@telorun/kernel 0.48.0 → 0.50.0

package/dist/logging/normalize-attributes.js

@@ -0,0 +1,140 @@
+import { isLogValuer } from "@telorun/sdk";
+export const DEFAULT_ATTRIBUTE_LIMITS = {
+    attributeCount: 128,
+    valueLength: undefined,
+    depth: 10,
+    collectionElements: 1000,
+    deferredSteps: 100,
+};
+export const DEPTH_EXCEEDED = "[depth exceeded]";
+export const CIRCULAR = "[circular]";
+export function normalizeAttributes(input, options = {}) {
+    if (!input)
+        return { attributes: undefined, droppedCount: 0 };
+    const limits = options.limits ?? DEFAULT_ATTRIBUTE_LIMITS;
+    const censor = options.censor ?? "[redacted]";
+    const secrets = options.secretValues;
+    const root = {};
+    let droppedCount = 0;
+    let deferredBudget = limits.deferredSteps;
+    const keys = Object.keys(input);
+    const kept = keys.length > limits.attributeCount ? limits.attributeCount : keys.length;
+    droppedCount += keys.length - kept;
+    const stack = [];
+    for (let i = kept - 1; i >= 0; i -= 1) {
+        const key = keys[i];
+        stack.push({ source: input[key], parent: root, key, depth: 1, ancestors: [] });
+    }
+    while (stack.length > 0) {
+        const task = stack.pop();
+        let value = task.source;
+        if (isLogValuer(value)) {
+            if (deferredBudget <= 0) {
+                write(task, "[deferred limit exceeded]");
+                continue;
+            }
+            deferredBudget -= 1;
+            try {
+                value = value.toLogValue();
+            }
+            catch (err) {
+                write(task, `[deferred value threw: ${describeThrown(err)}]`);
+                continue;
+            }
+        }
+        if (value === null || value === undefined) {
+            // `null` is a valid attribute value and is preserved (§6.1). `undefined`
+            // has no AnyValue variant, so it normalizes to the empty variant.
+            write(task, null);
+            continue;
+        }
+        const type = typeof value;
+        if (type === "string") {
+            write(task, scrubString(value, secrets, censor, limits.valueLength));
+            continue;
+        }
+        if (type === "boolean" || type === "bigint") {
+            write(task, value);
+            continue;
+        }
+        if (type === "number") {
+            const num = value;
+            // JSON has no representation for these; emitting them raw produces
+            // invalid output, so they render as their spelling instead.
+            write(task, Number.isFinite(num) ? num : String(num));
+            continue;
+        }
+        if (value instanceof Uint8Array) {
+            write(task, value);
+            continue;
+        }
+        if (type !== "object") {
+            // Functions and symbols have no AnyValue variant.
+            write(task, `[${type}]`);
+            continue;
+        }
+        const object = value;
+        if (task.ancestors.includes(object)) {
+            write(task, CIRCULAR);
+            continue;
+        }
+        if (task.depth >= limits.depth) {
+            write(task, DEPTH_EXCEEDED);
+            continue;
+        }
+        const ancestors = [...task.ancestors, object];
+        if (Array.isArray(value)) {
+            const total = value.length;
+            const keep = total > limits.collectionElements ? limits.collectionElements : total;
+            const array = new Array(keep);
+            write(task, array);
+            if (keep < total)
+                array.push(`[truncated: ${keep} of ${total} elements]`);
+            for (let i = keep - 1; i >= 0; i -= 1) {
+                stack.push({ source: value[i], parent: array, key: i, depth: task.depth + 1, ancestors });
+            }
+            continue;
+        }
+        if (value instanceof Date) {
+            write(task, value.toISOString());
+            continue;
+        }
+        const record = value;
+        const entryKeys = Object.keys(record);
+        const keepKeys = entryKeys.length > limits.collectionElements ? limits.collectionElements : entryKeys.length;
+        const map = {};
+        write(task, map);
+        if (keepKeys < entryKeys.length) {
+            map["[truncated]"] = `${keepKeys} of ${entryKeys.length} entries`;
+        }
+        for (let i = keepKeys - 1; i >= 0; i -= 1) {
+            const key = entryKeys[i];
+            stack.push({
+                source: record[key],
+                parent: map,
+                key,
+                depth: task.depth + 1,
+                ancestors,
+            });
+        }
+    }
+    return { attributes: root, droppedCount };
+}
+function write(task, value) {
+    if (Array.isArray(task.parent))
+        task.parent[task.key] = value;
+    else
+        task.parent[task.key] = value;
+}
+function scrubString(value, secrets, censor, maxLength) {
+    const scrubbed = secrets?.has(value) ? censor : value;
+    if (maxLength === undefined || scrubbed.length <= maxLength)
+        return scrubbed;
+    return `${scrubbed.slice(0, maxLength)}[truncated ${scrubbed.length - maxLength} chars]`;
+}
+function describeThrown(err) {
+    if (err instanceof Error)
+        return `${err.name}: ${err.message}`;
+    return String(err);
+}
+//# sourceMappingURL=normalize-attributes.js.map

