@qitqode/qitqore 0.0.0-stage → 0.2.0

package/dist/recovery.js

@@ -0,0 +1,145 @@
+function abortReason(signal) {
+    return signal.reason ?? Object.assign(new Error("The operation was aborted"), { name: "AbortError" });
+}
+export function abortableDelay(ms, signal) {
+    if (!Number.isFinite(ms) || ms < 0) {
+        return Promise.reject(new RangeError("delay must be a non-negative finite number"));
+    }
+    if (signal?.aborted)
+        return Promise.reject(abortReason(signal));
+    if (ms === 0)
+        return Promise.resolve();
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const cleanup = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener("abort", onAbort);
+        };
+        const finish = (callback) => {
+            if (settled)
+                return;
+            settled = true;
+            cleanup();
+            callback();
+        };
+        const onAbort = () => finish(() => reject(signal ? abortReason(signal) : undefined));
+        const timer = setTimeout(() => finish(resolve), ms);
+        signal?.addEventListener("abort", onAbort, { once: true });
+        if (signal?.aborted)
+            onAbort();
+    });
+}
+function snapshot(outcome) {
+    return Object.freeze({ ...outcome });
+}
+export async function runWithRecovery(options) {
+    if (typeof options.operationId !== "string" ||
+        !options.operationId.trim() ||
+        options.operationId.length > 256) {
+        throw new TypeError("operationId must contain between 1 and 256 characters");
+    }
+    if (!Number.isInteger(options.maxAttempts) || options.maxAttempts < 1 || options.maxAttempts > 5) {
+        throw new RangeError("maxAttempts must be an integer between 1 and 5");
+    }
+    if (options.deadlineAt !== undefined && (!Number.isFinite(options.deadlineAt) || options.deadlineAt <= 0)) {
+        throw new RangeError("deadlineAt must be a positive finite epoch timestamp");
+    }
+    if (options.deadlineAt !== undefined && options.deadlineAt <= Date.now()) {
+        throw new Error("The recovery operation deadline expired");
+    }
+    const deadlineController = options.deadlineAt === undefined ? undefined : new AbortController();
+    const deadlineTimer = deadlineController
+        ? setTimeout(() => deadlineController.abort(new Error("The recovery operation deadline expired")), Math.max(0, options.deadlineAt - Date.now()))
+        : undefined;
+    const signal = deadlineController
+        ? AbortSignal.any([...(options.signal ? [options.signal] : []), deadlineController.signal])
+        : options.signal;
+    try {
+        for (let attempt = 1; attempt <= options.maxAttempts; attempt += 1) {
+            if (signal?.aborted)
+                throw abortReason(signal);
+            const outcome = {
+                acceptance: "unknown",
+                partialOutput: false,
+                sideEffectStarted: false,
+            };
+            const context = {
+                operationId: options.operationId,
+                attempt,
+                ...(signal ? { signal } : {}),
+                markNotAccepted() {
+                    if (outcome.acceptance !== "accepted")
+                        outcome.acceptance = "not-accepted";
+                },
+                markAccepted() {
+                    outcome.acceptance = "accepted";
+                },
+                markPartialOutput() {
+                    outcome.partialOutput = true;
+                },
+                markSideEffectStarted() {
+                    outcome.sideEffectStarted = true;
+                },
+            };
+            try {
+                if (options.onAttemptStart)
+                    await options.onAttemptStart(context);
+                const result = await options.execute(context);
+                if (options.onAttemptOutcome) {
+                    await options.onAttemptOutcome(Object.freeze({
+                        operationId: options.operationId,
+                        attempt,
+                        outcome: snapshot(outcome),
+                        ...(signal ? { signal } : {}),
+                    }));
+                }
+                return result;
+            }
+            catch (error) {
+                if (options.onAttemptOutcome) {
+                    await options.onAttemptOutcome(Object.freeze({
+                        operationId: options.operationId,
+                        attempt,
+                        outcome: snapshot(outcome),
+                        ...(signal ? { signal } : {}),
+                        error,
+                    }));
+                }
+                if (signal?.aborted)
+                    throw abortReason(signal);
+                if (attempt >= options.maxAttempts)
+                    throw error;
+                const replayContext = Object.freeze({
+                    operationId: options.operationId,
+                    attempt,
+                    nextAttempt: attempt + 1,
+                    error,
+                    outcome: snapshot(outcome),
+                    ...(signal ? { signal } : {}),
+                });
+                if (options.shouldRetry(error, replayContext) !== true)
+                    throw error;
+                if (outcome.acceptance === "accepted" ||
+                    outcome.partialOutput ||
+                    outcome.sideEffectStarted) {
+                    throw error;
+                }
+                if ((await options.authorizeReplay(replayContext)) !== true)
+                    throw error;
+                if (signal?.aborted)
+                    throw abortReason(signal);
+                const configuredDelay = typeof options.backoffMs === "function"
+                    ? options.backoffMs(attempt + 1, error)
+                    : options.backoffMs ?? 0;
+                const delay = Math.min(30_000, Math.max(0, configuredDelay));
+                await abortableDelay(delay, signal);
+            }
+        }
+    }
+    finally {
+        if (deadlineTimer !== undefined)
+            clearTimeout(deadlineTimer);
+    }
+    throw new Error("Unreachable recovery state");
+}
+//# sourceMappingURL=recovery.js.map

