@meshconnect/uwc-core 1.0.0 → 1.0.1-snapshot.c7e65ce

package/dist/logger/create-logger.js

@@ -0,0 +1,69 @@
+const LEVEL_WEIGHT = {
+    debug: 0,
+    info: 1,
+    warn: 2,
+    error: 3
+};
+/**
+ * Resolve the effective console threshold, honouring a runtime global override so
+ * an issue can be triaged in a wallet's in-app browser WITHOUT a redeploy:
+ *
+ *   window.UWC_DEBUG = true        // surface everything (debug)
+ *   window.UWC_DEBUG = 'info'      // surface info and above
+ *
+ * The override only ever LOWERS the threshold (shows more) — it can't hide logs a
+ * consumer explicitly opted into. Re-read on every call so toggling it mid-session
+ * takes effect immediately. SSR/Node-safe via the `globalThis` guard.
+ */
+function resolveWeight(configured) {
+    if (typeof globalThis !== 'undefined') {
+        const override = globalThis.UWC_DEBUG;
+        if (override === true)
+            return LEVEL_WEIGHT.debug;
+        if (typeof override === 'string' && override in LEVEL_WEIGHT) {
+            return Math.min(LEVEL_WEIGHT[override], LEVEL_WEIGHT[configured]);
+        }
+    }
+    return LEVEL_WEIGHT[configured];
+}
+/**
+ * Console-backed, level-gated logger. ~zero-dep. Two seams:
+ *  - `onLog` fires pre-gate (all levels) → drives the observer.
+ *  - the console sink fires only at/above the threshold.
+ */
+export function createLogger(options = {}) {
+    let configured = options.level ?? 'warn';
+    const customSink = options.sink;
+    const emit = (level, message, args) => {
+        // Pre-gate tap first — observability must not depend on the console threshold.
+        if (options.onLog) {
+            try {
+                options.onLog(level, message, args);
+            }
+            catch {
+                // A failing sink must never break the caller's log statement.
+            }
+        }
+        if (LEVEL_WEIGHT[level] < resolveWeight(configured))
+            return;
+        if (customSink) {
+            customSink[level](message, ...args);
+        }
+        else {
+            const line = `[${new Date().toISOString()}] ${level.toUpperCase()}: ${message}`;
+            // eslint-disable-next-line no-console -- this IS the default console sink
+            console[level](line, ...args);
+        }
+    };
+    return {
+        debug: (message, ...args) => emit('debug', message, args),
+        info: (message, ...args) => emit('info', message, args),
+        warn: (message, ...args) => emit('warn', message, args),
+        error: (message, ...args) => emit('error', message, args),
+        setLevel: level => {
+            configured = level;
+        },
+        getLevel: () => configured
+    };
+}
+//# sourceMappingURL=create-logger.js.map

package/dist/logger/create-logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-logger.js","sourceRoot":"","sources":["../../src/logger/create-logger.ts"],"names":[],"mappings":"AAEA,MAAM,YAAY,GAA6B;IAC7C,KAAK,EAAE,CAAC;IACR,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;CACT,CAAA;AA8BD;;;;;;;;;;GAUG;AACH,SAAS,aAAa,CAAC,UAAoB;IACzC,IAAI,OAAO,UAAU,KAAK,WAAW,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAI,UAAsC,CAAC,SAAS,CAAA;QAClE,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO,YAAY,CAAC,KAAK,CAAA;QAChD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,IAAI,YAAY,EAAE,CAAC;YAC7D,OAAO,IAAI,CAAC,GAAG,CACb,YAAY,CAAC,QAAoB,CAAC,EAClC,YAAY,CAAC,UAAU,CAAC,CACzB,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,UAAU,CAAC,CAAA;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAA+B,EAAE;IAC5D,IAAI,UAAU,GAAa,OAAO,CAAC,KAAK,IAAI,MAAM,CAAA;IAClD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAA;IAE/B,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,OAAe,EAAE,IAAe,EAAQ,EAAE;QACvE,+EAA+E;QAC/E,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,IAAI,CAAC;gBACH,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;QACD,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,UAAU,CAAC;YAAE,OAAM;QAC3D,IAAI,UAAU,EAAE,CAAC;YACf,UAAU,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAA;YAC/E,0EAA0E;YAC1E,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,CAAA;QAC/B,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;QACzD,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACvD,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;QACvD,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;QACzD,QAAQ,EAAE,KAAK,CAAC,EAAE;YAChB,UAAU,GAAG,KAAK,CAAA;QACpB,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;KAC3B,CAAA;AACH,CAAC"}

