@unbrained/pm-cli 2026.10.13 → 2026.10.15

package/dist/core/sentry/instrument.d.ts

@@ -1,45 +1,45 @@
 import type * as SentryModuleTypes from "@sentry/node";
-declare function scrubString(value: string, keyHint?: string): string;
-declare function scrubEventData(obj: Record<string, unknown>): Record<string, unknown>;
+declare function scrubString(value:string,keyHint?:string):string;
+declare function scrubEventData(obj:Record<string,unknown>):Record<string,unknown>;
 type SentryLike = typeof SentryModuleTypes;
-declare function isKnownNoisyConsoleEvent(event: {
-logger?: string;
-message?: string;
-exception?: {
-values?: Array<{
-value?: string;
+declare function isKnownNoisyConsoleEvent(event:{
+logger?:string;
+message?:string;
+exception?:{
+values?:Array<{
+value?:string;
 }>;
 };
-}): boolean;
+}):boolean;
 /** Detect handled Node listener-pressure warnings captured through console stderr. */
-declare function isNodeRuntimeWarningEvent(event: {
-logger?: string;
-message?: string;
-exception?: {
-values?: Array<{
-value?: string;
+declare function isNodeRuntimeWarningEvent(event:{
+logger?:string;
+message?:string;
+exception?:{
+values?:Array<{
+value?:string;
 }>;
 };
-}): boolean;
-declare function isExpectedCliErrorEvent(event: {
-exception?: {
-values?: Array<{
-type?: string;
-value?: string;
+}):boolean;
+declare function isExpectedCliErrorEvent(event:{
+exception?:{
+values?:Array<{
+type?:string;
+value?:string;
 }>;
 };
-message?: string;
-extra?: Record<string, unknown>;
-logger?: string;
-}): boolean;
-declare function isPmCliErrorBreadcrumb(breadcrumb: {
-category?: string;
-message?: string;
-}): boolean;
-declare function isKnownNoisyConsoleBreadcrumb(breadcrumb: {
-category?: string;
-message?: string;
-}): boolean;
+message?:string;
+extra?:Record<string,unknown>;
+logger?:string;
+}):boolean;
+declare function isPmCliErrorBreadcrumb(breadcrumb:{
+category?:string;
+message?:string;
+}):boolean;
+declare function isKnownNoisyConsoleBreadcrumb(breadcrumb:{
+category?:string;
+message?:string;
+}):boolean;
 /**
  * Resolves the Sentry performance-tracing sample rate, honouring the standard
  * `SENTRY_TRACES_SAMPLE_RATE` env var when it parses to a fraction in `[0, 1]`.
@@ -50,25 +50,27 @@ message?: string;
  * non-numeric, or out-of-range values fall back to the default with no
  * behaviour change for existing installs.
  */
-declare function resolveTracesSampleRate(): number;
+declare function resolveTracesSampleRate():number;
 /** Implements ensure sentry init for the public runtime surface of this module. */
-export declare function ensureSentryInit(): Promise<SentryLike | undefined>;
+export declare function ensureSentryInit():Promise<SentryLike | undefined>;
+/** Return tracing permission only after explicit consent, opt-in, sampling and process policy agree. */
+export declare function ensureSentryCommandTracing(telemetryEnabled:boolean):Promise<boolean>;
 /** Implements get sentry for the public runtime surface of this module. */
-export declare function getSentry(): SentryLike | undefined;
+export declare function getSentry():SentryLike | undefined;
 /** Public contract for test only, shared by SDK and presentation-layer consumers. */
-export declare const _testOnly: {
-isExpectedCliErrorEvent: typeof isExpectedCliErrorEvent;
-isKnownNoisyConsoleEvent: typeof isKnownNoisyConsoleEvent;
-isNodeRuntimeWarningEvent: typeof isNodeRuntimeWarningEvent;
-isPmCliErrorBreadcrumb: typeof isPmCliErrorBreadcrumb;
-isKnownNoisyConsoleBreadcrumb: typeof isKnownNoisyConsoleBreadcrumb;
-scrubString: typeof scrubString;
-scrubEventData: typeof scrubEventData;
-resolveTracesSampleRate: typeof resolveTracesSampleRate;
-KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS: readonly ["[starter-extension] activating", "[starter-extension] all 8 capabilities registered.", "[starter-extension] commands:", "[starter] preflight check for workspace", "[starter] output_format service override active", "[pm-ext-ts-starter] activating", "[pm-ext-ts-starter] all capabilities registered.", "run `pm init` first to initialise a pm workspace"];
-MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS: number;
-defaultSentryLoader: () => SentryLike;
-setSentryLoaderForTests(loader?: () => SentryLike): void;
-resetSentryStateForTests(): void;
+export declare const _testOnly:{
+isExpectedCliErrorEvent:typeof isExpectedCliErrorEvent;
+isKnownNoisyConsoleEvent:typeof isKnownNoisyConsoleEvent;
+isNodeRuntimeWarningEvent:typeof isNodeRuntimeWarningEvent;
+isPmCliErrorBreadcrumb:typeof isPmCliErrorBreadcrumb;
+isKnownNoisyConsoleBreadcrumb:typeof isKnownNoisyConsoleBreadcrumb;
+scrubString:typeof scrubString;
+scrubEventData:typeof scrubEventData;
+resolveTracesSampleRate:typeof resolveTracesSampleRate;
+KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS:readonly ["[starter-extension] activating","[starter-extension] all 8 capabilities registered.","[starter-extension] commands:","[starter] preflight check for workspace","[starter] output_format service override active","[pm-ext-ts-starter] activating","[pm-ext-ts-starter] all capabilities registered.","run `pm init` first to initialise a pm workspace"];
+MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS:number;
+defaultSentryLoader:() => SentryLike;
+setSentryLoaderForTests(loader?:() => SentryLike):void;
+resetSentryStateForTests():void;
 };
 export {};

package/dist/core/sentry/instrument.js

@@ -1,2 +1,2 @@
-(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="da2c4c10-3c43-5037-ac69-31204480af99")}catch{}})();import{createRequire}from"node:module";import{resolvePmCliVersion}from"../packages/root.js";import{resolveTelemetryEnvironmentPolicy}from"../telemetry/policy.js";const OPT_OUT_VALUES=new Set(["1","true","yes","on"]);function isSentryDisabled(){return!!(OPT_OUT_VALUES.has((process.env.PM_SENTRY_DISABLED??"").trim().toLowerCase())||resolveTelemetryEnvironmentPolicy().telemetry_disabled||typeof process.env.VITEST=="string"||typeof process.env.VITEST_WORKER_ID=="string")}const SENSITIVE_KEY_PATTERN=/(?:token|secret|password|passwd|api[_-]?key|apikey|authorization|cookie|credentials|bearer|dsn)/i,INLINE_SENSITIVE_ASSIGNMENT_RE=new RegExp(`\\b(${SENSITIVE_KEY_PATTERN.source})\\s*[:=]\\s*([^\\s,;]+)`,"giu"),ABSOLUTE_PATH_TOKEN_RE=/(^|[\s"'`(=])\/(?:[^\s"'`),;]+)/g,FILE_URL_PATH_RE=/file:\/\/\/?[^\s"'`),;]+/giu,WINDOWS_PATH_TOKEN_RE=/\b[A-Za-z]:\\[^\s"'`),;]+/g,PRIVATE_IP_RE=/\b(?:10\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|172\.(?:1[6-9]|2\d|3[01])\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|192\.168\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d))\b/g,PATH_FIELD_KEY_PATTERN=/(?:^|[_-])(path|filename|file|module|cwd|dir|directory|location|source|script)s?$/i,MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS=15,KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS=["[starter-extension] activating","[starter-extension] all 8 capabilities registered.","[starter-extension] commands:","[starter] preflight check for workspace","[starter] output_format service override active","[pm-ext-ts-starter] activating","[pm-ext-ts-starter] all capabilities registered.","run `pm init` first to initialise a pm workspace"];function looksLikeFilesystemPath(value){const normalized=value.trim();return normalized.length===0?!1:normalized.startsWith("/")||normalized.startsWith("file://")||/^[A-Za-z]:\\/.test(normalized)||normalized.startsWith("\\\\")?!0:normalized.includes("/home/")}function scrubString(value,keyHint){if(keyHint&&PATH_FIELD_KEY_PATTERN.test(keyHint)&&looksLikeFilesystemPath(value))return"[scrubbed_path]";const scrubbed=value.replaceAll(INLINE_SENSITIVE_ASSIGNMENT_RE,(_m,key)=>`${key}=[scrubbed]`).replaceAll(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/giu,"[scrubbed_email]").replaceAll(/bearer\s+[a-z0-9._=-]+/giu,"bearer [scrubbed]").replaceAll(/sntr[ysu]_[A-Za-z0-9_-]+/g,"[scrubbed_sentry_token]").replaceAll(PRIVATE_IP_RE,"[scrubbed_ip]").replaceAll(FILE_URL_PATH_RE,"[scrubbed_path]").replaceAll(WINDOWS_PATH_TOKEN_RE,"[scrubbed_path]").replaceAll(ABSOLUTE_PATH_TOKEN_RE,(_match,prefix)=>`${prefix}[scrubbed_path]`);return looksLikeFilesystemPath(scrubbed)?"[scrubbed_path]":scrubbed}function scrubEventData(obj){const result={};for(const[key,value]of Object.entries(obj))SENSITIVE_KEY_PATTERN.test(key)?result[key]="[scrubbed]":typeof value=="string"?result[key]=scrubString(value,key):Array.isArray(value)?result[key]=value.map(entry=>typeof entry=="string"?scrubString(entry,key):entry&&typeof entry=="object"?scrubEventData(entry):entry):value&&typeof value=="object"?result[key]=scrubEventData(value):result[key]=value;return result}function scrubStackFrame(frame){for(const key of["filename","absPath","abs_path","module"]){const rawValue=frame[key];typeof rawValue=="string"&&(frame[key]=scrubString(rawValue,key))}const contextLine=frame.context_line;typeof contextLine=="string"&&(frame.context_line=scrubString(contextLine,"context_line"));for(const key of["pre_context","post_context"]){const context=frame[key];Array.isArray(context)&&(frame[key]=context.map(entry=>typeof entry=="string"?scrubString(entry,key):entry))}frame.vars&&typeof frame.vars=="object"&&(frame.vars=scrubEventData(frame.vars)),frame.data&&typeof frame.data=="object"&&(frame.data=scrubEventData(frame.data))}const requireFromInstrument=createRequire(import.meta.url),defaultSentryLoader=()=>requireFromInstrument("@sentry/node");let _sentry,_initDone=!1,_loadSentry=defaultSentryLoader;const PM_CLI_SENTRY_DSN="https://bf7ad2ec76c0051c2ee94e48e8bd6868@o4510603477712896.ingest.de.sentry.io/4511316775338064";function hasPmCliErrorPrefix(value){return/^\s*PmCliError:/.test(value)}function isKnownNoisyConsoleMessage(value){const normalized=value.trim().toLowerCase();return normalized.length===0?!1:KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS.some(pattern=>normalized.includes(pattern))}function isKnownNoisyConsoleEvent(event){return event.logger!