@datakable/core 1.0.1 → 2.0.0

package/dist/diagnostics/process-guard.cjs

@@ -0,0 +1,26 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/diagnostics/process-guard.ts
+var process_guard_exports = {};
+module.exports = __toCommonJS(process_guard_exports);
+try {
+  process.env.NODE_ENV;
+} catch {
+  throw new ReferenceError(
+    `[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. esbuild --define:process.env.NODE_ENV='"production"'), or set globalThis.process = { env: { NODE_ENV: 'production' } } before DataKable loads. See https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md`
+  );
+}
+//# sourceMappingURL=process-guard.cjs.map

package/dist/diagnostics/process-guard.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/process-guard.ts"],"sourcesContent":["// No @types/node in core: declare just what is read.\ndeclare const process: { env: { NODE_ENV?: string } }\n\n/*\n * Code run without a bundler (CDN, import map) has no `process`: say so and name the fix, instead\n * of the engine's bare \"process is not defined\" (#36).\n *\n * Every module that reads `DEV` imports this module first (the build rewrites `import { DEV } from\n * './env'` to `import './process-guard'`, see scripts/preserve-modules.mjs), so it is evaluated\n * before any `process.env.NODE_ENV` read. It is listed in `sideEffects`, so a bundler run without\n * the replacement (esbuild without --define) keeps it too. Once `process.env.NODE_ENV` is replaced\n * with a literal the `try` body is empty and a minifier removes the statement: production bundles\n * pay nothing (`pnpm check:size`).\n */\ntry {\n  process.env.NODE_ENV\n} catch {\n  throw new ReferenceError(\n    '[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. ' +\n      `esbuild --define:process.env.NODE_ENV='\"production\"'), or set globalThis.process = ` +\n      \"{ env: { NODE_ENV: 'production' } } before DataKable loads. See \" +\n      'https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md',\n  )\n}\n\n// A module, not a script: keeps the `process` declaration above local to this file.\nexport {}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA;AAAA;AAcA,IAAI;AACF,UAAQ,IAAI;AACd,QAAQ;AACN,QAAM,IAAI;AAAA,IACR;AAAA,EAIF;AACF;","names":[]}

package/dist/diagnostics/process-guard.js

@@ -0,0 +1,9 @@
+// src/diagnostics/process-guard.ts
+try {
+  process.env.NODE_ENV;
+} catch {
+  throw new ReferenceError(
+    `[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. esbuild --define:process.env.NODE_ENV='"production"'), or set globalThis.process = { env: { NODE_ENV: 'production' } } before DataKable loads. See https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md`
+  );
+}
+//# sourceMappingURL=process-guard.js.map

package/dist/diagnostics/process-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/process-guard.ts"],"sourcesContent":["// No @types/node in core: declare just what is read.\ndeclare const process: { env: { NODE_ENV?: string } }\n\n/*\n * Code run without a bundler (CDN, import map) has no `process`: say so and name the fix, instead\n * of the engine's bare \"process is not defined\" (#36).\n *\n * Every module that reads `DEV` imports this module first (the build rewrites `import { DEV } from\n * './env'` to `import './process-guard'`, see scripts/preserve-modules.mjs), so it is evaluated\n * before any `process.env.NODE_ENV` read. It is listed in `sideEffects`, so a bundler run without\n * the replacement (esbuild without --define) keeps it too. Once `process.env.NODE_ENV` is replaced\n * with a literal the `try` body is empty and a minifier removes the statement: production bundles\n * pay nothing (`pnpm check:size`).\n */\ntry {\n  process.env.NODE_ENV\n} catch {\n  throw new ReferenceError(\n    '[DataKable] process is not defined: replace process.env.NODE_ENV at build time (e.g. ' +\n      `esbuild --define:process.env.NODE_ENV='\"production\"'), or set globalThis.process = ` +\n      \"{ env: { NODE_ENV: 'production' } } before DataKable loads. See \" +\n      'https://github.com/Ink01101011/datakable/blob/main/docs/how-to-fix/process-is-not-defined.md',\n  )\n}\n\n// A module, not a script: keeps the `process` declaration above local to this file.\nexport {}\n"],"mappings":";AAcA,IAAI;AACF,UAAQ,IAAI;AACd,QAAQ;AACN,QAAM,IAAI;AAAA,IACR;AAAA,EAIF;AACF;","names":[]}

package/dist/diagnostics/prose.cjs

@@ -0,0 +1,120 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/diagnostics/prose.ts
+var prose_exports = {};
+__export(prose_exports, {
+  expandDetails: () => expandDetails,
+  expandProse: () => expandProse,
+  proseMessages: () => proseMessages
+});
+module.exports = __toCommonJS(prose_exports);
+var import_catalog = require("./catalog.cjs");
+var import_process_guard = require("./process-guard.cjs");
+var proseMessages = {
+  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).
+  "cells-coerced": "those cells were coerced with the default formatter",
+  "cells-warn": "those cells rendered \u26A0",
+  // `<DataTable />` (@datakable/react)
+  "cells-undefined": "the failed cells read as undefined",
+  "cells-empty": "the failed cells render ''",
+  "rows-unmatched": "the failed rows are treated as non-matching",
+  "rows-last": "the failed rows sort as missing values (last)",
+  "cell-undefined": "the cell reads as undefined",
+  "row-key-index": "those rows use the fallback key '#<index>'",
+  "sorted-native": "the rows were sorted with the native algorithm",
+  "sorted-default": "the column was sorted with the default comparator",
+  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).
+  "init-continued": "table creation continued without the failed step",
+  "options-kept": "the previous options were kept",
+  "destroy-continued": "teardown continued; the table is destroyed",
+  "update-dropped": "the update was dropped (state unchanged)",
+  "data-kept": "the previous data was kept",
+  "row-model-kept": "the last good row model was kept",
+  "step-passthrough": "the step passed its input through",
+  "batch-fallback": "the column's cells use the slot fallback ('' for format, undefined for accessor, non-matching for filterFn, missing (sorted last) for sortBy)",
+  "results-kept": "the previous results were kept (status: 'error')",
+  "diagnostic-dropped": "the diagnostic was dropped (the logger never kills the table)",
+  "returned-undefined": "the operation returned undefined",
+  // Features.
+  "slice-undefined": "the slice starts as undefined",
+  "api-not-installed": "its API was not installed",
+  "call-ignored": "the call was ignored",
+  "api-missing": "table.{0}() did nothing (the API of that feature was not installed)",
+  "apis-missing": "table.{0}() did nothing (the API of those features was not installed)",
+  "page-reset": "the pagination state was reset to its initial value",
+  "page-index-0": "pageIndex was replaced by 0",
+  "page-size": "pageSize was replaced by {0}",
+  "validity-ignored": "the call was ignored; the validity filter is unchanged",
+  "validity-all": "the table shows every row, as with 'all'",
+  "validity-needs-flag": "validity filters rows flagged by schema validation, which needs `schema` and `invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows are removed, with 'throw' they throw)",
+  "not-searchable": "no column is searchable: give the columns to search a `search` weight",
+  collation: `the runtime's collation for "{0}"`,
+  "not-algorithm": "{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); auto was used",
+  "exsorted-failed": "exsorted {0}Sort could not sort these keys; auto was used",
+  "exsorted-range": "exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used",
+  "needs-int-keys": "{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used",
+  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).
+  "custom-threw": "the custom algorithm threw",
+  "custom-bad": "the custom algorithm returned a bad value",
+  "not-safe-int": "keys are not all safe integers",
+  ranks: "{0}, strings as collation ranks",
+  "int-keys": "{0}, safe-integer keys",
+  "auto-nearly": "auto: safe integers, nearly sorted ({0} descents)",
+  "auto-range": "auto: safe integers, key range {0} \u2264 4n",
+  "auto-wide": "auto: safe integers, wide range, n \u2265 10k",
+  "auto-wide-small": "auto: safe integers, wide range, n < 10k",
+  "auto-ranked-nearly": "auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)",
+  "auto-ranked-range": "auto: collation ranks of a string column, safe integers, key range {0} \u2264 4n",
+  "auto-ranked-wide": "auto: collation ranks of a string column, safe integers, wide range, n \u2265 10k",
+  "auto-ranked-wide-small": "auto: collation ranks of a string column, safe integers, wide range, n < 10k",
+  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).
+  "prims-or-dates": "an array of primitives or Dates",
+  "prim-or-date": "a primitive or a Date",
+  "range-bound": "number | bigint or a valid Date bound",
+  "same-type": "min and max of the same type ({0})",
+  // An option given without its wrapper (`DK_INVALID_OPTION` expected).
+  wrapped: "{0}({1}) from '@datakable/core/{2}'",
+  // DK_INTERNAL problems.
+  escaped: "an exception escaped DataKable code",
+  "unknown-code": 'unknown diagnostic code "{0}": define it with defineDiagnostic() first',
+  "unknown-op": 'Unknown operation "{0}": register it with registerOperation()',
+  "boundary-twice": 'A boundary interceptor is already installed ("{0}"); "{1}" was rejected'
+};
+function expandProse(v, dev) {
+  const [key, ...args] = v.split("|");
+  const text = (process.env.NODE_ENV !== "production" && dev ? proseMessages[key] : void 0) ?? (0, import_catalog.installedText)(key);
+  return typeof text === "string" ? text.replace(/\{(\d)\}/g, (_, n) => expandProse(args[n] ?? "", dev)) : v;
+}
+var FIELDS = ["fallback", "reason", "problem", "expected"];
+function expandDetails(details, dev) {
+  const out = { ...details };
+  for (const f of FIELDS) {
+    const v = details[f];
+    if (typeof v === "string") out[f] = expandProse(v, dev);
+  }
+  return out;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  expandDetails,
+  expandProse,
+  proseMessages
+});
+//# sourceMappingURL=prose.cjs.map

