@telorun/kernel 0.48.0 → 0.50.0

package/dist/logging/file-sink.js

@@ -0,0 +1,72 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _FileSink_buffer, _FileSink_encode, _FileSink_fd, _FileSink_timer, _FileSink_closed;
+import { closeSync, openSync, writeSync } from "node:fs";
+import { encodeJsonLine } from "./encode-json.js";
+import { encodePrettyLine } from "./encode-pretty.js";
+import { DEFAULT_BUFFER_POLICY } from "./log-sink.js";
+import { RecordBuffer } from "./record-buffer.js";
+export class FileSink {
+    constructor(options) {
+        this.syncFlushable = true;
+        _FileSink_buffer.set(this, void 0);
+        _FileSink_encode.set(this, void 0);
+        _FileSink_fd.set(this, void 0);
+        _FileSink_timer.set(this, void 0);
+        _FileSink_closed.set(this, false);
+        this.sinkId = options.sinkId;
+        this.level = options.level;
+        const policy = options.policy ?? DEFAULT_BUFFER_POLICY;
+        __classPrivateFieldSet(this, _FileSink_buffer, new RecordBuffer(policy, options.onDrop), "f");
+        const encoding = options.encoding ?? "json";
+        __classPrivateFieldSet(this, _FileSink_encode, encoding === "pretty"
+            ? (record) => encodePrettyLine(record, { color: false })
+            : (record) => encodeJsonLine(record, { encodeBytes: options.encodeBytes }), "f");
+        __classPrivateFieldSet(this, _FileSink_fd, openSync(options.destination, "a"), "f");
+        __classPrivateFieldSet(this, _FileSink_timer, setInterval(() => this.flushSync(), policy.flushIntervalMs), "f");
+        // A pending flush tick must never be the reason a process stays alive; the
+        // shutdown flush is what guarantees the tail is written.
+        __classPrivateFieldGet(this, _FileSink_timer, "f").unref?.();
+    }
+    write(record) {
+        if (__classPrivateFieldGet(this, _FileSink_closed, "f"))
+            return;
+        __classPrivateFieldGet(this, _FileSink_buffer, "f").push(record);
+    }
+    async flush() {
+        this.flushSync();
+    }
+    flushSync() {
+        if (__classPrivateFieldGet(this, _FileSink_closed, "f"))
+            return;
+        const records = __classPrivateFieldGet(this, _FileSink_buffer, "f").drain();
+        if (records.length === 0)
+            return;
+        let payload = "";
+        for (const record of records)
+            payload += __classPrivateFieldGet(this, _FileSink_encode, "f").call(this, record);
+        writeSync(__classPrivateFieldGet(this, _FileSink_fd, "f"), payload);
+    }
+    async close() {
+        if (__classPrivateFieldGet(this, _FileSink_closed, "f"))
+            return;
+        this.flushSync();
+        __classPrivateFieldSet(this, _FileSink_closed, true, "f");
+        if (__classPrivateFieldGet(this, _FileSink_timer, "f")) {
+            clearInterval(__classPrivateFieldGet(this, _FileSink_timer, "f"));
+            __classPrivateFieldSet(this, _FileSink_timer, undefined, "f");
+        }
+        closeSync(__classPrivateFieldGet(this, _FileSink_fd, "f"));
+    }
+}
+_FileSink_buffer = new WeakMap(), _FileSink_encode = new WeakMap(), _FileSink_fd = new WeakMap(), _FileSink_timer = new WeakMap(), _FileSink_closed = new WeakMap();
+//# sourceMappingURL=file-sink.js.map

