@vibesdotdev/logging 0.0.2 → 1.0.0-rc.5

package/dist/core/redact.js

@@ -0,0 +1,581 @@
+/**
+ * Logging-owned redaction and structured error schemas.
+ *
+ * Raw values enter the published schemas. Redaction uses keys and secret()
+ * values; free text remains data. Parsing yields a detached snapshot.
+ *
+ * One rule governs every value read off an Error or a context: each field is
+ * read exactly once, inside a guard. A string is kept (and passes the same
+ * key and `secret()` redaction as everything else); any other value goes
+ * through the one redaction walk; a value that cannot be read is never
+ * carried: an Error is then described value-free, and a context refuses with
+ * a typed `ZodError` issue holding a fixed message and the path.
+ */
+import * as z from 'zod/v4';
+import { attempt } from "./outcome.js";
+export const REDACTED = '[REDACTED]';
+/**
+ * Whole keys that hold a credential. A bare `tokens` is listed on purpose and
+ * stays secret even when it holds a count: a key carries no type, so the safe
+ * reading wins; a count says so in its name (`maxTokens`, `inputTokens`,
+ * `tokenCount` stay readable).
+ */
+const SECRET_KEY_EXACT = new Set([
+    'authorization', 'proxyauthorization', 'cookie', 'cookies', 'setcookie', 'bearer', 'auth', 'authheader',
+    'credentialblob', 'tokens', 'secrets', 'jwt', 'sessionid', 'dsn', 'key'
+]);
+// Plural forms are listed explicitly; a bare `tokens` suffix is not, so token
+// counts (`maxTokens`, `inputTokens`) stay readable. Named key material
+// (`sshKey`, `signingKey`, `encryptionKey`, `masterKey`, `privKey`) and one-time
+// codes (`mfaCode`, `pinCode`) are secret; a key that names a key without
+// holding one (`keyId`, `publicKey`, `primaryKey`, `cacheKey`) is not.
+const SECRET_KEY_SUFFIXES = [
+    'token', 'secret', 'secrets', 'password', 'passwords', 'passwd', 'passphrase', 'apikey', 'apikeys',
+    'privatekey', 'privatekeys', 'privkey', 'privkeys', 'accesskey', 'accesskeys', 'secretkey', 'secretkeys',
+    'sshkey', 'sshkeys', 'signingkey', 'signingkeys', 'encryptionkey', 'encryptionkeys', 'masterkey', 'masterkeys',
+    'mfacode', 'mfacodes', 'pincode', 'pincodes', 'passcode', 'passcodes', 'credential', 'credentials',
+    'signature', 'signatures', 'jwt', 'accesstokens', 'refreshtokens', 'idtokens', 'authtokens', 'apitokens',
+    'bearertokens', 'sessiontokens', 'connectionstring', 'databaseurl'
+];
+// Secret material named mid-key (`privateKeyPem`, `apiKeyId`, `passwordHash`).
+const SECRET_KEY_INFIXES = ['password', 'privatekey', 'apikey', 'secretkey', 'clientsecret', 'accesstoken', 'refreshtoken'];
+/**
+ * The credential words: a key (or query parameter name) whose last word is one
+ * of these names a credential. Matched as a whole word, never inside one, so
+ * `pwd`, `pass`, `pin`, `otp`, `totp`, `dbPwd` and `db_pass` are secret while `passage`,
+ * `bypass`, `spin` and `passCount` are not. A bare `key` is secret as the whole key only (the
+ * exact list), so `monkey`, `keyId`, `cacheKey` and `credentialKey` (which name
+ * a key, not hold one) stay readable. The endpoint scrubber's credential query
+ * parameters use the same rule (`isSecretKey`), so the two never disagree.
+ */
+export const CREDENTIAL_KEY_WORDS = [
+    'token', 'secret', 'password', 'passwd', 'pass', 'pwd', 'passphrase', 'pin', 'otp', 'totp', 'credential', 'signature', 'jwt', 'bearer'
+];
+const CREDENTIAL_WORDS = new Set(CREDENTIAL_KEY_WORDS);
+/** A key's words: split at separators and at a lower-to-upper case change (`sshKey` -> `ssh`, `key`), lowercased. */
+function keyWords(key) {
+    return key.replace(/([a-z0-9])([A-Z])/g, '$1 $2').toLowerCase().split(/[^a-z0-9]+/).filter((word) => word !== '');
+}
+/**
+ * A string a caller hands in, refused as a `ZodError` issue for any other value.
+ * Zod's own `z.string()` describes a refused value's type with `Array.isArray`,
+ * which throws a `TypeError` for a revoked Proxy; this check reads only `typeof`.
+ */
+export const CallerStringSchema = z.custom((value) => typeof value === 'string', { message: 'Expected a string.' });
+/**
+ * Case- and separator-insensitive matching; token counts stay readable. A key
+ * is secret when its normalized form is a listed name, ends with a listed
+ * suffix or holds a listed infix (a bare `key` is listed), or when its last
+ * word is a credential word ({@link CREDENTIAL_KEY_WORDS}).
+ */
+export function isSecretKey(key) {
+    // Total for any value a caller hands at runtime: only a string is a key (read by `typeof`, which runs no trap), anything else names no secret.