=="console"?!1:typeof event.message=="string"&&isKnownNoisyConsoleMessage(event.message)?!0:Array.isArray(event.exception?.values)&&event.exception.values.some(entry=>typeof entry.value=="string"&&isKnownNoisyConsoleMessage(entry.value))}function isNodeRuntimeWarningEvent(event){if(event.logger!=="console")return!1;const isRuntimeWarning=value=>typeof value=="string"&&/^\(node:\d+\) MaxListenersExceededWarning: Possible EventEmitter memory leak detected\./.test(value);return isRuntimeWarning(event.message)?!0:Array.isArray(event.exception?.values)&&event.exception.values.some(entry=>isRuntimeWarning(entry.value))}function isExpectedCliErrorEvent(event){return!!(event.exception?.values?.some(ex=>ex.type==="PmCliError")||event.exception?.values?.some(ex=>typeof ex.value=="string"&&hasPmCliErrorPrefix(ex.value))||event.logger==="console"&&typeof event.message=="string"&&hasPmCliErrorPrefix(event.message))}function isPmCliErrorBreadcrumb(breadcrumb){return breadcrumb.category==="console"&&typeof breadcrumb.message=="string"&&hasPmCliErrorPrefix(breadcrumb.message)}function isKnownNoisyConsoleBreadcrumb(breadcrumb){return breadcrumb.category==="console"&&typeof breadcrumb.message=="string"&&isKnownNoisyConsoleMessage(breadcrumb.message)}function resolveCliVersion(){return resolvePmCliVersion(import.meta.url,["../../.."])??"0.0.0"}function resolveEnvironment(){const explicit=process.env.SENTRY_ENVIRONMENT?.trim();return explicit&&explicit.length>0?explicit:process.env.VITEST||process.env.VITEST_WORKER_ID||process.env.NODE_ENV==="test"?"test":process.env.CI?"ci":"production"}const DEFAULT_TRACES_SAMPLE_RATE=.2;function resolveTracesSampleRate(){const raw=process.env.SENTRY_TRACES_SAMPLE_RATE?.trim();if(!raw)return DEFAULT_TRACES_SAMPLE_RATE;const parsed=Number(raw);return!Number.isFinite(parsed)||parsed<0||parsed>1?DEFAULT_TRACES_SAMPLE_RATE:parsed}function scrubSentryExceptionValues(event){if(event.exception?.values){for(const exception of event.exception.values)if(exception.value&&(exception.value=scrubString(exception.value,"value")),exception.stacktrace?.frames)for(const frame of exception.stacktrace.frames)scrubStackFrame(frame)}}function scrubSentryBreadcrumbs(event){if(event.breadcrumbs)for(const breadcrumb of event.breadcrumbs)breadcrumb.message&&(breadcrumb.message=scrubString(breadcrumb.message)),breadcrumb.data&&typeof breadcrumb.data=="object"&&(breadcrumb.data=scrubEventData(breadcrumb.data))}function scrubSentryContexts(event){if(event.contexts)for(const[ctxKey,ctx]of Object.entries(event.contexts))ctx&&typeof ctx=="object"&&(event.contexts[ctxKey]=scrubEventData(ctx))}function scrubSentryRecordField(event,key){const target=event,value=target[key];value&&typeof value=="object"&&(target[key]=scrubEventData(value))}const beforeSend=event=>{if(isExpectedCliErrorEvent(event)||isKnownNoisyConsoleEvent(event))return null;isNodeRuntimeWarningEvent(event)&&(event.level="warning",event.tags={...event.tags,"pm.diagnostic_class":"node_runtime_warning"}),event.message&&(event.message=scrubString(event.message,"message")),event.transaction&&(event.transaction=scrubString(event.transaction,"transaction")),scrubSentryExceptionValues(event),scrubSentryBreadcrumbs(event),scrubSentryRecordField(event,"extra"),scrubSentryContexts(event);for(const key of["request","user","tags"])scrubSentryRecordField(event,key);return event},beforeSendTransaction=event=>(event.breadcrumbs&&(event.breadcrumbs=event.breadcrumbs.filter(breadcrumb=>!isPmCliErrorBreadcrumb(breadcrumb)&&!isKnownNoisyConsoleBreadcrumb(breadcrumb)),scrubSentryBreadcrumbs(event)),scrubSentryContexts(event),event),beforeBreadcrumb=breadcrumb=>isPmCliErrorBreadcrumb(breadcrumb)||isKnownNoisyConsoleBreadcrumb(breadcrumb)?null:(breadcrumb.message&&(breadcrumb.message=scrubString(breadcrumb.message,"message")),breadcrumb.data&&typeof breadcrumb.data=="object"&&(breadcrumb.data=scrubEventData(breadcrumb.data)),breadcrumb);async function ensureSentryInit(){if(_initDone)return _sentry;if(_initDone=!0,isSentryDisabled())return;const SentryModule=_loadSentry();_sentry=SentryModule;const dsn=process.env.SENTRY_DSN?.trim()||PM_CLI_SENTRY_DSN,release=resolveCliVersion();return SentryModule.init({dsn,release:`pm-cli@${release}`,environment:resolveEnvironment(),tracesSampleRate:resolveTracesSampleRate(),enableLogs:!0,attachStacktrace:!0,normalizeDepth:6,shutdownTimeout:3e3,sendDefaultPii:!1,serverName:void 0,integrations:[SentryModule.extraErrorDataIntegration({depth:4}),SentryModule.captureConsoleIntegration({levels:["warn","error"]})],initialScope:{tags:{"cli.name":"pm-cli","cli.version":release,"runtime.node":process.version,"runtime.platform":process.platform,"runtime.arch":process.arch}},beforeSend,beforeSendTransaction,beforeBreadcrumb}),SentryModule}function getSentry(){return _sentry}const _testOnly={isExpectedCliErrorEvent,isKnownNoisyConsoleEvent,isNodeRuntimeWarningEvent,isPmCliErrorBreadcrumb,isKnownNoisyConsoleBreadcrumb,scrubString,scrubEventData,resolveTracesSampleRate,KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS,MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS,defaultSentryLoader,setSentryLoaderForTests(loader){_loadSentry=loader??defaultSentryLoader},resetSentryStateForTests(){_sentry=void 0,_initDone=!1}};export{_testOnly,ensureSentryInit,getSentry};
