@qitqode/qitqore 0.1.0 → 0.2.0

package/dist/recovery.js.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAqCA,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAEvC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,OAAuB;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,OAA2B;IAClE,IACE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;QAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAE/D,MAAM,OAAO,GAAmB;YAC9B,UAAU,EAAE,SAAS;YACrB,aAAa,EAAE,KAAK;YACpB,iBAAiB,EAAE,KAAK;SACzB,CAAC;QACF,MAAM,OAAO,GAAyB;YACpC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,OAAO;YACP,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,eAAe;gBACb,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;oBAAE,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;YAC7E,CAAC;YACD,YAAY;gBACV,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;YAClC,CAAC;YACD,iBAAiB;gBACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;YAC/B,CAAC;YACD,qBAAqB;gBACnB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;YACnC,CAAC;SACF,CAAC;QAEF,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW;gBAAE,MAAM,KAAK,CAAC;YAEhD,MAAM,aAAa,GAA+B,MAAM,CAAC,MAAM,CAAC;gBAC9D,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO;gBACP,WAAW,EAAE,OAAO,GAAG,CAAC;gBACxB,KAAK;gBACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;gBAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI;gBAAE,MAAM,KAAK,CAAC;YACpE,IACE,OAAO,CAAC,UAAU,KAAK,UAAU;gBACjC,OAAO,CAAC,aAAa;gBACrB,OAAO,CAAC,iBAAiB,EACzB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI;gBAAE,MAAM,KAAK,CAAC;YACzE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAE/D,MAAM,eAAe,GACnB,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;gBACrC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC;gBACvC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;YAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;YAC7D,MAAM,cAAc,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,CAAC"}
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../src/recovery.ts"],"names":[],"mappings":"AAmDA,SAAS,WAAW,CAAC,MAAmB;IACtC,OAAO,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,MAAoB;IAC7D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,EAAE,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAEvC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;QACb,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,OAAuB;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAI,OAA2B;IAClE,IACE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ;QACvC,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE;QAC3B,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,GAAG,CAAC,EAAE,CAAC;QACjG,MAAM,IAAI,UAAU,CAAC,gDAAgD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC;QAC1G,MAAM,IAAI,UAAU,CAAC,sDAAsD,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC;IAChG,MAAM,aAAa,GAAG,kBAAkB;QACtC,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC,EACpF,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,UAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAC9C;QACH,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3F,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAEnB,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACrE,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;YAE/C,MAAM,OAAO,GAAmB;gBAC9B,UAAU,EAAE,SAAS;gBACrB,aAAa,EAAE,KAAK;gBACpB,iBAAiB,EAAE,KAAK;aACzB,CAAC;YACF,MAAM,OAAO,GAAyB;gBACpC,WAAW,EAAE,OAAO,CAAC,WAAW;gBAChC,OAAO;gBACP,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,eAAe;oBACb,IAAI,OAAO,CAAC,UAAU,KAAK,UAAU;wBAAE,OAAO,CAAC,UAAU,GAAG,cAAc,CAAC;gBAC7E,CAAC;gBACD,YAAY;oBACV,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC;gBAClC,CAAC;gBACD,iBAAiB;oBACf,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC/B,CAAC;gBACD,qBAAqB;oBACnB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;gBACnC,CAAC;aACF,CAAC;YAEF,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,cAAc;oBAAE,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;gBAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC9C,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;wBAC3C,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;wBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC9B,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;oBAC7B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC;wBAC3C,WAAW,EAAE,OAAO,CAAC,WAAW;wBAChC,OAAO;wBACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;wBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7B,KAAK;qBACN,CAAC,CAAC,CAAC;gBACN,CAAC;gBACD,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAC/C,IAAI,OAAO,IAAI,OAAO,CAAC,WAAW;oBAAE,MAAM,KAAK,CAAC;gBAEhD,MAAM,aAAa,GAA+B,MAAM,CAAC,MAAM,CAAC;oBAC9D,WAAW,EAAE,OAAO,CAAC,WAAW;oBAChC,OAAO;oBACP,WAAW,EAAE,OAAO,GAAG,CAAC;oBACxB,KAAK;oBACL,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC;oBAC1B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,aAAa,CAAC,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC;gBACpE,IACE,OAAO,CAAC,UAAU,KAAK,UAAU;oBACjC,OAAO,CAAC,aAAa;oBACrB,OAAO,CAAC,iBAAiB,EACzB,CAAC;oBACD,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,MAAM,OAAO,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,KAAK,IAAI;oBAAE,MAAM,KAAK,CAAC;gBACzE,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;gBAE/C,MAAM,eAAe,GACnB,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;oBACrC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,EAAE,KAAK,CAAC;oBACvC,CAAC,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;gBAC7D,MAAM,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;QACD,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,aAAa,KAAK,SAAS;YAAE,YAAY,CAAC,aAAa,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAChD,CAAC"}