package/dist/managers/event-manager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-manager.d.ts","sourceRoot":"","sources":["../../src/managers/event-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAE5E,KAAK,cAAc,GAAG,MAAM,IAAI,CAAA;AAGhC;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAqD;IAEtE,mEAAmE;IACnE,EAAE,CAAC,CAAC,SAAS,YAAY,EACvB,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC5B,MAAM,IAAI;IAUb,wEAAwE;IACxE,IAAI,CAAC,CAAC,SAAS,YAAY,EACzB,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC5B,MAAM,IAAI;IAQb,GAAG,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI;IAK1E,IAAI,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI;IAOlE,OAAO,CAAC,QAAQ;IAkBhB;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI;IAI/C,kFAAkF;IAClF,MAAM,IAAI,IAAI;IAId,gBAAgB,IAAI,MAAM;IAQ1B,iBAAiB,IAAI,IAAI;CAG1B"}
+{"version":3,"file":"event-manager.d.ts","sourceRoot":"","sources":["../../src/managers/event-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAG5E,KAAK,cAAc,GAAG,MAAM,IAAI,CAAA;AAGhC;;;;;;GAMG;AACH,qBAAa,YAAY;IACvB,OAAO,CAAC,SAAS,CAAqD;IAEtE,mEAAmE;IACnE,EAAE,CAAC,CAAC,SAAS,YAAY,EACvB,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC5B,MAAM,IAAI;IAUb,wEAAwE;IACxE,IAAI,CAAC,CAAC,SAAS,YAAY,EACzB,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC5B,MAAM,IAAI;IAQb,GAAG,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI;IAK1E,IAAI,CAAC,CAAC,SAAS,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,IAAI;IAUlE,OAAO,CAAC,QAAQ;IAkBhB;;;OAGG;IACH,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI;IAI/C,kFAAkF;IAClF,MAAM,IAAI,IAAI;IAId,gBAAgB,IAAI,MAAM;IAQ1B,iBAAiB,IAAI,IAAI;CAG1B"}

package/dist/managers/event-manager.js

@@ -1,3 +1,4 @@
+import { TELEMETRY_ONLY_EVENTS } from '../events';
 /**
  * Typed event emitter used by UniversalWalletConnector.
  *
@@ -31,7 +32,10 @@ export class EventManager {
     }
     emit(event, data) {
         this.dispatch(event, data);
-        if (event !== 'change') {
+        // Telemetry-only events (logs, handoff instrumentation) describe what
+        // happened, not a state change — don't cascade them to `change`, or every
+        // log line would trigger a React re-render via legacy `subscribe()`.
+        if (event !== 'change' && !TELEMETRY_ONLY_EVENTS.has(event)) {
             this.dispatch('change', undefined);
         }
     }

package/dist/managers/event-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"event-manager.js","sourceRoot":"","sources":["../../src/managers/event-manager.ts"],"names":[],"mappings":"AAKA;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACf,SAAS,GAA4C,IAAI,GAAG,EAAE,CAAA;IAEtE,mEAAmE;IACnE,EAAE,CACA,KAAQ,EACR,QAA6B;QAE7B,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;YACf,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAA2B,CAAC,CAAA;QACpC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,wEAAwE;IACxE,IAAI,CACF,KAAQ,EACR,QAA6B;QAE7B,MAAM,OAAO,GAAwB,IAAI,CAAC,EAAE;YAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACxB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC,CAAA;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC;IAED,GAAG,CAAyB,KAAQ,EAAE,QAA6B;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,GAAG,EAAE,MAAM,CAAC,QAA2B,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI,CAAyB,KAAQ,EAAE,IAAoB;QACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC1B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAkC,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAEO,QAAQ,CACd,KAAQ,EACR,IAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAM;QAClC,mDAAmD;QACnD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IAEpE;;;OAGG;IACH,SAAS,CAAC,QAAwB;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;IAED,kFAAkF;IAClF,MAAM;QACJ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAkC,CAAC,CAAA;IAC7D,CAAC;IAED,gBAAgB;QACd,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,IAAI,GAAG,CAAC,IAAI,CAAA;QACnB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;CACF"}
+{"version":3,"file":"event-manager.js","sourceRoot":"","sources":["../../src/managers/event-manager.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAA;AAKjD;;;;;;GAMG;AACH,MAAM,OAAO,YAAY;IACf,SAAS,GAA4C,IAAI,GAAG,EAAE,CAAA;IAEtE,mEAAmE;IACnE,EAAE,CACA,KAAQ,EACR,QAA6B;QAE7B,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;YACf,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,QAA2B,CAAC,CAAA;QACpC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACxC,CAAC;IAED,wEAAwE;IACxE,IAAI,CACF,KAAQ,EACR,QAA6B;QAE7B,MAAM,OAAO,GAAwB,IAAI,CAAC,EAAE;YAC1C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;YACxB,QAAQ,CAAC,IAAI,CAAC,CAAA;QAChB,CAAC,CAAA;QACD,OAAO,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IAChC,CAAC;IAED,GAAG,CAAyB,KAAQ,EAAE,QAA6B;QACjE,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,GAAG,EAAE,MAAM,CAAC,QAA2B,CAAC,CAAA;IAC1C,CAAC;IAED,IAAI,CAAyB,KAAQ,EAAE,IAAoB;QACzD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;QAC1B,sEAAsE;QACtE,0EAA0E;QAC1E,qEAAqE;QACrE,IAAI,KAAK,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAkC,CAAC,CAAA;QAC7D,CAAC;IACH,CAAC;IAEO,QAAQ,CACd,KAAQ,EACR,IAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACrC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC;YAAE,OAAM;QAClC,mDAAmD;QACnD,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,QAAQ,CAAC,IAAI,CAAC,CAAA;YAChB,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;IACH,CAAC;IAED,oEAAoE;IAEpE;;;OAGG;IACH,SAAS,CAAC,QAAwB;QAChC,OAAO,IAAI,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IACpC,CAAC;IAED,kFAAkF;IAClF,MAAM;QACJ,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAkC,CAAC,CAAA;IAC7D,CAAC;IAED,gBAAgB;QACd,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,IAAI,GAAG,CAAC,IAAI,CAAA;QACnB,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iBAAiB;QACf,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAA;IACxB,CAAC;CACF"}

