@debugbundle/sdk-react-native 3.0.1 → 3.1.0

package/dist/exception-evidence.d.ts

@@ -0,0 +1,25 @@
+type LegacyError = {
+    name: string;
+    message: string;
+    stack: string;
+    traceAvailable?: boolean;
+};
+type Frame = {
+    function: string | null;
+    file: string | null;
+    line: number | null;
+    column: number | null;
+    classification: "unknown" | "framework" | "sdk";
+};
+export declare function snapshotError(error: unknown, fields: string[]): LegacyError;
+export declare function parseMobileStack(stack: string, maximum?: number): {
+    frames: Frame[];
+    status: string;
+    truncated: boolean;
+};
+/** New cause traversal requires the engine's native Error brand. Hermes/JSC
+ * without it retain the outer error and explicitly report unsupported traversal.
+ * Portable JS cannot prove aggregate arrays are not proxies: no iterator is run. */
+export declare function snapshotExceptionEvidence(error: unknown, legacy: LegacyError, fields: string[], fatal?: boolean, brand?: ((value: unknown) => boolean) | undefined): Record<string, unknown> | undefined;
+export {};
+//# sourceMappingURL=exception-evidence.d.ts.map

package/dist/exception-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exception-evidence.d.ts","sourceRoot":"","sources":["../src/exception-evidence.ts"],"names":[],"mappings":"AAIA,KAAK,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAC9F,KAAK,KAAK,GAAG;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,SAAS,GAAG,WAAW,GAAG,KAAK,CAAA;CAAE,CAAC;AAI3J,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAc3E;AAUD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,SAAK,GAAG;IAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,CA0BrH;AAUD;;oFAEoF;AACpF,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,KAAK,UAAQ,EAC5G,KAAK,4CAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAsC1D"}

