@datakable/core 1.0.0 → 1.1.0

package/dist/diagnostics/hub.cjs

@@ -26,13 +26,14 @@ module.exports = __toCommonJS(hub_exports);
 var import_context = require("../intercept/context.cjs");
 var import_build = require("./build.cjs");
 var import_console = require("./console.cjs");
+var import_process_guard = require("./process-guard.cjs");
 var import_redact = require("./redact.cjs");
 var import_ring_buffer = require("./ring-buffer.cjs");
 var tableSeq = 0;
 function createDiagnostics(options = {}) {
   const table = options.name ?? `table#${++tableSeq}`;
   const dev = options.dev ?? process.env.NODE_ENV !== "production";
-  const now = options.now ?? Date.now;
+  const now = options.now ?? import_build.wallClock;
   const dedupeLimit = options.dedupeLimit ?? 500;
   const buffer = new import_ring_buffer.RingBuffer(options.bufferSize ?? 100);
   const seen = /* @__PURE__ */ new Map();
@@ -55,7 +56,7 @@ function createDiagnostics(options = {}) {
       dev ? e : (0, import_redact.scrubError)(e)
     );
   };
-  function deliver(input) {
+  function deliver(input, quiet) {
     const d = redact ? redact(input) : input;
     if (getDataRef) {
       const ref = getDataRef();
@@ -80,7 +81,7 @@ function createDiagnostics(options = {}) {
         fail(e);
       }
     }
-    toConsole?.(d);
+    if (!quiet) toConsole?.(d);
     return d;
   }
   const redactor = () => {
@@ -119,13 +120,13 @@ function createDiagnostics(options = {}) {
         depth++;
         try {
           runtime.run("diagnostic:emit", ctx, (x) => {
-            out = deliver(x.input.diagnostic);
+            out = deliver(x.input.diagnostic, opts.quiet);
           });
         } finally {
           depth--;
         }
       } else {
-        out = deliver(d);
+        out = deliver(d, opts.quiet);
       }
     } catch (e) {
       if (strict && e instanceof import_build.DatakableError) throw e;

