 0 ? void 0 : span.end(capture.success(prop, resolved));
+                                return resolved;
+                            }, (error) => {
+                                span === null || span === void 0 ? void 0 : span.end({ type: 'failure', error });
+                                throw error;
+                            });
+                        }
+                        span === null || span === void 0 ? void 0 : span.end(capture.success(prop, result));
+                        return result;
+                    }
+                    catch (error) {
+                        span === null || span === void 0 ? void 0 : span.end({ type: 'failure', error });
+                        throw error;
+                    }
+                };
+            }
+            return value;
+        },
+    });
+}
+/**
+ * Invokes an operation through the EventSpan's `run` wrapper when the
+ * instrumentation returned a span, so it can establish ambient state
+ * (tracing context) around the operation; invokes the operation directly
+ * otherwise.
+ *
+ * @param span The EventSpan returned by the instrumentation, if any.
+ * @param fn The thunk performing the operation.
+ * @returns The value returned by `fn`.
+ */
+function invokeWithin(span, fn) {
+    return span ? span.run(fn) : fn();
+}
+/**
+ * Resolves the class name of a service instance, or undefined for values
+ * that are not instances of a named class (plain object literals,
+ * null-prototype objects).
+ *
+ * @param thing The service instance to inspect.
+ * @returns The constructor name, or undefined when there is none to report.
+ */
+function classNameOf(thing) {
+    var _a;
+    const name = (_a = thing.constructor) === null || _a === void 0 ? void 0 : _a.name;
+    return name && name !== 'Object' ? name : undefined;
+}
+//# sourceMappingURL=instrument.js.map

package/dist/instrument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrument.js","sourceRoot":"","sources":["../src/instrument.ts"],"names":[],"mappings":";;;;;;;;;;;AA+EA,gCAOC;AAtFD,4CAA6E;AAkD7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,SAAgB,UAAU,CACxB,OAA2C,EAC3C,OAA0B;IAE1B,OAAO,OAAO;SACX,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,oBAAa,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;SAChE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAA;AACvD,CAAC;AA2BD,SAAS,WAAW,CAClB,OAA0B,EAC1B,GAAwB;;IAExB,MAAM,IAAI,GAAG,MAAA,OAAO,CAAC,cAAc,0CAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA;IAC/D,MAAM,gBAAgB,GAAG,MAAA,OAAO,CAAC,gBAAgB,mCAAI,KAAK,CAAA;IAC1D,MAAM,cAAc,GAAG,MAAA,OAAO,CAAC,cAAc,mCAAI,KAAK,CAAA;IAEtD,OAAO;QACL,IAAI,EAAE,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAC3B,gBAAgB;YACd,CAAC,CAAC,IAAI;gBACJ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC;gBACnC,CAAC,CAAC,IAAI;YACR,CAAC,CAAC,SAAS;QACf,OAAO,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,EAAE,CAC/B,cAAc;YACZ,CAAC,CAAC;gBACE,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK;aAC3D;YACH,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE;KAC1B,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,cAAc,CACrB,OAA0B,EAC1B,QAAgC;IAEhC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAA;IAC/C,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAC7B,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;IAEzC,OAAO,qBAAc,CAAC,SAAS,CAAC;QAC9B,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,UAAU,EAAE,CAAO,GAAG,IAAI,EAAE,EAAE;;YAC5B,MAAM,IAAI,GAAG,MAAA,eAAe,CAAC,YAAY,gEAAG,EAAE,GAAG,EAAE,CAAC,CAAA;YACpD,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAA;YACrC,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAA;gBACnE,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;gBAC7B,OAAO,kBAAkB,CAAC,QAAQ,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;gBACpC,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC,CAAA;QACD,OAAO,EAAE,GAAG,EAAE;;YACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;YAChC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAA,eAAe,CAAC,SAAS,gEAAG,EAAE,GAAG,EAAE,CAAC,CAAA;gBACjD,IAAI,IAAI,EAAE,CAAC;oBACT,IAAI,CAAC;wBACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;wBACjB,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;oBAC/B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;wBACpC,MAAM,KAAK,CAAA;oBACb,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,kBAAkB,CACzB,KAAU,EACV,eAAuC,EACvC,GAAwB,EACxB,OAAgB;IAEhB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAEpC,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE;QACtB,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACvC,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,OAAO,CAAC,GAAG,IAAe,EAAE,EAAE;;oBAC5B,MAAM,IAAI,GAAG,MAAA,eAAe,CAAC,YAAY,gEAAG;wBAC1C,GAAG;wBACH,SAAS;wBACT,YAAY,EAAE,IAAI;wBAClB,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;qBAC/B,CAAC,CAAA;oBACF,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAA;wBAClE,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;4BAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,QAAQ,EAAE,EAAE;gCACX,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;gCAC1C,OAAO,QAAQ,CAAA;4BACjB,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;gCACR,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;gCACrC,MAAM,KAAK,CAAA;4BACb,CAAC,CACF,CAAA;wBACH,CAAC;wBACD,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;wBACxC,OAAO,MAAM,CAAA;oBACf,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;wBACrC,MAAM,KAAK,CAAA;oBACb,CAAC;gBACH,CAAC,CAAA;YACH,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,YAAY,CAAI,IAAsB,EAAE,EAAW;IAC1D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAa;;IAChC,MAAM,IAAI,GAAG,MAAA,KAAK,CAAC,WAAW,0CAAE,IAAI,CAAA;IACpC,OAAO,IAAI,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;AACrD,CAAC"}

package/dist/redactingEventListener.d.ts

@@ -0,0 +1,120 @@
+import type { DisposeContext, EventSpan, InitializeContext, MethodCallContext, ServiceInstrumentation } from './serviceInstrumentation';
+import type { ServiceKey } from '@composed-di/core';
+/**
+ * The placeholder that replaces a redacted value when no custom
+ * transform is given for it.
+ */
+export declare const REDACTED_VALUE = "[REDACTED]";
+/**
+ * Custom masking for one included property, narrowed to the exact
+ * method named when {@link RedactionRuleBuilder.redact} is called.
+ * Omitting a side fully blanks it with {@link REDACTED_VALUE}; providing
+ * one lets you report a partial mask instead (e.g. the last 4 digits of
+ * a card number) — both always return a `string`, the masked
+ * representation to report in place of the real value.
+ */
+export type Mask<T, K extends Extract<keyof T, string>> = T[K] extends (...args: infer A) => infer R ? {
+    maskArgs?: (...args: A) => string;
+    maskResult?: (result: R) => string;
+} : never;
+/**
+ * Marks a service — or specific properties of it — as sensitive, so the
+ * values flowing through its events are redacted. Returned by
+ * {@link RedactionRuleBuilder.build}, which is the only way to construct
+ * one — the `redactAll`/per-property merge logic lives entirely inside
+ * `maskArgs`/`maskResult`, so callers never need to know how a rule
+ * reached its decision, only what to do with it.
+ */
+export interface RedactionRule<T> {
+    readonly key: ServiceKey<T>;
+    /**
+     * The args to report for a call to `functionName`: unchanged if not
+     * redacted, otherwise blanked or run through a custom `maskArgs`.
+     */
+    maskArgs(functionName: string, args: readonly unknown[]): readonly unknown[];
+    /**
+     * The value to report for a success outcome: unchanged if not
+     * redacted, otherwise blanked or run through a custom `maskResult`.
+     * Omit `functionName` to ask about the initialize result (the service
+     * instance itself), which only the rule's `redactAll` default touches.
+     */
+    maskResult(functionName: string | undefined, result: unknown): unknown;
+}
+/**
+ * Fluent, single-key rule builder returned by {@link redactionRule}.
