@tailor-platform/sdk 1.80.1 → 1.82.0

package/dist/configure/services/idp/permission.d.mts

@@ -1,24 +1,9 @@
 import { InferredAttributeMap } from "../../../runtime/types.mjs";
+import { UserBooleanArrayOperand, UserBooleanOperand, UserStringArrayOperand, UserStringOperand } from "../../types/permission-operand.types.mjs";
 import { IdPUserField } from "../../../parser/service/idp/types.mjs";
 //#region src/configure/services/idp/permission.d.ts
 type EqualityOperator = "=" | "!=";
 type ContainsOperator = "in" | "not in";
-type StringFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string ? K : never; }[keyof User];
-type StringArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string[] ? K : never; }[keyof User];
-type BooleanFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean ? K : never; }[keyof User];
-type BooleanArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean[] ? K : never; }[keyof User];
-type UserStringOperand<User extends object = InferredAttributeMap> = {
-  user: StringFieldKeys<User> | "id";
-};
-type UserStringArrayOperand<User extends object = InferredAttributeMap> = {
-  user: StringArrayFieldKeys<User>;
-};
-type UserBooleanOperand<User extends object = InferredAttributeMap> = {
-  user: BooleanFieldKeys<User> | "_loggedIn";
-};
-type UserBooleanArrayOperand<User extends object = InferredAttributeMap> = {
-  user: BooleanArrayFieldKeys<User>;
-};
 type IdPUserOperand<Update extends boolean = false> = Update extends true ? {
   oldIdpUser: IdPUserField;
 } | {

package/dist/configure/services/index.d.mts

@@ -15,6 +15,7 @@ import { ExecutionPolicyConcurrency, ExecutionPolicyDefInput, ExecutionPolicyExa
 import { ExecutorServiceConfig, ExecutorServiceInput, ResolverExternalConfig, ResolverServiceConfig, ResolverServiceInput, WorkflowServiceConfig, WorkflowServiceInput } from "../config/types.mjs";
 import { ConcurrencyPolicy, RetryPolicy } from "../../types/workflow.generated.mjs";
 import { AuthInvoker, defineAuth } from "./auth/index.mjs";
+import { ResolverPermission, ResolverPermissionCondition, ResolverPermissionPolicy } from "./resolver/permission.mjs";
 import { createResolver } from "./resolver/resolver.mjs";
 import { QueryType } from "./resolver/types.mjs";
 import "./resolver/index.mjs";
@@ -37,4 +38,4 @@ import { defineIdp } from "./idp/index.mjs";
 import { defineSecretManager } from "./secrets/index.mjs";
 import { HttpAdapter, HttpAdapterGraphQLQuery, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, HttpAdapterTypedDocumentNode, createHttpAdapter } from "./http-adapter/http-adapter.mjs";
 import "./http-adapter/index.mjs";
-export { type AIGatewayConfig, AuthAccessTokenArgs, AuthAccessTokenIssuedArgs, AuthAccessTokenRefreshedArgs, AuthAccessTokenRevokedArgs, AuthAccessTokenTrigger, type AuthConfig, type AuthConnectionConfig, type AuthConnectionOAuth2Config, type AuthConnectionTokenResult, type AuthExternalConfig, AuthInvoker, type AuthOwnConfig, type AuthServiceInput, type BeforeLoginClaims, type BeforeLoginHookArgs, type BuiltinIdP, type ConcurrencyPolicy, type DefinedAuth, type ExecutionPolicyConcurrency, type ExecutionPolicyDefInput, type ExecutionPolicyExactInstance, type ExecutionPolicyGroupOptions, type ExecutionPolicyInstance, type ExecutionPolicyWildcardInstance, type ExecutorServiceConfig, type ExecutorServiceInput, type FederatedIdentity, type FederatedIdentityClaims, type FederatedIdentityProvider, FunctionOperation, GqlOperation, HttpAdapter, HttpAdapterGraphQLQuery, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, HttpAdapterTypedDocumentNode, type IDToken, type IdPConfig, type IdPEmailConfig, type IdPExternalConfig, type IdPGqlOperations, type IdPGqlOperationsInput as IdPGqlOperationsConfig, type IdPPermission, type IdPPermissionCondition, type IdProvider as IdProviderConfig, IdpUserArgs, IdpUserCreatedArgs, IdpUserDeletedArgs, IdpUserTrigger, IdpUserUpdatedArgs, IncomingWebhookArgs, IncomingWebhookRequest, IncomingWebhookResponse, IncomingWebhookResponseConfig, IncomingWebhookTrigger, IncomingWebhookTriggerOptions, type OAuth2ClientInput as OAuth2Client, type OAuth2ClientGrantType, type OIDC, Operation, type PermissionCondition, type QueryType, RecordCreatedArgs, RecordDeletedArgs, RecordUpdatedArgs, type ResolvedExecutionPolicyInstance, type Resolver, ResolverExecutedArgs, ResolverExecutedTrigger, type ResolverExternalConfig, type ResolverServiceConfig, type ResolverServiceInput, type RetryPolicy, type SAML, type SCIMAttribute, type SCIMAttributeMapping, type SCIMAttributeType, type SCIMAuthorization, type SCIMConfig, type SCIMResource, ScheduleArgs, ScheduleTrigger, type SecretsConfig, type StaticWebsiteConfig, type TailorAnyDBField, type TailorAnyDBType, type TailorDBField, type TailorDBInstance, TailorDBTrigger, type TailorDBType, type TailorTypeGqlPermission, type TailorTypePermission, type TenantProvider as TenantProviderConfig, Trigger, type UserAttributeKey, type UserAttributeListKey, type UserAttributeMap, type UsernameFieldKey, type ValueOperand, WORKFLOW_TEST_ENV_KEY, WaitPointInstance, WebhookOperation, Workflow, WorkflowConfig, WorkflowJob, WorkflowJobContext, WorkflowOperation, type WorkflowServiceConfig, type WorkflowServiceInput, authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineIdp, defineSecretManager, defineStaticWebSite, defineWaitPoint, defineWaitPoints, defineWorkflowExecutionPolicies, defineWorkflowExecutionPolicy, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };
+export { type AIGatewayConfig, AuthAccessTokenArgs, AuthAccessTokenIssuedArgs, AuthAccessTokenRefreshedArgs, AuthAccessTokenRevokedArgs, AuthAccessTokenTrigger, type AuthConfig, type AuthConnectionConfig, type AuthConnectionOAuth2Config, type AuthConnectionTokenResult, type AuthExternalConfig, AuthInvoker, type AuthOwnConfig, type AuthServiceInput, type BeforeLoginClaims, type BeforeLoginHookArgs, type BuiltinIdP, type ConcurrencyPolicy, type DefinedAuth, type ExecutionPolicyConcurrency, type ExecutionPolicyDefInput, type ExecutionPolicyExactInstance, type ExecutionPolicyGroupOptions, type ExecutionPolicyInstance, type ExecutionPolicyWildcardInstance, type ExecutorServiceConfig, type ExecutorServiceInput, type FederatedIdentity, type FederatedIdentityClaims, type FederatedIdentityProvider, FunctionOperation, GqlOperation, HttpAdapter, HttpAdapterGraphQLQuery, HttpAdapterGraphQLRequest, HttpAdapterGraphQLResponse, HttpAdapterInput, HttpAdapterInputFn, HttpAdapterOutputFn, HttpAdapterRequest, HttpAdapterResponse, HttpAdapterTypedDocumentNode, type IDToken, type IdPConfig, type IdPEmailConfig, type IdPExternalConfig, type IdPGqlOperations, type IdPGqlOperationsInput as IdPGqlOperationsConfig, type IdPPermission, type IdPPermissionCondition, type IdProvider as IdProviderConfig, IdpUserArgs, IdpUserCreatedArgs, IdpUserDeletedArgs, IdpUserTrigger, IdpUserUpdatedArgs, IncomingWebhookArgs, IncomingWebhookRequest, IncomingWebhookResponse, IncomingWebhookResponseConfig, IncomingWebhookTrigger, IncomingWebhookTriggerOptions, type OAuth2ClientInput as OAuth2Client, type OAuth2ClientGrantType, type OIDC, Operation, type PermissionCondition, type QueryType, RecordCreatedArgs, RecordDeletedArgs, RecordUpdatedArgs, type ResolvedExecutionPolicyInstance, type Resolver, ResolverExecutedArgs, ResolverExecutedTrigger, type ResolverExternalConfig, type ResolverPermission, type ResolverPermissionCondition, type ResolverPermissionPolicy, type ResolverServiceConfig, type ResolverServiceInput, type RetryPolicy, type SAML, type SCIMAttribute, type SCIMAttributeMapping, type SCIMAttributeType, type SCIMAuthorization, type SCIMConfig, type SCIMResource, ScheduleArgs, ScheduleTrigger, type SecretsConfig, type StaticWebsiteConfig, type TailorAnyDBField, type TailorAnyDBType, type TailorDBField, type TailorDBInstance, TailorDBTrigger, type TailorDBType, type TailorTypeGqlPermission, type TailorTypePermission, type TenantProvider as TenantProviderConfig, Trigger, type UserAttributeKey, type UserAttributeListKey, type UserAttributeMap, type UsernameFieldKey, type ValueOperand, WORKFLOW_TEST_ENV_KEY, WaitPointInstance, WebhookOperation, Workflow, WorkflowConfig, WorkflowJob, WorkflowJobContext, WorkflowOperation, type WorkflowServiceConfig, type WorkflowServiceInput, authAccessTokenIssuedTrigger, authAccessTokenRefreshedTrigger, authAccessTokenRevokedTrigger, authAccessTokenTrigger, createExecutor, createHttpAdapter, createResolver, createWorkflow, createWorkflowJob, db, defineAIGateway, defineAuth, defineIdp, defineSecretManager, defineStaticWebSite, defineWaitPoint, defineWaitPoints, defineWorkflowExecutionPolicies, defineWorkflowExecutionPolicy, idpUserCreatedTrigger, idpUserDeletedTrigger, idpUserTrigger, idpUserUpdatedTrigger, incomingWebhookTrigger, recordCreatedTrigger, recordDeletedTrigger, recordTrigger, recordUpdatedTrigger, resolverExecutedTrigger, scheduleTrigger, unsafeAllowAllGqlPermission, unsafeAllowAllIdPPermission, unsafeAllowAllTypePermission };

package/dist/configure/services/resolver/index.d.mts

@@ -1,5 +1,6 @@
 import { Resolver } from "../../../types/resolver.generated.mjs";
 import { ResolverExternalConfig, ResolverServiceConfig, ResolverServiceInput } from "../../config/types.mjs";
+import { ResolverPermission, ResolverPermissionCondition, ResolverPermissionPolicy } from "./permission.mjs";
 import { createResolver } from "./resolver.mjs";
 import { QueryType } from "./types.mjs";
-export { type QueryType, type Resolver, type ResolverExternalConfig, type ResolverServiceConfig, type ResolverServiceInput, createResolver };
+export { type QueryType, type Resolver, type ResolverExternalConfig, type ResolverPermission, type ResolverPermissionCondition, type ResolverPermissionPolicy, type ResolverServiceConfig, type ResolverServiceInput, createResolver };

package/dist/configure/services/resolver/permission.d.mts

@@ -0,0 +1,64 @@
+import { InferredAttributeMap } from "../../../runtime/types.mjs";
+import { UserBooleanOperand, UserStringOperand } from "../../types/permission-operand.types.mjs";
+//#region src/configure/services/resolver/permission.d.ts
+type EqualityOperator = "=" | "!=";
+type StringEqualityCondition<User extends object> = readonly [UserStringOperand<User>, EqualityOperator, string] | readonly [string, EqualityOperator, UserStringOperand<User>];
+type BooleanEqualityCondition<User extends object> = readonly [UserBooleanOperand<User>, EqualityOperator, boolean] | readonly [boolean, EqualityOperator, UserBooleanOperand<User>];
+/**
+ * A single condition for {@link ResolverPermission}.
+ *
+ * Only `user` operands are supported (unlike TailorDB's `record`/`newRecord`/
+ * `oldRecord` operands) — a resolver has no associated record to compare
+ * against. Only equality (`=`/`!=`) is supported for now.
+ *
+ * The User type is extended by `tailor.d.ts`, which is automatically generated
+ * when running `tailor-sdk generate`. Attributes enabled in the config file's
+ * `auth.userProfile.attributes` (or `auth.machineUserAttributes` when
+ * `userProfile` is omitted) become available as types.
+ */
+type ResolverPermissionCondition<User extends object = InferredAttributeMap> = StringEqualityCondition<User> | BooleanEqualityCondition<User>;
+/**
+ * A single access policy, in the same style as TailorDB's `.permission()`
+ * policies.
+ */
+type ResolverPermissionPolicy<User extends object = InferredAttributeMap> = {
+  conditions: ResolverPermissionCondition<User> | readonly ResolverPermissionCondition<User>[];
+  /** Whether matching callers are granted (`true`) or denied (`false`) access. */
+  permit: boolean;
+  description?: string;
+};
+/**
+ * Access requirement for a resolver, evaluated against the original caller
+ * (`context.user`) before `body` runs — unaffected by `authInvoker`.
+ *
+ * At least one `permit: true` policy is required: a caller is granted only by
+ * a matching `permit: true` policy (deny by default), and a matching
+ * `permit: false` policy always overrides that grant, even when another
+ * policy would otherwise allow the same caller — use it to carve out an
+ * explicit exception from a broader grant. A policy array with only
+ * `permit: false` policies is rejected, since none of its conditions apply to
+ * a caller presenting no user attributes at all (e.g. one who simply doesn't
+ * authenticate), so it wouldn't actually keep anyone out. `"allowAnonymous"`
+ * explicitly documents that anonymous callers are allowed.
+ * @example
+ * const permission: ResolverPermission = [
+ *   { conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true },
+ * ];
+ * @example
+ * // Allow machine-user callers unconditionally, gate regular users behind a role
+ * const permission: ResolverPermission = [
+ *   { conditions: [[{ user: "isServiceAccount" }, "=", true]], permit: true },
+ *   { conditions: [[{ user: "role" }, "=", "ADMIN"]], permit: true },
+ * ];
+ * @example
+ * // Exception: allow logged-in users broadly, but reject a banned role
+ * const permission: ResolverPermission = [
+ *   { conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true },
+ *   { conditions: [[{ user: "role" }, "=", "BANNED"]], permit: false },
+ * ];
+ * @example
+ * const permission: ResolverPermission = "allowAnonymous";
+ */
+type ResolverPermission<User extends object = InferredAttributeMap> = readonly ResolverPermissionPolicy<User>[] | "allowAnonymous";
+//#endregion
+export { ResolverPermission, ResolverPermissionCondition, ResolverPermissionPolicy };