package/dist/diagnostics/hub.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/diagnostics/hub.ts"],"sourcesContent":["import { createContext } from '../intercept/context'\nimport type { InterceptorRuntime } from '../intercept/runtime'\nimport { buildDiagnostic, DatakableError, defaultPhase, formatWhere } from './build'\nimport type { DiagnosticCode, DiagnosticDetails } from './catalog'\nimport { createConsoleSink } from './console'\nimport {\n  DK_UNSAFE_REDACTION,\n  type RedactionOptions,\n  type RedactLevel,\n  resolveRedaction,\n  scrubError,\n} from './redact'\nimport { RingBuffer } from './ring-buffer'\nimport type { Diagnostic, DiagnosticStateSummary, EmitOptions, Phase, Trigger } from './types'\n\n/** Live values the store supplies at emit time (T07+). Missing ones use defaults. */\nexport interface LiveDiagnosticContext {\n  trigger?: Trigger\n  run?: number\n  phase?: Phase\n  mode?: Record<string, 'client' | 'server'>\n  state?: DiagnosticStateSummary\n}\n\nexport interface DiagnosticsOptions {\n  /** `options.name` of the table; default `table#n`. */\n  name?: string\n  /** The table instance, put on the `diagnostic:emit` ctx. */\n  table?: unknown\n  /** Dev: the table's creation site. */\n  createdAt?: string\n  getContext?: () => LiveDiagnosticContext\n  /** Dedupe is per data reference: a new reference reports known diagnostics again. */\n  getDataRef?: () => unknown\n  /** User sink (e.g. Sentry). Throwing is swallowed with one console.error. */\n  onDiagnostic?: (d: Diagnostic) => void\n  /** Rethrow error-level diagnostics as `DatakableError`. */\n  strict?: boolean\n  /** Default console sink. Default `true`. */\n  console?: boolean\n  /** Text builders + dev console format. Default: `process.env.NODE_ENV !== 'production'`. */\n  dev?: boolean\n  /**\n   * Redaction policy (§8.2, `diagnostics.redact`): a level or `{ level, redact(path, value),\n   * sensitiveColumns, rowKeySensitive }`. Default `'keys'` in development, `'safe'` in production.\n   * Applied while the diagnostic is built, so `diagnostic:emit` interceptors, the `redact` seam and\n   * every sink only see redacted data. `'full'` in production warns (`DK_UNSAFE_REDACTION`).\n   */\n  redaction?: RedactLevel | RedactionOptions\n  /**\n   * Extra whole-diagnostic rewrite after the `diagnostic:emit` interceptors, before dedupe and\n   * sinks. It receives already-redacted data; `fingerprint` is not recomputed.\n   */\n  redact?: (d: Diagnostic) => Diagnostic\n  /** Ring buffer size behind getDiagnostics(). Default 100. */\n  bufferSize?: number\n  /** Max fingerprints remembered for dedupe. Default 500. */\n  dedupeLimit?: number\n  /** Console rate limit. Default 20 per 1000 ms. */\n  rateLimit?: { max: number; windowMs: number }\n  now?: () => number\n}\n\nexport interface Diagnostics {\n  /** Resolved table name (`context.table`). */\n  readonly table: string\n  /**\n   * Emits a catalog diagnostic through `diagnostic:emit`. Returns the stored diagnostic (the\n   * aggregated one on a dedupe hit), or `undefined` if an interceptor dropped it. Never throws,\n   * except `DatakableError` under `strict: true`.\n   */\n  emit<C extends DiagnosticCode>(\n    code: C,\n    details: DiagnosticDetails<C>,\n    options?: EmitOptions,\n  ): Diagnostic | undefined\n  /** Oldest first; at most `bufferSize` entries. */\n  getDiagnostics(): Diagnostic[]\n  /** Runs emits through this runtime's `diagnostic:emit` chain (user interceptors can redact/drop). */\n  attach(runtime: InterceptorRuntime): void\n  clear(): void\n}\n\nlet tableSeq = 0\n\n/**\n * One per table. Pipeline (§8.2): enrich + redact (build: context, policy redaction, then text,\n * where, fingerprint and docs from the redacted data) → `diagnostic:emit` interceptors → `redact`\n * seam → dedupe (aggregates `occurrences`) → ring buffer → sinks (onDiagnostic, console) → strict.\n */\nexport function createDiagnostics(options: DiagnosticsOptions = {}): Diagnostics {\n  const table = options.name ?? `table#${++tableSeq}`\n  const dev = options.dev ?? (process.env.NODE_ENV !== \"production\")\n  const now = options.now ?? Date.now\n  const dedupeLimit = options.dedupeLimit ?? 500\n  const buffer = new RingBuffer<Diagnostic>(options.bufferSize ?? 100)\n  const seen = new Map<string, Diagnostic>()\n  const { onDiagnostic, getContext, getDataRef, redact, strict } = options\n  const toConsole =\n    options.console === false\n      ? undefined\n      : createConsoleSink({\n          table,\n          dev,\n          now,\n          rateLimit: options.rateLimit ?? { max: 20, windowMs: 1000 },\n        })\n\n  let runtime: InterceptorRuntime | undefined\n  let depth = 0\n  let lastRef: unknown\n  let failed = false\n\n  const fail = (e: unknown) => {\n    // The logger never kills the table: one console.error, then silence.\n    if (failed) return\n    failed = true\n    // Production prints the error name only: its message can embed row values (§8.2).\n    console.error(\n      `[DataKable ${table}] diagnostics pipeline failed; later failures are silent`,\n      dev ? e : scrubError(e),\n    )\n  }\n\n  function deliver(input: Diagnostic): Diagnostic {\n    const d = redact ? redact(input) : input\n    if (getDataRef) {\n      const ref = getDataRef()\n      if (ref !== lastRef) {\n        seen.clear()\n        lastRef = ref\n      }\n    }\n    const prev = seen.get(d.fingerprint)\n    if (prev) {\n      prev.context.occurrences.count++\n      prev.context.occurrences.last = d.context.occurrences.last\n      return prev\n    }\n    seen.set(d.fingerprint, d)\n    if (seen.size > dedupeLimit) seen.delete(seen.keys().next().value as string)\n    buffer.push(d)\n    if (onDiagnostic) {\n      try {\n        onDiagnostic(d)\n      } catch (e) {\n        fail(e)\n      }\n    }\n    toConsole?.(d)\n    return d\n  }\n\n  // Resolved per emit: sensitive columns and the rowKey can change with setOptions.\n  const redactor = () => {\n    const r = resolveRedaction(options.redaction, dev)\n    r.onError = fail\n    return r\n  }\n\n  const emit: Diagnostics['emit'] = (code, details, opts = {}) => {\n    let out: Diagnostic | undefined\n    try {\n      const live = getContext?.() ?? {}\n      const d = buildDiagnostic(code, details, {\n        table,\n        ...(options.createdAt === undefined ? {} : { createdAt: options.createdAt }),\n        trigger: opts.trigger ?? live.trigger ?? 'init',\n        run: opts.run ?? live.run ?? 0,\n        phase: opts.phase ?? live.phase ?? defaultPhase(),\n        ...(live.mode ? { mode: live.mode } : {}),\n        ...(live.state ? { state: live.state } : {}),\n        now: now(),\n        ...(opts.cause === undefined ? {} : { cause: opts.cause }),\n        ...(opts.causedBy === undefined ? {} : { causedBy: opts.causedBy }),\n        dev,\n        redaction: redactor(),\n      })\n      // Emits made while the chain runs (e.g. DK_INTERCEPTOR_FAILED for an interceptor on\n      // diagnostic:emit) skip the chain, so a broken logger cannot recurse.\n      if (runtime && depth === 0) {\n        const c = d.context\n        // ctx.where reaches slots, fingerprints and issue links unredacted: never the row key.\n        const at = d.where.kind === 'row' ? { kind: 'row' as const, index: d.where.index } : d.where\n        const ctx = createContext('diagnostic:emit', { diagnostic: d }, formatWhere(at), {\n          table: options.table,\n          run: c.run,\n          trigger: c.trigger,\n          phase: c.phase,\n          emit,\n        })\n        depth++\n        try {\n          runtime.run('diagnostic:emit', ctx, (x) => {\n            out = deliver(x.input.diagnostic)\n          })\n        } finally {\n          depth--\n        }\n      } else {\n        out = deliver(d)\n      }\n    } catch (e) {\n      // strict: an error-level emit nested in the chain (e.g. DK_INTERCEPTOR_FAILED) still throws.\n      if (strict && e instanceof DatakableError) throw e\n      fail(e)\n      return undefined\n    }\n    if (strict && out?.level === 'error') throw new DatakableError(out)\n    return out\n  }\n\n  if (!dev && resolveRedaction(options.redaction, dev).level === 'full') {\n    emit(DK_UNSAFE_REDACTION.code, { level: 'full' })\n  }\n\n  return {\n    table,\n    emit,\n    getDiagnostics: () => buffer.toArray(),\n    attach(rt) {\n      runtime = rt\n    },\n    clear() {\n      buffer.clear()\n      seen.clear()\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA8B;AAE9B,mBAA2E;AAE3E,qBAAkC;AAClC,oBAMO;AACP,yBAA2B;AAuE3B,IAAI,WAAW;AAOR,SAAS,kBAAkB,UAA8B,CAAC,GAAgB;AAC/E,QAAM,QAAQ,QAAQ,QAAQ,SAAS,EAAE,QAAQ;AACjD,QAAM,MAAM,QAAQ,OAAQ,QAAQ,IAAI,aAAa;AACrD,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,SAAS,IAAI,8BAAuB,QAAQ,cAAc,GAAG;AACnE,QAAM,OAAO,oBAAI,IAAwB;AACzC,QAAM,EAAE,cAAc,YAAY,YAAY,QAAQ,OAAO,IAAI;AACjE,QAAM,YACJ,QAAQ,YAAY,QAChB,aACA,kCAAkB;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,EAAE,KAAK,IAAI,UAAU,IAAK;AAAA,EAC5D,CAAC;AAEP,MAAI;AACJ,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI,SAAS;AAEb,QAAM,OAAO,CAAC,MAAe;AAE3B,QAAI,OAAQ;AACZ,aAAS;AAET,YAAQ;AAAA,MACN,cAAc,KAAK;AAAA,MACnB,MAAM,QAAI,0BAAW,CAAC;AAAA,IACxB;AAAA,EACF;AAEA,WAAS,QAAQ,OAA+B;AAC9C,UAAM,IAAI,SAAS,OAAO,KAAK,IAAI;AACnC,QAAI,YAAY;AACd,YAAM,MAAM,WAAW;AACvB,UAAI,QAAQ,SAAS;AACnB,aAAK,MAAM;AACX,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,UAAM,OAAO,KAAK,IAAI,EAAE,WAAW;AACnC,QAAI,MAAM;AACR,WAAK,QAAQ,YAAY;AACzB,WAAK,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY;AACtD,aAAO;AAAA,IACT;AACA,SAAK,IAAI,EAAE,aAAa,CAAC;AACzB,QAAI,KAAK,OAAO,YAAa,MAAK,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAe;AAC3E,WAAO,KAAK,CAAC;AACb,QAAI,cAAc;AAChB,UAAI;AACF,qBAAa,CAAC;AAAA,MAChB,SAAS,GAAG;AACV,aAAK,CAAC;AAAA,MACR;AAAA,IACF;AACA,gBAAY,CAAC;AACb,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,MAAM;AACrB,UAAM,QAAI,gCAAiB,QAAQ,WAAW,GAAG;AACjD,MAAE,UAAU;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,OAA4B,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM;AAC9D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,aAAa,KAAK,CAAC;AAChC,YAAM,QAAI,8BAAgB,MAAM,SAAS;AAAA,QACvC;AAAA,QACA,GAAI,QAAQ,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;AAAA,QAC1E,SAAS,KAAK,WAAW,KAAK,WAAW;AAAA,QACzC,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,QAC7B,OAAO,KAAK,SAAS,KAAK,aAAS,2BAAa;AAAA,QAChD,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,QACvC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1C,KAAK,IAAI;AAAA,QACT,GAAI,KAAK,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM;AAAA,QACxD,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE;AAAA,QACA,WAAW,SAAS;AAAA,MACtB,CAAC;AAGD,UAAI,WAAW,UAAU,GAAG;AAC1B,cAAM,IAAI,EAAE;AAEZ,cAAM,KAAK,EAAE,MAAM,SAAS,QAAQ,EAAE,MAAM,OAAgB,OAAO,EAAE,MAAM,MAAM,IAAI,EAAE;AACvF,cAAM,UAAM,8BAAc,mBAAmB,EAAE,YAAY,EAAE,OAAG,0BAAY,EAAE,GAAG;AAAA,UAC/E,OAAO,QAAQ;AAAA,UACf,KAAK,EAAE;AAAA,UACP,SAAS,EAAE;AAAA,UACX,OAAO,EAAE;AAAA,UACT;AAAA,QACF,CAAC;AACD;AACA,YAAI;AACF,kBAAQ,IAAI,mBAAmB,KAAK,CAAC,MAAM;AACzC,kBAAM,QAAQ,EAAE,MAAM,UAAU;AAAA,UAClC,CAAC;AAAA,QACH,UAAE;AACA;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,QAAQ,CAAC;AAAA,MACjB;AAAA,IACF,SAAS,GAAG;AAEV,UAAI,UAAU,aAAa,4BAAgB,OAAM;AACjD,WAAK,CAAC;AACN,aAAO;AAAA,IACT;AACA,QAAI,UAAU,KAAK,UAAU,QAAS,OAAM,IAAI,4BAAe,GAAG;AAClE,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAO,gCAAiB,QAAQ,WAAW,GAAG,EAAE,UAAU,QAAQ;AACrE,SAAK,kCAAoB,MAAM,EAAE,OAAO,OAAO,CAAC;AAAA,EAClD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO,QAAQ;AAAA,IACrC,OAAO,IAAI;AACT,gBAAU;AAAA,IACZ;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AACb,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/diagnostics/hub.ts"],"sourcesContent":["import { createContext } from '../intercept/context'\nimport type { InterceptorRuntime } from '../intercept/runtime'\nimport { buildDiagnostic, DatakableError, defaultPhase, formatWhere, wallClock } from './build'\nimport type { DiagnosticCode, DiagnosticDetails } from './catalog'\nimport { createConsoleSink } from './console'\nimport './process-guard'\nimport {\n  DK_UNSAFE_REDACTION,\n  type RedactionOptions,\n  type RedactLevel,\n  resolveRedaction,\n  scrubError,\n} from './redact'\nimport { RingBuffer } from './ring-buffer'\nimport type { Diagnostic, DiagnosticStateSummary, EmitOptions, Phase, Trigger } from './types'\n\n/** Live values the store supplies at emit time (T07+). Missing ones use defaults. */\nexport interface LiveDiagnosticContext {\n  trigger?: Trigger\n  run?: number\n  phase?: Phase\n  mode?: Record<string, 'client' | 'server'>\n  state?: DiagnosticStateSummary\n}\n\nexport interface DiagnosticsOptions {\n  /** `options.name` of the table; default `table#n`. */\n  name?: string\n  /** The table instance, put on the `diagnostic:emit` ctx. */\n  table?: unknown\n  /** Dev: the table's creation site. */\n  createdAt?: string\n  getContext?: () => LiveDiagnosticContext\n  /** Dedupe is per data reference: a new reference reports known diagnostics again. */\n  getDataRef?: () => unknown\n  /** User sink (e.g. Sentry). Throwing is swallowed with one console.error. */\n  onDiagnostic?: (d: Diagnostic) => void\n  /** Rethrow error-level diagnostics as `DatakableError`. */\n  strict?: boolean\n  /** Default console sink. Default `true`. */\n  console?: boolean\n  /** Text builders + dev console format. Default: `process.env.NODE_ENV !== 'production'`. */\n  dev?: boolean\n  /**\n   * Redaction policy (§8.2, `diagnostics.redact`): a level or `{ level, redact(path, value),\n   * sensitiveColumns, rowKeySensitive }`. Default `'keys'` in development, `'safe'` in production.\n   * Applied while the diagnostic is built, so `diagnostic:emit` interceptors, the `redact` seam and\n   * every sink only see redacted data. `'full'` in production warns (`DK_UNSAFE_REDACTION`).\n   */\n  redaction?: RedactLevel | RedactionOptions\n  /**\n   * Extra whole-diagnostic rewrite after the `diagnostic:emit` interceptors, before dedupe and\n   * sinks. It receives already-redacted data; `fingerprint` is not recomputed.\n   */\n  redact?: (d: Diagnostic) => Diagnostic\n  /** Ring buffer size behind getDiagnostics(). Default 100. */\n  bufferSize?: number\n  /** Max fingerprints remembered for dedupe. Default 500. */\n  dedupeLimit?: number\n  /** Console rate limit. Default 20 per 1000 ms. */\n  rateLimit?: { max: number; windowMs: number }\n  /** Clock (epoch ms) for `occurrences` and the rate limit. Default `wallClock` (never `Date`, #7). */\n  now?: () => number\n}\n\nexport interface Diagnostics {\n  /** Resolved table name (`context.table`). */\n  readonly table: string\n  /**\n   * Emits a catalog diagnostic through `diagnostic:emit`. Returns the stored diagnostic (the\n   * aggregated one on a dedupe hit), or `undefined` if an interceptor dropped it. Never throws,\n   * except `DatakableError` under `strict: true`.\n   */\n  emit<C extends DiagnosticCode>(\n    code: C,\n    details: DiagnosticDetails<C>,\n    options?: EmitOptions,\n  ): Diagnostic | undefined\n  /** Oldest first; at most `bufferSize` entries. */\n  getDiagnostics(): Diagnostic[]\n  /** Runs emits through this runtime's `diagnostic:emit` chain (user interceptors can redact/drop). */\n  attach(runtime: InterceptorRuntime): void\n  clear(): void\n}\n\nlet tableSeq = 0\n\n/**\n * One per table. Pipeline (§8.2): enrich + redact (build: context, policy redaction, then text,\n * where, fingerprint and docs from the redacted data) → `diagnostic:emit` interceptors → `redact`\n * seam → dedupe (aggregates `occurrences`) → ring buffer → sinks (onDiagnostic, console) → strict.\n */\nexport function createDiagnostics(options: DiagnosticsOptions = {}): Diagnostics {\n  const table = options.name ?? `table#${++tableSeq}`\n  const dev = options.dev ?? (process.env.NODE_ENV !== \"production\")\n  const now = options.now ?? wallClock\n  const dedupeLimit = options.dedupeLimit ?? 500\n  const buffer = new RingBuffer<Diagnostic>(options.bufferSize ?? 100)\n  const seen = new Map<string, Diagnostic>()\n  const { onDiagnostic, getContext, getDataRef, redact, strict } = options\n  const toConsole =\n    options.console === false\n      ? undefined\n      : createConsoleSink({\n          table,\n          dev,\n          now,\n          rateLimit: options.rateLimit ?? { max: 20, windowMs: 1000 },\n        })\n\n  let runtime: InterceptorRuntime | undefined\n  let depth = 0\n  let lastRef: unknown\n  let failed = false\n\n  const fail = (e: unknown) => {\n    // The logger never kills the table: one console.error, then silence.\n    if (failed) return\n    failed = true\n    // Production prints the error name only: its message can embed row values (§8.2).\n    console.error(\n      `[DataKable ${table}] diagnostics pipeline failed; later failures are silent`,\n      dev ? e : scrubError(e),\n    )\n  }\n\n  function deliver(input: Diagnostic, quiet?: boolean): Diagnostic {\n    const d = redact ? redact(input) : input\n    if (getDataRef) {\n      const ref = getDataRef()\n      if (ref !== lastRef) {\n        seen.clear()\n        lastRef = ref\n      }\n    }\n    const prev = seen.get(d.fingerprint)\n    if (prev) {\n      prev.context.occurrences.count++\n      prev.context.occurrences.last = d.context.occurrences.last\n      return prev\n    }\n    seen.set(d.fingerprint, d)\n    if (seen.size > dedupeLimit) seen.delete(seen.keys().next().value as string)\n    buffer.push(d)\n    if (onDiagnostic) {\n      try {\n        onDiagnostic(d)\n      } catch (e) {\n        fail(e)\n      }\n    }\n    if (!quiet) toConsole?.(d)\n    return d\n  }\n\n  // Resolved per emit: sensitive columns and the rowKey can change with setOptions.\n  const redactor = () => {\n    const r = resolveRedaction(options.redaction, dev)\n    r.onError = fail\n    return r\n  }\n\n  const emit: Diagnostics['emit'] = (code, details, opts = {}) => {\n    let out: Diagnostic | undefined\n    try {\n      const live = getContext?.() ?? {}\n      const d = buildDiagnostic(code, details, {\n        table,\n        ...(options.createdAt === undefined ? {} : { createdAt: options.createdAt }),\n        trigger: opts.trigger ?? live.trigger ?? 'init',\n        run: opts.run ?? live.run ?? 0,\n        phase: opts.phase ?? live.phase ?? defaultPhase(),\n        ...(live.mode ? { mode: live.mode } : {}),\n        ...(live.state ? { state: live.state } : {}),\n        now: now(),\n        ...(opts.cause === undefined ? {} : { cause: opts.cause }),\n        ...(opts.causedBy === undefined ? {} : { causedBy: opts.causedBy }),\n        dev,\n        redaction: redactor(),\n      })\n      // Emits made while the chain runs (e.g. DK_INTERCEPTOR_FAILED for an interceptor on\n      // diagnostic:emit) skip the chain, so a broken logger cannot recurse.\n      if (runtime && depth === 0) {\n        const c = d.context\n        // ctx.where reaches slots, fingerprints and issue links unredacted: never the row key.\n        const at = d.where.kind === 'row' ? { kind: 'row' as const, index: d.where.index } : d.where\n        const ctx = createContext('diagnostic:emit', { diagnostic: d }, formatWhere(at), {\n          table: options.table,\n          run: c.run,\n          trigger: c.trigger,\n          phase: c.phase,\n          emit,\n        })\n        depth++\n        try {\n          runtime.run('diagnostic:emit', ctx, (x) => {\n            out = deliver(x.input.diagnostic, opts.quiet)\n          })\n        } finally {\n          depth--\n        }\n      } else {\n        out = deliver(d, opts.quiet)\n      }\n    } catch (e) {\n      // strict: an error-level emit nested in the chain (e.g. DK_INTERCEPTOR_FAILED) still throws.\n      if (strict && e instanceof DatakableError) throw e\n      fail(e)\n      return undefined\n    }\n    if (strict && out?.level === 'error') throw new DatakableError(out)\n    return out\n  }\n\n  if (!dev && resolveRedaction(options.redaction, dev).level === 'full') {\n    emit(DK_UNSAFE_REDACTION.code, { level: 'full' })\n  }\n\n  return {\n    table,\n    emit,\n    getDiagnostics: () => buffer.toArray(),\n    attach(rt) {\n      runtime = rt\n    },\n    clear() {\n      buffer.clear()\n      seen.clear()\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA8B;AAE9B,mBAAsF;AAEtF,qBAAkC;AAClC,2BAAO;AACP,oBAMO;AACP,yBAA2B;AAwE3B,IAAI,WAAW;AAOR,SAAS,kBAAkB,UAA8B,CAAC,GAAgB;AAC/E,QAAM,QAAQ,QAAQ,QAAQ,SAAS,EAAE,QAAQ;AACjD,QAAM,MAAM,QAAQ,OAAQ,QAAQ,IAAI,aAAa;AACrD,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,SAAS,IAAI,8BAAuB,QAAQ,cAAc,GAAG;AACnE,QAAM,OAAO,oBAAI,IAAwB;AACzC,QAAM,EAAE,cAAc,YAAY,YAAY,QAAQ,OAAO,IAAI;AACjE,QAAM,YACJ,QAAQ,YAAY,QAChB,aACA,kCAAkB;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,EAAE,KAAK,IAAI,UAAU,IAAK;AAAA,EAC5D,CAAC;AAEP,MAAI;AACJ,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI,SAAS;AAEb,QAAM,OAAO,CAAC,MAAe;AAE3B,QAAI,OAAQ;AACZ,aAAS;AAET,YAAQ;AAAA,MACN,cAAc,KAAK;AAAA,MACnB,MAAM,QAAI,0BAAW,CAAC;AAAA,IACxB;AAAA,EACF;AAEA,WAAS,QAAQ,OAAmB,OAA6B;AAC/D,UAAM,IAAI,SAAS,OAAO,KAAK,IAAI;AACnC,QAAI,YAAY;AACd,YAAM,MAAM,WAAW;AACvB,UAAI,QAAQ,SAAS;AACnB,aAAK,MAAM;AACX,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,UAAM,OAAO,KAAK,IAAI,EAAE,WAAW;AACnC,QAAI,MAAM;AACR,WAAK,QAAQ,YAAY;AACzB,WAAK,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY;AACtD,aAAO;AAAA,IACT;AACA,SAAK,IAAI,EAAE,aAAa,CAAC;AACzB,QAAI,KAAK,OAAO,YAAa,MAAK,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAe;AAC3E,WAAO,KAAK,CAAC;AACb,QAAI,cAAc;AAChB,UAAI;AACF,qBAAa,CAAC;AAAA,MAChB,SAAS,GAAG;AACV,aAAK,CAAC;AAAA,MACR;AAAA,IACF;AACA,QAAI,CAAC,MAAO,aAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,MAAM;AACrB,UAAM,QAAI,gCAAiB,QAAQ,WAAW,GAAG;AACjD,MAAE,UAAU;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,OAA4B,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM;AAC9D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,aAAa,KAAK,CAAC;AAChC,YAAM,QAAI,8BAAgB,MAAM,SAAS;AAAA,QACvC;AAAA,QACA,GAAI,QAAQ,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;AAAA,QAC1E,SAAS,KAAK,WAAW,KAAK,WAAW;AAAA,QACzC,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,QAC7B,OAAO,KAAK,SAAS,KAAK,aAAS,2BAAa;AAAA,QAChD,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,QACvC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1C,KAAK,IAAI;AAAA,QACT,GAAI,KAAK,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM;AAAA,QACxD,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE;AAAA,QACA,WAAW,SAAS;AAAA,MACtB,CAAC;AAGD,UAAI,WAAW,UAAU,GAAG;AAC1B,cAAM,IAAI,EAAE;AAEZ,cAAM,KAAK,EAAE,MAAM,SAAS,QAAQ,EAAE,MAAM,OAAgB,OAAO,EAAE,MAAM,MAAM,IAAI,EAAE;AACvF,cAAM,UAAM,8BAAc,mBAAmB,EAAE,YAAY,EAAE,OAAG,0BAAY,EAAE,GAAG;AAAA,UAC/E,OAAO,QAAQ;AAAA,UACf,KAAK,EAAE;AAAA,UACP,SAAS,EAAE;AAAA,UACX,OAAO,EAAE;AAAA,UACT;AAAA,QACF,CAAC;AACD;AACA,YAAI;AACF,kBAAQ,IAAI,mBAAmB,KAAK,CAAC,MAAM;AACzC,kBAAM,QAAQ,EAAE,MAAM,YAAY,KAAK,KAAK;AAAA,UAC9C,CAAC;AAAA,QACH,UAAE;AACA;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,QAAQ,GAAG,KAAK,KAAK;AAAA,MAC7B;AAAA,IACF,SAAS,GAAG;AAEV,UAAI,UAAU,aAAa,4BAAgB,OAAM;AACjD,WAAK,CAAC;AACN,aAAO;AAAA,IACT;AACA,QAAI,UAAU,KAAK,UAAU,QAAS,OAAM,IAAI,4BAAe,GAAG;AAClE,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,WAAO,gCAAiB,QAAQ,WAAW,GAAG,EAAE,UAAU,QAAQ;AACrE,SAAK,kCAAoB,MAAM,EAAE,OAAO,OAAO,CAAC;AAAA,EAClD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO,QAAQ;AAAA,IACrC,OAAO,IAAI;AACT,gBAAU;AAAA,IACZ;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AACb,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AACF;","names":[]}

