@rotorsoft/act 1.37.2 → 1.37.4

package/dist/@types/builders/act-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"act-builder.d.ts","sourceRoot":"","sources":["../../../src/builders/act-builder.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAEV,KAAK,EAIL,MAAM,EACN,cAAc,EACd,OAAO,EAER,MAAM,mBAAmB,CAAC;AA4B3B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,GAAG,CAEjB,UAAU,SAAS,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,EAChD,OAAO,SAAS,OAAO,GAAG,EAAE,EAC5B,QAAQ,SAAS,OAAO,GAAG,EAAE,EAC7B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,EAC7C,MAAM,SAAS,KAAK,GAAG,KAAK,KACzB,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CA4WhE"}
+{"version":3,"file":"act-builder.d.ts","sourceRoot":"","sources":["../../../src/builders/act-builder.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EAEV,KAAK,EAIL,MAAM,EACN,cAAc,EACd,OAAO,EAER,MAAM,mBAAmB,CAAC;AA4B3B;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,GAAG,CAEjB,UAAU,SAAS,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,EAChD,OAAO,SAAS,OAAO,GAAG,EAAE,EAC5B,QAAQ,SAAS,OAAO,GAAG,EAAE,EAC7B,SAAS,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,EAC7C,MAAM,SAAS,KAAK,GAAG,KAAK,KACzB,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAgVhE"}

package/dist/@types/builders/event-builder.d.ts

@@ -35,8 +35,11 @@ import { type EventGate } from "../internal/pii.js";
 import type { LaneConfig, Registry } from "../types/index.js";
 /** What one pass over an event's schema resolves. @internal */
 export type EventTags = {
-    /** Keys marked `sensitive(...)`, top level (and across union variants). */
-    readonly sensitive: readonly string[];
+    /**
+     * Keys marked `sensitive(...)`, top level (and across union variants), with
+     * the schema each declares.
+     */
+    readonly sensitive: Readonly<Record<string, z.ZodType>>;
     /**
      * Revives the dates in a stored `data` payload, or `undefined` when the
      * schema declares none.
@@ -85,6 +88,13 @@ export type Disclosure = "redact" | "strip";
 export type BuiltEvents = {
     /** Backs `registry.sensitive_fields`. */
     readonly sensitive: Map<string, readonly string[]>;
+    /** The sensitive `Event.field`s, and `State.field`s of their name, a redaction marker doesn't fit. */
+    /**
+     * The sensitive-type advisory, naming each sensitive `Event.field`, and
+     * `State.field` of its name, that a redaction marker doesn't fit; or
+     * `undefined` when there are none. The builder logs it once.
+     */
+    readonly advisory: string | undefined;
     /** Backs `registry.query_gate` — the actor-less read surfaces. */
     readonly query_readers: Map<string, EventGate>;
     /** Readers for handlers — sensitive keys removed, payload typed. */

package/dist/@types/builders/event-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event-builder.d.ts","sourceRoot":"","sources":["../../../src/builders/event-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,KAAK,SAAS,EAKf,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAS,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGrE,+DAA+D;AAC/D,MAAM,MAAM,SAAS,GAAG;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;CACpE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CA2BvD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAqD5C;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACnD,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CACrD,CAAC;AAOF;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACjC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,EAChC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,EAChC,MAAM,EAAE,YAAY,GACnB,WAAW,CAkHb"}
+{"version":3,"file":"event-builder.d.ts","sourceRoot":"","sources":["../../../src/builders/event-builder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,KAAK,SAAS,EAKf,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAS,UAAU,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAGrE,+DAA+D;AAC/D,MAAM,MAAM,SAAS,GAAG;IACtB;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;IAChE;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;CACpE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,CA2BvD;AAED;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,OAAO,CAAC;AAsD5C;;;;;;;;GAQG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC;IACnD,sGAAsG;IACtG;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC/C,oEAAoE;IACpE,QAAQ,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CAClD,CAAC;AAEF,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C,kFAAkF;IAClF,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;CACrD,CAAC;AAOF;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EACjC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,GAAG,CAAC,EAChC,KAAK,EAAE,aAAa,CAAC,UAAU,CAAC,EAChC,MAAM,EAAE,YAAY,GACnB,WAAW,CA0Ib"}