package/dist/redaction.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Pure, opt-in secret redaction. The caller supplies every secret value and
+ * sensitive key name; QitQore never reads the environment, a credential store,
+ * or any global registry, and it keeps no state between calls except the
+ * configuration captured by `createSecretRedactor`.
+ */
+export declare const DEFAULT_REDACTION_MARKER = "[redacted]";
+export declare const TRUNCATION_MARKER = "[truncated]";
+/**
+ * Replace credential shapes in free text: authorization headers, bearer or basic
+ * tokens, secret-looking `key=value` pairs, query-string secrets, and JWT-shaped
+ * values. These are heuristics, so `createSecretRedactor` can disable them for
+ * model output where an ordinary word such as `token: 5` must survive.
+ */
+export declare function redactCredentialShapes(text: string): string;
+/**
+ * Bounded, log-safe text: credential shapes are redacted, control characters
+ * are replaced, surrounding whitespace is trimmed, and the result is capped.
+ */
+export declare function redactSensitiveText(text: string, maxLength: number): string;
+/**
+ * Encodings in which a secret can legitimately appear in text: the raw value,
+ * URL-encoded, JSON-escaped, and base64. Hosts use this to count registrations
+ * against their own limits, so the encoding rule has one implementation.
+ */
+export declare function secretEncodings(value: string): string[];
+export interface SecretRedactorOptions {
+    /** Exact secret values supplied by the host. Shorter values are ignored. */
+    secrets?: readonly string[];
+    /** Shortest configured value that is redacted. Defaults to 8 characters. */
+    minSecretLength?: number;
+    /** Key names whose values are replaced wholesale. Compared after normalization. */
+    sensitiveKeys?: readonly string[];
+    /** Additional key test over the normalized key, for host-specific naming rules. */
+    isSensitiveKey?: (normalized: string) => boolean;
+    /** Replacement text for redacted values. Must be deterministic for the caller. */
+    marker?: string;
+    /**
+     * Apply credential-shape heuristics in addition to exact values. Defaults to
+     * true. Disable it for model output, where a shape match can alter ordinary prose.
+     */
+    patterns?: boolean;
+}
+export interface SecretRedactionStream {
+    /** Redact a chunk. Text that could still be the start of a secret is held back. */
+    push(chunk: string): string;
+    /** Release everything still held back. Call once the stream has ended. */
+    finish(): string;
+}
+export interface SecretRedactor {
+    /** Replace configured values and their encodings, then common credential shapes. */
+    redact(text: string): string;
+    /** Create a stateful, chunk-safe redactor for one streamed output. */
+    stream(): SecretRedactionStream;
+    /** Recursively redact a structured value with bounded depth, entries, and string size. */
+    redactStructure(value: unknown): unknown;
+}
+/**
+ * Build a redactor from explicit configuration. Each call returns an independent
+ * object, so hosts that rotate secrets create a new redactor rather than mutating
+ * a shared one.
+ */
+export declare function createSecretRedactor(options?: SecretRedactorOptions): SecretRedactor;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAUH,eAAO,MAAM,wBAAwB,eAAe,CAAC;AACrD,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAS/C;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3E;AAQD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAQvD;AAUD,MAAM,WAAW,qBAAqB;IACpC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mFAAmF;IACnF,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,mFAAmF;IACnF,cAAc,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACjD,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,mFAAmF;IACnF,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,oFAAoF;IACpF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,sEAAsE;IACtE,MAAM,IAAI,qBAAqB,CAAC;IAChC,0FAA0F;IAC1F,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA0FxF"}