package/dist/logging/normalize-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-attributes.js","sourceRoot":"","sources":["../../src/logging/normalize-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAA8D,MAAM,cAAc,CAAC;AAgCvG,MAAM,CAAC,MAAM,wBAAwB,GAAoB;IACvD,cAAc,EAAE,GAAG;IACnB,WAAW,EAAE,SAAS;IACtB,KAAK,EAAE,EAAE;IACT,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,GAAG;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,kBAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAgCrC,MAAM,UAAU,mBAAmB,CACjC,KAAqC,EACrC,UAA4B,EAAE;IAE9B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAE9D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,wBAAwB,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAErC,MAAM,IAAI,GAA6B,EAAE,CAAC;IAC1C,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,IAAI,cAAc,GAAG,MAAM,CAAC,aAAa,CAAC;IAE1C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACvF,YAAY,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAEnC,MAAM,KAAK,GAAW,EAAE,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC1B,IAAI,KAAK,GAAY,IAAI,CAAC,MAAM,CAAC;QAEjC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;gBACzC,SAAS;YACX,CAAC;YACD,cAAc,IAAI,CAAC,CAAC;YACpB,IAAI,CAAC;gBACH,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;YAC7B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,IAAI,EAAE,0BAA0B,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC9D,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,yEAAyE;YACzE,kEAAkE;YAClE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC;QAE1B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,KAAe,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YAC/E,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,EAAE,KAAyB,CAAC,CAAC;YACvC,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,KAAe,CAAC;YAC5B,mEAAmE;YACnE,4DAA4D;YAC5D,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,kDAAkD;YAClD,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;YACzB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,KAAe,CAAC;QAE/B,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC5B,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;YAC3B,MAAM,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC;YACnF,MAAM,KAAK,GAAe,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1C,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACnB,IAAI,IAAI,GAAG,KAAK;gBAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,KAAK,YAAY,CAAC,CAAC;YAC1E,KAAK,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBACtC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5F,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,QAAQ,GACZ,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QAC9F,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjB,IAAI,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;YAChC,GAAG,CAAC,aAAa,CAAC,GAAG,GAAG,QAAQ,OAAO,SAAS,CAAC,MAAM,UAAU,CAAC;QACpE,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC;gBACT,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;gBACnB,MAAM,EAAE,GAAG;gBACX,GAAG;gBACH,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC;gBACrB,SAAS;aACV,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,KAAK,CAAC,IAAU,EAAE,KAAe;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAa,CAAC,GAAG,KAAK,CAAC;;QAClE,IAAI,CAAC,MAAmC,CAAC,IAAI,CAAC,GAAa,CAAC,GAAG,KAAK,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAClB,KAAa,EACb,OAAwC,EACxC,MAAc,EACd,SAA6B;IAE7B,MAAM,QAAQ,GAAG,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,IAAI,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC7E,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,cAAc,QAAQ,CAAC,MAAM,GAAG,SAAS,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,GAAG,YAAY,KAAK;QAAE,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC"}

package/dist/logging/record-buffer.d.ts

@@ -0,0 +1,24 @@
+import type { LogRecord } from "@telorun/sdk";
+import type { SinkBufferPolicy } from "./log-sink.js";
+/**
+ * The bounded buffer every asynchronous sink composes — `kernel/specs/logging.md`
+ * §10.3.
+ *
+ * The ecosystems disagree by default: Rust's `tracing-appender` drops, zap
+ * buffers 256 kB / 30 s, and pino has no bound at all. Telo therefore makes the
+ * policy explicit and required, and the buffer is never unbounded.
+ *
+ * `drop_old` has no precedent among the surveyed libraries, so it is implemented
+ * as specified — true ring-buffer semantics, evicting the oldest record — rather
+ * than by analogy to something else.
+ */
+export declare class RecordBuffer {
+    #private;
+    constructor(policy: SinkBufferPolicy, onDrop: () => void);
+    get size(): number;
+    get isFull(): boolean;
+    push(record: LogRecord): void;
+    /** Take everything buffered, leaving the buffer empty. */
+    drain(): LogRecord[];
+}
+//# sourceMappingURL=record-buffer.d.ts.map

package/dist/logging/record-buffer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-buffer.d.ts","sourceRoot":"","sources":["../../src/logging/record-buffer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEtD;;;;;;;;;;;GAWG;AACH,qBAAa,YAAY;;gBASX,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,IAAI;IAMxD,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,IAAI,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI;IAiB7B,0DAA0D;IAC1D,KAAK,IAAI,SAAS,EAAE;CAerB"}