package/dist/diagnostics/hub.js

@@ -1,7 +1,8 @@
 // src/diagnostics/hub.ts
 import { createContext } from "../intercept/context.js";
-import { buildDiagnostic, DatakableError, defaultPhase, formatWhere } from "./build.js";
+import { buildDiagnostic, DatakableError, defaultPhase, formatWhere, wallClock } from "./build.js";
 import { createConsoleSink } from "./console.js";
+import "./process-guard.js";
 import {
   DK_UNSAFE_REDACTION,
   resolveRedaction,
@@ -12,7 +13,7 @@ var tableSeq = 0;
 function createDiagnostics(options = {}) {
   const table = options.name ?? `table#${++tableSeq}`;
   const dev = options.dev ?? process.env.NODE_ENV !== "production";
-  const now = options.now ?? Date.now;
+  const now = options.now ?? wallClock;
   const dedupeLimit = options.dedupeLimit ?? 500;
   const buffer = new RingBuffer(options.bufferSize ?? 100);
   const seen = /* @__PURE__ */ new Map();
@@ -35,7 +36,7 @@ function createDiagnostics(options = {}) {
       dev ? e : scrubError(e)
     );
   };
-  function deliver(input) {
+  function deliver(input, quiet) {
     const d = redact ? redact(input) : input;
     if (getDataRef) {
       const ref = getDataRef();
@@ -60,7 +61,7 @@ function createDiagnostics(options = {}) {
         fail(e);
       }
     }
-    toConsole?.(d);
+    if (!quiet) toConsole?.(d);
     return d;
   }
   const redactor = () => {
@@ -99,13 +100,13 @@ function createDiagnostics(options = {}) {
         depth++;
         try {
           runtime.run("diagnostic:emit", ctx, (x) => {
-            out = deliver(x.input.diagnostic);
+            out = deliver(x.input.diagnostic, opts.quiet);
           });
         } finally {
           depth--;
         }
       } else {
-        out = deliver(d);
+        out = deliver(d, opts.quiet);
       }
     } catch (e) {
       if (strict && e instanceof DatakableError) throw e;