package/dist/configure/services/resolver/resolver.d.mts

@@ -4,6 +4,7 @@ import { ResolverInput } from "../../../types/resolver.generated.mjs";
 import { TailorAnyField, TailorField } from "../../types/type.mjs";
 import { MachineUserName } from "../../types/machine-user.mjs";
 import { AuthInvoker } from "../auth/index.mjs";
+import { ResolverPermission } from "./permission.mjs";
 //#region src/configure/services/resolver/resolver.d.ts
 type Context<Input extends Record<string, TailorAnyField> | undefined> = {
   input: Input extends Record<string, TailorAnyField> ? InferFieldsOutput<Input> : never;
@@ -21,11 +22,12 @@ type NormalizedOutput<Output extends TailorAnyField | Record<string, TailorAnyFi
   type: "nested";
   array: false;
 }, InferFieldsOutput<Extract<Output, Record<string, TailorAnyField>>>>;
-type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Output extends TailorAnyField | Record<string, TailorAnyField>> = Omit<ResolverInput, "input" | "output" | "body" | "authInvoker"> & Readonly<{
+type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Output extends TailorAnyField | Record<string, TailorAnyField>> = Omit<ResolverInput, "input" | "output" | "body" | "authInvoker" | "permission"> & Readonly<{
   input?: Input;
   output: NormalizedOutput<Output>;
   body: (context: Context<Input>) => OutputType<Output> | Promise<OutputType<Output>>;
   authInvoker?: AuthInvoker<string> | MachineUserName;
+  permission?: ResolverPermission;
 }>;
 /**
  * Create a resolver definition for the Tailor SDK.
@@ -41,6 +43,14 @@ type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Ou
  * If not specified, this is automatically set to true when an executor uses this resolver
  * with `resolverExecutedTrigger`. If explicitly set to false while an executor uses this
  * resolver, an error will be thrown during apply.
+ *
+ * `permission` declares the resolver's access requirement, checked against `context.user` (the
+ * original caller, unaffected by `authInvoker`) before `body` runs. Omitted (default):
+ * unchanged, anonymous callers can reach the resolver. `"allowAnonymous"`: explicitly documents
+ * that anonymous callers are allowed. An array of `{ conditions, permit }` policies (in the same
+ * style as TailorDB's `.permission()`) rejects non-matching callers: at least one `permit: true`
+ * policy is required (denied unless it matches), and a matching `permit: false` policy always
+ * overrides that grant.
  * @template Input
  * @template Output
  * @param config - Resolver configuration
@@ -51,6 +61,7 @@ type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Ou
  * export default createResolver({
  *   name: "getUser",
  *   operation: "query",
+ *   permission: [{ conditions: [[{ user: "_loggedIn" }, "=", true]], permit: true }],
  *   input: {
  *     id: t.string(),
  *   },
@@ -65,11 +76,12 @@ type ResolverReturn<Input extends Record<string, TailorAnyField> | undefined, Ou
  *   }),
  * });
  */
-declare function createResolver<Input extends Record<string, TailorAnyField> | undefined = undefined, Output extends TailorAnyField | Record<string, TailorAnyField> = TailorAnyField>(config: Omit<ResolverInput, "input" | "output" | "body" | "authInvoker"> & Readonly<{
+declare function createResolver<Input extends Record<string, TailorAnyField> | undefined = undefined, Output extends TailorAnyField | Record<string, TailorAnyField> = TailorAnyField>(config: Omit<ResolverInput, "input" | "output" | "body" | "authInvoker" | "permission"> & Readonly<{
   input?: Input;
   output: Output;
   body: (context: Context<Input>) => OutputType<Output> | Promise<OutputType<Output>>;
   authInvoker?: AuthInvoker<string> | MachineUserName;
+  permission?: ResolverPermission;
 }>): ResolverReturn<Input, Output>;
 type ResolverConfig = ReturnType<typeof createResolver<any, any>>;
 //#endregion

package/dist/configure/services/tailordb/permission.d.mts

@@ -1,4 +1,5 @@
 import { InferredAttributeMap } from "../../../runtime/types.mjs";
+import { UserBooleanArrayOperand, UserBooleanOperand, UserStringArrayOperand, UserStringOperand } from "../../types/permission-operand.types.mjs";
 //#region src/configure/services/tailordb/permission.d.ts
 /**
  * Record-level permission configuration for a TailorDB type.
@@ -47,22 +48,6 @@ type GqlPermissionAction = "read" | "create" | "update" | "delete" | "aggregate"
 type EqualityOperator = "=" | "!=";
 type ContainsOperator = "in" | "not in";
 type HasAnyOperator = "hasAny" | "not hasAny";
-type StringFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string ? K : never; }[keyof User];
-type StringArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends string[] ? K : never; }[keyof User];
-type BooleanFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean ? K : never; }[keyof User];
-type BooleanArrayFieldKeys<User extends object> = { [K in keyof User]: User[K] extends boolean[] ? K : never; }[keyof User];
-type UserStringOperand<User extends object = InferredAttributeMap> = {
-  user: StringFieldKeys<User> | "id";
-};
-type UserStringArrayOperand<User extends object = InferredAttributeMap> = {
-  user: StringArrayFieldKeys<User>;
-};
-type UserBooleanOperand<User extends object = InferredAttributeMap> = {
-  user: BooleanFieldKeys<User> | "_loggedIn";
-};
-type UserBooleanArrayOperand<User extends object = InferredAttributeMap> = {
-  user: BooleanArrayFieldKeys<User>;
-};
 type RecordOperand<Type extends object, Update extends boolean = false> = Update extends true ? {
   oldRecord: (keyof Type & string) | "id";
 } | {

package/dist/configure/types/permission-operand.types.d.mts

@@ -0,0 +1,20 @@
+import { InferredAttributeMap } from "../../runtime/types.mjs";
+//#region src/configure/types/permission-operand.types.d.ts
+type StringFieldKeys<User extends object> = { [K in keyof User]: NonNullable<User[K]> extends string ? K : never; }[keyof User];
+type StringArrayFieldKeys<User extends object> = { [K in keyof User]: NonNullable<User[K]> extends string[] ? K : never; }[keyof User];
+type BooleanFieldKeys<User extends object> = { [K in keyof User]: NonNullable<User[K]> extends boolean ? K : never; }[keyof User];
+type BooleanArrayFieldKeys<User extends object> = { [K in keyof User]: NonNullable<User[K]> extends boolean[] ? K : never; }[keyof User];
+type UserStringOperand<User extends object = InferredAttributeMap> = {
+  user: StringFieldKeys<User> | "id";
+};
+type UserStringArrayOperand<User extends object = InferredAttributeMap> = {
+  user: StringArrayFieldKeys<User>;
+};
+type UserBooleanOperand<User extends object = InferredAttributeMap> = {
+  user: BooleanFieldKeys<User> | "_loggedIn";
+};
+type UserBooleanArrayOperand<User extends object = InferredAttributeMap> = {
+  user: BooleanArrayFieldKeys<User>;
+};
+//#endregion
+export { BooleanArrayFieldKeys, BooleanFieldKeys, StringArrayFieldKeys, StringFieldKeys, UserBooleanArrayOperand, UserBooleanOperand, UserStringArrayOperand, UserStringOperand };

package/dist/{crashreport-BNWUM6Kf.mjs → crashreport-DMYuHnBN.mjs}

@@ -1,4 +1,4 @@
-import { n as logger } from "./logger-BwS4ppwO.mjs";
+import { n as logger } from "./logger-CXQq9YIp.mjs";
 import { t as readPackageJson } from "./package-json-8b0O9TlX.mjs";
 import { n as userAgentFromVersion } from "./user-agent-DX2Jnw0-.mjs";
 import { r as writeSecretFile, t as ensureSecretDir } from "./secret-file-DBqZhjFQ.mjs";
@@ -410,4 +410,4 @@ function initCrashReporting() {
 
 //#endregion
 export { JSON_FOOTER_MARKER as a, CRASH_LOG_EXTENSION as i, reportCrash as n, parseCrashReportConfig as o, sendCrashReport as r, initCrashReporting as t };
-//# sourceMappingURL=crashreport-BNWUM6Kf.mjs.map
+//# sourceMappingURL=crashreport-DMYuHnBN.mjs.map

