@zigrivers/scaffold 3.25.1 → 3.27.0

package/dist/observability/engine/redact.d.ts

@@ -0,0 +1,9 @@
+import type { EngineOutput } from './types.js';
+export declare function scrubSecrets(input: string): string;
+export declare function sanitizePath(s: string): string;
+export declare function redactEvent<T>(event: T): T;
+export declare function redactRendered(blob: string): string;
+/** Render-time redaction of a structured EngineOutput. Scrubs paths and secrets in string values only;
+ *  non-string values (numbers, booleans) are preserved regardless of key name. */
+export declare function redactEngineOutput(out: EngineOutput): EngineOutput;
+//# sourceMappingURL=redact.d.ts.map

package/dist/observability/engine/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../../src/observability/engine/redact.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAwB9C,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAUlD;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAM9C;AAmED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAE1C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAmBD;kFACkF;AAClF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,YAAY,CAElE"}

package/dist/observability/engine/redact.js

@@ -0,0 +1,134 @@
+// Shared keyword group: both the string-scrubber (KV_PART) and object-key sensor use this.
+// Lookahead ensures keyword ends a segment: 'tokenization_method' does not match ('token'
+// followed by 'i'), but camelCase keys like 'myToken' and 'updateToken' do match.
+const KEYWORDS = String.raw `(?:secret|token|password|api[_-]?key)(?![A-Za-z])`;
+// kv-secret: prefix (key+sep) in <kvp>, value in <kvv>.
+// Unquoted values stop at delimiters and strip trailing sentence punctuation.
+const KV_PART = String.raw `(?<kvp>\b(?:[A-Za-z0-9_-]*` + KEYWORDS + String.raw `[A-Za-z0-9_-]*)\s*[=:]\s*)`
+    + String.raw `(?<kvv>(?:"(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*'|[^'"\s,;]+(?<![,.!;])))`;
+// Single-pass combined regex — one replace call instead of four.
+// Raw high-entropy hex is intentionally omitted: it false-positives on file hashes and misses non-hex
+// secrets (e.g. AWS SAKs). The kv-secret pattern catches structured secrets by key name.
+const COMBINED_RE = new RegExp([
+    String.raw `(?<awskey>\bAKIA[0-9A-Z]{16}\b)`,
+    String.raw `(?<github>\bgh[pousr]_[A-Za-z0-9]{36,}\b)`,
+    KV_PART,
+].join('|'), 'gi');
+export function scrubSecrets(input) {
+    return input.replace(COMBINED_RE, (match, ...args) => {
+        // Named groups object is always the last argument for a regex with named groups.
+        const groups = args[args.length - 1];
+        // kv-secret: prefix (key + separator) is safe to keep; only the value is redacted.
+        if (groups.kvp !== undefined)
+            return `${groups.kvp}[REDACTED:kv-secret]`;
+        if (groups.awskey !== undefined)
+            return '[REDACTED:aws-key]';
+        if (groups.github !== undefined)
+            return '[REDACTED:github-token]';
+        return match;
+    });
+}
+export function sanitizePath(s) {
+    // Windows: preserve drive letter; replace \Users\<name> with \~ to keep drive context.
+    let out = s.replace(/([A-Za-z]:[/\\])Users[/\\][^/\\]+/g, '$1~');
+    // Unix: /Users/<name> or /home/<name> — negative lookbehind avoids mid-path matches like /mnt/home/alice
+    out = out.replace(/(?<![/a-zA-Z0-9])\/(?:Users|home)\/[^/]+/g, '~');
+    return out;
+}
+// Same keyword group as KEYWORDS — compiled separately for use as a RegExp test.
+const SENSITIVE_KEY_RE = new RegExp(KEYWORDS, 'i');
+function recursivelyTransform(v, transform, sensitiveKey = false, seen = new WeakMap()) {
+    if (typeof v === 'string')
+        return sensitiveKey ? '[REDACTED:kv-secret]' : transform(v);
+    if (sensitiveKey && (typeof v === 'number' || typeof v === 'boolean'))
+        return '[REDACTED:kv-secret]';
+    if (Array.isArray(v)) {
+        if (seen.has(v))
+            return seen.get(v);
+        const out = [];
+        seen.set(v, out);
+        for (const x of v) {
+            out.push(recursivelyTransform(x, transform, sensitiveKey, seen));
+        }
+        return out;
+    }
+    if (v instanceof Map) {
+        if (seen.has(v))
+            return seen.get(v);
+        const out = new Map();
+        seen.set(v, out);
+        for (const [k, val] of v) {
+            const keyIsSensitive = typeof k === 'string' && SENSITIVE_KEY_RE.test(k);
+            out.set(recursivelyTransform(k, transform, false, seen), recursivelyTransform(val, transform, sensitiveKey || keyIsSensitive, seen));
+        }
+        return out;
+    }
+    if (v instanceof Set) {
+        if (seen.has(v))
+            return seen.get(v);
+        const out = new Set();
+        seen.set(v, out);
+        for (const item of v) {
+            out.add(recursivelyTransform(item, transform, sensitiveKey, seen));
+        }
+        return out;
+    }
+    if (v instanceof Error) {
+        if (seen.has(v))
+            return seen.get(v);
+        const out = new Error(transform(v.message));
+        if (v.stack)
+            out.stack = transform(v.stack);
+        seen.set(v, out);
+        for (const [k, val] of Object.entries(v)) {
+            out[k] = recursivelyTransform(val, transform, sensitiveKey || SENSITIVE_KEY_RE.test(k), seen);
+        }
+        return out;
+    }
+    if (typeof v === 'object' && v !== null) {
+        // Only traverse plain objects; Buffers, TypedArrays, and custom class instances pass through.
+        const proto = Object.getPrototypeOf(v);
+        if (proto !== Object.prototype && proto !== null)
+            return v;
+        if (seen.has(v))
+            return seen.get(v);
+        const out = {};
+        seen.set(v, out);
+        for (const [k, val] of Object.entries(v)) {
+            out[k] = recursivelyTransform(val, transform, sensitiveKey || SENSITIVE_KEY_RE.test(k), seen);
+        }
+        return out;
+    }
+    return v;
+}
+export function redactEvent(event) {
+    return recursivelyTransform(event, (s) => sanitizePath(scrubSecrets(s)));
+}
+export function redactRendered(blob) {
+    return sanitizePath(scrubSecrets(blob));
+}
+function transformStrings(v, transform, seen = new WeakSet()) {
+    if (typeof v === 'string')
+        return transform(v);
+    if (typeof v !== 'object' || v === null)
+        return v;
+    if (seen.has(v))
+        return v;
+    seen.add(v);
+    if (Array.isArray(v))
+        return v.map((x) => transformStrings(x, transform, seen));
+    const proto = Object.getPrototypeOf(v);
+    if (proto !== Object.prototype && proto !== null)
+        return v;
+    const out = {};
+    for (const [k, val] of Object.entries(v)) {
+        out[k] = transformStrings(val, transform, seen);
+    }
+    return out;
+}
+/** Render-time redaction of a structured EngineOutput. Scrubs paths and secrets in string values only;
+ *  non-string values (numbers, booleans) are preserved regardless of key name. */
+export function redactEngineOutput(out) {
+    return transformStrings(out, (s) => sanitizePath(scrubSecrets(s)));
+}
+//# sourceMappingURL=redact.js.map