package/dist/diagnostics/hub.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/diagnostics/hub.ts"],"sourcesContent":["import { createContext } from '../intercept/context'\nimport type { InterceptorRuntime } from '../intercept/runtime'\nimport { buildDiagnostic, DatakableError, defaultPhase, formatWhere } from './build'\nimport type { DiagnosticCode, DiagnosticDetails } from './catalog'\nimport { createConsoleSink } from './console'\nimport {\n  DK_UNSAFE_REDACTION,\n  type RedactionOptions,\n  type RedactLevel,\n  resolveRedaction,\n  scrubError,\n} from './redact'\nimport { RingBuffer } from './ring-buffer'\nimport type { Diagnostic, DiagnosticStateSummary, EmitOptions, Phase, Trigger } from './types'\n\n/** Live values the store supplies at emit time (T07+). Missing ones use defaults. */\nexport interface LiveDiagnosticContext {\n  trigger?: Trigger\n  run?: number\n  phase?: Phase\n  mode?: Record<string, 'client' | 'server'>\n  state?: DiagnosticStateSummary\n}\n\nexport interface DiagnosticsOptions {\n  /** `options.name` of the table; default `table#n`. */\n  name?: string\n  /** The table instance, put on the `diagnostic:emit` ctx. */\n  table?: unknown\n  /** Dev: the table's creation site. */\n  createdAt?: string\n  getContext?: () => LiveDiagnosticContext\n  /** Dedupe is per data reference: a new reference reports known diagnostics again. */\n  getDataRef?: () => unknown\n  /** User sink (e.g. Sentry). Throwing is swallowed with one console.error. */\n  onDiagnostic?: (d: Diagnostic) => void\n  /** Rethrow error-level diagnostics as `DatakableError`. */\n  strict?: boolean\n  /** Default console sink. Default `true`. */\n  console?: boolean\n  /** Text builders + dev console format. Default: `process.env.NODE_ENV !== 'production'`. */\n  dev?: boolean\n  /**\n   * Redaction policy (§8.2, `diagnostics.redact`): a level or `{ level, redact(path, value),\n   * sensitiveColumns, rowKeySensitive }`. Default `'keys'` in development, `'safe'` in production.\n   * Applied while the diagnostic is built, so `diagnostic:emit` interceptors, the `redact` seam and\n   * every sink only see redacted data. `'full'` in production warns (`DK_UNSAFE_REDACTION`).\n   */\n  redaction?: RedactLevel | RedactionOptions\n  /**\n   * Extra whole-diagnostic rewrite after the `diagnostic:emit` interceptors, before dedupe and\n   * sinks. It receives already-redacted data; `fingerprint` is not recomputed.\n   */\n  redact?: (d: Diagnostic) => Diagnostic\n  /** Ring buffer size behind getDiagnostics(). Default 100. */\n  bufferSize?: number\n  /** Max fingerprints remembered for dedupe. Default 500. */\n  dedupeLimit?: number\n  /** Console rate limit. Default 20 per 1000 ms. */\n  rateLimit?: { max: number; windowMs: number }\n  now?: () => number\n}\n\nexport interface Diagnostics {\n  /** Resolved table name (`context.table`). */\n  readonly table: string\n  /**\n   * Emits a catalog diagnostic through `diagnostic:emit`. Returns the stored diagnostic (the\n   * aggregated one on a dedupe hit), or `undefined` if an interceptor dropped it. Never throws,\n   * except `DatakableError` under `strict: true`.\n   */\n  emit<C extends DiagnosticCode>(\n    code: C,\n    details: DiagnosticDetails<C>,\n    options?: EmitOptions,\n  ): Diagnostic | undefined\n  /** Oldest first; at most `bufferSize` entries. */\n  getDiagnostics(): Diagnostic[]\n  /** Runs emits through this runtime's `diagnostic:emit` chain (user interceptors can redact/drop). */\n  attach(runtime: InterceptorRuntime): void\n  clear(): void\n}\n\nlet tableSeq = 0\n\n/**\n * One per table. Pipeline (§8.2): enrich + redact (build: context, policy redaction, then text,\n * where, fingerprint and docs from the redacted data) → `diagnostic:emit` interceptors → `redact`\n * seam → dedupe (aggregates `occurrences`) → ring buffer → sinks (onDiagnostic, console) → strict.\n */\nexport function createDiagnostics(options: DiagnosticsOptions = {}): Diagnostics {\n  const table = options.name ?? `table#${++tableSeq}`\n  const dev = options.dev ?? (process.env.NODE_ENV !== \"production\")\n  const now = options.now ?? Date.now\n  const dedupeLimit = options.dedupeLimit ?? 500\n  const buffer = new RingBuffer<Diagnostic>(options.bufferSize ?? 100)\n  const seen = new Map<string, Diagnostic>()\n  const { onDiagnostic, getContext, getDataRef, redact, strict } = options\n  const toConsole =\n    options.console === false\n      ? undefined\n      : createConsoleSink({\n          table,\n          dev,\n          now,\n          rateLimit: options.rateLimit ?? { max: 20, windowMs: 1000 },\n        })\n\n  let runtime: InterceptorRuntime | undefined\n  let depth = 0\n  let lastRef: unknown\n  let failed = false\n\n  const fail = (e: unknown) => {\n    // The logger never kills the table: one console.error, then silence.\n    if (failed) return\n    failed = true\n    // Production prints the error name only: its message can embed row values (§8.2).\n    console.error(\n      `[DataKable ${table}] diagnostics pipeline failed; later failures are silent`,\n      dev ? e : scrubError(e),\n    )\n  }\n\n  function deliver(input: Diagnostic): Diagnostic {\n    const d = redact ? redact(input) : input\n    if (getDataRef) {\n      const ref = getDataRef()\n      if (ref !== lastRef) {\n        seen.clear()\n        lastRef = ref\n      }\n    }\n    const prev = seen.get(d.fingerprint)\n    if (prev) {\n      prev.context.occurrences.count++\n      prev.context.occurrences.last = d.context.occurrences.last\n      return prev\n    }\n    seen.set(d.fingerprint, d)\n    if (seen.size > dedupeLimit) seen.delete(seen.keys().next().value as string)\n    buffer.push(d)\n    if (onDiagnostic) {\n      try {\n        onDiagnostic(d)\n      } catch (e) {\n        fail(e)\n      }\n    }\n    toConsole?.(d)\n    return d\n  }\n\n  // Resolved per emit: sensitive columns and the rowKey can change with setOptions.\n  const redactor = () => {\n    const r = resolveRedaction(options.redaction, dev)\n    r.onError = fail\n    return r\n  }\n\n  const emit: Diagnostics['emit'] = (code, details, opts = {}) => {\n    let out: Diagnostic | undefined\n    try {\n      const live = getContext?.() ?? {}\n      const d = buildDiagnostic(code, details, {\n        table,\n        ...(options.createdAt === undefined ? {} : { createdAt: options.createdAt }),\n        trigger: opts.trigger ?? live.trigger ?? 'init',\n        run: opts.run ?? live.run ?? 0,\n        phase: opts.phase ?? live.phase ?? defaultPhase(),\n        ...(live.mode ? { mode: live.mode } : {}),\n        ...(live.state ? { state: live.state } : {}),\n        now: now(),\n        ...(opts.cause === undefined ? {} : { cause: opts.cause }),\n        ...(opts.causedBy === undefined ? {} : { causedBy: opts.causedBy }),\n        dev,\n        redaction: redactor(),\n      })\n      // Emits made while the chain runs (e.g. DK_INTERCEPTOR_FAILED for an interceptor on\n      // diagnostic:emit) skip the chain, so a broken logger cannot recurse.\n      if (runtime && depth === 0) {\n        const c = d.context\n        // ctx.where reaches slots, fingerprints and issue links unredacted: never the row key.\n        const at = d.where.kind === 'row' ? { kind: 'row' as const, index: d.where.index } : d.where\n        const ctx = createContext('diagnostic:emit', { diagnostic: d }, formatWhere(at), {\n          table: options.table,\n          run: c.run,\n          trigger: c.trigger,\n          phase: c.phase,\n          emit,\n        })\n        depth++\n        try {\n          runtime.run('diagnostic:emit', ctx, (x) => {\n            out = deliver(x.input.diagnostic)\n          })\n        } finally {\n          depth--\n        }\n      } else {\n        out = deliver(d)\n      }\n    } catch (e) {\n      // strict: an error-level emit nested in the chain (e.g. DK_INTERCEPTOR_FAILED) still throws.\n      if (strict && e instanceof DatakableError) throw e\n      fail(e)\n      return undefined\n    }\n    if (strict && out?.level === 'error') throw new DatakableError(out)\n    return out\n  }\n\n  if (!dev && resolveRedaction(options.redaction, dev).level === 'full') {\n    emit(DK_UNSAFE_REDACTION.code, { level: 'full' })\n  }\n\n  return {\n    table,\n    emit,\n    getDiagnostics: () => buffer.toArray(),\n    attach(rt) {\n      runtime = rt\n    },\n    clear() {\n      buffer.clear()\n      seen.clear()\n    },\n  }\n}\n"],"mappings":";AAAA,SAAS,qBAAqB;AAE9B,SAAS,iBAAiB,gBAAgB,cAAc,mBAAmB;AAE3E,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAuE3B,IAAI,WAAW;AAOR,SAAS,kBAAkB,UAA8B,CAAC,GAAgB;AAC/E,QAAM,QAAQ,QAAQ,QAAQ,SAAS,EAAE,QAAQ;AACjD,QAAM,MAAM,QAAQ,OAAQ,QAAQ,IAAI,aAAa;AACrD,QAAM,MAAM,QAAQ,OAAO,KAAK;AAChC,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,SAAS,IAAI,WAAuB,QAAQ,cAAc,GAAG;AACnE,QAAM,OAAO,oBAAI,IAAwB;AACzC,QAAM,EAAE,cAAc,YAAY,YAAY,QAAQ,OAAO,IAAI;AACjE,QAAM,YACJ,QAAQ,YAAY,QAChB,SACA,kBAAkB;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,EAAE,KAAK,IAAI,UAAU,IAAK;AAAA,EAC5D,CAAC;AAEP,MAAI;AACJ,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI,SAAS;AAEb,QAAM,OAAO,CAAC,MAAe;AAE3B,QAAI,OAAQ;AACZ,aAAS;AAET,YAAQ;AAAA,MACN,cAAc,KAAK;AAAA,MACnB,MAAM,IAAI,WAAW,CAAC;AAAA,IACxB;AAAA,EACF;AAEA,WAAS,QAAQ,OAA+B;AAC9C,UAAM,IAAI,SAAS,OAAO,KAAK,IAAI;AACnC,QAAI,YAAY;AACd,YAAM,MAAM,WAAW;AACvB,UAAI,QAAQ,SAAS;AACnB,aAAK,MAAM;AACX,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,UAAM,OAAO,KAAK,IAAI,EAAE,WAAW;AACnC,QAAI,MAAM;AACR,WAAK,QAAQ,YAAY;AACzB,WAAK,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY;AACtD,aAAO;AAAA,IACT;AACA,SAAK,IAAI,EAAE,aAAa,CAAC;AACzB,QAAI,KAAK,OAAO,YAAa,MAAK,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAe;AAC3E,WAAO,KAAK,CAAC;AACb,QAAI,cAAc;AAChB,UAAI;AACF,qBAAa,CAAC;AAAA,MAChB,SAAS,GAAG;AACV,aAAK,CAAC;AAAA,MACR;AAAA,IACF;AACA,gBAAY,CAAC;AACb,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,MAAM;AACrB,UAAM,IAAI,iBAAiB,QAAQ,WAAW,GAAG;AACjD,MAAE,UAAU;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,OAA4B,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM;AAC9D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,aAAa,KAAK,CAAC;AAChC,YAAM,IAAI,gBAAgB,MAAM,SAAS;AAAA,QACvC;AAAA,QACA,GAAI,QAAQ,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;AAAA,QAC1E,SAAS,KAAK,WAAW,KAAK,WAAW;AAAA,QACzC,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,QAC7B,OAAO,KAAK,SAAS,KAAK,SAAS,aAAa;AAAA,QAChD,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,QACvC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1C,KAAK,IAAI;AAAA,QACT,GAAI,KAAK,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM;AAAA,QACxD,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE;AAAA,QACA,WAAW,SAAS;AAAA,MACtB,CAAC;AAGD,UAAI,WAAW,UAAU,GAAG;AAC1B,cAAM,IAAI,EAAE;AAEZ,cAAM,KAAK,EAAE,MAAM,SAAS,QAAQ,EAAE,MAAM,OAAgB,OAAO,EAAE,MAAM,MAAM,IAAI,EAAE;AACvF,cAAM,MAAM,cAAc,mBAAmB,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG;AAAA,UAC/E,OAAO,QAAQ;AAAA,UACf,KAAK,EAAE;AAAA,UACP,SAAS,EAAE;AAAA,UACX,OAAO,EAAE;AAAA,UACT;AAAA,QACF,CAAC;AACD;AACA,YAAI;AACF,kBAAQ,IAAI,mBAAmB,KAAK,CAAC,MAAM;AACzC,kBAAM,QAAQ,EAAE,MAAM,UAAU;AAAA,UAClC,CAAC;AAAA,QACH,UAAE;AACA;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,QAAQ,CAAC;AAAA,MACjB;AAAA,IACF,SAAS,GAAG;AAEV,UAAI,UAAU,aAAa,eAAgB,OAAM;AACjD,WAAK,CAAC;AACN,aAAO;AAAA,IACT;AACA,QAAI,UAAU,KAAK,UAAU,QAAS,OAAM,IAAI,eAAe,GAAG;AAClE,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,OAAO,iBAAiB,QAAQ,WAAW,GAAG,EAAE,UAAU,QAAQ;AACrE,SAAK,oBAAoB,MAAM,EAAE,OAAO,OAAO,CAAC;AAAA,EAClD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO,QAAQ;AAAA,IACrC,OAAO,IAAI;AACT,gBAAU;AAAA,IACZ;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AACb,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../../src/diagnostics/hub.ts"],"sourcesContent":["import { createContext } from '../intercept/context'\nimport type { InterceptorRuntime } from '../intercept/runtime'\nimport { buildDiagnostic, DatakableError, defaultPhase, formatWhere, wallClock } from './build'\nimport type { DiagnosticCode, DiagnosticDetails } from './catalog'\nimport { createConsoleSink } from './console'\nimport './process-guard'\nimport {\n  DK_UNSAFE_REDACTION,\n  type RedactionOptions,\n  type RedactLevel,\n  resolveRedaction,\n  scrubError,\n} from './redact'\nimport { RingBuffer } from './ring-buffer'\nimport type { Diagnostic, DiagnosticStateSummary, EmitOptions, Phase, Trigger } from './types'\n\n/** Live values the store supplies at emit time (T07+). Missing ones use defaults. */\nexport interface LiveDiagnosticContext {\n  trigger?: Trigger\n  run?: number\n  phase?: Phase\n  mode?: Record<string, 'client' | 'server'>\n  state?: DiagnosticStateSummary\n}\n\nexport interface DiagnosticsOptions {\n  /** `options.name` of the table; default `table#n`. */\n  name?: string\n  /** The table instance, put on the `diagnostic:emit` ctx. */\n  table?: unknown\n  /** Dev: the table's creation site. */\n  createdAt?: string\n  getContext?: () => LiveDiagnosticContext\n  /** Dedupe is per data reference: a new reference reports known diagnostics again. */\n  getDataRef?: () => unknown\n  /** User sink (e.g. Sentry). Throwing is swallowed with one console.error. */\n  onDiagnostic?: (d: Diagnostic) => void\n  /** Rethrow error-level diagnostics as `DatakableError`. */\n  strict?: boolean\n  /** Default console sink. Default `true`. */\n  console?: boolean\n  /** Text builders + dev console format. Default: `process.env.NODE_ENV !