package/dist/observability/connect-observer.d.ts

@@ -0,0 +1,22 @@
+import type { EventManager } from '../managers/event-manager';
+import { type UWCObserver } from './telemetry';
+/**
+ * Bridge the internal event bus to a consumer-supplied `UWCObserver`.
+ *
+ * Subscribes to every `UWCEventMap` event, normalizes each to a PII-safe
+ * `UWCTelemetryEvent`, and forwards it to `observer.onEvent`. The `log` event is
+ * routed to `observer.onLog` instead (with scrubbed args) — it's the logging
+ * channel, not a telemetry record. `change` is skipped: it's the legacy
+ * re-render cascade and carries no payload.
+ *
+ * Returns a teardown function that removes every subscription. The caller MUST
+ * invoke it on connector teardown — leaving these attached is the same listener-
+ * leak class as the historical `BridgeParent.destroy()` zombie bug.
+ *
+ * @param getCorrelationId - resolves the correlation id stamped on every event,
+ *   called per-event so a consumer-supplied id that arrives/changes after
+ *   construction is honoured. Must not throw (the caller pre-wraps it).
+ * @param now - clock injectable for deterministic tests; defaults to `Date.now`.
+ */
+export declare function connectObserver(eventManager: EventManager, observer: UWCObserver, getCorrelationId: () => string, now?: () => number): () => void;
+//# sourceMappingURL=connect-observer.d.ts.map

package/dist/observability/connect-observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-observer.d.ts","sourceRoot":"","sources":["../../src/observability/connect-observer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAG7D,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,aAAa,CAAA;AAG9D;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,eAAe,CAC7B,YAAY,EAAE,YAAY,EAC1B,QAAQ,EAAE,WAAW,EACrB,gBAAgB,EAAE,MAAM,MAAM,EAC9B,GAAG,GAAE,MAAM,MAAiB,GAC3B,MAAM,IAAI,CAyCZ"}

package/dist/observability/connect-observer.js

@@ -0,0 +1,60 @@
+import { UWC_EVENT_NAMES } from '../events';
+import { normalizeEvent } from './telemetry';
+import { scrubArgs } from './scrub';
+/**
+ * Bridge the internal event bus to a consumer-supplied `UWCObserver`.
+ *
+ * Subscribes to every `UWCEventMap` event, normalizes each to a PII-safe
+ * `UWCTelemetryEvent`, and forwards it to `observer.onEvent`. The `log` event is
+ * routed to `observer.onLog` instead (with scrubbed args) — it's the logging
+ * channel, not a telemetry record. `change` is skipped: it's the legacy
+ * re-render cascade and carries no payload.
+ *
+ * Returns a teardown function that removes every subscription. The caller MUST
+ * invoke it on connector teardown — leaving these attached is the same listener-
+ * leak class as the historical `BridgeParent.destroy()` zombie bug.
+ *
+ * @param getCorrelationId - resolves the correlation id stamped on every event,
+ *   called per-event so a consumer-supplied id that arrives/changes after
+ *   construction is honoured. Must not throw (the caller pre-wraps it).
+ * @param now - clock injectable for deterministic tests; defaults to `Date.now`.
+ */
+export function connectObserver(eventManager, observer, getCorrelationId, now = Date.now) {
+    const unsubscribers = [];
+    for (const name of UWC_EVENT_NAMES) {
+        if (name === 'change')
+            continue;
+        if (name === 'log') {
+            unsubscribers.push(eventManager.on('log', data => {
+                if (!observer.onLog)
+                    return;
+                const { level, message, args } = data;
+                try {
+                    observer.onLog(level, message, scrubArgs(args));
+                }
+                catch {
+                    // A throwing observer must not break the dispatch chain.
+                }
+            }));
+            continue;
+        }
+        unsubscribers.push(eventManager.on(name, data => {
+            if (!observer.onEvent)
+                return;
+            try {
+                // Normalize OUTSIDE the EventManager's own try/catch (which guards the
+                // listener, not the work the listener does), then hand off.
+                observer.onEvent(normalizeEvent(name, data, getCorrelationId(), now()));
+            }
+            catch {
+                // Same: never let a bad observer break other listeners.
+            }
+        }));
+    }
+    return () => {
+        for (const unsubscribe of unsubscribers)
+            unsubscribe();
+        unsubscribers.length = 0;
+    };
+}
+//# sourceMappingURL=connect-observer.js.map