package/dist/redaction.js

@@ -0,0 +1,154 @@
+/**
+ * Pure, opt-in secret redaction. The caller supplies every secret value and
+ * sensitive key name; QitQore never reads the environment, a credential store,
+ * or any global registry, and it keeps no state between calls except the
+ * configuration captured by `createSecretRedactor`.
+ */
+const AUTH_HEADER = /\b(authorization)\s*[:=]\s*(?:bearer|basic)\s+\S+/gi;
+const SECRET_VALUE = /\b(api[-_ ]?key|access[-_ ]?token|refresh[-_ ]?token|token|password|secret)\s*[:=]\s*["']?[^\s,;"'&]+/gi;
+const BEARER_TOKEN = /\b(bearer|basic)\s+[A-Za-z0-9._~+/-]+=*/gi;
+const URL_SECRET = /([?&](?:api[-_]?key|access[-_]?token|refresh[-_]?token|token|secret)=)[^&\s]+/gi;
+const JWT = /\beyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/g;
+const CONTROL_CHARACTERS = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/g;
+export const DEFAULT_REDACTION_MARKER = "[redacted]";
+export const TRUNCATION_MARKER = "[truncated]";
+const DEFAULT_MIN_SECRET_LENGTH = 8;
+const MAX_STRUCTURE_DEPTH = 8;
+const MAX_STRUCTURE_ENTRIES = 256;
+const MAX_STRING_LENGTH = 16_384;
+/** Longest non-whitespace run a stream holds back, so a split token is never emitted early. */
+const MAX_STREAM_TOKEN_HOLD = 4_096;
+/**
+ * Replace credential shapes in free text: authorization headers, bearer or basic
+ * tokens, secret-looking `key=value` pairs, query-string secrets, and JWT-shaped
+ * values. These are heuristics, so `createSecretRedactor` can disable them for
+ * model output where an ordinary word such as `token: 5` must survive.
+ */
+export function redactCredentialShapes(text) {
+    return text
+        .replace(AUTH_HEADER, "$1: [redacted]")
+        .replace(SECRET_VALUE, "$1=[redacted]")
+        .replace(BEARER_TOKEN, "$1 [redacted]")
+        .replace(URL_SECRET, "$1[redacted]")
+        .replace(JWT, "[redacted-token]");
+}
+/**
+ * Bounded, log-safe text: credential shapes are redacted, control characters
+ * are replaced, surrounding whitespace is trimmed, and the result is capped.
+ */
+export function redactSensitiveText(text, maxLength) {
+    return redactCredentialShapes(text).replace(CONTROL_CHARACTERS, " ").trim().slice(0, maxLength);
+}
+function utf8Base64(value) {
+    let binary = "";
+    for (const byte of new TextEncoder().encode(value))
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+}
+/**
+ * Encodings in which a secret can legitimately appear in text: the raw value,
+ * URL-encoded, JSON-escaped, and base64. Hosts use this to count registrations
+ * against their own limits, so the encoding rule has one implementation.
+ */
+export function secretEncodings(value) {
+    const variants = [
+        value,
+        encodeURIComponent(value),
+        JSON.stringify(value).slice(1, -1),
+        utf8Base64(value),
+    ];
+    return [...new Set(variants)].filter((item) => item.length > 0);
+}
+/** Normalize a key so `accessToken`, `access-token`, and `access_token` compare equal. */
+function normalizedKey(key) {
+    return key
+        .replace(/([a-z0-9])([A-Z])/g, "$1_$2")
+        .replace(/-/g, "_")
+        .toLowerCase();
+}
+/**
+ * Build a redactor from explicit configuration. Each call returns an independent
+ * object, so hosts that rotate secrets create a new redactor rather than mutating
+ * a shared one.
+ */
+export function createSecretRedactor(options = {}) {
+    const minSecretLength = options.minSecretLength ?? DEFAULT_MIN_SECRET_LENGTH;
+    const marker = options.marker ?? DEFAULT_REDACTION_MARKER;
+    const variants = [
+        ...new Set((options.secrets ?? [])
+            .filter((value) => typeof value === "string" && value.length >= minSecretLength)
+            .flatMap(secretEncodings)),
+    ].sort((a, b) => b.length - a.length);
+    const longest = variants.length === 0 ? 0 : variants[0].length;
+    const sensitiveKeys = new Set((options.sensitiveKeys ?? []).map(normalizedKey));
+    const isSensitiveKey = (key) => sensitiveKeys.has(normalizedKey(key)) || (options.isSensitiveKey?.(normalizedKey(key)) ?? false);
+    const patterns = options.patterns ?? true;
+    // Exact values come first so a secret is never partially rewritten by a shape rule.
+    // Whitespace and control characters are preserved: streamed text must reassemble unchanged.
+    const redact = (text) => {
+        const exact = variants.length === 0 || text.length === 0
+            ? text
+            : variants.reduce((current, item) => current.split(item).join(marker), text);
+        return patterns ? redactCredentialShapes(exact) : exact;
+    };
+    /**
+     * Earliest index where a still-incomplete secret could begin. Everything from
+     * that index on is held, so a value split across chunks is never emitted in part.
+     */
+    const partialSecretStart = (text) => {
+        for (let start = Math.max(0, text.length - longest + 1); start < text.length; start += 1) {
+            const suffix = text.slice(start);
+            if (variants.some((variant) => variant.length > suffix.length && variant.startsWith(suffix)))
+                return start;
+        }
+        return text.length;
+    };
+    /** Credential shapes span non-whitespace runs, so the trailing run is held as well. */
+    const credentialTailStart = (text) => {
+        const tail = /\S*$/.exec(text)?.[0].length ?? 0;
+        return text.length - Math.min(tail, MAX_STREAM_TOKEN_HOLD);
+    };
+    const stream = () => {
+        let pending = "";
+        return {
+            push(chunk) {
+                pending += chunk;
+                let boundary = Math.min(partialSecretStart(pending), patterns ? credentialTailStart(pending) : pending.length);
+                if (boundary > 0 && boundary < pending.length) {
+                    const before = pending.charCodeAt(boundary - 1);
+                    const after = pending.charCodeAt(boundary);
+                    if (before >= 0xd800 && before <= 0xdbff && after >= 0xdc00 && after <= 0xdfff)
+                        boundary -= 1;
+                }
+                const safe = pending.slice(0, boundary);
+                pending = pending.slice(boundary);
+                return redact(safe);
+            },
+            finish() {
+                const final = redact(pending);
+                pending = "";
+                return final;
+            },
+        };
+    };
+    const redactStructure = (value, depth = 0) => {
+        if (typeof value === "string") {
+            const scrubbed = redact(value);
+            return scrubbed.length > MAX_STRING_LENGTH
+                ? `${scrubbed.slice(0, MAX_STRING_LENGTH)}${TRUNCATION_MARKER}`
+                : scrubbed;
+        }
+        if (value === null || typeof value !== "object")
+            return value;
+        if (depth >= MAX_STRUCTURE_DEPTH)
+            return TRUNCATION_MARKER;
+        if (Array.isArray(value)) {
+            return value.slice(0, MAX_STRUCTURE_ENTRIES).map((item) => redactStructure(item, depth + 1));
+        }
+        return Object.fromEntries(Object.entries(value)
+            .slice(0, MAX_STRUCTURE_ENTRIES)
+            .map(([key, item]) => [key, isSensitiveKey(key) ? marker : redactStructure(item, depth + 1)]));
+    };
+    return { redact, stream, redactStructure };
+}
+//# sourceMappingURL=redaction.js.map