package/dist/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAmDA,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAEvC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,OAAuB;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,OAA2B;IAClE,IACE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;QAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IAChG,MAAM,aAAa,GAAG,kBAAkB;QACtC,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,EACpF,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAC9C;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3F,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEnB,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAE/C,MAAM,OAAO,GAAmB;gBAC9B,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,KAAK;gBACpB,iBAAiB,EAAE,KAAK;aACzB,CAAC;YACF,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,eAAe;oBACb,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;wBAAE,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;gBAC7E,CAAC;gBACD,YAAY;oBACV,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;gBAClC,CAAC;gBACD,iBAAiB;oBACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC/B,CAAC;gBACD,qBAAqB;oBACnB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBACnC,CAAC;aACF,CAAC;YAEF,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,cAAc;oBAAE,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;wBAC3C,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;wBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9B,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;wBAC3C,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;wBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7B,KAAK;qBACN,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC/C,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW;oBAAE,MAAM,KAAK,CAAC;gBAEhD,MAAM,aAAa,GAA+B,MAAM,CAAC,MAAM,CAAC;oBAC9D,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO;oBACP,WAAW,EAAE,OAAO,GAAG,CAAC;oBACxB,KAAK;oBACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;oBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC;gBACpE,IACE,OAAO,CAAC,UAAU,KAAK,UAAU;oBACjC,OAAO,CAAC,aAAa;oBACrB,OAAO,CAAC,iBAAiB,EACzB,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC;gBACzE,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAE/C,MAAM,eAAe,GACnB,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;oBACrC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC;oBACvC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;gBAC7D,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;QACD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,CAAC"}