package/dist/observability/connect-observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-observer.js","sourceRoot":"","sources":["../../src/observability/connect-observer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,cAAc,EAAoB,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,eAAe,CAC7B,YAA0B,EAC1B,QAAqB,EACrB,gBAA8B,EAC9B,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,aAAa,GAAsB,EAAE,CAAA;IAE3C,KAAK,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAQ;QAE/B,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAChB,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE;gBAC5B,IAAI,CAAC,QAAQ,CAAC,KAAK;oBAAE,OAAM;gBAC3B,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAA0B,CAAA;gBAC3D,IAAI,CAAC;oBACH,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACP,yDAAyD;gBAC3D,CAAC;YACH,CAAC,CAAC,CACH,CAAA;YACD,SAAQ;QACV,CAAC;QAED,aAAa,CAAC,IAAI,CAChB,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE;YAC3B,IAAI,CAAC,QAAQ,CAAC,OAAO;gBAAE,OAAM;YAC7B,IAAI,CAAC;gBACH,uEAAuE;gBACvE,4DAA4D;gBAC5D,QAAQ,CAAC,OAAO,CACd,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CACtD,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;QACH,CAAC,CAAC,CACH,CAAA;IACH,CAAC;IAED,OAAO,GAAG,EAAE;QACV,KAAK,MAAM,WAAW,IAAI,aAAa;YAAE,WAAW,EAAE,CAAA;QACtD,aAAa,CAAC,MAAM,GAAG,CAAC,CAAA;IAC1B,CAAC,CAAA;AACH,CAAC"}

package/dist/observability/instrument-handoff.d.ts

@@ -0,0 +1,39 @@
+import type { ConnectionMode, Namespace, NetworkId } from '@meshconnect/uwc-types';
+import type { EventManager } from '../managers/event-manager';
+import type { UWCOperation } from '../events';
+/** Routing facets known at the moment of a wallet handoff. No address, no payload. */
+export interface HandoffContext {
+    operation: UWCOperation;
+    connectionMode: ConnectionMode;
+    walletId?: string | undefined;
+    namespace?: Namespace | undefined;
+    chainId?: NetworkId | undefined;
+}
+export interface InstrumentHandoffOptions {
+    eventManager: EventManager;
+    /**
+     * Deadline after which `walletTimedOut` fires as a SIDE marker (never rejects).
+     * `0` disables the marker. `tonConnect` is always skipped — TON bounds its own
+     * wallet response internally, so a second observational timer would be noise.
+     */
+    timeoutMs: number;
+    /** Clock injectable for deterministic tests. */
+    now?: () => number;
+}
+/**
+ * Instrument one wallet-boundary op so the blind window is measured.
+ *
+ * Emits `awaitingWallet` immediately (before the await that hands control to the
+ * wallet), then exactly one terminal — `walletSucceeded` (success),
+ * `walletRejected` (explicit user no), or `walletFailed` (any other error) — all
+ * carrying the same `handoffId` and a `durationMs`. An intentional abort emits no
+ * terminal (the caller cancelled; it isn't a wallet outcome).
+ *
+ * A non-cancelling `walletTimedOut` marker fires if the deadline passes while the
+ * op is still pending; it is cleared the instant the op settles, so a fast op
+ * never false-fires it, and it NEVER rejects/aborts/mutates state — the wrapped
+ * promise stays the single terminal source of truth. This is a deliberate
+ * deviation from TON's cancelling `withWalletResponseTimeout`.
+ */
+export declare function instrumentHandoff<T>(options: InstrumentHandoffOptions, context: HandoffContext, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=instrument-handoff.d.ts.map

package/dist/observability/instrument-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrument-handoff.d.ts","sourceRoot":"","sources":["../../src/observability/instrument-handoff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,SAAS,EACT,SAAS,EACV,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAS7C,sFAAsF;AACtF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,YAAY,CAAA;IACvB,cAAc,EAAE,cAAc,CAAA;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,YAAY,CAAA;IAC1B;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;IACjB,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,cAAc,EACvB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAkEZ"}