+    if (!CallerStringSchema.safeParse(key).success)
+        return false;
+    const normalized = key.toLowerCase().replace(/[^a-z0-9]/g, '');
+    const last = keyWords(key).at(-1);
+    return SECRET_KEY_EXACT.has(normalized) ||
+        SECRET_KEY_SUFFIXES.some((suffix) => normalized.endsWith(suffix)) ||
+        SECRET_KEY_INFIXES.some((infix) => normalized.includes(infix)) ||
+        (last !== undefined && CREDENTIAL_WORDS.has(last));
+}
+const SECRET_BRAND = Symbol.for('vibes.logging.secret-value');
+/** A secret that redacts in serialization; reveal() is the explicit escape. */
+export class SecretValue {
+    [SECRET_BRAND] = true;
+    #value;
+    constructor(value) { this.#value = value; }
+    reveal() { return this.#value; }
+    toJSON() { return REDACTED; }
+    toString() { return REDACTED; }
+    [Symbol.for('nodejs.util.inspect.custom')]() { return REDACTED; }
+}
+export function secret(value) {
+    return new SecretValue(value);
+}
+const ObjectValueSchema = z.custom((value) => typeof value === 'object' && value !== null);
+/**
+ * Validates the branded secret protocol without copying the secret instance.
+ * Total: a value whose protocol reads throw (a trap, a getter, a revoked
+ * Proxy) is not a secret value and refuses as an issue, never rethrowing.
+ */
+export const SecretValueSchema = z.custom((value) => {
+    const object = ObjectValueSchema.safeParse(value);
+    if (!object.success)
+        return false;
+    const candidate = object.data;
+    const branded = attempt(() => hasSecretProtocol(candidate));
+    return !branded.failed && branded.value;
+});
+/** The branded secret protocol's reads; any of them may throw (a trap, a getter, a revoked Proxy), so the schema runs this inside `attempt`. */
+function hasSecretProtocol(candidate) {
+    return SECRET_BRAND in candidate && candidate[SECRET_BRAND] === true &&
+        'reveal' in candidate && typeof candidate.reveal === 'function' &&
+        'toJSON' in candidate && typeof candidate.toJSON === 'function' &&
+        'toString' in candidate && typeof candidate.toString === 'function';
+}
+export const PlainLogRecordSchema = z.custom((value) => {
+    const object = ObjectValueSchema.safeParse(value);
+    if (!object.success || Array.isArray(object.data))
+        return false;
+    const prototype = Object.getPrototypeOf(object.data);
+    return prototype === Object.prototype || prototype === null;
+});
+const MAX_DEPTH = 8;
+const MAX_CAUSE_DEPTH = 5;
+/**
+ * The breadth cap of the walk: an array keeps its first `MAX_WALK_BREADTH`
+ * items and an object its first `MAX_WALK_BREADTH` own enumerable keys (an
+ * AggregateError its first `MAX_WALK_BREADTH` members). What is past the cap
+ * is not read; it is described by one truncation marker holding the count
+ * left out ({@link truncationMarker}): a last array item, an object's
+ * {@link TRUNCATED_KEY} field, or a last aggregate member named `Truncated`.
+ * Ordinary contexts are far below it; a 100,000-item array is walked in a few
+ * milliseconds instead of the hundreds a full walk takes.
+ */
+export const MAX_WALK_BREADTH = 1000;
+/** The key an object's truncation marker is carried under. */
+export const TRUNCATED_KEY = '[Truncated]';
+/** The marker for `omitted` items, keys or members past the breadth cap. */
+export function truncationMarker(omitted) {
+    return `[Truncated: ${omitted} more]`;
+}
+const KNOWN_ERROR_KEYS = new Set([
+    'name', 'message', 'stack', 'cause', 'code', 'reason', 'status',
+    'statusCode', 'retryable', 'details', 'errors'
+]);
+// Error metadata is optional. Unsupported representations have no typed field;
+// they do not prevent describing the original thrown value.
+const OptionalStringSchema = z.union([z.string(), z.unknown().transform(() => undefined)]).optional();
+const OptionalNumberSchema = z.union([z.number(), z.unknown().transform(() => undefined)]).optional();
+const ErrorMetadataSchema = z.object({
+    code: z.union([z.string(), z.number(), z.unknown().transform(() => undefined)]).optional(),
+    reason: OptionalStringSchema,
+    status: OptionalNumberSchema,
+    statusCode: OptionalNumberSchema,
+    retryable: z.union([z.boolean(), z.unknown().transform(() => undefined)]).optional(),
+    details: z.unknown().optional()
+});
+const JsonHookSchema = z.custom((value) => typeof value === 'function');
+const ArrayValueSchema = z.custom((value) => Array.isArray(value));
+const StringValueSchema = z.string();
+/**
+ * A real Map or Set: an instance by its prototype chain that also passes the intrinsic brand check
+ * (`Map.prototype.has` / `Set.prototype.has` called on it, which runs no caller code). A Proxy of a Map fails the
+ * brand check and walks as the object it presents; a Map with a swapped or null prototype is not an instance and
+ * walks as a plain object. Every read after this goes through the built-in intrinsics captured here, so no
+ * caller-defined `size`, iterator, `entries` or `values` runs.
+ */
+const MAP_HAS = Map.prototype.has;
+const SET_HAS = Set.prototype.has;
+const MAP_ENTRIES = Map.prototype.entries;
+const SET_VALUES = Set.prototype.values;
+const MapValueSchema = z.custom((value) => value instanceof Map && !attempt(() => MAP_HAS.call(value, undefined)).failed);
+const SetValueSchema = z.custom((value) => value instanceof Set && !attempt(() => SET_HAS.call(value, undefined)).failed);
+/** Takes the first `MAX_WALK_BREADTH` values of an intrinsic iterator; the rest are counted, never kept or walked. */
+function collectionContents(iterator) {
+    const first = [];
+    let size = 0;
+    for (let step = iterator.next(); !step.done; step = iterator.next()) {
+        if (size < MAX_WALK_BREADTH)
+            first.push(step.value);
+        size += 1;
+    }
+    return { size, first };
+}
+/**
+ * A caller primitive that JSON cannot carry, as the JSON value every sink can
+ * serialize: a bigint as its decimal string (`10n` -> `"10"`), a symbol as its
+ * `Symbol(description)` text, a function as `[Function]`, and NaN / Infinity /
+ * -Infinity as the strings `"NaN"`, `"Infinity"`, `"-Infinity"`. JSON primitives
+ * pass unchanged. No sink downstream of the walk can then throw on a value.