package/dist/exception-evidence.js

@@ -0,0 +1,175 @@
+import { errorField, safeErrorStack, nativeBrand } from "./safe-error-fields.js";
+import { sanitizeValue } from "./redaction.js";
+import { utf8Bytes } from "./owned-json.js";
+const text = (value, fallback) => typeof value === "string" && value ? value : fallback;
+export function snapshotError(error, fields) {
+    let name = "Error", message = "Unknown error", stack;
+    try {
+        if (typeof error === "string")
+            message = error;
+        else if (error !== null && typeof error === "object") {
+            name = text(errorField(error, "name"), name);
+            message = text(errorField(error, "message"), message);
+            stack = safeErrorStack(error);
+        }
+    }
+    catch { /* Legacy outer evidence is best effort; no application accessor is required. */ }
+    return {
+        name: text(sanitizeValue(name, { redactFields: fields }), "Error"),
+        message: text(sanitizeValue(message, { redactFields: fields }), "Unknown error"),
+        stack: text(sanitizeValue(text(stack, `${name}: ${message}`), { redactFields: fields, maxStringLength: 8192 }), `${name}: ${message}`),
+        traceAvailable: typeof stack === "string" && stack.length > 0
+    };
+}
+function clip(text, maximum) {
+    let result = "", bytes = 0;
+    for (const character of text.slice(0, maximum)) {
+        const cost = utf8Bytes(character);
+        if (bytes + cost > maximum)
+            break;
+        result += character;
+        bytes += cost;
+    }
+    return result;
+}
+export function parseMobileStack(stack, maximum = 32) {
+    const frames = [];
+    const lines = stack.slice(0, 16_384).split(/\r?\n/, 129);
+    let partial = false, truncated = stack.length > 16_384 || lines.length > 128;
+    for (const input of lines.slice(0, 128)) {
+        if (frames.length >= maximum) {
+            truncated = true;
+            break;
+        }
+        if (input.length > 2048)
+            truncated = true;
+        const line = input.trim().slice(0, 2048);
+        const named = /^at\s+(.+?)\s*\((?:address at )?(.+?):(\d+)(?::(\d+))?\)$/.exec(line);
+        const anonymous = named ? null : /^at\s+(.+?):(\d+)(?::(\d+))?$/.exec(line);
+        const webkit = named || anonymous ? null : /^(.*?)@(.+?):(\d+)(?::(\d+))?$/.exec(line);
+        const match = named ?? anonymous ?? webkit;
+        if (!match) {
+            if (/^at\s|@\S+:\d/.test(line))
+                partial = true;
+            continue;
+        }
+        let file = named || webkit ? match[2] : match[1];
+        if (/^https?:\/\//i.test(file)) {
+            try {
+                const url = new URL(file);
+                file = `${url.protocol}//${url.host}${url.pathname}`;
+            }
+            catch {
+                partial = true;
+                continue;
+            }
+        }
+        else
+            file = file.split(/[?#]/, 1)[0];
+        const row = Number(named || webkit ? match[3] : match[2]);
+        const rawColumn = named || webkit ? match[4] : match[3];
+        const column = rawColumn === undefined ? null : Number(rawColumn);
+        if (!Number.isSafeInteger(row) || row <= 0 || column !== null && (!Number.isSafeInteger(column) || column < 0)) {
+            partial = true;
+            continue;
+        }
+        const fn = named || webkit ? clip(match[1].trim(), 256) || null : null;
+        frames.push({ function: fn, file: clip(file, 2048), line: row, column,
+            classification: /node_modules[/\\]@debugbundle[/\\]/.test(file) ? "sdk" : /node_modules[/\\]/.test(file) ? "framework" : "unknown" });
+    }
+    return { frames, status: truncated ? "truncated" : !frames.length ? "unparsed" : partial ? "partial" : "parsed", truncated };
+}
+function stackLinks(stack) {
+    return stack.replace(/https?:\/\/[^\s)]+/gi, source => {
+        const coordinate = /(:\d+(?::\d+)?)$/.exec(source)?.[1] ?? "";
+        const location = coordinate ? source.slice(0, -coordinate.length) : source;
+        try {
+            const url = new URL(location);
+            return `${url.protocol}//${url.host}${url.pathname}${coordinate}`;
+        }
+        catch {
+            return "[unavailable URL]";
+        }
+    });
+}
+/** New cause traversal requires the engine's native Error brand. Hermes/JSC
+ * without it retain the outer error and explicitly report unsupported traversal.
+ * Portable JS cannot prove aggregate arrays are not proxies: no iterator is run. */
+export function snapshotExceptionEvidence(error, legacy, fields, fatal = false, brand = nativeBrand) {
+    const nodes = [], seen = new Map(), active = new Set();
+    let unsupported = brand === undefined, unsafe = false, truncated = false, totalFrames = 0;
+    const visit = (value, depth, root = false) => {
+        if (!root && (!brand || !brand(value))) {
+            unsupported = true;
+            return null;
+        }
+        if (typeof value === "object" && value !== null && active.has(value)) {
+            truncated = true;
+            return null;
+        }
+        if (depth > (fatal ? 1 : 4) || nodes.length >= (fatal ? 2 : 8)) {
+            truncated = true;
+            return null;
+        }
+        if (!root && seen.has(value))
+            return seen.get(value);
+        const snapshot = root ? legacy : snapshotError(value, fields);
+        const name = clip(snapshot.name, 256), message = clip(snapshot.message, fatal ? 512 : 2048);
+        const stack = stackLinks(clip(snapshot.stack, fatal ? 512 : 16_384));
+        const parsed = parseMobileStack(stack, fatal ? Math.min(4, 8 - totalFrames) : 32), frames = parsed.frames;
+        totalFrames += frames.length;
+        truncated ||= parsed.truncated;
+        const trace = snapshot.traceAvailable !== false;
+        const id = nodes.length;
+        const node = { id, name, message, stack: trace ? stack : null, frames: trace ? frames : [],
+            trace_origin: trace ? "runtime_reported" : "unavailable", parsing_status: trace ? parsed.status : "unavailable", relationships: [] };
+        nodes.push(node);
+        if (!brand || !brand(value)) {
+            unsupported = true;
+            return id;
+        }
+        seen.set(value, id);
+        active.add(value);
+        const cause = Object.getOwnPropertyDescriptor(value, "cause");
+        if (cause && !("value" in cause))
+            unsafe = true;
+        else if (cause?.value !== undefined) {
+            const target = visit(cause.value, depth + 1);
+            if (target !== null)
+                node.relationships.push({ kind: "cause", target_id: target });
+        }
+        const aggregate = Object.getOwnPropertyDescriptor(value, "errors");
+        if (aggregate) {
+            if (!("value" in aggregate))
+                unsafe = true;
+            else
+                unsupported = true;
+        }
+        active.delete(value);
+        return id;
+    };
+    try {
+        visit(error, 0, true);
+    }
+    catch {
+        unsafe = true;
+    }
+    if (!nodes.length)
+        return undefined;
+    const graph = { version: 1, runtime: "react_native", root_id: 0, nodes, truncated,
+        unavailable_reason: unsafe ? "unsafe" : truncated ? "budget_exceeded" : unsupported ? "unsupported" : null };
+    const maximum = fatal ? 3584 : 31_000;
+    if (utf8Bytes(JSON.stringify(graph)) > maximum) {
+        graph.truncated = true;
+        graph.unavailable_reason = "budget_exceeded";
+        for (const node of nodes) {
+            node.stack = null;
+            node.frames = node.frames.slice(0, fatal ? 2 : 4);
+            node.parsing_status = "truncated";
+        }
+    }
+    if (utf8Bytes(JSON.stringify(graph)) > maximum)
+        for (const node of nodes)
+            node.frames = [];
+    return utf8Bytes(JSON.stringify(graph)) <= maximum ? graph : undefined;
+}