package/dist/diagnostics/prose.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/prose.ts"],"sourcesContent":["import { installedText } from './catalog'\nimport './process-guard'\n\n/**\n * Production detail prose (§8.2, §9.3): the sentences some details carry (`fallback`, `reason`,\n * `problem`) are written as short keys at the emit site, e.g. `fallback: 'cells-undefined'`, or\n * `'page-size|10'` with arguments. A diagnostic built in development, or in production with\n * `@datakable/core/messages` installed, reads the full sentence (the key is expanded when it is\n * built); production without the messages keeps the key, so the bundle carries no prose. A value\n * that is not a known key (a plugin's own `registerFallback` text) is kept as written.\n *\n * `{0}`, `{1}` are the arguments after the key, separated by `|`.\n */\nexport const proseMessages: Readonly<Record<string, string>> = {\n  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).\n  'cells-coerced': 'those cells were coerced with the default formatter',\n  'cells-warn': 'those cells rendered ⚠', // `<DataTable />` (@datakable/react)\n  'cells-undefined': 'the failed cells read as undefined',\n  'cells-empty': \"the failed cells render ''\",\n  'rows-unmatched': 'the failed rows are treated as non-matching',\n  'rows-last': 'the failed rows sort as missing values (last)',\n  'cell-undefined': 'the cell reads as undefined',\n  'row-key-index': \"those rows use the fallback key '#<index>'\",\n  'sorted-native': 'the rows were sorted with the native algorithm',\n  'sorted-default': 'the column was sorted with the default comparator',\n  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).\n  'init-continued': 'table creation continued without the failed step',\n  'options-kept': 'the previous options were kept',\n  'destroy-continued': 'teardown continued; the table is destroyed',\n  'update-dropped': 'the update was dropped (state unchanged)',\n  'data-kept': 'the previous data was kept',\n  'row-model-kept': 'the last good row model was kept',\n  'step-passthrough': 'the step passed its input through',\n  'batch-fallback':\n    \"the column's cells use the slot fallback ('' for format, undefined for accessor, \" +\n    'non-matching for filterFn, missing (sorted last) for sortBy)',\n  'results-kept': \"the previous results were kept (status: 'error')\",\n  'diagnostic-dropped': 'the diagnostic was dropped (the logger never kills the table)',\n  'returned-undefined': 'the operation returned undefined',\n  // Features.\n  'slice-undefined': 'the slice starts as undefined',\n  'api-not-installed': 'its API was not installed',\n  'call-ignored': 'the call was ignored',\n  'api-missing': 'table.{0}() did nothing (the API of that feature was not installed)',\n  'apis-missing': 'table.{0}() did nothing (the API of those features was not installed)',\n  'page-reset': 'the pagination state was reset to its initial value',\n  'page-index-0': 'pageIndex was replaced by 0',\n  'page-size': 'pageSize was replaced by {0}',\n  'validity-ignored': 'the call was ignored; the validity filter is unchanged',\n  'validity-all': \"the table shows every row, as with 'all'\",\n  'validity-needs-flag':\n    'validity filters rows flagged by schema validation, which needs `schema` and ' +\n    \"`invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows \" +\n    \"are removed, with 'throw' they throw)\",\n  'not-searchable': 'no column is searchable: give the columns to search a `search` weight',\n  collation: 'the runtime\\'s collation for \"{0}\"',\n  'not-algorithm':\n    '{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); ' +\n    'auto was used',\n  'exsorted-failed': 'exsorted {0}Sort could not sort these keys; auto was used',\n  'exsorted-range':\n    'exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used',\n  'needs-int-keys':\n    '{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used',\n  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).\n  'custom-threw': 'the custom algorithm threw',\n  'custom-bad': 'the custom algorithm returned a bad value',\n  'not-safe-int': 'keys are not all safe integers',\n  ranks: '{0}, strings as collation ranks',\n  'int-keys': '{0}, safe-integer keys',\n  'auto-nearly': 'auto: safe integers, nearly sorted ({0} descents)',\n  'auto-range': 'auto: safe integers, key range {0} ≤ 4n',\n  'auto-wide': 'auto: safe integers, wide range, n ≥ 10k',\n  'auto-wide-small': 'auto: safe integers, wide range, n < 10k',\n  'auto-ranked-nearly':\n    'auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)',\n  'auto-ranked-range':\n    'auto: collation ranks of a string column, safe integers, key range {0} ≤ 4n',\n  'auto-ranked-wide':\n    'auto: collation ranks of a string column, safe integers, wide range, n ≥ 10k',\n  'auto-ranked-wide-small':\n    'auto: collation ranks of a string column, safe integers, wide range, n < 10k',\n  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).\n  'prims-or-dates': 'an array of primitives or Dates',\n  'prim-or-date': 'a primitive or a Date',\n  'range-bound': 'number | bigint or a valid Date bound',\n  'same-type': 'min and max of the same type ({0})',\n  // An option given without its wrapper (`DK_INVALID_OPTION` expected).\n  wrapped: \"{0}({1}) from '@datakable/core/{2}'\",\n  // DK_INTERNAL problems.\n  escaped: 'an exception escaped DataKable code',\n  'unknown-code': 'unknown diagnostic code \"{0}\": define it with defineDiagnostic() first',\n  'unknown-op': 'Unknown operation \"{0}\": register it with registerOperation()',\n  'boundary-twice': 'A boundary interceptor is already installed (\"{0}\"); \"{1}\" was rejected',\n}\n\n/**\n * The sentence of a prose key (`'page-size|10'` → `'pageSize was replaced by 10'`): from\n * {@link proseMessages} in development (`dev`), else from the installed messages; `v` itself when\n * neither has the key.\n */\nexport function expandProse(v: string, dev: boolean): string {\n  const [key, ...args] = v.split('|') as [string, ...string[]]\n  const text = ((process.env.NODE_ENV !== \"production\") && dev ? proseMessages[key] : undefined) ?? installedText(key)\n  // An argument may be a key itself (`'ranks|custom-threw'`); a missing one reads as ''. (`n` is\n  // the digit string: `args['0']` indexes like `args[0]`.)\n  return typeof text === 'string'\n    ? text.replace(/\\{(\\d)\\}/g, (_, n: number) => expandProse(args[n] ?? '', dev))\n    : v\n}\n\n/** The detail fields that may hold a prose key. */\nconst FIELDS = ['fallback', 'reason', 'problem', 'expected'] as const\n\n/** A copy of `details` with its prose keys expanded. */\nexport function expandDetails(\n  details: Record<string, unknown>,\n  dev: boolean,\n): Record<string, unknown> {\n  const out = { ...details }\n  for (const f of FIELDS) {\n    const v = details[f]\n    if (typeof v === 'string') out[f] = expandProse(v, dev)\n  }\n  return out\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA8B;AAC9B,2BAAO;AAYA,IAAM,gBAAkD;AAAA;AAAA,EAE7D,iBAAiB;AAAA,EACjB,cAAc;AAAA;AAAA,EACd,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA;AAAA,EAElB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,kBACE;AAAA,EAEF,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA,EAEtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,uBACE;AAAA,EAGF,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,iBACE;AAAA,EAEF,mBAAmB;AAAA,EACnB,kBACE;AAAA,EACF,kBACE;AAAA;AAAA,EAEF,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,sBACE;AAAA,EACF,qBACE;AAAA,EACF,oBACE;AAAA,EACF,0BACE;AAAA;AAAA,EAEF,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,aAAa;AAAA;AAAA,EAEb,SAAS;AAAA;AAAA,EAET,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AACpB;AAOO,SAAS,YAAY,GAAW,KAAsB;AAC3D,QAAM,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,MAAM,GAAG;AAClC,QAAM,QAAS,QAAQ,IAAI,aAAa,gBAAiB,MAAM,cAAc,GAAG,IAAI,eAAc,8BAAc,GAAG;AAGnH,SAAO,OAAO,SAAS,WACnB,KAAK,QAAQ,aAAa,CAAC,GAAG,MAAc,YAAY,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,IAC3E;AACN;AAGA,IAAM,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU;AAGpD,SAAS,cACd,SACA,KACyB;AACzB,QAAM,MAAM,EAAE,GAAG,QAAQ;AACzB,aAAW,KAAK,QAAQ;AACtB,UAAM,IAAI,QAAQ,CAAC;AACnB,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI,YAAY,GAAG,GAAG;AAAA,EACxD;AACA,SAAO;AACT;","names":[]}

package/dist/diagnostics/prose.js

@@ -0,0 +1,93 @@
+// src/diagnostics/prose.ts
+import { installedText } from "./catalog.js";
+import "./process-guard.js";
+var proseMessages = {
+  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).
+  "cells-coerced": "those cells were coerced with the default formatter",
+  "cells-warn": "those cells rendered \u26A0",
+  // `<DataTable />` (@datakable/react)
+  "cells-undefined": "the failed cells read as undefined",
+  "cells-empty": "the failed cells render ''",
+  "rows-unmatched": "the failed rows are treated as non-matching",
+  "rows-last": "the failed rows sort as missing values (last)",
+  "cell-undefined": "the cell reads as undefined",
+  "row-key-index": "those rows use the fallback key '#<index>'",
+  "sorted-native": "the rows were sorted with the native algorithm",
+  "sorted-default": "the column was sorted with the default comparator",
+  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).
+  "init-continued": "table creation continued without the failed step",
+  "options-kept": "the previous options were kept",
+  "destroy-continued": "teardown continued; the table is destroyed",
+  "update-dropped": "the update was dropped (state unchanged)",
+  "data-kept": "the previous data was kept",
+  "row-model-kept": "the last good row model was kept",
+  "step-passthrough": "the step passed its input through",
+  "batch-fallback": "the column's cells use the slot fallback ('' for format, undefined for accessor, non-matching for filterFn, missing (sorted last) for sortBy)",
+  "results-kept": "the previous results were kept (status: 'error')",
+  "diagnostic-dropped": "the diagnostic was dropped (the logger never kills the table)",
+  "returned-undefined": "the operation returned undefined",
+  // Features.
+  "slice-undefined": "the slice starts as undefined",
+  "api-not-installed": "its API was not installed",
+  "call-ignored": "the call was ignored",
+  "api-missing": "table.{0}() did nothing (the API of that feature was not installed)",
+  "apis-missing": "table.{0}() did nothing (the API of those features was not installed)",
+  "page-reset": "the pagination state was reset to its initial value",
+  "page-index-0": "pageIndex was replaced by 0",
+  "page-size": "pageSize was replaced by {0}",
+  "validity-ignored": "the call was ignored; the validity filter is unchanged",
+  "validity-all": "the table shows every row, as with 'all'",
+  "validity-needs-flag": "validity filters rows flagged by schema validation, which needs `schema` and `invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows are removed, with 'throw' they throw)",
+  "not-searchable": "no column is searchable: give the columns to search a `search` weight",
+  collation: `the runtime's collation for "{0}"`,
+  "not-algorithm": "{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); auto was used",
+  "exsorted-failed": "exsorted {0}Sort could not sort these keys; auto was used",
+  "exsorted-range": "exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used",
+  "needs-int-keys": "{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used",
+  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).
+  "custom-threw": "the custom algorithm threw",
+  "custom-bad": "the custom algorithm returned a bad value",
+  "not-safe-int": "keys are not all safe integers",
+  ranks: "{0}, strings as collation ranks",
+  "int-keys": "{0}, safe-integer keys",
+  "auto-nearly": "auto: safe integers, nearly sorted ({0} descents)",
+  "auto-range": "auto: safe integers, key range {0} \u2264 4n",
+  "auto-wide": "auto: safe integers, wide range, n \u2265 10k",
+  "auto-wide-small": "auto: safe integers, wide range, n < 10k",
+  "auto-ranked-nearly": "auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)",
+  "auto-ranked-range": "auto: collation ranks of a string column, safe integers, key range {0} \u2264 4n",
+  "auto-ranked-wide": "auto: collation ranks of a string column, safe integers, wide range, n \u2265 10k",
+  "auto-ranked-wide-small": "auto: collation ranks of a string column, safe integers, wide range, n < 10k",
+  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).
+  "prims-or-dates": "an array of primitives or Dates",
+  "prim-or-date": "a primitive or a Date",
+  "range-bound": "number | bigint or a valid Date bound",
+  "same-type": "min and max of the same type ({0})",
+  // An option given without its wrapper (`DK_INVALID_OPTION` expected).
+  wrapped: "{0}({1}) from '@datakable/core/{2}'",
+  // DK_INTERNAL problems.
+  escaped: "an exception escaped DataKable code",
+  "unknown-code": 'unknown diagnostic code "{0}": define it with defineDiagnostic() first',
+  "unknown-op": 'Unknown operation "{0}": register it with registerOperation()',
+  "boundary-twice": 'A boundary interceptor is already installed ("{0}"); "{1}" was rejected'
+};
+function expandProse(v, dev) {
+  const [key, ...args] = v.split("|");
+  const text = (process.env.NODE_ENV !== "production" && dev ? proseMessages[key] : void 0) ?? installedText(key);
+  return typeof text === "string" ? text.replace(/\{(\d)\}/g, (_, n) => expandProse(args[n] ?? "", dev)) : v;
+}
+var FIELDS = ["fallback", "reason", "problem", "expected"];
+function expandDetails(details, dev) {
+  const out = { ...details };
+  for (const f of FIELDS) {
+    const v = details[f];
+    if (typeof v === "string") out[f] = expandProse(v, dev);
+  }
+  return out;
+}
+export {
+  expandDetails,
+  expandProse,
+  proseMessages
+};
+//# sourceMappingURL=prose.js.map