package/dist/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../src/redaction.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,qDAAqD,CAAC;AAC1E,MAAM,YAAY,GAChB,yGAAyG,CAAC;AAC5G,MAAM,YAAY,GAAG,2CAA2C,CAAC;AACjE,MAAM,UAAU,GAAG,iFAAiF,CAAC;AACrG,MAAM,GAAG,GAAG,wDAAwD,CAAC;AACrE,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;AAE7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,YAAY,CAAC;AACrD,MAAM,CAAC,MAAM,iBAAiB,GAAG,aAAa,CAAC;AAE/C,MAAM,yBAAyB,GAAG,CAAC,CAAC;AACpC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAClC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,+FAA+F;AAC/F,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAEpC;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,IAAI;SACR,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC;SACtC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;SACtC,OAAO,CAAC,YAAY,EAAE,eAAe,CAAC;SACtC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC;SACnC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,SAAiB;IACjE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AAClG,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACxF,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,QAAQ,GAAG;QACf,KAAK;QACL,kBAAkB,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClC,UAAU,CAAC,KAAK,CAAC;KAClB,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,0FAA0F;AAC1F,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,GAAG;SACP,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACtC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,WAAW,EAAE,CAAC;AACnB,CAAC;AAoCD;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;IAC7E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC;IAC1D,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,GAAG,CACR,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,eAAe,CAAC;aAC/E,OAAO,CAAC,eAAe,CAAC,CAC5B;KACF,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE,CAC9C,aAAa,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IAEnG,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IAC1C,oFAAoF;IACpF,4FAA4F;IAC5F,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE;QACtC,MAAM,KAAK,GACT,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YACxC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACjF,OAAO,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,kBAAkB,GAAG,CAAC,IAAY,EAAU,EAAE;QAClD,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,OAAO,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACzF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACjC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC7G,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC,CAAC;IAEF,uFAAuF;IACvF,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAU,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,GAA0B,EAAE;QACzC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,OAAO;YACL,IAAI,CAAC,KAAK;gBACR,OAAO,IAAI,KAAK,CAAC;gBACjB,IAAI,QAAQ,GAAG,IAAI,CAAC,GAAG,CACrB,kBAAkB,CAAC,OAAO,CAAC,EAC3B,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CACzD,CAAC;gBACF,IAAI,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;oBAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBAC3C,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,MAAM;wBAAE,QAAQ,IAAI,CAAC,CAAC;gBAChG,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACxC,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;YACD,MAAM;gBACJ,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC9B,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,KAAK,CAAC;YACf,CAAC;SACF,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC,EAAW,EAAE;QAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,QAAQ,CAAC,MAAM,GAAG,iBAAiB;gBACxC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,iBAAiB,EAAE;gBAC/D,CAAC,CAAC,QAAQ,CAAC;QACf,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9D,IAAI,KAAK,IAAI,mBAAmB;YAAE,OAAO,iBAAiB,CAAC;QAC3D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC;aAC/B,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAChG,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAC7C,CAAC"}