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="07b08f80-aa60-5ffa-b969-2859839f3f2d")}catch{}})();import{createRequire}from"node:module";import{resolvePmCliVersion}from"../packages/root.js";import{resolveTelemetryEnvironmentPolicy}from"../telemetry/policy.js";import{scrubInlineSensitiveAssignments,SENSITIVE_KEY_PATTERN}from"./sensitive-assignments.js";const OPT_OUT_VALUES=new Set(["1","true","yes","on"]);function isSentryDisabled(){return!!(OPT_OUT_VALUES.has((process.env.PM_SENTRY_DISABLED??"").trim().toLowerCase())||resolveTelemetryEnvironmentPolicy().telemetry_disabled||typeof process.env.VITEST=="string"||typeof process.env.VITEST_WORKER_ID=="string")}const ABSOLUTE_PATH_TOKEN_RE=/(^|[\s"'`(=])\/(?:[^\s"'`),;]+)/g,FILE_URL_PATH_RE=/file:\/\/\/?[^\s"'`),;]+/giu,WINDOWS_PATH_TOKEN_RE=/\b[A-Za-z]:\\[^\s"'`),;]+/g,PRIVATE_IP_RE=/\b(?:10\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|172\.(?:1[6-9]|2\d|3[01])\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)|192\.168\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d)\.(?:25[0-5]|2[0-4]\d|[01]?\d?\d))\b/g,PATH_FIELD_KEY_PATTERN=/(?:^|[_-])(path|filename|file|module|cwd|dir|directory|location|source|script)s?$/i,MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS=15,KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS=["[starter-extension] activating","[starter-extension] all 8 capabilities registered.","[starter-extension] commands:","[starter] preflight check for workspace","[starter] output_format service override active","[pm-ext-ts-starter] activating","[pm-ext-ts-starter] all capabilities registered.","run `pm init` first to initialise a pm workspace"];function looksLikeFilesystemPath(value){const normalized=value.trim();return normalized.length===0?!1:normalized.startsWith("/")||normalized.startsWith("file://")||/^[A-Za-z]:\\/.test(normalized)||normalized.startsWith("\\\\")?!0:normalized.includes("/home/")}function scrubString(value,keyHint){if(keyHint&&PATH_FIELD_KEY_PATTERN.test(keyHint)&&looksLikeFilesystemPath(value))return"[scrubbed_path]";const scrubbed=scrubInlineSensitiveAssignments(value).replaceAll(/[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}/giu,"[scrubbed_email]").replaceAll(/bearer\s+[a-z0-9._=-]+/giu,"bearer [scrubbed]").replaceAll(/sntr[ysu]_[A-Za-z0-9_-]+/g,"[scrubbed_sentry_token]").replaceAll(PRIVATE_IP_RE,"[scrubbed_ip]").replaceAll(FILE_URL_PATH_RE,"[scrubbed_path]").replaceAll(WINDOWS_PATH_TOKEN_RE,"[scrubbed_path]").replaceAll(ABSOLUTE_PATH_TOKEN_RE,(_match,prefix)=>`${prefix}[scrubbed_path]`);return looksLikeFilesystemPath(scrubbed)?"[scrubbed_path]":scrubbed}function scrubEventData(obj){const result={};for(const[key,value]of Object.entries(obj))SENSITIVE_KEY_PATTERN.test(key)||key.startsWith("sentry.message.parameter.")?result[key]="[scrubbed]":typeof value=="string"?result[key]=scrubString(value,key):Array.isArray(value)?result[key]=value.map(entry=>typeof entry=="string"?scrubString(entry,key):entry&&typeof entry=="object"?scrubEventData(entry):entry):value&&typeof value=="object"?result[key]=scrubEventData(value):result[key]=value;return result}function scrubStackFrame(frame){for(const key of["filename","absPath","abs_path","module"]){const rawValue=frame[key];typeof rawValue=="string"&&(frame[key]=scrubString(rawValue,key))}const contextLine=frame.context_line;typeof contextLine=="string"&&(frame.context_line=scrubString(contextLine,"context_line"));for(const key of["pre_context","post_context"]){const context=frame[key];Array.isArray(context)&&(frame[key]=context.map(entry=>typeof entry=="string"?scrubString(entry,key):entry))}frame.vars&&typeof frame.vars=="object"&&(frame.vars=scrubEventData(frame.vars)),frame.data&&typeof frame.data=="object"&&(frame.data=scrubEventData(frame.data))}const requireFromInstrument=createRequire(import.meta.url),defaultSentryLoader=()=>requireFromInstrument("@sentry/node");let _sentry,_initDone=!1,_loadSentry=defaultSentryLoader;const PM_CLI_SENTRY_DSN="https://bf7ad2ec76c0051c2ee94e48e8bd6868@o4510603477712896.ingest.de.sentry.io/4511316775338064";function hasPmCliErrorPrefix(value){return/^\s*PmCliError:/.test(value)}function isKnownNoisyConsoleMessage(value){const normalized=value.trim().toLowerCase();return normalized.length===0?!1:KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS.some(pattern=>normalized.includes(pattern))}function isKnownNoisyConsoleEvent(event){return event.logger!