package/dist/logging/record-buffer.js

@@ -0,0 +1,78 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _RecordBuffer_instances, _RecordBuffer_capacity, _RecordBuffer_policy, _RecordBuffer_onDrop, _RecordBuffer_items, _RecordBuffer_head, _RecordBuffer_compact;
+/**
+ * The bounded buffer every asynchronous sink composes — `kernel/specs/logging.md`
+ * §10.3.
+ *
+ * The ecosystems disagree by default: Rust's `tracing-appender` drops, zap
+ * buffers 256 kB / 30 s, and pino has no bound at all. Telo therefore makes the
+ * policy explicit and required, and the buffer is never unbounded.
+ *
+ * `drop_old` has no precedent among the surveyed libraries, so it is implemented
+ * as specified — true ring-buffer semantics, evicting the oldest record — rather
+ * than by analogy to something else.
+ */
+export class RecordBuffer {
+    constructor(policy, onDrop) {
+        _RecordBuffer_instances.add(this);
+        _RecordBuffer_capacity.set(this, void 0);
+        _RecordBuffer_policy.set(this, void 0);
+        _RecordBuffer_onDrop.set(this, void 0);
+        _RecordBuffer_items.set(this, []);
+        /** Index of the oldest record, so `drop_old` evicts in O(1) instead of
+         *  shifting the whole array on every overflow. */
+        _RecordBuffer_head.set(this, 0);
+        __classPrivateFieldSet(this, _RecordBuffer_capacity, Math.max(1, policy.buffer), "f");
+        __classPrivateFieldSet(this, _RecordBuffer_policy, policy, "f");
+        __classPrivateFieldSet(this, _RecordBuffer_onDrop, onDrop, "f");
+    }
+    get size() {
+        return __classPrivateFieldGet(this, _RecordBuffer_items, "f").length - __classPrivateFieldGet(this, _RecordBuffer_head, "f");
+    }
+    get isFull() {
+        return this.size >= __classPrivateFieldGet(this, _RecordBuffer_capacity, "f");
+    }
+    push(record) {
+        if (this.isFull) {
+            if (__classPrivateFieldGet(this, _RecordBuffer_policy, "f").onFull === "drop_old") {
+                __classPrivateFieldSet(this, _RecordBuffer_head, __classPrivateFieldGet(this, _RecordBuffer_head, "f") + 1, "f");
+                __classPrivateFieldGet(this, _RecordBuffer_instances, "m", _RecordBuffer_compact).call(this);
+            }
+            else {
+                // `drop_new` — and `block`, which never reaches here because a runtime
+                // that cannot honour it rejects the manifest at load rather than
+                // silently degrading to a dropping policy.
+                __classPrivateFieldGet(this, _RecordBuffer_onDrop, "f").call(this);
+                return;
+            }
+            __classPrivateFieldGet(this, _RecordBuffer_onDrop, "f").call(this);
+        }
+        __classPrivateFieldGet(this, _RecordBuffer_items, "f").push(record);
+    }
+    /** Take everything buffered, leaving the buffer empty. */
+    drain() {
+        const drained = __classPrivateFieldGet(this, _RecordBuffer_head, "f") === 0 ? __classPrivateFieldGet(this, _RecordBuffer_items, "f") : __classPrivateFieldGet(this, _RecordBuffer_items, "f").slice(__classPrivateFieldGet(this, _RecordBuffer_head, "f"));
+        __classPrivateFieldSet(this, _RecordBuffer_items, [], "f");
+        __classPrivateFieldSet(this, _RecordBuffer_head, 0, "f");
+        return drained;
+    }
+}
+_RecordBuffer_capacity = new WeakMap(), _RecordBuffer_policy = new WeakMap(), _RecordBuffer_onDrop = new WeakMap(), _RecordBuffer_items = new WeakMap(), _RecordBuffer_head = new WeakMap(), _RecordBuffer_instances = new WeakSet(), _RecordBuffer_compact = function _RecordBuffer_compact() {
+    // Reclaim the consumed prefix once it dominates the array, so a long-lived
+    // ring does not grow its backing store without bound.
+    if (__classPrivateFieldGet(this, _RecordBuffer_head, "f") > 32 && __classPrivateFieldGet(this, _RecordBuffer_head, "f") * 2 >= __classPrivateFieldGet(this, _RecordBuffer_items, "f").length) {
+        __classPrivateFieldSet(this, _RecordBuffer_items, __classPrivateFieldGet(this, _RecordBuffer_items, "f").slice(__classPrivateFieldGet(this, _RecordBuffer_head, "f")), "f");
+        __classPrivateFieldSet(this, _RecordBuffer_head, 0, "f");
+    }
+};
+//# sourceMappingURL=record-buffer.js.map