package/dist/diagnostics/prose.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/diagnostics/prose.ts"],"sourcesContent":["import { installedText } from './catalog'\nimport './process-guard'\n\n/**\n * Production detail prose (§8.2, §9.3): the sentences some details carry (`fallback`, `reason`,\n * `problem`) are written as short keys at the emit site, e.g. `fallback: 'cells-undefined'`, or\n * `'page-size|10'` with arguments. A diagnostic built in development, or in production with\n * `@datakable/core/messages` installed, reads the full sentence (the key is expanded when it is\n * built); production without the messages keeps the key, so the bundle carries no prose. A value\n * that is not a known key (a plugin's own `registerFallback` text) is kept as written.\n *\n * `{0}`, `{1}` are the arguments after the key, separated by `|`.\n */\nexport const proseMessages: Readonly<Record<string, string>> = {\n  // Cell slots (`DK_CALLBACK_FAILED` / `DK_CALLBACK_BAD_RETURN` fallback).\n  'cells-coerced': 'those cells were coerced with the default formatter',\n  'cells-warn': 'those cells rendered ⚠', // `<DataTable />` (@datakable/react)\n  'cells-undefined': 'the failed cells read as undefined',\n  'cells-empty': \"the failed cells render ''\",\n  'rows-unmatched': 'the failed rows are treated as non-matching',\n  'rows-last': 'the failed rows sort as missing values (last)',\n  'cell-undefined': 'the cell reads as undefined',\n  'row-key-index': \"those rows use the fallback key '#<index>'\",\n  'sorted-native': 'the rows were sorted with the native algorithm',\n  'sorted-default': 'the column was sorted with the default comparator',\n  // Operation fallbacks (`intercept/fallbacks.ts`, the boundary's reports).\n  'init-continued': 'table creation continued without the failed step',\n  'options-kept': 'the previous options were kept',\n  'destroy-continued': 'teardown continued; the table is destroyed',\n  'update-dropped': 'the update was dropped (state unchanged)',\n  'data-kept': 'the previous data was kept',\n  'row-model-kept': 'the last good row model was kept',\n  'step-passthrough': 'the step passed its input through',\n  'batch-fallback':\n    \"the column's cells use the slot fallback ('' for format, undefined for accessor, \" +\n    'non-matching for filterFn, missing (sorted last) for sortBy)',\n  'results-kept': \"the previous results were kept (status: 'error')\",\n  'diagnostic-dropped': 'the diagnostic was dropped (the logger never kills the table)',\n  'returned-undefined': 'the operation returned undefined',\n  // Features.\n  'slice-undefined': 'the slice starts as undefined',\n  'api-not-installed': 'its API was not installed',\n  'call-ignored': 'the call was ignored',\n  'api-missing': 'table.{0}() did nothing (the API of that feature was not installed)',\n  'apis-missing': 'table.{0}() did nothing (the API of those features was not installed)',\n  'page-reset': 'the pagination state was reset to its initial value',\n  'page-index-0': 'pageIndex was replaced by 0',\n  'page-size': 'pageSize was replaced by {0}',\n  'validity-ignored': 'the call was ignored; the validity filter is unchanged',\n  'validity-all': \"the table shows every row, as with 'all'\",\n  'validity-needs-flag':\n    'validity filters rows flagged by schema validation, which needs `schema` and ' +\n    \"`invalidRows: 'flag'` (without a schema no row is invalid; with 'drop' invalid rows \" +\n    \"are removed, with 'throw' they throw)\",\n  'not-searchable': 'no column is searchable: give the columns to search a `search` weight',\n  collation: 'the runtime\\'s collation for \"{0}\"',\n  'not-algorithm':\n    '{0} is not a sort algorithm (accepted: auto, tim, radix, counting, native, or a function); ' +\n    'auto was used',\n  'exsorted-failed': 'exsorted {0}Sort could not sort these keys; auto was used',\n  'exsorted-range':\n    'exsorted {0}Sort could not sort these keys (key range above 1,000,000); auto was used',\n  'needs-int-keys':\n    '{0} sorts a single column of safe integer keys (numbers or Dates, no sortFn); auto was used',\n  // Sorting reasons (DK_SORT_STRATEGY, `debug: true`).\n  'custom-threw': 'the custom algorithm threw',\n  'custom-bad': 'the custom algorithm returned a bad value',\n  'not-safe-int': 'keys are not all safe integers',\n  ranks: '{0}, strings as collation ranks',\n  'int-keys': '{0}, safe-integer keys',\n  'auto-nearly': 'auto: safe integers, nearly sorted ({0} descents)',\n  'auto-range': 'auto: safe integers, key range {0} ≤ 4n',\n  'auto-wide': 'auto: safe integers, wide range, n ≥ 10k',\n  'auto-wide-small': 'auto: safe integers, wide range, n < 10k',\n  'auto-ranked-nearly':\n    'auto: collation ranks of a string column, safe integers, nearly sorted ({0} descents)',\n  'auto-ranked-range':\n    'auto: collation ranks of a string column, safe integers, key range {0} ≤ 4n',\n  'auto-ranked-wide':\n    'auto: collation ranks of a string column, safe integers, wide range, n ≥ 10k',\n  'auto-ranked-wide-small':\n    'auto: collation ranks of a string column, safe integers, wide range, n < 10k',\n  // Filter values (`DK_FILTER_TYPE_MISMATCH` expected).\n  'prims-or-dates': 'an array of primitives or Dates',\n  'prim-or-date': 'a primitive or a Date',\n  'range-bound': 'number | bigint or a valid Date bound',\n  'same-type': 'min and max of the same type ({0})',\n  // An option given without its wrapper (`DK_INVALID_OPTION` expected).\n  wrapped: \"{0}({1}) from '@datakable/core/{2}'\",\n  // DK_INTERNAL problems.\n  escaped: 'an exception escaped DataKable code',\n  'unknown-code': 'unknown diagnostic code \"{0}\": define it with defineDiagnostic() first',\n  'unknown-op': 'Unknown operation \"{0}\": register it with registerOperation()',\n  'boundary-twice': 'A boundary interceptor is already installed (\"{0}\"); \"{1}\" was rejected',\n}\n\n/**\n * The sentence of a prose key (`'page-size|10'` → `'pageSize was replaced by 10'`): from\n * {@link proseMessages} in development (`dev`), else from the installed messages; `v` itself when\n * neither has the key.\n */\nexport function expandProse(v: string, dev: boolean): string {\n  const [key, ...args] = v.split('|') as [string, ...string[]]\n  const text = ((process.env.NODE_ENV !== \"production\") && dev ? proseMessages[key] : undefined) ?? installedText(key)\n  // An argument may be a key itself (`'ranks|custom-threw'`); a missing one reads as ''. (`n` is\n  // the digit string: `args['0']` indexes like `args[0]`.)\n  return typeof text === 'string'\n    ? text.replace(/\\{(\\d)\\}/g, (_, n: number) => expandProse(args[n] ?? '', dev))\n    : v\n}\n\n/** The detail fields that may hold a prose key. */\nconst FIELDS = ['fallback', 'reason', 'problem', 'expected'] as const\n\n/** A copy of `details` with its prose keys expanded. */\nexport function expandDetails(\n  details: Record<string, unknown>,\n  dev: boolean,\n): Record<string, unknown> {\n  const out = { ...details }\n  for (const f of FIELDS) {\n    const v = details[f]\n    if (typeof v === 'string') out[f] = expandProse(v, dev)\n  }\n  return out\n}\n"],"mappings":";AAAA,SAAS,qBAAqB;AAC9B,OAAO;AAYA,IAAM,gBAAkD;AAAA;AAAA,EAE7D,iBAAiB;AAAA,EACjB,cAAc;AAAA;AAAA,EACd,mBAAmB;AAAA,EACnB,eAAe;AAAA,EACf,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,kBAAkB;AAAA;AAAA,EAElB,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,kBACE;AAAA,EAEF,gBAAgB;AAAA,EAChB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA;AAAA,EAEtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,gBAAgB;AAAA,EAChB,uBACE;AAAA,EAGF,kBAAkB;AAAA,EAClB,WAAW;AAAA,EACX,iBACE;AAAA,EAEF,mBAAmB;AAAA,EACnB,kBACE;AAAA,EACF,kBACE;AAAA;AAAA,EAEF,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,gBAAgB;AAAA,EAChB,OAAO;AAAA,EACP,YAAY;AAAA,EACZ,eAAe;AAAA,EACf,cAAc;AAAA,EACd,aAAa;AAAA,EACb,mBAAmB;AAAA,EACnB,sBACE;AAAA,EACF,qBACE;AAAA,EACF,oBACE;AAAA,EACF,0BACE;AAAA;AAAA,EAEF,kBAAkB;AAAA,EAClB,gBAAgB;AAAA,EAChB,eAAe;AAAA,EACf,aAAa;AAAA;AAAA,EAEb,SAAS;AAAA;AAAA,EAET,SAAS;AAAA,EACT,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,kBAAkB;AACpB;AAOO,SAAS,YAAY,GAAW,KAAsB;AAC3D,QAAM,CAAC,KAAK,GAAG,IAAI,IAAI,EAAE,MAAM,GAAG;AAClC,QAAM,QAAS,QAAQ,IAAI,aAAa,gBAAiB,MAAM,cAAc,GAAG,IAAI,WAAc,cAAc,GAAG;AAGnH,SAAO,OAAO,SAAS,WACnB,KAAK,QAAQ,aAAa,CAAC,GAAG,MAAc,YAAY,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,IAC3E;AACN;AAGA,IAAM,SAAS,CAAC,YAAY,UAAU,WAAW,UAAU;AAGpD,SAAS,cACd,SACA,KACyB;AACzB,QAAM,MAAM,EAAE,GAAG,QAAQ;AACzB,aAAW,KAAK,QAAQ;AACtB,UAAM,IAAI,QAAQ,CAAC;AACnB,QAAI,OAAO,MAAM,SAAU,KAAI,CAAC,IAAI,YAAY,GAAG,GAAG;AAAA,EACxD;AACA,SAAO;AACT;","names":[]}

package/dist/diagnostics/redact.cjs

@@ -25,6 +25,7 @@ __export(redact_exports, {
   SENSITIVE: () => SENSITIVE,
   describeValue: () => describeValue,
   hashRowKey: () => hashRowKey,
+  pathsOverlap: () => pathsOverlap,
   redactDetails: () => redactDetails,
   redactLocation: () => redactLocation,
   redactionMessages: () => redactionMessages,
@@ -34,6 +35,7 @@ __export(redact_exports, {
 });
 module.exports = __toCommonJS(redact_exports);
 var import_catalog = require("./catalog.cjs");
+var import_process_guard = require("./process-guard.cjs");
 var SENSITIVE = "[sensitive]";
 var REDACTED = "[redacted]";
 var LEVELS = ["safe", "keys", "full"];
@@ -83,7 +85,7 @@ function redactKey(r, path, key) {
   return r.level === "safe" ? hashRowKey(key) : key;
 }
 function redactValue(r, path, value, column) {
-  if (column !== void 0 && r.sensitive.has(column)) return SENSITIVE;
+  if (column !== void 0 && underSensitive(r, column)) return SENSITIVE;
   const c = custom(r, path, value);
   if (c !== void 0) return c;
   return r.level === "full" ? value : describeValue(value);
@@ -92,9 +94,9 @@ function issuePath(path) {
   if (!path) return "";
   return path.map((s) => String(typeof s === "object" && s !== null ? s.key : s)).join(".");
 }
+var pathsOverlap = (a, b) => a === b || a.startsWith(`${b}.`) || b.startsWith(`${a}.`);
 function underSensitive(r, path) {
-  if (r.sensitive.size === 0) return false;
-  for (const col of r.sensitive) if (path === col || path.startsWith(`${col}.`)) return true;
+  for (const col of r.sensitive) if (pathsOverlap(path, col)) return true;
   return false;
 }
 function scrubSchemaIssue(issue, r, fieldPath = "issue") {
@@ -106,7 +108,7 @@ function scrubSchemaIssue(issue, r, fieldPath = "issue") {
     path = "";
   }
   const own = `invalid value at ${path || "(root)"}`;
-  if (underSensitive(r, path)) return { path, message: own };
+  if (r.sensitive.size > 0) return { path, message: own };
   const c = custom(r, fieldPath, i.message);
   if (c !== void 0) return { path, message: c };
   return { path, message: r.level === "full" && typeof i.message === "string" ? i.message : own };
@@ -185,6 +187,7 @@ var DK_UNSAFE_REDACTION = (0, import_catalog.defineDiagnostic)(
   SENSITIVE,
   describeValue,
   hashRowKey,
+  pathsOverlap,
   redactDetails,
   redactLocation,
   redactionMessages,