package/dist/redaction.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Pure, opt-in secret redaction. The caller supplies every secret value and
+ * sensitive key name; QitQore never reads the environment, a credential store,
+ * or any global registry, and it keeps no state between calls except the
+ * configuration captured by `createSecretRedactor`.
+ */
+export declare const DEFAULT_REDACTION_MARKER = "[redacted]";
+export declare const TRUNCATION_MARKER = "[truncated]";
+/**
+ * Replace credential shapes in free text: authorization headers, bearer or basic
+ * tokens, secret-looking `key=value` pairs, query-string secrets, and JWT-shaped
+ * values. These are heuristics, so `createSecretRedactor` can disable them for
+ * model output where an ordinary word such as `token: 5` must survive.
+ */
+export declare function redactCredentialShapes(text: string): string;
+/**
+ * Bounded, log-safe text: credential shapes are redacted, control characters
+ * are replaced, surrounding whitespace is trimmed, and the result is capped.
+ */
+export declare function redactSensitiveText(text: string, maxLength: number): string;
+/**
+ * Encodings in which a secret can legitimately appear in text: the raw value,
+ * URL-encoded, JSON-escaped, and base64. Hosts use this to count registrations
+ * against their own limits, so the encoding rule has one implementation.
+ */
+export declare function secretEncodings(value: string): string[];
+export interface SecretRedactorOptions {
+    /** Exact secret values supplied by the host. Shorter values are ignored. */
+    secrets?: readonly string[];
+    /** Shortest configured value that is redacted. Defaults to 8 characters. */
+    minSecretLength?: number;
+    /** Key names whose values are replaced wholesale. Compared after normalization. */
+    sensitiveKeys?: readonly string[];
+    /** Additional key test over the normalized key, for host-specific naming rules. */
+    isSensitiveKey?: (normalized: string) => boolean;
+    /** Replacement text for redacted values. Must be deterministic for the caller. */
+    marker?: string;
+    /**
+     * Apply credential-shape heuristics in addition to exact values. Defaults to
+     * true. Disable it for model output, where a shape match can alter ordinary prose.
+     */
+    patterns?: boolean;
+}
+export interface SecretRedactionStream {
+    /** Redact a chunk. Text that could still be the start of a secret is held back. */
+    push(chunk: string): string;
+    /** Release everything still held back. Call once the stream has ended. */
+    finish(): string;
+}
+export interface SecretRedactor {
+    /** Replace configured values and their encodings, then common credential shapes. */
+    redact(text: string): string;
+    /** Create a stateful, chunk-safe redactor for one streamed output. */
+    stream(): SecretRedactionStream;
+    /** Recursively redact a structured value with bounded depth, entries, and string size. */
+    redactStructure(value: unknown): unknown;
+}
+/**
+ * Build a redactor from explicit configuration. Each call returns an independent
+ * object, so hosts that rotate secrets create a new redactor rather than mutating
+ * a shared one.
+ */
+export declare function createSecretRedactor(options?: SecretRedactorOptions): SecretRedactor;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,eAAO,MAAM,wBAAwB,eAAe,CAAC;AACrD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAS/C;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3E;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQvD;AAUD,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,mFAAmF;IACnF,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,oFAAoF;IACpF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,sEAAsE;IACtE,MAAM,IAAI,qBAAqB,CAAC;IAChC,0FAA0F;IAC1F,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA0FxF"}