package/dist/logging/record-buffer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record-buffer.js","sourceRoot":"","sources":["../../src/logging/record-buffer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAGA;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,YAAY;IASvB,YAAY,MAAwB,EAAE,MAAkB;;QAR/C,yCAAkB;QAClB,uCAA0B;QAC1B,uCAAoB;QAC7B,8BAAsB,EAAE,EAAC;QACzB;0DACkD;QAClD,6BAAQ,CAAC,EAAC;QAGR,uBAAA,IAAI,0BAAa,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,MAAA,CAAC;QAC5C,uBAAA,IAAI,wBAAW,MAAM,MAAA,CAAC;QACtB,uBAAA,IAAI,wBAAW,MAAM,MAAA,CAAC;IACxB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,uBAAA,IAAI,2BAAO,CAAC,MAAM,GAAG,uBAAA,IAAI,0BAAM,CAAC;IACzC,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,IAAI,uBAAA,IAAI,8BAAU,CAAC;IACrC,CAAC;IAED,IAAI,CAAC,MAAiB;QACpB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,uBAAA,IAAI,4BAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBACvC,yGAAc,CAAC,MAAA,CAAC;gBAChB,uBAAA,IAAI,sDAAS,MAAb,IAAI,CAAW,CAAC;YAClB,CAAC;iBAAM,CAAC;gBACN,uEAAuE;gBACvE,iEAAiE;gBACjE,2CAA2C;gBAC3C,uBAAA,IAAI,4BAAQ,MAAZ,IAAI,CAAU,CAAC;gBACf,OAAO;YACT,CAAC;YACD,uBAAA,IAAI,4BAAQ,MAAZ,IAAI,CAAU,CAAC;QACjB,CAAC;QACD,uBAAA,IAAI,2BAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,0DAA0D;IAC1D,KAAK;QACH,MAAM,OAAO,GAAG,uBAAA,IAAI,0BAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAA,IAAI,2BAAO,CAAC,CAAC,CAAC,uBAAA,IAAI,2BAAO,CAAC,KAAK,CAAC,uBAAA,IAAI,0BAAM,CAAC,CAAC;QAC/E,uBAAA,IAAI,uBAAU,EAAE,MAAA,CAAC;QACjB,uBAAA,IAAI,sBAAS,CAAC,MAAA,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC;CAUF;;IAPG,2EAA2E;IAC3E,sDAAsD;IACtD,IAAI,uBAAA,IAAI,0BAAM,GAAG,EAAE,IAAI,uBAAA,IAAI,0BAAM,GAAG,CAAC,IAAI,uBAAA,IAAI,2BAAO,CAAC,MAAM,EAAE,CAAC;QAC5D,uBAAA,IAAI,uBAAU,uBAAA,IAAI,2BAAO,CAAC,KAAK,CAAC,uBAAA,IAAI,0BAAM,CAAC,MAAA,CAAC;QAC5C,uBAAA,IAAI,sBAAS,CAAC,MAAA,CAAC;IACjB,CAAC;AACH,CAAC"}

package/dist/logging/redact-attributes.d.ts

@@ -0,0 +1,45 @@
+import { type RedactionSegment } from "@telorun/analyzer";
+import type { ErrorValue, LogAttributes } from "@telorun/sdk";
+/**
+ * Path-based redaction — `kernel/specs/logging.md` §14.
+ *
+ * Only path-based redaction is portable across Node, Rust, and Go, so it is the
+ * only form specified normatively. Paths are compiled once at configuration
+ * time by the analyzer's hand-written parser (never by compiling source in the
+ * host language, §14.1) and applied here by *navigating* to each path rather
+ * than walking the whole value tree — which is what keeps an explicit path at
+ * §14.2's 1–2% cost instead of the 25–55% an intermediate wildcard pays.
+ *
+ * The key is always preserved and only the value replaced. Deletion destroys
+ * schema stability and hides that a field was present at all, so `remove` is
+ * offered for the cases that genuinely need it but is never the default.
+ */
+export declare const DEFAULT_CENSOR = "[redacted]";
+export interface RedactionPolicy {
+    paths: readonly CompiledRedactionPath[];
+    censor: string;
+    remove: boolean;
+}
+export interface CompiledRedactionPath {
+    /** The path as written, kept for diagnostics. */
+    source: string;
+    segments: readonly RedactionSegment[];
+}
+/** Compile a policy's paths once, at configuration time. Throws
+ *  `RedactionPathError` with the offending offset, so a bad path fails the
+ *  manifest rather than silently failing to redact at runtime. */
+export declare function compileRedactionPolicy(config: {
+    paths?: readonly string[];
+    censor?: string;
+    remove?: boolean;
+}): RedactionPolicy;
+export declare const EMPTY_REDACTION_POLICY: RedactionPolicy;
+/** Apply the policy to a record's attributes in place. The attributes have
+ *  already been normalized (§6.3), so collections are bounded and no cycle can
+ *  make the navigation diverge. */
+export declare function redactAttributes(attributes: LogAttributes | undefined, policy: RedactionPolicy): void;
+/** Redaction applies to the error as well as the attributes (§14). The error's
+ *  own fields are structural rather than user data, so a path addresses them by
+ *  their record spelling — `error.message`, `error.cause.message`. */
+export declare function redactError(error: ErrorValue | undefined, policy: RedactionPolicy): void;
+//# sourceMappingURL=redact-attributes.d.ts.map