package/dist/observability/instrument-handoff.js

@@ -0,0 +1,86 @@
+import { generateId } from '../utils/id';
+import { isAbortError, isUserRejection, toWalletError } from '../utils/to-wallet-error';
+import { derivePlatform, deriveWalletFlowType } from './telemetry';
+/**
+ * Instrument one wallet-boundary op so the blind window is measured.
+ *
+ * Emits `awaitingWallet` immediately (before the await that hands control to the
+ * wallet), then exactly one terminal — `walletSucceeded` (success),
+ * `walletRejected` (explicit user no), or `walletFailed` (any other error) — all
+ * carrying the same `handoffId` and a `durationMs`. An intentional abort emits no
+ * terminal (the caller cancelled; it isn't a wallet outcome).
+ *
+ * A non-cancelling `walletTimedOut` marker fires if the deadline passes while the
+ * op is still pending; it is cleared the instant the op settles, so a fast op
+ * never false-fires it, and it NEVER rejects/aborts/mutates state — the wrapped
+ * promise stays the single terminal source of truth. This is a deliberate
+ * deviation from TON's cancelling `withWalletResponseTimeout`.
+ */
+export async function instrumentHandoff(options, context, fn) {
+    const { eventManager, timeoutMs } = options;
+    const now = options.now ?? Date.now;
+    const handoffId = generateId();
+    const platform = derivePlatform();
+    const start = now();
+    eventManager.emit('awaitingWallet', {
+        operation: context.operation,
+        connectionMode: context.connectionMode,
+        walletId: context.walletId,
+        namespace: context.namespace,
+        chainId: context.chainId,
+        handoffId,
+        walletFlowType: deriveWalletFlowType(context.connectionMode, platform),
+        platform,
+        timestamp: start
+    });
+    const shouldTime = timeoutMs > 0 && context.connectionMode !== 'tonConnect';
+    const timer = shouldTime
+        ? setTimeout(() => {
+            eventManager.emit('walletTimedOut', {
+                handoffId,
+                operation: context.operation,
+                durationMs: now() - start
+            });
+        }, timeoutMs)
+        : undefined;
+    try {
+        const result = await fn();
+        eventManager.emit('walletSucceeded', {
+            handoffId,
+            operation: context.operation,
+            durationMs: now() - start
+        });
+        return result;
+    }
+    catch (error) {
+        // Caller-driven cancellation isn't a wallet outcome — leave it unterminated,
+        // mirroring the façade's `emitError` AbortError skip. Checked BEFORE rejection
+        // is safe: real user rejections surface as WalletConnectorError{rejected} or
+        // EIP-1193 4001 (see isUserRejection), never as an AbortError — within UWC's
+        // dependency surface AbortError is produced only by the caller's AbortSignal.
+        if (isAbortError(error))
+            throw error;
+        const durationMs = now() - start;
+        if (isUserRejection(error)) {
+            eventManager.emit('walletRejected', {
+                handoffId,
+                operation: context.operation,
+                durationMs
+            });
+        }
+        else {
+            eventManager.emit('walletFailed', {
+                handoffId,
+                operation: context.operation,
+                durationMs,
+                error: toWalletError(error)
+            });
+        }
+        throw error;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=instrument-handoff.js.map

package/dist/observability/instrument-handoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instrument-handoff.js","sourceRoot":"","sources":["../../src/observability/instrument-handoff.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,aAAa,EACd,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAuBlE;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC,EACjC,OAAuB,EACvB,EAAoB;IAEpB,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,CAAA;IAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAEnC,MAAM,SAAS,GAAG,UAAU,EAAE,CAAA;IAC9B,MAAM,QAAQ,GAAG,cAAc,EAAE,CAAA;IACjC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAA;IAEnB,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAClC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,cAAc,EAAE,oBAAoB,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;QACtE,QAAQ;QACR,SAAS,EAAE,KAAK;KACjB,CAAC,CAAA;IAEF,MAAM,UAAU,GAAG,SAAS,GAAG,CAAC,IAAI,OAAO,CAAC,cAAc,KAAK,YAAY,CAAA;IAC3E,MAAM,KAAK,GAA8C,UAAU;QACjE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACd,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAClC,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,GAAG,EAAE,GAAG,KAAK;aAC1B,CAAC,CAAA;QACJ,CAAC,EAAE,SAAS,CAAC;QACf,CAAC,CAAC,SAAS,CAAA;IAEb,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAA;QACzB,YAAY,CAAC,IAAI,CAAC,iBAAiB,EAAE;YACnC,SAAS;YACT,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU,EAAE,GAAG,EAAE,GAAG,KAAK;SAC1B,CAAC,CAAA;QACF,OAAO,MAAM,CAAA;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,6EAA6E;QAC7E,+EAA+E;QAC/E,6EAA6E;QAC7E,6EAA6E;QAC7E,8EAA8E;QAC9E,IAAI,YAAY,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAA;QAEpC,MAAM,UAAU,GAAG,GAAG,EAAE,GAAG,KAAK,CAAA;QAChC,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,YAAY,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAClC,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU;aACX,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE;gBAChC,SAAS;gBACT,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU;gBACV,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;aAC5B,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,KAAK,CAAA;IACb,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IAChC,CAAC;AACH,CAAC"}

package/dist/observability/scrub.d.ts

@@ -0,0 +1,30 @@
+/**
+ * PII / secret scrubber for data leaving UWC through the observer seam.
+ *
+ * Security-first: the normalized `UWCTelemetryEvent` excludes signing payloads
+ * and addresses by construction — its STRUCTURED fields have no slot for them
+ * (§ telemetry.ts). This scrubber is the second line of defence for the two
+ * surfaces that CAN still carry free-form data on the observer path: the
+ * `WalletError.message` forwarded to `observer.onEvent`, and the `args` forwarded
+ * to `observer.onLog`. (The console / custom-logger sink receives raw data — it's
+ * local, not egress.)
+ *
+ * Two detection layers:
+ *  - KEY-based redaction of sensitive object keys — substring match (not regex),
+ *    avoiding the ReDoS class that Wiz flags on user-input regexes.
+ *  - CONTENT-based redaction of secrets embedded in free-form strings (hex blobs,
+ *    secret k/v params, bearer tokens) — via linear, single-quantifier regexes
+ *    (see SECRET_CONTENT_PATTERNS) that carry no catastrophic-backtracking risk.
+ */
+/**
+ * Recursively copy `value`, redacting sensitive object-keys, capping long
+ * strings, and rendering non-serializable values inert. The returned objects use
+ * a null prototype so a malicious `__proto__`/`constructor` key in attacker-shaped
+ * input can't pollute `Object.prototype` downstream.
+ */
+export declare function scrubValue(value: unknown, depth?: number): unknown;
+/** Scrub a free-form error message (string in → capped string out). */
+export declare function scrubMessage(message: string): string;
+/** Scrub a variadic `args` array before it reaches `observer.onLog`. */
+export declare function scrubArgs(args: unknown[]): unknown[];
+//# sourceMappingURL=scrub.d.ts.map