package/dist/redaction.js

@@ -0,0 +1,154 @@
+/**
+ * Pure, opt-in secret redaction. The caller supplies every secret value and
+ * sensitive key name; QitQore never reads the environment, a credential store,
+ * or any global registry, and it keeps no state between calls except the
+ * configuration captured by `createSecretRedactor`.
+ */
+const AUTH_HEADER = /\b(authorization)\s*[:=]\s*(?:bearer|basic)\s+\S+/gi;
+const SECRET_VALUE = /\b(api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|token|password|secret)\s*[:=]\s*["']?[^\s,;"'&]+/gi;
+const BEARER_TOKEN = /\b(bearer|basic)\s+[A-Za-z0-9._~+/-]+=*/gi;
+const URL_SECRET = /([?&](?:api[-_]?key|access[-_]?token|refresh[-_]?token|token|secret)=)[^&\s]+/gi;
+const JWT = /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g;
+const CONTROL_CHARACTERS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g;
+export const DEFAULT_REDACTION_MARKER = "[redacted]";
+export const TRUNCATION_MARKER = "[truncated]";
+const DEFAULT_MIN_SECRET_LENGTH = 8;
+const MAX_STRUCTURE_DEPTH = 8;
+const MAX_STRUCTURE_ENTRIES = 256;
+const MAX_STRING_LENGTH = 16_384;
+/** Longest non-whitespace run a stream holds back, so a split token is never emitted early. */
+const MAX_STREAM_TOKEN_HOLD = 4_096;
+/**
+ * Replace credential shapes in free text: authorization headers, bearer or basic
+ * tokens, secret-looking `key=value` pairs, query-string secrets, and JWT-shaped
+ * values. These are heuristics, so `createSecretRedactor` can disable them for
+ * model output where an ordinary word such as `token: 5` must survive.
+ */
+export function redactCredentialShapes(text) {
+    return text
+        .replace(AUTH_HEADER, "$1: [redacted]")
+        .replace(SECRET_VALUE, "$1=[redacted]")
+        .replace(BEARER_TOKEN, "$1 [redacted]")
+        .replace(URL_SECRET, "$1[redacted]")
+        .replace(JWT, "[redacted-token]");
+}
+/**
+ * Bounded, log-safe text: credential shapes are redacted, control characters
+ * are replaced, surrounding whitespace is trimmed, and the result is capped.
+ */
+export function redactSensitiveText(text, maxLength) {
+    return redactCredentialShapes(text).replace(CONTROL_CHARACTERS, " ").trim().slice(0, maxLength);
+}
+function utf8Base64(value) {
+    let binary = "";
+    for (const byte of new TextEncoder().encode(value))
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/**
+ * Encodings in which a secret can legitimately appear in text: the raw value,
+ * URL-encoded, JSON-escaped, and base64. Hosts use this to count registrations
+ * against their own limits, so the encoding rule has one implementation.
+ */
+export function secretEncodings(value) {
+    const variants = [
+        value,
+        encodeURIComponent(value),
+        JSON.stringify(value).slice(1, -1),
+        utf8Base64(value),
+    ];
+    return [...new Set(variants)].filter((item) => item.length > 0);
+}
+/** Normalize a key so `accessToken`, `access-token`, and `access_token` compare equal. */
+function normalizedKey(key) {
+    return key
+        .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+        .replace(/-/g, "_")
+        .toLowerCase();
+}
+/**
+ * Build a redactor from explicit configuration. Each call returns an independent
+ * object, so hosts that rotate secrets create a new redactor rather than mutating
+ * a shared one.
+ */
+export function createSecretRedactor(options = {}) {
+    const minSecretLength = options.minSecretLength ?? DEFAULT_MIN_SECRET_LENGTH;
+    const marker = options.marker ?? DEFAULT_REDACTION_MARKER;
+    const variants = [
+        ...new Set((options.secrets ?? [])
+            .filter((value) => typeof value === "string" && value.length >= minSecretLength)
+            .flatMap(secretEncodings)),
+    ].sort((a, b) => b.length - a.length);
+    const longest = variants.length === 0 ? 0 : variants[0].length;
+    const sensitiveKeys = new Set((options.sensitiveKeys ?? []).map(normalizedKey));
+    const isSensitiveKey = (key) => sensitiveKeys.has(normalizedKey(key)) || (options.isSensitiveKey?.(normalizedKey(key)) ?? false);
+    const patterns = options.patterns ?? true;
+    // Exact values come first so a secret is never partially rewritten by a shape rule.
+    // Whitespace and control characters are preserved: streamed text must reassemble unchanged.
+    const redact = (text) => {
+        const exact = variants.length === 0 || text.length === 0
+            ? text
+            : variants.reduce((current, item) => current.split(item).join(marker), text);
+        return patterns ? redactCredentialShapes(exact) : exact;
+    };
+    /**
+     * Earliest index where a still-incomplete secret could begin. Everything from
+     * that index on is held, so a value split across chunks is never emitted in part.
+     */
+    const partialSecretStart = (text) => {
+        for (let start = Math.max(0, text.length - longest + 1); start < text.length; start += 1) {
+            const suffix = text.slice(start);