package/dist/route-contract.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Pure helpers for Qortex route identity, module endpoints, and request headers.
+ * Every module name, route, and identifier comes from the caller. QitQore does
+ * not choose between the canonical `qortex` and historical `@bijikyu/omniquery`
+ * module paths, and it never creates request or idempotency identities.
+ */
+/**
+ * Build the route identity Qortex reports for a recovery status. The module is
+ * the public path segment as the caller addresses it, and the path is normalized
+ * to begin with a single slash.
+ */
+export declare function recoveryRouteID(input: {
+    module: string;
+    method: string;
+    path: string;
+}): string;
+/**
+ * Build a module function URL, `<base>/api/v1/<module>/<function>`. The module
+ * path is kept exactly as supplied, including scoped names such as
+ * `@bijikyu/omniquery`, because percent-encoding it would not match the route.
+ */
+export declare function qortexModuleEndpoint(input: {
+    baseUrl: string | URL;
+    module: string;
+    functionName: string;
+}): string;
+/**
+ * Bounded request-identity headers. A host supplies both identities; QitQore
+ * validates them and never invents one. The idempotency key is sent with the
+ * request ID only when the host has an approved stable key.
+ */
+export declare function qortexRequestHeaders(input: {
+    requestId?: string;
+    idempotencyKey?: string;
+}): Record<string, string>;
+//# sourceMappingURL=route-contract.d.ts.map

package/dist/route-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-contract.d.ts","sourceRoot":"","sources":["../src/route-contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAuBH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAgB/F;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAgBT;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAezB"}

package/dist/route-contract.js

@@ -0,0 +1,89 @@
+/**
+ * Pure helpers for Qortex route identity, module endpoints, and request headers.
+ * Every module name, route, and identifier comes from the caller. QitQore does
+ * not choose between the canonical `qortex` and historical `@bijikyu/omniquery`
+ * module paths, and it never creates request or idempotency identities.
+ */
+const MODULE_PATH = /^[A-Za-z0-9._~@-]{1,128}(?:\/[A-Za-z0-9._~@-]{1,128})*$/;
+const FUNCTION_NAME = /^[A-Za-z][A-Za-z0-9_]{0,127}$/;
+const METHOD = /^[A-Za-z]{1,16}$/;
+const ROUTE_PATH = /^\/[A-Za-z0-9_./~-]{0,255}$/;
+const REQUEST_ID = /^[A-Za-z0-9_.:-]{1,160}$/;
+const IDEMPOTENCY_KEY = /^[A-Za-z0-9_.:-]{1,256}$/;
+const MAX_ROUTE_ID_LENGTH = 256;
+/** Dot-only segments would let a module or path climb out of its route prefix. */
+function hasDotSegment(value) {
+    return value.split("/").some((segment) => segment === "." || segment === "..");
+}
+function isModulePath(value) {
+    return typeof value === "string" && MODULE_PATH.test(value) && !hasDotSegment(value);
+}
+function isRoutePath(value) {
+    return ROUTE_PATH.test(value) && !hasDotSegment(value);
+}
+/**
+ * Build the route identity Qortex reports for a recovery status. The module is
+ * the public path segment as the caller addresses it, and the path is normalized
+ * to begin with a single slash.
+ */
+export function recoveryRouteID(input) {
+    if (!isModulePath(input.module)) {
+        throw new TypeError("Qortex route module is invalid");
+    }
+    if (typeof input.method !== "string" || !METHOD.test(input.method)) {
+        throw new TypeError("Qortex route method is invalid");
+    }
+    const path = `/${input.path.replace(/^\/+/, "")}`;
+    if (!isRoutePath(path)) {
+        throw new TypeError("Qortex route path is invalid");
+    }
+    const routeID = `${input.module}:${input.method.toUpperCase()}:${path}`;
+    if (routeID.length > MAX_ROUTE_ID_LENGTH) {
+        throw new TypeError("Qortex route identity is too long");
+    }
+    return routeID;
+}
+/**
+ * Build a module function URL, `<base>/api/v1/<module>/<function>`. The module
+ * path is kept exactly as supplied, including scoped names such as
+ * `@bijikyu/omniquery`, because percent-encoding it would not match the route.
+ */
+export function qortexModuleEndpoint(input) {
+    if (!isModulePath(input.module)) {
+        throw new TypeError("Qortex module name is invalid");
+    }
+    if (typeof input.functionName !== "string" || !FUNCTION_NAME.test(input.functionName)) {
+        throw new TypeError("Qortex function name is invalid");
+    }
+    const base = new URL(input.baseUrl);
+    if (base.protocol !== "https:" && base.protocol !== "http:") {
+        throw new TypeError("Qortex base URL must use HTTP or HTTPS");
+    }
+    if (base.search !== "" || base.hash !== "") {
+        throw new TypeError("Qortex base URL must not include a query or fragment");
+    }
+    const basePath = base.pathname.replace(/\/+$/, "");
+    return `${base.origin}${basePath}/api/v1/${input.module}/${input.functionName}`;
+}
+/**
+ * Bounded request-identity headers. A host supplies both identities; QitQore
+ * validates them and never invents one. The idempotency key is sent with the
+ * request ID only when the host has an approved stable key.
+ */
+export function qortexRequestHeaders(input) {
+    const headers = {};
+    if (input.requestId !== undefined) {
+        if (typeof input.requestId !== "string" || !REQUEST_ID.test(input.requestId)) {
+            throw new TypeError("Qortex request ID is invalid");
+        }
+        headers["x-request-id"] = input.requestId;
+    }
+    if (input.idempotencyKey !== undefined) {
+        if (typeof input.idempotencyKey !== "string" || !IDEMPOTENCY_KEY.test(input.idempotencyKey)) {
+            throw new TypeError("Qortex idempotency key is invalid");
+        }
+        headers["x-idempotency-key"] = input.idempotencyKey;
+    }
+    return headers;
+}
+//# sourceMappingURL=route-contract.js.map