== 'production'`. */\n  dev?: boolean\n  /**\n   * Redaction policy (§8.2, `diagnostics.redact`): a level or `{ level, redact(path, value),\n   * sensitiveColumns, rowKeySensitive }`. Default `'keys'` in development, `'safe'` in production.\n   * Applied while the diagnostic is built, so `diagnostic:emit` interceptors, the `redact` seam and\n   * every sink only see redacted data. `'full'` in production warns (`DK_UNSAFE_REDACTION`).\n   */\n  redaction?: RedactLevel | RedactionOptions\n  /**\n   * Extra whole-diagnostic rewrite after the `diagnostic:emit` interceptors, before dedupe and\n   * sinks. It receives already-redacted data; `fingerprint` is not recomputed.\n   */\n  redact?: (d: Diagnostic) => Diagnostic\n  /** Ring buffer size behind getDiagnostics(). Default 100. */\n  bufferSize?: number\n  /** Max fingerprints remembered for dedupe. Default 500. */\n  dedupeLimit?: number\n  /** Console rate limit. Default 20 per 1000 ms. */\n  rateLimit?: { max: number; windowMs: number }\n  /** Clock (epoch ms) for `occurrences` and the rate limit. Default `wallClock` (never `Date`, #7). */\n  now?: () => number\n}\n\nexport interface Diagnostics {\n  /** Resolved table name (`context.table`). */\n  readonly table: string\n  /**\n   * Emits a catalog diagnostic through `diagnostic:emit`. Returns the stored diagnostic (the\n   * aggregated one on a dedupe hit), or `undefined` if an interceptor dropped it. Never throws,\n   * except `DatakableError` under `strict: true`.\n   */\n  emit<C extends DiagnosticCode>(\n    code: C,\n    details: DiagnosticDetails<C>,\n    options?: EmitOptions,\n  ): Diagnostic | undefined\n  /** Oldest first; at most `bufferSize` entries. */\n  getDiagnostics(): Diagnostic[]\n  /** Runs emits through this runtime's `diagnostic:emit` chain (user interceptors can redact/drop). */\n  attach(runtime: InterceptorRuntime): void\n  clear(): void\n}\n\nlet tableSeq = 0\n\n/**\n * One per table. Pipeline (§8.2): enrich + redact (build: context, policy redaction, then text,\n * where, fingerprint and docs from the redacted data) → `diagnostic:emit` interceptors → `redact`\n * seam → dedupe (aggregates `occurrences`) → ring buffer → sinks (onDiagnostic, console) → strict.\n */\nexport function createDiagnostics(options: DiagnosticsOptions = {}): Diagnostics {\n  const table = options.name ?? `table#${++tableSeq}`\n  const dev = options.dev ?? (process.env.NODE_ENV !== \"production\")\n  const now = options.now ?? wallClock\n  const dedupeLimit = options.dedupeLimit ?? 500\n  const buffer = new RingBuffer<Diagnostic>(options.bufferSize ?? 100)\n  const seen = new Map<string, Diagnostic>()\n  const { onDiagnostic, getContext, getDataRef, redact, strict } = options\n  const toConsole =\n    options.console === false\n      ? undefined\n      : createConsoleSink({\n          table,\n          dev,\n          now,\n          rateLimit: options.rateLimit ?? { max: 20, windowMs: 1000 },\n        })\n\n  let runtime: InterceptorRuntime | undefined\n  let depth = 0\n  let lastRef: unknown\n  let failed = false\n\n  const fail = (e: unknown) => {\n    // The logger never kills the table: one console.error, then silence.\n    if (failed) return\n    failed = true\n    // Production prints the error name only: its message can embed row values (§8.2).\n    console.error(\n      `[DataKable ${table}] diagnostics pipeline failed; later failures are silent`,\n      dev ? e : scrubError(e),\n    )\n  }\n\n  function deliver(input: Diagnostic, quiet?: boolean): Diagnostic {\n    const d = redact ? redact(input) : input\n    if (getDataRef) {\n      const ref = getDataRef()\n      if (ref !== lastRef) {\n        seen.clear()\n        lastRef = ref\n      }\n    }\n    const prev = seen.get(d.fingerprint)\n    if (prev) {\n      prev.context.occurrences.count++\n      prev.context.occurrences.last = d.context.occurrences.last\n      return prev\n    }\n    seen.set(d.fingerprint, d)\n    if (seen.size > dedupeLimit) seen.delete(seen.keys().next().value as string)\n    buffer.push(d)\n    if (onDiagnostic) {\n      try {\n        onDiagnostic(d)\n      } catch (e) {\n        fail(e)\n      }\n    }\n    if (!quiet) toConsole?.(d)\n    return d\n  }\n\n  // Resolved per emit: sensitive columns and the rowKey can change with setOptions.\n  const redactor = () => {\n    const r = resolveRedaction(options.redaction, dev)\n    r.onError = fail\n    return r\n  }\n\n  const emit: Diagnostics['emit'] = (code, details, opts = {}) => {\n    let out: Diagnostic | undefined\n    try {\n      const live = getContext?.() ?? {}\n      const d = buildDiagnostic(code, details, {\n        table,\n        ...(options.createdAt === undefined ? {} : { createdAt: options.createdAt }),\n        trigger: opts.trigger ?? live.trigger ?? 'init',\n        run: opts.run ?? live.run ?? 0,\n        phase: opts.phase ?? live.phase ?? defaultPhase(),\n        ...(live.mode ? { mode: live.mode } : {}),\n        ...(live.state ? { state: live.state } : {}),\n        now: now(),\n        ...(opts.cause === undefined ? {} : { cause: opts.cause }),\n        ...(opts.causedBy === undefined ? {} : { causedBy: opts.causedBy }),\n        dev,\n        redaction: redactor(),\n      })\n      // Emits made while the chain runs (e.g. DK_INTERCEPTOR_FAILED for an interceptor on\n      // diagnostic:emit) skip the chain, so a broken logger cannot recurse.\n      if (runtime && depth === 0) {\n        const c = d.context\n        // ctx.where reaches slots, fingerprints and issue links unredacted: never the row key.\n        const at = d.where.kind === 'row' ? { kind: 'row' as const, index: d.where.index } : d.where\n        const ctx = createContext('diagnostic:emit', { diagnostic: d }, formatWhere(at), {\n          table: options.table,\n          run: c.run,\n          trigger: c.trigger,\n          phase: c.phase,\n          emit,\n        })\n        depth++\n        try {\n          runtime.run('diagnostic:emit', ctx, (x) => {\n            out = deliver(x.input.diagnostic, opts.quiet)\n          })\n        } finally {\n          depth--\n        }\n      } else {\n        out = deliver(d, opts.quiet)\n      }\n    } catch (e) {\n      // strict: an error-level emit nested in the chain (e.g. DK_INTERCEPTOR_FAILED) still throws.\n      if (strict && e instanceof DatakableError) throw e\n      fail(e)\n      return undefined\n    }\n    if (strict && out?.level === 'error') throw new DatakableError(out)\n    return out\n  }\n\n  if (!dev && resolveRedaction(options.redaction, dev).level === 'full') {\n    emit(DK_UNSAFE_REDACTION.code, { level: 'full' })\n  }\n\n  return {\n    table,\n    emit,\n    getDiagnostics: () => buffer.toArray(),\n    attach(rt) {\n      runtime = rt\n    },\n    clear() {\n      buffer.clear()\n      seen.clear()\n    },\n  }\n}\n"],"mappings":";AAAA,SAAS,qBAAqB;AAE9B,SAAS,iBAAiB,gBAAgB,cAAc,aAAa,iBAAiB;AAEtF,SAAS,yBAAyB;AAClC,OAAO;AACP;AAAA,EACE;AAAA,EAGA;AAAA,EACA;AAAA,OACK;AACP,SAAS,kBAAkB;AAwE3B,IAAI,WAAW;AAOR,SAAS,kBAAkB,UAA8B,CAAC,GAAgB;AAC/E,QAAM,QAAQ,QAAQ,QAAQ,SAAS,EAAE,QAAQ;AACjD,QAAM,MAAM,QAAQ,OAAQ,QAAQ,IAAI,aAAa;AACrD,QAAM,MAAM,QAAQ,OAAO;AAC3B,QAAM,cAAc,QAAQ,eAAe;AAC3C,QAAM,SAAS,IAAI,WAAuB,QAAQ,cAAc,GAAG;AACnE,QAAM,OAAO,oBAAI,IAAwB;AACzC,QAAM,EAAE,cAAc,YAAY,YAAY,QAAQ,OAAO,IAAI;AACjE,QAAM,YACJ,QAAQ,YAAY,QAChB,SACA,kBAAkB;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa,EAAE,KAAK,IAAI,UAAU,IAAK;AAAA,EAC5D,CAAC;AAEP,MAAI;AACJ,MAAI,QAAQ;AACZ,MAAI;AACJ,MAAI,SAAS;AAEb,QAAM,OAAO,CAAC,MAAe;AAE3B,QAAI,OAAQ;AACZ,aAAS;AAET,YAAQ;AAAA,MACN,cAAc,KAAK;AAAA,MACnB,MAAM,IAAI,WAAW,CAAC;AAAA,IACxB;AAAA,EACF;AAEA,WAAS,QAAQ,OAAmB,OAA6B;AAC/D,UAAM,IAAI,SAAS,OAAO,KAAK,IAAI;AACnC,QAAI,YAAY;AACd,YAAM,MAAM,WAAW;AACvB,UAAI,QAAQ,SAAS;AACnB,aAAK,MAAM;AACX,kBAAU;AAAA,MACZ;AAAA,IACF;AACA,UAAM,OAAO,KAAK,IAAI,EAAE,WAAW;AACnC,QAAI,MAAM;AACR,WAAK,QAAQ,YAAY;AACzB,WAAK,QAAQ,YAAY,OAAO,EAAE,QAAQ,YAAY;AACtD,aAAO;AAAA,IACT;AACA,SAAK,IAAI,EAAE,aAAa,CAAC;AACzB,QAAI,KAAK,OAAO,YAAa,MAAK,OAAO,KAAK,KAAK,EAAE,KAAK,EAAE,KAAe;AAC3E,WAAO,KAAK,CAAC;AACb,QAAI,cAAc;AAChB,UAAI;AACF,qBAAa,CAAC;AAAA,MAChB,SAAS,GAAG;AACV,aAAK,CAAC;AAAA,MACR;AAAA,IACF;AACA,QAAI,CAAC,MAAO,aAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAGA,QAAM,WAAW,MAAM;AACrB,UAAM,IAAI,iBAAiB,QAAQ,WAAW,GAAG;AACjD,MAAE,UAAU;AACZ,WAAO;AAAA,EACT;AAEA,QAAM,OAA4B,CAAC,MAAM,SAAS,OAAO,CAAC,MAAM;AAC9D,QAAI;AACJ,QAAI;AACF,YAAM,OAAO,aAAa,KAAK,CAAC;AAChC,YAAM,IAAI,gBAAgB,MAAM,SAAS;AAAA,QACvC;AAAA,QACA,GAAI,QAAQ,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,QAAQ,UAAU;AAAA,QAC1E,SAAS,KAAK,WAAW,KAAK,WAAW;AAAA,QACzC,KAAK,KAAK,OAAO,KAAK,OAAO;AAAA,QAC7B,OAAO,KAAK,SAAS,KAAK,SAAS,aAAa;AAAA,QAChD,GAAI,KAAK,OAAO,EAAE,MAAM,KAAK,KAAK,IAAI,CAAC;AAAA,QACvC,GAAI,KAAK,QAAQ,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,QAC1C,KAAK,IAAI;AAAA,QACT,GAAI,KAAK,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,KAAK,MAAM;AAAA,QACxD,GAAI,KAAK,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,KAAK,SAAS;AAAA,QACjE;AAAA,QACA,WAAW,SAAS;AAAA,MACtB,CAAC;AAGD,UAAI,WAAW,UAAU,GAAG;AAC1B,cAAM,IAAI,EAAE;AAEZ,cAAM,KAAK,EAAE,MAAM,SAAS,QAAQ,EAAE,MAAM,OAAgB,OAAO,EAAE,MAAM,MAAM,IAAI,EAAE;AACvF,cAAM,MAAM,cAAc,mBAAmB,EAAE,YAAY,EAAE,GAAG,YAAY,EAAE,GAAG;AAAA,UAC/E,OAAO,QAAQ;AAAA,UACf,KAAK,EAAE;AAAA,UACP,SAAS,EAAE;AAAA,UACX,OAAO,EAAE;AAAA,UACT;AAAA,QACF,CAAC;AACD;AACA,YAAI;AACF,kBAAQ,IAAI,mBAAmB,KAAK,CAAC,MAAM;AACzC,kBAAM,QAAQ,EAAE,MAAM,YAAY,KAAK,KAAK;AAAA,UAC9C,CAAC;AAAA,QACH,UAAE;AACA;AAAA,QACF;AAAA,MACF,OAAO;AACL,cAAM,QAAQ,GAAG,KAAK,KAAK;AAAA,MAC7B;AAAA,IACF,SAAS,GAAG;AAEV,UAAI,UAAU,aAAa,eAAgB,OAAM;AACjD,WAAK,CAAC;AACN,aAAO;AAAA,IACT;AACA,QAAI,UAAU,KAAK,UAAU,QAAS,OAAM,IAAI,eAAe,GAAG;AAClE,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,OAAO,iBAAiB,QAAQ,WAAW,GAAG,EAAE,UAAU,QAAQ;AACrE,SAAK,oBAAoB,MAAM,EAAE,OAAO,OAAO,CAAC;AAAA,EAClD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,gBAAgB,MAAM,OAAO,QAAQ;AAAA,IACrC,OAAO,IAAI;AACT,gBAAU;AAAA,IACZ;AAAA,IACA,QAAQ;AACN,aAAO,MAAM;AACb,WAAK,MAAM;AAAA,IACb;AAAA,EACF;AACF;","names":[]}