+ * A function is recognized by `typeof`, which no Proxy trap can intercept.
+ */
+export const FUNCTION_MARKER = '[Function]';
+const JsonPrimitiveSchema = z.union([
+    z.bigint().transform((value) => value.toString()),
+    z.symbol().transform((value) => value.toString()),
+    JsonHookSchema.transform(() => FUNCTION_MARKER),
+    z.custom((value) => Number.isNaN(value) || value === Number.POSITIVE_INFINITY || value === Number.NEGATIVE_INFINITY).transform((value) => String(value)),
+    z.unknown()
+]);
+/** The refusal message for a caller value that cannot be read: never what the read threw, which may carry the value. */
+export const UNREADABLE_LOG_VALUE_MESSAGE = 'A log value could not be read (a getter, Proxy trap or conversion threw), so it cannot be snapshotted; what it threw is withheld because it may carry the value.';
+/** The refusal message for a value whose own JSON hook throws; the hook's failure value never travels with it. */
+export const JSON_HOOK_REFUSAL_MESSAGE = 'A log value\'s toJSON hook threw, so the value cannot be snapshotted.';
+/**
+ * The refusals this module minted (a fixed message and a path, nothing read
+ * from a caller value). Only these leave a walk; a lookup runs no caller trap.
+ */
+const OWN_REFUSALS = new WeakMap();
+function refusal(message, path) {
+    const refused = new z.ZodError([{ code: 'custom', path: [...path], input: undefined, message }]);
+    OWN_REFUSALS.set(refused, refused);
+    return refused;
+}
+/**
+ * What a failure inside the walk becomes: the module's own refusal passes
+ * through (found by a lookup that reads nothing off the failure); anything
+ * else is the caller's thrown value, which may carry the secret, so it becomes
+ * the value-free unreadable refusal at `path`.
+ */
+function createRefusalSchema(path) {
+    return z.unknown().transform((cause) => {
+        const object = ObjectValueSchema.safeParse(cause);
+        return (object.success ? OWN_REFUSALS.get(object.data) : undefined) ?? refusal(UNREADABLE_LOG_VALUE_MESSAGE, path);
+    });
+}
+/**
+ * One structural read of a caller value (a property, a key list, a prototype
+ * check, a hook lookup). Whatever it throws becomes the value-free unreadable
+ * refusal at `path`: the thrown value is the caller's and may carry the
+ * secret, so the refusal states the fact and the place, never the value.
+ */
+function guardedRead(path, read) {
+    const outcome = attempt(read);
+    if (!outcome.failed)
+        return outcome.value;
+    throw createRefusalSchema(path).parse(outcome.cause);
+}
+/**
+ * Sets `key` on a snapshot as an own data property. Plain assignment would run
+ * the `__proto__` setter and drop that key (changing the snapshot's prototype
+ * instead), so a caller's own `__proto__` field survives as data.
+ */
+function defineField(target, key, value) {
+    Object.defineProperty(target, key, { value, enumerable: true, writable: true, configurable: true });
+}
+/** Any caller object or array viewed as its keyed fields; the view is the same reference, nothing is copied or read. */
+const KeyedFieldsSchema = z.custom((value) => typeof value === 'object' && value !== null);
+/** Reads the field `key` of a caller object exactly once (presence, then one read), inside the guard. */
+function createFieldSchema(key, path) {
+    return z.unknown().transform((target) => guardedRead([...path, key], () => {
+        const fields = KeyedFieldsSchema.parse(target);
+        return key in fields ? { present: true, value: fields[key] } : { present: false };
+    }));
+}
+/**
+ * The named fields of a caller value (an audit input, a tracker's params), each
+ * read exactly once inside the guard, as a record of the raw values read; an
+ * absent field is left out, and a value that is not an object has no fields.
+ * A read that throws (a getter, a Proxy trap, a revoked Proxy) refuses with
+ * the value-free unreadable `ZodError` issue at that field's path: nothing it
+ * threw is carried, and the schema never throws it. The values read are still
+ * raw; the caller walks or validates them.
+ */
+export function createFieldsReadSchema(keys) {
+    return z.unknown().transform((value, context) => {
+        const fields = {};
+        if (!ObjectValueSchema.safeParse(value).success)
+            return fields;
+        for (const key of keys) {
+            const read = attempt(() => createFieldSchema(key, []).parse(value));
+            if (read.failed) {
+                for (const issue of createRefusalSchema([key]).parse(read.cause).issues)
+                    context.issues.push({ code: 'custom', message: issue.message, path: issue.path, input: undefined });
+                return z.NEVER;
+            }
+            if (read.value.present)
+                defineField(fields, key, read.value.value);
+        }
+        return fields;
+    });
+}
+/** A walked value as text: a string as itself, any other JSON value as its JSON text, `undefined` as `undefined`. */
+const WalkedTextSchema = z.unknown().transform((walked) => {
+    const text = StringValueSchema.safeParse(walked);
+    if (text.success)
+        return text.data;
+    return walked === undefined ? 'undefined' : JSON.stringify(walked);
+});
+/**
+ * A text field of a description (an Error's name, message or stack, a thrown
+ * primitive's message): a string is kept; any other value goes through the
+ * redaction walk and is carried as the walked value's text, so an object is
+ * redacted by key and a bigint, symbol or function is converted, never raw.