package/dist/@types/internal/date-reviver.d.ts

@@ -29,7 +29,9 @@ import { z } from "zod";
  * Zod does the walking, so nesting, arrays, records, unions and the wrappers
  * are handled by the engine rather than by a traversal of our own that would
  * drift as Zod grows constructs. A construct this doesn't recognise
- * contributes no date, which is the documented fallthrough.
+ * contributes no date, which is the documented fallthrough. `z.lazy()` is one
+ * on purpose: this walk descends into shapes, so a recursive schema would
+ * never end.
  */
 export declare function date_reviver_schema(schema: unknown): z.ZodType | undefined;
 //# sourceMappingURL=date-reviver.d.ts.map

package/dist/@types/internal/date-reviver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"date-reviver.d.ts","sourceRoot":"","sources":["../../../src/internal/date-reviver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6CxB;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,OAAO,GAAG,SAAS,CAwD1E"}
+{"version":3,"file":"date-reviver.d.ts","sourceRoot":"","sources":["../../../src/internal/date-reviver.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyCxB;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,OAAO,GAAG,SAAS,CA4D1E"}

package/dist/@types/internal/zod.d.ts

@@ -0,0 +1,36 @@
+/**
+ * The one place that reads Zod's internals.
+ *
+ * Several features look inside a field's schema: whether it was marked
+ * `sensitive(...)`, whether its value is a string, whether it holds a date to
+ * revive. They must agree on which wrappers they see through, so they all ask
+ * this module rather than each walking the schema its own way.
+ * `architecture.spec` keeps every other file away from `_zod`.
+ */
+import type { z } from "zod";
+/** A Zod schema's definition, which every wrapper and marker lives on. */
+type Def = Record<PropertyKey, any>;
+/** The schema's definition (Zod 4 keeps it under `_zod.def`). */
+export declare const def_of: (schema: unknown) => Def | undefined;
+/**
+ * The schemas a wrapper holds, or none for anything that isn't one:
+ * - `.optional()`, `.nullable()`, `.default()`, `.prefault()`,
+ *   `.nonoptional()`, `.readonly()` and `.catch()` hold one inner schema;
+ * - a pipe holds its input and its output: `.transform()`, `.pipe()` and
+ *   `z.preprocess()` all build one;
+ * - `z.lazy()` holds what its getter returns.
+ */
+export declare function wrapped(schema: unknown): z.ZodType[];
+/**
+ * True when `test` holds for the schema or any schema it wraps, at any depth.
+ * Each schema is visited once, so a lazy schema that returns itself ends.
+ */
+export declare function some_layer(schema: unknown, test: (def: Def) => boolean): boolean;
+/**
+ * The schema that describes the value a schema produces: through every
+ * wrapper to its innermost schema, taking a pipe's output side. A transform's
+ * output can't be known, so the walk stops at it.
+ */
+export declare function output_of(schema: unknown): unknown;
+export {};
+//# sourceMappingURL=zod.d.ts.map

package/dist/@types/internal/zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.d.ts","sourceRoot":"","sources":["../../../src/internal/zod.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAE7B,0EAA0E;AAC1E,KAAK,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;AAEpC,iEAAiE;AACjE,eAAO,MAAM,MAAM,WAAY,OAAO,KAAG,GAAG,GAAG,SACc,CAAC;AAE9D;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,MAAM,EAAE,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAMpD;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,GAC1B,OAAO,CAST;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAalD"}

package/dist/@types/sensitive.d.ts

@@ -1,26 +1,15 @@
 /**
- * The sensitive-data marker: the registry `sensitive(zodType)` writes to,
- * and the lookups that read it. The public `sensitive()` and the two
- * sentinels live in `types/schemas.ts`, which re-exports `pii_fields` from
- * here. The transforms that apply the marker at commit, load and dispatch
- * live in `internal/pii.ts`.
+ * The sensitive-data marker: the symbol `sensitive(zodType)` stamps on a
+ * schema's definition, and the lookups that read it. The public
+ * `sensitive()` and the two sentinels live in `types/schemas.ts`, which
+ * re-exports `pii_fields` from here. The transforms that apply the marker at
+ * commit, load and dispatch live in `internal/pii.ts`.
  */
-import { z } from "zod";
+import type { z } from "zod";
 /**
- * Process-global registry holding every Zod schema marked sensitive. Backed
- * by a `WeakMap`, so wrapper-created instances (`.optional()`, `.nullable()`,
- * `.default()`) that chain off a marked schema produce *new* schema instances
- * the registry doesn't track; the field walker handles those via unwrap.
- *
- * Exported so the public `sensitive(zodType)` wrapper can call `_registry.add`.
- * Underscore prefix marks "framework-private, don't touch from user code."
- */
-export declare const _registry: z.core.$ZodRegistry<{
-    sensitive: true;
-}, z.core.$ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
-/**
- * Stamp the def-level marker. Called by the public `sensitive()` alongside
- * `_registry.add`.
+ * Stamp the def-level marker. Called by the public `sensitive()`. Throws on a
+ * schema with no Zod 4 definition: marking nothing would store the field in
+ * plain text.
  */
 export declare function _mark_sensitive(schema: z.ZodType): void;
 /**