package/dist/route-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-contract.js","sourceRoot":"","sources":["../src/route-contract.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,GAAG,yDAAyD,CAAC;AAC9E,MAAM,aAAa,GAAG,+BAA+B,CAAC;AACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAC9C,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,kFAAkF;AAClF,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAuD;IACrF,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;IAClD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACzC,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAIpC;IACC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,iCAAiC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC5D,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,QAAQ,WAAW,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAGpC;IACC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5F,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;IACtD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/stream-payload.d.ts

@@ -0,0 +1,39 @@
+export type QortexCostFrameID = "qortex-cost" | "qlex-cost";
+export type QortexUsageFrameID = "qortex-stream" | "qlex-stream";
+/**
+ * A tagged result. `text` is literal model output, and `json` is a structured
+ * frame the host must adapt. The host must not treat `json` as text by accident.
+ */
+export type QortexStreamPayload = {
+    kind: "empty";
+} | {
+    kind: "text";
+    text: string;
+} | {
+    kind: "json";
+    value: Record<string, unknown>;
+} | {
+    kind: "usage";
+    id: QortexUsageFrameID;
+    usage: Record<string, unknown>;
+    finishReason?: string;
+} | {
+    kind: "cost";
+    id: QortexCostFrameID;
+    final: boolean;
+    frame: Record<string, unknown>;
+} | {
+    kind: "control";
+    control: "routing-status";
+    status: "free-fallback";
+} | {
+    kind: "done";
+} | {
+    kind: "error";
+    message: string;
+    code?: string;
+    requestId?: string;
+};
+/** Classify one SSE data payload. Pure: the same input always yields the same result. */
+export declare function classifyQortexStreamPayload(data: string): QortexStreamPayload;
+//# sourceMappingURL=stream-payload.d.ts.map

package/dist/stream-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-payload.d.ts","sourceRoot":"","sources":["../src/stream-payload.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,iBAAiB,GAAG,aAAa,GAAG,WAAW,CAAC;AAC5D,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,aAAa,CAAC;AAEjE;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,kBAAkB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACvE;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAwC1E,yFAAyF;AACzF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAqC7E"}