package/dist/diagnostics/process-guard.cjs

@@ -0,0 +1,26 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/diagnostics/process-guard.ts
+var process_guard_exports = {};
+module.exports = __toCommonJS(process_guard_exports);
+try {
+  process.env.NODE_ENV;
+} catch {
+  throw new ReferenceError(
+    `[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. esbuild --define:process.env.NODE_ENV='"production"'), or set globalThis.process = { env: { NODE_ENV: 'production' } } before DataKable loads. See https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md`
+  );
+}
+//# sourceMappingURL=process-guard.cjs.map

package/dist/diagnostics/process-guard.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/process-guard.ts"],"sourcesContent":["// No @types/node in core: declare just what is read.\ndeclare const process: { env: { NODE_ENV?: string } }\n\n/*\n * Code run without a bundler (CDN, import map) has no `process`: say so and name the fix, instead\n * of the engine's bare \"process is not defined\" (#36).\n *\n * Every module that reads `DEV` imports this module first (the build rewrites `import { DEV } from\n * './env'` to `import './process-guard'`, see scripts/preserve-modules.mjs), so it is evaluated\n * before any `process.env.NODE_ENV` read. It is listed in `sideEffects`, so a bundler run without\n * the replacement (esbuild without --define) keeps it too. Once `process.env.NODE_ENV` is replaced\n * with a literal the `try` body is empty and a minifier removes the statement: production bundles\n * pay nothing (`pnpm check:size`).\n */\ntry {\n  process.env.NODE_ENV\n} catch {\n  throw new ReferenceError(\n    '[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. ' +\n      `esbuild --define:process.env.NODE_ENV='\"production\"'), or set globalThis.process = ` +\n      \"{ env: { NODE_ENV: 'production' } } before DataKable loads. See \" +\n      'https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md',\n  )\n}\n\n// A module, not a script: keeps the `process` declaration above local to this file.\nexport {}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;AAcA,IAAI;AACF,UAAQ,IAAI;AACd,QAAQ;AACN,QAAM,IAAI;AAAA,IACR;AAAA,EAIF;AACF;","names":[]}

package/dist/diagnostics/process-guard.js

@@ -0,0 +1,9 @@
+// src/diagnostics/process-guard.ts
+try {
+  process.env.NODE_ENV;
+} catch {
+  throw new ReferenceError(
+    `[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. esbuild --define:process.env.NODE_ENV='"production"'), or set globalThis.process = { env: { NODE_ENV: 'production' } } before DataKable loads. See https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md`
+  );
+}
+//# sourceMappingURL=process-guard.js.map

package/dist/diagnostics/process-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/process-guard.ts"],"sourcesContent":["// No @types/node in core: declare just what is read.\ndeclare const process: { env: { NODE_ENV?: string } }\n\n/*\n * Code run without a bundler (CDN, import map) has no `process`: say so and name the fix, instead\n * of the engine's bare \"process is not defined\" (#36).\n *\n * Every module that reads `DEV` imports this module first (the build rewrites `import { DEV } from\n * './env'` to `import './process-guard'`, see scripts/preserve-modules.mjs), so it is evaluated\n * before any `process.env.NODE_ENV` read. It is listed in `sideEffects`, so a bundler run without\n * the replacement (esbuild without --define) keeps it too. Once `process.env.NODE_ENV` is replaced\n * with a literal the `try` body is empty and a minifier removes the statement: production bundles\n * pay nothing (`pnpm check:size`).\n */\ntry {\n  process.env.NODE_ENV\n} catch {\n  throw new ReferenceError(\n    '[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. ' +\n      `esbuild --define:process.env.NODE_ENV='\"production\"'), or set globalThis.process = ` +\n      \"{ env: { NODE_ENV: 'production' } } before DataKable loads. See \" +\n      'https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md',\n  )\n}\n\n// A module, not a script: keeps the `process` declaration above local to this file.\nexport {}\n"],"mappings":";AAcA,IAAI;AACF,UAAQ,IAAI;AACd,QAAQ;AACN,QAAM,IAAI;AAAA,IACR;AAAA,EAIF;AACF;","names":[]}

package/dist/diagnostics/prose.cjs

@@ -0,0 +1,120 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/diagnostics/prose.ts
+var prose_exports = {};
+__export(prose_exports, {
+  expandDetails: () => expandDetails,
+  expandProse: () => expandProse,
+  proseMessages: () => proseMessages
+});
+module.exports = __toCommonJS(prose_exports);
+var import_catalog = require("./catalog.cjs");
+var import_process_guard = require("./process-guard.cjs");
+var proseMessages = {
+  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).
+  "cells-coerced": "those cells were coerced with the default formatter",
+  "cells-warn": "those cells rendered \u26A0",
+  // `<DataTable />` (@datakable/react)
+  "cells-undefined": "the failed cells read as undefined",
+  "cells-empty": "the failed cells render ''",
+  "rows-unmatched": "the failed rows are treated as non-matching",
+  "rows-last": "the failed rows sort as missing values (last)",
+  "cell-undefined": "the cell reads as undefined",
+  "row-key-index": "those rows use the fallback key '#<index>'",
+  "sorted-native": "the rows were sorted with the native algorithm",
+  "sorted-default": "the column was sorted with the default comparator",
+  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).
+  "init-continued": "table creation continued without the failed step",
+  "options-kept": "the previous options were kept",
+  "destroy-continued": "teardown continued; the table is destroyed",
+  "update-dropped": "the update was dropped (state unchanged)",
+  "data-kept": "the previous data was kept",
+  "row-model-kept": "the last good row model was kept",
+  "step-passthrough": "the step passed its input through",
+  "batch-fallback": "the column's cells use the slot fallback ('' for format, undefined for accessor, non-matching for filterFn, missing (sorted last) for sortBy)",
+  "results-kept": "the previous results were kept (status: 'error')",
+  "diagnostic-dropped": "the diagnostic was dropped (the logger never kills the table)",
+  "returned-undefined": "the operation returned undefined",
+  // Features.
+  "slice-undefined": "the slice starts as undefined",
+  "api-not-installed": "its API was not installed",
+  "call-ignored": "the call was ignored",
+  "api-missing": "table.{0}() did nothing (the API of that feature was not installed)",
+  "apis-missing": "table.{0}() did nothing (the API of those features was not installed)",
+  "page-reset": "the pagination state was reset to its initial value",
+  "page-index-0": "pageIndex was replaced by 0",
+  "page-size": "pageSize was replaced by {0}",
+  "validity-ignored": "the call was ignored; the validity filter is unchanged",
+  "validity-all": "the table shows every row, as with 'all'",
+  "validity-needs-flag": "validity filters rows flagged by schema validation, which needs `schema` and `invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows are removed, with 'throw' they throw)",
+  "not-searchable": "no column is searchable: give the columns to search a `search` weight",
+  collation: `the runtime's collation for "{0}"`,
+  "not-algorithm": "{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); auto was used",
+  "exsorted-failed": "exsorted {0}Sort could not sort these keys; auto was used",
+  "exsorted-range": "exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used",
+  "needs-int-keys": "{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used",
+  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).
+  "custom-threw": "the custom algorithm threw",
+  "custom-bad": "the custom algorithm returned a bad value",
+  "not-safe-int": "keys are not all safe integers",
+  ranks: "{0}, strings as collation ranks",
+  "int-keys": "{0}, safe-integer keys",
+  "auto-nearly": "auto: safe integers, nearly sorted ({0} descents)",
+  "auto-range": "auto: safe integers, key range {0} \u2264 4n",
+  "auto-wide": "auto: safe integers, wide range, n \u2265 10k",
+  "auto-wide-small": "auto: safe integers, wide range, n < 10k",
+  "auto-ranked-nearly": "auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)",
+  "auto-ranked-range": "auto: collation ranks of a string column, safe integers, key range {0} \u2264 4n",
+  "auto-ranked-wide": "auto: collation ranks of a string column, safe integers, wide range, n \u2265 10k",
+  "auto-ranked-wide-small": "auto: collation ranks of a string column, safe integers, wide range, n < 10k",
+  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).
+  "prims-or-dates": "an array of primitives or Dates",
+  "prim-or-date": "a primitive or a Date",
+  "range-bound": "number | bigint or a valid Date bound",
+  "same-type": "min and max of the same type ({0})",
+  // An option given without its wrapper (`DK_INVALID_OPTION` expected).
+  wrapped: "{0}({1}) from '@datakable/core/{2}'",
+  // DK_INTERNAL problems.
+  escaped: "an exception escaped DataKable code",
+  "unknown-code": 'unknown diagnostic code "{0}": define it with defineDiagnostic() first',
+  "unknown-op": 'Unknown operation "{0}": register it with registerOperation()',
+  "boundary-twice": 'A boundary interceptor is already installed ("{0}"); "{1}" was rejected'
+};
+function expandProse(v, dev) {
+  const [key, ...args] = v.split("|");
+  const text = (process.env.NODE_ENV !== "production" && dev ? proseMessages[key] : void 0) ?? (0, import_catalog.installedText)(key);
+  return typeof text === "string" ? text.replace(/\{(\d)\}/g, (_, n) => expandProse(args[+n], dev)) : v;
+}
+var FIELDS = ["fallback", "reason", "problem", "expected"];
+function expandDetails(details, dev) {
+  const out = { ...details };
+  for (const f of FIELDS) {
+    const v = details[f];
+    if (typeof v === "string") out[f] = expandProse(v, dev);
+  }
+  return out;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  expandDetails,
+  expandProse,
+  proseMessages
+});
+//# sourceMappingURL=prose.cjs.map