+            if (variants.some((variant) => variant.length > suffix.length && variant.startsWith(suffix)))
+                return start;
+        }
+        return text.length;
+    };
+    /** Credential shapes span non-whitespace runs, so the trailing run is held as well. */
+    const credentialTailStart = (text) => {
+        const tail = /\S*$/.exec(text)?.[0].length ?? 0;
+        return text.length - Math.min(tail, MAX_STREAM_TOKEN_HOLD);
+    };
+    const stream = () => {
+        let pending = "";
+        return {
+            push(chunk) {
+                pending += chunk;
+                let boundary = Math.min(partialSecretStart(pending), patterns ? credentialTailStart(pending) : pending.length);
+                if (boundary > 0 && boundary < pending.length) {
+                    const before = pending.charCodeAt(boundary - 1);
+                    const after = pending.charCodeAt(boundary);
+                    if (before >= 0xd800 && before <= 0xdbff && after >= 0xdc00 && after <= 0xdfff)
+                        boundary -= 1;
+                }
+                const safe = pending.slice(0, boundary);
+                pending = pending.slice(boundary);
+                return redact(safe);
+            },
+            finish() {
+                const final = redact(pending);
+                pending = "";
+                return final;
+            },
+        };
+    };
+    const redactStructure = (value, depth = 0) => {
+        if (typeof value === "string") {
+            const scrubbed = redact(value);
+            return scrubbed.length > MAX_STRING_LENGTH
+                ? `${scrubbed.slice(0, MAX_STRING_LENGTH)}${TRUNCATION_MARKER}`
+                : scrubbed;
+        }
+        if (value === null || typeof value !== "object")
+            return value;
+        if (depth >= MAX_STRUCTURE_DEPTH)
+            return TRUNCATION_MARKER;
+        if (Array.isArray(value)) {
+            return value.slice(0, MAX_STRUCTURE_ENTRIES).map((item) => redactStructure(item, depth + 1));
+        }
+        return Object.fromEntries(Object.entries(value)
+            .slice(0, MAX_STRUCTURE_ENTRIES)
+            .map(([key, item]) => [key, isSensitiveKey(key) ? marker : redactStructure(item, depth + 1)]));
+    };
+    return { redact, stream, redactStructure };
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAC1E,MAAM,YAAY,GAChB,yGAAyG,CAAC;AAC5G,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACjE,MAAM,UAAU,GAAG,iFAAiF,CAAC;AACrG,MAAM,GAAG,GAAG,wDAAwD,CAAC;AACrE,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;AAE7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,+FAA+F;AAC/F,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI;SACR,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC;SACtC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;SACtC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;SACtC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC;SACnC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IACjE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,QAAQ,GAAG;QACf,KAAK;QACL,kBAAkB,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,UAAU,CAAC,KAAK,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG;SACP,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,WAAW,EAAE,CAAC;AACnB,CAAC;AAoCD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC;IAC1D,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,GAAG,CACR,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC;aAC/E,OAAO,CAAC,eAAe,CAAC,CAC5B;KACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE,CAC9C,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IAEnG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,oFAAoF;IACpF,4FAA4F;IAC5F,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;QACtC,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YACxC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACjF,OAAO,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAU,EAAE;QAClD,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC7G,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC,CAAC;IAEF,uFAAuF;IACvF,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAU,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAA0B,EAAE;QACzC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,CAAC,KAAK;gBACR,OAAO,IAAI,KAAK,CAAC;gBACjB,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CACrB,kBAAkB,CAAC,OAAO,CAAC,EAC3B,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CACzD,CAAC;gBACF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;wBAAE,QAAQ,IAAI,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,MAAM;gBACJ,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;QAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC,MAAM,GAAG,iBAAiB;gBACxC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,iBAAiB,EAAE;gBAC/D,CAAC,CAAC,QAAQ,CAAC;QACf,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,KAAK,IAAI,mBAAmB;YAAE,OAAO,iBAAiB,CAAC;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAChG,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC7C,CAAC"}