+ */
+function createTextSchema(seen, depth, path) {
+    return z.unknown().transform((value) => {
+        const text = StringValueSchema.safeParse(value);
+        return text.success ? text.data : WalkedTextSchema.parse(createWalkSchema(seen, depth, path).parse(value).value);
+    });
+}
+/** A present, non-empty text field read once off `error`, by the one field rule. */
+function readText(seen, error, key, depth) {
+    const read = createFieldSchema(key, []).parse(error);
+    if (!read.present || read.value === undefined || read.value === null || read.value === '')
+        return undefined;
+    return createTextSchema(seen, depth + 1, [key]).parse(read.value);
+}
+/**
+ * The one redaction walk. Each traversal carries its own cycle/depth state;
+ * every container is detached; every JSON hook is read once and runs exactly
+ * once; every structural read is guarded, so the walk throws only this
+ * module's typed, value-free refusals; and a nested Error is described by the
+ * total describer, in place.
+ */
+function createWalkSchema(seen, depth, path) {
+    return z.unknown().transform((value) => {
+        const object = ObjectValueSchema.safeParse(value);
+        if (!object.success)
+            return { value: guardedRead(path, () => JsonPrimitiveSchema.parse(value)) };
+        const target = object.data;
+        if (seen.has(target))
+            return { value: '[Circular]' };
+        if (depth >= MAX_DEPTH)
+            return { value: '[MaxDepth]' };
+        // A provable Error is described before any other read, so a trap elsewhere on it costs only its own description.
+        if (guardedRead(path, () => target instanceof Error))
+            return { value: createDescribedThrownSchema(seen, 0, depth, UNDESCRIBABLE_ERROR_MESSAGE).parse(target).error };
+        if (guardedRead(path, () => SecretValueSchema.safeParse(target).success))
+            return { value: REDACTED };
+        const hook = createFieldSchema('toJSON', path).parse(target);
+        const callable = hook.present ? JsonHookSchema.safeParse(hook.value) : undefined;
+        const child = (next) => createWalkSchema(seen, depth + 1, next);
+        seen.add(target);
+        try {
+            if (callable?.success) {
+                const run = callable.data;
+                const key = path.length === 0 ? '' : String(path[path.length - 1]);
+                const snapshot = attempt(() => run.call(target, key));
+                // The refusal is typed and carries no hook failure: a hook's thrown value is its own secret to keep.
+                if (snapshot.failed)
+                    throw refusal(JSON_HOOK_REFUSAL_MESSAGE, path);
+                return child(path).parse(snapshot.value);
+            }
+            const list = guardedRead(path, () => ArrayValueSchema.safeParse(target));
+            if (list.success) {
+                const items = list.data;
+                // Length and each kept item are read once; a hole or `undefined` item is `null`, as JSON writes it. Items past the cap are not read.
+                const length = guardedRead(path, () => items.length);
+                const kept = Math.min(length, MAX_WALK_BREADTH);
+                const read = guardedRead(path, () => Array.from({ length: kept }, (_, index) => items[index]));
+                const walked = read.map((item, index) => child([...path, index]).parse(item).value ?? null);
+                if (length > kept)
+                    walked.push(truncationMarker(length - kept));
+                return { value: walked };
+            }
+            // A Map is its entries: each key as text (a string as itself, any other key as its walked JSON text) and each
+            // value walked and redacted by that key, like an object's fields; a Set is its values, like an array. Both keep
+            // their first MAX_WALK_BREADTH entries and carry one truncation marker for the rest, which are never pulled.
+            const map = guardedRead(path, () => MapValueSchema.safeParse(target));
+            if (map.success) {
+                const { size, first: entries } = guardedRead(path, () => collectionContents(MAP_ENTRIES.call(map.data)));
+                const copy = {};
+                entries.forEach(([key, entry], index) => {
+                    const field = WalkedTextSchema.parse(child([...path, index]).parse(key).value);
+                    defineField(copy, field, isSecretKey(field) && entry !== undefined && entry !== null
+                        ? REDACTED
+                        : child([...path, field]).parse(entry).value);
+                });
+                if (size > entries.length)
+                    defineField(copy, TRUNCATED_KEY, truncationMarker(size - entries.length));
+                return { value: copy };
+            }
+            const set = guardedRead(path, () => SetValueSchema.safeParse(target));
+            if (set.success) {
+                const { size, first: members } = guardedRead(path, () => collectionContents(SET_VALUES.call(set.data)));
+                const walked = members.map((member, index) => child([...path, index]).parse(member).value ?? null);
+                if (size > members.length)
+                    walked.push(truncationMarker(size - members.length));
+                return { value: walked };
+            }
+            // Own enumerable fields must be redacted regardless of their prototype; each kept one is read once, the rest not at all.
+            const keys = guardedRead(path, () => Object.keys(target));
+            const fields = KeyedFieldsSchema.parse(target);
+            const copy = {};
+            for (const field of keys.slice(0, MAX_WALK_BREADTH)) {
+                // The read is guarded at the container's path, as a whole-object read would be.