package/dist/logging/redact-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-attributes.d.ts","sourceRoot":"","sources":["../../src/logging/redact-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,KAAK,EAAY,UAAU,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAExE;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,cAAc,eAAe,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACvC;AAED;;kEAEkE;AAClE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC7C,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,GAAG,eAAe,CASlB;AAED,eAAO,MAAM,sBAAsB,EAAE,eAIpC,CAAC;AAEF;;mCAEmC;AACnC,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,aAAa,GAAG,SAAS,EACrC,MAAM,EAAE,eAAe,GACtB,IAAI,CAGN;AAED;;sEAEsE;AACtE,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAIxF"}

package/dist/logging/redact-attributes.js

@@ -0,0 +1,152 @@
+import { parseRedactionPath } from "@telorun/analyzer";
+/**
+ * Path-based redaction — `kernel/specs/logging.md` §14.
+ *
+ * Only path-based redaction is portable across Node, Rust, and Go, so it is the
+ * only form specified normatively. Paths are compiled once at configuration
+ * time by the analyzer's hand-written parser (never by compiling source in the
+ * host language, §14.1) and applied here by *navigating* to each path rather
+ * than walking the whole value tree — which is what keeps an explicit path at
+ * §14.2's 1–2% cost instead of the 25–55% an intermediate wildcard pays.
+ *
+ * The key is always preserved and only the value replaced. Deletion destroys
+ * schema stability and hides that a field was present at all, so `remove` is
+ * offered for the cases that genuinely need it but is never the default.
+ */
+export const DEFAULT_CENSOR = "[redacted]";
+/** Compile a policy's paths once, at configuration time. Throws
+ *  `RedactionPathError` with the offending offset, so a bad path fails the
+ *  manifest rather than silently failing to redact at runtime. */
+export function compileRedactionPolicy(config) {
+    return {
+        paths: (config.paths ?? []).map((source) => ({
+            source,
+            segments: parseRedactionPath(source),
+        })),
+        censor: config.censor ?? DEFAULT_CENSOR,
+        remove: config.remove ?? false,
+    };
+}
+export const EMPTY_REDACTION_POLICY = {
+    paths: [],
+    censor: DEFAULT_CENSOR,
+    remove: false,
+};
+/** Apply the policy to a record's attributes in place. The attributes have
+ *  already been normalized (§6.3), so collections are bounded and no cycle can
+ *  make the navigation diverge. */
+export function redactAttributes(attributes, policy) {
+    if (!attributes || policy.paths.length === 0)
+        return;
+    for (const path of policy.paths)
+        applyPath(attributes, path.segments, policy);
+}
+/** Redaction applies to the error as well as the attributes (§14). The error's
+ *  own fields are structural rather than user data, so a path addresses them by
+ *  their record spelling — `error.message`, `error.cause.message`. */
+export function redactError(error, policy) {
+    if (!error || policy.paths.length === 0)
+        return;
+    const wrapper = { error: error };
+    for (const path of policy.paths)
+        applyPath(wrapper, path.segments, policy);
+}
+function applyPath(root, segments, policy) {
+    if (segments.length === 0)
+        return;
+    let frontier = [root];
+    for (let i = 0; i < segments.length - 1; i += 1) {
+        const segment = segments[i];
+        const next = [];
+        for (const container of frontier) {
+            if (segment.kind === "wildcard") {
+                for (const child of childrenOf(container))
+                    next.push(child);
+            }
+            else {
+                const child = readKey(container, segment.name);
+                if (child !== undefined)
+                    next.push(child);
+            }
+        }
+        if (next.length === 0)
+            return;
+        frontier = next;
+    }
+    const last = segments[segments.length - 1];
+    for (const container of frontier) {
+        if (last.kind === "wildcard") {
+            // Descending so that `remove: true` over an array — which splices each
+            // matched index — does not shift the indices still to be visited. Without
+            // this, `items[*]` with remove leaves every other element behind, which
+            // for the §14 security control means a secret is only partially removed.
+            // Order is irrelevant for the censor path.
+            const keys = keysOf(container);
+            for (let i = keys.length - 1; i >= 0; i -= 1)
+                writeKey(container, keys[i], policy);
+        }
+        else {
+            if (readKey(container, last.name) === undefined && !hasKey(container, last.name))
+                continue;
+            writeKey(container, last.name, policy);
+        }
+    }
+}
+function childrenOf(container) {
+    if (Array.isArray(container))
+        return container;
+    if (isPlainContainer(container))
+        return Object.values(container);
+    return [];
+}
+function keysOf(container) {
+    if (Array.isArray(container))
+        return container.map((_item, index) => index);
+    if (isPlainContainer(container))
+        return Object.keys(container);
+    return [];
+}
+function readKey(container, key) {
+    if (Array.isArray(container)) {
+        const index = Number(key);
+        return Number.isInteger(index) ? container[index] : undefined;
+    }
+    if (isPlainContainer(container))
+        return container[key];
+    return undefined;
+}
+function hasKey(container, key) {
+    if (Array.isArray(container)) {
+        const index = Number(key);
+        return Number.isInteger(index) && index >= 0 && index < container.length;
+    }
+    return isPlainContainer(container) && hasOwn(container, key);
+}
+function hasOwn(container, key) {
+    return Object.prototype.hasOwnProperty.call(container, key);
+}
+function writeKey(container, key, policy) {
+    if (Array.isArray(container)) {
+        const index = typeof key === "number" ? key : Number(key);
+        if (!Number.isInteger(index))
+            return;
+        if (policy.remove)
+            container.splice(index, 1);
+        else
+            container[index] = policy.censor;
+        return;
+    }
+    if (!isPlainContainer(container))
+        return;
+    const name = String(key);
+    if (!hasOwn(container, name))
+        return;
+    if (policy.remove)
+        delete container[name];
+    else
+        container[name] = policy.censor;
+}
+function isPlainContainer(value) {
+    return typeof value === "object" && value !== null && !(value instanceof Uint8Array);
+}
+//# sourceMappingURL=redact-attributes.js.map