+ * `redactAll`, `redact`, and `exclude` all merge into the same rule —
+ * call them in any combination, in any order; the more specific
+ * per-property calls (`redact`/`exclude`) always win over the blanket
+ * `redactAll` default for the properties they name.
+ *
+ * @example
+ * ```ts
+ * const rules = [
+ *   redactionRule(SecretClientKey)
+ *     .redactAll()
+ *     .build(), // whole service is sensitive
+ *   redactionRule(BillingKey)
+ *     .redactAll()
+ *     .redact('chargeCard', { maskResult: (card) => `card ending in ${card.number.slice(-4)}` })
+ *     .exclude('ping') // redact everything except this, with one custom mask
+ *     .build(),
+ *   redactionRule(VaultKey)
+ *     .redact('getSecret')
+ *     .build(), // only this call, nothing else
+ * ];
+ * ```
+ */
+export declare class RedactionRuleBuilder<T> {
+    private readonly key;
+    private redactAllFlag;
+    private hasRedact;
+    private readonly overrides;
+    constructor(key: ServiceKey<T>);
+    /** Redacts every property, plus the initialize result, by default. */
+    redactAll(): this;
+    /**
+     * Marks one property (method) as redacted, with optional custom
+     * masking. Call repeatedly for several properties. Overrides
+     * `redactAll`/`exclude` for this specific property.
+     */
+    redact<K extends Extract<keyof T, string>>(name: K, mask?: Mask<T, K>): this;
+    /**
+     * Marks one or more properties as explicitly NOT redacted, overriding
+     * `redactAll` for just these.
+     */
+    exclude(...names: Extract<keyof T, string>[]): this;
+    build(): RedactionRule<any>;
+}
+export declare function redactionRule<T>(key: ServiceKey<T>): RedactionRuleBuilder<T>;
+/**
+ * A ServiceInstrumentation decorator that redacts sensitive values before
+ * they reach the wrapped instrumentation. Works with any implementation via
+ * delegation: arguments in MethodCallContext and success values in
+ * EventOutcome are replaced (wholesale, or via a custom transform)
+ * before the delegate ever sees them — whatever it captures or exports
+ * is already scrubbed.
+ *
+ * Failure outcomes are passed through unchanged so error reporting keeps
+ * working; keep secrets out of error messages at the throwing site.
+ *
+ * @example
+ * ```ts
+ * const listener = new RedactingEventListener(
+ *   new OTELEventListener({ captureArguments: true, captureResults: true }),
+ *   [
+ *     redactionRule(SecretClientKey).redactAll().build(), // whole service is sensitive
+ *     redactionRule(VaultKey).redact('getSecret').build(), // only this call
+ *     redactionRule(HealthKey).redactAll().exclude('ping').build(), // everything but this call
+ *   ],
+ * );
+ * ```
+ */
+export declare class RedactingEventListener implements ServiceInstrumentation {
+    private readonly delegate;
+    private readonly rules;
+    constructor(delegate: ServiceInstrumentation, rules: readonly RedactionRule<any>[]);
+    onInitialize(context: InitializeContext): EventSpan | void;
+    onDispose(context: DisposeContext): EventSpan | void;
+    onMethodCall(context: MethodCallContext): EventSpan | void;
+}
+//# sourceMappingURL=redactingEventListener.d.ts.map