package/dist/stream-payload.js

@@ -0,0 +1,86 @@
+/**
+ * Classifies one reassembled Qortex SSE data payload. The caller frames the
+ * stream with `SseDecoder` or `iterateSse`, which joins multi-line `data:` values
+ * before this function sees them.
+ *
+ * Classification is pure and separate from product behavior. It does not convert
+ * OpenAI chunks, flatten tool calls, choose finish reasons, update accounting,
+ * settle reservations, or decide that a stream completed successfully. Terminal
+ * success stays with the host, and an unterminated stream remains incomplete.
+ */
+import { redactSensitiveText } from "./redaction.js";
+const COST_FRAME_IDS = new Set(["qortex-cost", "qlex-cost"]);
+const USAGE_FRAME_IDS = new Set(["qortex-stream", "qlex-stream"]);
+const DEFAULT_STREAM_ERROR = "Qortex stream error";
+const MAX_ERROR_MESSAGE_LENGTH = 512;
+const ERROR_CODE = /^([A-Z][A-Z0-9_]{1,63})(?:\s+[—-]\s+|$)([\s\S]*)$/;
+const ERROR_REFERENCE = /\s*\(ref:\s*([A-Za-z0-9_.:-]{1,160})\)\s*$/;
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/**
+ * Parse a `[ERROR] <CODE> — <message> (ref: <id>)` detail. The code and reference
+ * are kept only when they match the safe identifier shape. The message is bounded
+ * and redacted before it leaves this module.
+ */
+function parseStreamError(detail) {
+    const coded = ERROR_CODE.exec(detail);
+    const remainder = coded ? coded[2] : detail;
+    const reference = ERROR_REFERENCE.exec(remainder);
+    const message = redactSensitiveText((reference ? remainder.slice(0, reference.index) : remainder).trim(), MAX_ERROR_MESSAGE_LENGTH);
+    return {
+        message: message || DEFAULT_STREAM_ERROR,
+        ...(coded ? { code: coded[1] } : {}),
+        ...(reference ? { requestId: reference[1] } : {}),
+    };
+}
+function finishReasonOf(frame) {
+    const choices = frame.choices;
+    if (!Array.isArray(choices) || !isRecord(choices[0]))
+        return undefined;
+    const reason = choices[0].finish_reason;
+    return typeof reason === "string" ? reason : undefined;
+}
+/** Classify one SSE data payload. Pure: the same input always yields the same result. */
+export function classifyQortexStreamPayload(data) {
+    if (data === "")
+        return { kind: "empty" };
+    if (data === "[DONE]")
+        return { kind: "done" };
+    if (data.startsWith("[ERROR]"))
+        return { kind: "error", ...parseStreamError(data.slice("[ERROR]".length).trim()) };
+    // Only payloads that begin like a JSON object or array are parsed. Plain tokens are
+    // the most common frame, and they must not pay for a thrown parse on every chunk.
+    const first = data.charCodeAt(0);
+    const mayBeObject = first === 123 || first === 91 || first === 32 || first === 9 || first === 10 || first === 13;
+    if (!mayBeObject)
+        return { kind: "text", text: data };
+    let parsed;
+    try {
+        parsed = JSON.parse(data);
+    }
+    catch {
+        return { kind: "text", text: data };
+    }
+    // Arrays and JSON primitives are not frames. They stay literal text, as they did before.
+    if (!isRecord(parsed))
+        return { kind: "text", text: data };
+    const id = parsed.id;
+    if (typeof id === "string" && COST_FRAME_IDS.has(id)) {
+        return { kind: "cost", id: id, final: parsed.final === true, frame: parsed };
+    }
+    if (typeof id === "string" && USAGE_FRAME_IDS.has(id) && isRecord(parsed.usage)) {
+        const finishReason = finishReasonOf(parsed);
+        return {
+            kind: "usage",
+            id: id,
+            usage: parsed.usage,
+            ...(finishReason === undefined ? {} : { finishReason }),
+        };
+    }
+    if (id === "qortex-routing" && parsed.object === "qortex.routing.status" && parsed.status === "free-fallback") {
+        return { kind: "control", control: "routing-status", status: "free-fallback" };
+    }
+    return { kind: "json", value: parsed };
+}
+//# sourceMappingURL=stream-payload.js.map

package/dist/stream-payload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-payload.js","sourceRoot":"","sources":["../src/stream-payload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAmBrD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAS,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAS,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC,CAAC;AAC1E,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AACnD,MAAM,wBAAwB,GAAG,GAAG,CAAC;AACrC,MAAM,UAAU,GAAG,mDAAmD,CAAC;AACvE,MAAM,eAAe,GAAG,4CAA4C,CAAC;AAErE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,mBAAmB,CACjC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EACpE,wBAAwB,CACzB,CAAC;IACF,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,oBAAoB;QACxC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAA8B;IACpD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACvE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;IACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,2BAA2B,CAAC,IAAY;IACtD,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC1C,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IAEnH,oFAAoF;IACpF,kFAAkF;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,WAAW,GAAG,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,CAAC;IACjH,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEtD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,yFAAyF;IACzF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE3D,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAuB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO;YACL,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,EAAwB;YAC5B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IACD,IAAI,EAAE,KAAK,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,IAAI,MAAM,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC9G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC"}

package/dist/transport.d.ts

@@ -1,4 +1,6 @@
 import { QortexHttpError } from "./errors.js";
+import { type QortexRecoveryStatus } from "./recovery-status.js";
+import { type QortexRecoveryCapabilities } from "./recovery-capabilities.js";
 export interface QortexClientOptions {
     baseUrl: string | URL;
     fetch?: typeof globalThis.fetch;
@@ -26,6 +28,14 @@ export declare class QortexClient {
     getRequestStatus<T = unknown>(requestId: string, policy?: QortexRequestPolicy & {
         headers?: HeadersInit;
     }): Promise<QortexJsonResult<T>>;
+    /** Read route execution/result state; this is not billing evidence. */
+    getRecoveryStatus(requestId: string, policy?: QortexRequestPolicy & {
+        headers?: HeadersInit;
+    }): Promise<QortexJsonResult<QortexRecoveryStatus>>;
+    /** Read route recovery guarantees separately from billing and execution status. */
+    getRecoveryCapabilities(policy?: QortexRequestPolicy & {
+        headers?: HeadersInit;
+    }): Promise<QortexJsonResult<QortexRecoveryCapabilities>>;
     openStream(target: RequestInfo | URL, init?: RequestInit, policy?: QortexRequestPolicy): Promise<Response>;
 }
 export declare function createQortexClient(options: QortexClientOptions): QortexClient;