package/dist/logging/redact-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-attributes.js","sourceRoot":"","sources":["../../src/logging/redact-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAyB,MAAM,mBAAmB,CAAC;AAG9E;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAc3C;;kEAEkE;AAClE,MAAM,UAAU,sBAAsB,CAAC,MAItC;IACC,OAAO;QACL,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC3C,MAAM;YACN,QAAQ,EAAE,kBAAkB,CAAC,MAAM,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,cAAc;QACvC,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAoB;IACrD,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,cAAc;IACtB,MAAM,EAAE,KAAK;CACd,CAAC;AAEF;;mCAEmC;AACnC,MAAM,UAAU,gBAAgB,CAC9B,UAAqC,EACrC,MAAuB;IAEvB,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACrD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAED;;sEAEsE;AACtE,MAAM,UAAU,WAAW,CAAC,KAA6B,EAAE,MAAuB;IAChF,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAChD,MAAM,OAAO,GAAkB,EAAE,KAAK,EAAE,KAA4B,EAAE,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,SAAS,CAChB,IAAmB,EACnB,QAAqC,EACrC,MAAuB;IAEvB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,IAAI,QAAQ,GAAc,CAAC,IAAI,CAAC,CAAC;IAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;QAC7B,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;YACjC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAChC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,SAAS,CAAC;oBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBAC/C,IAAI,KAAK,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC9B,QAAQ,GAAG,IAAI,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IAC5C,KAAK,MAAM,SAAS,IAAI,QAAQ,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC7B,uEAAuE;YACvE,0EAA0E;YAC1E,wEAAwE;YACxE,yEAAyE;YACzE,2CAA2C;YAC3C,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC;gBAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAE,EAAE,MAAM,CAAC,CAAC;QACtF,CAAC;aAAM,CAAC;YACN,IAAI,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC3F,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,SAAkB;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACjE,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,MAAM,CAAC,SAAkB;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5E,IAAI,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC/D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,OAAO,CAAC,SAAkB,EAAE,GAAW;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IACD,IAAI,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,MAAM,CAAC,SAAkB,EAAE,GAAW;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAC3E,CAAC;IACD,OAAO,gBAAgB,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,SAAkC,EAAE,GAAW;IAC7D,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,SAAkB,EAAE,GAAoB,EAAE,MAAuB;IACjF,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,OAAO;QACrC,IAAI,MAAM,CAAC,MAAM;YAAE,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;;YACzC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;QACtC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC;QAAE,OAAO;IACzC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;QAAE,OAAO;IACrC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;;QACrC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;AACvC,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC;AACvF,CAAC"}