package/dist/index.d.ts

@@ -2,7 +2,12 @@ import { DebugBundleReactNativeClient, createDebugBundleClient } from "./client.
 import { captureDebugBundleConsole } from "./console.js";
 import { installDebugBundleErrorHandlers } from "./errors.js";
 import type { DebugBundleCaptureContext, DebugBundleBeforeSend, DebugBundleClient, DebugBundleConfig, DebugBundleLogLevel, DebugBundleProbeOptions, DebugBundleRequestInfo, DebugBundleResponseInfo, DebugBundleStatus } from "./types.js";
+import type { EvidenceCapabilities, OperationScope, RecoveryObservation } from "./evidence-types.js";
 export declare const DebugBundle: {
+    beginOperation(): OperationScope;
+    withOperationContext<T>(operation: (scope: OperationScope) => T): T;
+    captureRecovery(observation: RecoveryObservation): void;
+    readonly evidenceCapabilities: EvidenceCapabilities;
     init(config: DebugBundleConfig): void;
     captureException(error: unknown, context?: DebugBundleCaptureContext): void;
     captureError(error: unknown, context?: DebugBundleCaptureContext): void;
@@ -21,5 +26,6 @@ export declare const DebugBundle: {
 export { createDebugBundleClient, DebugBundleReactNativeClient };
 export { captureDebugBundleConsole };
 export { installDebugBundleErrorHandlers };
+export type { EvidenceCapabilities, EvidenceFeature, EvidenceScope, OperationScope, RecoveryObservation } from "./evidence-types.js";
 export type { DebugBundleCaptureContext, DebugBundleBeforeSend, DebugBundleClient, DebugBundleConfig, DebugBundleLogLevel, DebugBundleProbeOptions, DebugBundleRequestInfo, DebugBundleResponseInfo, DebugBundleStatus };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AAIpB,eAAO,MAAM,WAAW;iBACT,iBAAiB,GAAG,IAAI;4BAWb,OAAO,YAAY,yBAAyB,GAAG,IAAI;wBAGvD,OAAO,YAAY,yBAAyB,GAAG,IAAI;wBAGnD,MAAM,UAAU,mBAAmB,YAAY,yBAAyB,GAAG,IAAI;4BAG3E,sBAAsB,YAAY,uBAAuB,YAAY,yBAAyB,GAAG,IAAI;4BAGrG,MAAM,UAAU,mBAAmB,YAAY,yBAAyB,GAAG,IAAI;oBAGvF,MAAM,SAAS,OAAO,GAAG,IAAI;iBAGhC,MAAM,QAAQ,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,uBAAuB,GAAG,IAAI;aAGrF,OAAO,CAAC,IAAI,CAAC;qCAGW,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;2BAGnC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;6BAG3C,MAAM,mBAAmB,MAAM,GAAG,IAAI,WAAW,MAAM,GAAG,IAAI;qBAGzE,iBAAiB;0BAGZ,MAAM,GAAG,IAAI;CAGjC,CAAC;AAEF,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAC3C,YAAY,EACV,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EAClB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,+BAA+B,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EACV,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAIrG,eAAO,MAAM,WAAW;sBACJ,cAAc;yBACX,CAAC,aAAa,CAAC,KAAK,EAAE,cAAc,KAAK,CAAC,GAAG,CAAC;iCACtC,mBAAmB,GAAG,IAAI;mCAC3B,oBAAoB;iBACnC,iBAAiB,GAAG,IAAI;4BAWb,OAAO,YAAY,yBAAyB,GAAG,IAAI;wBAGvD,OAAO,YAAY,yBAAyB,GAAG,IAAI;wBAGnD,MAAM,UAAU,mBAAmB,YAAY,yBAAyB,GAAG,IAAI;4BAG3E,sBAAsB,YAAY,uBAAuB,YAAY,yBAAyB,GAAG,IAAI;4BAGrG,MAAM,UAAU,mBAAmB,YAAY,yBAAyB,GAAG,IAAI;oBAGvF,MAAM,SAAS,OAAO,GAAG,IAAI;iBAGhC,MAAM,QAAQ,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,YAAY,uBAAuB,GAAG,IAAI;aAGrF,OAAO,CAAC,IAAI,CAAC;qCAGW,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;2BAGnC,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;6BAG3C,MAAM,mBAAmB,MAAM,GAAG,IAAI,WAAW,MAAM,GAAG,IAAI;qBAGzE,iBAAiB;0BAGZ,MAAM,GAAG,IAAI;CAGjC,CAAC;AAEF,OAAO,EAAE,uBAAuB,EAAE,4BAA4B,EAAE,CAAC;AACjE,OAAO,EAAE,yBAAyB,EAAE,CAAC;AACrC,OAAO,EAAE,+BAA+B,EAAE,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACrI,YAAY,EACV,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EAClB,CAAC"}