package/dist/diagnostics/prose.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/prose.ts"],"sourcesContent":["import { installedText } from './catalog'\nimport './process-guard'\n\n/**\n * Production detail prose (§8.2, §9.3): the sentences some details carry (`fallback`, `reason`,\n * `problem`) are written as short keys at the emit site, e.g. `fallback: 'cells-undefined'`, or\n * `'page-size|10'` with arguments. A diagnostic built in development, or in production with\n * `@datakable/core/messages` installed, reads the full sentence (the key is expanded when it is\n * built); production without the messages keeps the key, so the bundle carries no prose. A value\n * that is not a known key (a plugin's own `registerFallback` text) is kept as written.\n *\n * `{0}`, `{1}` are the arguments after the key, separated by `|`.\n */\nexport const proseMessages: Readonly<Record<string, string>> = {\n  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).\n  'cells-coerced': 'those cells were coerced with the default formatter',\n  'cells-warn': 'those cells rendered ⚠', // `<DataTable />` (@datakable/react)\n  'cells-undefined': 'the failed cells read as undefined',\n  'cells-empty': \"the failed cells render ''\",\n  'rows-unmatched': 'the failed rows are treated as non-matching',\n  'rows-last': 'the failed rows sort as missing values (last)',\n  'cell-undefined': 'the cell reads as undefined',\n  'row-key-index': \"those rows use the fallback key '#<index>'\",\n  'sorted-native': 'the rows were sorted with the native algorithm',\n  'sorted-default': 'the column was sorted with the default comparator',\n  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).\n  'init-continued': 'table creation continued without the failed step',\n  'options-kept': 'the previous options were kept',\n  'destroy-continued': 'teardown continued; the table is destroyed',\n  'update-dropped': 'the update was dropped (state unchanged)',\n  'data-kept': 'the previous data was kept',\n  'row-model-kept': 'the last good row model was kept',\n  'step-passthrough': 'the step passed its input through',\n  'batch-fallback':\n    \"the column's cells use the slot fallback ('' for format, undefined for accessor, \" +\n    'non-matching for filterFn, missing (sorted last) for sortBy)',\n  'results-kept': \"the previous results were kept (status: 'error')\",\n  'diagnostic-dropped': 'the diagnostic was dropped (the logger never kills the table)',\n  'returned-undefined': 'the operation returned undefined',\n  // Features.\n  'slice-undefined': 'the slice starts as undefined',\n  'api-not-installed': 'its API was not installed',\n  'call-ignored': 'the call was ignored',\n  'api-missing': 'table.{0}() did nothing (the API of that feature was not installed)',\n  'apis-missing': 'table.{0}() did nothing (the API of those features was not installed)',\n  'page-reset': 'the pagination state was reset to its initial value',\n  'page-index-0': 'pageIndex was replaced by 0',\n  'page-size': 'pageSize was replaced by {0}',\n  'validity-ignored': 'the call was ignored; the validity filter is unchanged',\n  'validity-all': \"the table shows every row, as with 'all'\",\n  'validity-needs-flag':\n    'validity filters rows flagged by schema validation, which needs `schema` and ' +\n    \"`invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows \" +\n    \"are removed, with 'throw' they throw)\",\n  'not-searchable': 'no column is searchable: give the columns to search a `search` weight',\n  collation: 'the runtime\\'s collation for \"{0}\"',\n  'not-algorithm':\n    '{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); ' +\n    'auto was used',\n  'exsorted-failed': 'exsorted {0}Sort could not sort these keys; auto was used',\n  'exsorted-range':\n    'exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used',\n  'needs-int-keys':\n    '{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used',\n  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).\n  'custom-threw': 'the custom algorithm threw',\n  'custom-bad': 'the custom algorithm returned a bad value',\n  'not-safe-int': 'keys are not all safe integers',\n  ranks: '{0}, strings as collation ranks',\n  'int-keys': '{0}, safe-integer keys',\n  'auto-nearly': 'auto: safe integers, nearly sorted ({0} descents)',\n  'auto-range': 'auto: safe integers, key range {0} ≤ 4n',\n  'auto-wide': 'auto: safe integers, wide range, n ≥ 10k',\n  'auto-wide-small': 'auto: safe integers, wide range, n < 10k',\n  'auto-ranked-nearly':\n    'auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)',\n  'auto-ranked-range':\n    'auto: collation ranks of a string column, safe integers, key range {0} ≤ 4n',\n  'auto-ranked-wide':\n    'auto: collation ranks of a string column, safe integers, wide range, n ≥ 10k',\n  'auto-ranked-wide-small':\n    'auto: collation ranks of a string column, safe integers, wide range, n < 10k',\n  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).\n  'prims-or-dates': 'an array of primitives or Dates',\n  'prim-or-date': 'a primitive or a Date',\n  'range-bound': 'number | bigint or a valid Date bound',\n  'same-type': 'min and max of the same type ({0})',\n  // An option given without its wrapper (`DK_INVALID_OPTION` expected).\n  wrapped: \"{0}({1}) from '@datakable/core/{2}'\",\n  // DK_INTERNAL problems.\n  escaped: 'an exception escaped DataKable code',\n  'unknown-code': 'unknown diagnostic code \"{0}\": define it with defineDiagnostic() first',\n  'unknown-op': 'Unknown operation \"{0}\": register it with registerOperation()',\n  'boundary-twice': 'A boundary interceptor is already installed (\"{0}\"); \"{1}\" was rejected',\n}\n\n/**\n * The sentence of a prose key (`'page-size|10'` → `'pageSize was replaced by 10'`): from\n * {@link proseMessages} in development (`dev`), else from the installed messages; `v` itself when\n * neither has the key.\n */\nexport function expandProse(v: string, dev: boolean): string {\n  const [key, ...args] = v.split('|') as [string, ...string[]]\n  const text = ((process.env.NODE_ENV !== \"production\") && dev ? proseMessages[key] : undefined) ?? installedText(key)\n  // An argument may be a key itself (`'ranks|custom-threw'`).\n  return typeof text === 'string'\n    ? text.replace(/\\{(\\d)\\}/g, (_, n: string) => expandProse(args[+n] as string, dev))\n    : v\n}\n\n/** The detail fields that may hold a prose key. */\nconst FIELDS = ['fallback', 'reason', 'problem', 'expected'] as const\n\n/** A copy of `details` with its prose keys expanded. */\nexport function expandDetails(\n  details: Record<string, unknown>,\n  dev: boolean,\n): Record<string, unknown> {\n  const out = { ...details }\n  for (const f of FIELDS) {\n    const v = details[f]\n    if (typeof v === 'string') out[f] = expandProse(v, dev)\n  }\n  return out\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA8B;AAC9B,2BAAO;AAYA,IAAM,gBAAkD;AAAA;AAAA,EAE7D,iBAAiB;AAAA,EACjB,cAAc;AAAA;AAAA,EACd,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA;AAAA,EAElB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,kBACE;AAAA,EAEF,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA,EAEtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,uBACE;AAAA,EAGF,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,iBACE;AAAA,EAEF,mBAAmB;AAAA,EACnB,kBACE;AAAA,EACF,kBACE;AAAA;AAAA,EAEF,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,sBACE;AAAA,EACF,qBACE;AAAA,EACF,oBACE;AAAA,EACF,0BACE;AAAA;AAAA,EAEF,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,aAAa;AAAA;AAAA,EAEb,SAAS;AAAA;AAAA,EAET,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AACpB;AAOO,SAAS,YAAY,GAAW,KAAsB;AAC3D,QAAM,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,MAAM,GAAG;AAClC,QAAM,QAAS,QAAQ,IAAI,aAAa,gBAAiB,MAAM,cAAc,GAAG,IAAI,eAAc,8BAAc,GAAG;AAEnH,SAAO,OAAO,SAAS,WACnB,KAAK,QAAQ,aAAa,CAAC,GAAG,MAAc,YAAY,KAAK,CAAC,CAAC,GAAa,GAAG,CAAC,IAChF;AACN;AAGA,IAAM,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU;AAGpD,SAAS,cACd,SACA,KACyB;AACzB,QAAM,MAAM,EAAE,GAAG,QAAQ;AACzB,aAAW,KAAK,QAAQ;AACtB,UAAM,IAAI,QAAQ,CAAC;AACnB,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI,YAAY,GAAG,GAAG;AAAA,EACxD;AACA,SAAO;AACT;","names":[]}

package/dist/diagnostics/prose.js

@@ -0,0 +1,93 @@
+// src/diagnostics/prose.ts
+import { installedText } from "./catalog.js";
+import "./process-guard.js";
+var proseMessages = {
+  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).
+  "cells-coerced": "those cells were coerced with the default formatter",
+  "cells-warn": "those cells rendered \u26A0",
+  // `<DataTable />` (@datakable/react)
+  "cells-undefined": "the failed cells read as undefined",
+  "cells-empty": "the failed cells render ''",
+  "rows-unmatched": "the failed rows are treated as non-matching",
+  "rows-last": "the failed rows sort as missing values (last)",
+  "cell-undefined": "the cell reads as undefined",
+  "row-key-index": "those rows use the fallback key '#<index>'",
+  "sorted-native": "the rows were sorted with the native algorithm",
+  "sorted-default": "the column was sorted with the default comparator",
+  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).
+  "init-continued": "table creation continued without the failed step",
+  "options-kept": "the previous options were kept",
+  "destroy-continued": "teardown continued; the table is destroyed",
+  "update-dropped": "the update was dropped (state unchanged)",
+  "data-kept": "the previous data was kept",
+  "row-model-kept": "the last good row model was kept",
+  "step-passthrough": "the step passed its input through",
+  "batch-fallback": "the column's cells use the slot fallback ('' for format, undefined for accessor, non-matching for filterFn, missing (sorted last) for sortBy)",
+  "results-kept": "the previous results were kept (status: 'error')",
+  "diagnostic-dropped": "the diagnostic was dropped (the logger never kills the table)",
+  "returned-undefined": "the operation returned undefined",
+  // Features.
+  "slice-undefined": "the slice starts as undefined",
+  "api-not-installed": "its API was not installed",
+  "call-ignored": "the call was ignored",
+  "api-missing": "table.{0}() did nothing (the API of that feature was not installed)",
+  "apis-missing": "table.{0}() did nothing (the API of those features was not installed)",
+  "page-reset": "the pagination state was reset to its initial value",
+  "page-index-0": "pageIndex was replaced by 0",
+  "page-size": "pageSize was replaced by {0}",
+  "validity-ignored": "the call was ignored; the validity filter is unchanged",
+  "validity-all": "the table shows every row, as with 'all'",
+  "validity-needs-flag": "validity filters rows flagged by schema validation, which needs `schema` and `invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows are removed, with 'throw' they throw)",
+  "not-searchable": "no column is searchable: give the columns to search a `search` weight",
+  collation: `the runtime's collation for "{0}"`,
+  "not-algorithm": "{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); auto was used",
+  "exsorted-failed": "exsorted {0}Sort could not sort these keys; auto was used",
+  "exsorted-range": "exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used",
+  "needs-int-keys": "{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used",
+  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).
+  "custom-threw": "the custom algorithm threw",
+  "custom-bad": "the custom algorithm returned a bad value",
+  "not-safe-int": "keys are not all safe integers",
+  ranks: "{0}, strings as collation ranks",
+  "int-keys": "{0}, safe-integer keys",
+  "auto-nearly": "auto: safe integers, nearly sorted ({0} descents)",
+  "auto-range": "auto: safe integers, key range {0} \u2264 4n",
+  "auto-wide": "auto: safe integers, wide range, n \u2265 10k",
+  "auto-wide-small": "auto: safe integers, wide range, n < 10k",
+  "auto-ranked-nearly": "auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)",
+  "auto-ranked-range": "auto: collation ranks of a string column, safe integers, key range {0} \u2264 4n",
+  "auto-ranked-wide": "auto: collation ranks of a string column, safe integers, wide range, n \u2265 10k",
+  "auto-ranked-wide-small": "auto: collation ranks of a string column, safe integers, wide range, n < 10k",
+  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).
+  "prims-or-dates": "an array of primitives or Dates",
+  "prim-or-date": "a primitive or a Date",
+  "range-bound": "number | bigint or a valid Date bound",
+  "same-type": "min and max of the same type ({0})",
+  // An option given without its wrapper (`DK_INVALID_OPTION` expected).
+  wrapped: "{0}({1}) from '@datakable/core/{2}'",
+  // DK_INTERNAL problems.
+  escaped: "an exception escaped DataKable code",
+  "unknown-code": 'unknown diagnostic code "{0}": define it with defineDiagnostic() first',
+  "unknown-op": 'Unknown operation "{0}": register it with registerOperation()',
+  "boundary-twice": 'A boundary interceptor is already installed ("{0}"); "{1}" was rejected'
+};
+function expandProse(v, dev) {
+  const [key, ...args] = v.split("|");
+  const text = (process.env.NODE_ENV !== "production" && dev ? proseMessages[key] : void 0) ?? installedText(key);
+  return typeof text === "string" ? text.replace(/\{(\d)\}/g, (_, n) => expandProse(args[+n], dev)) : v;
+}
+var FIELDS = ["fallback", "reason", "problem", "expected"];
+function expandDetails(details, dev) {
+  const out = { ...details };
+  for (const f of FIELDS) {
+    const v = details[f];
+    if (typeof v === "string") out[f] = expandProse(v, dev);
+  }
+  return out;
+}
+export {
+  expandDetails,
+  expandProse,
+  proseMessages
+};
+//# sourceMappingURL=prose.js.map

