@shivaedev/errors 0.0.0 → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 ShivaeDev
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,73 @@
 # @shivaedev/errors
 
-Placeholder. Real releases start above 0.0.0.
+Shared expected failures and secret-safe failure reporting for Effect applications. Every layer of an application declares, returns and reads the same tagged error classes, and every boundary that reports a failure masks secrets the same way.
+
+## Why you want this
+
+An application that lets each feature invent its own "not found" or "name is taken" ends up with a dozen shapes for the same answer, and every client screen has to learn each one. A shared vocabulary means an RPC declares the failures it can return, the handler fails with one of them, and the client reads the same class back with its field and message intact.
+
+```ts
+import { rejectedField } from "@shivaedev/errors/rejectedField.ts";
+import { Conflict } from "@shivaedev/errors/taxonomy.ts";
+
+const field = rejectedField(new Conflict({ field: "name", message: "Name is taken" }));
+```
+
+`field` is `Option.some({ field: "name", message: "Name is taken" })`, ready to show beside the form input it names. The same modules run in the browser and on the server.
+
+## Using it
+
+### How to think about it
+
+There are two kinds of failure. Expected failures are part of an operation's contract: the caller can act on them, so they carry a public message and travel to the client. Unexpected failures are defects and causes the caller cannot act on; they go to logs, traces and error reporters, and anything secret in them must be masked first. This package holds the vocabulary for the first kind and the masking policy for the second.
+
+### Expected failures
+
+`taxonomy.ts` exports `NotFound`, `Unauthorized`, `Forbidden`, `BadRequest`, `Conflict`, `PreconditionFailed`, `TooManyRequests`, `AuthUnavailable`, `InternalServerError` and `ServiceUnavailable`. Each class is a Schema tagged error with a string `message`; `BadRequest` and `Conflict` also accept an optional string `field`. Declare only the failures an operation can return:
+
+```ts
+import { Schema } from "effect";
+import { Rpc } from "effect/rpc";
+import { BadRequest, Conflict } from "@shivaedev/errors/taxonomy.ts";
+
+export const Rename = Rpc.make("Rename", {
+  error: Schema.Union([BadRequest, Conflict]),
+  payload: { name: Schema.String },
+  success: Schema.String,
+});
+```
+
+A handler fails with `new Conflict({ field: "name", message: "Name is taken" })`, and native RPC JSON decodes the rejection back to the error instance with its field. `rejectedField(error)` reads either that instance or its tagged JSON. Any value with a string `_tag`, `field` and `message` qualifies, including an application's own tagged error; an untagged object, a missing field or a non-string field yields `Option.none()`.
+
+### Mapping unexpected failures at the handler edge
+
+At the handler edge, `rpcBoundary(schema, options)` keeps declared rejections and maps other failures and defects into one declared fallback. It leaves successful values and interruption intact:
+
+```ts
+import { Schema } from "effect";
+import { Conflict, InternalServerError } from "@shivaedev/errors/taxonomy.ts";
+import { rpcBoundary } from "@shivaedev/errors/boundary.ts";
+
+const Rejection = Schema.Union([Conflict, InternalServerError]);
+const expose = rpcBoundary(Rejection, {
+  unexpected: (message) => new InternalServerError({ message }),
+});
+
+export const save = storageSave.pipe(expose);
+```
+
+`storageSave` is the application's Effect. `unexpected` constructs a member of the declared schema from the public message. The default message is `Internal server error`; `message` supplies application text, with credential-shaped strings redacted. The original Effect cause is kept on the server rejection's non-enumerable `cause`, so a server span can trace it. Keep `cause` out of the wire schema, as the taxonomy classes do. `ServiceUnavailable` describes a declared availability failure without implying a session-provider outage.
+
+### Masking secrets in failures
+
+`sensitive.ts` decides which names are secret. `isSensitiveKey(key)` matches credential-shaped names whatever their casing or separator, such as `sessionId`, `bearerToken`, `access_key_id` or `cardNumber`. A `SensitiveKey` is any `(key: string) => boolean`, so an application can widen the policy with its own names. `redactText(text, sensitive, maxLength?)` masks credential-shaped text and `key=value` assignments inside a string, and cuts it at 2,048 characters by default; passing `Infinity` keeps complete public text. Masked values become `REDACTED`, the string `<redacted>`.
+
+`redact.ts` applies that policy to structured values. `redact(value, sensitive?)` masks values under sensitive keys and credential text inside strings, summarises large collections and binary data, and stops cyclic payloads at a depth limit; use it for diagnostics. `redactWire(value, sensitive?)` applies the same masking without summaries or truncation; use it for failure data sent to a client.
+
+`redactCause.ts` applies it to Effect causes. `redactCause(cause, sensitive?)` and `redactDiagnosticCause(cause, sensitive?)` rebuild a cause with masked failures and defects, `redactDefect(defect, sensitive?)` masks one defect, and `redactingErrorReporter(reporter, sensitive?)` wraps an Effect error reporter so it only ever receives masked causes.
+
+The policy matches names, not values: it does not scan prose for personal data, so keep secrets out of free text and span names.
+
+### Install and limits
+
+Install `@shivaedev/errors` with `effect` as its peer. The package has no root entry; import the module that defines the name. Every module is browser-safe and depends only on `effect`.

package/dist/boundary.d.ts

@@ -0,0 +1,9 @@
+import { Effect, Schema } from "effect";
+export interface RpcBoundaryOptions<E> {
+    readonly message?: string;
+    readonly unexpected: (message: string) => E;
+}
+export declare function rpcBoundary<TSchema extends Schema.ConstraintDecoder<{
+    readonly message: string;
+}>>(schema: TSchema, options: RpcBoundaryOptions<TSchema["Type"]>): <A, E, R>(self: Effect.Effect<A, E, R>) => Effect.Effect<A, TSchema["Type"], R>;
+//# sourceMappingURL=boundary.d.ts.map

package/dist/boundary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.d.ts","sourceRoot":"","sources":["../src/boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAS,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE/C,MAAM,WAAW,kBAAkB,CAAC,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC,CAAC;CAC5C;AACD,wBAAgB,WAAW,CAC1B,OAAO,SAAS,MAAM,CAAC,iBAAiB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB,CAAC,EACD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAEtD,CAAC,EAAE,CAAC,EAAE,CAAC,QAAQ,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAapF"}