package/dist/index.js

@@ -3,6 +3,10 @@ import { captureDebugBundleConsole } from "./console.js";
 import { installDebugBundleErrorHandlers } from "./errors.js";
 const singleton = new DebugBundleReactNativeClient();
 export const DebugBundle = {
+    beginOperation() { return singleton.beginOperation(); },
+    withOperationContext(operation) { return singleton.withOperationContext(operation); },
+    captureRecovery(observation) { singleton.captureRecovery(observation); },
+    get evidenceCapabilities() { return singleton.evidenceCapabilities; },
     init(config) {
         singleton.init(config);
         if (config.captureErrors !== false) {

package/dist/owned-json.d.ts

@@ -0,0 +1,11 @@
+export type OwnedJSON = null | boolean | number | string | OwnedJSON[] | {
+    [key: string]: OwnedJSON;
+};
+/** Exhausted ownership cannot safely fall back to pre-hook application data. */
+export declare class EventValidationUnavailable extends Error {
+}
+export declare function utf8Bytes(value: string): number;
+/** Bounded plain JSON copy; no toJSON, property getters, foreign iterators or formatters. */
+export declare function ownJSON(input: unknown): OwnedJSON;
+export declare function jsonObject(value: unknown): Record<string, OwnedJSON> | null;
+//# sourceMappingURL=owned-json.d.ts.map

package/dist/owned-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owned-json.d.ts","sourceRoot":"","sources":["../src/owned-json.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtG,gFAAgF;AAChF,qBAAa,0BAA2B,SAAQ,KAAK;CAAG;AAExD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAW/C;AAED,6FAA6F;AAC7F,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CAoCjD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAE3E"}