package/dist/observability/engine/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/observability/engine/redact.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,0FAA0F;AAC1F,kFAAkF;AAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA,mDAAmD,CAAA;AAE9E,wDAAwD;AACxD,8EAA8E;AAC9E,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAA,4BAA4B,GAAG,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAA,4BAA4B;MACtG,MAAM,CAAC,GAAG,CAAA,uEAAuE,CAAA;AAErF,iEAAiE;AACjE,sGAAsG;AACtG,yFAAyF;AACzF,MAAM,WAAW,GAAG,IAAI,MAAM,CAC5B;IACE,MAAM,CAAC,GAAG,CAAA,iCAAiC;IAC3C,MAAM,CAAC,GAAG,CAAA,2CAA2C;IACrD,OAAO;CACR,CAAC,IAAI,CAAC,GAAG,CAAC,EACX,IAAI,CACL,CAAA;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,EAAE,EAAE;QACnD,iFAAiF;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAuC,CAAA;QAC1E,mFAAmF;QACnF,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS;YAAE,OAAO,GAAG,MAAM,CAAC,GAAG,sBAAsB,CAAA;QACxE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,oBAAoB,CAAA;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,yBAAyB,CAAA;QACjE,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,uFAAuF;IACvF,IAAI,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAA;IAChE,yGAAyG;IACzG,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,2CAA2C,EAAE,GAAG,CAAC,CAAA;IACnE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,iFAAiF;AACjF,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;AAElD,SAAS,oBAAoB,CAC3B,CAAU,EACV,SAAgC,EAChC,YAAY,GAAG,KAAK,EACpB,OAAO,IAAI,OAAO,EAAmB;IAErC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACtF,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,sBAAsB,CAAA;IACpG,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAc,EAAE,CAAA;QACzB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;QAAC,CAAC;QACvF,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;QACrB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACxE,GAAG,CAAC,GAAG,CACL,oBAAoB,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,EAC/C,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,IAAI,cAAc,EAAE,IAAI,CAAC,CAC3E,CAAA;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;QACrB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,IAAI,IAAI,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAA;QAAC,CAAC;QAC5F,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAC3C,IAAI,CAAC,CAAC,KAAK;YAAE,GAAG,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3C,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACxC,GAA0C,CAAC,CAAC,CAAC,GAAG,oBAAoB,CACnE,GAAG,EAAE,SAAS,EAAE,YAAY,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAC/D,CAAA;QACH,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,8FAA8F;QAC9F,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAY,CAAA;QACjD,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,CAAA;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QAChB,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,GAAG,EAAE,SAAS,EAAE,YAAY,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;QAC/F,CAAC;QACD,OAAO,GAAG,CAAA;IACZ,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,KAAQ;IACrC,OAAO,oBAAoB,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAM,CAAA;AAC/E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAA;AACzC,CAAC;AAED,SAAS,gBAAgB,CACvB,CAAU,EAAE,SAAgC,EAAE,OAAO,IAAI,OAAO,EAAU;IAE1E,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC,CAAC,CAAC,CAAA;IAC9C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IACjD,IAAI,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC;QAAE,OAAO,CAAC,CAAA;IACnC,IAAI,CAAC,GAAG,CAAC,CAAW,CAAC,CAAA;IACrB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAA;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAY,CAAA;IACjD,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,CAAC,CAAA;IAC1D,MAAM,GAAG,GAA4B,EAAE,CAAA;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;IACjD,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,kBAAkB,CAAC,GAAiB;IAClD,OAAO,gBAAgB,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAiB,CAAA;AACpF,CAAC"}