=="console"?!1:typeof event.message=="string"&&isKnownNoisyConsoleMessage(event.message)?!0:Array.isArray(event.exception?.values)&&event.exception.values.some(entry=>typeof entry.value=="string"&&isKnownNoisyConsoleMessage(entry.value))}function isNodeRuntimeWarningEvent(event){if(event.logger!=="console")return!1;const isRuntimeWarning=value=>typeof value=="string"&&/^\(node:\d+\) MaxListenersExceededWarning: Possible EventEmitter memory leak detected\./.test(value);return isRuntimeWarning(event.message)?!0:Array.isArray(event.exception?.values)&&event.exception.values.some(entry=>isRuntimeWarning(entry.value))}function isExpectedCliErrorEvent(event){return!!(event.exception?.values?.some(ex=>ex.type==="PmCliError")||event.exception?.values?.some(ex=>typeof ex.value=="string"&&hasPmCliErrorPrefix(ex.value))||event.logger==="console"&&typeof event.message=="string"&&hasPmCliErrorPrefix(event.message))}function isPmCliErrorBreadcrumb(breadcrumb){return breadcrumb.category==="console"&&typeof breadcrumb.message=="string"&&hasPmCliErrorPrefix(breadcrumb.message)}function isKnownNoisyConsoleBreadcrumb(breadcrumb){return breadcrumb.category==="console"&&typeof breadcrumb.message=="string"&&isKnownNoisyConsoleMessage(breadcrumb.message)}function resolveCliVersion(){return resolvePmCliVersion(import.meta.url,["../../.."])??"0.0.0"}function resolveEnvironment(){const explicit=process.env.SENTRY_ENVIRONMENT?.trim();return explicit&&explicit.length>0?explicit:process.env.VITEST||process.env.VITEST_WORKER_ID||process.env.NODE_ENV==="test"?"test":process.env.CI?"ci":"production"}const DEFAULT_TRACES_SAMPLE_RATE=.2;function resolveTracesSampleRate(){const raw=process.env.SENTRY_TRACES_SAMPLE_RATE?.trim();if(!raw)return DEFAULT_TRACES_SAMPLE_RATE;const parsed=Number(raw);return!Number.isFinite(parsed)||parsed<0||parsed>1?DEFAULT_TRACES_SAMPLE_RATE:parsed}function scrubSentryExceptionValues(event){if(event.exception?.values){for(const exception of event.exception.values)if(exception.value&&(exception.value=scrubString(exception.value,"value")),exception.stacktrace?.frames)for(const frame of exception.stacktrace.frames)scrubStackFrame(frame)}}function scrubSentryBreadcrumbs(event){if(event.breadcrumbs)for(const breadcrumb of event.breadcrumbs)breadcrumb.message&&(breadcrumb.message=scrubString(breadcrumb.message)),breadcrumb.data&&typeof breadcrumb.data=="object"&&(breadcrumb.data=scrubEventData(breadcrumb.data))}function scrubSentryContexts(event){if(event.contexts)for(const[ctxKey,ctx]of Object.entries(event.contexts))ctx&&typeof ctx=="object"&&(event.contexts[ctxKey]=scrubEventData(ctx))}function scrubSentryRecordField(event,key){const target=event,value=target[key];value&&typeof value=="object"&&(target[key]=scrubEventData(value))}const beforeSend=event=>{if(isExpectedCliErrorEvent(event)||isKnownNoisyConsoleEvent(event))return null;isNodeRuntimeWarningEvent(event)&&(event.level="warning",event.tags={...event.tags,"pm.diagnostic_class":"node_runtime_warning"}),event.message&&(event.message=scrubString(event.message,"message")),event.transaction&&(event.transaction=scrubString(event.transaction,"transaction")),scrubSentryExceptionValues(event),scrubSentryBreadcrumbs(event),scrubSentryRecordField(event,"extra"),scrubSentryContexts(event);for(const key of["request","user","tags"])scrubSentryRecordField(event,key);return event},beforeSendTransaction=event=>(event.breadcrumbs&&(event.breadcrumbs=event.breadcrumbs.filter(breadcrumb=>!isPmCliErrorBreadcrumb(breadcrumb)&&!isKnownNoisyConsoleBreadcrumb(breadcrumb)),scrubSentryBreadcrumbs(event)),scrubSentryContexts(event),event),beforeSendSpan=span=>scrubEventData(span),beforeSendLog=log=>(log.message=scrubString(log.message),log.attributes&&(log.attributes=scrubEventData(log.attributes)),log);function scrubSentryLogEnvelope(envelope){for(const item of envelope[1])if(item[0].type==="log")for(const log of item[1].items){log.body=scrubString(log.body);const attributes=log.attributes;if(attributes)for(const[key,attribute]of Object.entries(attributes)){const value=scrubEventData({[key]:attribute.value})[key];typeof value=="string"&&(attributes[key]={type:"string",value})}}}const beforeBreadcrumb=breadcrumb=>isPmCliErrorBreadcrumb(breadcrumb)||isKnownNoisyConsoleBreadcrumb(breadcrumb)?null:(breadcrumb.message&&(breadcrumb.message=scrubString(breadcrumb.message,"message")),breadcrumb.data&&typeof breadcrumb.data=="object"&&(breadcrumb.data=scrubEventData(breadcrumb.data)),breadcrumb);async function ensureSentryInit(){if(_initDone)return _sentry;if(_initDone=!0,isSentryDisabled())return;const