package/dist/{crashreport-BNWUM6Kf.mjs.map → crashreport-DMYuHnBN.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"crashreport-BNWUM6Kf.mjs","names":[],"sources":["../src/cli/crashreport/config.ts","../src/cli/crashreport/writer.ts","../src/cli/crashreport/sender.ts","../src/cli/crashreport/sanitize.ts","../src/cli/crashreport/report.ts","../src/cli/crashreport/index.ts"],"sourcesContent":["import * as path from \"pathe\";\nimport { isCI } from \"std-env\";\nimport { xdgConfig } from \"xdg-basedir\";\n\nexport interface CrashReportConfig {\n  readonly localEnabled: boolean;\n  readonly remoteEnabled: boolean;\n  readonly localDir: string;\n}\n\n/**\n * Parse crash report configuration from environment variables.\n * Local crash log writing is enabled by default (opt-out via TAILOR_CRASH_REPORTS_LOCAL=off).\n * Remote sending is disabled by default (opt-in via TAILOR_CRASH_REPORTS_REMOTE=on).\n * Both are auto-disabled in CI environments.\n * @returns Crash report configuration\n */\nexport function parseCrashReportConfig(): CrashReportConfig {\n  if (isCI) {\n    return {\n      localEnabled: false,\n      remoteEnabled: false,\n      localDir: \"\",\n    };\n  }\n\n  const localEnabled = (process.env.TAILOR_CRASH_REPORTS_LOCAL ?? \"on\").toLowerCase() !== \"off\";\n  const remoteEnabled = (process.env.TAILOR_CRASH_REPORTS_REMOTE ?? \"off\").toLowerCase() === \"on\";\n  const localDir = xdgConfig ? path.join(xdgConfig, \"tailor-platform\", \"crash-reports\") : \"\";\n\n  return {\n    localEnabled: localEnabled && localDir !== \"\",\n    remoteEnabled,\n    localDir,\n  };\n}\n","import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\nimport { ensureSecretDir, writeSecretFile } from \"#/cli/shared/secret-file\";\nimport type { CrashReport } from \"./report\";\n\nconst MAX_CRASH_FILES = 10;\n\n/** Marker line that separates human-readable content from the JSON footer. */\nexport const JSON_FOOTER_MARKER = \"--- JSON ---\";\n\n/** File extension for crash log files. */\nexport const CRASH_LOG_EXTENSION = \".crash.log\";\n\n/**\n * Format a CrashReport as human-readable text for local crash log files.\n * @param report - Crash report to format\n * @returns Formatted text content\n */\nexport function formatCrashReport(report: CrashReport): string {\n  const lines = [\n    `Crash Report: ${report.id}`,\n    `Timestamp: ${report.timestamp}`,\n    `Error Type: ${report.errorType}`,\n    \"\",\n    \"--- Environment ---\",\n    `SDK Version: ${report.sdkVersion}`,\n    `Node Version: ${report.nodeVersion}`,\n    `OS: ${report.osPlatform} ${report.osRelease}`,\n    `Arch: ${report.arch}`,\n    \"\",\n    \"--- Command ---\",\n    `Command: ${report.command}`,\n    `Arguments: ${JSON.stringify(report.argv)}`,\n    \"\",\n    \"--- Error ---\",\n    `Name: ${report.errorName}`,\n    `Message: ${report.errorMessage}`,\n    \"\",\n    \"--- Stack Trace ---\",\n    report.stackTrace || \"(no stack trace available)\",\n    \"\",\n    JSON_FOOTER_MARKER,\n    JSON.stringify(report),\n    \"\",\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * Generate a filename for a crash log file.\n * Format: {timestamp}-{shortId}.crash.log\n * @param report - Crash report to generate filename for\n * @returns Filename string\n */\nfunction generateFilename(report: CrashReport): string {\n  const safeTimestamp = report.timestamp.replace(/[:.]/g, \"-\");\n  const shortId = report.id.slice(0, 8);\n  return `${safeTimestamp}-${shortId}${CRASH_LOG_EXTENSION}`;\n}\n\n/**\n * Remove old crash log files, keeping only the most recent ones.\n * @param dir - Crash log directory\n */\nfunction cleanupOldFiles(dir: string): void {\n  try {\n    const files = fs\n      .readdirSync(dir)\n      .filter((f) => f.endsWith(CRASH_LOG_EXTENSION))\n      .toSorted()\n      .toReversed();\n\n    for (const file of files.slice(MAX_CRASH_FILES)) {\n      fs.unlinkSync(path.join(dir, file));\n    }\n  } catch {\n    // Best-effort cleanup, ignore errors\n  }\n}\n\n/**\n * Write a crash report to a local file.\n * Creates the directory if it doesn't exist. Keeps only the last 10 crash files.\n * Never throws - returns the file path on success or undefined on failure.\n * @param report - Crash report to write\n * @param dir - Directory to write the crash log file to\n * @returns File path on success, undefined on failure\n */\nexport function writeCrashReport(report: CrashReport, dir: string): string | undefined {\n  try {\n    ensureSecretDir(dir);\n\n    const filename = generateFilename(report);\n    const filePath = path.join(dir, filename);\n    const content = formatCrashReport(report);\n\n    writeSecretFile(filePath, content);\n    cleanupOldFiles(dir);\n\n    return filePath;\n  } catch {\n    return undefined;\n  }\n}\n","import type { CrashReport } from \"./report\";\n\nconst SEND_TIMEOUT_MS = 5000;\nconst PRODUCTION_ENDPOINT = \"https://sdk-error-tracking-926vh9t4cl.erp.dev/query\";\n\nconst SUBMIT_MUTATION = `\nmutation SubmitCrashReport(\n  $id: String!\n  $timestamp: String!\n  $sdkVersion: String!\n  $nodeVersion: String!\n  $osPlatform: String!\n  $osRelease: String!\n  $arch: String!\n  $command: String!\n  $argv: [String]\n  $errorName: String!\n  $errorMessage: String!\n  $stackTrace: String\n  $errorType: String!\n  $userId: String\n  $userEmail: String\n) {\n  submitCrashReport(\n    id: $id\n    timestamp: $timestamp\n    sdkVersion: $sdkVersion\n    nodeVersion: $nodeVersion\n    osPlatform: $osPlatform\n    osRelease: $osRelease\n    arch: $arch\n    command: $command\n    argv: $argv\n    errorName: $errorName\n    errorMessage: $errorMessage\n    stackTrace: $stackTrace\n    errorType: $errorType\n    userId: $userId\n    userEmail: $userEmail\n  ) {\n    success\n  }\n}`;\n\n/**\n * Send a crash report to the remote endpoint via GraphQL mutation.\n * Best-effort: never throws, returns boolean success.\n * @param report - Crash report to send\n * @param ua - User-Agent header value\n * @returns true if the request succeeded, false otherwise\n */\nexport async function sendCrashReport(report: CrashReport, ua: string): Promise<boolean> {\n  try {\n    const endpoint = process.env.TAILOR_CRASH_REPORT_ENDPOINT || PRODUCTION_ENDPOINT;\n    const response = await fetch(endpoint, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": ua,\n      },\n      body: JSON.stringify({\n        query: SUBMIT_MUTATION,\n        variables: report,\n      }),\n      signal: AbortSignal.timeout(SEND_TIMEOUT_MS),\n    });\n\n    if (!response.ok) return false;\n\n    const data = (await response.json()) as {\n      errors?: unknown[];\n      data?: { submitCrashReport: { success: boolean } };\n    };\n    if (data.errors?.length) return false;\n    return data.data?.submitCrashReport.success === true;\n  } catch {\n    return false;\n  }\n}\n","import * as os from \"node:os\";\n\nconst HOME_DIR = os.homedir();\n\n// Patterns for sanitization (global variants for use with .replace())\nconst UUID_PATTERN = /\\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\b/gi;\nconst LONG_HEX_PATTERN = /\\b[0-9a-fA-F]{32,}\\b/g;\nconst EMAIL_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/g;\nconst ABSOLUTE_PATH_PATTERN = /(?:\\/(?:[\\w.@\\- ]+\\/)+[\\w.@\\- ]+)/g;\nconst WINDOWS_PATH_PATTERN = /(?:[A-Za-z]:\\\\(?:[\\w.@\\- ]+\\\\)+[\\w.@\\- ]+)/g;\nconst URL_QUERY_PATTERN = /[?&][^?\\s]*/g;\n\n// Non-global variants for single-match .test() calls (avoids lastIndex state issues)\nconst EMAIL_TEST_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/;\nconst WINDOWS_DRIVE_TEST_PATTERN = /^[A-Za-z]:\\\\/;\n\n// SDK package path marker for relative paths\nconst SDK_PACKAGE_MARKER = \"packages/sdk/\";\n\nfunction lastSegment(filePath: string, separator: string): string {\n  return filePath.split(separator).pop() ?? filePath;\n}\n\n/**\n * Sanitize a stack trace by replacing absolute paths with relative SDK paths.\n * External paths are replaced with `<external>/filename.ext`.\n * Home directories are replaced with `~/<redacted>/`.\n * @param stack - Raw stack trace string\n * @returns Sanitized stack trace\n */\nexport function sanitizeStackTrace(stack: string): string {\n  // V8 stack traces start with \"ErrorType: message\\n    at ...\".\n  // The error message may span multiple lines before the first \"    at \" frame.\n  // Apply message sanitization to all message lines so secrets embedded in\n  // multiline error messages are redacted consistently with errorMessage.\n  const firstFrameIndex = stack.search(/\\n\\s+at /);\n  let result: string;\n  if (firstFrameIndex !== -1) {\n    result = sanitizeMessage(stack.slice(0, firstFrameIndex)) + stack.slice(firstFrameIndex);\n  } else {\n    result = sanitizeMessage(stack);\n  }\n\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => {\n    const sdkIndex = match.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return match.slice(sdkIndex);\n    }\n\n    if (match.startsWith(HOME_DIR)) {\n      return `~/<redacted>/${lastSegment(match, \"/\")}`;\n    }\n\n    return `<external>/${lastSegment(match, \"/\")}`;\n  });\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => {\n    const normalized = match.replace(/\\\\/g, \"/\");\n    const sdkIndex = normalized.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return normalized.slice(sdkIndex);\n    }\n    return `<external>/${lastSegment(match, \"\\\\\")}`;\n  });\n  return result;\n}\n\n/**\n * Sanitize an error message by redacting sensitive information.\n * Redacts: UUIDs, long hex tokens, email addresses, absolute paths, URL query strings.\n * @param message - Raw error message\n * @returns Sanitized error message\n */\nexport function sanitizeMessage(message: string): string {\n  let result = message;\n  // Strip serialized request/response bodies that may contain secrets\n  result = result.replace(/\\nRequest:\\s*[\\s\\S]*$/, \"\\nRequest: <redacted>\");\n  result = result.replace(UUID_PATTERN, \"<uuid>\");\n  result = result.replace(LONG_HEX_PATTERN, \"<redacted>\");\n  result = result.replace(EMAIL_PATTERN, \"<email>\");\n  result = result.replace(URL_QUERY_PATTERN, \"?<redacted>\");\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"/\")}`);\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"\\\\\")}`);\n\n  return result;\n}\n\n/**\n * Sanitize process.argv by keeping command/subcommand names and redacting\n * values of sensitive flags.\n * @param argv - Raw process.argv array\n * @returns Sanitized argv array\n */\nexport function sanitizeArgv(argv: string[]): string[] {\n  const result: string[] = [];\n  let redactNext = false;\n\n  for (const arg of argv) {\n    if (redactNext) {\n      // If the next token is itself a flag, treat it as a new flag rather\n      // than consuming it as the previous flag's value. This avoids leaking\n      // the *next* flag's value (e.g., `--verbose --workspace-id secret`\n      // would otherwise expose `secret`).\n      if (!arg.startsWith(\"-\")) {\n        result.push(\"<redacted>\");\n        redactNext = false;\n        continue;\n      }\n      redactNext = false;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      // --flag=value: keep flag name, redact value\n      const eqIndex = arg.indexOf(\"=\");\n      if (eqIndex !== -1) {\n        result.push(`${arg.slice(0, eqIndex)}=<redacted>`);\n        continue;\n      }\n\n      // --flag / -f: keep flag name, redact next arg as its value\n      result.push(arg);\n      redactNext = true;\n      continue;\n    }\n\n    // Redact absolute paths\n    if (arg.startsWith(\"/\") && arg.includes(\"/\", 1)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact Windows-style absolute paths\n    if (WINDOWS_DRIVE_TEST_PATTERN.test(arg)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact email addresses\n    if (EMAIL_TEST_PATTERN.test(arg)) {\n      result.push(\"<email>\");\n      continue;\n    }\n\n    result.push(arg);\n  }\n\n  return result;\n}\n","import * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { parseYAML } from \"confbox\";\nimport * as path from \"pathe\";\nimport { xdgConfig } from \"xdg-basedir\";\nimport { sanitizeArgv, sanitizeMessage, sanitizeStackTrace } from \"./sanitize\";\n\nexport type ErrorType = \"uncaughtException\" | \"unhandledRejection\" | \"handledError\";\n\nexport interface CrashReport {\n  id: string;\n  timestamp: string;\n  sdkVersion: string;\n  nodeVersion: string;\n  osPlatform: string;\n  osRelease: string;\n  arch: string;\n  command: string;\n  argv: string[];\n  errorName: string;\n  errorMessage: string;\n  stackTrace: string;\n  errorType: ErrorType;\n  userId: string | null;\n  userEmail: string | null;\n}\n\ninterface BuildCrashReportOptions {\n  error: unknown;\n  sdkVersion: string;\n  errorType: ErrorType;\n}\n\n// Maximum subcommand depth to keep (e.g., \"tailordb migrate generate\" = 3 tokens).\n// Positional arguments beyond this are potentially sensitive user input.\n// Accepted trade-off: plain-text positional args that don't match known patterns\n// (UUIDs, hex tokens, emails, paths) pass through to `command` and `argv`.\n// Full redaction would require embedding the CLI command tree here, which is fragile.\nconst MAX_COMMAND_TOKENS = 3;\n\n/**\n * Parse the command name from process.argv.\n * Extracts up to MAX_COMMAND_TOKENS non-flag arguments after the script name.\n * @returns Parsed command string\n */\nfunction parseCommand(): string {\n  const args = process.argv.slice(2);\n  const commandParts: string[] = [];\n  for (const arg of args) {\n    if (arg.startsWith(\"-\") || commandParts.length >= MAX_COMMAND_TOKENS) break;\n    commandParts.push(arg);\n  }\n  return commandParts.join(\" \") || \"<unknown>\";\n}\n\n/**\n * Build a CrashReport data structure from an error and context.\n * All sensitive data is sanitized before inclusion.\n * @param options - Error, SDK version, and crash type\n * @returns Sanitized crash report\n */\nexport function buildCrashReport(options: BuildCrashReportOptions): CrashReport {\n  const { error, sdkVersion, errorType } = options;\n\n  const isError = error instanceof Error;\n  const rawMessage = isError ? error.message : String(error);\n  const rawStack = isError && error.stack ? error.stack : \"\";\n  const errorName = isError ? error.name : \"UnknownError\";\n\n  const currentUser = readCurrentUser();\n\n  return {\n    id: crypto.randomUUID(),\n    timestamp: new Date().toISOString(),\n    sdkVersion,\n    nodeVersion: process.version,\n    osPlatform: process.platform,\n    osRelease: os.release(),\n    arch: process.arch,\n    command: sanitizeMessage(parseCommand()),\n    argv: sanitizeArgv(process.argv),\n    errorName,\n    errorMessage: sanitizeMessage(rawMessage),\n    stackTrace: sanitizeStackTrace(rawStack),\n    errorType,\n    userId: currentUser,\n    userEmail: currentUser,\n  };\n}\n\n/**\n * Read current_user from Tailor Platform config without side effects.\n * Unlike readPlatformConfig(), this never triggers migration or logs warnings.\n * @returns The current user email, or null if unavailable\n */\nfunction readCurrentUser(): string | null {\n  try {\n    if (!xdgConfig) return null;\n    const configPath = path.join(xdgConfig, \"tailor-platform\", \"config.yaml\");\n    if (!fs.existsSync(configPath)) return null;\n    const raw = parseYAML(fs.readFileSync(configPath, \"utf-8\")) as { current_user?: string | null };\n    // parseYAML returns null for empty documents\n    // oxlint-disable-next-line typescript/no-unnecessary-condition\n    return raw?.current_user ?? null;\n  } catch {\n    return null;\n  }\n}\n","import { logger } from \"#/cli/shared/logger\";\nimport { readPackageJson } from \"#/cli/shared/package-json\";\nimport { userAgentFromVersion } from \"#/cli/shared/user-agent\";\nimport { parseCrashReportConfig } from \"./config\";\nimport { buildCrashReport, type ErrorType } from \"./report\";\nimport { sendCrashReport } from \"./sender\";\nimport { writeCrashReport } from \"./writer\";\n\n/**\n * Report an unexpected crash. Writes a local crash log file and optionally\n * sends the report to a remote endpoint. Displays a user-facing message\n * with the crash log path and a command to submit the report.