package/dist/logging/file-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-sink.js","sourceRoot":"","sources":["../../src/logging/file-sink.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzD,OAAO,EAAE,cAAc,EAAqB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAA+C,MAAM,eAAe,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAuBlD,MAAM,OAAO,QAAQ;IAWnB,YAAY,OAAwB;QAR3B,kBAAa,GAAG,IAAI,CAAC;QAErB,mCAAsB;QACtB,mCAAuC;QACvC,+BAAY;QACrB,kCAAmD;QACnD,2BAAU,KAAK,EAAC;QAGd,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,qBAAqB,CAAC;QACvD,uBAAA,IAAI,oBAAW,IAAI,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAA,CAAC;QACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC;QAC5C,uBAAA,IAAI,oBACF,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;YACxD,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,MAAA,CAAC;QAE/E,uBAAA,IAAI,gBAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC,MAAA,CAAC;QAE9C,uBAAA,IAAI,mBAAU,WAAW,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,eAAe,CAAC,MAAA,CAAC;QAC1E,2EAA2E;QAC3E,yDAAyD;QACxD,uBAAA,IAAI,uBAAkC,CAAC,KAAK,EAAE,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,MAAiB;QACrB,IAAI,uBAAA,IAAI,wBAAQ;YAAE,OAAO;QACzB,uBAAA,IAAI,wBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAED,SAAS;QACP,IAAI,uBAAA,IAAI,wBAAQ;YAAE,OAAO;QACzB,MAAM,OAAO,GAAG,uBAAA,IAAI,wBAAQ,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QACjC,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,OAAO,IAAI,uBAAA,IAAI,wBAAQ,MAAZ,IAAI,EAAS,MAAM,CAAC,CAAC;QAC9D,SAAS,CAAC,uBAAA,IAAI,oBAAI,EAAE,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,uBAAA,IAAI,wBAAQ;YAAE,OAAO;QACzB,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,uBAAA,IAAI,oBAAW,IAAI,MAAA,CAAC;QACpB,IAAI,uBAAA,IAAI,uBAAO,EAAE,CAAC;YAChB,aAAa,CAAC,uBAAA,IAAI,uBAAO,CAAC,CAAC;YAC3B,uBAAA,IAAI,mBAAU,SAAS,MAAA,CAAC;QAC1B,CAAC;QACD,SAAS,CAAC,uBAAA,IAAI,oBAAI,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/logging/index.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Structured logging — the Node.js implementation of `kernel/specs/logging.md`.
+ *
+ * The record model, severity scale, and `Logger` surface live in `@telorun/sdk`
+ * because module authors consume them; everything here is the runtime half —
+ * the pipeline, the encodings, the sinks, and the policies that gate emission.
+ * The redaction path grammar lives in `@telorun/analyzer` so `telo check` and
+ * the runtime share one parser rather than two that can drift.
+ */
+export { BOOTSTRAP_SINK_ID, createBootstrapWriter } from "./bootstrap-writer.js";
+export { decideColor } from "./color-precedence.js";
+export type { ColorDecisionInput, ColorSetting } from "./color-precedence.js";
+export { ConsoleSink } from "./console-sink.js";
+export { DEBUG_WIRE_SINK_ID, DebugWireSink } from "./debug-wire-sink.js";
+export type { ConsoleDestination, ConsoleEncoding, ConsoleSinkOptions } from "./console-sink.js";
+export { DropRegistry, PIPELINE_SINK_ID } from "./drop-accounting.js";
+export type { DropReport } from "./drop-accounting.js";
+export { base64Bytes, encodeJson, encodeJsonLine, toJsonProfile } from "./encode-json.js";
+export type { BytesEncoder, JsonEncodeOptions } from "./encode-json.js";
+export { encodePretty, encodePrettyLine } from "./encode-pretty.js";
+export type { PrettyEncodeOptions } from "./encode-pretty.js";
+export { FileSink } from "./file-sink.js";
+export type { FileEncoding, FileSinkOptions } from "./file-sink.js";
+export { BLOCK_UNSUPPORTED, blockUnsupportedMessage, DEFAULT_BUFFER_POLICY, } from "./log-sink.js";
+export type { DropCause, LogSinkInstance, OnFull, SinkBufferPolicy } from "./log-sink.js";
+export { LoggingPipeline, ROOT_SCOPE_CONFIG } from "./logging-pipeline.js";
+export type { PipelineOptions, ScopeConfig, TraceContextProvider } from "./logging-pipeline.js";
+export { DEFAULT_ATTRIBUTE_LIMITS, normalizeAttributes, } from "./normalize-attributes.js";
+export type { AttributeLimits, NormalizedAttributes, NormalizeOptions } from "./normalize-attributes.js";
+export { compileRedactionPolicy, DEFAULT_CENSOR, EMPTY_REDACTION_POLICY, redactAttributes, redactError, } from "./redact-attributes.js";
+export type { CompiledRedactionPath, RedactionPolicy } from "./redact-attributes.js";
+export { RecordBuffer } from "./record-buffer.js";
+export { Sampler } from "./sampler.js";
+export type { SamplingConfig } from "./sampler.js";
+export { formatSpanCounter, formatSpanId, newTraceId, normalizeSpanId, normalizeTraceId, saltSpanId, } from "./span-id.js";
+export { toErrorValue } from "./to-error-value.js";
+export { formatTraceParent, parseTraceParent, parseTraceState, TRACE_FLAG_RANDOM, TRACE_FLAG_SAMPLED, } from "./trace-parent.js";
+export type { TraceContext } from "./trace-parent.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/logging/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logging/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzE,YAAY,EAAE,kBAAkB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1F,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACpE,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC1C,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,YAAY,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AACzG,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAChC,YAAY,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACrF,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/logging/index.js