package/dist/diagnostics/prose.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/prose.ts"],"sourcesContent":["import { installedText } from './catalog'\nimport './process-guard'\n\n/**\n * Production detail prose (§8.2, §9.3): the sentences some details carry (`fallback`, `reason`,\n * `problem`) are written as short keys at the emit site, e.g. `fallback: 'cells-undefined'`, or\n * `'page-size|10'` with arguments. A diagnostic built in development, or in production with\n * `@datakable/core/messages` installed, reads the full sentence (the key is expanded when it is\n * built); production without the messages keeps the key, so the bundle carries no prose. A value\n * that is not a known key (a plugin's own `registerFallback` text) is kept as written.\n *\n * `{0}`, `{1}` are the arguments after the key, separated by `|`.\n */\nexport const proseMessages: Readonly<Record<string, string>> = {\n  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).\n  'cells-coerced': 'those cells were coerced with the default formatter',\n  'cells-warn': 'those cells rendered ⚠', // `<DataTable />` (@datakable/react)\n  'cells-undefined': 'the failed cells read as undefined',\n  'cells-empty': \"the failed cells render ''\",\n  'rows-unmatched': 'the failed rows are treated as non-matching',\n  'rows-last': 'the failed rows sort as missing values (last)',\n  'cell-undefined': 'the cell reads as undefined',\n  'row-key-index': \"those rows use the fallback key '#<index>'\",\n  'sorted-native': 'the rows were sorted with the native algorithm',\n  'sorted-default': 'the column was sorted with the default comparator',\n  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).\n  'init-continued': 'table creation continued without the failed step',\n  'options-kept': 'the previous options were kept',\n  'destroy-continued': 'teardown continued; the table is destroyed',\n  'update-dropped': 'the update was dropped (state unchanged)',\n  'data-kept': 'the previous data was kept',\n  'row-model-kept': 'the last good row model was kept',\n  'step-passthrough': 'the step passed its input through',\n  'batch-fallback':\n    \"the column's cells use the slot fallback ('' for format, undefined for accessor, \" +\n    'non-matching for filterFn, missing (sorted last) for sortBy)',\n  'results-kept': \"the previous results were kept (status: 'error')\",\n  'diagnostic-dropped': 'the diagnostic was dropped (the logger never kills the table)',\n  'returned-undefined': 'the operation returned undefined',\n  // Features.\n  'slice-undefined': 'the slice starts as undefined',\n  'api-not-installed': 'its API was not installed',\n  'call-ignored': 'the call was ignored',\n  'api-missing': 'table.{0}() did nothing (the API of that feature was not installed)',\n  'apis-missing': 'table.{0}() did nothing (the API of those features was not installed)',\n  'page-reset': 'the pagination state was reset to its initial value',\n  'page-index-0': 'pageIndex was replaced by 0',\n  'page-size': 'pageSize was replaced by {0}',\n  'validity-ignored': 'the call was ignored; the validity filter is unchanged',\n  'validity-all': \"the table shows every row, as with 'all'\",\n  'validity-needs-flag':\n    'validity filters rows flagged by schema validation, which needs `schema` and ' +\n    \"`invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows \" +\n    \"are removed, with 'throw' they throw)\",\n  'not-searchable': 'no column is searchable: give the columns to search a `search` weight',\n  collation: 'the runtime\\'s collation for \"{0}\"',\n  'not-algorithm':\n    '{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); ' +\n    'auto was used',\n  'exsorted-failed': 'exsorted {0}Sort could not sort these keys; auto was used',\n  'exsorted-range':\n    'exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used',\n  'needs-int-keys':\n    '{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used',\n  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).\n  'custom-threw': 'the custom algorithm threw',\n  'custom-bad': 'the custom algorithm returned a bad value',\n  'not-safe-int': 'keys are not all safe integers',\n  ranks: '{0}, strings as collation ranks',\n  'int-keys': '{0}, safe-integer keys',\n  'auto-nearly': 'auto: safe integers, nearly sorted ({0} descents)',\n  'auto-range': 'auto: safe integers, key range {0} ≤ 4n',\n  'auto-wide': 'auto: safe integers, wide range, n ≥ 10k',\n  'auto-wide-small': 'auto: safe integers, wide range, n < 10k',\n  'auto-ranked-nearly':\n    'auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)',\n  'auto-ranked-range':\n    'auto: collation ranks of a string column, safe integers, key range {0} ≤ 4n',\n  'auto-ranked-wide':\n    'auto: collation ranks of a string column, safe integers, wide range, n ≥ 10k',\n  'auto-ranked-wide-small':\n    'auto: collation ranks of a string column, safe integers, wide range, n < 10k',\n  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).\n  'prims-or-dates': 'an array of primitives or Dates',\n  'prim-or-date': 'a primitive or a Date',\n  'range-bound': 'number | bigint or a valid Date bound',\n  'same-type': 'min and max of the same type ({0})',\n  // An option given without its wrapper (`DK_INVALID_OPTION` expected).\n  wrapped: \"{0}({1}) from '@datakable/core/{2}'\",\n  // DK_INTERNAL problems.\n  escaped: 'an exception escaped DataKable code',\n  'unknown-code': 'unknown diagnostic code \"{0}\": define it with defineDiagnostic() first',\n  'unknown-op': 'Unknown operation \"{0}\": register it with registerOperation()',\n  'boundary-twice': 'A boundary interceptor is already installed (\"{0}\"); \"{1}\" was rejected',\n}\n\n/**\n * The sentence of a prose key (`'page-size|10'` → `'pageSize was replaced by 10'`): from\n * {@link proseMessages} in development (`dev`), else from the installed messages; `v` itself when\n * neither has the key.\n */\nexport function expandProse(v: string, dev: boolean): string {\n  const [key, ...args] = v.split('|') as [string, ...string[]]\n  const text = ((process.env.NODE_ENV !== \"production\") && dev ? proseMessages[key] : undefined) ?? installedText(key)\n  // An argument may be a key itself (`'ranks|custom-threw'`).\n  return typeof text === 'string'\n    ? text.replace(/\\{(\\d)\\}/g, (_, n: string) => expandProse(args[+n] as string, dev))\n    : v\n}\n\n/** The detail fields that may hold a prose key. */\nconst FIELDS = ['fallback', 'reason', 'problem', 'expected'] as const\n\n/** A copy of `details` with its prose keys expanded. */\nexport function expandDetails(\n  details: Record<string, unknown>,\n  dev: boolean,\n): Record<string, unknown> {\n  const out = { ...details }\n  for (const f of FIELDS) {\n    const v = details[f]\n    if (typeof v === 'string') out[f] = expandProse(v, dev)\n  }\n  return out\n}\n"],"mappings":";AAAA,SAAS,qBAAqB;AAC9B,OAAO;AAYA,IAAM,gBAAkD;AAAA;AAAA,EAE7D,iBAAiB;AAAA,EACjB,cAAc;AAAA;AAAA,EACd,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA;AAAA,EAElB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,kBACE;AAAA,EAEF,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA,EAEtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,uBACE;AAAA,EAGF,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,iBACE;AAAA,EAEF,mBAAmB;AAAA,EACnB,kBACE;AAAA,EACF,kBACE;AAAA;AAAA,EAEF,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,sBACE;AAAA,EACF,qBACE;AAAA,EACF,oBACE;AAAA,EACF,0BACE;AAAA;AAAA,EAEF,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,aAAa;AAAA;AAAA,EAEb,SAAS;AAAA;AAAA,EAET,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AACpB;AAOO,SAAS,YAAY,GAAW,KAAsB;AAC3D,QAAM,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,MAAM,GAAG;AAClC,QAAM,QAAS,QAAQ,IAAI,aAAa,gBAAiB,MAAM,cAAc,GAAG,IAAI,WAAc,cAAc,GAAG;AAEnH,SAAO,OAAO,SAAS,WACnB,KAAK,QAAQ,aAAa,CAAC,GAAG,MAAc,YAAY,KAAK,CAAC,CAAC,GAAa,GAAG,CAAC,IAChF;AACN;AAGA,IAAM,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU;AAGpD,SAAS,cACd,SACA,KACyB;AACzB,QAAM,MAAM,EAAE,GAAG,QAAQ;AACzB,aAAW,KAAK,QAAQ;AACtB,UAAM,IAAI,QAAQ,CAAC;AACnB,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI,YAAY,GAAG,GAAG;AAAA,EACxD;AACA,SAAO;AACT;","names":[]}

package/dist/diagnostics/redact.cjs

@@ -25,6 +25,7 @@ __export(redact_exports, {
   SENSITIVE: () => SENSITIVE,
   describeValue: () => describeValue,
   hashRowKey: () => hashRowKey,
+  pathsOverlap: () => pathsOverlap,
   redactDetails: () => redactDetails,
   redactLocation: () => redactLocation,
   redactionMessages: () => redactionMessages,
@@ -34,6 +35,7 @@ __export(redact_exports, {
 });
 module.exports = __toCommonJS(redact_exports);
 var import_catalog = require("./catalog.cjs");
+var import_process_guard = require("./process-guard.cjs");
 var SENSITIVE = "[sensitive]";
 var REDACTED = "[redacted]";
 var LEVELS = ["safe", "keys", "full"];
@@ -83,7 +85,7 @@ function redactKey(r, path, key) {
   return r.level === "safe" ? hashRowKey(key) : key;
 }
 function redactValue(r, path, value, column) {
-  if (column !== void 0 && r.sensitive.has(column)) return SENSITIVE;
+  if (column !== void 0 && underSensitive(r, column)) return SENSITIVE;
   const c = custom(r, path, value);
   if (c !== void 0) return c;
   return r.level === "full" ? value : describeValue(value);
@@ -92,9 +94,9 @@ function issuePath(path) {
   if (!path) return "";
   return path.map((s) => String(typeof s === "object" && s !== null ? s.key : s)).join(".");
 }
+var pathsOverlap = (a, b) => a === b || a.startsWith(`${b}.`) || b.startsWith(`${a}.`);
 function underSensitive(r, path) {
-  if (r.sensitive.size === 0) return false;
-  for (const col of r.sensitive) if (path === col || path.startsWith(`${col}.`)) return true;
+  for (const col of r.sensitive) if (pathsOverlap(path, col)) return true;
   return false;
 }
 function scrubSchemaIssue(issue, r, fieldPath = "issue") {
@@ -106,7 +108,7 @@ function scrubSchemaIssue(issue, r, fieldPath = "issue") {
     path = "";
   }
   const own = `invalid value at ${path || "(root)"}`;
-  if (underSensitive(r, path)) return { path, message: own };
+  if (r.sensitive.size > 0) return { path, message: own };
   const c = custom(r, fieldPath, i.message);
   if (c !== void 0) return { path, message: c };
   return { path, message: r.level === "full" && typeof i.message === "string" ? i.message : own };
@@ -185,6 +187,7 @@ var DK_UNSAFE_REDACTION = (0, import_catalog.defineDiagnostic)(
   SENSITIVE,
   describeValue,
   hashRowKey,
+  pathsOverlap,
   redactDetails,
   redactLocation,
   redactionMessages,