\n *\n * Never throws - all errors are silently caught.\n * @param error - The error that caused the crash\n * @param errorType - How the error was caught\n */\nexport async function reportCrash(error: unknown, errorType: ErrorType): Promise<void> {\n  try {\n    const config = parseCrashReportConfig();\n    if (!config.localEnabled && !config.remoteEnabled) return;\n\n    const packageJson = await readPackageJson();\n    const sdkVersion = packageJson.version ?? \"unknown\";\n\n    const report = buildCrashReport({ error, sdkVersion, errorType });\n\n    if (config.localEnabled) {\n      const filePath = writeCrashReport(report, config.localDir);\n      if (filePath) {\n        logger.log(\n          [\n            \"\",\n            \"An unexpected error occurred. A crash report has been saved to:\",\n            `  ${filePath}`,\n            \"\",\n            \"To submit this report:\",\n            `  tailor-sdk crashreport send --file \"${filePath}\"`,\n          ].join(\"\\n\"),\n        );\n      }\n    }\n\n    if (config.remoteEnabled) {\n      const ua = userAgentFromVersion(sdkVersion);\n      await sendCrashReport(report, ua);\n    }\n  } catch {\n    // Never throw from crash reporting\n  }\n}\n\n/**\n * Register global uncaughtException and unhandledRejection handlers.\n * These catch errors outside the normal cleanup flow (e.g., during\n * argument parsing). Should be called once at CLI startup before runMain.\n */\nexport function initCrashReporting(): void {\n  const config = parseCrashReportConfig();\n  if (!config.localEnabled && !config.remoteEnabled) return;\n\n  const handleFatal = (error: unknown, errorType: ErrorType) => {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error(message);\n    void reportCrash(error, errorType).finally(() => {\n      process.exit(1);\n    });\n  };\n\n  process.on(\"uncaughtException\", (error) => handleFatal(error, \"uncaughtException\"));\n  process.on(\"unhandledRejection\", (reason) => handleFatal(reason, \"unhandledRejection\"));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,yBAA4C;CAC1D,IAAI,MACF,OAAO;EACL,cAAc;EACd,eAAe;EACf,UAAU;CACZ;CAGF,MAAM,gBAAgB,QAAQ,IAAI,8BAA8B,KAAI,CAAE,YAAY,MAAM;CACxF,MAAM,iBAAiB,QAAQ,IAAI,+BAA+B,MAAK,CAAE,YAAY,MAAM;CAC3F,MAAM,WAAW,YAAY,KAAK,KAAK,WAAW,mBAAmB,eAAe,IAAI;CAExF,OAAO;EACL,cAAc,gBAAgB,aAAa;EAC3C;EACA;CACF;AACF;;;;AC9BA,MAAM,kBAAkB;;AAGxB,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;;;;;AAOnC,SAAgB,kBAAkB,QAA6B;CA2B7D,OAAO;EAzBL,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,eAAe,OAAO;EACtB;EACA;EACA,gBAAgB,OAAO;EACvB,iBAAiB,OAAO;EACxB,OAAO,OAAO,WAAW,GAAG,OAAO;EACnC,SAAS,OAAO;EAChB;EACA;EACA,YAAY,OAAO;EACnB,cAAc,KAAK,UAAU,OAAO,IAAI;EACxC;EACA;EACA,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB;EACA;EACA,OAAO,cAAc;EACrB;EACA;EACA,KAAK,UAAU,MAAM;EACrB;CAES,CAAC,CAAC,KAAK,IAAI;AACxB;;;;;;;AAQA,SAAS,iBAAiB,QAA6B;CAGrD,OAAO,GAFe,OAAO,UAAU,QAAQ,SAAS,GAElC,EAAE,GADR,OAAO,GAAG,MAAM,GAAG,CACF,IAAI;AACvC;;;;;AAMA,SAAS,gBAAgB,KAAmB;CAC1C,IAAI;EACF,MAAM,QAAQ,GACX,YAAY,GAAG,CAAC,CAChB,QAAQ,MAAM,EAAE,SAAS,mBAAmB,CAAC,CAAC,CAC9C,SAAS,CAAC,CACV,WAAW;EAEd,KAAK,MAAM,QAAQ,MAAM,MAAM,eAAe,GAC5C,GAAG,WAAW,KAAK,KAAK,KAAK,IAAI,CAAC;CAEtC,QAAQ,CAER;AACF;;;;;;;;;AAUA,SAAgB,iBAAiB,QAAqB,KAAiC;CACrF,IAAI;EACF,gBAAgB,GAAG;EAEnB,MAAM,WAAW,iBAAiB,MAAM;EACxC,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ;EAGxC,gBAAgB,UAFA,kBAAkB,MAEF,CAAC;EACjC,gBAAgB,GAAG;EAEnB,OAAO;CACT,QAAQ;EACN;CACF;AACF;;;;ACrGA,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAE5B,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CxB,eAAsB,gBAAgB,QAAqB,IAA8B;CACvF,IAAI;EACF,MAAM,WAAW,QAAQ,IAAI,gCAAgC;EAC7D,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,cAAc;GAChB;GACA,MAAM,KAAK,UAAU;IACnB,OAAO;IACP,WAAW;GACb,CAAC;GACD,QAAQ,YAAY,QAAQ,eAAe;EAC7C,CAAC;EAED,IAAI,CAAC,SAAS,IAAI,OAAO;EAEzB,MAAM,OAAQ,MAAM,SAAS,KAAK;EAIlC,IAAI,KAAK,QAAQ,QAAQ,OAAO;EAChC,OAAO,KAAK,MAAM,kBAAkB,YAAY;CAClD,QAAQ;EACN,OAAO;CACT;AACF;;;;AC5EA,MAAM,WAAW,GAAG,QAAQ;AAG5B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAG1B,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAGnC,MAAM,qBAAqB;AAE3B,SAAS,YAAY,UAAkB,WAA2B;CAChE,OAAO,SAAS,MAAM,SAAS,CAAC,CAAC,IAAI,KAAK;AAC5C;;;;;;;;AASA,SAAgB,mBAAmB,OAAuB;CAKxD,MAAM,kBAAkB,MAAM,OAAO,UAAU;CAC/C,IAAI;CACJ,IAAI,oBAAoB,IACtB,SAAS,gBAAgB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,MAAM,MAAM,eAAe;MAEvF,SAAS,gBAAgB,KAAK;CAGhC,SAAS,OAAO,QAAQ,wBAAwB,UAAU;EACxD,MAAM,WAAW,MAAM,QAAQ,kBAAkB;EACjD,IAAI,aAAa,IACf,OAAO,MAAM,MAAM,QAAQ;EAG7B,IAAI,MAAM,WAAW,QAAQ,GAC3B,OAAO,gBAAgB,YAAY,OAAO,GAAG;EAG/C,OAAO,cAAc,YAAY,OAAO,GAAG;CAC7C,CAAC;CACD,SAAS,OAAO,QAAQ,uBAAuB,UAAU;EACvD,MAAM,aAAa,MAAM,QAAQ,OAAO,GAAG;EAC3C,MAAM,WAAW,WAAW,QAAQ,kBAAkB;EACtD,IAAI,aAAa,IACf,OAAO,WAAW,MAAM,QAAQ;EAElC,OAAO,cAAc,YAAY,OAAO,IAAI;CAC9C,CAAC;CACD,OAAO;AACT;;;;;;;AAQA,SAAgB,gBAAgB,SAAyB;CACvD,IAAI,SAAS;CAEb,SAAS,OAAO,QAAQ,yBAAyB,uBAAuB;CACxE,SAAS,OAAO,QAAQ,cAAc,QAAQ;CAC9C,SAAS,OAAO,QAAQ,kBAAkB,YAAY;CACtD,SAAS,OAAO,QAAQ,eAAe,SAAS;CAChD,SAAS,OAAO,QAAQ,mBAAmB,aAAa;CACxD,SAAS,OAAO,QAAQ,wBAAwB,UAAU,UAAU,YAAY,OAAO,GAAG,GAAG;CAC7F,SAAS,OAAO,QAAQ,uBAAuB,UAAU,UAAU,YAAY,OAAO,IAAI,GAAG;CAE7F,OAAO;AACT;;;;;;;AAQA,SAAgB,aAAa,MAA0B;CACrD,MAAM,SAAmB,CAAC;CAC1B,IAAI,aAAa;CAEjB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,YAAY;GAKd,IAAI,CAAC,IAAI,WAAW,GAAG,GAAG;IACxB,OAAO,KAAK,YAAY;IACxB,aAAa;IACb;GACF;GACA,aAAa;EACf;EAEA,IAAI,IAAI,WAAW,GAAG,GAAG;GAEvB,MAAM,UAAU,IAAI,QAAQ,GAAG;GAC/B,IAAI,YAAY,IAAI;IAClB,OAAO,KAAK,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,YAAY;IACjD;GACF;GAGA,OAAO,KAAK,GAAG;GACf,aAAa;GACb;EACF;EAGA,IAAI,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,KAAK,CAAC,GAAG;GAC/C,OAAO,KAAK,QAAQ;GACpB;EACF;EAGA,IAAI,2BAA2B,KAAK,GAAG,GAAG;GACxC,OAAO,KAAK,QAAQ;GACpB;EACF;EAGA,IAAI,mBAAmB,KAAK,GAAG,GAAG;GAChC,OAAO,KAAK,SAAS;GACrB;EACF;EAEA,OAAO,KAAK,GAAG;CACjB;CAEA,OAAO;AACT;;;;AC3GA,MAAM,qBAAqB;;;;;;AAO3B,SAAS,eAAuB;CAC9B,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,MAAM,eAAyB,CAAC;CAChC,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,IAAI,WAAW,GAAG,KAAK,aAAa,UAAU,oBAAoB;EACtE,aAAa,KAAK,GAAG;CACvB;CACA,OAAO,aAAa,KAAK,GAAG,KAAK;AACnC;;;;;;;AAQA,SAAgB,iBAAiB,SAA+C;CAC9E,MAAM,EAAE,OAAO,YAAY,cAAc;CAEzC,MAAM,UAAU,iBAAiB;CACjC,MAAM,aAAa,UAAU,MAAM,UAAU,OAAO,KAAK;CACzD,MAAM,WAAW,WAAW,MAAM,QAAQ,MAAM,QAAQ;CACxD,MAAM,YAAY,UAAU,MAAM,OAAO;CAEzC,MAAM,cAAc,gBAAgB;CAEpC,OAAO;EACL,IAAI,OAAO,WAAW;EACtB,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;EAClC;EACA,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,WAAW,GAAG,QAAQ;EACtB,MAAM,QAAQ;EACd,SAAS,gBAAgB,aAAa,CAAC;EACvC,MAAM,aAAa,QAAQ,IAAI;EAC/B;EACA,cAAc,gBAAgB,UAAU;EACxC,YAAY,mBAAmB,QAAQ;EACvC;EACA,QAAQ;EACR,WAAW;CACb;AACF;;;;;;AAOA,SAAS,kBAAiC;CACxC,IAAI;EACF,IAAI,CAAC,WAAW,OAAO;EACvB,MAAM,aAAa,KAAK,KAAK,WAAW,mBAAmB,aAAa;EACxE,IAAI,CAAC,GAAG,WAAW,UAAU,GAAG,OAAO;EAIvC,OAHY,UAAU,GAAG,aAAa,YAAY,OAAO,CAGhD,CAAC,EAAE,gBAAgB;CAC9B,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;;AC3FA,eAAsB,YAAY,OAAgB,WAAqC;CACrF,IAAI;EACF,MAAM,SAAS,uBAAuB;EACtC,IAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,eAAe;EAGnD,MAAM,cAAa,MADO,gBAAgB,EACZ,CAAC,WAAW;EAE1C,MAAM,SAAS,iBAAiB;GAAE;GAAO;GAAY;EAAU,CAAC;EAEhE,IAAI,OAAO,cAAc;GACvB,MAAM,WAAW,iBAAiB,QAAQ,OAAO,QAAQ;GACzD,IAAI,UACF,OAAO,IACL;IACE;IACA;IACA,KAAK;IACL;IACA;IACA,yCAAyC,SAAS;GACpD,CAAC,CAAC,KAAK,IAAI,CACb;EAEJ;EAEA,IAAI,OAAO,eAET,MAAM,gBAAgB,QADX,qBAAqB,UACD,CAAC;CAEpC,QAAQ,CAER;AACF;;;;;;AAOA,SAAgB,qBAA2B;CACzC,MAAM,SAAS,uBAAuB;CACtC,IAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,eAAe;CAEnD,MAAM,eAAe,OAAgB,cAAyB;EAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO,MAAM,OAAO;EACpB,AAAK,YAAY,OAAO,SAAS,CAAC,CAAC,cAAc;GAC/C,QAAQ,KAAK,CAAC;EAChB,CAAC;CACH;CAEA,QAAQ,GAAG,sBAAsB,UAAU,YAAY,OAAO,mBAAmB,CAAC;CAClF,QAAQ,GAAG,uBAAuB,WAAW,YAAY,QAAQ,oBAAoB,CAAC;AACxF"}
+{"version":3,"file":"crashreport-DMYuHnBN.mjs","names":[],"sources":["../src/cli/crashreport/config.ts","../src/cli/crashreport/writer.ts","../src/cli/crashreport/sender.ts","../src/cli/crashreport/sanitize.ts","../src/cli/crashreport/report.ts","../src/cli/crashreport/index.ts"],"sourcesContent":["import * as path from \"pathe\";\nimport { isCI } from \"std-env\";\nimport { xdgConfig } from \"xdg-basedir\";\n\nexport interface CrashReportConfig {\n  readonly localEnabled: boolean;\n  readonly remoteEnabled: boolean;\n  readonly localDir: string;\n}\n\n/**\n * Parse crash report configuration from environment variables.\n * Local crash log writing is enabled by default (opt-out via TAILOR_CRASH_REPORTS_LOCAL=off).\n * Remote sending is disabled by default (opt-in via TAILOR_CRASH_REPORTS_REMOTE=on).\n * Both are auto-disabled in CI environments.\n * @returns Crash report configuration\n */\nexport function parseCrashReportConfig(): CrashReportConfig {\n  if (isCI) {\n    return {\n      localEnabled: false,\n      remoteEnabled: false,\n      localDir: \"\",\n    };\n  }\n\n  const localEnabled = (process.env.TAILOR_CRASH_REPORTS_LOCAL ?? \"on\").toLowerCase() !== \"off\";\n  const remoteEnabled = (process.env.TAILOR_CRASH_REPORTS_REMOTE ?? \"off\").toLowerCase() === \"on\";\n  const localDir = xdgConfig ? path.join(xdgConfig, \"tailor-platform\", \"crash-reports\") : \"\";\n\n  return {\n    localEnabled: localEnabled && localDir !== \"\",\n    remoteEnabled,\n    localDir,\n  };\n}\n","import * as fs from \"node:fs\";\nimport * as path from \"pathe\";\nimport { ensureSecretDir, writeSecretFile } from \"#/cli/shared/secret-file\";\nimport type { CrashReport } from \"./report\";\n\nconst MAX_CRASH_FILES = 10;\n\n/** Marker line that separates human-readable content from the JSON footer. */\nexport const JSON_FOOTER_MARKER = \"--- JSON ---\";\n\n/** File extension for crash log files. */\nexport const CRASH_LOG_EXTENSION = \".crash.log\";\n\n/**\n * Format a CrashReport as human-readable text for local crash log files.\n * @param report - Crash report to format\n * @returns Formatted text content\n */\nexport function formatCrashReport(report: CrashReport): string {\n  const lines = [\n    `Crash Report: ${report.id}`,\n    `Timestamp: ${report.timestamp}`,\n    `Error Type: ${report.errorType}`,\n    \"\",\n    \"--- Environment ---\",\n    `SDK Version: ${report.sdkVersion}`,\n    `Node Version: ${report.nodeVersion}`,\n    `OS: ${report.osPlatform} ${report.osRelease}`,\n    `Arch: ${report.arch}`,\n    \"\",\n    \"--- Command ---\",\n    `Command: ${report.command}`,\n    `Arguments: ${JSON.stringify(report.argv)}`,\n    \"\",\n    \"--- Error ---\",\n    `Name: ${report.errorName}`,\n    `Message: ${report.errorMessage}`,\n    \"\",\n    \"--- Stack Trace ---\",\n    report.stackTrace || \"(no stack trace available)\",\n    \"\",\n    JSON_FOOTER_MARKER,\n    JSON.stringify(report),\n    \"\",\n  ];\n  return lines.join(\"\\n\");\n}\n\n/**\n * Generate a filename for a crash log file.\n * Format: {timestamp}-{shortId}.crash.log\n * @param report - Crash report to generate filename for\n * @returns Filename string\n */\nfunction generateFilename(report: CrashReport): string {\n  const safeTimestamp = report.timestamp.replace(/[:.]/g, \"-\");\n  const shortId = report.id.slice(0, 8);\n  return `${safeTimestamp}-${shortId}${CRASH_LOG_EXTENSION}`;\n}\n\n/**\n * Remove old crash log files, keeping only the most recent ones.\n * @param dir - Crash log directory\n */\nfunction cleanupOldFiles(dir: string): void {\n  try {\n    const files = fs\n      .readdirSync(dir)\n      .filter((f) => f.endsWith(CRASH_LOG_EXTENSION))\n      .toSorted()\n      .toReversed();\n\n    for (const file of files.slice(MAX_CRASH_FILES)) {\n      fs.unlinkSync(path.join(dir, file));\n    }\n  } catch {\n    // Best-effort cleanup, ignore errors\n  }\n}\n\n/**\n * Write a crash report to a local file.\n * Creates the directory if it doesn't exist. Keeps only the last 10 crash files.\n * Never throws - returns the file path on success or undefined on failure.\n * @param report - Crash report to write\n * @param dir - Directory to write the crash log file to\n * @returns File path on success, undefined on failure\n */\nexport function writeCrashReport(report: CrashReport, dir: string): string | undefined {\n  try {\n    ensureSecretDir(dir);\n\n    const filename = generateFilename(report);\n    const filePath = path.join(dir, filename);\n    const content = formatCrashReport(report);\n\n    writeSecretFile(filePath, content);\n    cleanupOldFiles(dir);\n\n    return filePath;\n  } catch {\n    return undefined;\n  }\n}\n","import type { CrashReport } from \"./report\";\n\nconst SEND_TIMEOUT_MS = 5000;\nconst PRODUCTION_ENDPOINT = \"https://sdk-error-tracking-926vh9t4cl.erp.dev/query\";\n\nconst SUBMIT_MUTATION = `\nmutation SubmitCrashReport(\n  $id: String!\n  $timestamp: String!\n  $sdkVersion: String!\n  $nodeVersion: String!\n  $osPlatform: String!\n  $osRelease: String!\n  $arch: String!\n  $command: String!\n  $argv: [String]\n  $errorName: String!\n  $errorMessage: String!\n  $stackTrace: String\n  $errorType: String!\n  $userId: String\n  $userEmail: String\n) {\n  submitCrashReport(\n    id: $id\n    timestamp: $timestamp\n    sdkVersion: $sdkVersion\n    nodeVersion: $nodeVersion\n    osPlatform: $osPlatform\n    osRelease: $osRelease\n    arch: $arch\n    command: $command\n    argv: $argv\n    errorName: $errorName\n    errorMessage: $errorMessage\n    stackTrace: $stackTrace\n    errorType: $errorType\n    userId: $userId\n    userEmail: $userEmail\n  ) {\n    success\n  }\n}`;\n\n/**\n * Send a crash report to the remote endpoint via GraphQL mutation.\n * Best-effort: never throws, returns boolean success.\n * @param report - Crash report to send\n * @param ua - User-Agent header value\n * @returns true if the request succeeded, false otherwise\n */\nexport async function sendCrashReport(report: CrashReport, ua: string): Promise<boolean> {\n  try {\n    const endpoint = process.env.TAILOR_CRASH_REPORT_ENDPOINT || PRODUCTION_ENDPOINT;\n    const response = await fetch(endpoint, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n        \"User-Agent\": ua,\n      },\n      body: JSON.stringify({\n        query: SUBMIT_MUTATION,\n        variables: report,\n      }),\n      signal: AbortSignal.timeout(SEND_TIMEOUT_MS),\n    });\n\n    if (!response.ok) return false;\n\n    const data = (await response.json()) as {\n      errors?: unknown[];\n      data?: { submitCrashReport: { success: boolean } };\n    };\n    if (data.errors?.length) return false;\n    return data.data?.submitCrashReport.success === true;\n  } catch {\n    return false;\n  }\n}\n","import * as os from \"node:os\";\n\nconst HOME_DIR = os.homedir();\n\n// Patterns for sanitization (global variants for use with .replace())\nconst UUID_PATTERN = /\\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\\b/gi;\nconst LONG_HEX_PATTERN = /\\b[0-9a-fA-F]{32,}\\b/g;\nconst EMAIL_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/g;\nconst ABSOLUTE_PATH_PATTERN = /(?:\\/(?:[\\w.@\\- ]+\\/)+[\\w.@\\- ]+)/g;\nconst WINDOWS_PATH_PATTERN = /(?:[A-Za-z]:\\\\(?:[\\w.@\\- ]+\\\\)+[\\w.@\\- ]+)/g;\nconst URL_QUERY_PATTERN = /[?&][^?\\s]*/g;\n\n// Non-global variants for single-match .test() calls (avoids lastIndex state issues)\nconst EMAIL_TEST_PATTERN = /\\b[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}\\b/;\nconst WINDOWS_DRIVE_TEST_PATTERN = /^[A-Za-z]:\\\\/;\n\n// SDK package path marker for relative paths\nconst SDK_PACKAGE_MARKER = \"packages/sdk/\";\n\nfunction lastSegment(filePath: string, separator: string): string {\n  return filePath.split(separator).pop() ?? filePath;\n}\n\n/**\n * Sanitize a stack trace by replacing absolute paths with relative SDK paths.\n * External paths are replaced with `<external>/filename.ext`.\n * Home directories are replaced with `~/<redacted>/`.