@@ -0,0 +1,27 @@
+/**
+ * Structured logging — the Node.js implementation of `kernel/specs/logging.md`.
+ *
+ * The record model, severity scale, and `Logger` surface live in `@telorun/sdk`
+ * because module authors consume them; everything here is the runtime half —
+ * the pipeline, the encodings, the sinks, and the policies that gate emission.
+ * The redaction path grammar lives in `@telorun/analyzer` so `telo check` and
+ * the runtime share one parser rather than two that can drift.
+ */
+export { BOOTSTRAP_SINK_ID, createBootstrapWriter } from "./bootstrap-writer.js";
+export { decideColor } from "./color-precedence.js";
+export { ConsoleSink } from "./console-sink.js";
+export { DEBUG_WIRE_SINK_ID, DebugWireSink } from "./debug-wire-sink.js";
+export { DropRegistry, PIPELINE_SINK_ID } from "./drop-accounting.js";
+export { base64Bytes, encodeJson, encodeJsonLine, toJsonProfile } from "./encode-json.js";
+export { encodePretty, encodePrettyLine } from "./encode-pretty.js";
+export { FileSink } from "./file-sink.js";
+export { BLOCK_UNSUPPORTED, blockUnsupportedMessage, DEFAULT_BUFFER_POLICY, } from "./log-sink.js";
+export { LoggingPipeline, ROOT_SCOPE_CONFIG } from "./logging-pipeline.js";
+export { DEFAULT_ATTRIBUTE_LIMITS, normalizeAttributes, } from "./normalize-attributes.js";
+export { compileRedactionPolicy, DEFAULT_CENSOR, EMPTY_REDACTION_POLICY, redactAttributes, redactError, } from "./redact-attributes.js";
+export { RecordBuffer } from "./record-buffer.js";
+export { Sampler } from "./sampler.js";
+export { formatSpanCounter, formatSpanId, newTraceId, normalizeSpanId, normalizeTraceId, saltSpanId, } from "./span-id.js";
+export { toErrorValue } from "./to-error-value.js";
+export { formatTraceParent, parseTraceParent, parseTraceState, TRACE_FLAG_RANDOM, TRACE_FLAG_SAMPLED, } from "./trace-parent.js";
+//# sourceMappingURL=index.js.map

package/dist/logging/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logging/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAE1F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEpE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE3E,OAAO,EACL,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,gBAAgB,EAChB,WAAW,GACZ,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,UAAU,EACV,eAAe,EACf,gBAAgB,EAChB,UAAU,GACX,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,mBAAmB,CAAC"}

package/dist/logging/kernel-logging.d.ts

@@ -0,0 +1,110 @@
+import { type LogAttributes, type Logger, type ResourceRef } from "@telorun/sdk";
+import type { DropCause } from "./log-sink.js";
+import { type LoggingHost } from "./logging-host.js";
+import { LoggingPipeline, type ScopeConfig, type TraceContextProvider } from "./logging-pipeline.js";
+/**
+ * The kernel's ownership of the logging pipeline — `kernel/specs/logging.md`
+ * §12.
+ *
+ * Sequencing is the whole job here. An internal console writer covers process
+ * start through manifest validation, because declared sinks cannot instantiate
+ * before the block that declares them has been validated. Once the manifest
+ * resolves, the declared configuration takes over: eager sinks attach, buffered
+ * records replay, and the bootstrap writer steps aside.
+ */
+/** The raw `logging:` block as authored, after CEL evaluation. */
+export interface LoggingManifestBlock {
+    level?: string;
+    attributes?: LogAttributes;
+    redact?: {
+        paths?: string[];
+        censor?: string;
+        remove?: boolean;
+    };
+    sampling?: {
+        first?: number;
+        thereafter?: number;
+        tick?: string;
+        sampleErrors?: boolean;
+    };
+    sinks?: unknown[];
+}
+/** The module-context tree as far as logging is concerned — just enough to walk
+ *  children and read each one's resolved scope config, declared structurally so
+ *  this file stays independent of the concrete `ModuleContext`. */
+export interface LoggingContextNode {
+    readonly children?: readonly LoggingContextNode[];
+    getLoggingConfig?(): ScopeConfig | undefined;
+}
+export declare class KernelLogging {
+    #private;
+    readonly pipeline: LoggingPipeline;
+    readonly host: LoggingHost;
+    constructor(options: {
+        env: Record<string, string | undefined>;
+        stdout: NodeJS.WritableStream;
+        stderr: NodeJS.WritableStream;
+        /** The process's real stderr — §8.4's fallback diagnostic stream. Kept
+         *  distinct from the kernel's injectable `stderr` so a captured stream can
+         *  never swallow the report that the capture itself failed. */
+        fallbackStream?: {
+            write(chunk: string): unknown;
+        };
+    });
+    get rootScope(): ScopeConfig;
+    setTraceContextProvider(provider: TraceContextProvider | undefined): void;
+    recordDrop(sinkId: string, cause: DropCause, count?: number): void;
+    /**
+     * Adopt the manifest's declared configuration. Called as soon as the
+     * `logging:` block has been validated — after that point the bootstrap default
+     * is no longer in force.
+     */
+    applyRootConfig(block: LoggingManifestBlock | undefined, secretValues?: ReadonlySet<string>): void;
+    /**
+     * Detach the bootstrap writer and stop holding records for replay. Called once
+     * every declared sink has attached: the buffer exists to cover the pre-attach
+     * window, and a consumer connecting later (the debug wire) wants the live
+     * stream rather than the whole process history.
+     *
+     * When the manifest declares no sinks at all, the runtime behaves exactly as
+     * if a single `Telo.ConsoleSink` were declared — "pretty logs on stderr in a
+     * terminal, JSON when piped", with no imports.
+     *
+     * That equivalence is why the bootstrap writer is *replaced* here rather than
+     * promoted in place. The bootstrap writer is pinned at `info` (§12.3), but a
+     * declared `Telo.ConsoleSink` with no explicit `level:` takes the resolved
+     * scope threshold — so promoting the fixed-`info` writer would silently ignore
+     * a root `logging.level`, in both directions (a `debug` never lowers the gate,
+     * a `warn` never raises it). The fresh sink is built at the resolved threshold,
+     * so `logging: { level: debug }` with no `sinks:` behaves as documented.
+     */
+    sealBootstrap(manifests: readonly {
+        kind?: string;
+    }[]): void;
+    /** A logger scoped to a module context, stamped with a resource identity. */
+    createLogger(scope: ScopeConfig | undefined, resource?: ResourceRef): Logger;
+    /**
+     * Every module context's resolved logging configuration, keyed by its dotted
+     * import-alias path (`Api.Domain.Db`); the root is keyed `""`.
+     *
+     * This closes §12.2's loop between reading and configuring: the `scope` on a
+     * log line is exactly the path you write in the manifest to change that
+     * instance's level, and this answers "what level did that path actually
+     * resolve to" without re-deriving the cascade by hand. The tree walk is
+     * logging logic, so it lives here rather than on the orchestrator.
+     */
+    scopesFrom(rootContext: LoggingContextNode | undefined): Map<string, ScopeConfig>;
+    /** The kernel's own logger — used for diagnostics the kernel emits about
+     *  itself, which §13.1 requires to go through this pipeline rather than to
+     *  `process.stderr` or `console.*`. */
+    kernelLogger(): Logger;
+    shutdown(): Promise<void>;
+}
+/**
+ * Merge a `logging:` block over an inherited configuration. Config cascades and
+ * may be narrowed at each hop, which is what makes a dependency you do not own
+ * diagnosable — raising `Api`'s level lifts everything beneath it without
+ * editing `Api`'s manifest (§12.2).
+ */
+export declare function buildScopeConfig(block: LoggingManifestBlock | undefined, inherited: ScopeConfig): ScopeConfig;
+//# sourceMappingURL=kernel-logging.d.ts.map

