@telorun/sdk 0.49.0 → 0.54.0

package/dist/logger.js

@@ -0,0 +1,30 @@
+/** Resolve a {@link LogValuer} if the value is one, else pass it through. */
+export function isLogValuer(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.toLogValue === "function");
+}
+/** A logger that discards everything. Used where a logger is structurally
+ *  required before one is available, and by tests that assert silence. */
+export const NOOP_LOGGER = {
+    enabled: () => false,
+    log: () => { },
+    with: () => NOOP_LOGGER,
+    flush: async () => { },
+    trace: () => { },
+    debug: () => { },
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    fatal: () => { },
+};
+/** The bound-attribute merge of {@link Logger.with}, exposed so a runtime's
+ *  child-logger implementation and its conformance vectors share one definition
+ *  of "record attributes win". */
+export function mergeBoundAttributes(bound, record) {
+    if (!bound)
+        return record;
+    if (!record)
+        return bound;
+    return { ...bound, ...record };
+}

package/dist/resolve-ref-instance.d.ts

@@ -0,0 +1,39 @@
+import type { ModuleContext } from "./module-context.js";
+/** The slice of `ResourceContext` needed to resolve a reference. */
+export interface RefResolveContext {
+    readonly moduleContext: ModuleContext;
+}
+/**
+ * Resolve a `!ref` config field to a live instance of `T`. Controllers reach
+ * this as `ctx.resolveRef(value, guard, describe, expects)`; the standalone form
+ * is for callers holding only a `{ moduleContext }` slice rather than a full
+ * `ResourceContext`.
+ *
+ * Phase 5 injection normally replaces the slot with the live `ResourceInstance`
+ * before `init()` — local and cross-module refs alike, since injection resolves
+ * an aliased ref through the import's export table (and defers, rather than
+ * leaving a raw ref, when the import hasn't published its exports yet). So the
+ * common path here is the guard short-circuit.
+ *
+ * A raw {@link KindRef} still reaches a controller where injection does not
+ * reach the slot: a kind whose definition yields no field map, or a ref the
+ * controller obtained itself via `ctx.ensureKindRef`. Both are gaps worth
+ * closing in the kernel — until they are, both shapes must be accepted here, and
+ * an aliased ref routes through the import's exported scope because a bare local
+ * lookup would miss it.
+ *
+ * `guard` decides what counts as the right kind of instance — a duck-type check
+ * on the methods the caller will actually invoke, so a mis-wired ref fails with a
+ * clear message here rather than as `undefined is not a function` later.
+ * `describe` labels the owning resource and slot; `expects` names the contract
+ * the slot wants — the slot's own `x-telo-ref` string (`std/cache#Store`) — so
+ * the message says what was missing, not just that something was.
+ *
+ * @example
+ * const store = resolveRefInstance(
+ *   this.resource.store, this.ctx, isKvStore,
+ *   () => `Idempotency.Once "${name}": 'store'`, "std/kv-store#Store",
+ * );
+ */
+export declare function resolveRefInstance<T>(value: unknown, ctx: RefResolveContext, guard: (candidate: unknown) => candidate is T, describe: () => string, expects?: string): T;
+//# sourceMappingURL=resolve-ref-instance.d.ts.map

package/dist/resolve-ref-instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-ref-instance.d.ts","sourceRoot":"","sources":["../src/resolve-ref-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAIzD,oEAAoE;AACpE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,EAClC,KAAK,EAAE,OAAO,EACd,GAAG,EAAE,iBAAiB,EACtB,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,EAC7C,QAAQ,EAAE,MAAM,MAAM,EACtB,OAAO,CAAC,EAAE,MAAM,GACf,CAAC,CAiCH"}