package/dist/boundary.js

@@ -0,0 +1,18 @@
+import { Cause, Effect, Schema } from "effect";
+import { isSensitiveKey, redactText } from "#sensitive.ts";
+export function rpcBoundary(schema, options) {
+    const declared = Schema.is(schema);
+    return (self) => Effect.catchCause(self, (cause) => {
+        if (Cause.hasInterruptsOnly(cause)) {
+            return Effect.failCause(Cause.fromReasons(cause.reasons.filter(Cause.isInterruptReason)));
+        }
+        const reason = cause.reasons[0];
+        if (cause.reasons.length === 1 && reason && Cause.isFailReason(reason) && declared(reason.error)) {
+            return Effect.fail(reason.error);
+        }
+        const rejection = options.unexpected(redactText(options.message ?? "Internal server error", isSensitiveKey));
+        Object.defineProperty(rejection, "cause", { configurable: true, enumerable: false, value: cause });
+        return Effect.failCause(Cause.fromReasons([...Cause.fail(rejection).reasons, ...cause.reasons.filter(Cause.isInterruptReason)]));
+    });
+}
+//# sourceMappingURL=boundary.js.map

package/dist/boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boundary.js","sourceRoot":"","sources":["../src/boundary.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAK3D,MAAM,UAAU,WAAW,CAIzB,MAAe,EAAE,OAA4C;IAC9D,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACnC,OAAO,CAAU,IAA4B,EAAwC,EAAE,CACtF,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;QACjC,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAClG,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,IAAI,uBAAuB,EAAE,cAAc,CAAC,CAAC,CAAC;QAC7G,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/redact.d.ts

@@ -0,0 +1,4 @@
+import { type SensitiveKey } from "#sensitive.ts";
+export declare function redact(value: unknown, sensitive?: SensitiveKey): unknown;
+export declare function redactWire(value: unknown, sensitive?: SensitiveKey): unknown;
+//# sourceMappingURL=redact.d.ts.map

package/dist/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AACA,OAAO,EAA0D,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAyD1G,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,GAAE,YAA6B,GAAG,OAAO,CAExF;AACD,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,GAAE,YAA6B,GAAG,OAAO,CAE5F"}

package/dist/redact.js

@@ -0,0 +1,64 @@
+import { Predicate, Redacted } from "effect";
+import { isSensitiveKey, REDACTED, redactErrorStack, redactText } from "#sensitive.ts";
+const MAX_DEPTH = 8;
+const MAX_ENTRIES = 50;
+function binary(value) {
+    if (ArrayBuffer.isView(value)) {
+        return `<${value.constructor.name} ${value.byteLength} bytes>`;
+    }
+    if (value instanceof ArrayBuffer) {
+        return `<ArrayBuffer ${value.byteLength} bytes>`;
+    }
+    return undefined;
+}
+function entriesOf(value, sensitive, bounded) {
+    const entries = Object.entries(value);
+    if (!Predicate.isError(value)) {
+        return entries;
+    }
+    const shape = [
+        ["name", value.name],
+        ["message", value.message],
+        ["stack", bounded ? redactErrorStack(value, sensitive) : value.stack],
+    ];
+    const extra = entries.filter(([key]) => !["name", "message", "stack", "cause"].includes(key));
+    return value.cause === undefined ? [...shape, ...extra] : [...shape, ...extra, ["cause", value.cause]];
+}
+function collection(value, sensitive, depth, bounded) {
+    if (Array.isArray(value)) {
+        const items = value.slice(0, bounded ? MAX_ENTRIES : value.length).map((item) => walk(item, sensitive, depth + 1, bounded));
+        return bounded && value.length > MAX_ENTRIES ? [...items, `<${value.length - MAX_ENTRIES} more items>`] : items;
+    }
+    const entries = entriesOf(value, sensitive, bounded);
+    const kept = entries.slice(0, bounded ? MAX_ENTRIES : entries.length).map(([key, nested]) => {
+        const stackHeader = key === "stack" && typeof nested === "string" && (sensitive("name") || sensitive("message"));
+        return [key, sensitive(key) || stackHeader ? REDACTED : walk(nested, sensitive, depth + 1, bounded)];
+    });
+    return Object.fromEntries(bounded && entries.length > MAX_ENTRIES ? [...kept, ["<truncated>", `${entries.length - MAX_ENTRIES} more keys`]] : kept);
+}
+function walk(value, sensitive, depth, bounded) {
+    if (Redacted.isRedacted(value)) {
+        return REDACTED;
+    }
+    if (Predicate.isString(value)) {
+        return bounded ? redactText(value, sensitive) : redactText(value, sensitive, Number.POSITIVE_INFINITY);
+    }
+    if (!Predicate.isObjectOrArray(value)) {
+        return value;
+    }
+    const summary = binary(value);
+    if (summary !== undefined) {
+        return bounded ? summary : value;
+    }
+    if (bounded && depth >= MAX_DEPTH) {
+        return "<truncated>";
+    }
+    return collection(value, sensitive, depth, bounded);
+}
+export function redact(value, sensitive = isSensitiveKey) {
+    return walk(value, sensitive, 0, true);
+}
+export function redactWire(value, sensitive = isSensitiveKey) {
+    return walk(value, sensitive, 0, false);
+}
+//# sourceMappingURL=redact.js.map

package/dist/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../src/redact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAqB,MAAM,eAAe,CAAC;AAE1G,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,SAAS,MAAM,CAAC,KAAa;IAC5B,IAAI,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,IAAI,KAAK,CAAC,UAAU,SAAS,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;QAClC,OAAO,gBAAgB,KAAK,CAAC,UAAU,SAAS,CAAC;IAClD,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AACD,SAAS,SAAS,CAAC,KAAa,EAAE,SAAuB,EAAE,OAAgB;IAC1E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,MAAM,KAAK,GAAwB;QAClC,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC;QAC1B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;KACrE,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9F,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACxG,CAAC;AACD,SAAS,UAAU,CAAC,KAAa,EAAE,SAAuB,EAAE,KAAa,EAAE,OAAgB;IAC1F,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5H,OAAO,OAAO,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjH,CAAC;IACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAqB,EAAE;QAC9G,MAAM,WAAW,GAAG,GAAG,KAAK,OAAO,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACjH,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,aAAa,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,WAAW,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACrJ,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,SAAuB,EAAE,KAAa,EAAE,OAAgB;IACrF,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QACnC,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,OAAO,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,KAAc,EAAE,SAAS,GAAiB,cAAc;IAC9E,OAAO,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACxC,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,KAAc,EAAE,SAAS,GAAiB,cAAc;IAClF,OAAO,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC"}

package/dist/redactCause.d.ts

@@ -0,0 +1,7 @@
+import { Cause, ErrorReporter } from "effect";
+import { type SensitiveKey } from "#sensitive.ts";
+export declare function redactDefect(defect: unknown, sensitive?: SensitiveKey): unknown;
+export declare function redactCause<E>(cause: Cause.Cause<E>, sensitive?: SensitiveKey): Cause.Cause<E>;
+export declare function redactDiagnosticCause(cause: Cause.Cause<unknown>, sensitive?: SensitiveKey): Cause.Cause<unknown>;
+export declare function redactingErrorReporter(reporter: ErrorReporter.ErrorReporter, sensitive?: SensitiveKey): ErrorReporter.ErrorReporter;
+//# sourceMappingURL=redactCause.d.ts.map