package/dist/logging/kernel-logging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-logging.d.ts","sourceRoot":"","sources":["../../src/logging/kernel-logging.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,MAAM,EACX,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AAItB,OAAO,KAAK,EAAE,SAAS,EAAmB,MAAM,eAAe,CAAC;AAChE,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAGrG;;;;;;;;;GASG;AAEH,kEAAkE;AAClE,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjE,QAAQ,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IAC1F,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB;AAID;;mEAEmE;AACnE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAClD,gBAAgB,CAAC,IAAI,WAAW,GAAG,SAAS,CAAC;CAC9C;AAaD,qBAAa,aAAa;;IACxB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;gBAaf,OAAO,EAAE;QACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;QAC9B,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;QAC9B;;uEAE+D;QAC/D,cAAc,CAAC,EAAE;YAAE,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAA;SAAE,CAAC;KACpD;IA0BD,IAAI,SAAS,IAAI,WAAW,CAE3B;IAED,uBAAuB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,SAAS,GAAG,IAAI;IAIzE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,SAAI,GAAG,IAAI;IAM7D;;;;OAIG;IACH,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,SAAS,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI;IAQlG;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,SAAS,EAAE,SAAS;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,GAAG,IAAI;IA4B5D,6EAA6E;IAC7E,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,MAAM;IAI5E;;;;;;;;;OASG;IACH,UAAU,CAAC,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAAG,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC;IAcjF;;2CAEuC;IACvC,YAAY,IAAI,MAAM;IAIhB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;CAGhC;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,oBAAoB,GAAG,SAAS,EACvC,SAAS,EAAE,WAAW,GACrB,WAAW,CAoBb"}