package/dist/resolve-ref-instance.js

@@ -0,0 +1,57 @@
+import { RuntimeError } from "./types.js";
+/**
+ * Resolve a `!ref` config field to a live instance of `T`. Controllers reach
+ * this as `ctx.resolveRef(value, guard, describe, expects)`; the standalone form
+ * is for callers holding only a `{ moduleContext }` slice rather than a full
+ * `ResourceContext`.
+ *
+ * Phase 5 injection normally replaces the slot with the live `ResourceInstance`
+ * before `init()` — local and cross-module refs alike, since injection resolves
+ * an aliased ref through the import's export table (and defers, rather than
+ * leaving a raw ref, when the import hasn't published its exports yet). So the
+ * common path here is the guard short-circuit.
+ *
+ * A raw {@link KindRef} still reaches a controller where injection does not
+ * reach the slot: a kind whose definition yields no field map, or a ref the
+ * controller obtained itself via `ctx.ensureKindRef`. Both are gaps worth
+ * closing in the kernel — until they are, both shapes must be accepted here, and
+ * an aliased ref routes through the import's exported scope because a bare local
+ * lookup would miss it.
+ *
+ * `guard` decides what counts as the right kind of instance — a duck-type check
+ * on the methods the caller will actually invoke, so a mis-wired ref fails with a
+ * clear message here rather than as `undefined is not a function` later.
+ * `describe` labels the owning resource and slot; `expects` names the contract
+ * the slot wants — the slot's own `x-telo-ref` string (`std/cache#Store`) — so
+ * the message says what was missing, not just that something was.
+ *
+ * @example
+ * const store = resolveRefInstance(
+ *   this.resource.store, this.ctx, isKvStore,
+ *   () => `Idempotency.Once "${name}": 'store'`, "std/kv-store#Store",
+ * );
+ */
+export function resolveRefInstance(value, ctx, guard, describe, expects) {
+    // Phase-5-injected: already the instance.
+    if (guard(value))
+        return value;
+    const target = expects ? `resource satisfying \`${expects}\`` : "resource";
+    if (value === undefined || value === null) {
+        throw new RuntimeError("ERR_REF_REQUIRED", `${describe()} is required — reference a ${target}.`);
+    }
+    const ref = value;
+    if (typeof ref.name !== "string") {
+        throw new RuntimeError("ERR_REF_UNRESOLVED", `${describe()} must be a \`!ref\` to a ${target}.`);
+    }
+    // `Self` names the declaring library's own scope, so it resolves locally —
+    // it is an alias that crosses no import boundary.
+    const instance = ref.alias && ref.alias !== "Self"
+        ? ctx.moduleContext.resolveImportedInstance(ref.alias, ref.name)
+        : ctx.moduleContext.getInstance(ref.name);
+    if (!guard(instance)) {
+        const label = ref.alias ? `${ref.alias}.${ref.name}` : ref.name;
+        throw new RuntimeError("ERR_REF_UNRESOLVED", `${describe()} reference '${label}' did not resolve to a ${target}` +
+            `${instance === undefined ? " (nothing is registered under that name)" : ""}.`);
+    }
+    return instance;
+}