+                const entry = guardedRead(path, () => fields[field]);
+                defineField(copy, field, isSecretKey(field) && entry !== undefined && entry !== null
+                    ? REDACTED
+                    : child([...path, field]).parse(entry).value);
+            }
+            if (keys.length > MAX_WALK_BREADTH)
+                defineField(copy, TRUNCATED_KEY, truncationMarker(keys.length - MAX_WALK_BREADTH));
+            return { value: copy };
+        }
+        finally {
+            seen.delete(target);
+        }
+    });
+}
+/** An Error's metadata, each field read once. */
+function readMetadata(error) {
+    const read = (key) => createFieldSchema(key, []).parse(error);
+    const valueOf = (field) => ({ value: field.present ? field.value : undefined });
+    return ErrorMetadataSchema.parse({
+        code: valueOf(read('code')).value,
+        reason: valueOf(read('reason')).value,
+        status: valueOf(read('status')).value,
+        statusCode: valueOf(read('statusCode')).value,
+        retryable: valueOf(read('retryable')).value,
+        details: valueOf(read('details')).value
+    });
+}
+/** The full description; it may throw (a guarded read's refusal, a trap), and only the total describer runs it. */
+function createLoggedErrorSchema(seen, causeDepth, depth) {
+    return z.unknown().transform((thrown) => {
+        if (!(thrown instanceof Error)) {
+            const object = ObjectValueSchema.safeParse(thrown);
+            return object.success
+                ? { name: 'NonError', message: '[non-error thrown]', details: createWalkSchema(seen, depth, []).parse(thrown).value }
+                : { name: 'NonError', message: createTextSchema(seen, depth, []).parse(thrown) };
+        }
+        const error = thrown;
+        const head = () => ({ name: readText(seen, error, 'name', depth) ?? '', message: readText(seen, error, 'message', depth) ?? '' });
+        if (seen.has(error))
+            return { ...head(), details: '[Circular]' };
+        seen.add(error);
+        try {
+            const logged = head();
+            const metadata = readMetadata(error);
+            if (metadata.code !== undefined)
+                logged.code = metadata.code;
+            if (metadata.reason !== undefined)
+                logged.reason = metadata.reason;
+            const status = metadata.status ?? metadata.statusCode;
+            if (status !== undefined)
+                logged.status = status;
+            if (metadata.retryable !== undefined)
+                logged.retryable = metadata.retryable;
+            if (metadata.details !== undefined)
+                logged.details = createWalkSchema(seen, depth + 1, ['details']).parse(metadata.details).value;
+            // The other own fields, bounded like any object: the first MAX_WALK_BREADTH are read once each, the rest not at all.
+            const fields = {};
+            const ownFields = guardedRead([], () => Object.keys(error)).filter((key) => !KNOWN_ERROR_KEYS.has(key));
+            for (const key of ownFields.slice(0, MAX_WALK_BREADTH)) {
+                const read = createFieldSchema(key, []).parse(error);
+                defineField(fields, key, read.present ? read.value : undefined);
+            }
+            if (ownFields.length > 0) {
+                if (depth + 1 >= MAX_DEPTH)
+                    logged.fields = { value: '[MaxDepth]' };
+                else {
+                    const walked = PlainLogRecordSchema.parse(createWalkSchema(seen, depth + 1, ['fields']).parse(fields).value);
+                    if (ownFields.length > MAX_WALK_BREADTH)
+                        defineField(walked, TRUNCATED_KEY, truncationMarker(ownFields.length - MAX_WALK_BREADTH));
+                    logged.fields = walked;
+                }
+            }
+            const stack = readText(seen, error, 'stack', depth);
+            if (stack !== undefined)
+                logged.stack = stack;
+            const cause = createFieldSchema('cause', []).parse(error);
+            if (cause.present && cause.value !== undefined) {
+                logged.cause = causeDepth >= MAX_CAUSE_DEPTH ? '[MaxCauseDepth]' : createCauseSchema(seen, causeDepth + 1, depth + 1).parse(cause.value).value;
+            }
+            if (error instanceof AggregateError && causeDepth < MAX_CAUSE_DEPTH) {
+                const members = createFieldSchema('errors', []).parse(error);
+                if (members.present) {
+                    const list = ArrayValueSchema.safeParse(members.value);
+                    // A non-array `errors` is one member; an array's length and kept items are read once, up to the breadth cap.
+                    const length = list.success ? list.data.length : 1;
+                    const kept = Math.min(length, MAX_WALK_BREADTH);
+                    const items = list.success ? Array.from({ length: kept }, (_, index) => list.data[index]) : [members.value];
+                    const member = createDescribedThrownSchema(seen, causeDepth + 1, depth + 1, UNDESCRIBABLE_ERROR_MESSAGE);
+                    logged.errors = items.map((value) => member.parse(value).error);
+                    if (length > kept)
+                        logged.errors.push({ name: 'Truncated', message: truncationMarker(length - kept) });
+                }
+            }
+            return logged;
+        }
+        finally {
+            seen.delete(error);
+        }
+    });
+}
+/** What a thrown value's description says when describing it throws: never the thrown message, which a hostile getter or trap can fill with the value. */
+export const UNDESCRIBABLE_ERROR_MESSAGE = 'The thrown value could not be described (a getter, toJSON, conversion or Proxy trap threw); its message is withheld because it may carry the value.';
+/** An error name a value-free description may carry: an identifier that names no secret. */
+const SafeErrorNameSchema = z.string().regex(/^[A-Za-z_$][A-Za-z0-9_$]{0,63}$/).refine((name) => !isSecretKey(name));
+/**
+ * The name a value-free description carries: a provable Error's own name when it
+ * reads without throwing and is a plain identifier naming no secret, else
+ * `Error`; `NonError` for anything not provably an Error (`instanceof` reads the
+ * prototype, which a Proxy trap or a revoked Proxy throws from).