package/dist/logging/kernel-logging.js

@@ -0,0 +1,199 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _KernelLogging_rootScope, _KernelLogging_bootstrap, _KernelLogging_sealed, _KernelLogging_streams;
+import { parseLevelName, SEVERITY, } from "@telorun/sdk";
+import { BOOTSTRAP_SINK_ID, createBootstrapWriter } from "./bootstrap-writer.js";
+import { ConsoleSink } from "./console-sink.js";
+import { compileRedactionPolicy, EMPTY_REDACTION_POLICY } from "./redact-attributes.js";
+import { createLoggingHost } from "./logging-host.js";
+import { LoggingPipeline } from "./logging-pipeline.js";
+const DEFAULT_SAMPLING_TICK_MS = 1000;
+/** How many sinks the root Application declared. Zero means the runtime behaves
+ *  exactly as if a single `Telo.ConsoleSink` were declared (§12.1), which is why
+ *  the bootstrap writer is replaced by a threshold-aware one rather than left as
+ *  the fixed-`info` writer. */
+function declaredSinkCount(manifests) {
+    const root = manifests.find((m) => m.kind === "Telo.Application");
+    return root?.logging?.sinks?.length ?? 0;
+}
+export class KernelLogging {
+    constructor(options) {
+        _KernelLogging_rootScope.set(this, void 0);
+        _KernelLogging_bootstrap.set(this, void 0);
+        _KernelLogging_sealed.set(this, false);
+        /** Kept so the zero-config console sink can be rebuilt at the resolved
+         *  threshold once the manifest is known (see {@link sealBootstrap}). */
+        _KernelLogging_streams.set(this, void 0);
+        __classPrivateFieldSet(this, _KernelLogging_streams, { env: options.env, stdout: options.stdout, stderr: options.stderr }, "f");
+        this.pipeline = new LoggingPipeline({
+            fallbackStream: options.fallbackStream ?? {
+                write: (chunk) => process.stderr.write(chunk),
+            },
+        });
+        // §12.3: a fixed default of `info` until the manifest resolves. This phase
+        // is the only one not manifest-governed, and it is deliberately not
+        // configurable by any other means.
+        __classPrivateFieldSet(this, _KernelLogging_rootScope, {
+            threshold: SEVERITY.info,
+            redaction: EMPTY_REDACTION_POLICY,
+        }, "f");
+        __classPrivateFieldSet(this, _KernelLogging_bootstrap, createBootstrapWriter(options), "f");
+        this.pipeline.attach(__classPrivateFieldGet(this, _KernelLogging_bootstrap, "f"));
+        this.host = createLoggingHost(this.pipeline, () => __classPrivateFieldGet(this, _KernelLogging_rootScope, "f").threshold, (sinkId, cause, count) => this.recordDrop(sinkId, cause, count));
+    }
+    get rootScope() {
+        return __classPrivateFieldGet(this, _KernelLogging_rootScope, "f");
+    }
+    setTraceContextProvider(provider) {
+        this.pipeline.setTraceContextProvider(provider);
+    }
+    recordDrop(sinkId, cause, count = 1) {
+        // Routed through the pipeline so the recovery warning §10.4 requires is
+        // emitted as an ordinary record and reaches every sink.
+        this.pipeline.recordDrop(sinkId, cause, count);
+    }
+    /**
+     * Adopt the manifest's declared configuration. Called as soon as the
+     * `logging:` block has been validated — after that point the bootstrap default
+     * is no longer in force.
+     */
+    applyRootConfig(block, secretValues) {
+        __classPrivateFieldSet(this, _KernelLogging_rootScope, buildScopeConfig(block, {
+            threshold: SEVERITY.info,
+            redaction: EMPTY_REDACTION_POLICY,
+            secretValues,
+        }), "f");
+    }
+    /**
+     * Detach the bootstrap writer and stop holding records for replay. Called once
+     * every declared sink has attached: the buffer exists to cover the pre-attach
+     * window, and a consumer connecting later (the debug wire) wants the live
+     * stream rather than the whole process history.
+     *
+     * When the manifest declares no sinks at all, the runtime behaves exactly as
+     * if a single `Telo.ConsoleSink` were declared — "pretty logs on stderr in a
+     * terminal, JSON when piped", with no imports.
+     *
+     * That equivalence is why the bootstrap writer is *replaced* here rather than
+     * promoted in place. The bootstrap writer is pinned at `info` (§12.3), but a
+     * declared `Telo.ConsoleSink` with no explicit `level:` takes the resolved
+     * scope threshold — so promoting the fixed-`info` writer would silently ignore
+     * a root `logging.level`, in both directions (a `debug` never lowers the gate,
+     * a `warn` never raises it). The fresh sink is built at the resolved threshold,
+     * so `logging: { level: debug }` with no `sinks:` behaves as documented.
+     */
+    sealBootstrap(manifests) {
+        if (__classPrivateFieldGet(this, _KernelLogging_sealed, "f"))
+            return;