SentryModule=_loadSentry(),dsn=process.env.SENTRY_DSN?.trim()||PM_CLI_SENTRY_DSN,release=resolveCliVersion();SentryModule.init({dsn,release:`pm-cli@${release}`,environment:resolveEnvironment(),tracesSampleRate:resolveTracesSampleRate(),enableLogs:!0,attachStacktrace:!0,normalizeDepth:6,shutdownTimeout:3e3,traceLifecycle:"stream",dataCollection:{userInfo:!1,cookies:!1,httpHeaders:{request:!1,response:!1},httpBodies:[],urlQueryParams:!1,genAI:{inputs:!1,outputs:!1},databaseQueryData:!1,graphQL:{document:!1,variables:!1},stackFrameVariables:!1,frameContextLines:0},serverName:void 0,integrations:[SentryModule.extraErrorDataIntegration({depth:4}),SentryModule.captureConsoleIntegration({levels:["warn","error"]})],initialScope:{tags:{"cli.name":"pm-cli","cli.version":release,"runtime.node":process.version,"runtime.platform":process.platform,"runtime.arch":process.arch}},beforeSend,beforeSendTransaction,beforeSendSpan:SentryModule.withStreamedSpan(beforeSendSpan),beforeSendLog,beforeBreadcrumb});const client=SentryModule.getClient();if(client)return client.on("beforeEnvelope",scrubSentryLogEnvelope),_sentry=SentryModule,SentryModule}async function ensureSentryCommandTracing(telemetryEnabled){if(telemetryEnabled!==!0||!OPT_OUT_VALUES.has((process.env.PM_SENTRY_TRACE_COMMANDS??"").trim().toLowerCase())||resolveTracesSampleRate()===0||isSentryDisabled())return!1;try{return await ensureSentryInit()!==void 0}catch{return _sentry=void 0,!1}}function getSentry(){return _sentry}const _testOnly={isExpectedCliErrorEvent,isKnownNoisyConsoleEvent,isNodeRuntimeWarningEvent,isPmCliErrorBreadcrumb,isKnownNoisyConsoleBreadcrumb,scrubString,scrubEventData,resolveTracesSampleRate,KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS,MAX_KNOWN_NOISY_CONSOLE_MESSAGE_PATTERNS,defaultSentryLoader,setSentryLoaderForTests(loader){_loadSentry=loader??defaultSentryLoader},resetSentryStateForTests(){_sentry=void 0,_initDone=!1}};export{_testOnly,ensureSentryCommandTracing,ensureSentryInit,getSentry};
 //# sourceMappingURL=instrument.js.map

package/dist/core/sentry/sensitive-assignments.d.ts

@@ -0,0 +1,9 @@
+/**
+ * @module core/sentry/sensitive-assignments
+ *
+ * Redacts sensitive values in fragmented and serialized diagnostic text.
+ */
+/** Shared sensitive-key vocabulary for structured data and diagnostic text. */
+export declare const SENSITIVE_KEY_PATTERN:RegExp;
+/** Redact complete sensitive values while preserving every byte of safe diagnostic text. */
+export declare function scrubInlineSensitiveAssignments(value:string):string;

package/dist/core/sentry/sensitive-assignments.js

@@ -0,0 +1,2 @@
+(function(){try{var e=typeof window<"u"?window:typeof global<"u"?global:typeof globalThis<"u"?globalThis:typeof self<"u"?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="64589e00-25ef-5d74-a94a-7d40455e1929")}catch{}})();const SENSITIVE_KEY_PATTERN=/(?:token|secret|password|passwd|api[_-]?key|apikey|authorization|cookie|credentials|bearer|dsn)/i,INLINE_SENSITIVE_ASSIGNMENT_RE=new RegExp(`(?:\\b|(?<=_))(${SENSITIVE_KEY_PATTERN.source})\\s*[:=]\\s*([^\\s,;]+)`,"giu");function readDelimiterToken(value,index,token){let start=index;for(;start>0&&value[start-1]==="\\";)start--;const unicode=token.length>1;if(unicode&&start===index)return;let remaining=unicode?(index-start)*2:index-start+1,width=1;for(;remaining%2===0;)width*=2,remaining/=2;const character=unicode?String.fromCharCode(Number.parseInt(token.slice(1),16)):token;return{index:start,end:index+token.length,identity:`${character}:${width}`,character,width}}function quotedValueEnd(value,delimiter){const tokens=/["']|u(?:0022|0027)/gi;tokens.lastIndex=delimiter.end;for(const token of value.matchAll(tokens)){const quote=readDelimiterToken(value,token.index,token[0]);if(quote?.identity===delimiter.identity)return quote.end}return value.length}function closeSensitiveContainer(stack,current,end,inputEnd){const expected=stack.pop();return expected.character!==current.character||expected.width!==current.width?inputEnd:stack.length===0?end:void 0}function containerValueEnd(value,opener){const stack=[{character:opener.character==="{"?"}":"]",width:opener.width}],tokens=/["'{}[\]]|u(?:0022|0027|007b|007d|005b|005d)/gi;tokens.lastIndex=opener.end;let token;for(;(token=tokens.exec(value))!==null;){const delimiter=readDelimiterToken(value,token.index,token[0]);if(!delimiter)continue;const current=delimiter.character;if(current==="{"||current==="["){stack.push({character:current==="{"?"}":"]",width:delimiter.width});continue}if(current==="}"||current==="]"){const end=closeSensitiveContainer(stack,delimiter,delimiter.end,value.length);if(end!==void 0)return end;continue}tokens.lastIndex=quotedValueEnd(value,delimiter)}return value.length}function sensitiveAssignmentEnd(value,start,unquotedEnd){const match=/^(\\*)(["'{[]|u(?:0022|0027|007b|005b))/i.exec(value.slice(start)),delimiter=match?readDelimiterToken(value,start+match[1].length,match[2]):void 0;return delimiter?.character==="{"||delimiter?.character==="["?containerValueEnd(value,delimiter):delimiter?quotedValueEnd(value,delimiter):unquotedEnd}function decodeAssignmentKey(value){const chunks=[];let consumed=0;for(const token of value.matchAll(/u([\da-f]{4})/gi)){let start=token.index;for(;start>consumed&&value[start-1]==="\\";)start--;start!