autotel-schema 2.0.5 → 4.0.0

package/dist/contract-Ymh_Q37N.d.ts

@@ -0,0 +1,305 @@
+//#region src/scenario.d.ts
+/**
+ * Scenario conformance — a flow-level contract checked against collected spans.
+ *
+ * Where {@link ./contract} declares the *surface* of your telemetry (span
+ * names + attributes), a scenario declares the *behaviour* of one exercised
+ * flow: which events must fire, how many times, in what parent/child
+ * topology, and — critically — **when the observation is complete**, because
+ * for an async flow a missing event and an event that has not fired *yet* are
+ * indistinguishable without a completion boundary.
+ *
+ * Checking a scenario yields one of three outcomes, not two:
+ *
+ * - `conformant` — the boundary closed and the signature satisfied the contract
+ * - `non-conformant` — required behaviour was missing or invalid (definitive)
+ * - `incomplete` — the boundary did not close within the observation budget;
+ *   infrastructure slowness is *not* reported as behavioural regression
+ *
+ * Absence is definitive only after closure (closed-world semantics). Excess
+ * is definitive immediately: a `max` cardinality violation or an unexpected
+ * error span fails the check even while the flow is still open.
+ *
+ * Undeclared events are **additive**: reported in `result.additions`, never a
+ * failure — improving instrumentation must not break CI.
+ *
+ * The span input shape is structurally compatible with `SerializedSpan` from
+ * `autotel/test-span-collector`, so a test can feed a collector's output
+ * straight in. Like the rest of this package the module is dependency-free —
+ * usable from vitest, a deferred reconciliation job, or a CLI alike.
+ *
+ * @example
+ * ```ts
+ * const result = await checkScenario(
+ *   contract.scenarios!['transfer.accept'],
+ *   () => collector.peekTrace(traceId),
+ *   { name: 'transfer.accept' },
+ * );
+ * if (result.outcome === 'non-conformant') throw new Error(formatScenarioResult(result));
+ * ```
+ */
+/** A finished span/event as the scenario checker sees it. */
+interface ScenarioSpan {
+  spanId: string;
+  parentSpanId?: string;
+  name: string;
+  status: 'ok' | 'error' | 'unset';
+  attributes?: Record<string, unknown>;
+  /** Epoch ms. Optional — used by {@link proposeScenario} to suggest budgets. */
+  startTimeMs?: number;
+  durationMs?: number;
+}
+/** Canonical cardinality range. `max` omitted = unbounded. */
+interface Cardinality {
+  min: number;
+  max?: number;
+}
+/**
+ * Parse a cardinality shorthand: `'exactly 1'`, `'at least 1'`, `'at most 3'`,
+ * `'0..1'`, `'2..'`. A canonical {@link Cardinality} passes through.
+ */
+declare function parseCardinality(input: string | Cardinality): Cardinality;
+/** Declaration for one event (span name) a scenario expects to observe. */
+interface ScenarioEventSpec {
+  /** How many occurrences are permitted. Defaults to `'at least 1'`. */
+  cardinality?: string | Cardinality;
+  /**
+   * Expected terminal status. Defaults to non-error: an `error` status on an
+   * event not declared `status: 'error'` is a definitive violation.
+   */
+  status?: 'ok' | 'error';
+  description?: string;
+}
+/**
+ * How the observed phase of a scenario becomes complete. Every async
+ * conformance check must declare this — it is what makes absence meaningful.
+ *
+ * `externally-reconciled` never closes in-process: the phase is verified
+ * elsewhere (a deferred reconciliation job keyed by a durable business ID),
+ * so an in-process check reports at most definitive violations, never absence.
+ */
+type CompletionBoundary = {
+  mode: 'root-span-closed';
+  observationBudgetMs: number;
+} | {
+  mode: 'terminal-event';
+  event: string;
+  observationBudgetMs: number;
+} | {
+  mode: 'externally-reconciled';
+  reconciliationDeadlineMs: number;
+};
+/** The flow-level contract for one exercised scenario (or one phase of one). */
+interface ScenarioSpec {
+  description?: string;
+  /** When the observed phase is complete. See {@link CompletionBoundary}. */
+  completion: CompletionBoundary;
+  /** Events this scenario must (or may) observe, keyed by span name. */
+  events: Record<string, ScenarioEventSpec>;
+  /**
+   * Required ancestor→descendant edges by span name. Ancestor — not immediate
+   * parent — so a framework span inserted between the two does not break the
+   * contract (canonicalisation: infrastructure spans are not behaviour).