package/dist/resource-context.d.ts

@@ -1,8 +1,11 @@
 import type { CancellationSource, InvokeContext, OpenSpan, OpenSpanOptions } from "./cancellation.js";
 import { ControllerContext } from "./controller-context.js";
+import type { Logger } from "./logger.js";
+import type { LoggingHost } from "./log-sink.js";
 import { ControllerPolicy } from "./controller-policy.js";
 import { EvaluationContext } from "./evaluation-context.js";
 import { ModuleContext } from "./module-context.js";
+import type { KindRef } from "./ref.js";
 import { ResourceInstance } from "./resource-instance.js";
 import { ResourceManifest } from "./resource-manifest.js";
 import { RuntimeResource } from "./runtime-resource.js";
@@ -69,10 +72,33 @@ export interface ResourceContext extends ControllerContext {
     spawnChildContext(): EvaluationContext;
     transientChild(context: Record<string, any>): EvaluationContext;
     withManifests<T>(manifests: any[], fn: () => T): T;
+    /**
+     * Normalize a nested slot value to a {@link KindRef}. The value is an inline
+     * definition (`{ kind, …config }`), an already-normalized `{ kind, name }`
+     * ref, or a `!ref` sentinel. An inline definition is *registered* into this
+     * module's scope first — minting `resourceName` (or a generated one) as its
+     * name — so the returned ref always points at a resource the kernel knows.
+     *
+     * The inverse of {@link resolveRef}: this goes slot value → ref, that goes
+     * ref → live instance. Controllers that dispatch through
+     * `invokeResolved(kind, name, …)` want the ref, so the invocation keeps its
+     * identity for tracing and error wrapping.
+     */
+    ensureKindRef(value: any, resourceName?: string): KindRef;
+    /** @deprecated Renamed to {@link ensureKindRef} — it produces a reference
+     *  (registering an inline definition on the way), it does not resolve one. */
     resolveChildren(resource: any, resourceName?: string): {
         kind: string;
         name: string;
     };
+    /**
+     * Resolve a `!ref` config field to a live instance of `T`. See
+     * {@link resolveRefInstance} — this is the same resolution, reached through
+     * the context a controller already holds. `expects` names the contract the
+     * slot wants — its `x-telo-ref` string (`std/cache#Store`) — so a mis-wire
+     * says what was missing.
+     */
+    resolveRef<T>(value: unknown, guard: (candidate: unknown) => candidate is T, describe: () => string, expects?: string): T;
     validateSchema(value: any, schema: any): void;
     createSchemaValidator(schema: any): DataValidator;
     registerSchema(name: string, schema: object): void;
@@ -119,6 +145,28 @@ export interface ResourceContext extends ControllerContext {
      *  manifests. Use this when you need the full kind surface area visible from
      *  the module. */
     loadManifests(url: string): Promise<ResourceManifest[]>;
+    /**
+     * The structured logger for this resource — `kernel/specs/logging.md` §13.2.
+     *
+     * Ambient rather than a resource (D3), because it must work before any
+     * resource initializes. Records are automatically stamped with this
+     * resource's identity, its module, its import-alias scope, and the active
+     * dispatch span's trace and span ids — a controller never passes those.
+     *
+     * A controller emits diagnostics **only** through this. Writing to
+     * stdout/stderr for diagnostic purposes is forbidden; writing to stdout as
+     * *data* (as the `Console` module does) is a separate, legitimate concern and
+     * is unaffected.
+     */
+    readonly log: Logger;
+    /**
+     * Sink attach/detach and drop accounting — the surface a `Telo.Sink`
+     * controller needs and nothing else. §10.2 keeps the sink set open to the
+     * ecosystem, so a third-party sink module reaches the pipeline through this
+     * rather than through a kernel-internal import. Ordinary controllers use
+     * {@link log}.
+     */
+    readonly logging: LoggingHost;
     readonly moduleContext: ModuleContext;
     readonly env: Record<string, string | undefined>;
     readonly stdin: NodeJS.ReadableStream;