package/dist/owned-json.js

@@ -0,0 +1,85 @@
+/** Exhausted ownership cannot safely fall back to pre-hook application data. */
+export class EventValidationUnavailable extends Error {
+}
+export function utf8Bytes(value) {
+    let bytes = 0;
+    for (let index = 0; index < value.length; index++) {
+        const code = value.charCodeAt(index);
+        if (code < 0x80)
+            bytes++;
+        else if (code < 0x800)
+            bytes += 2;
+        else if (code >= 0xd800 && code <= 0xdbff && index + 1 < value.length &&
+            value.charCodeAt(index + 1) >= 0xdc00 && value.charCodeAt(index + 1) <= 0xdfff) {
+            bytes += 4;
+            index++;
+        }
+        else
+            bytes += 3;
+    }
+    return bytes;
+}
+/** Bounded plain JSON copy; no toJSON, property getters, foreign iterators or formatters. */
+export function ownJSON(input) {
+    let nodes = 4096, remaining = 8 * 1024 * 1024;
+    const seen = new Set();
+    const use = (amount) => { remaining -= amount; if (remaining < 0)
+        throw new EventValidationUnavailable(); };
+    const visit = (value, depth) => {
+        if (--nodes < 0 || depth > 16)
+            throw new EventValidationUnavailable();
+        if (value === null || typeof value === "boolean") {
+            use(5);
+            return value;
+        }
+        if (typeof value === "number" && Number.isFinite(value)) {
+            use(24);
+            return value;
+        }
+        if (typeof value === "string") {
+            if (value.length > remaining)
+                throw new EventValidationUnavailable();
+            use(utf8Bytes(value) + 2);
+            return value;
+        }
+        if (typeof value !== "object" || value === null || seen.has(value))
+            throw new TypeError("invalid JSON");
+        seen.add(value);
+        try {
+            if (Array.isArray(value)) {
+                if (value.length > 256)
+                    throw new EventValidationUnavailable();
+                use(value.length + 2);
+                return Array.from({ length: value.length }, (_, index) => {
+                    const descriptor = Object.getOwnPropertyDescriptor(value, String(index));
+                    if (!descriptor || !("value" in descriptor))
+                        throw new TypeError("invalid JSON");
+                    return visit(descriptor.value, depth + 1);
+                });
+            }
+            if (![Object.prototype, null].includes(Object.getPrototypeOf(value)))
+                throw new TypeError("invalid JSON");
+            const keys = Object.keys(value);
+            if (keys.length > 256)
+                throw new EventValidationUnavailable();
+            const output = Object.create(null);
+            for (const key of keys) {
+                if (key.length > remaining)
+                    throw new EventValidationUnavailable();
+                use(utf8Bytes(key) + 4);
+                const descriptor = Object.getOwnPropertyDescriptor(value, key);
+                if (!descriptor || !("value" in descriptor))
+                    throw new TypeError("invalid JSON");
+                output[key] = visit(descriptor.value, depth + 1);
+            }
+            return output;
+        }
+        finally {
+            seen.delete(value);
+        }
+    };
+    return visit(input, 0);
+}
+export function jsonObject(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
+}

package/dist/privacy-keys.d.ts

@@ -1,3 +1,5 @@
 export declare const DEFAULT_SENSITIVE_KEYS: readonly ["password", "secret", "token", "api_key", "apikey", "access_token", "refresh_token", "private_key", "authorization", "bearer", "cookie", "session_id", "passwd", "ssn", "credit_card", "card_number", "cvv", "cvc", "pin", "expiry", "phone", "otp", "verification_code"];
 export declare function isSensitiveKey(key: string, sensitiveKeys: readonly string[]): boolean;
+/** Operation-owned lookup: bounded caller policy never enters a global cache. */
+export declare function createSensitiveKeyMatcher(sensitiveKeys: readonly string[]): (key: string) => boolean;
 //# sourceMappingURL=privacy-keys.d.ts.map

package/dist/privacy-keys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"privacy-keys.d.ts","sourceRoot":"","sources":["../src/privacy-keys.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,qRAKzB,CAAC;AAeX,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAkBrF"}
+{"version":3,"file":"privacy-keys.d.ts","sourceRoot":"","sources":["../src/privacy-keys.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,sBAAsB,qRAKzB,CAAC;AAeX,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAErF;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAIpG"}

package/dist/privacy-keys.js

@@ -16,11 +16,19 @@ function splitKeyIntoSegments(key) {
         .filter((segment) => segment.length > 0);
 }
 export function isSensitiveKey(key, sensitiveKeys) {
+    return createSensitiveKeyMatcher(sensitiveKeys)(key);
+}
+/** Operation-owned lookup: bounded caller policy never enters a global cache. */
+export function createSensitiveKeyMatcher(sensitiveKeys) {
+    const exact = new Set(sensitiveKeys);
+    const canonicalSensitiveKeys = new Set(sensitiveKeys.map(canonicalizeSensitiveKey));
+    return key => matchesSensitiveKey(key, exact, canonicalSensitiveKeys);
+}
+function matchesSensitiveKey(key, exact, canonicalSensitiveKeys) {
     const normalized = key.trim().toLowerCase();
-    if (sensitiveKeys.includes(normalized)) {
+    if (exact.has(normalized)) {
         return true;
     }
-    const canonicalSensitiveKeys = new Set(sensitiveKeys.map(canonicalizeSensitiveKey));
     const segments = splitKeyIntoSegments(key);
     for (let start = 0; start < segments.length; start += 1) {
         let combined = "";