package/dist/redactCause.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactCause.d.ts","sourceRoot":"","sources":["../src/redactCause.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAW,aAAa,EAA8B,MAAM,QAAQ,CAAC;AAEnF,OAAO,EAA0D,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AA4B1G,wBAAgB,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,GAAE,YAA6B,GAAG,OAAO,CAE/F;AACD,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,GAAE,YAA6B,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAQ9G;AAgDD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,SAAS,GAAE,YAA6B,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAQjI;AACD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,CAAC,aAAa,EAAE,SAAS,GAAE,YAA6B,GAAG,aAAa,CAAC,aAAa,CAKnJ"}

package/dist/redactCause.js

@@ -0,0 +1,92 @@
+import { Cause, Context, ErrorReporter, Predicate } from "effect";
+import { redact } from "#redact.ts";
+import { isSensitiveKey, REDACTED, redactErrorStack, redactText } from "#sensitive.ts";
+function reporterHints(error, sensitive) {
+    return {
+        ...(ErrorReporter.isIgnored(error) ? { [ErrorReporter.ignore]: true } : {}),
+        ...(ErrorReporter.severity in error ? { [ErrorReporter.severity]: ErrorReporter.getSeverity(error) } : {}),
+        ...(ErrorReporter.attributes in error ? { [ErrorReporter.attributes]: redact(ErrorReporter.getAttributes(error), sensitive) } : {}),
+    };
+}
+function errorText(key, value, sensitive) {
+    return sensitive(key) ? REDACTED : redactText(value, sensitive);
+}
+function redactError(error, sensitive) {
+    const cause = sensitive("cause") ? REDACTED : redact(error.cause, sensitive);
+    const options = error.cause === undefined ? undefined : { cause };
+    const copy = Object.assign(new Error(errorText("message", error.message, sensitive), options), redact(Object.fromEntries(Object.entries(error)), sensitive), reporterHints(error, sensitive));
+    Object.defineProperty(copy, "name", { configurable: true, value: errorText("name", error.name, sensitive), writable: true });
+    Object.defineProperty(copy, "stack", {
+        configurable: true,
+        value: redactErrorStack(error, sensitive),
+        writable: true,
+    });
+    return copy;
+}
+export function redactDefect(defect, sensitive = isSensitiveKey) {
+    return Predicate.isError(defect) ? redactError(defect, sensitive) : redact(defect, sensitive);
+}
+export function redactCause(cause, sensitive = isSensitiveKey) {
+    return Cause.fromReasons(cause.reasons.flatMap((reason) => Cause.isDieReason(reason)
+        ? Cause.annotate(Cause.die(redactDefect(reason.defect, sensitive)), Context.makeUnsafe(reason.annotations)).reasons
+        : [reason]));
+}
+function diagnosticReason(reason, sensitive) {
+    switch (reason._tag) {
+        case "Fail":
+            return Cause.fail(redactDefect(reason.error, sensitive));
+        case "Die":
+            return Cause.die(redactDefect(reason.defect, sensitive));
+        case "Interrupt":
+            return Cause.interrupt(reason.fiberId);
+    }
+}
+function stackFrame(frame, sensitive, remaining = 8) {
+    if (frame === undefined || remaining === 0) {
+        return undefined;
+    }
+    return {
+        name: sensitive("name") ? REDACTED : redactText(frame.name, sensitive),
+        parent: stackFrame(frame.parent, sensitive, remaining - 1),
+        stack: () => {
+            const value = frame.stack();
+            if (value === undefined) {
+                return undefined;
+            }
+            return sensitive("name") || sensitive("message") ? REDACTED : redactText(value, sensitive);
+        },
+    };
+}
+function diagnosticAnnotations(reason, sensitive) {
+    const nativeStacks = [
+        Cause.StackTrace,
+        Cause.InterruptorStackTrace,
+    ];
+    const annotations = new Map([...reason.annotations]
+        .filter(([key]) => !nativeStacks.some((service) => service.key === key))
+        .map(([key, value]) => [key, sensitive(key) ? REDACTED : redact(value, sensitive)]));
+    if (!sensitive("stack")) {
+        const context = Cause.reasonAnnotations(reason);
+        for (const service of nativeStacks) {
+            const frame = Context.getOrUndefined(context, service);
+            if (frame !== undefined && !sensitive(service.key)) {
+                annotations.set(service.key, stackFrame(frame, sensitive));
+            }
+        }
+    }
+    return annotations;
+}
+export function redactDiagnosticCause(cause, sensitive = isSensitiveKey) {
+    return Cause.fromReasons(cause.reasons.flatMap((reason) => {
+        const redacted = diagnosticReason(reason, sensitive);
+        const annotations = diagnosticAnnotations(reason, sensitive);
+        return Cause.annotate(redacted, Context.makeUnsafe(annotations), { overwrite: true }).reasons;
+    }));
+}
+export function redactingErrorReporter(reporter, sensitive = isSensitiveKey) {
+    return {
+        [ErrorReporter.TypeId]: ErrorReporter.TypeId,
+        report: (options) => reporter.report({ ...options, cause: redactDiagnosticCause(options.cause, sensitive) }),
+    };
+}
+//# sourceMappingURL=redactCause.js.map