package/dist/redactingEventListener.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactingEventListener.d.ts","sourceRoot":"","sources":["../src/redactingEventListener.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EAEd,SAAS,EACT,iBAAiB,EACjB,iBAAiB,EACjB,sBAAsB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,cAAc,eAAe,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CACrE,GAAG,IAAI,EAAE,MAAM,CAAC,KACb,MAAM,CAAC,GACR;IACE,QAAQ,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC;IAClC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,MAAM,CAAC;CACpC,GACD,KAAK,CAAC;AAeV;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa,CAAC,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAE5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,OAAO,EAAE,GAAG,SAAS,OAAO,EAAE,CAAC;IAE7E;;;;;OAKG;IACH,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC;CACxE;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,oBAAoB,CAAC,CAAC;IAKrB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJhC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAwC;gBAErC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;IAE/C,sEAAsE;IACtE,SAAS,IAAI,IAAI;IAMjB;;;;OAIG;IACH,MAAM,CAAC,CAAC,SAAS,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI;IAM5E;;;OAGG;IACH,OAAO,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI;IAOnD,KAAK,IAAI,aAAa,CAAC,GAAG,CAAC;CA0C5B;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAE5E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,sBAAuB,YAAW,sBAAsB;IAEjE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBADL,QAAQ,EAAE,sBAAsB,EAChC,KAAK,EAAE,SAAS,aAAa,CAAC,GAAG,CAAC,EAAE;IAGvD,YAAY,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI;IAK1D,SAAS,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,GAAG,IAAI;IAKpD,YAAY,CAAC,OAAO,EAAE,iBAAiB,GAAG,SAAS,GAAG,IAAI;CAY3D"}

package/dist/redactingEventListener.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RedactingEventListener = exports.RedactionRuleBuilder = exports.REDACTED_VALUE = void 0;
+exports.redactionRule = redactionRule;
+/**
+ * The placeholder that replaces a redacted value when no custom
+ * transform is given for it.
+ */
+exports.REDACTED_VALUE = '[REDACTED]';
+/**
+ * Fluent, single-key rule builder returned by {@link redactionRule}.
+ * `redactAll`, `redact`, and `exclude` all merge into the same rule —
+ * call them in any combination, in any order; the more specific
+ * per-property calls (`redact`/`exclude`) always win over the blanket
+ * `redactAll` default for the properties they name.
+ *
+ * @example
+ * ```ts
+ * const rules = [
+ *   redactionRule(SecretClientKey)
+ *     .redactAll()
+ *     .build(), // whole service is sensitive
+ *   redactionRule(BillingKey)
+ *     .redactAll()
+ *     .redact('chargeCard', { maskResult: (card) => `card ending in ${card.number.slice(-4)}` })
+ *     .exclude('ping') // redact everything except this, with one custom mask
+ *     .build(),
+ *   redactionRule(VaultKey)
+ *     .redact('getSecret')
+ *     .build(), // only this call, nothing else
+ * ];
+ * ```
+ */
+class RedactionRuleBuilder {
+    constructor(key) {
+        this.key = key;
+        this.redactAllFlag = false;
+        this.hasRedact = false;
+        this.overrides = {};
+    }
+    /** Redacts every property, plus the initialize result, by default. */
+    redactAll() {
+        this.redactAllFlag = true;
+        this.hasRedact = true;
+        return this;
+    }
+    /**
+     * Marks one property (method) as redacted, with optional custom
+     * masking. Call repeatedly for several properties. Overrides
+     * `redactAll`/`exclude` for this specific property.
+     */
+    redact(name, mask) {
+        this.overrides[name] = Object.assign({ redacted: true }, mask);
+        this.hasRedact = true;
+        return this;
+    }
+    /**
+     * Marks one or more properties as explicitly NOT redacted, overriding
+     * `redactAll` for just these.
+     */
+    exclude(...names) {
+        for (const name of names) {
+            this.overrides[name] = { redacted: false };
+        }
+        return this;
+    }
+    build() {
+        // `exclude` alone never redacts anything — at least one call to
+        // `redactAll`/`redact` is required for this rule to have any effect.