package/dist/observability/scrub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.d.ts","sourceRoot":"","sources":["../../src/observability/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAyEH;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,OAAO,CAmC7D;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,CAEpD"}

package/dist/observability/scrub.js

@@ -0,0 +1,135 @@
+/**
+ * PII / secret scrubber for data leaving UWC through the observer seam.
+ *
+ * Security-first: the normalized `UWCTelemetryEvent` excludes signing payloads
+ * and addresses by construction — its STRUCTURED fields have no slot for them
+ * (§ telemetry.ts). This scrubber is the second line of defence for the two
+ * surfaces that CAN still carry free-form data on the observer path: the
+ * `WalletError.message` forwarded to `observer.onEvent`, and the `args` forwarded
+ * to `observer.onLog`. (The console / custom-logger sink receives raw data — it's
+ * local, not egress.)
+ *
+ * Two detection layers:
+ *  - KEY-based redaction of sensitive object keys — substring match (not regex),
+ *    avoiding the ReDoS class that Wiz flags on user-input regexes.
+ *  - CONTENT-based redaction of secrets embedded in free-form strings (hex blobs,
+ *    secret k/v params, bearer tokens) — via linear, single-quantifier regexes
+ *    (see SECRET_CONTENT_PATTERNS) that carry no catastrophic-backtracking risk.
+ */
+/**
+ * Separator-free, lower-cased fragments that mark a value as sensitive. Keys are
+ * normalized (separators stripped) before matching, so `walletPrivateKey`,
+ * `private_key`, `x-api-key`, and `authToken` all hit the same short list. This
+ * over-redacts by design (a `security`-first scrubber prefers a false redaction
+ * to a leak).
+ */
+const SENSITIVE_KEY_FRAGMENTS = [
+    'seed',
+    'mnemonic',
+    'privatekey',
+    'secret',
+    'password',
+    'passphrase',
+    'signature',
+    'message',
+    'payload',
+    'token',
+    'apikey',
+    'authorization',
+    'auth'
+];
+const MAX_STRING_LENGTH = 500;
+const MAX_DEPTH = 4;
+const REDACTED = '[Redacted]';
+function isSensitiveKey(key) {
+    // Strip separators so `private_key` / `x-api-key` normalize to the bare form.
+    const normalized = key.toLowerCase().split('-').join('').split('_').join('');
+    return SENSITIVE_KEY_FRAGMENTS.some(fragment => normalized.includes(fragment));
+}
+// Content patterns for secrets embedded in FREE-FORM strings (error messages,
+// log args) where key-based redaction can't reach. All are linear, anchored,
+// single-quantifier expressions — no nested/overlapping quantifiers — so they
+// carry no catastrophic-backtracking (ReDoS) risk on attacker-controlled input.
+const SECRET_CONTENT_PATTERNS = [
+    // 0x-prefixed hex blobs: EVM addresses (40 nibbles) and longer
+    // signatures/keys/hashes/calldata (64+). Over-redacts public hashes by design.
+    [/0x[a-fA-F0-9]{40,}/g, '0x[redacted-hex]'],
+    // `secret=…` / `token=…` / `key=…` query-string or k/v fragments.
+    [
+        /\b(token|key|secret|auth|sig|signature|password|passphrase|mnemonic|seed|apikey)=[^\s&"']+/gi,
+        '$1=[redacted]'
+    ],
+    // `Bearer <opaque>` / `Basic <opaque>` authorization values.
+    [/\b(bearer|basic)\s+[A-Za-z0-9._~+/-]+=*/gi, '$1 [redacted]']
+];
+/**
+ * Redact secrets that live INSIDE a free-form string. Best-effort and
+ * deliberately conservative toward over-redaction: a wallet error string can
+ * embed an address, a reverted-tx calldata blob, or a URL with a token, none of
+ * which key-based redaction sees. Two documented best-effort gaps, both left
+ * unmatched to avoid destroying legitimate data:
+ *   - Base58 (Solana) / TON `EQ…` addresses — indistinguishable from ordinary
+ *     words without false positives.
+ *   - BARE (non-`0x`) hex blobs — a raw 64-char hex string is far more often a
+ *     legitimate id/hash than a secret, so only `0x`-prefixed hex is redacted.
+ * Structured telemetry fields never carry addresses regardless (see telemetry.ts);
+ * this pass only hardens the free-form `error.message` / log-arg surface.
+ */
+function redactSecretsInString(input) {
+    let out = input;
+    for (const [pattern, replacement] of SECRET_CONTENT_PATTERNS) {
+        out = out.replace(pattern, replacement);
+    }
+    return out;
+}
+/**
+ * Recursively copy `value`, redacting sensitive object-keys, capping long
+ * strings, and rendering non-serializable values inert. The returned objects use
+ * a null prototype so a malicious `__proto__`/`constructor` key in attacker-shaped
+ * input can't pollute `Object.prototype` downstream.
+ */
+export function scrubValue(value, depth = 0) {
+    if (depth > MAX_DEPTH)
+        return '[Truncated: max depth]';
+    if (value === null || value === undefined)
+        return value;
+    const type = typeof value;
+    if (type === 'string') {
+        // Redact embedded secrets BEFORE capping, so the cap can't slice a pattern
+        // in half and leak its tail.
+        const str = redactSecretsInString(value);
+        return str.length > MAX_STRING_LENGTH
+            ? str.slice(0, MAX_STRING_LENGTH) + '…[truncated]'
+            : str;
+    }
+    if (type === 'number' || type === 'boolean')
+        return value;
+    if (type === 'bigint')
+        return value.toString();
+    if (type === 'function' || type === 'symbol')
+        return `[${type}]`;
+    if (Array.isArray(value)) {
+        return value.map(item => scrubValue(item, depth + 1));
+    }
+    if (type === 'object') {
+        // Error instances carry a useful message but also a stack we don't want.
+        if (value instanceof Error) {
+            return { name: value.name, message: scrubValue(value.message, depth + 1) };
+        }
+        const out = Object.create(null);
+        for (const [key, val] of Object.entries(value)) {
+            out[key] = isSensitiveKey(key) ? REDACTED : scrubValue(val, depth + 1);
+        }
+        return out;
+    }
+    return '[Unserializable]';
+}
+/** Scrub a free-form error message (string in → capped string out). */
+export function scrubMessage(message) {
+    return scrubValue(message);
+}
+/** Scrub a variadic `args` array before it reaches `observer.onLog`. */
+export function scrubArgs(args) {
+    return args.map(arg => scrubValue(arg));
+}
+//# sourceMappingURL=scrub.js.map