package/dist/redactCause.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactCause.js","sourceRoot":"","sources":["../src/redactCause.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAmB,MAAM,QAAQ,CAAC;AACnF,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAqB,MAAM,eAAe,CAAC;AAE1G,SAAS,aAAa,CAAC,KAAY,EAAE,SAAuB;IAC3D,OAAO;QACN,GAAG,CAAC,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,aAAa,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1G,GAAG,CAAC,aAAa,CAAC,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnI,CAAC;AACH,CAAC;AACD,SAAS,SAAS,CAAC,GAAW,EAAE,KAAa,EAAE,SAAuB;IACrE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACjE,CAAC;AACD,SAAS,WAAW,CAAC,KAAY,EAAE,SAAuB;IACzD,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CACzB,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,EAClE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAC5D,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAC/B,CAAC;IACF,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7H,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,OAAO,EAAE;QACpC,YAAY,EAAE,IAAI;QAClB,KAAK,EAAE,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC;QACzC,QAAQ,EAAE,IAAI;KACd,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACb,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,MAAe,EAAE,SAAS,GAAiB,cAAc;IACrF,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAC/F,CAAC;AACD,MAAM,UAAU,WAAW,CAAI,KAAqB,EAAE,SAAS,GAAiB,cAAc;IAC7F,OAAO,KAAK,CAAC,WAAW,CACvB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAkB,CAAC,MAAM,EAAE,EAAE,CACjD,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;QACnH,CAAC,CAAC,CAAC,MAAM,CAAC,CACX,CACD,CAAC;AACH,CAAC;AACD,SAAS,gBAAgB,CAAC,MAA6B,EAAE,SAAuB;IAC/E,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,MAAM;YACV,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,KAAK,KAAK;YACT,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,KAAK,WAAW;YACf,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;AACF,CAAC;AACD,SAAS,UAAU,CAAC,KAAwC,EAAE,SAAuB,EAAE,SAAS,GAAG,CAAC;IACnG,IAAI,KAAK,KAAK,SAAS,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QAC5C,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO;QACN,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC;QACtE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,CAAC;QAC1D,KAAK,EAAE,GAAG,EAAE;YACX,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,OAAO,SAAS,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5F,CAAC;KACD,CAAC;AACH,CAAC;AACD,SAAS,qBAAqB,CAAC,MAA6B,EAAE,SAAuB;IACpF,MAAM,YAAY,GAAyF;QAC1G,KAAK,CAAC,UAAU;QAChB,KAAK,CAAC,qBAAqB;KAC3B,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAC1B,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC;SACrB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;SACvE,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CACpF,CAAC;IACF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,KAAK,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChD,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpD,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YAC5D,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,WAAW,CAAC;AACpB,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,KAA2B,EAAE,SAAS,GAAiB,cAAc;IAC1G,OAAO,KAAK,CAAC,WAAW,CACvB,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE;QAChC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;IAC/F,CAAC,CAAC,CACF,CAAC;AACH,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,QAAqC,EAAE,SAAS,GAAiB,cAAc;IACrH,OAAO;QACN,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,MAAM;QAC5C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;KAC5G,CAAC;AACH,CAAC"}

package/dist/rejectedField.d.ts

@@ -0,0 +1,7 @@
+import { Option } from "effect";
+export interface RejectedField {
+    readonly field: string;
+    readonly message: string;
+}
+export declare function rejectedField(error: unknown): Option.Option<RejectedField>;
+//# sourceMappingURL=rejectedField.d.ts.map

package/dist/rejectedField.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejectedField.d.ts","sourceRoot":"","sources":["../src/rejectedField.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAGD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAE1E"}

package/dist/rejectedField.js

@@ -0,0 +1,7 @@
+import { Option, Schema } from "effect";
+const Rejected = Schema.Struct({ _tag: Schema.String, field: Schema.String, message: Schema.String });
+const decode = Schema.decodeUnknownOption(Rejected);
+export function rejectedField(error) {
+    return Option.map(decode(error), ({ field, message }) => ({ field, message }));
+}
+//# sourceMappingURL=rejectedField.js.map

package/dist/rejectedField.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rejectedField.js","sourceRoot":"","sources":["../src/rejectedField.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAKxC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACtG,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACpD,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/sensitive.d.ts

@@ -0,0 +1,6 @@
+export declare const REDACTED = "<redacted>";
+export type SensitiveKey = (key: string) => boolean;
+export declare function isSensitiveKey(key: string): boolean;
+export declare function redactText(text: string, sensitive: SensitiveKey, maxLength?: number): string;
+export declare function redactErrorStack(error: Error, sensitive: SensitiveKey): string | undefined;
+//# sourceMappingURL=sensitive.d.ts.map

package/dist/sensitive.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.d.ts","sourceRoot":"","sources":["../src/sensitive.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,eAAe,CAAC;AAwBrC,MAAM,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;AAQpD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAOnD;AA8BD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,SAAa,GAAG,MAAM,CAGhG;AACD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAK1F"}

package/dist/sensitive.js

@@ -0,0 +1,78 @@
+export const REDACTED = "<redacted>";
+const MAX_STRING = 2048;
+const SENSITIVE_PARTS = [
+    "password",
+    "passphrase",
+    "secret",
+    "token",
+    "authorization",
+    "cookie",
+    "apikey",
+    "accesskey",
+    "credential",
+    "privatekey",
+    "jwt",
+    "bearer",
+    "signature",
+    "sessionid",
+    "cardnumber",
+    "accountnumber",
+    "csrf",
+    "xsrf",
+];
+const SENSITIVE_WORDS = ["otp", "pin", "cvv", "cvc", "ssn", "iban"];
+const SENSITIVE_NAMES = ["session", "pan", "sig"];
+function wordsOf(key) {
+    return key
+        .replaceAll(/(?<lower>[a-z0-9])(?<upper>[A-Z])/gu, "$<lower> $<upper>")
+        .replaceAll(/(?<initial>[A-Z])(?<word>[A-Z][a-z])/gu, "$<initial> $<word>")
+        .toLowerCase()
+        .split(/[\s_-]+/u);
+}
+export function isSensitiveKey(key) {
+    const normalized = key.toLowerCase().replaceAll(/[-_]/gu, "");
+    return (SENSITIVE_NAMES.includes(normalized)
+        || SENSITIVE_PARTS.some((part) => normalized.includes(part))
+        || wordsOf(key).some((word) => SENSITIVE_WORDS.includes(word)));
+}
+const AUTH_SCHEME = /\b(?<scheme>Bearer|Basic)\s+[A-Za-z0-9%._~+/-]+=*/giu;
+const JWT = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/gu;
+const PRIVATE_KEY = /-----BEGIN (?<kind>(?:[A-Z0-9]+ )*PRIVATE KEY)-----[\s\S]*?-----END \k<kind>-----/gu;
+const URL_PASSWORD = /(?<authority>\/\/[^:/\s@]+:)[^@/\s]+@/gu;
+function redactAssignments(text, sensitive) {
+    const matcher = /(?<key>[A-Za-z][\w.-]*)(?<separator>["']?\s*[=:]\s*["']?)(?<value>[^\s"'&,;]+)/gu;
+    let result = "";
+    let cursor = 0;
+    for (let match = matcher.exec(text); match !== null; match = matcher.exec(text)) {
+        const key = match[1] ?? "";
+        const separator = match[2] ?? "";
+        if (sensitive(key)) {
+            result += `${text.slice(cursor, match.index)}${key}${separator}${REDACTED}`;
+            cursor = matcher.lastIndex;
+        }
+        else if (match[3]?.includes("=")) {
+            // Revisit embedded parameters without parsing URL and source-location colons as assignments.
+            matcher.lastIndex = match.index + key.length + separator.length;
+        }
+    }
+    return result + text.slice(cursor);
+}
+function scrub(text, sensitive) {
+    const credentials = text
+        .replaceAll(PRIVATE_KEY, REDACTED)
+        .replaceAll(AUTH_SCHEME, `$<scheme> ${REDACTED}`)
+        .replaceAll(JWT, REDACTED)
+        .replaceAll(URL_PASSWORD, `$<authority>${REDACTED}@`);
+    return redactAssignments(credentials, sensitive);
+}
+export function redactText(text, sensitive, maxLength = MAX_STRING) {
+    const scrubbed = scrub(text, sensitive);
+    return scrubbed.length > maxLength ? `${scrubbed.slice(0, maxLength)}…<${scrubbed.length - maxLength} more chars>` : scrubbed;
+}
+export function redactErrorStack(error, sensitive) {
+    if (error.stack === undefined) {
+        return undefined;
+    }
+    return ["message", "name", "stack"].some((key) => sensitive(key)) ? REDACTED : redactText(error.stack, sensitive);
+}
+//# sourceMappingURL=sensitive.js.map