package/dist/observability/engine/redact.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=redact.test.d.ts.map

package/dist/observability/engine/redact.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.test.d.ts","sourceRoot":"","sources":["../../../src/observability/engine/redact.test.ts"],"names":[],"mappings":""}

package/dist/observability/engine/redact.test.js

@@ -0,0 +1,244 @@
+import { fileURLToPath } from 'node:url';
+import { describe, it, expect } from 'vitest';
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { redactEvent, redactRendered, scrubSecrets, sanitizePath } from './redact.js';
+const corpus = readFileSync(join(fileURLToPath(new URL('.', import.meta.url)), '../../../tests/observability/fixtures/secret-corpus.txt'), 'utf8');
+describe('scrubSecrets', () => {
+    it('replaces matched secrets with [REDACTED:*]', () => {
+        const out = scrubSecrets(corpus);
+        for (const line of corpus.split('\n')) {
+            if (line.startsWith('REDACT ')) {
+                const value = line.replace(/^REDACT\s+/, '');
+                expect(out, `should redact: ${value}`).not.toContain(value);
+            }
+            if (line.startsWith('KEEP ')) {
+                const value = line.replace(/^KEEP\s+/, '');
+                expect(out, `must NOT redact: ${value}`).toContain(value);
+            }
+        }
+    });
+    it('returns the input unchanged when no secrets present', () => {
+        expect(scrubSecrets('hello world\nno secrets here')).toBe('hello world\nno secrets here');
+    });
+    it('redacts compound env-style key names (SECRET_TOKEN, ACCESS_TOKEN, CLIENT_SECRET)', () => {
+        const out = scrubSecrets('SECRET_TOKEN=abc ACCESS_TOKEN: xyz CLIENT_SECRET=qrs');
+        expect(out).not.toContain('abc');
+        expect(out).not.toContain('xyz');
+        expect(out).not.toContain('qrs');
+        expect(out).toContain('[REDACTED:kv-secret]');
+    });
+    it('redacts double-quoted values that contain spaces', () => {
+        const out = scrubSecrets('api_key="value with spaces"');
+        expect(out).not.toContain('value with spaces');
+        expect(out).toContain('[REDACTED:kv-secret]');
+    });
+    it('redacts single-quoted values that contain spaces', () => {
+        const out = scrubSecrets('api_key=\'value with spaces\'');
+        expect(out).not.toContain('value with spaces');
+        expect(out).toContain('[REDACTED:kv-secret]');
+    });
+    it('redacts value correctly when value text also appears in the key name', () => {
+        expect(scrubSecrets('my_password=password')).toBe('my_password=[REDACTED:kv-secret]');
+    });
+    it('preserves trailing punctuation outside the secret value', () => {
+        expect(scrubSecrets('Set password=hunter2.')).toBe('Set password=[REDACTED:kv-secret].');
+        expect(scrubSecrets('Keys: token=abc123, other=xyz')).toBe('Keys: token=[REDACTED:kv-secret], other=xyz');
+    });
+    it('does not redact 40-char hex strings (Git SHA-1 length)', () => {
+        const sha1 = 'da39a3ee5e6b4b0d3255bfef95601890afd80709';
+        expect(scrubSecrets(`commit ${sha1}`)).toContain(sha1);
+    });
+    it('does not redact bare hex strings without key=value context', () => {
+        const sha256 = 'a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d4e5f6a7b8c9d0e1f2a3b4';
+        expect(scrubSecrets(`file-sha256 ${sha256}`)).toContain(sha256);
+    });
+    it('does not swallow adjacent kv pairs when comma-delimited without spaces', () => {
+        const out = scrubSecrets('api_key=abc,user=alice');
+        expect(out).not.toContain('abc');
+        expect(out).toContain('user=alice');
+    });
+    it('redacts quoted values containing embedded escaped quotes', () => {
+        expect(scrubSecrets('api_key="my\\"secret"')).toBe('api_key=[REDACTED:kv-secret]');
+    });
+});
+describe('sanitizePath', () => {
+    it('rewrites macOS user paths to ~', () => {
+        expect(sanitizePath('/Users/alice/Documents/repo/file.ts'))
+            .toBe('~/Documents/repo/file.ts');
+    });
+    it('rewrites Linux user paths to ~', () => {
+        expect(sanitizePath('/home/bob/src/file.go'))
+            .toBe('~/src/file.go');
+    });
+    it('leaves repo-relative paths unchanged', () => {
+        expect(sanitizePath('src/auth/login.ts')).toBe('src/auth/login.ts');
+    });
+    it('rewrites Windows backslash user paths to ~, preserving drive letter', () => {
+        expect(sanitizePath('C:\\Users\\alice\\repo\\file.ts'))
+            .toBe('C:\\~\\repo\\file.ts');
+    });
+    it('rewrites Windows forward-slash user paths to ~, preserving drive letter', () => {
+        expect(sanitizePath('C:/Users/alice/repo/file.ts'))
+            .toBe('C:/~/repo/file.ts');
+    });
+    it('rewrites macOS user paths with spaces in username to ~', () => {
+        expect(sanitizePath('/Users/John Doe/Documents/repo/file.ts'))
+            .toBe('~/Documents/repo/file.ts');
+    });
+    it('rewrites Windows backslash paths with spaces in username to ~, preserving drive letter', () => {
+        expect(sanitizePath('C:\\Users\\John Doe\\repo\\file.ts'))
+            .toBe('C:\\~\\repo\\file.ts');
+    });
+    it('does not rewrite home-like paths that are not root-level home dirs', () => {
+        expect(sanitizePath('/mnt/home/alice/file.ts')).toBe('/mnt/home/alice/file.ts');
+        expect(sanitizePath('/var/Users/shared/file.ts')).toBe('/var/Users/shared/file.ts');
+    });
+});
+describe('redactEvent (write-time)', () => {
+    it('scrubs secrets from string fields and drops paths through sanitizePath', () => {
+        const e = {
+            event_id: '01H', worktree_id: 'wid', actor_label: 'alice',
+            branch: 'feat/api_key="abc-123-def"', task_id: 'T-1',
+            type: 'decision_recorded', ts: '2026-04-30T00:00:00Z',
+            payload: { key: 'k', summary: 'token=ghp_1234567890abcdefABCDEF1234567890abcdef',
+                affects: ['/Users/alice/Documents/repo/src/file.ts'] },
+        };
+        const out = redactEvent(e);
+        expect(out.payload.summary).toContain('[REDACTED:');
+        expect(out.payload.affects[0]).toBe('~/Documents/repo/src/file.ts');
+        expect(out.branch).toContain('[REDACTED:');
+    });
+    it('redacts string values whose object key matches a sensitive pattern', () => {
+        const result = redactEvent({ password: 'abc123', msg: 'hello' });
+        expect(result.password).toBe('[REDACTED:kv-secret]');