package/dist/observability/scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scrub.js","sourceRoot":"","sources":["../../src/observability/scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;GAMG;AACH,MAAM,uBAAuB,GAAG;IAC9B,MAAM;IACN,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,WAAW;IACX,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,eAAe;IACf,MAAM;CACP,CAAA;AAED,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAC7B,MAAM,SAAS,GAAG,CAAC,CAAA;AACnB,MAAM,QAAQ,GAAG,YAAY,CAAA;AAE7B,SAAS,cAAc,CAAC,GAAW;IACjC,8EAA8E;IAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5E,OAAO,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;AAChF,CAAC;AAED,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,MAAM,uBAAuB,GAA6C;IACxE,+DAA+D;IAC/D,+EAA+E;IAC/E,CAAC,qBAAqB,EAAE,kBAAkB,CAAC;IAC3C,kEAAkE;IAClE;QACE,8FAA8F;QAC9F,eAAe;KAChB;IACD,6DAA6D;IAC7D,CAAC,2CAA2C,EAAE,eAAe,CAAC;CAC/D,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,qBAAqB,CAAC,KAAa;IAC1C,IAAI,GAAG,GAAG,KAAK,CAAA;IACf,KAAK,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,IAAI,uBAAuB,EAAE,CAAC;QAC7D,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAClD,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,wBAAwB,CAAA;IAEtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAEvD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAA;IACzB,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,2EAA2E;QAC3E,6BAA6B;QAC7B,MAAM,GAAG,GAAG,qBAAqB,CAAC,KAAe,CAAC,CAAA;QAClD,OAAO,GAAG,CAAC,MAAM,GAAG,iBAAiB;YACnC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,cAAc;YAClD,CAAC,CAAC,GAAG,CAAA;IACT,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IACzD,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAQ,KAAgB,CAAC,QAAQ,EAAE,CAAA;IAC1D,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,IAAI,GAAG,CAAA;IAEhE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;IACvD,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,yEAAyE;QACzE,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAA;QAC5E,CAAC;QACD,MAAM,GAAG,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACxD,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC1E,GAAG,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,OAAO,kBAAkB,CAAA;AAC3B,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,OAAO,UAAU,CAAC,OAAO,CAAW,CAAA;AACtC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAA;AACzC,CAAC"}