package/dist/sensitive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sensitive.js","sourceRoot":"","sources":["../src/sensitive.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AACrC,MAAM,UAAU,GAAG,IAAI,CAAC;AACxB,MAAM,eAAe,GAAG;IACvB,UAAU;IACV,YAAY;IACZ,QAAQ;IACR,OAAO;IACP,eAAe;IACf,QAAQ;IACR,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,KAAK;IACL,QAAQ;IACR,WAAW;IACX,WAAW;IACX,YAAY;IACZ,eAAe;IACf,MAAM;IACN,MAAM;CACN,CAAC;AACF,MAAM,eAAe,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AACpE,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAElD,SAAS,OAAO,CAAC,GAAW;IAC3B,OAAO,GAAG;SACR,UAAU,CAAC,qCAAqC,EAAE,mBAAmB,CAAC;SACtE,UAAU,CAAC,wCAAwC,EAAE,oBAAoB,CAAC;SAC1E,WAAW,EAAE;SACb,KAAK,CAAC,UAAU,CAAC,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,GAAW;IACzC,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,CACN,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC;WACjC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;WACzD,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;AACH,CAAC;AACD,MAAM,WAAW,GAAG,sDAAsD,CAAC;AAC3E,MAAM,GAAG,GAAG,uDAAuD,CAAC;AACpE,MAAM,WAAW,GAAG,qFAAqF,CAAC;AAC1G,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAC/D,SAAS,iBAAiB,CAAC,IAAY,EAAE,SAAuB;IAC/D,MAAM,OAAO,GAAG,kFAAkF,CAAC;IACnG,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,KAAK,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,SAAS,GAAG,QAAQ,EAAE,CAAC;YAC5E,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;QAC5B,CAAC;aAAM,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,6FAA6F;YAC7F,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACjE,CAAC;IACF,CAAC;IACD,OAAO,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AACD,SAAS,KAAK,CAAC,IAAY,EAAE,SAAuB;IACnD,MAAM,WAAW,GAAG,IAAI;SACtB,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC;SACjC,UAAU,CAAC,WAAW,EAAE,aAAa,QAAQ,EAAE,CAAC;SAChD,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;SACzB,UAAU,CAAC,YAAY,EAAE,eAAe,QAAQ,GAAG,CAAC,CAAC;IACvD,OAAO,iBAAiB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAClD,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAAuB,EAAE,SAAS,GAAG,UAAU;IACvF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,KAAK,QAAQ,CAAC,MAAM,GAAG,SAAS,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/H,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAY,EAAE,SAAuB;IACrE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACnH,CAAC"}

package/dist/taxonomy.d.ts

@@ -0,0 +1,55 @@
+import { Schema } from "effect";
+declare const NotFound_base: Schema.Class<NotFound, Schema.TaggedStruct<"NotFound", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class NotFound extends NotFound_base {
+}
+declare const Unauthorized_base: Schema.Class<Unauthorized, Schema.TaggedStruct<"Unauthorized", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class Unauthorized extends Unauthorized_base {
+}
+declare const Forbidden_base: Schema.Class<Forbidden, Schema.TaggedStruct<"Forbidden", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class Forbidden extends Forbidden_base {
+}
+declare const BadRequest_base: Schema.Class<BadRequest, Schema.TaggedStruct<"BadRequest", {
+    field: Schema.optionalKey<Schema.String>;
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class BadRequest extends BadRequest_base {
+}
+declare const Conflict_base: Schema.Class<Conflict, Schema.TaggedStruct<"Conflict", {
+    field: Schema.optionalKey<Schema.String>;
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class Conflict extends Conflict_base {
+}
+declare const PreconditionFailed_base: Schema.Class<PreconditionFailed, Schema.TaggedStruct<"PreconditionFailed", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class PreconditionFailed extends PreconditionFailed_base {
+}
+declare const TooManyRequests_base: Schema.Class<TooManyRequests, Schema.TaggedStruct<"TooManyRequests", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class TooManyRequests extends TooManyRequests_base {
+}
+declare const AuthUnavailable_base: Schema.Class<AuthUnavailable, Schema.TaggedStruct<"AuthUnavailable", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class AuthUnavailable extends AuthUnavailable_base {
+}
+declare const InternalServerError_base: Schema.Class<InternalServerError, Schema.TaggedStruct<"InternalServerError", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class InternalServerError extends InternalServerError_base {
+}
+declare const ServiceUnavailable_base: Schema.Class<ServiceUnavailable, Schema.TaggedStruct<"ServiceUnavailable", {
+    message: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class ServiceUnavailable extends ServiceUnavailable_base {
+}
+export {};
+//# sourceMappingURL=taxonomy.d.ts.map

package/dist/taxonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.d.ts","sourceRoot":"","sources":["../src/taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;;;;AAIhC,qBAAa,QAAS,SAAQ,aAAqD;CAAG;;;;AACtF,qBAAa,YAAa,SAAQ,iBAA6D;CAAG;;;;AAClG,qBAAa,SAAU,SAAQ,cAAuD;CAAG;;;;;AACzF,qBAAa,UAAW,SAAQ,eAAwD;CAAG;;;;;AAC3F,qBAAa,QAAS,SAAQ,aAAoD;CAAG;;;;AACrF,qBAAa,kBAAmB,SAAQ,uBAAyE;CAAG;;;;AACpH,qBAAa,eAAgB,SAAQ,oBAAmE;CAAG;;;;AAC3G,qBAAa,eAAgB,SAAQ,oBAAmE;CAAG;;;;AAC3G,qBAAa,mBAAoB,SAAQ,wBAA2E;CAAG;;;;AACvH,qBAAa,kBAAmB,SAAQ,uBAAyE;CAAG"}