package/dist/route-contract.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Pure helpers for Qortex route identity, module endpoints, and request headers.
+ * Every module name, route, and identifier comes from the caller. QitQore does
+ * not choose between the canonical `qortex` and historical `@bijikyu/omniquery`
+ * module paths, and it never creates request or idempotency identities.
+ */
+/**
+ * Build the route identity Qortex reports for a recovery status. The module is
+ * the public path segment as the caller addresses it, and the path is normalized
+ * to begin with a single slash.
+ */
+export declare function recoveryRouteID(input: {
+    module: string;
+    method: string;
+    path: string;
+}): string;
+/**
+ * Build a module function URL, `<base>/api/v1/<module>/<function>`. The module
+ * path is kept exactly as supplied, including scoped names such as
+ * `@bijikyu/omniquery`, because percent-encoding it would not match the route.
+ */
+export declare function qortexModuleEndpoint(input: {
+    baseUrl: string | URL;
+    module: string;
+    functionName: string;
+}): string;
+/**
+ * Bounded request-identity headers. A host supplies both identities; QitQore
+ * validates them and never invents one. The idempotency key is sent with the
+ * request ID only when the host has an approved stable key.
+ */
+export declare function qortexRequestHeaders(input: {
+    requestId?: string;
+    idempotencyKey?: string;
+}): Record<string, string>;
+//# sourceMappingURL=route-contract.d.ts.map