\n * @param stack - Raw stack trace string\n * @returns Sanitized stack trace\n */\nexport function sanitizeStackTrace(stack: string): string {\n  // V8 stack traces start with \"ErrorType: message\\n    at ...\".\n  // The error message may span multiple lines before the first \"    at \" frame.\n  // Apply message sanitization to all message lines so secrets embedded in\n  // multiline error messages are redacted consistently with errorMessage.\n  const firstFrameIndex = stack.search(/\\n\\s+at /);\n  let result: string;\n  if (firstFrameIndex !== -1) {\n    result = sanitizeMessage(stack.slice(0, firstFrameIndex)) + stack.slice(firstFrameIndex);\n  } else {\n    result = sanitizeMessage(stack);\n  }\n\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => {\n    const sdkIndex = match.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return match.slice(sdkIndex);\n    }\n\n    if (match.startsWith(HOME_DIR)) {\n      return `~/<redacted>/${lastSegment(match, \"/\")}`;\n    }\n\n    return `<external>/${lastSegment(match, \"/\")}`;\n  });\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => {\n    const normalized = match.replace(/\\\\/g, \"/\");\n    const sdkIndex = normalized.indexOf(SDK_PACKAGE_MARKER);\n    if (sdkIndex !== -1) {\n      return normalized.slice(sdkIndex);\n    }\n    return `<external>/${lastSegment(match, \"\\\\\")}`;\n  });\n  return result;\n}\n\n/**\n * Sanitize an error message by redacting sensitive information.\n * Redacts: UUIDs, long hex tokens, email addresses, absolute paths, URL query strings.\n * @param message - Raw error message\n * @returns Sanitized error message\n */\nexport function sanitizeMessage(message: string): string {\n  let result = message;\n  // Strip serialized request/response bodies that may contain secrets\n  result = result.replace(/\\nRequest:\\s*[\\s\\S]*$/, \"\\nRequest: <redacted>\");\n  result = result.replace(UUID_PATTERN, \"<uuid>\");\n  result = result.replace(LONG_HEX_PATTERN, \"<redacted>\");\n  result = result.replace(EMAIL_PATTERN, \"<email>\");\n  result = result.replace(URL_QUERY_PATTERN, \"?<redacted>\");\n  result = result.replace(ABSOLUTE_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"/\")}`);\n  result = result.replace(WINDOWS_PATH_PATTERN, (match) => `<path>/${lastSegment(match, \"\\\\\")}`);\n\n  return result;\n}\n\n/**\n * Sanitize process.argv by keeping command/subcommand names and redacting\n * values of sensitive flags.\n * @param argv - Raw process.argv array\n * @returns Sanitized argv array\n */\nexport function sanitizeArgv(argv: string[]): string[] {\n  const result: string[] = [];\n  let redactNext = false;\n\n  for (const arg of argv) {\n    if (redactNext) {\n      // If the next token is itself a flag, treat it as a new flag rather\n      // than consuming it as the previous flag's value. This avoids leaking\n      // the *next* flag's value (e.g., `--verbose --workspace-id secret`\n      // would otherwise expose `secret`).\n      if (!arg.startsWith(\"-\")) {\n        result.push(\"<redacted>\");\n        redactNext = false;\n        continue;\n      }\n      redactNext = false;\n    }\n\n    if (arg.startsWith(\"-\")) {\n      // --flag=value: keep flag name, redact value\n      const eqIndex = arg.indexOf(\"=\");\n      if (eqIndex !== -1) {\n        result.push(`${arg.slice(0, eqIndex)}=<redacted>`);\n        continue;\n      }\n\n      // --flag / -f: keep flag name, redact next arg as its value\n      result.push(arg);\n      redactNext = true;\n      continue;\n    }\n\n    // Redact absolute paths\n    if (arg.startsWith(\"/\") && arg.includes(\"/\", 1)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact Windows-style absolute paths\n    if (WINDOWS_DRIVE_TEST_PATTERN.test(arg)) {\n      result.push(\"<path>\");\n      continue;\n    }\n\n    // Redact email addresses\n    if (EMAIL_TEST_PATTERN.test(arg)) {\n      result.push(\"<email>\");\n      continue;\n    }\n\n    result.push(arg);\n  }\n\n  return result;\n}\n","import * as crypto from \"node:crypto\";\nimport * as fs from \"node:fs\";\nimport * as os from \"node:os\";\nimport { parseYAML } from \"confbox\";\nimport * as path from \"pathe\";\nimport { xdgConfig } from \"xdg-basedir\";\nimport { sanitizeArgv, sanitizeMessage, sanitizeStackTrace } from \"./sanitize\";\n\nexport type ErrorType = \"uncaughtException\" | \"unhandledRejection\" | \"handledError\";\n\nexport interface CrashReport {\n  id: string;\n  timestamp: string;\n  sdkVersion: string;\n  nodeVersion: string;\n  osPlatform: string;\n  osRelease: string;\n  arch: string;\n  command: string;\n  argv: string[];\n  errorName: string;\n  errorMessage: string;\n  stackTrace: string;\n  errorType: ErrorType;\n  userId: string | null;\n  userEmail: string | null;\n}\n\ninterface BuildCrashReportOptions {\n  error: unknown;\n  sdkVersion: string;\n  errorType: ErrorType;\n}\n\n// Maximum subcommand depth to keep (e.g., \"tailordb migrate generate\" = 3 tokens).\n// Positional arguments beyond this are potentially sensitive user input.\n// Accepted trade-off: plain-text positional args that don't match known patterns\n// (UUIDs, hex tokens, emails, paths) pass through to `command` and `argv`.\n// Full redaction would require embedding the CLI command tree here, which is fragile.\nconst MAX_COMMAND_TOKENS = 3;\n\n/**\n * Parse the command name from process.argv.\n * Extracts up to MAX_COMMAND_TOKENS non-flag arguments after the script name.\n * @returns Parsed command string\n */\nfunction parseCommand(): string {\n  const args = process.argv.slice(2);\n  const commandParts: string[] = [];\n  for (const arg of args) {\n    if (arg.startsWith(\"-\") || commandParts.length >= MAX_COMMAND_TOKENS) break;\n    commandParts.push(arg);\n  }\n  return commandParts.join(\" \") || \"<unknown>\";\n}\n\n/**\n * Build a CrashReport data structure from an error and context.\n * All sensitive data is sanitized before inclusion.\n * @param options - Error, SDK version, and crash type\n * @returns Sanitized crash report\n */\nexport function buildCrashReport(options: BuildCrashReportOptions): CrashReport {\n  const { error, sdkVersion, errorType } = options;\n\n  const isError = error instanceof Error;\n  const rawMessage = isError ? error.message : String(error);\n  const rawStack = isError && error.stack ? error.stack : \"\";\n  const errorName = isError ? error.name : \"UnknownError\";\n\n  const currentUser = readCurrentUser();\n\n  return {\n    id: crypto.randomUUID(),\n    timestamp: new Date().toISOString(),\n    sdkVersion,\n    nodeVersion: process.version,\n    osPlatform: process.platform,\n    osRelease: os.release(),\n    arch: process.arch,\n    command: sanitizeMessage(parseCommand()),\n    argv: sanitizeArgv(process.argv),\n    errorName,\n    errorMessage: sanitizeMessage(rawMessage),\n    stackTrace: sanitizeStackTrace(rawStack),\n    errorType,\n    userId: currentUser,\n    userEmail: currentUser,\n  };\n}\n\n/**\n * Read current_user from Tailor Platform config without side effects.\n * Unlike readPlatformConfig(), this never triggers migration or logs warnings.\n * @returns The current user email, or null if unavailable\n */\nfunction readCurrentUser(): string | null {\n  try {\n    if (!xdgConfig) return null;\n    const configPath = path.join(xdgConfig, \"tailor-platform\", \"config.yaml\");\n    if (!fs.existsSync(configPath)) return null;\n    const raw = parseYAML(fs.readFileSync(configPath, \"utf-8\")) as { current_user?: string | null };\n    // parseYAML returns null for empty documents\n    // oxlint-disable-next-line typescript/no-unnecessary-condition\n    return raw?.current_user ?? null;\n  } catch {\n    return null;\n  }\n}\n","import { logger } from \"#/cli/shared/logger\";\nimport { readPackageJson } from \"#/cli/shared/package-json\";\nimport { userAgentFromVersion } from \"#/cli/shared/user-agent\";\nimport { parseCrashReportConfig } from \"./config\";\nimport { buildCrashReport, type ErrorType } from \"./report\";\nimport { sendCrashReport } from \"./sender\";\nimport { writeCrashReport } from \"./writer\";\n\n/**\n * Report an unexpected crash. Writes a local crash log file and optionally\n * sends the report to a remote endpoint. Displays a user-facing message\n * with the crash log path and a command to submit the report.\n *\n * Never throws - all errors are silently caught.\n * @param error - The error that caused the crash\n * @param errorType - How the error was caught\n */\nexport async function reportCrash(error: unknown, errorType: ErrorType): Promise<void> {\n  try {\n    const config = parseCrashReportConfig();\n    if (!config.localEnabled && !config.remoteEnabled) return;\n\n    const packageJson = await readPackageJson();\n    const sdkVersion = packageJson.version ?? \"unknown\";\n\n    const report = buildCrashReport({ error, sdkVersion, errorType });\n\n    if (config.localEnabled) {\n      const filePath = writeCrashReport(report, config.localDir);\n      if (filePath) {\n        logger.log(\n          [\n            \"\",\n            \"An unexpected error occurred. A crash report has been saved to:\",\n            `  ${filePath}`,\n            \"\",\n            \"To submit this report:\",\n            `  tailor-sdk crashreport send --file \"${filePath}\"`,\n          ].join(\"\\n\"),\n        );\n      }\n    }\n\n    if (config.remoteEnabled) {\n      const ua = userAgentFromVersion(sdkVersion);\n      await sendCrashReport(report, ua);\n    }\n  } catch {\n    // Never throw from crash reporting\n  }\n}\n\n/**\n * Register global uncaughtException and unhandledRejection handlers.\n * These catch errors outside the normal cleanup flow (e.g., during\n * argument parsing). Should be called once at CLI startup before runMain.\n */\nexport function initCrashReporting(): void {\n  const config = parseCrashReportConfig();\n  if (!config.localEnabled && !config.remoteEnabled) return;\n\n  const handleFatal = (error: unknown, errorType: ErrorType) => {\n    const message = error instanceof Error ? error.message : String(error);\n    logger.error(message);\n    void reportCrash(error, errorType).finally(() => {\n      process.exit(1);\n    });\n  };\n\n  process.on(\"uncaughtException\", (error) => handleFatal(error, \"uncaughtException\"));\n  process.on(\"unhandledRejection\", (reason) => handleFatal(reason, \"unhandledRejection\"));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiBA,SAAgB,yBAA4C;CAC1D,IAAI,MACF,OAAO;EACL,cAAc;EACd,eAAe;EACf,UAAU;CACZ;CAGF,MAAM,gBAAgB,QAAQ,IAAI,8BAA8B,KAAI,CAAE,YAAY,MAAM;CACxF,MAAM,iBAAiB,QAAQ,IAAI,+BAA+B,MAAK,CAAE,YAAY,MAAM;CAC3F,MAAM,WAAW,YAAY,KAAK,KAAK,WAAW,mBAAmB,eAAe,IAAI;CAExF,OAAO;EACL,cAAc,gBAAgB,aAAa;EAC3C;EACA;CACF;AACF;;;;AC9BA,MAAM,kBAAkB;;AAGxB,MAAa,qBAAqB;;AAGlC,MAAa,sBAAsB;;;;;;AAOnC,SAAgB,kBAAkB,QAA6B;CA2B7D,OAAO;EAzBL,iBAAiB,OAAO;EACxB,cAAc,OAAO;EACrB,eAAe,OAAO;EACtB;EACA;EACA,gBAAgB,OAAO;EACvB,iBAAiB,OAAO;EACxB,OAAO,OAAO,WAAW,GAAG,OAAO;EACnC,SAAS,OAAO;EAChB;EACA;EACA,YAAY,OAAO;EACnB,cAAc,KAAK,UAAU,OAAO,IAAI;EACxC;EACA;EACA,SAAS,OAAO;EAChB,YAAY,OAAO;EACnB;EACA;EACA,OAAO,cAAc;EACrB;EACA;EACA,KAAK,UAAU,MAAM;EACrB;CAES,CAAC,CAAC,KAAK,IAAI;AACxB;;;;;;;AAQA,SAAS,iBAAiB,QAA6B;CAGrD,OAAO,GAFe,OAAO,UAAU,QAAQ,SAAS,GAElC,EAAE,GADR,OAAO,GAAG,MAAM,GAAG,CACF,IAAI;AACvC;;;;;AAMA,SAAS,gBAAgB,KAAmB;CAC1C,IAAI;EACF,MAAM,QAAQ,GACX,YAAY,GAAG,CAAC,CAChB,QAAQ,MAAM,EAAE,SAAS,mBAAmB,CAAC,CAAC,CAC9C,SAAS,CAAC,CACV,WAAW;EAEd,KAAK,MAAM,QAAQ,MAAM,MAAM,eAAe,GAC5C,GAAG,WAAW,KAAK,KAAK,KAAK,IAAI,CAAC;CAEtC,QAAQ,CAER;AACF;;;;;;;;;AAUA,SAAgB,iBAAiB,QAAqB,KAAiC;CACrF,IAAI;EACF,gBAAgB,GAAG;EAEnB,MAAM,WAAW,iBAAiB,MAAM;EACxC,MAAM,WAAW,KAAK,KAAK,KAAK,QAAQ;EAGxC,gBAAgB,UAFA,kBAAkB,MAEF,CAAC;EACjC,gBAAgB,GAAG;EAEnB,OAAO;CACT,QAAQ;EACN;CACF;AACF;;;;ACrGA,MAAM,kBAAkB;AACxB,MAAM,sBAAsB;AAE5B,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CxB,eAAsB,gBAAgB,QAAqB,IAA8B;CACvF,IAAI;EACF,MAAM,WAAW,QAAQ,IAAI,gCAAgC;EAC7D,MAAM,WAAW,MAAM,MAAM,UAAU;GACrC,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,cAAc;GAChB;GACA,MAAM,KAAK,UAAU;IACnB,OAAO;IACP,WAAW;GACb,CAAC;GACD,QAAQ,YAAY,QAAQ,eAAe;EAC7C,CAAC;EAED,IAAI,CAAC,SAAS,IAAI,OAAO;EAEzB,MAAM,OAAQ,MAAM,SAAS,KAAK;EAIlC,IAAI,KAAK,QAAQ,QAAQ,OAAO;EAChC,OAAO,KAAK,MAAM,kBAAkB,YAAY;CAClD,QAAQ;EACN,OAAO;CACT;AACF;;;;AC5EA,MAAM,WAAW,GAAG,QAAQ;AAG5B,MAAM,eAAe;AACrB,MAAM,mBAAmB;AACzB,MAAM,gBAAgB;AACtB,MAAM,wBAAwB;AAC9B,MAAM,uBAAuB;AAC7B,MAAM,oBAAoB;AAG1B,MAAM,qBAAqB;AAC3B,MAAM,6BAA6B;AAGnC,MAAM,qBAAqB;AAE3B,SAAS,YAAY,UAAkB,WAA2B;CAChE,OAAO,SAAS,MAAM,SAAS,CAAC,CAAC,IAAI,KAAK;AAC5C;;;;;;;;AASA,SAAgB,mBAAmB,OAAuB;CAKxD,MAAM,kBAAkB,MAAM,OAAO,UAAU;CAC/C,IAAI;CACJ,IAAI,oBAAoB,IACtB,SAAS,gBAAgB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,MAAM,MAAM,eAAe;MAEvF,SAAS,gBAAgB,KAAK;CAGhC,SAAS,OAAO,QAAQ,wBAAwB,UAAU;EACxD,MAAM,WAAW,MAAM,QAAQ,kBAAkB;EACjD,IAAI,aAAa,IACf,OAAO,MAAM,MAAM,QAAQ;EAG7B,IAAI,MAAM,WAAW,QAAQ,GAC3B,OAAO,gBAAgB,YAAY,OAAO,GAAG;EAG/C,OAAO,cAAc,YAAY,OAAO,GAAG;CAC7C,CAAC;CACD,SAAS,OAAO,QAAQ,uBAAuB,UAAU;EACvD,MAAM,aAAa,MAAM,QAAQ,OAAO,GAAG;EAC3C,MAAM,WAAW,WAAW,QAAQ,kBAAkB;EACtD,IAAI,aAAa,IACf,OAAO,WAAW,MAAM,QAAQ;EAElC,OAAO,cAAc,YAAY,OAAO,IAAI;CAC9C,CAAC;CACD,OAAO;AACT;;;;;;;AAQA,SAAgB,gBAAgB,SAAyB;CACvD,IAAI,SAAS;CAEb,SAAS,OAAO,QAAQ,yBAAyB,uBAAuB;CACxE,SAAS,OAAO,QAAQ,cAAc,QAAQ;CAC9C,SAAS,OAAO,QAAQ,kBAAkB,YAAY;CACtD,SAAS,OAAO,QAAQ,eAAe,SAAS;CAChD,SAAS,OAAO,QAAQ,mBAAmB,aAAa;CACxD,SAAS,OAAO,QAAQ,wBAAwB,UAAU,UAAU,YAAY,OAAO,GAAG,GAAG;CAC7F,SAAS,OAAO,QAAQ,uBAAuB,UAAU,UAAU,YAAY,OAAO,IAAI,GAAG;CAE7F,OAAO;AACT;;;;;;;AAQA,SAAgB,aAAa,MAA0B;CACrD,MAAM,SAAmB,CAAC;CAC1B,IAAI,aAAa;CAEjB,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,YAAY;GAKd,IAAI,CAAC,IAAI,WAAW,GAAG,GAAG;IACxB,OAAO,KAAK,YAAY;IACxB,aAAa;IACb;GACF;GACA,aAAa;EACf;EAEA,IAAI,IAAI,WAAW,GAAG,GAAG;GAEvB,MAAM,UAAU,IAAI,QAAQ,GAAG;GAC/B,IAAI,YAAY,IAAI;IAClB,OAAO,KAAK,GAAG,IAAI,MAAM,GAAG,OAAO,EAAE,YAAY;IACjD;GACF;GAGA,OAAO,KAAK,GAAG;GACf,aAAa;GACb;EACF;EAGA,IAAI,IAAI,WAAW,GAAG,KAAK,IAAI,SAAS,KAAK,CAAC,GAAG;GAC/C,OAAO,KAAK,QAAQ;GACpB;EACF;EAGA,IAAI,2BAA2B,KAAK,GAAG,GAAG;GACxC,OAAO,KAAK,QAAQ;GACpB;EACF;EAGA,IAAI,mBAAmB,KAAK,GAAG,GAAG;GAChC,OAAO,KAAK,SAAS;GACrB;EACF;EAEA,OAAO,KAAK,GAAG;CACjB;CAEA,OAAO;AACT;;;;AC3GA,MAAM,qBAAqB;;;;;;AAO3B,SAAS,eAAuB;CAC9B,MAAM,OAAO,QAAQ,KAAK,MAAM,CAAC;CACjC,MAAM,eAAyB,CAAC;CAChC,KAAK,MAAM,OAAO,MAAM;EACtB,IAAI,IAAI,WAAW,GAAG,KAAK,aAAa,UAAU,oBAAoB;EACtE,aAAa,KAAK,GAAG;CACvB;CACA,OAAO,aAAa,KAAK,GAAG,KAAK;AACnC;;;;;;;AAQA,SAAgB,iBAAiB,SAA+C;CAC9E,MAAM,EAAE,OAAO,YAAY,cAAc;CAEzC,MAAM,UAAU,iBAAiB;CACjC,MAAM,aAAa,UAAU,MAAM,UAAU,OAAO,KAAK;CACzD,MAAM,WAAW,WAAW,MAAM,QAAQ,MAAM,QAAQ;CACxD,MAAM,YAAY,UAAU,MAAM,OAAO;CAEzC,MAAM,cAAc,gBAAgB;CAEpC,OAAO;EACL,IAAI,OAAO,WAAW;EACtB,4BAAW,IAAI,KAAK,EAAC,CAAC,YAAY;EAClC;EACA,aAAa,QAAQ;EACrB,YAAY,QAAQ;EACpB,WAAW,GAAG,QAAQ;EACtB,MAAM,QAAQ;EACd,SAAS,gBAAgB,aAAa,CAAC;EACvC,MAAM,aAAa,QAAQ,IAAI;EAC/B;EACA,cAAc,gBAAgB,UAAU;EACxC,YAAY,mBAAmB,QAAQ;EACvC;EACA,QAAQ;EACR,WAAW;CACb;AACF;;;;;;AAOA,SAAS,kBAAiC;CACxC,IAAI;EACF,IAAI,CAAC,WAAW,OAAO;EACvB,MAAM,aAAa,KAAK,KAAK,WAAW,mBAAmB,aAAa;EACxE,IAAI,CAAC,GAAG,WAAW,UAAU,GAAG,OAAO;EAIvC,OAHY,UAAU,GAAG,aAAa,YAAY,OAAO,CAGhD,CAAC,EAAE,gBAAgB;CAC9B,QAAQ;EACN,OAAO;CACT;AACF;;;;;;;;;;;;;AC3FA,eAAsB,YAAY,OAAgB,WAAqC;CACrF,IAAI;EACF,MAAM,SAAS,uBAAuB;EACtC,IAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,eAAe;EAGnD,MAAM,cAAa,MADO,gBAAgB,EACZ,CAAC,WAAW;EAE1C,MAAM,SAAS,iBAAiB;GAAE;GAAO;GAAY;EAAU,CAAC;EAEhE,IAAI,OAAO,cAAc;GACvB,MAAM,WAAW,iBAAiB,QAAQ,OAAO,QAAQ;GACzD,IAAI,UACF,OAAO,IACL;IACE;IACA;IACA,KAAK;IACL;IACA;IACA,yCAAyC,SAAS;GACpD,CAAC,CAAC,KAAK,IAAI,CACb;EAEJ;EAEA,IAAI,OAAO,eAET,MAAM,gBAAgB,QADX,qBAAqB,UACD,CAAC;CAEpC,QAAQ,CAER;AACF;;;;;;AAOA,SAAgB,qBAA2B;CACzC,MAAM,SAAS,uBAAuB;CACtC,IAAI,CAAC,OAAO,gBAAgB,CAAC,OAAO,eAAe;CAEnD,MAAM,eAAe,OAAgB,cAAyB;EAC5D,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;EACrE,OAAO,MAAM,OAAO;EACpB,AAAK,YAAY,OAAO,SAAS,CAAC,CAAC,cAAc;GAC/C,QAAQ,KAAK,CAAC;EAChB,CAAC;CACH;CAEA,QAAQ,GAAG,sBAAsB,UAAU,YAAY,OAAO,mBAAmB,CAAC;CAClF,QAAQ,GAAG,uBAAuB,WAAW,YAAY,QAAQ,oBAAoB,CAAC;AACxF"}