+ */
+export const ReadableErrorNameSchema = z.unknown().transform((value) => {
+    const error = attempt(() => (value instanceof Error ? value : undefined));
+    if (error.failed || error.value === undefined)
+        return 'NonError';
+    const thrown = error.value;
+    const name = attempt(() => SafeErrorNameSchema.parse(thrown.name));
+    return name.failed ? 'Error' : name.value;
+});
+/** Describes a thrown value without the value: its readable error name and the fixed `message`. */
+export function valueFreeFailureSchema(message) {
+    return z.unknown().transform((cause) => ({ name: ReadableErrorNameSchema.parse(cause), message }));
+}
+/**
+ * The total description of one thrown value: the full `LoggedError` when it can
+ * be built, else the value-free one (readable name and `undescribable`). Any
+ * failure while describing (a getter, `toJSON`, conversion or Proxy trap,
+ * `instanceof` included) selects the value-free form; nothing it threw travels.
+ */
+function createDescribedThrownSchema(seen, causeDepth, depth, undescribable) {
+    return z.unknown().transform((value) => {
+        const full = attempt(() => createLoggedErrorSchema(seen, causeDepth, depth).parse(value));
+        if (!full.failed)
+            return { error: full.value, described: true };
+        return { error: { name: ReadableErrorNameSchema.parse(value), message: undescribable }, described: false };
+    });
+}
+/** An Error's cause: an Error is described, any other value walked; one that cannot be either is described value-free, so it never costs the Error its own description. */
+function createCauseSchema(seen, causeDepth, depth) {
+    return z.unknown().transform((cause) => {
+        const nested = attempt(() => cause instanceof Error
+            ? { value: createLoggedErrorSchema(seen, causeDepth, depth).parse(cause) }
+            : createWalkSchema(seen, depth, ['cause']).parse(cause));
+        if (!nested.failed)
+            return nested.value;
+        return { value: { name: ReadableErrorNameSchema.parse(cause), message: UNDESCRIBABLE_ERROR_MESSAGE } };
+    });
+}
+/**
+ * The total describer of a thrown value, with the message its value-free form
+ * carries. It never throws, for any input, and its description is JSON.
+ */
+export function createThrownValueSchema(undescribable) {
+    return createDescribedThrownSchema(new WeakSet(), 0, 0, undescribable);
+}
+/** {@link createThrownValueSchema} with {@link UNDESCRIBABLE_ERROR_MESSAGE}. */
+export const ThrownValueSchema = createThrownValueSchema(UNDESCRIBABLE_ERROR_MESSAGE);
+/**
+ * Raw thrown values normalize here, including primitives and non-Error objects.
+ * Total: it never throws. An ordinary Error is described in full (name,
+ * message, metadata, redacted details and fields, stack, cause chain,
+ * aggregate members), each field read once: a string field is kept, a
+ * non-string one is walked and carried as its redacted JSON text. A value
+ * whose description throws is described as its readable error name
+ * (`ReadableErrorNameSchema`) and `UNDESCRIBABLE_ERROR_MESSAGE`, and a cause or
+ * aggregate member that cannot be described is described that way in place.
+ */
+export const LoggedErrorSchema = ThrownValueSchema.transform((thrown) => thrown.error);
+/** A thrown value's message for a report line, through the total describer: never throws, never the text of a value that cannot be described. */
+export const ThrownMessageSchema = ThrownValueSchema.transform((thrown) => thrown.error.message);
+/**
+ * The one nested-value schema. A consumer that parses a value with it owns a
+ * detached, redacted snapshot: secret keys and `secret()` values are replaced,
+ * Errors become `LoggedError` (described in place by the total describer),
+ * every object's callable `toJSON` runs exactly once and its returned value is
+ * normalized the same way, and no caller container is retained. A value that
+ * cannot be read (a getter or Proxy trap throws) or whose hook throws refuses
+ * with a `ZodError` issue holding a fixed message and the path; nothing the
+ * value threw is carried, and the schema never throws it. `JSON.stringify` of
+ * the result runs no hook.
+ */
+export const RedactedLogValueSchema = z.unknown().transform((value, context) => {
+    const walked = attempt(() => createWalkSchema(new WeakSet(), 0, []).parse(value));
+    if (!walked.failed)
+        return walked.value.value;
+    // Every structural read is guarded, so the walk throws only its own refusals; the one rule maps the failure either way.