+        expect(result.msg).toBe('hello');
+    });
+    it('redacts leaf values nested under a sensitive key even when child key is not sensitive', () => {
+        const result = redactEvent({ password: { value: 'hunter2', extra: 'note' } });
+        const inner = result.password;
+        expect(inner.value).toBe('[REDACTED:kv-secret]');
+        expect(inner.extra).toBe('[REDACTED:kv-secret]');
+    });
+    it('preserves non-plain-object values (e.g. Date instances) unchanged', () => {
+        const d = new Date('2026-01-01T00:00:00Z');
+        const result = redactEvent({ ts: d, label: 'test' });
+        expect(result.ts).toBeInstanceOf(Date);
+        expect(result.ts).toBe(d);
+    });
+    it('does not redact values under keys where sensitive word is embedded in a larger word', () => {
+        const result = redactEvent({ tokenization_method: 'bpe', token: 'secret-val' });
+        const cast = result;
+        expect(cast.tokenization_method).toBe('bpe');
+        expect(cast.token).toBe('[REDACTED:kv-secret]');
+    });
+    it('recurses into Maps, applying key-sensitive detection for Map keys', () => {
+        const m = new Map([
+            ['password', 'hunter2'],
+            ['user', 'alice'],
+            ['count', 42],
+        ]);
+        const res = redactEvent({ data: m });
+        expect(res.data).toBeInstanceOf(Map);
+        expect(res.data.get('password')).toBe('[REDACTED:kv-secret]');
+        expect(res.data.get('user')).toBe('alice');
+        expect(res.data.get('count')).toBe(42);
+    });
+    it('redacts numeric and boolean values under sensitive object keys', () => {
+        const result = redactEvent({ api_key: 12345, count: 7 });
+        expect(result.api_key).toBe('[REDACTED:kv-secret]');
+        expect(result.count).toBe(7);
+    });
+    it('handles circular references without stack overflow', () => {
+        const obj = { label: 'test' };
+        obj.self = obj;
+        expect(() => redactEvent(obj)).not.toThrow();
+        const result = redactEvent(obj);
+        expect(result.label).toBe('test');
+        expect(result).not.toBe(obj);
+        expect(result.self).toBe(result); // cycle resolves to the sanitized clone, not the original
+    });
+    it('sanitizes Error message and stack, returning a new Error instance', () => {
+        const err = new Error('/Users/alice/src/file.ts threw');
+        const result = redactEvent(err);
+        expect(result).toBeInstanceOf(Error);
+        expect(result.message).toBe('~/src/file.ts threw');
+        expect(result.message).not.toContain('/Users/alice');
+    });
+    it('redacts enumerable properties on Error instances', () => {
+        const err = Object.assign(new Error('oops'), { token: 'secret-val', code: 'E_TOKEN' });
+        const result = redactEvent(err);
+        expect(result).toBeInstanceOf(Error);
+        expect(result.token).toBe('[REDACTED:kv-secret]');
+        expect(result.code).toBe('E_TOKEN');
+    });
+    it('preserves Buffer and non-plain-object values unchanged', () => {
+        const buf = Buffer.from('hello');
+        const result = redactEvent({ data: buf });
+        expect(result.data).toBeInstanceOf(Buffer);
+        expect(result.data).toBe(buf);
+    });
+});
+describe('redactRendered (render-time)', () => {
+    it('runs both secret-scrubbing and path-sanitization on a markdown blob', () => {
+        const md = 'See /Users/alice/repo/file.ts and token=hunter2';
+        const out = redactRendered(md);
+        expect(out).toContain('~/repo/file.ts');
+        expect(out).not.toContain('hunter2');
+        expect(out).toContain('[REDACTED:');
+    });
+});
+import { redactEngineOutput } from './redact.js';
+describe('redactEngineOutput (structured)', () => {
+    const skeleton = {
+        schema_version: '1.0',
+        invocation: {
+            command: 'audit', args: { user: '/Users/alice/repo' },
+            started_at: '', completed_at: '', scaffold_version: '0.0.0',
+        },
+        availability: {
+            git: { status: 'available' }, gh: { status: 'unavailable' },
+            pipeline_docs: { status: 'available' }, tests: { status: 'available' },
+            state: { status: 'available' }, beads: { status: 'unavailable' },
+            mmr: { status: 'available' }, audit_history: { status: 'unavailable' },
+            ledger: { events_read: 0, malformed_lines: 0, sources: [] },
+        },
+        snapshot: null, replay: null,
+        findings: [
+            { id: 'abc12345' + '0'.repeat(8), lens_id: 'A-tdd', severity: 'P1',
+                title: 'token=ghp_1234567890abcdefABCDEF1234567890abcdef',
+                description: '/Users/alice/Documents/repo/src/x.ts', source_doc: '',
+                evidence: { kind: 'rule_violation', rule_id: 'r', file: '/Users/alice/repo/src/x.ts' },
+                confidence: 'high', first_seen: '', last_seen: '', status: 'open' },
+        ],
+        needs_attention: [],
+        graph_stats: {
+            nodes_by_kind: {}, edges_by_kind: {}, orphans_by_kind: {}, unsanctioned_uses: 0, ad_hoc_token_uses: 0,
+        },
+        fix_threshold: 'P2', verdict: 'pass',
+        summary: { total: 1, by_severity: { P0: 0, P1: 1, P2: 0, P3: 0 },
+            by_severity_status: {
+                P0: { open: 0, acknowledged: 0, skipped: 0 }, P1: { open: 1, acknowledged: 0, skipped: 0 },
+                P2: { open: 0, acknowledged: 0, skipped: 0 }, P3: { open: 0, acknowledged: 0, skipped: 0 },
+            },
+            blocking: 0, acknowledged: 0, skipped_lenses: 0 },
+    };
+    it('scrubs secrets and rewrites paths in-depth', () => {
+        const out = redactEngineOutput(skeleton);
+        expect(JSON.stringify(out)).not.toContain('ghp_1234567890abcdefABCDEF1234567890abcdef');
+        expect(JSON.stringify(out)).not.toContain('/Users/alice');
+        expect(JSON.stringify(out)).toContain('~');
+        expect(JSON.stringify(out)).toContain('[REDACTED:');
+    });
+    it('does not mutate the input', () => {
+        const before = JSON.stringify(skeleton);
+        redactEngineOutput(skeleton);
+        expect(JSON.stringify(skeleton)).toBe(before);
+    });
+    it('preserves numeric fields whose key contains "token" (ad_hoc_token_uses, etc.)', () => {
+        const out = redactEngineOutput(skeleton);
+        expect(typeof out.graph_stats.ad_hoc_token_uses).toBe('number');
+        expect(out.graph_stats.ad_hoc_token_uses).toBe(0);
+    });
+});
+//# sourceMappingURL=redact.test.js.map