package/dist/{crashreport-BafWvjjX.mjs → crashreport-ecqnz51B.mjs}

@@ -1,3 +1,3 @@
-import { n as reportCrash, t as initCrashReporting } from "./crashreport-BNWUM6Kf.mjs";
+import { n as reportCrash, t as initCrashReporting } from "./crashreport-DMYuHnBN.mjs";
 
 export { reportCrash };

package/dist/{globals-DVJ8RVvm.mjs → globals-DUqEetIh.mjs}

@@ -77,6 +77,14 @@ var TailorDBFileErrorMock = class extends Error {
 function defaultGetInvoker() {
 	return null;
 }
+function noop() {}
+const defaultLogger = {
+	debug: noop,
+	info: noop,
+	warn: noop,
+	error: noop,
+	setAttributes: noop
+};
 /**
 * Install the always-present base platform globals (containers, context stub,
 * error classes, runtime flag). Per-namespace mocks are layered on top by the
@@ -92,7 +100,8 @@ function installPlatformGlobals(global) {
 	g[RUNTIME_FLAG_KEY] = true;
 	g.tailor = {
 		context: { getInvoker: defaultGetInvoker },
-		workflow: createDefaultWorkflowRuntime()
+		workflow: createDefaultWorkflowRuntime(),
+		logger: { ...defaultLogger }
 	};
 	g.tailordb = {};
 	g.TailorErrors = TailorErrorsMock;
@@ -119,4 +128,4 @@ function cleanupPlatformGlobals(global) {
 