package/dist/observability/telemetry.d.ts

@@ -0,0 +1,77 @@
+import type { ConnectionMode, WalletError, WalletFlowType, Platform, LogLevel, Namespace, NetworkId } from '@meshconnect/uwc-types';
+import type { UWCEventName, UWCEventMap, UWCOperation } from '../events';
+/**
+ * A normalized, PII-safe telemetry record derived from a `UWCEventMap` event.
+ *
+ * This is the ONLY shape that reaches `observer.onEvent`. It is the PII boundary:
+ * it has no field for a signing payload, signature, raw transaction, or wallet
+ * address — leaking those is structurally impossible, not merely discouraged.
+ */
+export interface UWCTelemetryEvent {
+    /** The originating event name. */
+    name: UWCEventName;
+    /** Per-connector-instance correlation id (stamped on every event). */
+    sdkSessionId: string;
+    /** ms since epoch when the record was produced. */
+    timestamp: number;
+    /** Wallet-boundary op, when the event relates to one. */
+    operation?: UWCOperation | undefined;
+    connectionMode?: ConnectionMode | undefined;
+    /** CAIP namespace (eip155 | solana | tron | tvm …) — never an address. */
+    namespace?: Namespace | undefined;
+    /** CAIP chain id (e.g. `eip155:1`) — never an address. */
+    chainId?: NetworkId | undefined;
+    /** Catalog wallet id — never an address. */
+    walletId?: string | undefined;
+    /** Correlates a handoff start with its terminal. */
+    handoffId?: string | undefined;
+    durationMs?: number | undefined;
+    walletFlowType?: WalletFlowType | undefined;
+    platform?: Platform | undefined;
+    /** Present on failure events. `message` is scrubbed before egress. */
+    error?: WalletError | undefined;
+    /** Log level, present only for `name === 'log'`. */
+    level?: LogLevel | undefined;
+}
+/**
+ * Vendor-agnostic telemetry sink. Consumers implement; UWC ships no vendor SDK.
+ * Both methods are optional and called best-effort (throws are swallowed upstream).
+ *
+ * CONTRACT — both methods are invoked **synchronously on the wallet-operation
+ * path**. A terminal event (e.g. `walletSucceeded`) fires between the wallet
+ * returning a result and that result reaching the caller, so a slow handler adds
+ * latency to connect / sign / sendTransaction. Keep handlers **non-blocking**:
+ * hand off to a queue-backed sink (Datadog `addAction`, Segment `track`, etc. are
+ * already non-blocking) or defer heavy work yourself — e.g.
+ * `onEvent: e => queueMicrotask(() => doHeavyWork(e))`. Do not perform synchronous
+ * network/IO or expensive serialization inline.
+ */
+export interface UWCObserver {
+    /** A normalized, PII-safe event. Forward to Datadog / Amplitude / Segment / … (non-blocking). */
+    onEvent?(event: UWCTelemetryEvent): void;
+    /** A log line (all levels). `args` is already scrubbed. Keep non-blocking. */
+    onLog?(level: LogLevel, message: string, args: unknown[]): void;
+}
+/**
+ * Best-effort coarse runtime surface. HEURISTIC — user agents lie and in-app
+ * browsers are hard to detect; treat `webview` as a hint, not a guarantee.
+ * Never returns the raw UA (PII / high-cardinality).
+ */
+export declare function derivePlatform(): Platform;
+/**
+ * Derive the flow taxonomy from connection mode + surface. HEURISTIC — UWC does
+ * not always know whether a WalletConnect handoff used a deeplink vs a QR scan;
+ * we infer from the platform (mobile ⇒ deeplink, desktop ⇒ QR), matching link-v2's
+ * historical intent. Consumers with better context may override downstream.
+ */
+export declare function deriveWalletFlowType(connectionMode: ConnectionMode, platform: Platform): WalletFlowType;
+/**
+ * Map a raw `UWCEventMap` event to its PII-safe `UWCTelemetryEvent`.
+ *
+ * Per-event allow-listing: only known-safe fields are copied. Payloads carrying a
+ * `Session`/`Network` (which include the wallet address) are reduced to
+ * `namespace` + `chainId` + `walletId`. Unknown/noisy payloads collapse to just
+ * the name. `error.message` is scrubbed.
+ */
+export declare function normalizeEvent<K extends UWCEventName>(name: K, data: UWCEventMap[K], sdkSessionId: string, now: number): UWCTelemetryEvent;
+//# sourceMappingURL=telemetry.d.ts.map

package/dist/observability/telemetry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.d.ts","sourceRoot":"","sources":["../../src/observability/telemetry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,WAAW,EACX,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,SAAS,EACV,MAAM,wBAAwB,CAAA;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAGxE;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,IAAI,EAAE,YAAY,CAAA;IAClB,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAA;IACpB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAA;IACjB,yDAAyD;IACzD,SAAS,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;IACpC,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAA;IAC3C,0EAA0E;IAC1E,SAAS,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IACjC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,SAAS,GAAG,SAAS,CAAA;IAC/B,4CAA4C;IAC5C,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC7B,oDAAoD;IACpD,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC/B,cAAc,CAAC,EAAE,cAAc,GAAG,SAAS,CAAA;IAC3C,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,sEAAsE;IACtE,KAAK,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAC/B,oDAAoD;IACpD,KAAK,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC7B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW;IAC1B,iGAAiG;IACjG,OAAO,CAAC,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,CAAA;IACxC,8EAA8E;IAC9E,KAAK,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;CAChE;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,QAAQ,CAWzC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,cAAc,EAAE,cAAc,EAC9B,QAAQ,EAAE,QAAQ,GACjB,cAAc,CAehB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,SAAS,YAAY,EACnD,IAAI,EAAE,CAAC,EACP,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,EACpB,YAAY,EAAE,MAAM,EACpB,GAAG,EAAE,MAAM,GACV,iBAAiB,CAuFnB"}