package/dist/taxonomy.js

@@ -0,0 +1,24 @@
+import { Schema } from "effect";
+const described = { message: Schema.String };
+const perField = { field: Schema.optionalKey(Schema.String), message: Schema.String };
+export class NotFound extends Schema.TaggedError()("NotFound", described) {
+}
+export class Unauthorized extends Schema.TaggedError()("Unauthorized", described) {
+}
+export class Forbidden extends Schema.TaggedError()("Forbidden", described) {
+}
+export class BadRequest extends Schema.TaggedError()("BadRequest", perField) {
+}
+export class Conflict extends Schema.TaggedError()("Conflict", perField) {
+}
+export class PreconditionFailed extends Schema.TaggedError()("PreconditionFailed", described) {
+}
+export class TooManyRequests extends Schema.TaggedError()("TooManyRequests", described) {
+}
+export class AuthUnavailable extends Schema.TaggedError()("AuthUnavailable", described) {
+}
+export class InternalServerError extends Schema.TaggedError()("InternalServerError", described) {
+}
+export class ServiceUnavailable extends Schema.TaggedError()("ServiceUnavailable", described) {
+}
+//# sourceMappingURL=taxonomy.js.map

package/dist/taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"taxonomy.js","sourceRoot":"","sources":["../src/taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AAC7C,MAAM,QAAQ,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACtF,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,WAAW,EAAY,CAAC,UAAU,EAAE,SAAS,CAAC;CAAG;AACtF,MAAM,OAAO,YAAa,SAAQ,MAAM,CAAC,WAAW,EAAgB,CAAC,cAAc,EAAE,SAAS,CAAC;CAAG;AAClG,MAAM,OAAO,SAAU,SAAQ,MAAM,CAAC,WAAW,EAAa,CAAC,WAAW,EAAE,SAAS,CAAC;CAAG;AACzF,MAAM,OAAO,UAAW,SAAQ,MAAM,CAAC,WAAW,EAAc,CAAC,YAAY,EAAE,QAAQ,CAAC;CAAG;AAC3F,MAAM,OAAO,QAAS,SAAQ,MAAM,CAAC,WAAW,EAAY,CAAC,UAAU,EAAE,QAAQ,CAAC;CAAG;AACrF,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAAG;AACpH,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CAAC,iBAAiB,EAAE,SAAS,CAAC;CAAG;AAC3G,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,WAAW,EAAmB,CAAC,iBAAiB,EAAE,SAAS,CAAC;CAAG;AAC3G,MAAM,OAAO,mBAAoB,SAAQ,MAAM,CAAC,WAAW,EAAuB,CAAC,qBAAqB,EAAE,SAAS,CAAC;CAAG;AACvH,MAAM,OAAO,kBAAmB,SAAQ,MAAM,CAAC,WAAW,EAAsB,CAAC,oBAAoB,EAAE,SAAS,CAAC;CAAG"}

package/package.json

@@ -1,10 +1,70 @@
 {
   "name": "@shivaedev/errors",
-  "version": "0.0.0",
-  "description": "Placeholder for the ShivaeDev errors package.",
-  "license": "MIT",
+  "version": "0.1.0",
+  "description": "Typed expected failures and secret-safe failure reporting for Effect applications",
+  "keywords": [
+    "effect"
+  ],
+  "homepage": "https://github.com/ShivaeDev/platform/tree/main/packages/errors#readme",
+  "bugs": {
+    "url": "https://github.com/ShivaeDev/platform/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/ShivaeDev/platform.git"
+    "url": "git+https://github.com/ShivaeDev/platform.git",
+    "directory": "packages/errors"
+  },
+  "license": "MIT",
+  "sideEffects": false,
+  "type": "module",
+  "imports": {
+    "#test/*": "./src/test-support/*",
+    "#*.ts": {
+      "source": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "exports": {
+    "./*.ts": {
+      "source": "./src/*.ts",
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.ts",
+    "!src/**/*.test.tsx",
+    "!src/**/*.spec.ts",
+    "!src/**/*.spec.tsx",
+    "!src/**/test-support",
+    "README.md"
+  ],
+  "devDependencies": {
+    "@shivaedev/quality": "0.42.0",
+    "@shivaedev/test": "0.10.0",
+    "@types/node": "24.19.2",
+    "effect": "4.0.5",
+    "typescript": "7.0.2",
+    "vitest": "5.0.5"
+  },
+  "peerDependencies": {
+    "effect": "4.0.5"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "scripts": {
+    "build": "node --eval \"import('node:fs').then(({ rmSync }) => rmSync('dist', { force: true, recursive: true }))\" && tsc --project tsconfig.build.json",
+    "ready": "pnpm typecheck && pnpm test && pnpm build",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
   }
 }

package/src/boundary.ts

@@ -0,0 +1,26 @@
+import { Cause, Effect, Schema } from "effect";
+import { isSensitiveKey, redactText } from "#sensitive.ts";
+export interface RpcBoundaryOptions<E> {
+	readonly message?: string;
+	readonly unexpected: (message: string) => E;
+}
+export function rpcBoundary<
+	TSchema extends Schema.ConstraintDecoder<{
+		readonly message: string;
+	}>,
+>(schema: TSchema, options: RpcBoundaryOptions<TSchema["Type"]>) {
+	const declared = Schema.is(schema);
+	return <A, E, R>(self: Effect.Effect<A, E, R>): Effect.Effect<A, TSchema["Type"], R> =>
+		Effect.catchCause(self, (cause) => {
+			if (Cause.hasInterruptsOnly(cause)) {
+				return Effect.failCause(Cause.fromReasons(cause.reasons.filter(Cause.isInterruptReason)));
+			}
+			const reason = cause.reasons[0];
+			if (cause.reasons.length === 1 && reason && Cause.isFailReason(reason) && declared(reason.error)) {
+				return Effect.fail(reason.error);
+			}
+			const rejection = options.unexpected(redactText(options.message ?? "Internal server error", isSensitiveKey));
+			Object.defineProperty(rejection, "cause", { configurable: true, enumerable: false, value: cause });
+			return Effect.failCause(Cause.fromReasons([...Cause.fail(rejection).reasons, ...cause.reasons.filter(Cause.isInterruptReason)]));
+		});
+}