package/dist/transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAKhB,MAAM,aAAa,CAAC;AAErB,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqJD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAM;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;gBAE/B,OAAO,EAAE,mBAAmB;IAgBlC,OAAO,CACX,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,QAAQ,CAAC;IA+Cd,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3B,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAwBzB,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAChC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,mBAAmB,GAAG;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAO,GAC3D,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAS/B,UAAU,CACR,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,QAAQ,CAAC;CAGrB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW7D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E"}
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EAKhB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAuB,KAAK,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACtF,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,cAAc,CAAC,EAAE,WAAW,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAqJD,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAM;IAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0B;IACpD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAc;IAC9C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;gBAE/B,OAAO,EAAE,mBAAmB;IAgBlC,OAAO,CACX,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,QAAQ,CAAC;IA+Cd,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3B,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAwBzB,gBAAgB,CAAC,CAAC,GAAG,OAAO,EAChC,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,mBAAmB,GAAG;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAO,GAC3D,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAS/B,uEAAuE;IACjE,iBAAiB,CACrB,SAAS,EAAE,MAAM,EACjB,MAAM,GAAE,mBAAmB,GAAG;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAO,GAC3D,OAAO,CAAC,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAyBlD,mFAAmF;IAC7E,uBAAuB,CAC3B,MAAM,GAAE,mBAAmB,GAAG;QAAE,OAAO,CAAC,EAAE,WAAW,CAAA;KAAO,GAC3D,OAAO,CAAC,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IAkBxD,UAAU,CACR,MAAM,EAAE,WAAW,GAAG,GAAG,EACzB,IAAI,GAAE,WAAgB,EACtB,MAAM,GAAE,mBAAwB,GAC/B,OAAO,CAAC,QAAQ,CAAC;CAGrB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAE7E;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW7D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E"}

package/dist/transport.js

@@ -1,4 +1,6 @@
 import { QortexHttpError, QortexProtocolError, QortexTimeoutError, QortexTransportError, qortexHttpError, } from "./errors.js";
+import { parseRecoveryStatus } from "./recovery-status.js";
+import { parseRecoveryCapabilities, } from "./recovery-capabilities.js";
 function makeAbortScope(signals, timeoutMs) {
     if (timeoutMs !== undefined && (!Number.isFinite(timeoutMs) || timeoutMs <= 0)) {
         throw new RangeError("timeoutMs must be a positive finite number");
@@ -209,6 +211,32 @@ export class QortexClient {
         const url = new URL(`/auth/usage/v1/requests/${encodeURIComponent(requestId)}`, this.baseUrl.origin);
         return this.requestJson(url, { method: "GET", headers: policy.headers }, policy);
     }
+    /** Read route execution/result state; this is not billing evidence. */
+    async getRecoveryStatus(requestId, policy = {}) {
+        if (typeof requestId !== "string" || !requestId.trim() || requestId.length > 256) {
+            throw new TypeError("requestId must contain between 1 and 256 characters");
+        }
+        const canonicalRequestId = requestId.trim();
+        const url = new URL(`/auth/recovery/v1/requests/${encodeURIComponent(canonicalRequestId)}`, this.baseUrl.origin);
+        const result = await this.requestJson(url, { method: "GET", headers: policy.headers }, policy);
+        try {
+            return { ...result, data: parseRecoveryStatus(result.data, canonicalRequestId) };
+        }
+        catch {
+            throw new QortexProtocolError("Qortex returned a malformed recovery-status response", result.status, result.requestId);
+        }
+    }
+    /** Read route recovery guarantees separately from billing and execution status. */
+    async getRecoveryCapabilities(policy = {}) {
+        const url = new URL("/auth/recovery/v1/capabilities", this.baseUrl.origin);
+        const result = await this.requestJson(url, { method: "GET", headers: policy.headers }, policy);
+        try {
+            return { ...result, data: parseRecoveryCapabilities(result.data) };
+        }
+        catch {
+            throw new QortexProtocolError("Qortex returned a malformed recovery-capabilities response", result.status, result.requestId);
+        }
+    }
     openStream(target, init = {}, policy = {}) {
         return this.request(target, init, policy);
     }