package/dist/resource-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-context.d.ts","sourceRoot":"","sources":["../src/resource-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B;gFAC4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;4EAGwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,aAAc,YAAW,aAAa;IACjD,OAAO;IAIP,QAAQ;CAGT;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,GAAG;IAAE,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEhG,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;;4EAKwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IACzC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;iCAE6B;IAC7B,wBAAwB,IAAI,kBAAkB,CAAC;IAC/C;;;;;2EAKuE;IACvE,WAAW,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C;;;;;kBAKc;IACd,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1F,cAAc,CAAC,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,aAAa,GAClB,OAAO,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IACvE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,CAAC;IACtC,iBAAiB,IAAI,iBAAiB,CAAC;IACvC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAAC;IAChE,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC;IAC9C,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,aAAa,CAAC;IAClD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/C,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACzD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;IACtD,kFAAkF;IAClF,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,aAAa,CAAC;IACtF,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,kBAAkB,CAAC,UAAU,EAAE,GAAG,GAAG,IAAI,CAAC;IAC1C;yDACqD;IACrD,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3F;;;;OAIG;IACH,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACpD;;;;;;;;;;;OAWG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS,CAAC;IAClC;;;;iEAI6D;IAC7D,cAAc,IAAI,MAAM,GAAG,SAAS,CAAC;IACrC;wDACoD;IACpD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5E;;;sBAGkB;IAClB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CACxC"}
+{"version":3,"file":"resource-context.d.ts","sourceRoot":"","sources":["../src/resource-context.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,WAAW,WAAW;IAC1B;gFAC4E;IAC5E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;4EAGwE;IACxE,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,IAAI,EAAE,GAAG,GAAG,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,aAAc,YAAW,aAAa;IACjD,OAAO;IAIP,QAAQ;CAGT;AAED,MAAM,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC,CAAC,GAAG;IAAE,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEhG,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B;;;;;4EAKwE;IACxE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI,CAAC;IACzC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;iCAE6B;IAC7B,wBAAwB,IAAI,kBAAkB,CAAC;IAC/C;;;;;2EAKuE;IACvE,WAAW,CAAC,EAAE,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC;IAC9C;;;;;kBAKc;IACd,QAAQ,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpF,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1F,cAAc,CAAC,OAAO,EACpB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,EAAE,OAAO,EACf,GAAG,CAAC,EAAE,aAAa,GAClB,OAAO,CAAC,GAAG,CAAC,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/C,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IACvE,gBAAgB,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,CAAC;IACtC,iBAAiB,IAAI,iBAAiB,CAAC;IACvC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,iBAAiB,CAAC;IAChE,aAAa,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD;;;;;;;;;;;OAWG;IACH,aAAa,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC1D;kFAC8E;IAC9E,eAAe,CAAC,QAAQ,EAAE,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtF;;;;;;OAMG;IACH,UAAU,CAAC,CAAC,EACV,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,CAAC,SAAS,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,EAC7C,QAAQ,EAAE,MAAM,MAAM,EACtB,OAAO,CAAC,EAAE,MAAM,GACf,CAAC,CAAC;IACL,cAAc,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC;IAC9C,qBAAqB,CAAC,MAAM,EAAE,GAAG,GAAG,aAAa,CAAC;IAClD,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACnD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IAC/C,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACzD,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,EAAE,GAAG,SAAS,CAAC;IACtD,kFAAkF;IAClF,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,SAAS,GAAG,aAAa,CAAC;IACtF,kBAAkB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjG,kBAAkB,CAAC,UAAU,EAAE,GAAG,GAAG,IAAI,CAAC;IAC1C;yDACqD;IACrD,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3F;;;;OAIG;IACH,mBAAmB,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACpD;;;;;;;;;;;OAWG;IACH,WAAW,IAAI,MAAM,GAAG,SAAS,CAAC;IAClC;;;;iEAI6D;IAC7D,cAAc,IAAI,MAAM,GAAG,SAAS,CAAC;IACrC;wDACoD;IACpD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC5E;;;sBAGkB;IAClB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACxD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;CACxC"}

package/dist/resource-instance.d.ts

@@ -6,7 +6,24 @@ export type ResourceInstance<TInput = Record<string, any>, TOutput = any> = Part
     init?(ctx?: ResourceContext): Promise<void>;
     teardown?(): void | Promise<void>;
     snapshot?(): Record<string, any> | Promise<Record<string, any>>;
+    /**
+     * Teardown ordering hint. Instances tear down in ascending priority — a
+     * higher number means *later*. Default `0`; within one priority the base
+     * order (reverse init) is preserved.
+     *
+     * This exists because the base order is reverse *insertion* order, which the
+     * multi-pass init retry can perturb, so a resource that must reliably outlive
+     * the rest at shutdown cannot express that through the dependency graph. Log
+     * sinks set {@link TEARDOWN_LAST} so they flush after every resource that
+     * might log while shutting down — a generic mechanism, not a logging-specific
+     * carve-out in the teardown path.
+     */
+    teardownPriority?: number;
 };
+/** Teardown-last priority (see {@link ResourceInstance.teardownPriority}). Log
+ *  sinks use it so anything logging during its own teardown still reaches a live
+ *  destination. */
+export declare const TEARDOWN_LAST = 1000;
 /** The kind+name an instance was resolved from. */
 export interface RefIdentity {
     kind: string;

package/dist/resource-instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-instance.d.ts","sourceRoot":"","sources":["../src/resource-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,IAAI,OAAO,CACjF,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAC3B,GACC,OAAO,CAAC,QAAQ,CAAC,GACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG;IAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;CACjE,CAAC;AAEJ,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,MAAuC,CAAC;AAE1E;sFACsF;AACtF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CASnF;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAExE"}
+{"version":3,"file":"resource-instance.d.ts","sourceRoot":"","sources":["../src/resource-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,MAAM,gBAAgB,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,GAAG,GAAG,IAAI,OAAO,CACjF,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAC3B,GACC,OAAO,CAAC,QAAQ,CAAC,GACjB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG;IAC3B,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEJ;;mBAEmB;AACnB,eAAO,MAAM,aAAa,OAAO,CAAC;AAElC,mDAAmD;AACnD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,EAAE,OAAO,MAAuC,CAAC;AAE1E;sFACsF;AACtF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CASnF;AAED,qEAAqE;AACrE,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAExE"}