package/dist/diagnostics/redact.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/diagnostics/redact.ts"],"sourcesContent":["import { type DiagnosticMessages, defineDiagnostic } from './catalog'\nimport type { Location } from './types'\n\ndeclare module './catalog' {\n  interface DiagnosticCatalog {\n    DK_UNSAFE_REDACTION: { level: 'full' }\n  }\n}\n\n/**\n * Redaction levels (§8.2). `'safe'`: paths, indices, counts, value types, hashed row keys\n * (production default). `'keys'`: + raw row keys (development default). `'full'`: + row values.\n */\nexport type RedactLevel = 'safe' | 'keys' | 'full'\n\n/**\n * Custom rule: return a string to log instead of `value`, or `undefined` for the built-in policy.\n * `path` names the field, e.g. `where.key`, `details.value`, `details.keys.2`, `details.issues.0`.\n * Sensitive columns never reach it.\n */\nexport type RedactFn = (path: string, value: unknown) => string | undefined\n\nexport interface RedactionOptions {\n  /** Default `'keys'` in development, `'safe'` in production. */\n  level?: RedactLevel\n  redact?: RedactFn\n  /** Ids / keys of `sensitive: true` columns: never logged at any level. */\n  sensitiveColumns?: () => Iterable<string>\n  /** The `rowKey` column is sensitive: row keys are hashed at every level. */\n  rowKeySensitive?: () => boolean\n}\n\n/**\n * Which detail fields of a diagnostic carry user data, declared on its `defineDiagnostic` entry.\n * Undeclared fields are logged as-is, so they must hold only DataKable-safe data (paths, ids,\n * indices, counts). Text builders receive the redacted values: treat these fields as opaque and\n * only interpolate them.\n *\n * - `rowKey` / `rowKeys`: a row key / an array of them (hashed under `'safe'`).\n * - `value` / `values`: a cell value / an array of them (type summary unless `'full'`). The column\n *   is `details.column` when it is a string, else the `where` column id.\n * - `schemaIssues`: one Standard Schema issue or an array of them (`scrubSchemaIssue`).\n * - `error`: a thrown value, e.g. a fetcher error (`scrubError`).\n */\nexport type RedactField = 'rowKey' | 'rowKeys' | 'value' | 'values' | 'schemaIssues' | 'error'\n\n/** A resolved policy, built once per emit. */\nexport interface Redactor {\n  level: RedactLevel\n  custom: RedactFn | undefined\n  sensitive: ReadonlySet<string>\n  rowKeySensitive: boolean\n  /** Called when the custom rule throws; the value is logged as `[redacted]`. */\n  onError?: (error: unknown) => void\n}\n\nexport const SENSITIVE = '[sensitive]'\nexport const REDACTED = '[redacted]'\n\nconst LEVELS: readonly string[] = ['safe', 'keys', 'full']\nconst EMPTY: ReadonlySet<string> = new Set()\n\nexport function resolveRedaction(\n  option: RedactLevel | RedactionOptions | undefined,\n  dev: boolean,\n): Redactor {\n  const o: RedactionOptions = typeof option === 'string' ? { level: option } : (option ?? {})\n  const level = o.level ?? (dev ? 'keys' : 'safe')\n  const cols = o.sensitiveColumns?.()\n  return {\n    // An unknown level gets the strictest policy; validating the option is optionValidator's job.\n    level: LEVELS.includes(level) ? level : 'safe',\n    custom: o.redact,\n    sensitive: cols ? new Set(cols) : EMPTY,\n    rowKeySensitive: o.rowKeySensitive?.() ?? false,\n  }\n}\n\n/** Short 32-bit FNV-1a hash of `String(key)` (UTF-16 code units), as `h:xxxxxxxx`. */\nexport function hashRowKey(key: unknown): string {\n  const s = String(key)\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193)\n  }\n  return `h:${(h >>> 0).toString(16).padStart(8, '0')}`\n}\n\n/** The value's type, never its contents: `string(12)`, `number`, `array(3)`, `date`, … */\nexport function describeValue(v: unknown): string {\n  if (v === null) return 'null'\n  if (typeof v === 'string') return `string(${v.length})`\n  if (typeof v === 'number') return Number.isNaN(v) ? 'number(NaN)' : 'number'\n  if (Array.isArray(v)) return `array(${v.length})`\n  if (v instanceof Date) return 'date'\n  return typeof v\n}\n\nfunction custom(r: Redactor, path: string, value: unknown): string | undefined {\n  if (!r.custom) return undefined\n  try {\n    return r.custom(path, value)\n  } catch (e) {\n    r.onError?.(e)\n    return REDACTED\n  }\n}\n\nfunction redactKey(r: Redactor, path: string, key: unknown): unknown {\n  // A sensitive rowKey column wins over the custom rule and the level.\n  if (r.rowKeySensitive) return hashRowKey(key)\n  const c = custom(r, path, key)\n  if (c !== undefined) return c\n  return r.level === 'safe' ? hashRowKey(key) : key\n}\n\nfunction redactValue(r: Redactor, path: string, value: unknown, column?: string): unknown {\n  if (column !== undefined && r.sensitive.has(column)) return SENSITIVE\n  const c = custom(r, path, value)\n  if (c !== undefined) return c\n  return r.level === 'full' ? value : describeValue(value)\n}\n\ntype IssuePath = ReadonlyArray<PropertyKey | { key: PropertyKey }>\n\n/** Joins a Standard Schema issue path: `['user', 0, { key: 'email' }]` → `user.0.email`. */\nfunction issuePath(path: IssuePath | undefined): string {\n  if (!path) return ''\n  return path.map((s) => String(typeof s === 'object' && s !== null ? s.key : s)).join('.')\n}\n\nfunction underSensitive(r: Redactor, path: string): boolean {\n  if (r.sensitive.size === 0) return false\n  for (const col of r.sensitive) if (path === col || path.startsWith(`${col}.`)) return true\n  return false\n}\n\n/**\n * A schema issue as `{ path, message }`. Validators embed received values in their messages, so\n * under `'safe'` / `'keys'` (and for sensitive columns) the message is DataKable's own text.\n */\nexport function scrubSchemaIssue(\n  issue: unknown,\n  r: Redactor,\n  fieldPath = 'issue',\n): { path: string; message: string } {\n  const i = (typeof issue === 'object' && issue !== null ? issue : {}) as {\n    message?: unknown\n    path?: IssuePath\n  }\n  let path: string\n  try {\n    path = issuePath(i.path)\n  } catch {\n    path = ''\n  }\n  const own = `invalid value at ${path || '(root)'}`\n  if (underSensitive(r, path)) return { path, message: own }\n  const c = custom(r, fieldPath, i.message)\n  if (c !== undefined) return { path, message: c }\n  return { path, message: r.level === 'full' && typeof i.message === 'string' ? i.message : own }\n}\n\n/**\n * A thrown value as `error.name` + `code` only (fetcher errors embed URLs, tokens, payloads). The\n * full error belongs in `context.cause`, which reaches `onDiagnostic` only.\n */\nexport function scrubError(e: unknown): string {\n  if (typeof e !== 'object' || e === null) return typeof e\n  try {\n    const { name, code } = e as { name?: unknown; code?: unknown }\n    const n = typeof name === 'string' && name ? name : 'object'\n    return typeof code === 'string' || typeof code === 'number' ? `${n} (${code})` : n\n  } catch {\n    return 'object'\n  }\n}\n\n/** Hashes / passes through `where.key` per the policy; other locations hold no user data. */\nexport function redactLocation(where: Location, r: Redactor): Location {\n  if (where.kind !== 'row' || where.key === undefined) return where\n  const key = redactKey(r, 'where.key', where.key)\n  return { kind: 'row', index: where.index, key: typeof key === 'string' ? key : String(key) }\n}\n\n/** A shallow copy of `details` with the declared fields redacted; the input is never mutated. */\nexport function redactDetails(\n  details: Record<string, unknown>,\n  fields: Readonly<Record<string, RedactField | undefined>> | undefined,\n  where: Location,\n  r: Redactor,\n): Record<string, unknown> {\n  if (!fields) return details\n  const out: Record<string, unknown> = { ...details }\n  const column =\n    typeof details.column === 'string'\n      ? details.column\n      : where.kind === 'column'\n        ? where.id\n        : undefined\n  for (const name of Object.keys(fields)) {\n    const kind = fields[name]\n    if (kind === undefined || !(name in details)) continue\n    const v = details[name]\n    const p = `details.${name}`\n    const each = (f: (x: unknown, path: string) => unknown) =>\n      Array.isArray(v) ? v.map((x, i) => f(x, `${p}.${i}`)) : f(v, p)\n    switch (kind) {\n      case 'rowKey':\n        out[name] = redactKey(r, p, v)\n        break\n      case 'rowKeys':\n        out[name] = each((x, path) => redactKey(r, path, x))\n        break\n      case 'value':\n        out[name] = redactValue(r, p, v, column)\n        break\n      case 'values':\n        out[name] = each((x, path) => redactValue(r, path, x, column))\n        break\n      case 'schemaIssues':\n        out[name] = each((x, path) => scrubSchemaIssue(x, r, path))\n        break\n      case 'error':\n        out[name] = custom(r, p, v) ?? scrubError(v)\n        break\n    }\n  }\n  return out\n}\n\n/** Message text (§8.2): development builds, or production via `@datakable/core/messages`. */\nexport const redactionMessages: DiagnosticMessages<'DK_UNSAFE_REDACTION'> = {\n  DK_UNSAFE_REDACTION: {\n    problem: (d) => `diagnostics.redact is '${d.level}' in a production build`,\n    impact: () =>\n      'raw row keys and cell values (except sensitive columns) reach onDiagnostic, ' +\n      'getDiagnostics() and the console',\n    fix: () => [\n      \"remove diagnostics.redact in production (the default is 'safe')\",\n      \"or use 'keys' to log raw row keys without cell values\",\n      'mark personal-data columns with sensitive: true so they are never logged',\n    ],\n  },\n}\n\n/** `'full'` in a production build (§8.2: \"warns if enabled in production\"). Emitted by the hub. */\nexport const DK_UNSAFE_REDACTION = defineDiagnostic(\n  {\n    code: 'DK_UNSAFE_REDACTION',\n    level: 'warn',\n    where: () => ({ kind: 'option', path: 'diagnostics.redact' }),\n  },\n  (process.env.NODE_ENV !== \"production\") && redactionMessages.DK_UNSAFE_REDACTION,\n)\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA0D;AAwDnD,IAAM,YAAY;AAClB,IAAM,WAAW;AAExB,IAAM,SAA4B,CAAC,QAAQ,QAAQ,MAAM;AACzD,IAAM,QAA6B,oBAAI,IAAI;AAEpC,SAAS,iBACd,QACA,KACU;AACV,QAAM,IAAsB,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAK,UAAU,CAAC;AACzF,QAAM,QAAQ,EAAE,UAAU,MAAM,SAAS;AACzC,QAAM,OAAO,EAAE,mBAAmB;AAClC,SAAO;AAAA;AAAA,IAEL,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IACxC,QAAQ,EAAE;AAAA,IACV,WAAW,OAAO,IAAI,IAAI,IAAI,IAAI;AAAA,IAClC,iBAAiB,EAAE,kBAAkB,KAAK;AAAA,EAC5C;AACF;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC7B;AACA,SAAO,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACrD;AAGO,SAAS,cAAc,GAAoB;AAChD,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,OAAO,MAAM,SAAU,QAAO,UAAU,EAAE,MAAM;AACpD,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,MAAM,CAAC,IAAI,gBAAgB;AACpE,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,SAAS,EAAE,MAAM;AAC9C,MAAI,aAAa,KAAM,QAAO;AAC9B,SAAO,OAAO;AAChB;AAEA,SAAS,OAAO,GAAa,MAAc,OAAoC;AAC7E,MAAI,CAAC,EAAE,OAAQ,QAAO;AACtB,MAAI;AACF,WAAO,EAAE,OAAO,MAAM,KAAK;AAAA,EAC7B,SAAS,GAAG;AACV,MAAE,UAAU,CAAC;AACb,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,GAAa,MAAc,KAAuB;AAEnE,MAAI,EAAE,gBAAiB,QAAO,WAAW,GAAG;AAC5C,QAAM,IAAI,OAAO,GAAG,MAAM,GAAG;AAC7B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,IAAI;AAChD;AAEA,SAAS,YAAY,GAAa,MAAc,OAAgB,QAA0B;AACxF,MAAI,WAAW,UAAa,EAAE,UAAU,IAAI,MAAM,EAAG,QAAO;AAC5D,QAAM,IAAI,OAAO,GAAG,MAAM,KAAK;AAC/B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,QAAQ,cAAc,KAAK;AACzD;AAKA,SAAS,UAAU,MAAqC;AACtD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,IAAI,CAAC,MAAM,OAAO,OAAO,MAAM,YAAY,MAAM,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG;AAC1F;AAEA,SAAS,eAAe,GAAa,MAAuB;AAC1D,MAAI,EAAE,UAAU,SAAS,EAAG,QAAO;AACnC,aAAW,OAAO,EAAE,UAAW,KAAI,SAAS,OAAO,KAAK,WAAW,GAAG,GAAG,GAAG,EAAG,QAAO;AACtF,SAAO;AACT;AAMO,SAAS,iBACd,OACA,GACA,YAAY,SACuB;AACnC,QAAM,IAAK,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,CAAC;AAIlE,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,EAAE,IAAI;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,MAAM,oBAAoB,QAAQ,QAAQ;AAChD,MAAI,eAAe,GAAG,IAAI,EAAG,QAAO,EAAE,MAAM,SAAS,IAAI;AACzD,QAAM,IAAI,OAAO,GAAG,WAAW,EAAE,OAAO;AACxC,MAAI,MAAM,OAAW,QAAO,EAAE,MAAM,SAAS,EAAE;AAC/C,SAAO,EAAE,MAAM,SAAS,EAAE,UAAU,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,IAAI;AAChG;AAMO,SAAS,WAAW,GAAoB;AAC7C,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO,OAAO;AACvD,MAAI;AACF,UAAM,EAAE,MAAM,KAAK,IAAI;AACvB,UAAM,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO;AACpD,WAAO,OAAO,SAAS,YAAY,OAAO,SAAS,WAAW,GAAG,CAAC,KAAK,IAAI,MAAM;AAAA,EACnF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,eAAe,OAAiB,GAAuB;AACrE,MAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,OAAW,QAAO;AAC5D,QAAM,MAAM,UAAU,GAAG,aAAa,MAAM,GAAG;AAC/C,SAAO,EAAE,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG,EAAE;AAC7F;AAGO,SAAS,cACd,SACA,QACA,OACA,GACyB;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAA+B,EAAE,GAAG,QAAQ;AAClD,QAAM,SACJ,OAAO,QAAQ,WAAW,WACtB,QAAQ,SACR,MAAM,SAAS,WACb,MAAM,KACN;AACR,aAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI,SAAS,UAAa,EAAE,QAAQ,SAAU;AAC9C,UAAM,IAAI,QAAQ,IAAI;AACtB,UAAM,IAAI,WAAW,IAAI;AACzB,UAAM,OAAO,CAAC,MACZ,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAChE,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,YAAI,IAAI,IAAI,UAAU,GAAG,GAAG,CAAC;AAC7B;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,MAAM,CAAC,CAAC;AACnD;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,YAAY,GAAG,GAAG,GAAG,MAAM;AACvC;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,GAAG,GAAG,IAAI,CAAC;AAC1D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,WAAW,CAAC;AAC3C;AAAA,IACJ;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,oBAA+D;AAAA,EAC1E,qBAAqB;AAAA,IACnB,SAAS,CAAC,MAAM,0BAA0B,EAAE,KAAK;AAAA,IACjD,QAAQ,MACN;AAAA,IAEF,KAAK,MAAM;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGO,IAAM,0BAAsB;AAAA,EACjC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,qBAAqB;AAAA,EAC7D;AAAA,EACC,QAAQ,IAAI,aAAa,gBAAiB,kBAAkB;AAC/D;","names":[]}
+{"version":3,"sources":["../../src/diagnostics/redact.ts"],"sourcesContent":["import { type DiagnosticMessages, defineDiagnostic } from './catalog'\nimport './process-guard'\nimport type { Location } from './types'\n\ndeclare module './catalog' {\n  interface DiagnosticCatalog {\n    DK_UNSAFE_REDACTION: { level: 'full' }\n  }\n}\n\n/**\n * Redaction levels (§8.2). `'safe'`: paths, indices, counts, value types, hashed row keys\n * (production default). `'keys'`: + raw row keys (development default). `'full'`: + row values.\n */\nexport type RedactLevel = 'safe' | 'keys' | 'full'\n\n/**\n * Custom rule: return a string to log instead of `value`, or `undefined` for the built-in policy.\n * `path` names the field, e.g. `where.key`, `details.value`, `details.keys.2`, `details.issues.0`.\n * Sensitive columns never reach it.\n */\nexport type RedactFn = (path: string, value: unknown) => string | undefined\n\nexport interface RedactionOptions {\n  /** Default `'keys'` in development, `'safe'` in production. */\n  level?: RedactLevel\n  redact?: RedactFn\n  /** Ids / keys of `sensitive: true` columns: never logged at any level. */\n  sensitiveColumns?: () => Iterable<string>\n  /** The `rowKey` path is, is inside or contains a sensitive column: keys hashed at every level. */\n  rowKeySensitive?: () => boolean\n}\n\n/**\n * Which detail fields of a diagnostic carry user data, declared on its `defineDiagnostic` entry.\n * Undeclared fields are logged as-is, so they must hold only DataKable-safe data (paths, ids,\n * indices, counts). Text builders receive the redacted values: treat these fields as opaque and\n * only interpolate them.\n *\n * - `rowKey` / `rowKeys`: a row key / an array of them (hashed under `'safe'`).\n * - `value` / `values`: a cell value / an array of them (type summary unless `'full'`). The column\n *   is `details.column` when it is a string, else the `where` column id.\n * - `schemaIssues`: one Standard Schema issue or an array of them (`scrubSchemaIssue`).\n * - `error`: a thrown value, e.g. a fetcher error (`scrubError`).\n */\nexport type RedactField = 'rowKey' | 'rowKeys' | 'value' | 'values' | 'schemaIssues' | 'error'\n\n/** A resolved policy, built once per emit. */\nexport interface Redactor {\n  level: RedactLevel\n  custom: RedactFn | undefined\n  sensitive: ReadonlySet<string>\n  rowKeySensitive: boolean\n  /** Called when the custom rule throws; the value is logged as `[redacted]`. */\n  onError?: (error: unknown) => void\n}\n\nexport const SENSITIVE = '[sensitive]'\nexport const REDACTED = '[redacted]'\n\nconst LEVELS: readonly string[] = ['safe', 'keys', 'full']\nconst EMPTY: ReadonlySet<string> = new Set()\n\nexport function resolveRedaction(\n  option: RedactLevel | RedactionOptions | undefined,\n  dev: boolean,\n): Redactor {\n  const o: RedactionOptions = typeof option === 'string' ? { level: option } : (option ?? {})\n  const level = o.level ?? (dev ? 'keys' : 'safe')\n  const cols = o.sensitiveColumns?.()\n  return {\n    // An unknown level gets the strictest policy; validating the option is optionValidator's job.\n    level: LEVELS.includes(level) ? level : 'safe',\n    custom: o.redact,\n    sensitive: cols ? new Set(cols) : EMPTY,\n    rowKeySensitive: o.rowKeySensitive?.() ?? false,\n  }\n}\n\n/** Short 32-bit FNV-1a hash of `String(key)` (UTF-16 code units), as `h:xxxxxxxx`. */\nexport function hashRowKey(key: unknown): string {\n  const s = String(key)\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193)\n  }\n  return `h:${(h >>> 0).toString(16).padStart(8, '0')}`\n}\n\n/** The value's type, never its contents: `string(12)`, `number`, `array(3)`, `date`, … */\nexport function describeValue(v: unknown): string {\n  if (v === null) return 'null'\n  if (typeof v === 'string') return `string(${v.length})`\n  if (typeof v === 'number') return Number.isNaN(v) ? 'number(NaN)' : 'number'\n  if (Array.isArray(v)) return `array(${v.length})`\n  if (v instanceof Date) return 'date'\n  return typeof v\n}\n\nfunction custom(r: Redactor, path: string, value: unknown): string | undefined {\n  if (!r.custom) return undefined\n  try {\n    return r.custom(path, value)\n  } catch (e) {\n    r.onError?.(e)\n    return REDACTED\n  }\n}\n\nfunction redactKey(r: Redactor, path: string, key: unknown): unknown {\n  // A sensitive rowKey column wins over the custom rule and the level.\n  if (r.rowKeySensitive) return hashRowKey(key)\n  const c = custom(r, path, key)\n  if (c !== undefined) return c\n  return r.level === 'safe' ? hashRowKey(key) : key\n}\n\nfunction redactValue(r: Redactor, path: string, value: unknown, column?: string): unknown {\n  if (column !== undefined && underSensitive(r, column)) return SENSITIVE\n  const c = custom(r, path, value)\n  if (c !== undefined) return c\n  return r.level === 'full' ? value : describeValue(value)\n}\n\ntype IssuePath = ReadonlyArray<PropertyKey | { key: PropertyKey }>\n\n/** Joins a Standard Schema issue path: `['user', 0, { key: 'email' }]` → `user.0.email`. */\nfunction issuePath(path: IssuePath | undefined): string {\n  if (!path) return ''\n  return path.map((s) => String(typeof s === 'object' && s !== null ? s.key : s)).join('.')\n}\n\n/** `a` and `b` are the same path or one is inside the other (`contact` ↔ `contact.email`). */\nexport const pathsOverlap = (a: string, b: string): boolean =>\n  a === b || a.startsWith(`${b}.`) || b.startsWith(`${a}.`)\n\n/** `path` is, is inside or contains a sensitive column (#45). */\nfunction underSensitive(r: Redactor, path: string): boolean {\n  for (const col of r.sensitive) if (pathsOverlap(path, col)) return true\n  return false\n}\n\n/**\n * A schema issue as `{ path, message }`. Validators embed received values in their messages, so\n * under `'safe'` / `'keys'` the message is DataKable's own text. So it is at every level when the\n * table has a sensitive column: any message (a root-level refinement, another field's) may embed\n * its value (#46).\n */\nexport function scrubSchemaIssue(\n  issue: unknown,\n  r: Redactor,\n  fieldPath = 'issue',\n): { path: string; message: string } {\n  const i = (typeof issue === 'object' && issue !== null ? issue : {}) as {\n    message?: unknown\n    path?: IssuePath\n  }\n  let path: string\n  try {\n    path = issuePath(i.path)\n  } catch {\n    path = ''\n  }\n  const own = `invalid value at ${path || '(root)'}`\n  if (r.sensitive.size > 0) return { path, message: own }\n  const c = custom(r, fieldPath, i.message)\n  if (c !== undefined) return { path, message: c }\n  return { path, message: r.level === 'full' && typeof i.message === 'string' ? i.message : own }\n}\n\n/**\n * A thrown value as `error.name` + `code` only (fetcher errors embed URLs, tokens, payloads). The\n * full error belongs in `context.cause`, which reaches `onDiagnostic` only.\n */\nexport function scrubError(e: unknown): string {\n  if (typeof e !== 'object' || e === null) return typeof e\n  try {\n    const { name, code } = e as { name?: unknown; code?: unknown }\n    const n = typeof name === 'string' && name ? name : 'object'\n    return typeof code === 'string' || typeof code === 'number' ? `${n} (${code})` : n\n  } catch {\n    return 'object'\n  }\n}\n\n/** Hashes / passes through `where.key` per the policy; other locations hold no user data. */\nexport function redactLocation(where: Location, r: Redactor): Location {\n  if (where.kind !== 'row' || where.key === undefined) return where\n  const key = redactKey(r, 'where.key', where.key)\n  return { kind: 'row', index: where.index, key: typeof key === 'string' ? key : String(key) }\n}\n\n/** A shallow copy of `details` with the declared fields redacted; the input is never mutated. */\nexport function redactDetails(\n  details: Record<string, unknown>,\n  fields: Readonly<Record<string, RedactField | undefined>> | undefined,\n  where: Location,\n  r: Redactor,\n): Record<string, unknown> {\n  if (!fields) return details\n  const out: Record<string, unknown> = { ...details }\n  const column =\n    typeof details.column === 'string'\n      ? details.column\n      : where.kind === 'column'\n        ? where.id\n        : undefined\n  for (const name of Object.keys(fields)) {\n    const kind = fields[name]\n    if (kind === undefined || !(name in details)) continue\n    const v = details[name]\n    const p = `details.${name}`\n    const each = (f: (x: unknown, path: string) => unknown) =>\n      Array.isArray(v) ? v.map((x, i) => f(x, `${p}.${i}`)) : f(v, p)\n    switch (kind) {\n      case 'rowKey':\n        out[name] = redactKey(r, p, v)\n        break\n      case 'rowKeys':\n        out[name] = each((x, path) => redactKey(r, path, x))\n        break\n      case 'value':\n        out[name] = redactValue(r, p, v, column)\n        break\n      case 'values':\n        out[name] = each((x, path) => redactValue(r, path, x, column))\n        break\n      case 'schemaIssues':\n        out[name] = each((x, path) => scrubSchemaIssue(x, r, path))\n        break\n      case 'error':\n        out[name] = custom(r, p, v) ?? scrubError(v)\n        break\n    }\n  }\n  return out\n}\n\n/** Message text (§8.2): development builds, or production via `@datakable/core/messages`. */\nexport const redactionMessages: DiagnosticMessages<'DK_UNSAFE_REDACTION'> = {\n  DK_UNSAFE_REDACTION: {\n    problem: (d) => `diagnostics.redact is '${d.level}' in a production build`,\n    impact: () =>\n      'raw row keys and cell values (except sensitive columns) reach onDiagnostic, ' +\n      'getDiagnostics() and the console',\n    fix: () => [\n      \"remove diagnostics.redact in production (the default is 'safe')\",\n      \"or use 'keys' to log raw row keys without cell values\",\n      'mark personal-data columns with sensitive: true so they are never logged',\n    ],\n  },\n}\n\n/** `'full'` in a production build (§8.2: \"warns if enabled in production\"). Emitted by the hub. */\nexport const DK_UNSAFE_REDACTION = defineDiagnostic(\n  {\n    code: 'DK_UNSAFE_REDACTION',\n    level: 'warn',\n    where: () => ({ kind: 'option', path: 'diagnostics.redact' }),\n  },\n  (process.env.NODE_ENV !== \"production\") && redactionMessages.DK_UNSAFE_REDACTION,\n)\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,qBAA0D;AAC1D,2BAAO;AAwDA,IAAM,YAAY;AAClB,IAAM,WAAW;AAExB,IAAM,SAA4B,CAAC,QAAQ,QAAQ,MAAM;AACzD,IAAM,QAA6B,oBAAI,IAAI;AAEpC,SAAS,iBACd,QACA,KACU;AACV,QAAM,IAAsB,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAK,UAAU,CAAC;AACzF,QAAM,QAAQ,EAAE,UAAU,MAAM,SAAS;AACzC,QAAM,OAAO,EAAE,mBAAmB;AAClC,SAAO;AAAA;AAAA,IAEL,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IACxC,QAAQ,EAAE;AAAA,IACV,WAAW,OAAO,IAAI,IAAI,IAAI,IAAI;AAAA,IAClC,iBAAiB,EAAE,kBAAkB,KAAK;AAAA,EAC5C;AACF;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC7B;AACA,SAAO,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACrD;AAGO,SAAS,cAAc,GAAoB;AAChD,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,OAAO,MAAM,SAAU,QAAO,UAAU,EAAE,MAAM;AACpD,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,MAAM,CAAC,IAAI,gBAAgB;AACpE,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,SAAS,EAAE,MAAM;AAC9C,MAAI,aAAa,KAAM,QAAO;AAC9B,SAAO,OAAO;AAChB;AAEA,SAAS,OAAO,GAAa,MAAc,OAAoC;AAC7E,MAAI,CAAC,EAAE,OAAQ,QAAO;AACtB,MAAI;AACF,WAAO,EAAE,OAAO,MAAM,KAAK;AAAA,EAC7B,SAAS,GAAG;AACV,MAAE,UAAU,CAAC;AACb,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,GAAa,MAAc,KAAuB;AAEnE,MAAI,EAAE,gBAAiB,QAAO,WAAW,GAAG;AAC5C,QAAM,IAAI,OAAO,GAAG,MAAM,GAAG;AAC7B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,IAAI;AAChD;AAEA,SAAS,YAAY,GAAa,MAAc,OAAgB,QAA0B;AACxF,MAAI,WAAW,UAAa,eAAe,GAAG,MAAM,EAAG,QAAO;AAC9D,QAAM,IAAI,OAAO,GAAG,MAAM,KAAK;AAC/B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,QAAQ,cAAc,KAAK;AACzD;AAKA,SAAS,UAAU,MAAqC;AACtD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,IAAI,CAAC,MAAM,OAAO,OAAO,MAAM,YAAY,MAAM,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG;AAC1F;AAGO,IAAM,eAAe,CAAC,GAAW,MACtC,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG;AAG1D,SAAS,eAAe,GAAa,MAAuB;AAC1D,aAAW,OAAO,EAAE,UAAW,KAAI,aAAa,MAAM,GAAG,EAAG,QAAO;AACnE,SAAO;AACT;AAQO,SAAS,iBACd,OACA,GACA,YAAY,SACuB;AACnC,QAAM,IAAK,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,CAAC;AAIlE,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,EAAE,IAAI;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,MAAM,oBAAoB,QAAQ,QAAQ;AAChD,MAAI,EAAE,UAAU,OAAO,EAAG,QAAO,EAAE,MAAM,SAAS,IAAI;AACtD,QAAM,IAAI,OAAO,GAAG,WAAW,EAAE,OAAO;AACxC,MAAI,MAAM,OAAW,QAAO,EAAE,MAAM,SAAS,EAAE;AAC/C,SAAO,EAAE,MAAM,SAAS,EAAE,UAAU,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,IAAI;AAChG;AAMO,SAAS,WAAW,GAAoB;AAC7C,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO,OAAO;AACvD,MAAI;AACF,UAAM,EAAE,MAAM,KAAK,IAAI;AACvB,UAAM,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO;AACpD,WAAO,OAAO,SAAS,YAAY,OAAO,SAAS,WAAW,GAAG,CAAC,KAAK,IAAI,MAAM;AAAA,EACnF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,eAAe,OAAiB,GAAuB;AACrE,MAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,OAAW,QAAO;AAC5D,QAAM,MAAM,UAAU,GAAG,aAAa,MAAM,GAAG;AAC/C,SAAO,EAAE,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG,EAAE;AAC7F;AAGO,SAAS,cACd,SACA,QACA,OACA,GACyB;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAA+B,EAAE,GAAG,QAAQ;AAClD,QAAM,SACJ,OAAO,QAAQ,WAAW,WACtB,QAAQ,SACR,MAAM,SAAS,WACb,MAAM,KACN;AACR,aAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI,SAAS,UAAa,EAAE,QAAQ,SAAU;AAC9C,UAAM,IAAI,QAAQ,IAAI;AACtB,UAAM,IAAI,WAAW,IAAI;AACzB,UAAM,OAAO,CAAC,MACZ,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAChE,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,YAAI,IAAI,IAAI,UAAU,GAAG,GAAG,CAAC;AAC7B;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,MAAM,CAAC,CAAC;AACnD;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,YAAY,GAAG,GAAG,GAAG,MAAM;AACvC;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,GAAG,GAAG,IAAI,CAAC;AAC1D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,WAAW,CAAC;AAC3C;AAAA,IACJ;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,oBAA+D;AAAA,EAC1E,qBAAqB;AAAA,IACnB,SAAS,CAAC,MAAM,0BAA0B,EAAE,KAAK;AAAA,IACjD,QAAQ,MACN;AAAA,IAEF,KAAK,MAAM;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGO,IAAM,0BAAsB;AAAA,EACjC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,qBAAqB;AAAA,EAC7D;AAAA,EACC,QAAQ,IAAI,aAAa,gBAAiB,kBAAkB;AAC/D;","names":[]}