 //#endregion
 export { cleanupPlatformGlobals as n, installPlatformGlobals as r, RUNTIME_FLAG_KEY as t };
-//# sourceMappingURL=globals-DVJ8RVvm.mjs.map
+//# sourceMappingURL=globals-DUqEetIh.mjs.map

package/dist/{globals-DVJ8RVvm.mjs.map → globals-DUqEetIh.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"globals-DVJ8RVvm.mjs","names":[],"sources":["../src/vitest/workflow-runtime.ts","../src/vitest/globals.ts"],"sourcesContent":["// Default `tailor.workflow` runner installed by the `tailor-runtime` environment.\n// Must stay free of `vitest` (`vi`): it loads via `./globals` in the environment\n// realm where `vi` is unavailable, hence relative imports only (no `@/` alias).\nimport { runRegisteredJob, runRegisteredWorkflow } from \"../configure/services/workflow/registry\";\nimport type { StartJobFunctionOptions, StartWorkflowOptions } from \"../runtime/workflow\";\n\nexport interface DefaultWorkflowRuntime {\n  startJobFunction: (name: string, args?: unknown, options?: StartJobFunctionOptions) => unknown;\n  triggerJobFunction: (name: string, args?: unknown, options?: StartJobFunctionOptions) => unknown;\n  startWorkflow: (name: string, args?: unknown, options?: StartWorkflowOptions) => Promise<string>;\n  triggerWorkflow: (\n    name: string,\n    args?: unknown,\n    options?: StartWorkflowOptions,\n  ) => Promise<string>;\n  resumeWorkflowExecution: (executionId: string) => Promise<string>;\n  resumeWorkflow: (executionId: string) => Promise<string>;\n  wait: (key: string, payload?: unknown) => unknown;\n  resolve: (\n    executionId: string,\n    key: string,\n    callback: (payload: unknown) => unknown,\n  ) => Promise<void>;\n}\n\nexport function createDefaultWorkflowRuntime(): DefaultWorkflowRuntime {\n  const startJobFunction: DefaultWorkflowRuntime[\"startJobFunction\"] = (name, args) =>\n    runRegisteredJob(name, args);\n  const startWorkflow: DefaultWorkflowRuntime[\"startWorkflow\"] = (name, args) =>\n    runRegisteredWorkflow(name, args);\n  const resumeWorkflowExecution: DefaultWorkflowRuntime[\"resumeWorkflowExecution\"] = async (\n    executionId,\n  ) => executionId;\n  return {\n    startJobFunction,\n    triggerJobFunction: startJobFunction,\n    startWorkflow,\n    triggerWorkflow: startWorkflow,\n    resumeWorkflowExecution,\n    resumeWorkflow: resumeWorkflowExecution,\n    wait: (key: string): unknown => {\n      throw new Error(\n        `No wait handler for \"${key}\". Acquire mockWorkflow() and call setWaitHandler(...).`,\n      );\n    },\n    resolve: async (): Promise<void> => {\n      throw new Error(\n        \"No resolve handler. Acquire mockWorkflow() and call setResolveHandler(...).\",\n      );\n    },\n  };\n}\n","/**\n * Base platform globals for the tailor-runtime test environment.\n *\n * This module is intentionally free of any `vitest` (`vi`) dependency so it can\n * be imported from the Vitest *environment* module (which runs in a realm where\n * `vi` is not available). It installs only the always-present structural pieces:\n *\n * - `globalThis.tailor` / `globalThis.tailordb` container objects\n * - `globalThis.tailor.context.getInvoker` default stub\n * - the platform error classes (`TailorErrors`, `TailorErrorMessage`,\n *   `TailorDBFileError`)\n * - the `__tailorRuntimeActive` sentinel flag\n *\n * The per-namespace mock behavior (TailorDB client, workflow, secretmanager, …)\n * is installed on demand by the `xMock()` factories in `./mock`, which run in\n * test context where `vi` *is* available.\n */\n\nimport { createDefaultWorkflowRuntime } from \"./workflow-runtime\";\nimport type { ContextInvoker } from \"../runtime/context\";\nimport type { TailorDBFileErrorCode } from \"../runtime/file\";\n\n// Sentinel set when the tailor-runtime environment is active. setup.ts reads it\n// to decide whether to run its blocked-globals lifecycle and config-secret\n// loading.\nexport const RUNTIME_FLAG_KEY = \"__tailorRuntimeActive\";\n\n// ---------------------------------------------------------------------------\n// Error class mocks\n// ---------------------------------------------------------------------------\n\ninterface TailorErrorItem {\n  message: string;\n  path: (string | number)[];\n}\n\nclass TailorErrorsMock extends Error {\n  errors: TailorErrorItem[];\n\n  constructor(errors: TailorErrorItem[]) {\n    if (!Array.isArray(errors)) {\n      throw new TypeError(\"TailorErrors: errors must be an array\");\n    }\n    const validated = errors.map((e, i) => {\n      if (typeof e.message !== \"string\") {\n        throw new TypeError(`TailorErrors: errors[${i}].message must be a string`);\n      }\n      if (!Array.isArray(e.path)) {\n        throw new TypeError(`TailorErrors: errors[${i}].path must be an array`);\n      }\n      return { message: e.message, path: e.path };\n    });\n    // Match the PF runtime's TailorErrors serialization, which prefixes the\n    // JSON payload with \"TailorErrors: \". Other SDK code (e.g. apply\n    // integration fixtures) strips this prefix before JSON.parse.\n    super(`TailorErrors: ${JSON.stringify({ errors: validated })}`);\n    this.name = \"TailorErrors\";\n    this.errors = validated;\n  }\n}\n\nclass TailorErrorMessageMock extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"TailorErrorMessage\";\n  }\n}\n\nclass TailorDBFileErrorMock extends Error {\n  code?: TailorDBFileErrorCode;\n  override cause: unknown;\n\n  constructor(message: string, code?: TailorDBFileErrorCode, cause?: unknown) {\n    super(message);\n    this.name = \"TailorDBFileError\";\n    this.code = code;\n    this.cause = cause;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Base install / cleanup\n// ---------------------------------------------------------------------------\n\n// Stub-only injection. SDK consumers configure invokers at the body level\n// (resolver/executor/workflow `.body()` `invoker` arg) or, for bundled tests,\n// via `vi.spyOn(globalThis.tailor.context, \"getInvoker\")`.\nfunction defaultGetInvoker(): ContextInvoker | null {\n  return null;\n}\n\n/**\n * Install the always-present base platform globals (containers, context stub,\n * error classes, runtime flag). Per-namespace mocks are layered on top by the\n * `xMock()` factories in `./mock`.\n *\n * Acquire with a `using` declaration and the globals are removed when the\n * scope exits; alternatively call `cleanupPlatformGlobals` yourself.\n * @param global - The global object to install into (typically `globalThis`)\n * @returns A `Disposable` that removes the installed globals\n */\nexport function installPlatformGlobals(global: typeof globalThis): Disposable {\n  const g = global as Record<string, unknown>;\n\n  g[RUNTIME_FLAG_KEY] = true;\n\n  // Containers. Namespace mocks (secretmanager, …) are added to these by the\n  // corresponding `xMock()` on acquisition. `workflow` carries a default runner\n  // so `.trigger()` runs the real job chain locally without `mockWorkflow()`;\n  // `mockWorkflow()` overlays and restores it.\n  g.tailor = {\n    context: { getInvoker: defaultGetInvoker },\n    workflow: createDefaultWorkflowRuntime(),\n  };\n  g.tailordb = {};\n\n  g.TailorErrors = TailorErrorsMock;\n  g.TailorErrorMessage = TailorErrorMessageMock;\n  g.TailorDBFileError = TailorDBFileErrorMock;\n\n  return {\n    [Symbol.dispose]() {\n      cleanupPlatformGlobals(global);\n    },\n  };\n}\n\n/**\n * Remove the base platform globals (and anything the namespace mocks layered on\n * top, since they live under the same containers).\n * @param global - The global object to clean up (typically `globalThis`)\n */\nexport function cleanupPlatformGlobals(global: typeof globalThis): void {\n  const g = global as Record<string, unknown>;\n  delete g.tailordb;\n  delete g.tailor;\n  delete g.TailorErrors;\n  delete g.TailorErrorMessage;\n  delete g.TailorDBFileError;\n  delete g[RUNTIME_FLAG_KEY];\n}\n"],"mappings":";;;AAyBA,SAAgB,+BAAuD;CACrE,MAAM,oBAAgE,MAAM,SAC1E,iBAAiB,MAAM,IAAI;CAC7B,MAAM,iBAA0D,MAAM,SACpE,sBAAsB,MAAM,IAAI;CAClC,MAAM,0BAA6E,OACjF,gBACG;CACL,OAAO;EACL;EACA,oBAAoB;EACpB;EACA,iBAAiB;EACjB;EACA,gBAAgB;EAChB,OAAO,QAAyB;GAC9B,MAAM,IAAI,MACR,wBAAwB,IAAI,wDAC9B;EACF;EACA,SAAS,YAA2B;GAClC,MAAM,IAAI,MACR,6EACF;EACF;CACF;AACF;;;;;;;;;;;;;;;;;;;;;AC1BA,MAAa,mBAAmB;AAWhC,IAAM,mBAAN,cAA+B,MAAM;CACnC;CAEA,YAAY,QAA2B;EACrC,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,UAAU,uCAAuC;EAE7D,MAAM,YAAY,OAAO,KAAK,GAAG,MAAM;GACrC,IAAI,OAAO,EAAE,YAAY,UACvB,MAAM,IAAI,UAAU,wBAAwB,EAAE,2BAA2B;GAE3E,IAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,GACvB,MAAM,IAAI,UAAU,wBAAwB,EAAE,wBAAwB;GAExE,OAAO;IAAE,SAAS,EAAE;IAAS,MAAM,EAAE;GAAK;EAC5C,CAAC;EAID,MAAM,iBAAiB,KAAK,UAAU,EAAE,QAAQ,UAAU,CAAC,GAAG;EAC9D,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAEA,IAAM,yBAAN,cAAqC,MAAM;CACzC,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,IAAM,wBAAN,cAAoC,MAAM;CACxC;CACA,AAAS;CAET,YAAY,SAAiB,MAA8B,OAAiB;EAC1E,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,QAAQ;CACf;AACF;AASA,SAAS,oBAA2C;CAClD,OAAO;AACT;;;;;;;;;;;AAYA,SAAgB,uBAAuB,QAAuC;CAC5E,MAAM,IAAI;CAEV,EAAE,oBAAoB;CAMtB,EAAE,SAAS;EACT,SAAS,EAAE,YAAY,kBAAkB;EACzC,UAAU,6BAA6B;CACzC;CACA,EAAE,WAAW,CAAC;CAEd,EAAE,eAAe;CACjB,EAAE,qBAAqB;CACvB,EAAE,oBAAoB;CAEtB,OAAO,EACL,CAAC,OAAO,WAAW;EACjB,uBAAuB,MAAM;CAC/B,EACF;AACF;;;;;;AAOA,SAAgB,uBAAuB,QAAiC;CACtE,MAAM,IAAI;CACV,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;AACX"}
+{"version":3,"file":"globals-DUqEetIh.mjs","names":[],"sources":["../src/vitest/workflow-runtime.ts","../src/vitest/globals.ts"],"sourcesContent":["// Default `tailor.workflow` runner installed by the `tailor-runtime` environment.\n// Must stay free of `vitest` (`vi`): it loads via `./globals` in the environment\n// realm where `vi` is unavailable, hence relative imports only (no `@/` alias).\nimport { runRegisteredJob, runRegisteredWorkflow } from \"../configure/services/workflow/registry\";\nimport type { StartJobFunctionOptions, StartWorkflowOptions } from \"../runtime/workflow\";\n\nexport interface DefaultWorkflowRuntime {\n  startJobFunction: (name: string, args?: unknown, options?: StartJobFunctionOptions) => unknown;\n  triggerJobFunction: (name: string, args?: unknown, options?: StartJobFunctionOptions) => unknown;\n  startWorkflow: (name: string, args?: unknown, options?: StartWorkflowOptions) => Promise<string>;\n  triggerWorkflow: (\n    name: string,\n    args?: unknown,\n    options?: StartWorkflowOptions,\n  ) => Promise<string>;\n  resumeWorkflowExecution: (executionId: string) => Promise<string>;\n  resumeWorkflow: (executionId: string) => Promise<string>;\n  wait: (key: string, payload?: unknown) => unknown;\n  resolve: (\n    executionId: string,\n    key: string,\n    callback: (payload: unknown) => unknown,\n  ) => Promise<void>;\n}\n\nexport function createDefaultWorkflowRuntime(): DefaultWorkflowRuntime {\n  const startJobFunction: DefaultWorkflowRuntime[\"startJobFunction\"] = (name, args) =>\n    runRegisteredJob(name, args);\n  const startWorkflow: DefaultWorkflowRuntime[\"startWorkflow\"] = (name, args) =>\n    runRegisteredWorkflow(name, args);\n  const resumeWorkflowExecution: DefaultWorkflowRuntime[\"resumeWorkflowExecution\"] = async (\n    executionId,\n  ) => executionId;\n  return {\n    startJobFunction,\n    triggerJobFunction: startJobFunction,\n    startWorkflow,\n    triggerWorkflow: startWorkflow,\n    resumeWorkflowExecution,\n    resumeWorkflow: resumeWorkflowExecution,\n    wait: (key: string): unknown => {\n      throw new Error(\n        `No wait handler for \"${key}\". Acquire mockWorkflow() and call setWaitHandler(...).`,\n      );\n    },\n    resolve: async (): Promise<void> => {\n      throw new Error(\n        \"No resolve handler. Acquire mockWorkflow() and call setResolveHandler(...).\",\n      );\n    },\n  };\n}\n","/**\n * Base platform globals for the tailor-runtime test environment.\n *\n * This module is intentionally free of any `vitest` (`vi`) dependency so it can\n * be imported from the Vitest *environment* module (which runs in a realm where\n * `vi` is not available). It installs only the always-present structural pieces:\n *\n * - `globalThis.tailor` / `globalThis.tailordb` container objects\n * - `globalThis.tailor.context.getInvoker` default stub\n * - the platform error classes (`TailorErrors`, `TailorErrorMessage`,\n *   `TailorDBFileError`)\n * - the `__tailorRuntimeActive` sentinel flag\n *\n * The per-namespace mock behavior (TailorDB client, workflow, secretmanager, …)\n * is installed on demand by the `xMock()` factories in `./mock`, which run in\n * test context where `vi` *is* available.\n */\n\nimport { createDefaultWorkflowRuntime } from \"./workflow-runtime\";\nimport type { ContextInvoker } from \"../runtime/context\";\nimport type { TailorDBFileErrorCode } from \"../runtime/file\";\n\n// Sentinel set when the tailor-runtime environment is active. setup.ts reads it\n// to decide whether to run its blocked-globals lifecycle and config-secret\n// loading.\nexport const RUNTIME_FLAG_KEY = \"__tailorRuntimeActive\";\n\n// ---------------------------------------------------------------------------\n// Error class mocks\n// ---------------------------------------------------------------------------\n\ninterface TailorErrorItem {\n  message: string;\n  path: (string | number)[];\n}\n\nclass TailorErrorsMock extends Error {\n  errors: TailorErrorItem[];\n\n  constructor(errors: TailorErrorItem[]) {\n    if (!Array.isArray(errors)) {\n      throw new TypeError(\"TailorErrors: errors must be an array\");\n    }\n    const validated = errors.map((e, i) => {\n      if (typeof e.message !== \"string\") {\n        throw new TypeError(`TailorErrors: errors[${i}].message must be a string`);\n      }\n      if (!Array.isArray(e.path)) {\n        throw new TypeError(`TailorErrors: errors[${i}].path must be an array`);\n      }\n      return { message: e.message, path: e.path };\n    });\n    // Match the PF runtime's TailorErrors serialization, which prefixes the\n    // JSON payload with \"TailorErrors: \". Other SDK code (e.g. apply\n    // integration fixtures) strips this prefix before JSON.parse.\n    super(`TailorErrors: ${JSON.stringify({ errors: validated })}`);\n    this.name = \"TailorErrors\";\n    this.errors = validated;\n  }\n}\n\nclass TailorErrorMessageMock extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"TailorErrorMessage\";\n  }\n}\n\nclass TailorDBFileErrorMock extends Error {\n  code?: TailorDBFileErrorCode;\n  override cause: unknown;\n\n  constructor(message: string, code?: TailorDBFileErrorCode, cause?: unknown) {\n    super(message);\n    this.name = \"TailorDBFileError\";\n    this.code = code;\n    this.cause = cause;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Base install / cleanup\n// ---------------------------------------------------------------------------\n\n// Stub-only injection. SDK consumers configure invokers at the body level\n// (resolver/executor/workflow `.body()` `invoker` arg) or, for bundled tests,\n// via `vi.spyOn(globalThis.tailor.context, \"getInvoker\")`.\nfunction defaultGetInvoker(): ContextInvoker | null {\n  return null;\n}\n\n// No-op logger stub so `tailor.logger.*` calls in code under test don't throw\n// without an explicit `mockLogger()`. `mockLogger()` overlays vi.fn spies and\n// restores this on dispose.\nfunction noop(): void {}\nconst defaultLogger = {\n  debug: noop,\n  info: noop,\n  warn: noop,\n  error: noop,\n  setAttributes: noop,\n};\n\n/**\n * Install the always-present base platform globals (containers, context stub,\n * error classes, runtime flag). Per-namespace mocks are layered on top by the\n * `xMock()` factories in `./mock`.\n *\n * Acquire with a `using` declaration and the globals are removed when the\n * scope exits; alternatively call `cleanupPlatformGlobals` yourself.\n * @param global - The global object to install into (typically `globalThis`)\n * @returns A `Disposable` that removes the installed globals\n */\nexport function installPlatformGlobals(global: typeof globalThis): Disposable {\n  const g = global as Record<string, unknown>;\n\n  g[RUNTIME_FLAG_KEY] = true;\n\n  // Containers. Namespace mocks (secretmanager, …) are added to these by the\n  // corresponding `xMock()` on acquisition. `workflow` carries a default runner\n  // so `.trigger()` runs the real job chain locally without `mockWorkflow()`;\n  // `mockWorkflow()` overlays and restores it.\n  g.tailor = {\n    context: { getInvoker: defaultGetInvoker },\n    workflow: createDefaultWorkflowRuntime(),\n    logger: { ...defaultLogger },\n  };\n  g.tailordb = {};\n\n  g.TailorErrors = TailorErrorsMock;\n  g.TailorErrorMessage = TailorErrorMessageMock;\n  g.TailorDBFileError = TailorDBFileErrorMock;\n\n  return {\n    [Symbol.dispose]() {\n      cleanupPlatformGlobals(global);\n    },\n  };\n}\n\n/**\n * Remove the base platform globals (and anything the namespace mocks layered on\n * top, since they live under the same containers).\n * @param global - The global object to clean up (typically `globalThis`)\n */\nexport function cleanupPlatformGlobals(global: typeof globalThis): void {\n  const g = global as Record<string, unknown>;\n  delete g.tailordb;\n  delete g.tailor;\n  delete g.TailorErrors;\n  delete g.TailorErrorMessage;\n  delete g.TailorDBFileError;\n  delete g[RUNTIME_FLAG_KEY];\n}\n"],"mappings":";;;AAyBA,SAAgB,+BAAuD;CACrE,MAAM,oBAAgE,MAAM,SAC1E,iBAAiB,MAAM,IAAI;CAC7B,MAAM,iBAA0D,MAAM,SACpE,sBAAsB,MAAM,IAAI;CAClC,MAAM,0BAA6E,OACjF,gBACG;CACL,OAAO;EACL;EACA,oBAAoB;EACpB;EACA,iBAAiB;EACjB;EACA,gBAAgB;EAChB,OAAO,QAAyB;GAC9B,MAAM,IAAI,MACR,wBAAwB,IAAI,wDAC9B;EACF;EACA,SAAS,YAA2B;GAClC,MAAM,IAAI,MACR,6EACF;EACF;CACF;AACF;;;;;;;;;;;;;;;;;;;;;AC1BA,MAAa,mBAAmB;AAWhC,IAAM,mBAAN,cAA+B,MAAM;CACnC;CAEA,YAAY,QAA2B;EACrC,IAAI,CAAC,MAAM,QAAQ,MAAM,GACvB,MAAM,IAAI,UAAU,uCAAuC;EAE7D,MAAM,YAAY,OAAO,KAAK,GAAG,MAAM;GACrC,IAAI,OAAO,EAAE,YAAY,UACvB,MAAM,IAAI,UAAU,wBAAwB,EAAE,2BAA2B;GAE3E,IAAI,CAAC,MAAM,QAAQ,EAAE,IAAI,GACvB,MAAM,IAAI,UAAU,wBAAwB,EAAE,wBAAwB;GAExE,OAAO;IAAE,SAAS,EAAE;IAAS,MAAM,EAAE;GAAK;EAC5C,CAAC;EAID,MAAM,iBAAiB,KAAK,UAAU,EAAE,QAAQ,UAAU,CAAC,GAAG;EAC9D,KAAK,OAAO;EACZ,KAAK,SAAS;CAChB;AACF;AAEA,IAAM,yBAAN,cAAqC,MAAM;CACzC,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAEA,IAAM,wBAAN,cAAoC,MAAM;CACxC;CACA,AAAS;CAET,YAAY,SAAiB,MAA8B,OAAiB;EAC1E,MAAM,OAAO;EACb,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,KAAK,QAAQ;CACf;AACF;AASA,SAAS,oBAA2C;CAClD,OAAO;AACT;AAKA,SAAS,OAAa,CAAC;AACvB,MAAM,gBAAgB;CACpB,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;CACP,eAAe;AACjB;;;;;;;;;;;AAYA,SAAgB,uBAAuB,QAAuC;CAC5E,MAAM,IAAI;CAEV,EAAE,oBAAoB;CAMtB,EAAE,SAAS;EACT,SAAS,EAAE,YAAY,kBAAkB;EACzC,UAAU,6BAA6B;EACvC,QAAQ,EAAE,GAAG,cAAc;CAC7B;CACA,EAAE,WAAW,CAAC;CAEd,EAAE,eAAe;CACjB,EAAE,qBAAqB;CACvB,EAAE,oBAAoB;CAEtB,OAAO,EACL,CAAC,OAAO,WAAW;EACjB,uBAAuB,MAAM;CAC/B,EACF;AACF;;;;;;AAOA,SAAgB,uBAAuB,QAAiC;CACtE,MAAM,IAAI;CACV,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;CACT,OAAO,EAAE;AACX"}