package/dist/@types/sensitive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../../src/sensitive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;GAQG;AACH,eAAO,MAAM,SAAS;eAA2B,IAAI;iFAAK,CAAC;AAe3D;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAOvD;AAkCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAmBxE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,MAAM,EAAE,CAE/D"}
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../../src/sensitive.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAa7B;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,IAAI,CAIvD;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAmBxE;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,GAAG,SAAS,MAAM,EAAE,CAE/D"}

package/dist/@types/types/schemas.d.ts

@@ -25,8 +25,9 @@ export declare const REDACTED: "[REDACTED]";
 export declare const SHREDDED: "[SHREDDED]";
 /**
  * Mark a Zod schema as sensitive. Returns the same schema instance — the
- * marker is registered out-of-band so the static type is preserved and the
- * call site reads as a pure annotation.
+ * marker is stamped on the schema's definition, so the static type is
+ * preserved, the call site reads as a pure annotation, and the marker
+ * survives any refinement chained after the call.
  *
  * Idempotent: re-wrapping an already-sensitive schema is a no-op.
  *

package/dist/@types/types/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/types/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG1D;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,QAAQ,sCAAkC,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAG,YAAqB,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAG,YAAqB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAO3D;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;;;kBAMX,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;kBAOZ,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;kBAQf,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;kBAQnB,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC;IAClE,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;kBAeX,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../../src/types/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAG1D;;;;;GAKG;AAEH;;GAEG;AACH,eAAO,MAAM,QAAQ,sCAAkC,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,EAAG,YAAqB,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,QAAQ,EAAG,YAAqB,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,CAM3D;AAED;;GAEG;AACH,eAAO,MAAM,WAAW;;;kBAMX,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;kBAOZ,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;kBAQf,CAAC;AAEd;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;kBAQnB,CAAC;AAEd;;;;;GAKG;AACH,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,OAAO,QAAQ,CAAC,CAAC;IAClE,KAAK,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;kBAeX,CAAC"}

package/dist/{chunk-2H5MBVSQ.js → chunk-CB2OLGJK.js}

@@ -130,28 +130,50 @@ var TOMBSTONE_EVENT = "__tombstone__";
 var DEFAULT_LANE = "default";
 
 // src/types/schemas.ts
-import { z as z2 } from "zod";
-
-// src/sensitive.ts
 import { z } from "zod";
-var _registry = z.registry();
-var _SENSITIVE = /* @__PURE__ */ Symbol.for("act.sensitive");
-function _mark_sensitive(schema) {
-  const def = schema._zod?.def;
-  if (def) def[_SENSITIVE] = true;
+
+// src/internal/zod.ts
+var def_of = (schema) => schema?._zod?.def;
+function wrapped(schema) {
+  const def = def_of(schema);
+  if (!def) return [];
+  if (def.type === "pipe") return [def.in, def.out];
+  if (def.type === "lazy") return [def.getter()];
+  return def.innerType ? [def.innerType] : [];
+}
+function some_layer(schema, test) {
+  const seen = /* @__PURE__ */ new Set();
+  const visit = (s) => {
+    if (seen.has(s)) return false;
+    seen.add(s);
+    const def = def_of(s);
+    return !!def && (test(def) || wrapped(s).some(visit));
+  };
+  return visit(schema);
 }
-function is_pii(schema) {
+function output_of(schema) {
+  const seen = /* @__PURE__ */ new Set();
   let cur = schema;
-  while (true) {
-    if (_registry.has(cur)) return true;
-    const def = cur._zod?.def;
-    if (def?.[_SENSITIVE] === true) return true;
-    const d = cur._def;
-    const inner = d?.innerType ?? d?.in;
-    if (!inner || inner === cur) return false;
-    cur = inner;
+  while (!seen.has(cur)) {
+    seen.add(cur);
+    const def = def_of(cur);
+    if (!def) return cur;
+    if (def.type === "pipe") cur = def.out;
+    else if (def.type === "lazy") cur = def.getter();
+    else if (def.innerType) cur = def.innerType;
+    else return cur;
   }
+  return cur;
+}
+
+// src/sensitive.ts
+var _SENSITIVE = /* @__PURE__ */ Symbol.for("act.sensitive");
+function _mark_sensitive(schema) {
+  const def = def_of(schema);
+  if (!def) throw new Error("sensitive() takes a Zod 4 schema");
+  def[_SENSITIVE] = true;
 }
+var is_pii = (schema) => some_layer(schema, (def) => def[_SENSITIVE] === true);
 function pii_schemas(schema) {
   const shape = schema.shape;
   if (shape && typeof shape === "object") {
@@ -177,55 +199,54 @@ function pii_fields(schema) {
 }
 