package/dist/diagnostics/redact.js

@@ -1,5 +1,6 @@
 // src/diagnostics/redact.ts
 import { defineDiagnostic } from "./catalog.js";
+import "./process-guard.js";
 var SENSITIVE = "[sensitive]";
 var REDACTED = "[redacted]";
 var LEVELS = ["safe", "keys", "full"];
@@ -49,7 +50,7 @@ function redactKey(r, path, key) {
   return r.level === "safe" ? hashRowKey(key) : key;
 }
 function redactValue(r, path, value, column) {
-  if (column !== void 0 && r.sensitive.has(column)) return SENSITIVE;
+  if (column !== void 0 && underSensitive(r, column)) return SENSITIVE;
   const c = custom(r, path, value);
   if (c !== void 0) return c;
   return r.level === "full" ? value : describeValue(value);
@@ -58,9 +59,9 @@ function issuePath(path) {
   if (!path) return "";
   return path.map((s) => String(typeof s === "object" && s !== null ? s.key : s)).join(".");
 }
+var pathsOverlap = (a, b) => a === b || a.startsWith(`${b}.`) || b.startsWith(`${a}.`);
 function underSensitive(r, path) {
-  if (r.sensitive.size === 0) return false;
-  for (const col of r.sensitive) if (path === col || path.startsWith(`${col}.`)) return true;
+  for (const col of r.sensitive) if (pathsOverlap(path, col)) return true;
   return false;
 }
 function scrubSchemaIssue(issue, r, fieldPath = "issue") {
@@ -72,7 +73,7 @@ function scrubSchemaIssue(issue, r, fieldPath = "issue") {
     path = "";
   }
   const own = `invalid value at ${path || "(root)"}`;
-  if (underSensitive(r, path)) return { path, message: own };
+  if (r.sensitive.size > 0) return { path, message: own };
   const c = custom(r, fieldPath, i.message);
   if (c !== void 0) return { path, message: c };
   return { path, message: r.level === "full" && typeof i.message === "string" ? i.message : own };
@@ -150,6 +151,7 @@ export {
   SENSITIVE,
   describeValue,
   hashRowKey,
+  pathsOverlap,
   redactDetails,
   redactLocation,
   redactionMessages,