package/dist/observability/engine/redact.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.test.js","sourceRoot":"","sources":["../../../src/observability/engine/redact.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAErF,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,yDAAyD,CAAC,EAC7G,MAAM,CACP,CAAA;AAED,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;QAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;gBAC5C,MAAM,CAAC,GAAG,EAAE,kBAAkB,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC7D,CAAC;YACD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC1C,MAAM,CAAC,GAAG,EAAE,oBAAoB,KAAK,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAC3D,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IAC3F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kFAAkF,EAAE,GAAG,EAAE;QAC1F,MAAM,GAAG,GAAG,YAAY,CAAC,sDAAsD,CAAC,CAAA;QAChF,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAA;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,YAAY,CAAC,+BAA+B,CAAC,CAAA;QACzD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAA;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;QACxF,MAAM,CAAC,YAAY,CAAC,+BAA+B,CAAC,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAA;IAC3G,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,IAAI,GAAG,0CAA0C,CAAA;QACvD,MAAM,CAAC,YAAY,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAG,kEAAkE,CAAA;QACjF,MAAM,CAAC,YAAY,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,GAAG,GAAG,YAAY,CAAC,wBAAwB,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;IACpF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,YAAY,CAAC,qCAAqC,CAAC,CAAC;aACxD,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;aAC1C,IAAI,CAAC,eAAe,CAAC,CAAA;IAC1B,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,YAAY,CAAC,iCAAiC,CAAC,CAAC;aACpD,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,yEAAyE,EAAE,GAAG,EAAE;QACjF,MAAM,CAAC,YAAY,CAAC,6BAA6B,CAAC,CAAC;aAChD,IAAI,CAAC,mBAAmB,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,YAAY,CAAC,wCAAwC,CAAC,CAAC;aAC3D,IAAI,CAAC,0BAA0B,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,wFAAwF,EAAE,GAAG,EAAE;QAChG,MAAM,CAAC,YAAY,CAAC,oCAAoC,CAAC,CAAC;aACvD,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACjC,CAAC,CAAC,CAAA;IACF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAA;QAC/E,MAAM,CAAC,YAAY,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;IACrF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG;YACR,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO;YACzD,MAAM,EAAE,4BAA4B,EAAE,OAAO,EAAE,KAAK;YACpD,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,sBAAsB;YACrD,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,kDAAkD;gBAC9E,OAAO,EAAE,CAAC,yCAAyC,CAAC,EAAE;SAChD,CAAA;QACV,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAwE,CAAA;QACjG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;QACnD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAA;QACnE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAW,CAA2B,CAAA;QACnG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACpD,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,EAAW,CAAC,CAAA;QACtF,MAAM,KAAK,GAAI,MAA+C,CAAC,QAAQ,CAAA;QACvE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAW,CAAoB,CAAA;QAChF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAW,CAAC,CAAA;QACxF,MAAM,IAAI,GAAG,MAAgC,CAAA;QAC7C,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,GAAG,IAAI,GAAG,CAAkB;YACjC,CAAC,UAAU,EAAE,SAAS,CAAC;YACvB,CAAC,MAAM,EAAE,OAAO,CAAC;YACjB,CAAC,OAAO,EAAE,EAAE,CAAC;SACd,CAAC,CAAA;QACF,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAmC,CAAA;QAC/E,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QAC7D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAW,CAA4B,CAAA;QAC5F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACnD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,GAAG,GAA4B,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;QACtD,GAAG,CAAC,IAAI,GAAG,GAAG,CAAA;QACd,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACrD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAY,CAA4B,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA,CAAC,0DAA0D;IAC7F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAA;QACvD,MAAM,MAAM,GAAG,WAAW,CAAC,GAAY,CAAU,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;QAClD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;QACtF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAY,CAAoC,CAAA;QAC3E,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAA;QACjD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,GAAG,EAAW,CAAqB,CAAA;QACtE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAA;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,EAAE,GAAG,iDAAiD,CAAA;QAC5D,MAAM,GAAG,GAAG,cAAc,CAAC,EAAE,CAAC,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAA;QACvC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAGhD,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,MAAM,QAAQ,GAAiB;QAC7B,cAAc,EAAE,KAAK;QACrB,UAAU,EAAE;YACV,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YACrD,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,gBAAgB,EAAE,OAAO;SAC5D;QACD,YAAY,EAAE;YACZ,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;YAC3D,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;YACtE,KAAK,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;YAChE,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;YACtE,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;SAC5D;QACD,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI;QAC5B,QAAQ,EAAE;YACR,EAAE,EAAE,EAAE,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI;gBAChE,KAAK,EAAE,kDAAkD;gBACzD,WAAW,EAAE,sCAAsC,EAAE,UAAU,EAAE,EAAE;gBACnE,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE;gBACtF,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE;SACtE;QACD,eAAe,EAAE,EAAE;QACnB,WAAW,EAAE;YACX,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC;SACtG;QACD,aAAa,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM;QACpC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE;YAC9D,kBAAkB,EAAE;gBAClB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;gBAC1F,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;aAC3F;YACD,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;KACpD,CAAA;IAED,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAA;QACvF,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAA;QACzD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;QAC1C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACrD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QACvC,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QAC5B,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/D,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/observability/engine/stall.d.ts