package/dist/logging/sampler.d.ts

@@ -0,0 +1,34 @@
+import { type LogRecord } from "@telorun/sdk";
+/**
+ * Sampling — `kernel/specs/logging.md` §15. Off by default.
+ *
+ * The dedup key is (`severity_number`, `message`) rather than the attributes,
+ * which is what keeps it cheap: a repeated message throttles regardless of the
+ * per-occurrence data hanging off it.
+ *
+ * §15 permits a fixed-size counter table that accepts collisions, trading
+ * precision for speed. This implementation instead keeps an
+ * **insertion-ordered map bounded by an entry cap**, evicting the least recently
+ * created key on overflow. Memory stays bounded either way, but a collision can
+ * only ever *lose* a record that should have been emitted, and no throughput
+ * gain justified that.
+ */
+export interface SamplingConfig {
+    /** Records emitted unconditionally at the start of each window. */
+    first: number;
+    /** Thereafter every Nth record is emitted. `0` drops everything after the
+     *  first `first` in the window. */
+    thereafter: number;
+    /** Window length in milliseconds. */
+    tickMs: number;
+    /** Records at ERROR and above are not sampled by default (§15). */
+    sampleErrors?: boolean;
+}
+export declare class Sampler {
+    #private;
+    constructor(config: SamplingConfig);
+    /** `true` when the record should be emitted, `false` when it is sampled out.
+     *  A `false` result is counted under cause `sampled` by the caller. */
+    shouldEmit(record: LogRecord, now: number): boolean;
+}
+//# sourceMappingURL=sampler.d.ts.map

package/dist/logging/sampler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.d.ts","sourceRoot":"","sources":["../../src/logging/sampler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAE/D;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,cAAc;IAC7B,mEAAmE;IACnE,KAAK,EAAE,MAAM,CAAC;IACd;uCACmC;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,mEAAmE;IACnE,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AASD,qBAAa,OAAO;;gBAIN,MAAM,EAAE,cAAc;IAIlC;2EACuE;IACvE,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO;CA6BpD"}

package/dist/logging/sampler.js

@@ -0,0 +1,52 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _Sampler_instances, _Sampler_config, _Sampler_windows, _Sampler_evictOverflow;
+import { isErrorSeverity } from "@telorun/sdk";
+const MAX_TRACKED_KEYS = 4096;
+export class Sampler {
+    constructor(config) {
+        _Sampler_instances.add(this);
+        _Sampler_config.set(this, void 0);
+        _Sampler_windows.set(this, new Map());
+        __classPrivateFieldSet(this, _Sampler_config, config, "f");
+    }
+    /** `true` when the record should be emitted, `false` when it is sampled out.
+     *  A `false` result is counted under cause `sampled` by the caller. */
+    shouldEmit(record, now) {
+        if (!__classPrivateFieldGet(this, _Sampler_config, "f").sampleErrors && isErrorSeverity(record.severityNumber))
+            return true;
+        const key = `${record.severityNumber}\x00${record.message}`;
+        let window = __classPrivateFieldGet(this, _Sampler_windows, "f").get(key);
+        if (!window || now - window.start >= __classPrivateFieldGet(this, _Sampler_config, "f").tickMs) {
+            window = { start: now, count: 0 };
+            __classPrivateFieldGet(this, _Sampler_windows, "f").delete(key);
+            __classPrivateFieldGet(this, _Sampler_windows, "f").set(key, window);
+            __classPrivateFieldGet(this, _Sampler_instances, "m", _Sampler_evictOverflow).call(this);
+        }
+        window.count += 1;
+        if (window.count <= __classPrivateFieldGet(this, _Sampler_config, "f").first)
+            return true;
+        if (__classPrivateFieldGet(this, _Sampler_config, "f").thereafter <= 0)
+            return false;
+        const sinceFirst = window.count - __classPrivateFieldGet(this, _Sampler_config, "f").first;
+        return sinceFirst % __classPrivateFieldGet(this, _Sampler_config, "f").thereafter === 0;
+    }
+}
+_Sampler_config = new WeakMap(), _Sampler_windows = new WeakMap(), _Sampler_instances = new WeakSet(), _Sampler_evictOverflow = function _Sampler_evictOverflow() {
+    while (__classPrivateFieldGet(this, _Sampler_windows, "f").size > MAX_TRACKED_KEYS) {
+        const oldest = __classPrivateFieldGet(this, _Sampler_windows, "f").keys().next();
+        if (oldest.done)
+            return;
+        __classPrivateFieldGet(this, _Sampler_windows, "f").delete(oldest.value);
+    }
+};
+//# sourceMappingURL=sampler.js.map