package/dist/resource-instance.js

@@ -1,3 +1,7 @@
+/** Teardown-last priority (see {@link ResourceInstance.teardownPriority}). Log
+ *  sinks use it so anything logging during its own teardown still reaches a live
+ *  destination. */
+export const TEARDOWN_LAST = 1000;
 /**
  * Non-enumerable identity tag the kernel stamps on a live instance when it
  * injects a resolved `!ref` into a slot. A consumer that holds only the bare

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telorun/sdk",
-  "version": "0.49.0",
+  "version": "0.54.0",
   "description": "Telo SDK - Public API for Telo module authors.",
   "keywords": [
     "telo",

package/src/dispatch-invoke-ref.ts

@@ -1,6 +1,8 @@
 import type { InvokeContext } from "./cancellation.js";
 import type { Invocable } from "./capabilities/invokable.js";
 import type { ModuleContext } from "./module-context.js";
+import type { KindRef } from "./ref.js";
+import { resolveRefInstance } from "./resolve-ref-instance.js";
 import { getRefIdentity, type ResourceInstance } from "./resource-instance.js";
 
 /** The context a decorator kind composes to dispatch its wrapped target. */
@@ -31,25 +33,23 @@ export function resolveInvocableDispatcher(
   ctx: DispatchContext,
   describe: () => string,
 ): (inputs: Record<string, unknown>, invokeCtx?: InvokeContext) => Promise<unknown> {
-  if (field && typeof (field as Invocable).invoke === "function") {
-    const instance = field as ResourceInstance & Invocable;
-    const id = getRefIdentity(field as object);
-    return (inputs, invokeCtx) =>
-      id
-        ? ctx.invokeResolved(id.kind, id.name, instance, inputs, invokeCtx)
-        : instance.invoke(inputs, invokeCtx);
+  const target = resolveRefInstance(
+    field,
+    ctx,
+    isInvocableInstance,
+    () => `${describe()}: 'invoke'`,
+    "telo#Invocable",
+  );
+  // Dispatch through the traced chokepoint needs the target's kind+name: from
+  // the `!ref` identity the kernel stamped at injection, else from the raw ref.
+  const id = getRefIdentity(target as object) ?? (field as Partial<KindRef> | undefined);
+  if (!id || typeof id.kind !== "string" || typeof id.name !== "string") {
+    return (inputs, invokeCtx) => target.invoke(inputs, invokeCtx);
   }
-  const ref = field as { kind: string; name: string; alias?: string } | undefined;
-  if (!ref || typeof ref.name !== "string") {
-    throw new Error(`${describe()}: 'invoke' must reference an invocable.`);
-  }
-  const resolved = (
-    ref.alias && ref.alias !== "Self"
-      ? ctx.moduleContext.resolveImportedInstance(ref.alias, ref.name)
-      : ctx.moduleContext.getInstance(ref.name)
-  ) as ResourceInstance | undefined;
-  if (!resolved || typeof resolved.invoke !== "function") {
-    throw new Error(`${describe()}: 'invoke' reference '${ref.name}' did not resolve to an invocable.`);
-  }
-  return (inputs, invokeCtx) => ctx.invokeResolved(ref.kind, ref.name, resolved, inputs, invokeCtx);
+  const { kind, name } = id;
+  return (inputs, invokeCtx) => ctx.invokeResolved(kind, name, target, inputs, invokeCtx);
+}
+
+function isInvocableInstance(value: unknown): value is ResourceInstance & Invocable {
+  return typeof (value as Invocable | undefined)?.invoke === "function";
 }