@@ -0,0 +1,13 @@
+import type { Event, ReplayEvent, Finding, NeedsAttentionItem, Severity } from './types.js';
+import type { ObservabilityConfig } from './checks/observability-config.js';
+export interface EvaluateStallInput {
+    now: string;
+    ledgerEvents: Event[];
+    replayEvents: ReplayEvent[];
+    findings: Finding[];
+    config: ObservabilityConfig;
+    lensSkippedStreaks: Record<string, number>;
+    fixThreshold?: Severity;
+}
+export declare function evaluateStall(input: EvaluateStallInput): NeedsAttentionItem[];
+//# sourceMappingURL=stall.d.ts.map

package/dist/observability/engine/stall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall.d.ts","sourceRoot":"","sources":["../../../src/observability/engine/stall.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE3F,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAA;AAE3E,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,YAAY,EAAE,KAAK,EAAE,CAAA;IACrB,YAAY,EAAE,WAAW,EAAE,CAAA;IAC3B,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,MAAM,EAAE,mBAAmB,CAAA;IAC3B,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC1C,YAAY,CAAC,EAAE,QAAQ,CAAA;CACxB;AAgBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,kBAAkB,EAAE,CA8I7E"}

package/dist/observability/engine/stall.js

@@ -0,0 +1,167 @@
+import { severityRank } from './types.js';
+function parseHours(s) {
+    if (!s || s === 'off')
+        return null;
+    const m = s.match(/^(\d+(?:\.\d+)?)([hd])$/);
+    if (!m)
+        return null;
+    const n = Number(m[1]);
+    return m[2] === 'd' ? n * 24 : n;
+}
+function ageHours(now, ts) {
+    return Math.max(0, (Date.parse(now) - Date.parse(ts)) / 3_600_000);
+}
+function round1(n) { return Math.round(n * 10) / 10; }
+export function evaluateStall(input) {
+    const out = [];
+    const now = input.now;
+    const lastClaimByTask = new Map();
+    const lastResolutionByTask = new Map();
+    const lastHeartbeatByTask = new Map();
+    const openBlockersByTask = new Map();
+    const prOpenedById = new Map();
+    for (const e of input.ledgerEvents) {
+        if (e.type === 'task_claimed' && e.task_id) {
+            const prev = lastClaimByTask.get(e.task_id);
+            if (!prev || prev.ts < e.ts)
+                lastClaimByTask.set(e.task_id, e);
+        }
+        else if (e.type === 'task_completed' && e.task_id) {
+            const prev = lastResolutionByTask.get(e.task_id);
+            if (!prev || prev.ts < e.ts)
+                lastResolutionByTask.set(e.task_id, e);
+        }
+        else if (e.type === 'progress_heartbeat' && e.task_id) {
+            const prev = lastHeartbeatByTask.get(e.task_id);
+            if (!prev || prev.ts < e.ts)
+                lastHeartbeatByTask.set(e.task_id, e);
+        }
+        else if (e.type === 'blocker_hit') {
+            if (e.task_id)
+                openBlockersByTask.set(e.task_id, e);
+        }
+        else if (e.type === 'blocker_resolved') {
+            if (e.task_id)
+                openBlockersByTask.delete(e.task_id);
+        }
+        else if (e.type === 'pr_opened') {
+            const pn = e.payload.pr_number;
+            prOpenedById.set(pn, e);
+        }
+    }
+    function latestCommitOnBranchSince(branch, since) {
+        let latest = null;
+        for (const r of input.replayEvents) {
+            if (r.source !== 'git' || r.kind !== 'commit')
+                continue;
+            if (r.ts <= since)
+                continue;
+            // Require explicit branch match; commits without branch info are ignored
+            // to avoid a commit on an unrelated branch suppressing task_stale.
+            if (!r.branch || r.branch !== branch)
+                continue;
+            if (latest === null || r.ts > latest)
+                latest = r.ts;
+        }
+        return latest;
+    }
+    // task_stale
+    const taskStaleH = parseHours(input.config.stall.task_stale);
+    if (taskStaleH !== null) {
+        for (const [taskId, claim] of lastClaimByTask) {
+            const resolution = lastResolutionByTask.get(taskId);
+            if (resolution && resolution.ts >= claim.ts)
+                continue;