package/src/redact.ts

@@ -0,0 +1,64 @@
+import { Predicate, Redacted } from "effect";
+import { isSensitiveKey, REDACTED, redactErrorStack, redactText, type SensitiveKey } from "#sensitive.ts";
+
+const MAX_DEPTH = 8;
+const MAX_ENTRIES = 50;
+function binary(value: object): string | undefined {
+	if (ArrayBuffer.isView(value)) {
+		return `<${value.constructor.name} ${value.byteLength} bytes>`;
+	}
+	if (value instanceof ArrayBuffer) {
+		return `<ArrayBuffer ${value.byteLength} bytes>`;
+	}
+	return undefined;
+}
+function entriesOf(value: object, sensitive: SensitiveKey, bounded: boolean): [string, unknown][] {
+	const entries = Object.entries(value);
+	if (!Predicate.isError(value)) {
+		return entries;
+	}
+	const shape: [string, unknown][] = [
+		["name", value.name],
+		["message", value.message],
+		["stack", bounded ? redactErrorStack(value, sensitive) : value.stack],
+	];
+	const extra = entries.filter(([key]) => !["name", "message", "stack", "cause"].includes(key));
+	return value.cause === undefined ? [...shape, ...extra] : [...shape, ...extra, ["cause", value.cause]];
+}
+function collection(value: object, sensitive: SensitiveKey, depth: number, bounded: boolean): unknown {
+	if (Array.isArray(value)) {
+		const items = value.slice(0, bounded ? MAX_ENTRIES : value.length).map((item) => walk(item, sensitive, depth + 1, bounded));
+		return bounded && value.length > MAX_ENTRIES ? [...items, `<${value.length - MAX_ENTRIES} more items>`] : items;
+	}
+	const entries = entriesOf(value, sensitive, bounded);
+	const kept = entries.slice(0, bounded ? MAX_ENTRIES : entries.length).map(([key, nested]): [string, unknown] => {
+		const stackHeader = key === "stack" && typeof nested === "string" && (sensitive("name") || sensitive("message"));
+		return [key, sensitive(key) || stackHeader ? REDACTED : walk(nested, sensitive, depth + 1, bounded)];
+	});
+	return Object.fromEntries(bounded && entries.length > MAX_ENTRIES ? [...kept, ["<truncated>", `${entries.length - MAX_ENTRIES} more keys`]] : kept);
+}
+function walk(value: unknown, sensitive: SensitiveKey, depth: number, bounded: boolean): unknown {
+	if (Redacted.isRedacted(value)) {
+		return REDACTED;
+	}
+	if (Predicate.isString(value)) {
+		return bounded ? redactText(value, sensitive) : redactText(value, sensitive, Number.POSITIVE_INFINITY);
+	}
+	if (!Predicate.isObjectOrArray(value)) {
+		return value;
+	}
+	const summary = binary(value);
+	if (summary !== undefined) {
+		return bounded ? summary : value;
+	}
+	if (bounded && depth >= MAX_DEPTH) {
+		return "<truncated>";
+	}
+	return collection(value, sensitive, depth, bounded);
+}
+export function redact(value: unknown, sensitive: SensitiveKey = isSensitiveKey): unknown {
+	return walk(value, sensitive, 0, true);
+}
+export function redactWire(value: unknown, sensitive: SensitiveKey = isSensitiveKey): unknown {
+	return walk(value, sensitive, 0, false);
+}

package/src/redactCause.ts

@@ -0,0 +1,104 @@
+import { Cause, Context, ErrorReporter, Predicate, type References } from "effect";
+import { redact } from "#redact.ts";
+import { isSensitiveKey, REDACTED, redactErrorStack, redactText, type SensitiveKey } from "#sensitive.ts";
+
+function reporterHints(error: Error, sensitive: SensitiveKey) {
+	return {
+		...(ErrorReporter.isIgnored(error) ? { [ErrorReporter.ignore]: true } : {}),
+		...(ErrorReporter.severity in error ? { [ErrorReporter.severity]: ErrorReporter.getSeverity(error) } : {}),
+		...(ErrorReporter.attributes in error ? { [ErrorReporter.attributes]: redact(ErrorReporter.getAttributes(error), sensitive) } : {}),
+	};
+}
+function errorText(key: string, value: string, sensitive: SensitiveKey): string {
+	return sensitive(key) ? REDACTED : redactText(value, sensitive);
+}
+function redactError(error: Error, sensitive: SensitiveKey): Error {
+	const cause = sensitive("cause") ? REDACTED : redact(error.cause, sensitive);
+	const options = error.cause === undefined ? undefined : { cause };
+	const copy = Object.assign(
+		new Error(errorText("message", error.message, sensitive), options),
+		redact(Object.fromEntries(Object.entries(error)), sensitive),
+		reporterHints(error, sensitive),
+	);
+	Object.defineProperty(copy, "name", { configurable: true, value: errorText("name", error.name, sensitive), writable: true });
+	Object.defineProperty(copy, "stack", {
+		configurable: true,
+		value: redactErrorStack(error, sensitive),
+		writable: true,
+	});
+	return copy;
+}
+export function redactDefect(defect: unknown, sensitive: SensitiveKey = isSensitiveKey): unknown {
+	return Predicate.isError(defect) ? redactError(defect, sensitive) : redact(defect, sensitive);
+}
+export function redactCause<E>(cause: Cause.Cause<E>, sensitive: SensitiveKey = isSensitiveKey): Cause.Cause<E> {
+	return Cause.fromReasons(
+		cause.reasons.flatMap<Cause.Reason<E>>((reason) =>
+			Cause.isDieReason(reason)
+				? Cause.annotate(Cause.die(redactDefect(reason.defect, sensitive)), Context.makeUnsafe(reason.annotations)).reasons
+				: [reason],
+		),
+	);
+}
+function diagnosticReason(reason: Cause.Reason<unknown>, sensitive: SensitiveKey): Cause.Cause<unknown> {
+	switch (reason._tag) {
+		case "Fail":
+			return Cause.fail(redactDefect(reason.error, sensitive));
+		case "Die":
+			return Cause.die(redactDefect(reason.defect, sensitive));
+		case "Interrupt":
+			return Cause.interrupt(reason.fiberId);
+	}
+}
+function stackFrame(frame: References.StackFrame | undefined, sensitive: SensitiveKey, remaining = 8): References.StackFrame | undefined {
+	if (frame === undefined || remaining === 0) {
+		return undefined;
+	}
+	return {
+		name: sensitive("name") ? REDACTED : redactText(frame.name, sensitive),
+		parent: stackFrame(frame.parent, sensitive, remaining - 1),
+		stack: () => {
+			const value = frame.stack();
+			if (value === undefined) {
+				return undefined;
+			}
+			return sensitive("name") || sensitive("message") ? REDACTED : redactText(value, sensitive);
+		},
+	};
+}
+function diagnosticAnnotations(reason: Cause.Reason<unknown>, sensitive: SensitiveKey) {
+	const nativeStacks: Context.Key<Cause.StackTrace | Cause.InterruptorStackTrace, References.StackFrame>[] = [
+		Cause.StackTrace,
+		Cause.InterruptorStackTrace,
+	];
+	const annotations = new Map(
+		[...reason.annotations]
+			.filter(([key]) => !nativeStacks.some((service) => service.key === key))
+			.map(([key, value]) => [key, sensitive(key) ? REDACTED : redact(value, sensitive)]),
+	);
+	if (!sensitive("stack")) {
+		const context = Cause.reasonAnnotations(reason);
+		for (const service of nativeStacks) {
+			const frame = Context.getOrUndefined(context, service);
+			if (frame !== undefined && !sensitive(service.key)) {
+				annotations.set(service.key, stackFrame(frame, sensitive));
+			}
+		}
+	}
+	return annotations;
+}
+export function redactDiagnosticCause(cause: Cause.Cause<unknown>, sensitive: SensitiveKey = isSensitiveKey): Cause.Cause<unknown> {
+	return Cause.fromReasons(
+		cause.reasons.flatMap((reason) => {
+			const redacted = diagnosticReason(reason, sensitive);
+			const annotations = diagnosticAnnotations(reason, sensitive);
+			return Cause.annotate(redacted, Context.makeUnsafe(annotations), { overwrite: true }).reasons;
+		}),
+	);
+}
+export function redactingErrorReporter(reporter: ErrorReporter.ErrorReporter, sensitive: SensitiveKey = isSensitiveKey): ErrorReporter.ErrorReporter {
+	return {
+		[ErrorReporter.TypeId]: ErrorReporter.TypeId,
+		report: (options) => reporter.report({ ...options, cause: redactDiagnosticCause(options.cause, sensitive) }),
+	};
+}