package/dist/diagnostics/redact.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/diagnostics/redact.ts"],"sourcesContent":["import { type DiagnosticMessages, defineDiagnostic } from './catalog'\nimport type { Location } from './types'\n\ndeclare module './catalog' {\n  interface DiagnosticCatalog {\n    DK_UNSAFE_REDACTION: { level: 'full' }\n  }\n}\n\n/**\n * Redaction levels (§8.2). `'safe'`: paths, indices, counts, value types, hashed row keys\n * (production default). `'keys'`: + raw row keys (development default). `'full'`: + row values.\n */\nexport type RedactLevel = 'safe' | 'keys' | 'full'\n\n/**\n * Custom rule: return a string to log instead of `value`, or `undefined` for the built-in policy.\n * `path` names the field, e.g. `where.key`, `details.value`, `details.keys.2`, `details.issues.0`.\n * Sensitive columns never reach it.\n */\nexport type RedactFn = (path: string, value: unknown) => string | undefined\n\nexport interface RedactionOptions {\n  /** Default `'keys'` in development, `'safe'` in production. */\n  level?: RedactLevel\n  redact?: RedactFn\n  /** Ids / keys of `sensitive: true` columns: never logged at any level. */\n  sensitiveColumns?: () => Iterable<string>\n  /** The `rowKey` column is sensitive: row keys are hashed at every level. */\n  rowKeySensitive?: () => boolean\n}\n\n/**\n * Which detail fields of a diagnostic carry user data, declared on its `defineDiagnostic` entry.\n * Undeclared fields are logged as-is, so they must hold only DataKable-safe data (paths, ids,\n * indices, counts). Text builders receive the redacted values: treat these fields as opaque and\n * only interpolate them.\n *\n * - `rowKey` / `rowKeys`: a row key / an array of them (hashed under `'safe'`).\n * - `value` / `values`: a cell value / an array of them (type summary unless `'full'`). The column\n *   is `details.column` when it is a string, else the `where` column id.\n * - `schemaIssues`: one Standard Schema issue or an array of them (`scrubSchemaIssue`).\n * - `error`: a thrown value, e.g. a fetcher error (`scrubError`).\n */\nexport type RedactField = 'rowKey' | 'rowKeys' | 'value' | 'values' | 'schemaIssues' | 'error'\n\n/** A resolved policy, built once per emit. */\nexport interface Redactor {\n  level: RedactLevel\n  custom: RedactFn | undefined\n  sensitive: ReadonlySet<string>\n  rowKeySensitive: boolean\n  /** Called when the custom rule throws; the value is logged as `[redacted]`. */\n  onError?: (error: unknown) => void\n}\n\nexport const SENSITIVE = '[sensitive]'\nexport const REDACTED = '[redacted]'\n\nconst LEVELS: readonly string[] = ['safe', 'keys', 'full']\nconst EMPTY: ReadonlySet<string> = new Set()\n\nexport function resolveRedaction(\n  option: RedactLevel | RedactionOptions | undefined,\n  dev: boolean,\n): Redactor {\n  const o: RedactionOptions = typeof option === 'string' ? { level: option } : (option ?? {})\n  const level = o.level ?? (dev ? 'keys' : 'safe')\n  const cols = o.sensitiveColumns?.()\n  return {\n    // An unknown level gets the strictest policy; validating the option is optionValidator's job.\n    level: LEVELS.includes(level) ? level : 'safe',\n    custom: o.redact,\n    sensitive: cols ? new Set(cols) : EMPTY,\n    rowKeySensitive: o.rowKeySensitive?.() ?? false,\n  }\n}\n\n/** Short 32-bit FNV-1a hash of `String(key)` (UTF-16 code units), as `h:xxxxxxxx`. */\nexport function hashRowKey(key: unknown): string {\n  const s = String(key)\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193)\n  }\n  return `h:${(h >>> 0).toString(16).padStart(8, '0')}`\n}\n\n/** The value's type, never its contents: `string(12)`, `number`, `array(3)`, `date`, … */\nexport function describeValue(v: unknown): string {\n  if (v === null) return 'null'\n  if (typeof v === 'string') return `string(${v.length})`\n  if (typeof v === 'number') return Number.isNaN(v) ? 'number(NaN)' : 'number'\n  if (Array.isArray(v)) return `array(${v.length})`\n  if (v instanceof Date) return 'date'\n  return typeof v\n}\n\nfunction custom(r: Redactor, path: string, value: unknown): string | undefined {\n  if (!r.custom) return undefined\n  try {\n    return r.custom(path, value)\n  } catch (e) {\n    r.onError?.(e)\n    return REDACTED\n  }\n}\n\nfunction redactKey(r: Redactor, path: string, key: unknown): unknown {\n  // A sensitive rowKey column wins over the custom rule and the level.\n  if (r.rowKeySensitive) return hashRowKey(key)\n  const c = custom(r, path, key)\n  if (c !== undefined) return c\n  return r.level === 'safe' ? hashRowKey(key) : key\n}\n\nfunction redactValue(r: Redactor, path: string, value: unknown, column?: string): unknown {\n  if (column !== undefined && r.sensitive.has(column)) return SENSITIVE\n  const c = custom(r, path, value)\n  if (c !== undefined) return c\n  return r.level === 'full' ? value : describeValue(value)\n}\n\ntype IssuePath = ReadonlyArray<PropertyKey | { key: PropertyKey }>\n\n/** Joins a Standard Schema issue path: `['user', 0, { key: 'email' }]` → `user.0.email`. */\nfunction issuePath(path: IssuePath | undefined): string {\n  if (!path) return ''\n  return path.map((s) => String(typeof s === 'object' && s !== null ? s.key : s)).join('.')\n}\n\nfunction underSensitive(r: Redactor, path: string): boolean {\n  if (r.sensitive.size === 0) return false\n  for (const col of r.sensitive) if (path === col || path.startsWith(`${col}.`)) return true\n  return false\n}\n\n/**\n * A schema issue as `{ path, message }`. Validators embed received values in their messages, so\n * under `'safe'` / `'keys'` (and for sensitive columns) the message is DataKable's own text.\n */\nexport function scrubSchemaIssue(\n  issue: unknown,\n  r: Redactor,\n  fieldPath = 'issue',\n): { path: string; message: string } {\n  const i = (typeof issue === 'object' && issue !== null ? issue : {}) as {\n    message?: unknown\n    path?: IssuePath\n  }\n  let path: string\n  try {\n    path = issuePath(i.path)\n  } catch {\n    path = ''\n  }\n  const own = `invalid value at ${path || '(root)'}`\n  if (underSensitive(r, path)) return { path, message: own }\n  const c = custom(r, fieldPath, i.message)\n  if (c !== undefined) return { path, message: c }\n  return { path, message: r.level === 'full' && typeof i.message === 'string' ? i.message : own }\n}\n\n/**\n * A thrown value as `error.name` + `code` only (fetcher errors embed URLs, tokens, payloads). The\n * full error belongs in `context.cause`, which reaches `onDiagnostic` only.\n */\nexport function scrubError(e: unknown): string {\n  if (typeof e !== 'object' || e === null) return typeof e\n  try {\n    const { name, code } = e as { name?: unknown; code?: unknown }\n    const n = typeof name === 'string' && name ? name : 'object'\n    return typeof code === 'string' || typeof code === 'number' ? `${n} (${code})` : n\n  } catch {\n    return 'object'\n  }\n}\n\n/** Hashes / passes through `where.key` per the policy; other locations hold no user data. */\nexport function redactLocation(where: Location, r: Redactor): Location {\n  if (where.kind !== 'row' || where.key === undefined) return where\n  const key = redactKey(r, 'where.key', where.key)\n  return { kind: 'row', index: where.index, key: typeof key === 'string' ? key : String(key) }\n}\n\n/** A shallow copy of `details` with the declared fields redacted; the input is never mutated. */\nexport function redactDetails(\n  details: Record<string, unknown>,\n  fields: Readonly<Record<string, RedactField | undefined>> | undefined,\n  where: Location,\n  r: Redactor,\n): Record<string, unknown> {\n  if (!fields) return details\n  const out: Record<string, unknown> = { ...details }\n  const column =\n    typeof details.column === 'string'\n      ? details.column\n      : where.kind === 'column'\n        ? where.id\n        : undefined\n  for (const name of Object.keys(fields)) {\n    const kind = fields[name]\n    if (kind === undefined || !(name in details)) continue\n    const v = details[name]\n    const p = `details.${name}`\n    const each = (f: (x: unknown, path: string) => unknown) =>\n      Array.isArray(v) ? v.map((x, i) => f(x, `${p}.${i}`)) : f(v, p)\n    switch (kind) {\n      case 'rowKey':\n        out[name] = redactKey(r, p, v)\n        break\n      case 'rowKeys':\n        out[name] = each((x, path) => redactKey(r, path, x))\n        break\n      case 'value':\n        out[name] = redactValue(r, p, v, column)\n        break\n      case 'values':\n        out[name] = each((x, path) => redactValue(r, path, x, column))\n        break\n      case 'schemaIssues':\n        out[name] = each((x, path) => scrubSchemaIssue(x, r, path))\n        break\n      case 'error':\n        out[name] = custom(r, p, v) ?? scrubError(v)\n        break\n    }\n  }\n  return out\n}\n\n/** Message text (§8.2): development builds, or production via `@datakable/core/messages`. */\nexport const redactionMessages: DiagnosticMessages<'DK_UNSAFE_REDACTION'> = {\n  DK_UNSAFE_REDACTION: {\n    problem: (d) => `diagnostics.redact is '${d.level}' in a production build`,\n    impact: () =>\n      'raw row keys and cell values (except sensitive columns) reach onDiagnostic, ' +\n      'getDiagnostics() and the console',\n    fix: () => [\n      \"remove diagnostics.redact in production (the default is 'safe')\",\n      \"or use 'keys' to log raw row keys without cell values\",\n      'mark personal-data columns with sensitive: true so they are never logged',\n    ],\n  },\n}\n\n/** `'full'` in a production build (§8.2: \"warns if enabled in production\"). Emitted by the hub. */\nexport const DK_UNSAFE_REDACTION = defineDiagnostic(\n  {\n    code: 'DK_UNSAFE_REDACTION',\n    level: 'warn',\n    where: () => ({ kind: 'option', path: 'diagnostics.redact' }),\n  },\n  (process.env.NODE_ENV !== \"production\") && redactionMessages.DK_UNSAFE_REDACTION,\n)\n"],"mappings":";AAAA,SAAkC,wBAAwB;AAwDnD,IAAM,YAAY;AAClB,IAAM,WAAW;AAExB,IAAM,SAA4B,CAAC,QAAQ,QAAQ,MAAM;AACzD,IAAM,QAA6B,oBAAI,IAAI;AAEpC,SAAS,iBACd,QACA,KACU;AACV,QAAM,IAAsB,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAK,UAAU,CAAC;AACzF,QAAM,QAAQ,EAAE,UAAU,MAAM,SAAS;AACzC,QAAM,OAAO,EAAE,mBAAmB;AAClC,SAAO;AAAA;AAAA,IAEL,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IACxC,QAAQ,EAAE;AAAA,IACV,WAAW,OAAO,IAAI,IAAI,IAAI,IAAI;AAAA,IAClC,iBAAiB,EAAE,kBAAkB,KAAK;AAAA,EAC5C;AACF;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC7B;AACA,SAAO,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACrD;AAGO,SAAS,cAAc,GAAoB;AAChD,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,OAAO,MAAM,SAAU,QAAO,UAAU,EAAE,MAAM;AACpD,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,MAAM,CAAC,IAAI,gBAAgB;AACpE,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,SAAS,EAAE,MAAM;AAC9C,MAAI,aAAa,KAAM,QAAO;AAC9B,SAAO,OAAO;AAChB;AAEA,SAAS,OAAO,GAAa,MAAc,OAAoC;AAC7E,MAAI,CAAC,EAAE,OAAQ,QAAO;AACtB,MAAI;AACF,WAAO,EAAE,OAAO,MAAM,KAAK;AAAA,EAC7B,SAAS,GAAG;AACV,MAAE,UAAU,CAAC;AACb,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,GAAa,MAAc,KAAuB;AAEnE,MAAI,EAAE,gBAAiB,QAAO,WAAW,GAAG;AAC5C,QAAM,IAAI,OAAO,GAAG,MAAM,GAAG;AAC7B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,IAAI;AAChD;AAEA,SAAS,YAAY,GAAa,MAAc,OAAgB,QAA0B;AACxF,MAAI,WAAW,UAAa,EAAE,UAAU,IAAI,MAAM,EAAG,QAAO;AAC5D,QAAM,IAAI,OAAO,GAAG,MAAM,KAAK;AAC/B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,QAAQ,cAAc,KAAK;AACzD;AAKA,SAAS,UAAU,MAAqC;AACtD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,IAAI,CAAC,MAAM,OAAO,OAAO,MAAM,YAAY,MAAM,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG;AAC1F;AAEA,SAAS,eAAe,GAAa,MAAuB;AAC1D,MAAI,EAAE,UAAU,SAAS,EAAG,QAAO;AACnC,aAAW,OAAO,EAAE,UAAW,KAAI,SAAS,OAAO,KAAK,WAAW,GAAG,GAAG,GAAG,EAAG,QAAO;AACtF,SAAO;AACT;AAMO,SAAS,iBACd,OACA,GACA,YAAY,SACuB;AACnC,QAAM,IAAK,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,CAAC;AAIlE,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,EAAE,IAAI;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,MAAM,oBAAoB,QAAQ,QAAQ;AAChD,MAAI,eAAe,GAAG,IAAI,EAAG,QAAO,EAAE,MAAM,SAAS,IAAI;AACzD,QAAM,IAAI,OAAO,GAAG,WAAW,EAAE,OAAO;AACxC,MAAI,MAAM,OAAW,QAAO,EAAE,MAAM,SAAS,EAAE;AAC/C,SAAO,EAAE,MAAM,SAAS,EAAE,UAAU,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,IAAI;AAChG;AAMO,SAAS,WAAW,GAAoB;AAC7C,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO,OAAO;AACvD,MAAI;AACF,UAAM,EAAE,MAAM,KAAK,IAAI;AACvB,UAAM,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO;AACpD,WAAO,OAAO,SAAS,YAAY,OAAO,SAAS,WAAW,GAAG,CAAC,KAAK,IAAI,MAAM;AAAA,EACnF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,eAAe,OAAiB,GAAuB;AACrE,MAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,OAAW,QAAO;AAC5D,QAAM,MAAM,UAAU,GAAG,aAAa,MAAM,GAAG;AAC/C,SAAO,EAAE,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG,EAAE;AAC7F;AAGO,SAAS,cACd,SACA,QACA,OACA,GACyB;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAA+B,EAAE,GAAG,QAAQ;AAClD,QAAM,SACJ,OAAO,QAAQ,WAAW,WACtB,QAAQ,SACR,MAAM,SAAS,WACb,MAAM,KACN;AACR,aAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI,SAAS,UAAa,EAAE,QAAQ,SAAU;AAC9C,UAAM,IAAI,QAAQ,IAAI;AACtB,UAAM,IAAI,WAAW,IAAI;AACzB,UAAM,OAAO,CAAC,MACZ,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAChE,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,YAAI,IAAI,IAAI,UAAU,GAAG,GAAG,CAAC;AAC7B;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,MAAM,CAAC,CAAC;AACnD;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,YAAY,GAAG,GAAG,GAAG,MAAM;AACvC;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,GAAG,GAAG,IAAI,CAAC;AAC1D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,WAAW,CAAC;AAC3C;AAAA,IACJ;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,oBAA+D;AAAA,EAC1E,qBAAqB;AAAA,IACnB,SAAS,CAAC,MAAM,0BAA0B,EAAE,KAAK;AAAA,IACjD,QAAQ,MACN;AAAA,IAEF,KAAK,MAAM;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGO,IAAM,sBAAsB;AAAA,EACjC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,qBAAqB;AAAA,EAC7D;AAAA,EACC,QAAQ,IAAI,aAAa,gBAAiB,kBAAkB;AAC/D;","names":[]}