+            const heartbeat = lastHeartbeatByTask.get(taskId)?.ts;
+            const branchCommit = latestCommitOnBranchSince(claim.branch, claim.ts);
+            const lastActivityTs = [claim.ts, heartbeat, branchCommit].filter((x) => Boolean(x)).sort().pop();
+            const age = ageHours(now, lastActivityTs);
+            if (age <= taskStaleH)
+                continue;
+            out.push({
+                signal: 'task_stale',
+                ref: { kind: 'task', id: taskId },
+                age_hours: round1(age),
+                threshold_hours: taskStaleH,
+                summary: `task ${taskId} (${claim.actor_label}) claimed ${round1(age)}h ago, no recent activity`,
+            });
+        }
+    }
+    // pr_stale — age is based on latest of open time or branch commit time
+    const prStaleH = parseHours(input.config.stall.pr_stale);
+    if (prStaleH !== null) {
+        for (const [pn, opened] of prOpenedById) {
+            const merged = input.replayEvents.find((r) => r.source === 'gh' && r.correlation_id === `pr:${pn}:merged` && r.ts > opened.ts);
+            const closed = input.replayEvents.find((r) => r.source === 'gh' && r.kind === 'pr_closed'
+                && r.correlation_id === `pr:${pn}:closed` && r.ts > opened.ts);
+            if (merged || closed)
+                continue;
+            const branchCommit = latestCommitOnBranchSince(opened.branch, opened.ts);
+            const lastActivityTs = branchCommit ?? opened.ts;
+            const age = ageHours(now, lastActivityTs);
+            if (age <= prStaleH)
+                continue;
+            out.push({
+                signal: 'pr_stale',
+                ref: { kind: 'pr', id: String(pn) },
+                age_hours: round1(age),
+                threshold_hours: prStaleH,
+                summary: `PR #${pn} opened ${round1(ageHours(now, opened.ts))}h ago, no recent activity`,
+            });
+        }
+    }
+    // pr_review_stale — deferred to Plan 6 pending mmr adapter carrying per-PR correlation_id
+    // blocker_unaddressed
+    const blockerH = parseHours(input.config.stall.blocker_unaddressed);
+    if (blockerH !== null) {
+        for (const [taskId, blocker] of openBlockersByTask) {
+            const age = ageHours(now, blocker.ts);
+            if (age <= blockerH)
+                continue;
+            const summary = blocker.payload.summary ?? '(no summary)';
+            out.push({
+                signal: 'blocker_unaddressed',
+                ref: { kind: 'task', id: taskId },
+                age_hours: round1(age),
+                threshold_hours: blockerH,
+                summary: `${taskId} blocked ${round1(age)}h: ${summary}`,
+            });
+        }
+    }
+    // audit_findings_unresolved
+    const findingsH = parseHours(input.config.stall.audit_findings_unresolved);
+    const fixThreshold = input.fixThreshold ?? 'P2';
+    if (findingsH !== null) {
+        for (const f of input.findings) {
+            if (f.status !== 'open')
+                continue;
+            if (severityRank(f.severity) > severityRank(fixThreshold))
+                continue;
+            const age = ageHours(now, f.first_seen);
+            if (age <= findingsH)
+                continue;
+            out.push({
+                signal: 'audit_findings_unresolved',
+                ref: { kind: 'finding', id: f.id },
+                age_hours: round1(age),
+                threshold_hours: findingsH,
+                summary: `${f.severity} finding [${f.id.slice(0, 8)}] open ${round1(age)}h: ${f.title}`,
+            });
+        }
+    }
+    // lens_skipped_repeatedly — streak ≥ 3
+    for (const [lensId, streak] of Object.entries(input.lensSkippedStreaks)) {
+        if (streak < 3)
+            continue;
+        out.push({
+            signal: 'lens_skipped_repeatedly',
+            ref: { kind: 'lens', id: lensId },
+            age_hours: 0,
+            threshold_hours: 0,
+            threshold_count: 3,
+            summary: `lens ${lensId} skipped for ${streak} consecutive audits`,
+        });
+    }
+    return out;
+}
+//# sourceMappingURL=stall.js.map