+   */
+  edges?: ReadonlyArray<readonly [string, string]>;
+  /** Edges that may appear but are not required. Documented, never enforced. */
+  optionalEdges?: ReadonlyArray<readonly [string, string]>;
+}
+type ScenarioOutcome = 'conformant' | 'non-conformant' | 'incomplete';
+type ScenarioViolationCode = 'missing_event' | 'cardinality_violation' | 'missing_edge' | 'unexpected_error';
+/** A definitive (breaking) discrepancy between observed spans and the scenario. */
+interface ScenarioViolation {
+  code: ScenarioViolationCode;
+  event?: string;
+  edge?: readonly [string, string];
+  message: string;
+}
+/** An additive observation — reported, never a failure. */
+interface ScenarioAddition {
+  code: 'undeclared_event';
+  event: string;
+  count: number;
+  message: string;
+}
+interface ScenarioResult {
+  scenario: string;
+  outcome: ScenarioOutcome;
+  /** Whether the completion boundary closed within the observation window. */
+  closed: boolean;
+  violations: ScenarioViolation[];
+  additions: ScenarioAddition[];
+  /** The evaluated snapshot — assert business values on this in your test. */
+  spans: ScenarioSpan[];
+}
+/**
+ * Structural validation for one scenario declaration. Called by
+ * `defineContract()` so a malformed scenario throws at module load.
+ */
+declare function validateScenarioSpec(name: string, spec: ScenarioSpec): void;
+/** Whether the scenario's completion boundary has closed for these spans. */
+declare function isScenarioClosed(spec: ScenarioSpec, spans: readonly ScenarioSpan[]): boolean;
+interface EvaluateScenarioOptions {
+  /** Name used in the result/messages. Defaults to `'scenario'`. */
+  name?: string;
+  /** Override closure detection (e.g. the poller already knows). */
+  closed?: boolean;
+}
+/**
+ * Pure three-state evaluation of collected spans against a scenario.
+ *
+ * Definitive at any time (no closure needed): an unexpected error status, a
+ * `max` cardinality exceeded. Meaningful only after closure: a missing event,
+ * a `min` cardinality not reached, a missing required edge.
+ */
+declare function evaluateScenario(spec: ScenarioSpec, spans: readonly ScenarioSpan[], options?: EvaluateScenarioOptions): ScenarioResult;
+interface CheckScenarioOptions {
+  /** Name used in the result/messages. Defaults to `'scenario'`. */
+  name?: string;
+  /** Poll interval while waiting for closure. Default 25ms. */
+  pollIntervalMs?: number;
+  /** Override the boundary's observation budget (how long the checker waits). */
+  budgetMs?: number;
+}
+/**
+ * Poll `getSpans` until the scenario's completion boundary closes, a
+ * definitive violation appears (fail fast), or the observation budget is
+ * spent — then evaluate.
+ *
+ * The observation budget bounds how long *this checker* waits; it is not a
+ * statement that the operation is allowed to take that long. Express a
+ * business deadline as its own assertion on the returned spans.
+ *
+ * An `externally-reconciled` boundary never closes in-process: the check
+ * evaluates the current snapshot once and reports `incomplete` unless a
+ * definitive violation is already present.
+ */
+declare function checkScenario(spec: ScenarioSpec, getSpans: () => readonly ScenarioSpan[] | Promise<readonly ScenarioSpan[]>, options?: CheckScenarioOptions): Promise<ScenarioResult>;
+/** Human-readable summary of a scenario result, for assertion messages. */
+declare function formatScenarioResult(result: ScenarioResult): string;
+interface ScenarioProposal {
+  scenario: ScenarioSpec;
+  /** Review annotations — what was observed and what to double-check. */
+  notes: string[];
+}
+/**
+ * Draft a scenario contract from repeated controlled runs (record → propose →
+ * commit). Events stable across every run become required with their observed
+ * cardinality; variable ones get a range and a review note. The draft is a
+ * starting point for human curation, not a finished contract.
+ */
+declare function proposeScenario(runs: ReadonlyArray<ReadonlyArray<ScenarioSpan>>, options?: {
+  name?: string;
+}): ScenarioProposal;
+//#endregion
+//#region src/contract.d.ts
+/** Scalar and array attribute types permitted on a span (OTLP value shapes). */
+type AttributeType = 'string' | 'number' | 'boolean' | 'string[]' | 'number[]' | 'boolean[]';
+declare const ATTRIBUTE_TYPES: readonly AttributeType[];
+/**
+ * Lifecycle of a span or attribute, mirroring how the OpenTelemetry semantic
+ * conventions stage their own surface. `stable` is a promise to agent readers
+ * that the name will not change without a major contract bump.