+    const refused = createRefusalSchema([]).parse(walked.cause);
+    for (const issue of refused.issues)
+        context.issues.push({ code: 'custom', message: issue.message, path: issue.path, input: undefined });
+    return z.NEVER;
+});
+/** The emitted path reuses {@link RedactedLogValueSchema}: delivery and the public schema are one contract. */
+export const EmittedLogValueSchema = RedactedLogValueSchema;
+//# sourceMappingURL=redact.js.map

package/dist/core/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/core/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,MAAM,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC;AAErC;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAChC,eAAe,EAAE,oBAAoB,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY;IACvG,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK;CACvE,CAAC,CAAC;AACH,8EAA8E;AAC9E,wEAAwE;AACxE,iFAAiF;AACjF,0EAA0E;AAC1E,uEAAuE;AACvE,MAAM,mBAAmB,GAAG;IAC3B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS;IAClG,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY;IACxG,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY;IAC9G,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa;IAClG,WAAW,EAAE,YAAY,EAAE,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW;IACxG,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,aAAa;CAClE,CAAC;AACF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;AAE5H;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IACnC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ;CAC7H,CAAC;AACX,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAE/D,qHAAqH;AACrH,SAAS,QAAQ,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AACnH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,EAAE,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAE7I;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACtC,+IAA+I;IAC/I,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC;QACtC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjE,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9D,CAAC,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAE9D,+EAA+E;AAC/E,MAAM,OAAO,WAAW;IACd,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IACtB,MAAM,CAAS;IACxB,YAAY,KAAa,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IACnD,MAAM,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IACxC,MAAM,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;IACrC,QAAQ,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;IACvC,CAAC,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,KAAa,OAAO,QAAQ,CAAC,CAAC,CAAC;CACzE;AAED,MAAM,UAAU,MAAM,CAAC,KAAa;IACnC,OAAO,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAmB,EAAE,CACrE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAC3C,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAc,CAAC,KAAK,EAAwB,EAAE;IACtF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC;IAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;AACzC,CAAC,CAAC,CAAC;AAUH,gJAAgJ;AAChJ,SAAS,iBAAiB,CAAC,SAAkC;IAC5D,OAAO,YAAY,IAAI,SAAS,IAAI,SAAS,CAAC,YAAY,CAAC,KAAK,IAAI;QACnE,QAAQ,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU;QAC/D,QAAQ,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,UAAU;QAC/D,UAAU,IAAI,SAAS,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,UAAU,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAa,CAAC,KAAK,EAAuB,EAAE;IACvF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC7D,CAAC,CAAC,CAAC;AAiBH,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,8DAA8D;AAC9D,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAC3C,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC/C,OAAO,eAAe,OAAO,QAAQ,CAAC;AACvC,CAAC;AACD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ;IAC/D,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ;CAC9C,CAAC,CAAC;AAEH,+EAA+E;AAC/E,4DAA4D;AAC5D,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtG,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACtG,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1F,MAAM,EAAE,oBAAoB;IAC5B,MAAM,EAAE,oBAAoB;IAC5B,UAAU,EAAE,oBAAoB;IAChC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpF,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAKH,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAW,CAAC,KAAK,EAAqB,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC;AACrG,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAqB,CAAC,KAAK,EAA+B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AACpH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAErC;;;;;;GAMG;AACH,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;AAClC,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;AAClC,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC;AAC1C,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC;AACxC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACjJ,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAe,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAQxI,sHAAsH;AACtH,SAAS,kBAAkB,CAAI,QAAqB;IACnD,MAAM,KAAK,GAAQ,EAAE,CAAC;IACtB,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QACrE,IAAI,IAAI,GAAG,gBAAgB;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAC5C,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC;IACnC,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;IACjD,cAAc,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC;IAC/C,CAAC,CAAC,MAAM,CAAS,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,CAAC,iBAAiB,IAAI,KAAK,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChK,CAAC,CAAC,OAAO,EAAE;CACX,CAAC,CAAC;AAKH,wHAAwH;AACxH,MAAM,CAAC,MAAM,4BAA4B,GAAG,kKAAkK,CAAC;AAE/M,kHAAkH;AAClH,MAAM,CAAC,MAAM,yBAAyB,GAAG,uEAAuE,CAAC;AAEjH;;;GAGG;AACH,MAAM,YAAY,GAAG,IAAI,OAAO,EAAsB,CAAC;AAEvD,SAAS,OAAO,CAAC,OAAe,EAAE,IAAc;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACjG,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,IAAc;IAC1C,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAc,EAAE;QAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClD,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAC;IACpH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAI,IAAc,EAAE,IAAa;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC;IAC1C,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,MAAkB,EAAE,GAAW,EAAE,KAA6B;IAClF,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;AACrG,CAAC;AAUD,wHAAwH;AACxH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAuB,CAAC,KAAK,EAAiC,EAAE,CACjG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAC3C,CAAC;AAEF,yGAAyG;AACzG,SAAS,iBAAiB,CAAC,GAAW,EAAE,IAAc;IACrD,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAa,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,GAAc,EAAE;QAC/F,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/C,OAAO,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAuB;IAC7D,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,OAAO,EAAc,EAAE;QAC3D,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO;YAAE,OAAO,MAAM,CAAC;QAC/D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACpE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,MAAM,KAAK,IAAI,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC7K,OAAO,CAAC,CAAC,KAAK,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO;gBAAE,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,qHAAqH;AACrH,MAAM,gBAAgB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAU,EAAE;IACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACnC,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAqB,EAAE,KAAa,EAAE,IAAc;IAC7E,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAU,EAAE;QAC9C,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,IAAqB,EAAE,KAAY,EAAE,GAAW,EAAE,KAAa;IAChF,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAC5G,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,IAAqB,EAAE,KAAa,EAAE,IAAc;IAC7E,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAiB,EAAE;QACrD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACjG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACrD,IAAI,KAAK,IAAI,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;QACvD,iHAAiH;QACjH,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,YAAY,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QACrK,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QACrG,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjB,IAAI,CAAC;YACJ,IAAI,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC;gBAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;gBACtD,qGAAqG;gBACrG,IAAI,QAAQ,CAAC,MAAM;oBAAE,MAAM,OAAO,CAAC,yBAAyB,EAAE,IAAI,CAAC,CAAC;gBACpE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACzE,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC;gBACxB,qIAAqI;gBACrI,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACrD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBAChD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC/F,MAAM,MAAM,GAAc,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBACvG,IAAI,MAAM,GAAG,IAAI;oBAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC;gBAChE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;YACD,8GAA8G;YAC9G,gHAAgH;YAChH,6GAA6G;YAC7G,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACtE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACzG,MAAM,IAAI,GAAe,EAAE,CAAC;gBAC5B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE;oBACvC,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC/E,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;wBACnF,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;gBAChD,CAAC,CAAC,CAAC;gBACH,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM;oBAAE,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACrG,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YACxB,CAAC;YACD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YACtE,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;gBACjB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxG,MAAM,MAAM,GAAc,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;gBAC9G,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM;oBAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBAChF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YAC1B,CAAC;YACD,yHAAyH;YACzH,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/C,MAAM,IAAI,GAAe,EAAE,CAAC;YAC5B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBACrD,gFAAgF;gBAChF,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACrD,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;oBACnF,CAAC,CAAC,QAAQ;oBACV,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB;gBAAE,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC;YACvH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxB,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,SAAS,YAAY,CAAC,KAAY;IACjC,MAAM,IAAI,GAAG,CAAC,GAAW,EAAa,EAAE,CAAC,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjF,MAAM,OAAO,GAAG,CAAC,KAAgB,EAAiB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC1G,OAAO,mBAAmB,CAAC,KAAK,CAAC;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;QACjC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QACrC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK;QACrC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK;QAC7C,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK;QAC3C,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;KACvC,CAAC,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,SAAS,uBAAuB,CAAC,IAAqB,EAAE,UAAkB,EAAE,KAAa;IACxF,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,MAAM,EAAe,EAAE;QACpD,IAAI,CAAC,CAAC,MAAM,YAAY,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,MAAM,CAAC,OAAO;gBACpB,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;gBACrH,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC;QACrB,MAAM,IAAI,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC/I,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;YACtB,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;YAC7D,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC;YACtD,IAAI,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;YACjD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS;gBAAE,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;YAC5E,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;gBAAE,MAAM,CAAC,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;YAClI,qHAAqH;YACrH,MAAM,MAAM,GAAe,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACxG,KAAK,MAAM,GAAG,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,CAAC;gBACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACrD,WAAW,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,IAAI,KAAK,GAAG,CAAC,IAAI,SAAS;oBAAE,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;qBAC/D,CAAC;oBACL,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC7G,IAAI,SAAS,CAAC,MAAM,GAAG,gBAAgB;wBAAE,WAAW,CAAC,MAAM,EAAE,aAAa,EAAE,gBAAgB,CAAC,SAAS,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC;oBACnI,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACxB,CAAC;YACF,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;YAC9C,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAChD,MAAM,CAAC,KAAK,GAAG,UAAU,IAAI,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAChJ,CAAC;YACD,IAAI,KAAK,YAAY,cAAc,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;gBACrE,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC7D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oBACrB,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBACvD,6GAA6G;oBAC7G,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;oBAChD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC5G,MAAM,MAAM,GAAG,2BAA2B,CAAC,IAAI,EAAE,UAAU,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,2BAA2B,CAAC,CAAC;oBACzG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;oBAChE,IAAI,MAAM,GAAG,IAAI;wBAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxG,CAAC;YACF,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACF,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,0JAA0J;AAC1J,MAAM,CAAC,MAAM,2BAA2B,GAAG,qJAAqJ,CAAC;AAEjM,4FAA4F;AAC5F,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;AAErH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAU,EAAE;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1E,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEH,mGAAmG;AACnG,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACrD,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAe,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACjH,CAAC;AAQD;;;;;GAKG;AACH,SAAS,2BAA2B,CAAC,IAAqB,EAAE,UAAkB,EAAE,KAAa,EAAE,aAAqB;IACnH,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAA0B,EAAE;QAC9D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC5G,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,2KAA2K;AAC3K,SAAS,iBAAiB,CAAC,IAAqB,EAAE,UAAkB,EAAE,KAAa;IAClF,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAiB,EAAE;QACrD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAkB,EAAE,CAAC,KAAK,YAAY,KAAK;YACjE,CAAC,CAAC,EAAE,KAAK,EAAE,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;YAC1E,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACxC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,2BAA2B,EAAwB,EAAE,CAAC;IAC9H,CAAC,CAAC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,aAAqB;IAC5D,OAAO,2BAA2B,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;AACxE,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;AAEtF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,EAAe,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEpG,iJAAiJ;AACjJ,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC,MAAM,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAEzG;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,OAAO,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAClF,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;IAC9C,wHAAwH;IACxH,MAAM,OAAO,GAAG,mBAAmB,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACxI,OAAO,CAAC,CAAC,KAAK,CAAC;AAChB,CAAC,CAAC,CAAC;AAEH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC"}

package/dist/core/root-identity.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The Root a runtime belongs to, as the kernel knows it. Logging keys every
+ * per-Root state (registrations, settings, namespace selection, emission
+ * window, resources, stdout capture, error tracking, telemetry) by it.
+ *
+ * It is `rootIdentityOf(runtime)`, never the runtime's own `rootIdentity`
+ * property: a Proxy or derived object can answer another Root's readable
+ * identity, and must not reach that Root's Logging state. A runtime the kernel
+ * neither constructed nor viewed names no Root and is refused typed.
+ */
+import { type RuntimeRef, type RuntimeRootIdentity } from '@vibesdotdev/kernel';
+export declare function loggingRootOf(runtime: RuntimeRef): RuntimeRootIdentity;
+//# sourceMappingURL=root-identity.d.ts.map

package/dist/core/root-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"root-identity.d.ts","sourceRoot":"","sources":["../../src/core/root-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAmC,KAAK,UAAU,EAAE,KAAK,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAEjH,wBAAgB,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,mBAAmB,CAUtE"}