package/dist/observability/engine/stall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall.js","sourceRoot":"","sources":["../../../src/observability/engine/stall.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAazC,SAAS,UAAU,CAAC,CAA6B;IAC/C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,EAAU;IACvC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,CAAA;AACpE,CAAC;AAED,SAAS,MAAM,CAAC,CAAS,IAAY,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA,CAAC,CAAC;AAErE,MAAM,UAAU,aAAa,CAAC,KAAyB;IACrD,MAAM,GAAG,GAAyB,EAAE,CAAA;IACpC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAA;IAErB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAiB,CAAA;IAChD,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAiB,CAAA;IACrD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAiB,CAAA;IACpD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAiB,CAAA;IACnD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAiB,CAAA;IAE7C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAC3C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;gBAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QAChE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;gBAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;YAC/C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE;gBAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACpE,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,IAAI,CAAC,CAAC,OAAO;gBAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;QACrD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACzC,IAAI,CAAC,CAAC,OAAO;gBAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;QACrD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,EAAE,GAAI,CAAC,CAAC,OAAiC,CAAC,SAAS,CAAA;YACzD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACzB,CAAC;IACH,CAAC;IAED,SAAS,yBAAyB,CAAC,MAAc,EAAE,KAAa;QAC9D,IAAI,MAAM,GAAkB,IAAI,CAAA;QAChC,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAQ;YACvD,IAAI,CAAC,CAAC,EAAE,IAAI,KAAK;gBAAE,SAAQ;YAC3B,yEAAyE;YACzE,mEAAmE;YACnE,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAQ;YAC9C,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM;gBAAE,MAAM,GAAG,CAAC,CAAC,EAAE,CAAA;QACrD,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,aAAa;IACb,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;IAC5D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;YAC9C,MAAM,UAAU,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YACnD,IAAI,UAAU,IAAI,UAAU,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE;gBAAE,SAAQ;YACrD,MAAM,SAAS,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAA;YACrD,MAAM,YAAY,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAA;YACtE,MAAM,cAAc,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAG,CAAA;YAC/G,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;YACzC,IAAI,GAAG,IAAI,UAAU;gBAAE,SAAQ;YAC/B,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,YAAY;gBACpB,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;gBACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,eAAe,EAAE,UAAU;gBAC3B,OAAO,EAAE,QAAQ,MAAM,KAAK,KAAK,CAAC,WAAW,aAAa,MAAM,CAAC,GAAG,CAAC,2BAA2B;aACjG,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;IACxD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CACvF,CAAA;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW;mBAC7C,CAAC,CAAC,cAAc,KAAK,MAAM,EAAE,SAAS,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAChE,CAAA;YACD,IAAI,MAAM,IAAI,MAAM;gBAAE,SAAQ;YAC9B,MAAM,YAAY,GAAG,yBAAyB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;YACxE,MAAM,cAAc,GAAG,YAAY,IAAI,MAAM,CAAC,EAAE,CAAA;YAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;YACzC,IAAI,GAAG,IAAI,QAAQ;gBAAE,SAAQ;YAC7B,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,UAAU;gBAClB,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE;gBACnC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,eAAe,EAAE,QAAQ;gBACzB,OAAO,EAAE,OAAO,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,2BAA2B;aACzF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,0FAA0F;IAE1F,sBAAsB;IACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAA;IACnE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;YACrC,IAAI,GAAG,IAAI,QAAQ;gBAAE,SAAQ;YAC7B,MAAM,OAAO,GAAI,OAAO,CAAC,OAAgC,CAAC,OAAO,IAAI,cAAc,CAAA;YACnF,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,qBAAqB;gBAC7B,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;gBACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,eAAe,EAAE,QAAQ;gBACzB,OAAO,EAAE,GAAG,MAAM,YAAY,MAAM,CAAC,GAAG,CAAC,MAAM,OAAO,EAAE;aACzD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAA;IAC1E,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,IAAI,CAAA;IAC/C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;gBAAE,SAAQ;YACjC,IAAI,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,YAAY,CAAC;gBAAE,SAAQ;YACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,UAAU,CAAC,CAAA;YACvC,IAAI,GAAG,IAAI,SAAS;gBAAE,SAAQ;YAC9B,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,2BAA2B;gBACnC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAClC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;gBACtB,eAAe,EAAE,SAAS;gBAC1B,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,aAAa,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE;aACxF,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAED,uCAAuC;IACvC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxE,IAAI,MAAM,GAAG,CAAC;YAAE,SAAQ;QACxB,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,yBAAyB;YACjC,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE;YACjC,SAAS,EAAE,CAAC;YACZ,eAAe,EAAE,CAAC;YAClB,eAAe,EAAE,CAAC;YAClB,OAAO,EAAE,QAAQ,MAAM,gBAAgB,MAAM,qBAAqB;SACnE,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/observability/engine/stall.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=stall.test.d.ts.map

package/dist/observability/engine/stall.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stall.test.d.ts","sourceRoot":"","sources":["../../../src/observability/engine/stall.test.ts"],"names":[],"mappings":""}