package/dist/logging/sampler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sampler.js","sourceRoot":"","sources":["../../src/logging/sampler.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAkB,MAAM,cAAc,CAAC;AA6B/D,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAO9B,MAAM,OAAO,OAAO;IAIlB,YAAY,MAAsB;;QAHzB,kCAAwB;QACxB,2BAAW,IAAI,GAAG,EAAkB,EAAC;QAG5C,uBAAA,IAAI,mBAAW,MAAM,MAAA,CAAC;IACxB,CAAC;IAED;2EACuE;IACvE,UAAU,CAAC,MAAiB,EAAE,GAAW;QACvC,IAAI,CAAC,uBAAA,IAAI,uBAAQ,CAAC,YAAY,IAAI,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC;YAAE,OAAO,IAAI,CAAC;QAEtF,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,cAAc,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC;QAC5D,IAAI,MAAM,GAAG,uBAAA,IAAI,wBAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEpC,IAAI,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,uBAAA,IAAI,uBAAQ,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YAClC,uBAAA,IAAI,wBAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,uBAAA,IAAI,wBAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC/B,uBAAA,IAAI,kDAAe,MAAnB,IAAI,CAAiB,CAAC;QACxB,CAAC;QAED,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC;QAElB,IAAI,MAAM,CAAC,KAAK,IAAI,uBAAA,IAAI,uBAAQ,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,uBAAA,IAAI,uBAAQ,CAAC,UAAU,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAE/C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,GAAG,uBAAA,IAAI,uBAAQ,CAAC,KAAK,CAAC;QACrD,OAAO,UAAU,GAAG,uBAAA,IAAI,uBAAQ,CAAC,UAAU,KAAK,CAAC,CAAC;IACpD,CAAC;CASF;;IANG,OAAO,uBAAA,IAAI,wBAAS,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,uBAAA,IAAI,wBAAS,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,IAAI;YAAE,OAAO;QACxB,uBAAA,IAAI,wBAAS,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/logging/scope-config.d.ts

@@ -0,0 +1,32 @@
+import type { LogAttributes } from "@telorun/sdk";
+import type { RedactionPolicy } from "./redact-attributes.js";
+import type { SamplingConfig } from "./sampler.js";
+/**
+ * Per-module-context logging configuration — `kernel/specs/logging.md` §12.2.
+ *
+ * Resolved once when the import graph is built and held as plain values: there
+ * is no per-record lookup and no walk up the import chain at emit time.
+ *
+ * This is a **leaf type module** on purpose. `ScopeConfig` is stamped onto the
+ * generic `ModuleContext` and read by `internal-context` / `resource-context`,
+ * so having those import it from the 400-line `logging-pipeline` would point
+ * generic core plumbing at a specific subsystem's implementation. Keeping the
+ * type here — depending only on the two policy leaves and the SDK — keeps that
+ * dependency pointing at a type, not at the pipeline.
+ */
+export interface ScopeConfig {
+    /** The resolved level for this module context. Also the default a sink's own
+     *  `level` falls back to (§12.1). */
+    threshold: number;
+    redaction: RedactionPolicy;
+    sampling?: SamplingConfig;
+    /** Values bound to the manifest's `secrets:`, redacted with no configuration
+     *  (§14). Cascades down the import graph exactly as the threshold does. */
+    secretValues?: ReadonlySet<string>;
+    /** Dotted import-alias path of the emitting module context. Absent at root. */
+    scope?: string;
+    module?: string;
+    /** Resource-level attributes merged into every record from this scope. */
+    attributes?: LogAttributes;
+}
+//# sourceMappingURL=scope-config.d.ts.map

package/dist/logging/scope-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-config.d.ts","sourceRoot":"","sources":["../../src/logging/scope-config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,WAAW;IAC1B;yCACqC;IACrC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,eAAe,CAAC;IAC3B,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;+EAC2E;IAC3E,YAAY,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,UAAU,CAAC,EAAE,aAAa,CAAC;CAC5B"}

package/dist/logging/scope-config.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=scope-config.js.map

package/dist/logging/scope-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-config.js","sourceRoot":"","sources":["../../src/logging/scope-config.ts"],"names":[],"mappings":""}

package/dist/logging/span-id.d.ts

@@ -0,0 +1,24 @@
+/** Apply the process salt to a raw counter. Bijective, so uniqueness within the
+ *  process is preserved exactly. */
+export declare function saltSpanId(counter: number | bigint): bigint;
+/**
+ * Render a span id as exactly 16 lowercase hex characters. An all-zero id is
+ * invalid and is treated as absent rather than emitted, so this returns
+ * `undefined` for zero.
+ */
+export declare function formatSpanId(value: bigint | number): string | undefined;
+/** Format the salted form of a raw counter — the two steps a record emission
+ *  performs together. */
+export declare function formatSpanCounter(counter: number | bigint): string | undefined;
+/**
+ * Normalize a trace id for emission: exactly 32 lowercase hex characters. Ids
+ * are accepted in either case on ingest and always emitted lowercase. An
+ * all-zero or malformed id is treated as absent.
+ */
+export declare function normalizeTraceId(value: string | undefined): string | undefined;
+/** The `span_id` counterpart of {@link normalizeTraceId}, for ids arriving as
+ *  hex from an upstream rather than as a local counter. */
+export declare function normalizeSpanId(value: string | undefined): string | undefined;
+/** A fresh W3C-compatible 16-byte trace id. */
+export declare function newTraceId(): string;
+//# sourceMappingURL=span-id.d.ts.map