+{"version":3,"sources":["../../src/diagnostics/redact.ts"],"sourcesContent":["import { type DiagnosticMessages, defineDiagnostic } from './catalog'\nimport './process-guard'\nimport type { Location } from './types'\n\ndeclare module './catalog' {\n  interface DiagnosticCatalog {\n    DK_UNSAFE_REDACTION: { level: 'full' }\n  }\n}\n\n/**\n * Redaction levels (§8.2). `'safe'`: paths, indices, counts, value types, hashed row keys\n * (production default). `'keys'`: + raw row keys (development default). `'full'`: + row values.\n */\nexport type RedactLevel = 'safe' | 'keys' | 'full'\n\n/**\n * Custom rule: return a string to log instead of `value`, or `undefined` for the built-in policy.\n * `path` names the field, e.g. `where.key`, `details.value`, `details.keys.2`, `details.issues.0`.\n * Sensitive columns never reach it.\n */\nexport type RedactFn = (path: string, value: unknown) => string | undefined\n\nexport interface RedactionOptions {\n  /** Default `'keys'` in development, `'safe'` in production. */\n  level?: RedactLevel\n  redact?: RedactFn\n  /** Ids / keys of `sensitive: true` columns: never logged at any level. */\n  sensitiveColumns?: () => Iterable<string>\n  /** The `rowKey` path is, is inside or contains a sensitive column: keys hashed at every level. */\n  rowKeySensitive?: () => boolean\n}\n\n/**\n * Which detail fields of a diagnostic carry user data, declared on its `defineDiagnostic` entry.\n * Undeclared fields are logged as-is, so they must hold only DataKable-safe data (paths, ids,\n * indices, counts). Text builders receive the redacted values: treat these fields as opaque and\n * only interpolate them.\n *\n * - `rowKey` / `rowKeys`: a row key / an array of them (hashed under `'safe'`).\n * - `value` / `values`: a cell value / an array of them (type summary unless `'full'`). The column\n *   is `details.column` when it is a string, else the `where` column id.\n * - `schemaIssues`: one Standard Schema issue or an array of them (`scrubSchemaIssue`).\n * - `error`: a thrown value, e.g. a fetcher error (`scrubError`).\n */\nexport type RedactField = 'rowKey' | 'rowKeys' | 'value' | 'values' | 'schemaIssues' | 'error'\n\n/** A resolved policy, built once per emit. */\nexport interface Redactor {\n  level: RedactLevel\n  custom: RedactFn | undefined\n  sensitive: ReadonlySet<string>\n  rowKeySensitive: boolean\n  /** Called when the custom rule throws; the value is logged as `[redacted]`. */\n  onError?: (error: unknown) => void\n}\n\nexport const SENSITIVE = '[sensitive]'\nexport const REDACTED = '[redacted]'\n\nconst LEVELS: readonly string[] = ['safe', 'keys', 'full']\nconst EMPTY: ReadonlySet<string> = new Set()\n\nexport function resolveRedaction(\n  option: RedactLevel | RedactionOptions | undefined,\n  dev: boolean,\n): Redactor {\n  const o: RedactionOptions = typeof option === 'string' ? { level: option } : (option ?? {})\n  const level = o.level ?? (dev ? 'keys' : 'safe')\n  const cols = o.sensitiveColumns?.()\n  return {\n    // An unknown level gets the strictest policy; validating the option is optionValidator's job.\n    level: LEVELS.includes(level) ? level : 'safe',\n    custom: o.redact,\n    sensitive: cols ? new Set(cols) : EMPTY,\n    rowKeySensitive: o.rowKeySensitive?.() ?? false,\n  }\n}\n\n/** Short 32-bit FNV-1a hash of `String(key)` (UTF-16 code units), as `h:xxxxxxxx`. */\nexport function hashRowKey(key: unknown): string {\n  const s = String(key)\n  let h = 0x811c9dc5\n  for (let i = 0; i < s.length; i++) {\n    h ^= s.charCodeAt(i)\n    h = Math.imul(h, 0x01000193)\n  }\n  return `h:${(h >>> 0).toString(16).padStart(8, '0')}`\n}\n\n/** The value's type, never its contents: `string(12)`, `number`, `array(3)`, `date`, … */\nexport function describeValue(v: unknown): string {\n  if (v === null) return 'null'\n  if (typeof v === 'string') return `string(${v.length})`\n  if (typeof v === 'number') return Number.isNaN(v) ? 'number(NaN)' : 'number'\n  if (Array.isArray(v)) return `array(${v.length})`\n  if (v instanceof Date) return 'date'\n  return typeof v\n}\n\nfunction custom(r: Redactor, path: string, value: unknown): string | undefined {\n  if (!r.custom) return undefined\n  try {\n    return r.custom(path, value)\n  } catch (e) {\n    r.onError?.(e)\n    return REDACTED\n  }\n}\n\nfunction redactKey(r: Redactor, path: string, key: unknown): unknown {\n  // A sensitive rowKey column wins over the custom rule and the level.\n  if (r.rowKeySensitive) return hashRowKey(key)\n  const c = custom(r, path, key)\n  if (c !== undefined) return c\n  return r.level === 'safe' ? hashRowKey(key) : key\n}\n\nfunction redactValue(r: Redactor, path: string, value: unknown, column?: string): unknown {\n  if (column !== undefined && underSensitive(r, column)) return SENSITIVE\n  const c = custom(r, path, value)\n  if (c !== undefined) return c\n  return r.level === 'full' ? value : describeValue(value)\n}\n\ntype IssuePath = ReadonlyArray<PropertyKey | { key: PropertyKey }>\n\n/** Joins a Standard Schema issue path: `['user', 0, { key: 'email' }]` → `user.0.email`. */\nfunction issuePath(path: IssuePath | undefined): string {\n  if (!path) return ''\n  return path.map((s) => String(typeof s === 'object' && s !== null ? s.key : s)).join('.')\n}\n\n/** `a` and `b` are the same path or one is inside the other (`contact` ↔ `contact.email`). */\nexport const pathsOverlap = (a: string, b: string): boolean =>\n  a === b || a.startsWith(`${b}.`) || b.startsWith(`${a}.`)\n\n/** `path` is, is inside or contains a sensitive column (#45). */\nfunction underSensitive(r: Redactor, path: string): boolean {\n  for (const col of r.sensitive) if (pathsOverlap(path, col)) return true\n  return false\n}\n\n/**\n * A schema issue as `{ path, message }`. Validators embed received values in their messages, so\n * under `'safe'` / `'keys'` the message is DataKable's own text. So it is at every level when the\n * table has a sensitive column: any message (a root-level refinement, another field's) may embed\n * its value (#46).\n */\nexport function scrubSchemaIssue(\n  issue: unknown,\n  r: Redactor,\n  fieldPath = 'issue',\n): { path: string; message: string } {\n  const i = (typeof issue === 'object' && issue !== null ? issue : {}) as {\n    message?: unknown\n    path?: IssuePath\n  }\n  let path: string\n  try {\n    path = issuePath(i.path)\n  } catch {\n    path = ''\n  }\n  const own = `invalid value at ${path || '(root)'}`\n  if (r.sensitive.size > 0) return { path, message: own }\n  const c = custom(r, fieldPath, i.message)\n  if (c !== undefined) return { path, message: c }\n  return { path, message: r.level === 'full' && typeof i.message === 'string' ? i.message : own }\n}\n\n/**\n * A thrown value as `error.name` + `code` only (fetcher errors embed URLs, tokens, payloads). The\n * full error belongs in `context.cause`, which reaches `onDiagnostic` only.\n */\nexport function scrubError(e: unknown): string {\n  if (typeof e !== 'object' || e === null) return typeof e\n  try {\n    const { name, code } = e as { name?: unknown; code?: unknown }\n    const n = typeof name === 'string' && name ? name : 'object'\n    return typeof code === 'string' || typeof code === 'number' ? `${n} (${code})` : n\n  } catch {\n    return 'object'\n  }\n}\n\n/** Hashes / passes through `where.key` per the policy; other locations hold no user data. */\nexport function redactLocation(where: Location, r: Redactor): Location {\n  if (where.kind !== 'row' || where.key === undefined) return where\n  const key = redactKey(r, 'where.key', where.key)\n  return { kind: 'row', index: where.index, key: typeof key === 'string' ? key : String(key) }\n}\n\n/** A shallow copy of `details` with the declared fields redacted; the input is never mutated. */\nexport function redactDetails(\n  details: Record<string, unknown>,\n  fields: Readonly<Record<string, RedactField | undefined>> | undefined,\n  where: Location,\n  r: Redactor,\n): Record<string, unknown> {\n  if (!fields) return details\n  const out: Record<string, unknown> = { ...details }\n  const column =\n    typeof details.column === 'string'\n      ? details.column\n      : where.kind === 'column'\n        ? where.id\n        : undefined\n  for (const name of Object.keys(fields)) {\n    const kind = fields[name]\n    if (kind === undefined || !(name in details)) continue\n    const v = details[name]\n    const p = `details.${name}`\n    const each = (f: (x: unknown, path: string) => unknown) =>\n      Array.isArray(v) ? v.map((x, i) => f(x, `${p}.${i}`)) : f(v, p)\n    switch (kind) {\n      case 'rowKey':\n        out[name] = redactKey(r, p, v)\n        break\n      case 'rowKeys':\n        out[name] = each((x, path) => redactKey(r, path, x))\n        break\n      case 'value':\n        out[name] = redactValue(r, p, v, column)\n        break\n      case 'values':\n        out[name] = each((x, path) => redactValue(r, path, x, column))\n        break\n      case 'schemaIssues':\n        out[name] = each((x, path) => scrubSchemaIssue(x, r, path))\n        break\n      case 'error':\n        out[name] = custom(r, p, v) ?? scrubError(v)\n        break\n    }\n  }\n  return out\n}\n\n/** Message text (§8.2): development builds, or production via `@datakable/core/messages`. */\nexport const redactionMessages: DiagnosticMessages<'DK_UNSAFE_REDACTION'> = {\n  DK_UNSAFE_REDACTION: {\n    problem: (d) => `diagnostics.redact is '${d.level}' in a production build`,\n    impact: () =>\n      'raw row keys and cell values (except sensitive columns) reach onDiagnostic, ' +\n      'getDiagnostics() and the console',\n    fix: () => [\n      \"remove diagnostics.redact in production (the default is 'safe')\",\n      \"or use 'keys' to log raw row keys without cell values\",\n      'mark personal-data columns with sensitive: true so they are never logged',\n    ],\n  },\n}\n\n/** `'full'` in a production build (§8.2: \"warns if enabled in production\"). Emitted by the hub. */\nexport const DK_UNSAFE_REDACTION = defineDiagnostic(\n  {\n    code: 'DK_UNSAFE_REDACTION',\n    level: 'warn',\n    where: () => ({ kind: 'option', path: 'diagnostics.redact' }),\n  },\n  (process.env.NODE_ENV !== \"production\") && redactionMessages.DK_UNSAFE_REDACTION,\n)\n"],"mappings":";AAAA,SAAkC,wBAAwB;AAC1D,OAAO;AAwDA,IAAM,YAAY;AAClB,IAAM,WAAW;AAExB,IAAM,SAA4B,CAAC,QAAQ,QAAQ,MAAM;AACzD,IAAM,QAA6B,oBAAI,IAAI;AAEpC,SAAS,iBACd,QACA,KACU;AACV,QAAM,IAAsB,OAAO,WAAW,WAAW,EAAE,OAAO,OAAO,IAAK,UAAU,CAAC;AACzF,QAAM,QAAQ,EAAE,UAAU,MAAM,SAAS;AACzC,QAAM,OAAO,EAAE,mBAAmB;AAClC,SAAO;AAAA;AAAA,IAEL,OAAO,OAAO,SAAS,KAAK,IAAI,QAAQ;AAAA,IACxC,QAAQ,EAAE;AAAA,IACV,WAAW,OAAO,IAAI,IAAI,IAAI,IAAI;AAAA,IAClC,iBAAiB,EAAE,kBAAkB,KAAK;AAAA,EAC5C;AACF;AAGO,SAAS,WAAW,KAAsB;AAC/C,QAAM,IAAI,OAAO,GAAG;AACpB,MAAI,IAAI;AACR,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,KAAK;AACjC,SAAK,EAAE,WAAW,CAAC;AACnB,QAAI,KAAK,KAAK,GAAG,QAAU;AAAA,EAC7B;AACA,SAAO,MAAM,MAAM,GAAG,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AACrD;AAGO,SAAS,cAAc,GAAoB;AAChD,MAAI,MAAM,KAAM,QAAO;AACvB,MAAI,OAAO,MAAM,SAAU,QAAO,UAAU,EAAE,MAAM;AACpD,MAAI,OAAO,MAAM,SAAU,QAAO,OAAO,MAAM,CAAC,IAAI,gBAAgB;AACpE,MAAI,MAAM,QAAQ,CAAC,EAAG,QAAO,SAAS,EAAE,MAAM;AAC9C,MAAI,aAAa,KAAM,QAAO;AAC9B,SAAO,OAAO;AAChB;AAEA,SAAS,OAAO,GAAa,MAAc,OAAoC;AAC7E,MAAI,CAAC,EAAE,OAAQ,QAAO;AACtB,MAAI;AACF,WAAO,EAAE,OAAO,MAAM,KAAK;AAAA,EAC7B,SAAS,GAAG;AACV,MAAE,UAAU,CAAC;AACb,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,GAAa,MAAc,KAAuB;AAEnE,MAAI,EAAE,gBAAiB,QAAO,WAAW,GAAG;AAC5C,QAAM,IAAI,OAAO,GAAG,MAAM,GAAG;AAC7B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,WAAW,GAAG,IAAI;AAChD;AAEA,SAAS,YAAY,GAAa,MAAc,OAAgB,QAA0B;AACxF,MAAI,WAAW,UAAa,eAAe,GAAG,MAAM,EAAG,QAAO;AAC9D,QAAM,IAAI,OAAO,GAAG,MAAM,KAAK;AAC/B,MAAI,MAAM,OAAW,QAAO;AAC5B,SAAO,EAAE,UAAU,SAAS,QAAQ,cAAc,KAAK;AACzD;AAKA,SAAS,UAAU,MAAqC;AACtD,MAAI,CAAC,KAAM,QAAO;AAClB,SAAO,KAAK,IAAI,CAAC,MAAM,OAAO,OAAO,MAAM,YAAY,MAAM,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG;AAC1F;AAGO,IAAM,eAAe,CAAC,GAAW,MACtC,MAAM,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG,KAAK,EAAE,WAAW,GAAG,CAAC,GAAG;AAG1D,SAAS,eAAe,GAAa,MAAuB;AAC1D,aAAW,OAAO,EAAE,UAAW,KAAI,aAAa,MAAM,GAAG,EAAG,QAAO;AACnE,SAAO;AACT;AAQO,SAAS,iBACd,OACA,GACA,YAAY,SACuB;AACnC,QAAM,IAAK,OAAO,UAAU,YAAY,UAAU,OAAO,QAAQ,CAAC;AAIlE,MAAI;AACJ,MAAI;AACF,WAAO,UAAU,EAAE,IAAI;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AACA,QAAM,MAAM,oBAAoB,QAAQ,QAAQ;AAChD,MAAI,EAAE,UAAU,OAAO,EAAG,QAAO,EAAE,MAAM,SAAS,IAAI;AACtD,QAAM,IAAI,OAAO,GAAG,WAAW,EAAE,OAAO;AACxC,MAAI,MAAM,OAAW,QAAO,EAAE,MAAM,SAAS,EAAE;AAC/C,SAAO,EAAE,MAAM,SAAS,EAAE,UAAU,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,UAAU,IAAI;AAChG;AAMO,SAAS,WAAW,GAAoB;AAC7C,MAAI,OAAO,MAAM,YAAY,MAAM,KAAM,QAAO,OAAO;AACvD,MAAI;AACF,UAAM,EAAE,MAAM,KAAK,IAAI;AACvB,UAAM,IAAI,OAAO,SAAS,YAAY,OAAO,OAAO;AACpD,WAAO,OAAO,SAAS,YAAY,OAAO,SAAS,WAAW,GAAG,CAAC,KAAK,IAAI,MAAM;AAAA,EACnF,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,eAAe,OAAiB,GAAuB;AACrE,MAAI,MAAM,SAAS,SAAS,MAAM,QAAQ,OAAW,QAAO;AAC5D,QAAM,MAAM,UAAU,GAAG,aAAa,MAAM,GAAG;AAC/C,SAAO,EAAE,MAAM,OAAO,OAAO,MAAM,OAAO,KAAK,OAAO,QAAQ,WAAW,MAAM,OAAO,GAAG,EAAE;AAC7F;AAGO,SAAS,cACd,SACA,QACA,OACA,GACyB;AACzB,MAAI,CAAC,OAAQ,QAAO;AACpB,QAAM,MAA+B,EAAE,GAAG,QAAQ;AAClD,QAAM,SACJ,OAAO,QAAQ,WAAW,WACtB,QAAQ,SACR,MAAM,SAAS,WACb,MAAM,KACN;AACR,aAAW,QAAQ,OAAO,KAAK,MAAM,GAAG;AACtC,UAAM,OAAO,OAAO,IAAI;AACxB,QAAI,SAAS,UAAa,EAAE,QAAQ,SAAU;AAC9C,UAAM,IAAI,QAAQ,IAAI;AACtB,UAAM,IAAI,WAAW,IAAI;AACzB,UAAM,OAAO,CAAC,MACZ,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;AAChE,YAAQ,MAAM;AAAA,MACZ,KAAK;AACH,YAAI,IAAI,IAAI,UAAU,GAAG,GAAG,CAAC;AAC7B;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,UAAU,GAAG,MAAM,CAAC,CAAC;AACnD;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,YAAY,GAAG,GAAG,GAAG,MAAM;AACvC;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,KAAK,CAAC,GAAG,SAAS,iBAAiB,GAAG,GAAG,IAAI,CAAC;AAC1D;AAAA,MACF,KAAK;AACH,YAAI,IAAI,IAAI,OAAO,GAAG,GAAG,CAAC,KAAK,WAAW,CAAC;AAC3C;AAAA,IACJ;AAAA,EACF;AACA,SAAO;AACT;AAGO,IAAM,oBAA+D;AAAA,EAC1E,qBAAqB;AAAA,IACnB,SAAS,CAAC,MAAM,0BAA0B,EAAE,KAAK;AAAA,IACjD,QAAQ,MACN;AAAA,IAEF,KAAK,MAAM;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAGO,IAAM,sBAAsB;AAAA,EACjC;AAAA,IACE,MAAM;AAAA,IACN,OAAO;AAAA,IACP,OAAO,OAAO,EAAE,MAAM,UAAU,MAAM,qBAAqB;AAAA,EAC7D;AAAA,EACC,QAAQ,IAAI,aAAa,gBAAiB,kBAAkB;AAC/D;","names":[]}