package/dist/{logger-BwS4ppwO.mjs → logger-CXQq9YIp.mjs}

@@ -1,8 +1,110 @@
 import { formatWithOptions } from "node:util";
 import chalk from "chalk";
 import { formatDistanceToNowStrict } from "date-fns";
-import { getBorderCharacters, table } from "table";
+import { eastAsianWidth } from "get-east-asian-width";
 
+//#region src/cli/shared/ascii-table.ts
+const ANSI_ESCAPE_PATTERN = /\x1b\[[0-9;]*m/g;
+const CARRIAGE_RETURN_PATTERN = /\r\n?/g;
+const graphemeSegmenter = new Intl.Segmenter(void 0, { granularity: "grapheme" });
+function maxOf(values, fallback = 0) {
+	return values.reduce((max, value) => value > max ? value : max, fallback);
+}
+const TAB_WIDTH = 8;
+function isStrippableControlCharacter(char) {
+	const codePoint = char.codePointAt(0) ?? 0;
+	if (char === "\n") return false;
+	return codePoint <= 31 || codePoint === 127;
+}
+function normalizeControlCharacters(value) {
+	const sgrSequences = value.match(ANSI_ESCAPE_PATTERN) ?? [];
+	return value.split(ANSI_ESCAPE_PATTERN).map((segment) => {
+		const chars = [];
+		for (const char of segment) if (char === "	") chars.push(" ".repeat(TAB_WIDTH));
+		else if (!isStrippableControlCharacter(char)) chars.push(char);
+		return chars.join("");
+	}).reduce((result, segment, i) => result + segment + (sgrSequences[i] ?? ""), "");
+}
+function sanitizeCell(cell) {
+	return normalizeControlCharacters(String(cell ?? "").replace(CARRIAGE_RETURN_PATTERN, "\n"));
+}
+const ZERO_WIDTH_CLUSTER_PATTERN = /^(?:\p{Default_Ignorable_Code_Point}|\p{Control}|\p{Format}|\p{Nonspacing_Mark}|\p{Enclosing_Mark}|\p{Surrogate})+$/v;
+const RGI_EMOJI_PATTERN = /^\p{RGI_Emoji}$/v;
+function displayWidth(value) {
+	let width = 0;
+	for (const { segment } of graphemeSegmenter.segment(value.replace(ANSI_ESCAPE_PATTERN, ""))) {
+		if (ZERO_WIDTH_CLUSTER_PATTERN.test(segment)) continue;
+		if (RGI_EMOJI_PATTERN.test(segment)) {
+			width += 2;
+			continue;
+		}
+		const codePoint = segment.codePointAt(0);
+		width += codePoint === void 0 ? 0 : eastAsianWidth(codePoint);
+	}
+	return width;
+}
+function toCellLines(cell) {
+	return cell.split("\n").map((text) => ({
+		text,
+		width: displayWidth(text)
+	}));
+}
+function padCell(cellLine, width) {
+	return cellLine.text + " ".repeat(Math.max(0, width - cellLine.width));
+}
+function renderBorder(left, join, right, columnWidths) {
+	return left + columnWidths.map((width) => "─".repeat(width + 2)).join(join) + right;
+}
+function validateConsistentColumnCount(rows) {
+	const columnCount = rows[0]?.length;
+	if (columnCount === void 0) return;
+	rows.forEach((row, index) => {
+		if (row.length !== columnCount) throw new Error(`renderTable: all rows must have the same number of columns (expected ${columnCount}, row ${index} has ${row.length}).`);
+	});
+}
+/**
+* Renders a 2D array of values as a table using single-line Unicode box-drawing borders.
+* Column widths account for East Asian wide characters (measured per grapheme cluster,
+* so combining marks and ZWJ emoji sequences aren't overcounted, non-printing clusters
+* such as a lone joiner or combining mark measure as 0, and flags, keycaps, and
+* VS16-forced emoji presentation are measured as 2 columns) and strip ANSI SGR (color/style)
+* escape codes before measuring. Use this instead of importing a table-rendering package
+* directly.
+* @param data - Table rows; every row must have the same number of columns. Each cell is
+* stringified (`null`/`undefined` become an empty string rather than the literal text
+* "null"/"undefined"), may contain embedded newlines, has `\r`/`\r\n` normalized to `\n`,
+* has tabs expanded to spaces, and has other control characters stripped.
+* @param config - Rendering options
+* @returns The rendered table terminated with a trailing newline, or `""` when there are no
+* rows or no columns to display
+*/
+function renderTable(data, config = {}) {
+	const rows = data.map((row) => row.map(sanitizeCell));
+	validateConsistentColumnCount(rows);
+	const rowCount = rows.length;
+	const columnCount = rows[0]?.length ?? 0;
+	if (rowCount === 0 || columnCount === 0) return "";
+	const rowsCellLines = rows.map((row) => Array.from({ length: columnCount }, (_, col) => toCellLines(row[col] ?? "")));
+	const columnWidths = Array.from({ length: columnCount }, (_, col) => maxOf(rowsCellLines.map((row) => maxOf((row[col] ?? []).map((line) => line.width)))));
+	const shouldDrawLine = (lineIndex) => config.singleLine ? lineIndex === 0 || lineIndex === rowCount : (config.drawHorizontalLine ?? (() => true))(lineIndex, rowCount);
+	const lines = [];
+	if (shouldDrawLine(0)) lines.push(renderBorder("┌", "┬", "┐", columnWidths));
+	rowsCellLines.forEach((cellLines, rowIndex) => {
+		const rowHeight = maxOf(cellLines.map((columnLines) => columnLines.length), 1);
+		for (let line = 0; line < rowHeight; line++) {
+			const cells = cellLines.map((columnLines, col) => padCell(columnLines[line] ?? {
+				text: "",
+				width: 0
+			}, columnWidths[col] ?? 0));
+			lines.push(`│ ${cells.join(" │ ")} │`);
+		}
+		if (rowIndex < rowCount - 1 && shouldDrawLine(rowIndex + 1)) lines.push(renderBorder("├", "┼", "┤", columnWidths));
+	});
+	if (shouldDrawLine(rowCount)) lines.push(renderBorder("└", "┴", "┘", columnWidths));
+	return `${lines.join("\n")}\n`;
+}
+
+//#endregion
 //#region src/cli/shared/parse-boolean.ts
 const TRUTHY_VALUES = /* @__PURE__ */ new Set([
 	"true",
@@ -196,25 +298,20 @@ const logger = {
 			return formatValue(value, pretty);
 		};
 		if (!Array.isArray(data)) {
-			const t = table(Object.entries(data).filter(([key]) => !isExcluded(key)).map(([key, value]) => [key, transformValue(key, value, data, true)]), {
-				singleLine: false,
-				border: getBorderCharacters("norc")
-			});
+			const t = renderTable(Object.entries(data).filter(([key]) => !isExcluded(key)).map(([key, value]) => [key, transformValue(key, value, data, true)]), { singleLine: false });
 			process.stdout.write(t);
 			return;
 		}
 		if (data.length === 0) return;
 		const headers = Array.from(new Set(data.flatMap((item) => Object.keys(item)))).filter((h) => !isExcluded(h));
-		const t = table([headers, ...data.map((item) => headers.map((header) => transformValue(header, item[header], item)))], {
-			border: getBorderCharacters("norc"),
-			drawHorizontalLine: (lineIndex, rowCount) => {
-				return lineIndex === 0 || lineIndex === 1 || lineIndex === rowCount;
-			}
-		});
+		if (headers.length === 0) return;
+		const t = renderTable([headers, ...data.map((item) => headers.map((header) => transformValue(header, item[header], item)))], { drawHorizontalLine: (lineIndex, rowCount) => {
+			return lineIndex === 0 || lineIndex === 1 || lineIndex === rowCount;
+		} });
 		process.stdout.write(t);
 	}
 };
 
 //#endregion
-export { parseBoolean as a, symbols as i, logger as n, styles as r, CIPromptError as t };
-//# sourceMappingURL=logger-BwS4ppwO.mjs.map
+export { parseBoolean as a, symbols as i, logger as n, renderTable as o, styles as r, CIPromptError as t };
+//# sourceMappingURL=logger-CXQq9YIp.mjs.map