package/src/index.ts

@@ -9,6 +9,8 @@ export * from "./capabilities/provider.js";
 export * from "./capabilities/runnable.js";
 export * from "./context-provider.js";
 export * from "./duration.js";
+export * from "./json-value.js";
+export * from "./resolve-ref-instance.js";
 export * from "./controller-context.js";
 export * from "./controller-policy.js";
 export * from "./evaluation-context.js";
@@ -17,6 +19,10 @@ export * from "./resource-context.js";
 export * from "./resource-instance.js";
 export * from "./resource-manifest.js";
 export * from "./invoke-error.js";
+export * from "./log-record.js";
+export * from "./log-sink.js";
+export * from "./log-severity.js";
+export * from "./logger.js";
 export * from "./network-fetch.js";
 export * from "./runtime-error.js";
 export * from "./runtime-event.js";

package/src/json-value.ts

@@ -0,0 +1,43 @@
+/**
+ * JSON encoding for values that cross a persistence boundary.
+ *
+ * `JSON.stringify` THROWS on a BigInt, and CEL integers surface as BigInt in
+ * this runtime — so any controller that persists a result computed in CEL
+ * (`{ charged: 500 }` from a `Run.Sequence` output) hits it. A store that lets
+ * that throw escape is worse than one that never persisted: the caller sees an
+ * opaque TypeError, and a decorator built on the store can mistake it for the
+ * body having failed.
+ *
+ * BigInt is encoded as a tagged object rather than a plain string or a Number:
+ * a string would come back a different type than went in, and Number is lossy
+ * past 2^53. A replayed value must equal the freshly-produced one, or
+ * at-most-once execution silently changes its answer on the second call.
+ */
+
+const BIGINT_TAG = "$bigint";
+
+interface TaggedBigInt {
+  [BIGINT_TAG]: string;
+}
+
+function isTaggedBigInt(value: unknown): value is TaggedBigInt {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    !Array.isArray(value) &&
+    typeof (value as TaggedBigInt)[BIGINT_TAG] === "string" &&
+    Object.keys(value).length === 1
+  );
+}
+
+/** Serialize a value to JSON text, preserving BigInt exactly. */
+export function encodeJsonValue(value: unknown): string {
+  return JSON.stringify(value ?? null, (_k, v) =>
+    typeof v === "bigint" ? { [BIGINT_TAG]: v.toString() } : v,
+  );
+}
+
+/** Inverse of {@link encodeJsonValue}; BigInt values are restored as BigInt. */
+export function decodeJsonValue(text: string): unknown {
+  return JSON.parse(text, (_k, v) => (isTaggedBigInt(v) ? BigInt(v[BIGINT_TAG]) : v));
+}