+        __classPrivateFieldSet(this, _KernelLogging_sealed, true, "f");
+        if (__classPrivateFieldGet(this, _KernelLogging_bootstrap, "f")) {
+            this.pipeline.detach(__classPrivateFieldGet(this, _KernelLogging_bootstrap, "f"));
+            __classPrivateFieldSet(this, _KernelLogging_bootstrap, undefined, "f");
+        }
+        // Drop the replay buffer *before* attaching the zero-config sink, so the
+        // records the bootstrap writer already wrote live are not replayed into it.
+        this.pipeline.sealBootstrap();
+        if (declaredSinkCount(manifests) === 0) {
+            this.pipeline.attach(new ConsoleSink({
+                sinkId: BOOTSTRAP_SINK_ID,
+                level: __classPrivateFieldGet(this, _KernelLogging_rootScope, "f").threshold,
+                destination: "stderr",
+                encoding: "auto",
+                color: "auto",
+                env: __classPrivateFieldGet(this, _KernelLogging_streams, "f").env,
+                stdout: __classPrivateFieldGet(this, _KernelLogging_streams, "f").stdout,
+                stderr: __classPrivateFieldGet(this, _KernelLogging_streams, "f").stderr,
+            }));
+        }
+    }
+    /** A logger scoped to a module context, stamped with a resource identity. */
+    createLogger(scope, resource) {
+        return this.pipeline.createLogger(scope ?? __classPrivateFieldGet(this, _KernelLogging_rootScope, "f"), resource);
+    }
+    /**
+     * Every module context's resolved logging configuration, keyed by its dotted
+     * import-alias path (`Api.Domain.Db`); the root is keyed `""`.
+     *
+     * This closes §12.2's loop between reading and configuring: the `scope` on a
+     * log line is exactly the path you write in the manifest to change that
+     * instance's level, and this answers "what level did that path actually
+     * resolve to" without re-deriving the cascade by hand. The tree walk is
+     * logging logic, so it lives here rather than on the orchestrator.
+     */
+    scopesFrom(rootContext) {
+        const scopes = new Map();
+        scopes.set("", __classPrivateFieldGet(this, _KernelLogging_rootScope, "f"));
+        const visit = (context) => {
+            for (const child of context.children ?? []) {
+                const config = child.getLoggingConfig?.();
+                if (config?.scope)
+                    scopes.set(config.scope, config);
+                visit(child);
+            }
+        };
+        if (rootContext)
+            visit(rootContext);
+        return scopes;
+    }
+    /** The kernel's own logger — used for diagnostics the kernel emits about
+     *  itself, which §13.1 requires to go through this pipeline rather than to
+     *  `process.stderr` or `console.*`. */
+    kernelLogger() {
+        return this.pipeline.createLogger(__classPrivateFieldGet(this, _KernelLogging_rootScope, "f"), undefined);
+    }
+    async shutdown() {
+        await this.pipeline.close();
+    }
+}
+_KernelLogging_rootScope = new WeakMap(), _KernelLogging_bootstrap = new WeakMap(), _KernelLogging_sealed = new WeakMap(), _KernelLogging_streams = new WeakMap();
+/**
+ * Merge a `logging:` block over an inherited configuration. Config cascades and
+ * may be narrowed at each hop, which is what makes a dependency you do not own
+ * diagnosable — raising `Api`'s level lifts everything beneath it without
+ * editing `Api`'s manifest (§12.2).
+ */
+export function buildScopeConfig(block, inherited) {
+    if (!block)
+        return inherited;
+    const level = block.level ? parseLevelName(block.level) : undefined;
+    return {
+        threshold: level ?? inherited.threshold,
+        redaction: block.redact
+            ? compileRedactionPolicy({
+                paths: block.redact.paths,
+                censor: block.redact.censor,
+                remove: block.redact.remove,
+            })
+            : inherited.redaction,
+        sampling: block.sampling ? toSamplingConfig(block.sampling) : inherited.sampling,
+        secretValues: inherited.secretValues,
+        scope: inherited.scope,
+        module: inherited.module,
+        attributes: block.attributes ?? inherited.attributes,
+    };
+}
+function toSamplingConfig(sampling) {
+    return {
+        first: sampling.first ?? 0,
+        thereafter: sampling.thereafter ?? 0,
+        tickMs: sampling.tick ? parseTickMs(sampling.tick) : DEFAULT_SAMPLING_TICK_MS,
+        sampleErrors: sampling.sampleErrors ?? false,
+    };
+}
+function parseTickMs(tick) {
+    const match = /^\s*(\d+(?:\.\d+)?)\s*(ms|s|m|h)\s*$/.exec(tick);
+    if (!match)
+        return DEFAULT_SAMPLING_TICK_MS;
+    const unit = { ms: 1, s: 1000, m: 60000, h: 3600000 }[match[2]];
+    return Number(match[1]) * unit;
+}
+//# sourceMappingURL=kernel-logging.js.map