package/dist/privacy-telemetry.js

@@ -1,5 +1,5 @@
-import { DEFAULT_SENSITIVE_KEYS, isSensitiveKey } from "./privacy-keys.js";
-import { scrubCredentialText } from "./privacy-text.js";
+import { DEFAULT_SENSITIVE_KEYS, createSensitiveKeyMatcher } from "./privacy-keys.js";
+import { createCredentialTextScrubber } from "./privacy-text.js";
 const REDACTED = "[REDACTED]";
 const MAX_DEPTH = 16;
 const MAX_NODES = 4096;
@@ -56,7 +56,7 @@ function sanitizeString(value, state, allowStructured) {
             // Malformed structured content with a recognizable sensitive label is withheld below.
         }
     }
-    const result = scrubCredentialText(value, state.extra);
+    const result = state.scrubText(value);
     if (result !== value)
         state.redactionCount += 1;
     if ((value.startsWith("{") || value.startsWith("[")) && result === value &&
@@ -108,7 +108,7 @@ function sanitizeValue(value, state, depth, allowStructured) {
             state.textBytes += byteLength(key);
             if (state.textBytes > state.maxTotalBytes)
                 throw new BudgetExceeded();
-            const safeKey = scrubCredentialText(key, state.extra);
+            const safeKey = state.scrubText(key);
             if (safeKey !== key) {
                 state.redactionCount += 1;
                 continue;
@@ -116,7 +116,7 @@ function sanitizeValue(value, state, depth, allowStructured) {
             const descriptor = Object.getOwnPropertyDescriptor(value, key);
             if (descriptor === undefined || !("value" in descriptor))
                 throw new TypeError("unsafe_input");
-            const safeValue = isSensitiveKey(key, state.keys)
+            const safeValue = state.sensitiveKey(key)
                 ? mask(state)
                 : sanitizeValue(descriptor.value, state, depth + 1, allowStructured);
             Object.defineProperty(result, key, {
@@ -148,8 +148,8 @@ export function sanitizeTelemetry(value, options = {}) {
             textBytes: 0,
             redactionCount: 0,
             seen: new WeakSet(),
-            keys: [...DEFAULT_SENSITIVE_KEYS, ...extra],
-            extra,
+            sensitiveKey: createSensitiveKeyMatcher([...DEFAULT_SENSITIVE_KEYS, ...extra]),
+            scrubText: createCredentialTextScrubber(extra),
             maxTotalBytes
         };
         const sanitized = sanitizeValue(value, state, 0, true);

package/dist/privacy-text.d.ts

@@ -1,3 +1,3 @@
-/** Bounded caller input only. Returns stable replacement text, never the matching secret. */
-export declare function scrubCredentialText(input: string, additionalKeys: readonly string[], scanUrls?: boolean): string;
+/** Compile each caller rule once per bounded protection operation, not per scalar. */
+export declare function createCredentialTextScrubber(additionalKeys: readonly string[]): (input: string, scanUrls?: boolean) => string;
 //# sourceMappingURL=privacy-text.d.ts.map

package/dist/privacy-text.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"privacy-text.d.ts","sourceRoot":"","sources":["../src/privacy-text.ts"],"names":[],"mappings":"AAyDA,6FAA6F;AAC7F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,MAAM,EAAE,EAAE,QAAQ,UAAO,GAAG,MAAM,CA2B7G"}
+{"version":3,"file":"privacy-text.d.ts","sourceRoot":"","sources":["../src/privacy-text.ts"],"names":[],"mappings":"AAyDA,sFAAsF;AACtF,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,KAAK,MAAM,CA4B7H"}