package/dist/diagnostics/trace-store.cjs

@@ -20,10 +20,14 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/diagnostics/trace-store.ts
 var trace_store_exports = {};
 __export(trace_store_exports, {
+  SLICED: () => SLICED,
   readTrace: () => readTrace,
+  sliceTimer: () => sliceTimer,
   writeTrace: () => writeTrace
 });
 module.exports = __toCommonJS(trace_store_exports);
+var SLICED = "sliced";
+var sliceTimer = {};
 var traces = /* @__PURE__ */ new WeakMap();
 var readTrace = (table) => traces.get(table);
 var writeTrace = (table, trace) => {
@@ -31,7 +35,9 @@ var writeTrace = (table, trace) => {
 };
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  SLICED,
   readTrace,
+  sliceTimer,
   writeTrace
 });
 //# sourceMappingURL=trace-store.cjs.map

package/dist/diagnostics/trace-store.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/diagnostics/trace-store.ts"],"sourcesContent":["import type { Trigger } from './types'\n\n/** One step of the traced run: counts (never rows) and its duration (§9.1: bounded). */\nexport interface TraceStep {\n  readonly input: number\n  readonly output: number\n  readonly ms: number\n}\n\n/** What the tracer kept of the last `pipeline:run` of a table (the last run only). */\nexport interface Trace {\n  readonly run: number\n  readonly trigger: Trigger\n  /** Duration of the whole run; `undefined` while it is in progress. */\n  ms: number | undefined\n  /** Steps that ran (a step served from its memo is absent), by feature name. */\n  readonly steps: Map<string, TraceStep>\n  /** The last `state:dispatch` (its `where`: a method / feature name) and its duration. */\n  dispatch: { where: string; ms: number } | undefined\n}\n\n/** Kept apart from the tracer so `explain()` reads traces without bundling the tracer itself. */\nconst traces = new WeakMap<object, Trace>()\n\n/** The last traced run of `table`, if a tracer is installed. */\nexport const readTrace = (table: object): Trace | undefined => traces.get(table)\n\nexport const writeTrace = (table: object, trace: Trace): void => {\n  traces.set(table, trace)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsBA,IAAM,SAAS,oBAAI,QAAuB;AAGnC,IAAM,YAAY,CAAC,UAAqC,OAAO,IAAI,KAAK;AAExE,IAAM,aAAa,CAAC,OAAe,UAAuB;AAC/D,SAAO,IAAI,OAAO,KAAK;AACzB;","names":[]}
+{"version":3,"sources":["../../src/diagnostics/trace-store.ts"],"sourcesContent":["import type { ContextBase } from '../intercept/context'\nimport type { Trigger } from './types'\n\n/** One step of the traced run: counts (never rows) and its duration (§9.1: bounded). */\nexport interface TraceStep {\n  readonly input: number\n  readonly output: number\n  /** With time-sliced work (#61): the runs that waited on it, this one, and the slices between. */\n  readonly ms: number\n  /** Time-sliced work (#61): the runs {@link ms} spans (absent when the step ran in one). */\n  readonly runs?: number\n}\n\n/** What the tracer kept of the last `pipeline:run` of a table (the last run only). */\nexport interface Trace {\n  readonly run: number\n  readonly trigger: Trigger\n  /** Duration of the whole run; `undefined` while it is in progress. */\n  ms: number | undefined\n  /** Steps that ran (a step served from its memo is absent), by feature name. */\n  readonly steps: Map<string, TraceStep>\n  /** The last `state:dispatch` (its `where`: a method / feature name) and its duration. */\n  dispatch: { where: string; ms: number } | undefined\n}\n\n/**\n * Set on the `pipeline:step` ctx's `meta` by the runner when the step waits on time-sliced work\n * (its result comes in a later run).\n */\nexport const SLICED = 'sliced'\n\n/**\n * The tracer's (#61): the runner reports each slice of time-sliced work run between pipeline runs\n * (no step is timing it). Unset until a tracer is created.\n */\nexport const sliceTimer: {\n  current?: ((base: ContextBase, feature: string, ms: number) => void) | undefined\n} = {}\n\n/** Kept apart from the tracer so `explain()` reads traces without bundling the tracer itself. */\nconst traces = new WeakMap<object, Trace>()\n\n/** The last traced run of `table`, if a tracer is installed. */\nexport const readTrace = (table: object): Trace | undefined => traces.get(table)\n\nexport const writeTrace = (table: object, trace: Trace): void => {\n  traces.set(table, trace)\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6BO,IAAM,SAAS;AAMf,IAAM,aAET,CAAC;AAGL,IAAM,SAAS,oBAAI,QAAuB;AAGnC,IAAM,YAAY,CAAC,UAAqC,OAAO,IAAI,KAAK;AAExE,IAAM,aAAa,CAAC,OAAe,UAAuB;AAC/D,SAAO,IAAI,OAAO,KAAK;AACzB;","names":[]}

package/dist/diagnostics/trace-store.js

@@ -1,11 +1,15 @@
 // src/diagnostics/trace-store.ts
+var SLICED = "sliced";
+var sliceTimer = {};
 var traces = /* @__PURE__ */ new WeakMap();
 var readTrace = (table) => traces.get(table);
 var writeTrace = (table, trace) => {
   traces.set(table, trace);
 };
 export {
+  SLICED,
   readTrace,
+  sliceTimer,
   writeTrace
 };
 //# sourceMappingURL=trace-store.js.map