package/src/log-record.ts

@@ -0,0 +1,113 @@
+import type { SeverityNumber } from "./log-severity.js";
+
+/**
+ * The Telo log record model — `kernel/specs/logging.md` §4. Maps 1:1 onto an
+ * OpenTelemetry `LogRecord`; encodings (§11) determine spelling and MUST NOT add
+ * or remove semantics.
+ *
+ * The one deliberate deviation from OTel is {@link LogRecord.message}: OTel's
+ * `Body` is an `AnyValue` and may be structured, while Telo requires a string and
+ * routes structured data to `attributes`. That keeps the console encoding total —
+ * every record has a renderable headline — and matches slog, pino, and zap.
+ */
+
+/** The attribute value type (§6.1). `null` is a valid value and is preserved. */
+export type AnyValue =
+  | string
+  | boolean
+  | number
+  | bigint
+  | Uint8Array
+  | null
+  | AnyValue[]
+  | { [key: string]: AnyValue };
+
+export type LogAttributes = Record<string, AnyValue>;
+
+/** Structured error (§4.2). The `cause` chain is bounded per §6.3. */
+export interface ErrorValue {
+  /** Error class or code, e.g. `ERR_INVOKE_CANCELLED`. */
+  type: string;
+  message: string;
+  /** Multi-line, unmodified. */
+  stack?: string;
+  cause?: ErrorValue;
+}
+
+/** The emitting Telo resource (§7.3). `id` is the full hierarchical id, which is
+ *  what distinguishes two instances of the same templated kind. */
+export interface ResourceRef {
+  kind: string;
+  name: string;
+  id?: string;
+}
+
+export interface LogRecord {
+  /** Nanoseconds since the Unix epoch, by the origin clock. */
+  timestamp: bigint;
+  /** When the runtime observed the event, when that differs from `timestamp`
+   *  (a bridged third-party logger, §13.3). */
+  observedTimestamp?: bigint;
+  severityNumber: SeverityNumber;
+  /** Canonical short name, or the original source spelling when bridging. */
+  severityText: string;
+  /** May be empty; never absent. */
+  message: string;
+  attributes?: LogAttributes;
+  /** 32 lowercase hex chars. */
+  traceId?: string;
+  /** 16 lowercase hex chars. Never present without `traceId`. */
+  spanId?: string;
+  /** Bit 0 = sampled, bit 1 reserved (§7.5), bits 2–7 zero. */
+  traceFlags?: number;
+  resource?: ResourceRef;
+  /** Module name of the emitter. Not unique — see `scope`. */
+  module?: string;
+  /** Dotted import-alias path identifying which *instance* emitted the record
+   *  (`Api.Domain.Db`). Absent for the root Application's own resources. */
+  scope?: string;
+  /** Identifies a class of event; max 256 chars. */
+  eventName?: string;
+  error?: ErrorValue;
+  /** Non-zero when §6.3 limits truncated attributes. */
+  droppedAttributesCount?: number;
+}
+
+// Written as `BigInt(...)` rather than as `1_000_000n` literals: this module is
+// consumed from source by the browser-targeted editor, whose tsconfig targets
+// below ES2020 and cannot parse the literal syntax.
+const NANOS_PER_MS = BigInt(1_000_000);
+const NANOS_PER_SECOND = BigInt(1_000_000_000);
+
+/**
+ * Node has no true nanosecond wall clock: `Date` is millisecond-resolution and
+ * `hrtime.bigint()` is monotonic rather than epoch-anchored. The best available
+ * is the performance origin plus the monotonic offset, which yields microsecond
+ * resolution zero-padded to nine digits. Format-conformant with §11.1; the extra
+ * three digits are always zero.
+ *
+ * The origin is captured once as a bigint so the addition never routes a
+ * 16-significant-digit value through a float64 and loses the low microseconds.
+ */
+const ORIGIN_NANOS = BigInt(Math.round(performance.timeOrigin * 1e6));
+
+export function nowUnixNano(): bigint {
+  return ORIGIN_NANOS + BigInt(Math.round(performance.now() * 1e6));
+}
+
+/** Epoch nanoseconds for a millisecond-resolution instant — used when bridging a
+ *  third-party record that carries a `Date` or epoch-millis timestamp. */
+export function unixNanoFromMillis(epochMillis: number): bigint {
+  return BigInt(Math.round(epochMillis)) * NANOS_PER_MS;
+}
+
+/**
+ * RFC 3339, UTC, nanosecond precision, `Z` suffix — the `time` key of the `json`
+ * encoding (§11.1).
+ */
+export function formatUnixNano(timestamp: bigint): string {
+  const seconds = timestamp / NANOS_PER_SECOND;
+  const nanos = timestamp - seconds * NANOS_PER_SECOND;
+  const isoSeconds = new Date(Number(seconds) * 1000).toISOString().slice(0, 19);
+  return `${isoSeconds}.${nanos.toString().padStart(9, "0")}Z`;
+}