package/dist/privacy-text.js

@@ -1,4 +1,4 @@
-import { DEFAULT_SENSITIVE_KEYS, isSensitiveKey } from "./privacy-keys.js";
+import { DEFAULT_SENSITIVE_KEYS, createSensitiveKeyMatcher } from "./privacy-keys.js";
 const REDACTED = "[REDACTED]";
 const BUILTIN_LABELS = [...DEFAULT_SENSITIVE_KEYS, "client_secret", "x_api_key",
     "accessToken", "refreshToken", "privateKey", "clientSecret"];
@@ -29,7 +29,7 @@ function isValidCard(value) {
     }
     return sum % 10 === 0;
 }
-function scrubUrl(raw, keys) {
+function scrubUrl(raw, scrub, sensitive) {
     try {
         const url = new URL(raw);
         if (url.username || url.password) {
@@ -38,9 +38,9 @@ function scrubUrl(raw, keys) {
         }
         const nextQuery = new URLSearchParams();
         for (const [key, value] of url.searchParams) {
-            if (key.length > 128 || scrubCredentialText(key, keys, false) !== key)
+            if (key.length > 128 || scrub(key, false) !== key)
                 continue;
-            nextQuery.append(key, isSensitiveKey(key, keys) || scrubCredentialText(value, keys, false) !== value ? REDACTED : value);
+            nextQuery.append(key, sensitive(key) || scrub(value, false) !== value ? REDACTED : value);
         }
         url.search = nextQuery.toString();
         url.hash = "";
@@ -51,35 +51,37 @@ function scrubUrl(raw, keys) {
         return REDACTED;
     }
 }
-/** Bounded caller input only. Returns stable replacement text, never the matching secret. */
-export function scrubCredentialText(input, additionalKeys, scanUrls = true) {
-    const keys = [...DEFAULT_SENSITIVE_KEYS, ...additionalKeys];
-    if (PEM_START.test(input) && !PEM_COMPLETE.test(input))
-        return REDACTED;
-    let output = input;
-    if (/(?:password|token|secret|authorization|cookie)%3[ad]/i.test(output)) {
-        try {
-            output = decodeURIComponent(output);
-        }
-        catch {
+/** Compile each caller rule once per bounded protection operation, not per scalar. */
+export function createCredentialTextScrubber(additionalKeys) {
+    const sensitive = createSensitiveKeyMatcher([...DEFAULT_SENSITIVE_KEYS, ...additionalKeys]);
+    const patterns = additionalKeys.map(key => {
+        const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+        return new RegExp(`\\b(${escaped})\\b(["']?\\s*[:=]\\s*)(?:"[^"]*"|'[^']*'|[^\\s&,;]+)`, "gi");
+    });
+    const scrub = (input, scanUrls = true) => {
+        if (PEM_START.test(input) && !PEM_COMPLETE.test(input))
             return REDACTED;
+        let output = input;
+        if (/(?:password|token|secret|authorization|cookie)%3[ad]/i.test(output)) {
+            try {
+                output = decodeURIComponent(output);
+            }
+            catch {
+                return REDACTED;
+            }
         }
-    }
-    output = output.replace(PEM, REDACTED).replace(HEADER, "$1: [REDACTED]");
-    output = output.replace(BEARER, "$1 [REDACTED]").replace(DEBUGBUNDLE_TOKEN, REDACTED);
-    output = output.replace(ASSIGNMENT, "$1$2[REDACTED]");
-    if (additionalKeys.length > 0) {
-        for (const key of additionalKeys) {
-            const escaped = key.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-            const named = new RegExp(`\\b(${escaped})\\b(["']?\\s*[:=]\\s*)(?:"[^"]*"|'[^']*'|[^\\s&,;]+)`, "gi");
-            output = output.replace(named, "$1$2[REDACTED]");
-        }
-    }
-    output = output.replace(CARD, (candidate) => isValidCard(candidate) ? REDACTED : candidate);
-    if (!scanUrls)
-        return output;
-    return output.replace(URL_TEXT, (matched) => {
-        const trailing = matched.match(/[).,;]+$/)?.[0] ?? "";
-        return scrubUrl(matched.slice(0, matched.length - trailing.length), keys) + trailing;
-    });
+        output = output.replace(PEM, REDACTED).replace(HEADER, "$1: [REDACTED]");
+        output = output.replace(BEARER, "$1 [REDACTED]").replace(DEBUGBUNDLE_TOKEN, REDACTED);
+        output = output.replace(ASSIGNMENT, "$1$2[REDACTED]");
+        for (const pattern of patterns)
+            output = output.replace(pattern, "$1$2[REDACTED]");
+        output = output.replace(CARD, (candidate) => isValidCard(candidate) ? REDACTED : candidate);
+        if (!scanUrls)
+            return output;
+        return output.replace(URL_TEXT, (matched) => {
+            const trailing = matched.match(/[).,;]+$/)?.[0] ?? "";
+            return scrubUrl(matched.slice(0, matched.length - trailing.length), scrub, sensitive) + trailing;
+        });
+    };
+    return scrub;
 }