+        if (!this.hasRedact) {
+            throw new Error(`redactionRule(${this.key.name}) has no effect: call .redactAll() and/or .redact(...) ` +
+                'before .build() — .exclude() alone never redacts anything.');
+        }
+        const redactAllFlag = this.redactAllFlag;
+        const overrides = this.overrides;
+        return {
+            key: this.key,
+            maskArgs(functionName, args) {
+                const override = overrides[functionName];
+                const redacted = override ? override.redacted : redactAllFlag;
+                if (!redacted) {
+                    return args;
+                }
+                return (override === null || override === void 0 ? void 0 : override.maskArgs)
+                    ? // A custom mask reports one string for the whole call,
+                        // rather than a value per argument.
+                        [override.maskArgs(...args)]
+                    : // Replace each argument rather than the whole array, so the
+                        // delegate still sees the call's arity.
+                        args.map(() => exports.REDACTED_VALUE);
+            },
+            maskResult(functionName, result) {
+                const override = functionName === undefined ? undefined : overrides[functionName];
+                const redacted = override ? override.redacted : redactAllFlag;
+                if (!redacted) {
+                    return result;
+                }
+                return (override === null || override === void 0 ? void 0 : override.maskResult)
+                    ? override.maskResult(result)
+                    : exports.REDACTED_VALUE;
+            },
+        };
+    }
+}
+exports.RedactionRuleBuilder = RedactionRuleBuilder;
+function redactionRule(key) {
+    return new RedactionRuleBuilder(key);
+}
+/**
+ * A ServiceInstrumentation decorator that redacts sensitive values before
+ * they reach the wrapped instrumentation. Works with any implementation via
+ * delegation: arguments in MethodCallContext and success values in
+ * EventOutcome are replaced (wholesale, or via a custom transform)
+ * before the delegate ever sees them — whatever it captures or exports
+ * is already scrubbed.
+ *
+ * Failure outcomes are passed through unchanged so error reporting keeps
+ * working; keep secrets out of error messages at the throwing site.
+ *
+ * @example
+ * ```ts
+ * const listener = new RedactingEventListener(
+ *   new OTELEventListener({ captureArguments: true, captureResults: true }),
+ *   [
+ *     redactionRule(SecretClientKey).redactAll().build(), // whole service is sensitive
+ *     redactionRule(VaultKey).redact('getSecret').build(), // only this call
+ *     redactionRule(HealthKey).redactAll().exclude('ping').build(), // everything but this call
+ *   ],
+ * );
+ * ```
+ */
+class RedactingEventListener {
+    constructor(delegate, rules) {
+        this.delegate = delegate;
+        this.rules = rules;
+    }
+    onInitialize(context) {
+        var _a, _b;
+        const rule = this.rules.find((r) => r.key === context.key);
+        return redactSpan((_b = (_a = this.delegate).onInitialize) === null || _b === void 0 ? void 0 : _b.call(_a, context), rule);
+    }
+    onDispose(context) {
+        var _a, _b;
+        // Dispose carries no arguments and no result value; nothing to redact.
+        return (_b = (_a = this.delegate).onDispose) === null || _b === void 0 ? void 0 : _b.call(_a, context);
+    }
+    onMethodCall(context) {
+        var _a, _b;
+        const rule = this.rules.find((r) => r.key === context.key);
+        const span = (_b = (_a = this.delegate).onMethodCall) === null || _b === void 0 ? void 0 : _b.call(_a, rule
+            ? Object.assign(Object.assign({}, context), { args: rule.maskArgs(context.functionName, context.args) }) : context);
+        return redactSpan(span, rule, context.functionName);
+    }
+}
+exports.RedactingEventListener = RedactingEventListener;
+/**
+ * Wraps the delegate's EventSpan so success values are redacted before
+ * `end` sees them, by delegating to the rule's `maskResult`. `run` (and
+ * any future fields) pass through untouched. `functionName` is omitted
+ * for the initialize result (the instance itself).