==token.index&&(chunks.push(value.slice(consumed,start),String.fromCharCode(Number.parseInt(token[1],16))),consumed=token.index+token[0].length)}return chunks.push(value.slice(consumed)),chunks.join("")}const ENCODED_DIAGNOSTIC_WHITESPACE="(?:\\s|\\\\+u(?:0009|000a|000d|0020))*",QUOTED_ASSIGNMENT_SEPARATOR_RE=new RegExp("^"+ENCODED_DIAGNOSTIC_WHITESPACE+"(?::|=|\\\\+u(?:003a|003d))"+ENCODED_DIAGNOSTIC_WHITESPACE,"iu");function quotedAssignment(value,rawKey,after){const key=decodeAssignmentKey(rawKey);if(!SENSITIVE_KEY_PATTERN.test(key)&&!/\\u/iu.test(key))return;const suffix=value.slice(after),separator=QUOTED_ASSIGNMENT_SEPARATOR_RE.exec(suffix);if(!separator)return/^\s*\\+u/iu.test(suffix)?{index:after,start:after,unquotedEnd:value.length,replacement:"[scrubbed]"}:void 0;const start=after+separator[0].length,scalar=/^[^\s,;]+/u.exec(value.slice(start));return scalar?{index:start,start,unquotedEnd:start+scalar[0].length,replacement:"[scrubbed]"}:void 0}function quotedSensitiveAssignments(value){const previousQuotes=new Map,assignments=[];for(const token of value.matchAll(/["']|u(?:0022|0027)/gi)){const quote=readDelimiterToken(value,token.index,token[0]);if(!quote)continue;const previous=previousQuotes.get(quote.identity),after=quote.end;if(previousQuotes.set(quote.identity,after),previous===void 0)continue;const assignment=quotedAssignment(value,value.slice(previous,quote.index),after);assignment&&assignments.push(assignment)}return assignments}function scrubInlineSensitiveAssignments(value){const assignments=quotedSensitiveAssignments(value);for(const match of value.matchAll(INLINE_SENSITIVE_ASSIGNMENT_RE)){const unquotedEnd=match.index+match[0].length;assignments.push({index:match.index,start:unquotedEnd-match[2].length,unquotedEnd,replacement:`${match[1]}=[scrubbed]`})}assignments.sort((left,right)=>left.index-right.index);const chunks=[];let consumed=0;for(const assignment of assignments)assignment.index<consumed||(chunks.push(value.slice(consumed,assignment.index),assignment.replacement),consumed=sensitiveAssignmentEnd(value,assignment.start,assignment.unquotedEnd));return chunks.push(value.slice(consumed)),chunks.join("")}export{SENSITIVE_KEY_PATTERN,scrubInlineSensitiveAssignments};
+//# sourceMappingURL=sensitive-assignments.js.map

package/dist/core/session/session-state.d.ts

@@ -8,62 +8,62 @@
  */
 export interface SessionState {
 /** Value that configures or reports focused item for this contract. */
-focused_item?: string;
+focused_item?:string;
 /** Privacy-safe semantic work context partitioned by agent invocation. */
-semantic_attribution?: Record<string, AgentSemanticAttribution>;
+semantic_attribution?:Record<string,AgentSemanticAttribution>;
 }
 /** Bounded inferred work context consumed by mutation provenance. */
 export interface AgentSemanticAttribution {
 /** Controlled role inferred from the current work lifecycle. */
-role: "implementer" | "planner" | "release-operator";
+role:"implementer" | "planner" | "release-operator";
 /** Stable item or workset identity, never prompt text. */
-topic: string;
+topic:string;
 /** Confidence attached to the inferred observation. */
-confidence: "high" | "medium";
+confidence:"high" | "medium";
 /** Versioned inference rule understood by history consumers. */
-rule_version: "v2";
+rule_version:"v2";
 /** Bounded item and lineage references supporting the inference. */
-evidence: string[];
+evidence:string[];
 /** Claimed items currently contributing to the workset. */
-active_item_ids: string[];
+active_item_ids:string[];
 /** Explicitly focused item when focus takes precedence over claims. */
-focused_item_id?: string;
+focused_item_id?:string;
 }
 /** Implements get session state path for the public runtime surface of this module. */
-export declare function getSessionStatePath(pmRoot: string): string;
+export declare function getSessionStatePath(pmRoot:string):string;
 /** Implements read session state for the public runtime surface of this module. */
-export declare function readSessionState(pmRoot: string): Promise<SessionState>;
+export declare function readSessionState(pmRoot:string):Promise<SessionState>;
 /** Derive a non-secret state key from a claim principal. */
-export declare function semanticAttributionKey(principal: string): string;
+export declare function semanticAttributionKey(principal:string):string;
 /** Record a successful claim as incremental semantic session evidence. */
-export declare function recordClaimedWorkAttribution(params: {
-pmRoot: string;
-principal: string;
-itemId: string;
-lineageIds?: readonly string[];
-}): Promise<void>;
+export declare function recordClaimedWorkAttribution(params:{