package/dist/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,wBAAwB,UAQpC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAUpF;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,SAAS,GAAE,MAAM,EAA6B,EAC9C,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,wBAAwB,UAQpC,CAAC;AAEF,MAAM,WAAW,eAAe;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,mBAAmB,IAAI,MAAM,EAAE,CAE9C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAUpF;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,EAC3C,SAAS,GAAE,MAAM,EAA6B,EAC9C,OAAO,GAAE,eAAoB,GAC5B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAaxB"}

package/dist/redaction.js

@@ -1,5 +1,6 @@
 import { DEFAULT_SENSITIVE_KEYS, isSensitiveKey as privacySensitiveKey } from "./privacy-keys.js";
 import { sanitizeTelemetry } from "./privacy-telemetry.js";
+import { errorField, safeErrorStack } from "./safe-error-fields.js";
 const DEFAULT_REDACT_FIELDS = [
     ...DEFAULT_SENSITIVE_KEYS
 ];
@@ -69,9 +70,6 @@ function sanitize(value, options, depth, visited, key) {
     if (typeof value === "function" || typeof value === "symbol") {
         return `[${typeof value}]`;
     }
-    if (value instanceof Error) {
-        return sanitizeError(value, options, depth, visited);
-    }
     if (depth >= options.maxDepth) {
         return "[Truncated: depth]";
     }
@@ -80,6 +78,8 @@ function sanitize(value, options, depth, visited, key) {
             return "[Circular]";
         }
         visited.add(value);
+        if (value instanceof Error)
+            return sanitizeError(value, options, depth, visited);
         if (Array.isArray(value)) {
             return value
                 .slice(0, options.maxArrayLength)
@@ -94,11 +94,13 @@ function sanitize(value, options, depth, visited, key) {
     return String(value);
 }
 function sanitizeError(error, options, depth, visited) {
+    const name = errorField(error, "name"), message = errorField(error, "message");
+    const stack = safeErrorStack(error), cause = Object.getOwnPropertyDescriptor(error, "cause");
     return {
-        name: truncate(error.name || "Error", options.maxStringLength, options.redactFields),
-        message: truncate(error.message || "", options.maxStringLength, options.redactFields),
-        stack: typeof error.stack === "string" ? truncate(error.stack, options.maxStringLength * 4, options.redactFields) : null,
-        cause: "cause" in error ? sanitize(error.cause, options, depth + 1, visited, "cause") : null
+        name: truncate(typeof name === "string" && name ? name : "Error", options.maxStringLength, options.redactFields),
+        message: truncate(typeof message === "string" ? message : "", options.maxStringLength, options.redactFields),
+        stack: typeof stack === "string" ? truncate(stack, options.maxStringLength * 4, options.redactFields) : null,
+        cause: cause && "value" in cause ? sanitize(cause.value, options, depth + 1, visited, "cause") : null
     };
 }
 function truncate(value, maxLength, fields) {

package/dist/safe-error-fields.d.ts

@@ -0,0 +1,4 @@
+export declare const nativeBrand: ((value: unknown) => boolean) | undefined;
+export declare function errorField(value: object, key: string): unknown;
+export declare function safeErrorStack(value: object): unknown;
+//# sourceMappingURL=safe-error-fields.d.ts.map

package/dist/safe-error-fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-error-fields.d.ts","sourceRoot":"","sources":["../src/safe-error-fields.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,WAAW,WACa,OAAO,KAAK,OAAO,aAAY,CAAC;AAGrE,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAW9D;AACD,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAyBrD"}