package/src/rejectedField.ts

@@ -0,0 +1,10 @@
+import { Option, Schema } from "effect";
+export interface RejectedField {
+	readonly field: string;
+	readonly message: string;
+}
+const Rejected = Schema.Struct({ _tag: Schema.String, field: Schema.String, message: Schema.String });
+const decode = Schema.decodeUnknownOption(Rejected);
+export function rejectedField(error: unknown): Option.Option<RejectedField> {
+	return Option.map(decode(error), ({ field, message }) => ({ field, message }));
+}

package/src/sensitive.ts

@@ -0,0 +1,79 @@
+export const REDACTED = "<redacted>";
+const MAX_STRING = 2048;
+const SENSITIVE_PARTS = [
+	"password",
+	"passphrase",
+	"secret",
+	"token",
+	"authorization",
+	"cookie",
+	"apikey",
+	"accesskey",
+	"credential",
+	"privatekey",
+	"jwt",
+	"bearer",
+	"signature",
+	"sessionid",
+	"cardnumber",
+	"accountnumber",
+	"csrf",
+	"xsrf",
+];
+const SENSITIVE_WORDS = ["otp", "pin", "cvv", "cvc", "ssn", "iban"];
+const SENSITIVE_NAMES = ["session", "pan", "sig"];
+export type SensitiveKey = (key: string) => boolean;
+function wordsOf(key: string): string[] {
+	return key
+		.replaceAll(/(?<lower>[a-z0-9])(?<upper>[A-Z])/gu, "$<lower> $<upper>")
+		.replaceAll(/(?<initial>[A-Z])(?<word>[A-Z][a-z])/gu, "$<initial> $<word>")
+		.toLowerCase()
+		.split(/[\s_-]+/u);
+}
+export function isSensitiveKey(key: string): boolean {
+	const normalized = key.toLowerCase().replaceAll(/[-_]/gu, "");
+	return (
+		SENSITIVE_NAMES.includes(normalized)
+		|| SENSITIVE_PARTS.some((part) => normalized.includes(part))
+		|| wordsOf(key).some((word) => SENSITIVE_WORDS.includes(word))
+	);
+}
+const AUTH_SCHEME = /\b(?<scheme>Bearer|Basic)\s+[A-Za-z0-9%._~+/-]+=*/giu;
+const JWT = /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]*/gu;
+const PRIVATE_KEY = /-----BEGIN (?<kind>(?:[A-Z0-9]+ )*PRIVATE KEY)-----[\s\S]*?-----END \k<kind>-----/gu;
+const URL_PASSWORD = /(?<authority>\/\/[^:/\s@]+:)[^@/\s]+@/gu;
+function redactAssignments(text: string, sensitive: SensitiveKey): string {
+	const matcher = /(?<key>[A-Za-z][\w.-]*)(?<separator>["']?\s*[=:]\s*["']?)(?<value>[^\s"'&,;]+)/gu;
+	let result = "";
+	let cursor = 0;
+	for (let match = matcher.exec(text); match !== null; match = matcher.exec(text)) {
+		const key = match[1] ?? "";
+		const separator = match[2] ?? "";
+		if (sensitive(key)) {
+			result += `${text.slice(cursor, match.index)}${key}${separator}${REDACTED}`;
+			cursor = matcher.lastIndex;
+		} else if (match[3]?.includes("=")) {
+			// Revisit embedded parameters without parsing URL and source-location colons as assignments.
+			matcher.lastIndex = match.index + key.length + separator.length;
+		}
+	}
+	return result + text.slice(cursor);
+}
+function scrub(text: string, sensitive: SensitiveKey): string {
+	const credentials = text
+		.replaceAll(PRIVATE_KEY, REDACTED)
+		.replaceAll(AUTH_SCHEME, `$<scheme> ${REDACTED}`)
+		.replaceAll(JWT, REDACTED)
+		.replaceAll(URL_PASSWORD, `$<authority>${REDACTED}@`);
+	return redactAssignments(credentials, sensitive);
+}
+export function redactText(text: string, sensitive: SensitiveKey, maxLength = MAX_STRING): string {
+	const scrubbed = scrub(text, sensitive);
+	return scrubbed.length > maxLength ? `${scrubbed.slice(0, maxLength)}…<${scrubbed.length - maxLength} more chars>` : scrubbed;
+}
+export function redactErrorStack(error: Error, sensitive: SensitiveKey): string | undefined {
+	if (error.stack === undefined) {
+		return undefined;
+	}
+	return ["message", "name", "stack"].some((key) => sensitive(key)) ? REDACTED : redactText(error.stack, sensitive);
+}

package/src/taxonomy.ts

@@ -0,0 +1,14 @@
+import { Schema } from "effect";
+
+const described = { message: Schema.String };
+const perField = { field: Schema.optionalKey(Schema.String), message: Schema.String };
+export class NotFound extends Schema.TaggedError<NotFound>()("NotFound", described) {}
+export class Unauthorized extends Schema.TaggedError<Unauthorized>()("Unauthorized", described) {}
+export class Forbidden extends Schema.TaggedError<Forbidden>()("Forbidden", described) {}
+export class BadRequest extends Schema.TaggedError<BadRequest>()("BadRequest", perField) {}
+export class Conflict extends Schema.TaggedError<Conflict>()("Conflict", perField) {}
+export class PreconditionFailed extends Schema.TaggedError<PreconditionFailed>()("PreconditionFailed", described) {}
+export class TooManyRequests extends Schema.TaggedError<TooManyRequests>()("TooManyRequests", described) {}
+export class AuthUnavailable extends Schema.TaggedError<AuthUnavailable>()("AuthUnavailable", described) {}
+export class InternalServerError extends Schema.TaggedError<InternalServerError>()("InternalServerError", described) {}
+export class ServiceUnavailable extends Schema.TaggedError<ServiceUnavailable>()("ServiceUnavailable", described) {}