package/dist/logging/kernel-logging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-logging.js","sourceRoot":"","sources":["../../src/logging/kernel-logging.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EACL,cAAc,EACd,QAAQ,GAKT,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACjF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAExF,OAAO,EAAE,iBAAiB,EAAoB,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,eAAe,EAA+C,MAAM,uBAAuB,CAAC;AAuBrG,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAUtC;;;+BAG+B;AAC/B,SAAS,iBAAiB,CAAC,SAAuC;IAChE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAEnD,CAAC;IACd,OAAO,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,OAAO,aAAa;IAexB,YAAY,OAQX;QAnBD,2CAAwB;QACxB,2CAAwC;QACxC,gCAAU,KAAK,EAAC;QAChB;gFACwE;QAC/D,yCAIP;QAWA,uBAAA,IAAI,0BAAY,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAA,CAAC;QACrF,IAAI,CAAC,QAAQ,GAAG,IAAI,eAAe,CAAC;YAClC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI;gBACxC,KAAK,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;aACtD;SACF,CAAC,CAAC;QAEH,2EAA2E;QAC3E,oEAAoE;QACpE,mCAAmC;QACnC,uBAAA,IAAI,4BAAc;YAChB,SAAS,EAAE,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,sBAAsB;SAClC,MAAA,CAAC;QAEF,uBAAA,IAAI,4BAAc,qBAAqB,CAAC,OAAO,CAAC,MAAA,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAA,IAAI,gCAAW,CAAC,CAAC;QAEtC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAC3B,IAAI,CAAC,QAAQ,EACb,GAAG,EAAE,CAAC,uBAAA,IAAI,gCAAW,CAAC,SAAS,EAC/B,CAAC,MAAc,EAAE,KAAgB,EAAE,KAAc,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAC5F,CAAC;IACJ,CAAC;IAED,IAAI,SAAS;QACX,OAAO,uBAAA,IAAI,gCAAW,CAAC;IACzB,CAAC;IAED,uBAAuB,CAAC,QAA0C;QAChE,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,KAAgB,EAAE,KAAK,GAAG,CAAC;QACpD,wEAAwE;QACxE,wDAAwD;QACxD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,KAAuC,EAAE,YAAkC;QACzF,uBAAA,IAAI,4BAAc,gBAAgB,CAAC,KAAK,EAAE;YACxC,SAAS,EAAE,QAAQ,CAAC,IAAI;YACxB,SAAS,EAAE,sBAAsB;YACjC,YAAY;SACb,CAAC,MAAA,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CAAC,SAAuC;QACnD,IAAI,uBAAA,IAAI,6BAAQ;YAAE,OAAO;QACzB,uBAAA,IAAI,yBAAW,IAAI,MAAA,CAAC;QAEpB,IAAI,uBAAA,IAAI,gCAAW,EAAE,CAAC;YACpB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAA,IAAI,gCAAW,CAAC,CAAC;YACtC,uBAAA,IAAI,4BAAc,SAAS,MAAA,CAAC;QAC9B,CAAC;QACD,yEAAyE;QACzE,4EAA4E;QAC5E,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAE9B,IAAI,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAClB,IAAI,WAAW,CAAC;gBACd,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,uBAAA,IAAI,gCAAW,CAAC,SAAS;gBAChC,WAAW,EAAE,QAAQ;gBACrB,QAAQ,EAAE,MAAM;gBAChB,KAAK,EAAE,MAAM;gBACb,GAAG,EAAE,uBAAA,IAAI,8BAAS,CAAC,GAAG;gBACtB,MAAM,EAAE,uBAAA,IAAI,8BAAS,CAAC,MAAM;gBAC5B,MAAM,EAAE,uBAAA,IAAI,8BAAS,CAAC,MAAM;aAC7B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,KAA8B,EAAE,QAAsB;QACjE,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI,uBAAA,IAAI,gCAAW,EAAE,QAAQ,CAAC,CAAC;IACxE,CAAC;IAED;;;;;;;;;OASG;IACH,UAAU,CAAC,WAA2C;QACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAA,IAAI,gCAAW,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,CAAC,OAA2B,EAAQ,EAAE;YAClD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;gBAC1C,IAAI,MAAM,EAAE,KAAK;oBAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBACpD,KAAK,CAAC,KAAK,CAAC,CAAC;YACf,CAAC;QACH,CAAC,CAAC;QACF,IAAI,WAAW;YAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACpC,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;2CAEuC;IACvC,YAAY;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,uBAAA,IAAI,gCAAW,EAAE,SAAS,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC9B,CAAC;CACF;;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAuC,EACvC,SAAsB;IAEtB,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,OAAO;QACL,SAAS,EAAE,KAAK,IAAI,SAAS,CAAC,SAAS;QACvC,SAAS,EAAE,KAAK,CAAC,MAAM;YACrB,CAAC,CAAC,sBAAsB,CAAC;gBACrB,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;gBACzB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM;aAC5B,CAAC;YACJ,CAAC,CAAC,SAAS,CAAC,SAAS;QACvB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ;QAChF,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS,CAAC,UAAU;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAuD;IAC/E,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,CAAC;QAC1B,UAAU,EAAE,QAAQ,CAAC,UAAU,IAAI,CAAC;QACpC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,wBAAwB;QAC7E,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,KAAK;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,MAAM,KAAK,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,KAAK;QAAE,OAAO,wBAAwB,CAAC;IAC5C,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAM,EAAE,CAAC,EAAE,OAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAA2B,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC"}