 // src/types/schemas.ts
-var ZodEmpty = z2.record(z2.string(), z2.never());
+var ZodEmpty = z.record(z.string(), z.never());
 var REDACTED = "[REDACTED]";
 var SHREDDED = "[SHREDDED]";
 function sensitive(schema) {
-  _registry.add(schema, { sensitive: true });
   _mark_sensitive(schema);
   return schema;
 }
-var ActorSchema = z2.object({
-  id: z2.string(),
-  name: z2.string()
+var ActorSchema = z.object({
+  id: z.string(),
+  name: z.string()
 }).loose().readonly();
-var TargetSchema = z2.object({
-  stream: z2.string(),
+var TargetSchema = z.object({
+  stream: z.string(),
   actor: ActorSchema,
-  expectedVersion: z2.number().optional()
+  expectedVersion: z.number().optional()
 }).loose().readonly();
-var CausationEventSchema = z2.object({
-  id: z2.number(),
-  name: z2.string(),
-  stream: z2.string()
+var CausationEventSchema = z.object({
+  id: z.number(),
+  name: z.string(),
+  stream: z.string()
 });
-var EventMetaSchema = z2.object({
-  correlation: z2.string(),
-  causation: z2.object({
-    action: TargetSchema.and(z2.object({ name: z2.string() })).optional(),
+var EventMetaSchema = z.object({
+  correlation: z.string(),
+  causation: z.object({
+    action: TargetSchema.and(z.object({ name: z.string() })).optional(),
     event: CausationEventSchema.optional()
   })
 }).readonly();
-var CommittedMetaSchema = z2.object({
-  id: z2.number(),
-  stream: z2.string(),
-  version: z2.number(),
-  created: z2.date(),
+var CommittedMetaSchema = z.object({
+  id: z.number(),
+  stream: z.string(),
+  version: z.number(),
+  created: z.date(),
   meta: EventMetaSchema
 }).readonly();
-var QuerySchema = z2.object({
-  stream: z2.string().optional(),
-  names: z2.string().array().optional(),
-  before: z2.number().optional(),
-  after: z2.number().optional(),
-  limit: z2.number().optional(),
-  created_before: z2.date().optional(),
-  created_after: z2.date().optional(),
-  backward: z2.boolean().optional(),
-  correlation: z2.string().optional(),
-  with_snaps: z2.boolean().optional(),
-  with_pii: z2.boolean().optional(),
-  stream_exact: z2.boolean().optional()
+var QuerySchema = z.object({
+  stream: z.string().optional(),
+  names: z.string().array().optional(),
+  before: z.number().optional(),
+  after: z.number().optional(),
+  limit: z.number().optional(),
+  created_before: z.date().optional(),
+  created_after: z.date().optional(),
+  backward: z.boolean().optional(),
+  correlation: z.string().optional(),
+  with_snaps: z.boolean().optional(),
+  with_pii: z.boolean().optional(),
+  stream_exact: z.boolean().optional()
 }).readonly();
 
 // src/types/index.ts
@@ -260,6 +281,8 @@ export {
   SNAP_EVENT,
   TOMBSTONE_EVENT,
   DEFAULT_LANE,
+  def_of,
+  output_of,
   pii_schemas,
   pii_fields,
   ZodEmpty,
@@ -276,4 +299,4 @@ export {
   LogLevels,
   ExitCodes
 };
-//# sourceMappingURL=chunk-2H5MBVSQ.js.map
+//# sourceMappingURL=chunk-CB2OLGJK.js.map