package/dist/route-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-contract.d.ts","sourceRoot":"","sources":["../src/route-contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuBH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgB/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAgBT;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAezB"}

package/dist/route-contract.js

@@ -0,0 +1,89 @@
+/**
+ * Pure helpers for Qortex route identity, module endpoints, and request headers.
+ * Every module name, route, and identifier comes from the caller. QitQore does
+ * not choose between the canonical `qortex` and historical `@bijikyu/omniquery`
+ * module paths, and it never creates request or idempotency identities.
+ */
+const MODULE_PATH = /^[A-Za-z0-9._~@-]{1,128}(?:\/[A-Za-z0-9._~@-]{1,128})*$/;
+const FUNCTION_NAME = /^[A-Za-z][A-Za-z0-9_]{0,127}$/;
+const METHOD = /^[A-Za-z]{1,16}$/;
+const ROUTE_PATH = /^\/[A-Za-z0-9_./~-]{0,255}$/;
+const REQUEST_ID = /^[A-Za-z0-9_.:-]{1,160}$/;
+const IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,256}$/;
+const MAX_ROUTE_ID_LENGTH = 256;
+/** Dot-only segments would let a module or path climb out of its route prefix. */
+function hasDotSegment(value) {
+    return value.split("/").some((segment) => segment === "." || segment === "..");
+}
+function isModulePath(value) {
+    return typeof value === "string" && MODULE_PATH.test(value) && !hasDotSegment(value);
+}
+function isRoutePath(value) {
+    return ROUTE_PATH.test(value) && !hasDotSegment(value);
+}
+/**
+ * Build the route identity Qortex reports for a recovery status. The module is
+ * the public path segment as the caller addresses it, and the path is normalized
+ * to begin with a single slash.
+ */
+export function recoveryRouteID(input) {
+    if (!isModulePath(input.module)) {
+        throw new TypeError("Qortex route module is invalid");
+    }
+    if (typeof input.method !== "string" || !METHOD.test(input.method)) {
+        throw new TypeError("Qortex route method is invalid");
+    }
+    const path = `/${input.path.replace(/^\/+/, "")}`;
+    if (!isRoutePath(path)) {
+        throw new TypeError("Qortex route path is invalid");
+    }
+    const routeID = `${input.module}:${input.method.toUpperCase()}:${path}`;
+    if (routeID.length > MAX_ROUTE_ID_LENGTH) {
+        throw new TypeError("Qortex route identity is too long");
+    }
+    return routeID;
+}
+/**
+ * Build a module function URL, `<base>/api/v1/<module>/<function>`. The module
+ * path is kept exactly as supplied, including scoped names such as
+ * `@bijikyu/omniquery`, because percent-encoding it would not match the route.
+ */
+export function qortexModuleEndpoint(input) {
+    if (!isModulePath(input.module)) {
+        throw new TypeError("Qortex module name is invalid");
+    }
+    if (typeof input.functionName !== "string" || !FUNCTION_NAME.test(input.functionName)) {
+        throw new TypeError("Qortex function name is invalid");
+    }
+    const base = new URL(input.baseUrl);
+    if (base.protocol !== "https:" && base.protocol !== "http:") {
+        throw new TypeError("Qortex base URL must use HTTP or HTTPS");
+    }
+    if (base.search !== "" || base.hash !== "") {
+        throw new TypeError("Qortex base URL must not include a query or fragment");
+    }
+    const basePath = base.pathname.replace(/\/+$/, "");
+    return `${base.origin}${basePath}/api/v1/${input.module}/${input.functionName}`;
+}
+/**
+ * Bounded request-identity headers. A host supplies both identities; QitQore
+ * validates them and never invents one. The idempotency key is sent with the
+ * request ID only when the host has an approved stable key.
+ */
+export function qortexRequestHeaders(input) {
+    const headers = {};
+    if (input.requestId !== undefined) {
+        if (typeof input.requestId !== "string" || !REQUEST_ID.test(input.requestId)) {
+            throw new TypeError("Qortex request ID is invalid");
+        }
+        headers["x-request-id"] = input.requestId;
+    }
+    if (input.idempotencyKey !== undefined) {
+        if (typeof input.idempotencyKey !== "string" || !IDEMPOTENCY_KEY.test(input.idempotencyKey)) {
+            throw new TypeError("Qortex idempotency key is invalid");
+        }
+        headers["x-idempotency-key"] = input.idempotencyKey;
+    }
+    return headers;
+}
+//# sourceMappingURL=route-contract.js.map

package/dist/route-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-contract.js","sourceRoot":"","sources":["../src/route-contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,yDAAyD,CAAC;AAC9E,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAuD;IACrF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/sse.d.ts

@@ -0,0 +1,22 @@
+export interface QortexSseEvent {
+    data: string;
+    event?: string;
+    id?: string;
+    retry?: number;
+}
+export declare class SseDecoder {
+    private readonly decoder;
+    private buffer;
+    private data;
+    private eventName;
+    private eventId;
+    private lastEventId;
+    private retry;
+    push(chunk: Uint8Array | string): QortexSseEvent[];
+    finish(): QortexSseEvent[];
+    private consume;
+    private processLine;
+    private resetFrame;
+}
+export declare function iterateSse(stream: ReadableStream<Uint8Array>, signal?: AbortSignal): AsyncGenerator<QortexSseEvent>;
+//# sourceMappingURL=sse.d.ts.map

package/dist/sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse.d.ts","sourceRoot":"","sources":["../src/sse.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,UAAU;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,MAAM,CAAM;IACpB,OAAO,CAAC,IAAI,CAAgB;IAC5B,OAAO,CAAC,SAAS,CAAqB;IACtC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,WAAW,CAAqB;IACxC,OAAO,CAAC,KAAK,CAAqB;IAElC,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,GAAG,cAAc,EAAE;IAQlD,MAAM,IAAI,cAAc,EAAE;IAS1B,OAAO,CAAC,OAAO;IAgCf,OAAO,CAAC,WAAW;IA4CnB,OAAO,CAAC,UAAU;CAMnB;AAED,wBAAuB,UAAU,CAC/B,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,EAClC,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,cAAc,CAAC,CA0ChC"}