package/src/log-severity.ts

@@ -0,0 +1,128 @@
+/**
+ * The OpenTelemetry `SeverityNumber` scale (1–24, stable), which Telo adopts
+ * verbatim — see `kernel/specs/logging.md` §5.
+ *
+ * Higher is more severe. All comparison, filtering, and threshold logic uses the
+ * number; severity *text* is presentation only and MUST NOT be compared. The
+ * full 24-value range stays valid on the wire so records bridged from a
+ * third-party logger survive a round-trip with their original spelling intact.
+ */
+
+/** An OTel SeverityNumber. `0` (UNSPECIFIED) is never emitted by a Telo runtime. */
+export type SeverityNumber = number;
+
+/** The six levels Telo names. Each is the floor of its four-value OTel range. */
+export const SEVERITY = {
+  trace: 1,
+  debug: 5,
+  info: 9,
+  warn: 13,
+  error: 17,
+  fatal: 21,
+} as const;
+
+export type LevelName = keyof typeof SEVERITY;
+
+export const LEVEL_NAMES: readonly LevelName[] = ["trace", "debug", "info", "warn", "error", "fatal"];
+
+/** The severity at or above which a record describes an error (§5.1). This is
+ *  the portable error predicate; runtimes expose it rather than re-deriving it. */
+export const ERROR_SEVERITY_FLOOR = 17;
+
+const FLOORS: readonly number[] = [1, 5, 9, 13, 17, 21];
+
+const TEXT_BY_FLOOR: Readonly<Record<number, string>> = {
+  1: "TRACE",
+  5: "DEBUG",
+  9: "INFO",
+  13: "WARN",
+  17: "ERROR",
+  21: "FATAL",
+};
+
+/**
+ * The range floor for a severity number — the canonical level a value maps onto.
+ * Out-of-range values clamp into 1–24 rather than producing `0`, which §5.1
+ * forbids emitting.
+ */
+export function severityFloor(severity: SeverityNumber): number {
+  const clamped = severity < 1 ? 1 : severity > 24 ? 24 : Math.trunc(severity);
+  let floor = FLOORS[0]!;
+  for (const candidate of FLOORS) {
+    if (candidate <= clamped) floor = candidate;
+    else break;
+  }
+  return floor;
+}
+
+/** Canonical short name (`TRACE`…`FATAL`) for a severity number. */
+export function severityText(severity: SeverityNumber): string {
+  return TEXT_BY_FLOOR[severityFloor(severity)]!;
+}
+
+/** `true` when the record describes an error (§5.1). */
+export function isErrorSeverity(severity: SeverityNumber): boolean {
+  return severity >= ERROR_SEVERITY_FLOOR;
+}
+
+/** Resolve a manifest `level:` name to its severity number. */
+export function severityForLevel(level: LevelName): number {
+  return SEVERITY[level];
+}
+
+/**
+ * Map a level name of unknown provenance onto the scale. A name Telo does not
+ * recognize yields `undefined` so the caller can preserve the original spelling
+ * in `severity_text` while landing the number on a range floor (§5.1).
+ */
+export function parseLevelName(name: string): number | undefined {
+  const key = name.trim().toLowerCase();
+  // Own-property check, not `in`: `in` also matches inherited members, so
+  // `parseLevelName("toString")` would otherwise return a Function and defeat
+  // the `?? fallback` at every call site. Written as `hasOwnProperty.call`
+  // rather than `Object.hasOwn` because this module is consumed from source by
+  // the browser-targeted editor, whose tsconfig targets below ES2022.
+  return Object.prototype.hasOwnProperty.call(SEVERITY, key)
+    ? SEVERITY[key as LevelName]
+    : undefined;
+}
+
+/**
+ * Go's `log/slog` documents that subtracting 9 from an OTel severity converts it
+ * to the slog range — an exact, officially sanctioned relation, so a Go runtime
+ * uses arithmetic rather than a table (§5.2). Exposed here so the conformance
+ * vectors can assert the relation from the Node side too.
+ */
+export const SLOG_OFFSET = 9;
+
+/**
+ * pino's scale is 10× and offset, with no arithmetic relation to OTel, so §5.2
+ * requires a table. Used by the Fastify logger replacement (§13.3).
+ */
+const PINO_BY_SEVERITY: Readonly<Record<number, number>> = {
+  1: 10,
+  5: 20,
+  9: 30,
+  13: 40,
+  17: 50,
+  21: 60,
+};
+
+const SEVERITY_BY_PINO: Readonly<Record<number, number>> = {
+  10: 1,
+  20: 5,
+  30: 9,
+  40: 13,
+  50: 17,
+  60: 21,
+};
+
+export function pinoLevelForSeverity(severity: SeverityNumber): number {
+  return PINO_BY_SEVERITY[severityFloor(severity)]!;
+}
+
+/** `undefined` for a pino level Telo does not name, so the caller preserves the
+ *  source spelling and falls back to the nearest floor. */
+export function severityForPinoLevel(level: number): number | undefined {
+  return SEVERITY_BY_PINO[level];
+}