+pmRoot:string;
+principal:string;
+itemId:string;
+lineageIds?:readonly string[];
+}):Promise<void>;
 /** Remove a released item from incremental semantic session evidence. */
-export declare function releaseClaimedWorkAttribution(params: {
-pmRoot: string;
-principal: string;
-itemId: string;
-}): Promise<void>;
+export declare function releaseClaimedWorkAttribution(params:{
+pmRoot:string;
+principal:string;
+itemId:string;
+}):Promise<void>;
 /** Set or clear focus as the highest-confidence semantic topic. */
-export declare function recordFocusedWorkAttribution(params: {
-pmRoot: string;
-principal: string;
-itemId?: string;
-lineageIds?: readonly string[];
-}): Promise<void>;
+export declare function recordFocusedWorkAttribution(params:{
+pmRoot:string;
+principal:string;
+itemId?:string;
+lineageIds?:readonly string[];
+}):Promise<void>;
 /** Read one privacy-bounded inferred attribution without making mutations fail. */
-export declare function readAgentSemanticAttributionSync(params: {
-cwd: string;
-env: Readonly<Record<string, string | undefined>>;
-key: string | undefined;
-}): AgentSemanticAttribution | undefined;
+export declare function readAgentSemanticAttributionSync(params:{
+cwd:string;
+env:Readonly<Record<string,string | undefined>>;
+key:string | undefined;
+}):AgentSemanticAttribution | undefined;
 /** Implements get focused item for the public runtime surface of this module. */
-export declare function getFocusedItem(pmRoot: string): Promise<string | undefined>;
+export declare function getFocusedItem(pmRoot:string):Promise<string | undefined>;
 /** Implements set focused item for the public runtime surface of this module. */
-export declare function setFocusedItem(pmRoot: string, id: string): Promise<void>;
+export declare function setFocusedItem(pmRoot:string,id:string):Promise<void>;
 /** Implements clear focused item for the public runtime surface of this module. */
-export declare function clearFocusedItem(pmRoot: string): Promise<void>;
+export declare function clearFocusedItem(pmRoot:string):Promise<void>;

package/dist/core/shared/agent-session-context.d.ts

@@ -1,31 +1,31 @@
 /** Stable identity for one declared agent episode and its optional parent. */
 export interface AgentEpisodeIdentity {
 /** Stable caller-declared join key. */
-id: string;
+id:string;
 /** Human-readable purpose retained in local history. */
-label?: string;
+label?:string;
 /** Stable parent episode key for delegated or nested work. */
-parent_id?: string;
+parent_id?:string;
 }
 /** Session-wide descriptive context inherited by subsequent mutations. */
 export interface AgentSessionContext {
 /** Session-scoped role and topic declarations. */
-provenance?: Readonly<Record<string, string | undefined>>;
+provenance?:Readonly<Record<string,string | undefined>>;
 /** Optional declared episode identity. */
-episode?: AgentEpisodeIdentity;
+episode?:AgentEpisodeIdentity;
 }
 /** Bound and validate an episode declaration without exposing raw input. */
-export declare function boundAgentEpisodeIdentity(value: unknown, strict: boolean): AgentEpisodeIdentity | undefined;
+export declare function boundAgentEpisodeIdentity(value:unknown,strict:boolean):AgentEpisodeIdentity | undefined;
 /** Resolve ambient, inherited-environment, and explicit session context. */
-export declare function resolveAgentSessionContext(explicit: AgentSessionContext | undefined, env: Readonly<Record<string, string | undefined>>, fallbackEpisode?: AgentEpisodeIdentity): AgentSessionContext | undefined;
+export declare function resolveAgentSessionContext(explicit:AgentSessionContext | undefined,env:Readonly<Record<string,string | undefined>>,fallbackEpisode?:AgentEpisodeIdentity):AgentSessionContext | undefined;
 /** Resolve session context from a complete embedded-host signal envelope. */
-export declare function resolveAgentSessionContextFromSignals(signals: {
-session_context?: AgentSessionContext;
-client_info?: {
-episode?: AgentEpisodeIdentity;
+export declare function resolveAgentSessionContextFromSignals(signals:{
+session_context?:AgentSessionContext;
+client_info?:{
+episode?:AgentEpisodeIdentity;
 };
-}, env: Readonly<Record<string, string | undefined>>): AgentSessionContext;
+},env:Readonly<Record<string,string | undefined>>):AgentSessionContext;
 /** Run work with one inherited session declaration and automatic episode nesting. */
-export declare function runWithAgentSessionContext<T>(context: AgentSessionContext, callback: () => T): T;
+export declare function runWithAgentSessionContext<T>(context:AgentSessionContext,callback:() => T):T;
 /** Serialize one declaration into environment values inherited by CLI children. */
-export declare function agentSessionEnvironment(context: AgentSessionContext): Record<string, string>;
+export declare function agentSessionEnvironment(context:AgentSessionContext):Record<string,string>;