+ */
+function redactSpan(span, rule, functionName) {
+    if (!rule || !span) {
+        return span;
+    }
+    const end = span.end.bind(span);
+    return Object.assign(Object.assign({}, span), { end: (outcome) => end(outcome.type === 'success'
+            ? {
+                type: 'success',
+                value: rule.maskResult(functionName, outcome.value),
+            }
+            : outcome) });
+}
+//# sourceMappingURL=redactingEventListener.js.map

package/dist/redactingEventListener.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactingEventListener.js","sourceRoot":"","sources":["../src/redactingEventListener.ts"],"names":[],"mappings":";;;AAgLA,sCAEC;AAxKD;;;GAGG;AACU,QAAA,cAAc,GAAG,YAAY,CAAC;AA0D3C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,oBAAoB;IAK/B,YAA6B,GAAkB;QAAlB,QAAG,GAAH,GAAG,CAAe;QAJvC,kBAAa,GAAG,KAAK,CAAC;QACtB,cAAS,GAAG,KAAK,CAAC;QACT,cAAS,GAAqC,EAAE,CAAC;IAEhB,CAAC;IAEnD,sEAAsE;IACtE,SAAS;QACP,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAqC,IAAO,EAAE,IAAiB;QACnE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mBAAK,QAAQ,EAAE,IAAI,IAAK,IAAI,CAAE,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,GAAG,KAAiC;QAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK;QACH,gEAAgE;QAChE,qEAAqE;QACrE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CACb,iBAAiB,IAAI,CAAC,GAAG,CAAC,IAAI,yDAAyD;gBACrF,4DAA4D,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,QAAQ,CAAC,YAAY,EAAE,IAAI;gBACzB,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;gBACzC,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ;oBACvB,CAAC,CAAC,uDAAuD;wBACvD,oCAAoC;wBACpC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;oBAC9B,CAAC,CAAC,4DAA4D;wBAC5D,wCAAwC;wBACxC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,sBAAc,CAAC,CAAC;YACrC,CAAC;YACD,UAAU,CAAC,YAAY,EAAE,MAAM;gBAC7B,MAAM,QAAQ,GACZ,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC;gBAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,OAAO,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU;oBACzB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC7B,CAAC,CAAC,sBAAc,CAAC;YACrB,CAAC;SACoB,CAAC;IAC1B,CAAC;CACF;AA9ED,oDA8EC;AAED,SAAgB,aAAa,CAAI,GAAkB;IACjD,OAAO,IAAI,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAa,sBAAsB;IACjC,YACmB,QAAgC,EAChC,KAAoC;QADpC,aAAQ,GAAR,QAAQ,CAAwB;QAChC,UAAK,GAAL,KAAK,CAA+B;IACpD,CAAC;IAEJ,YAAY,CAAC,OAA0B;;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,OAAO,UAAU,CAAC,MAAA,MAAA,IAAI,CAAC,QAAQ,EAAC,YAAY,mDAAG,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;IAED,SAAS,CAAC,OAAuB;;QAC/B,uEAAuE;QACvE,OAAO,MAAA,MAAA,IAAI,CAAC,QAAQ,EAAC,SAAS,mDAAG,OAAO,CAAC,CAAC;IAC5C,CAAC;IAED,YAAY,CAAC,OAA0B;;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAA,MAAA,IAAI,CAAC,QAAQ,EAAC,YAAY,mDACrC,IAAI;YACF,CAAC,iCACM,OAAO,KACV,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,CAAC,IAE3D,CAAC,CAAC,OAAO,CACZ,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACtD,CAAC;CACF;AA5BD,wDA4BC;AAED;;;;;GAKG;AACH,SAAS,UAAU,CACjB,IAAsB,EACtB,IAAoC,EACpC,YAAqB;IAErB,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,uCACK,IAAI,KACP,GAAG,EAAE,CAAC,OAAqB,EAAE,EAAE,CAC7B,GAAG,CACD,OAAO,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC;gBACE,IAAI,EAAE,SAAS;gBACf,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC;aACpD;YACH,CAAC,CAAC,OAAO,CACZ,IACH;AACJ,CAAC"}