package/dist/logging/log-sink.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The sink contract now lives in `@telorun/sdk` — §10.2 keeps the sink set open
+ * to the ecosystem, so a third-party sink module implements it as an ordinary
+ * module author rather than importing a kernel-internal type. Re-exported here
+ * so the kernel's own imports keep one spelling.
+ */
+export { BLOCK_UNSUPPORTED, blockUnsupportedMessage, DEFAULT_BUFFER_POLICY, } from "@telorun/sdk";
+export type { DropCause, LoggingHost, LogSinkInstance, OnFull, SinkBufferPolicy, } from "@telorun/sdk";
+//# sourceMappingURL=log-sink.d.ts.map

package/dist/logging/log-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-sink.d.ts","sourceRoot":"","sources":["../../src/logging/log-sink.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,SAAS,EACT,WAAW,EACX,eAAe,EACf,MAAM,EACN,gBAAgB,GACjB,MAAM,cAAc,CAAC"}

package/dist/logging/log-sink.js

@@ -0,0 +1,8 @@
+/**
+ * The sink contract now lives in `@telorun/sdk` — §10.2 keeps the sink set open
+ * to the ecosystem, so a third-party sink module implements it as an ordinary
+ * module author rather than importing a kernel-internal type. Re-exported here
+ * so the kernel's own imports keep one spelling.
+ */
+export { BLOCK_UNSUPPORTED, blockUnsupportedMessage, DEFAULT_BUFFER_POLICY, } from "@telorun/sdk";
+//# sourceMappingURL=log-sink.js.map

package/dist/logging/log-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-sink.js","sourceRoot":"","sources":["../../src/logging/log-sink.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,cAAc,CAAC"}

package/dist/logging/logging-host.d.ts

@@ -0,0 +1,14 @@
+import { type DropCause, type LoggingHost } from "@telorun/sdk";
+export type { LoggingHost } from "@telorun/sdk";
+import type { LoggingPipeline } from "./logging-pipeline.js";
+/**
+ * The narrow facade a sink controller sees — `kernel/specs/logging.md` §12.1.
+ *
+ * A sink is a resource, so its controller runs under an ordinary
+ * `ResourceContext`; this is the one extra surface it needs. It is deliberately
+ * small: attach, detach, resolve a level, count a drop. Everything else about
+ * the pipeline stays private to the kernel, so a third-party sink shipped as a
+ * module depends on this contract and nothing deeper.
+ */
+export declare function createLoggingHost(pipeline: LoggingPipeline, scopeThreshold: () => number, recordDrop: (sinkId: string, cause: DropCause, count?: number) => void): LoggingHost;
+//# sourceMappingURL=logging-host.d.ts.map

package/dist/logging/logging-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging-host.d.ts","sourceRoot":"","sources":["../../src/logging/logging-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,KAAK,SAAS,EAAkB,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhG,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,eAAe,EACzB,cAAc,EAAE,MAAM,MAAM,EAC5B,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,GACrE,WAAW,CAcb"}

package/dist/logging/logging-host.js

@@ -0,0 +1,27 @@
+import { parseLevelName } from "@telorun/sdk";
+/**
+ * The narrow facade a sink controller sees — `kernel/specs/logging.md` §12.1.
+ *
+ * A sink is a resource, so its controller runs under an ordinary
+ * `ResourceContext`; this is the one extra surface it needs. It is deliberately
+ * small: attach, detach, resolve a level, count a drop. Everything else about
+ * the pipeline stays private to the kernel, so a third-party sink shipped as a
+ * module depends on this contract and nothing deeper.
+ */
+export function createLoggingHost(pipeline, scopeThreshold, recordDrop) {
+    return {
+        attach: (sink) => pipeline.attach(sink),
+        detach: (sink) => pipeline.detach(sink),
+        levelFor: (level) => {
+            if (!level)
+                return scopeThreshold();
+            const severity = parseLevelName(level);
+            // The schema constrains `level:` to the six named levels, so an unknown
+            // value here means the manifest bypassed validation; fall back rather than
+            // throw, because a logging misconfiguration must not break boot.
+            return severity ?? scopeThreshold();
+        },
+        recordDrop,
+    };
+}
+//# sourceMappingURL=logging-host.js.map

package/dist/logging/logging-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logging-host.js","sourceRoot":"","sources":["../../src/logging/logging-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAoD,MAAM,cAAc,CAAC;AAKhG;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAyB,EACzB,cAA4B,EAC5B,UAAsE;IAEtE,OAAO;QACL,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK;gBAAE,OAAO,cAAc,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAkB,CAAC,CAAC;YACpD,wEAAwE;YACxE,2EAA2E;YAC3E,iEAAiE;YACjE,OAAO,QAAQ,IAAI,cAAc,EAAE,CAAC;QACtC,CAAC;QACD,UAAU;KACX,CAAC;AACJ,CAAC"}