+ */
+type Stability = 'stable' | 'experimental' | 'deprecated';
+declare const STABILITIES: readonly Stability[];
+/** Declaration for a single attribute key on a span. */
+interface AttributeSpec {
+  /** OTLP value shape. Validated at runtime against the emitted value. */
+  type: AttributeType;
+  /** Lifecycle stage. Defaults to `stable`. */
+  stability?: Stability;
+  /** When `true`, the attribute must be present on every matching span. */
+  required?: boolean;
+  /** Human/agent-facing description of what the attribute means. */
+  description?: string;
+  /**
+   * Marks an attribute as intentionally high-cardinality (user id, sender
+   * domain, request id). For an agent reader these are the single most useful
+   * fields on a trace, so {@link ./redaction.highCardinalityKeys} surfaces them
+   * as a *protect* list — telling redactors/normalizers NOT to strip them.
+   */
+  highCardinality?: boolean;
+  /** Closed set of permitted values. Reported as `enum_violation` if exceeded. */
+  enum?: readonly (string | number)[];
+  /** Set when `stability: 'deprecated'`; explains what to use instead. */
+  replacedBy?: string;
+  /** Free-text note shown alongside deprecation warnings. */
+  deprecatedReason?: string;
+}
+/** Declaration for a single span name your service emits. */
+interface SpanSpec {
+  /** Human/agent-facing description of when this span is produced. */
+  description?: string;
+  /** Lifecycle stage. Defaults to `stable`. */
+  stability?: Stability;
+  /** Attributes specific to this span, keyed by attribute name. */
+  attributes?: Record<string, AttributeSpec>;
+  /**
+   * When `true`, attributes not declared here are allowed without an
+   * `unknown_attribute` violation. Defaults to the contract-level setting.
+   */
+  additionalAttributes?: boolean;
+}
+/** The full telemetry contract for one service. */
+interface TelemetryContract {
+  /** `service.name` this contract describes. */
+  service: string;
+  /**
+   * Semver of the *contract itself* (not the app). Bumped when the trace
+   * surface changes; surfaced to readers as the `telemetry.schema.version`
+   * resource attribute via {@link ./attrs.SCHEMA_ATTRS}.
+   */
+  version: string;
+  /** Spans this service emits, keyed by span name. */
+  spans: Record<string, SpanSpec>;
+  /** Attributes permitted on *any* span (e.g. `user.id`, `tenant.id`). */
+  commonAttributes?: Record<string, AttributeSpec>;
+  /**
+   * Default for `SpanSpec.additionalAttributes` when a span does not set it.
+   * Defaults to `false` (declared-only — the stricter, agent-friendlier mode).
+   */
+  additionalAttributes?: boolean;
+  /**
+   * Flow-level scenario contracts, keyed by scenario name: which events one
+   * exercised flow must emit, their cardinality and topology, and when the
+   * observation is complete. Checked with `checkScenario` ({@link ./scenario}).
+   */
+  scenarios?: Record<string, ScenarioSpec>;
+}
+/**
+ * Validate and freeze a telemetry contract. Throws on structural mistakes
+ * (bad semver, unknown attribute type, deprecation with no replacement) so the
+ * contract fails loudly at module load, not silently at runtime.
+ *
+ * @example
+ * ```ts
+ * export const contract = defineContract({
+ *   service: 'checkout',
+ *   version: '1.2.0',
+ *   commonAttributes: {
+ *     'user.id': { type: 'string', highCardinality: true, description: 'Authenticated user' },
+ *   },
+ *   spans: {
+ *     'checkout.charge': {
+ *       description: 'Charge a payment method',
+ *       attributes: {
+ *         'payment.provider': { type: 'string', required: true, enum: ['stripe', 'paypal'] },
+ *         'payment.amount_cents': { type: 'number', required: true },
+ *       },
+ *     },
+ *   },
+ * });
+ * ```
+ */
+declare function defineContract(contract: TelemetryContract): TelemetryContract;
+/**
+ * Resolve the effective attribute spec for `key` on `spanName`: span-specific
+ * attributes win over common attributes. Returns `undefined` when the key is
+ * declared nowhere.
+ */
+declare function resolveAttributeSpec(contract: TelemetryContract, spanName: string, key: string): AttributeSpec | undefined;
+/** Whether attributes outside the declared set are tolerated for a span. */
+declare function allowsAdditionalAttributes(contract: TelemetryContract, spanName: string): boolean;
+//#endregion
+export { validateScenarioSpec as A, ScenarioViolationCode as C, isScenarioClosed as D, formatScenarioResult as E, parseCardinality as O, ScenarioViolation as S, evaluateScenario as T, ScenarioOutcome as _, SpanSpec as a, ScenarioSpan as b, allowsAdditionalAttributes as c, Cardinality as d, CheckScenarioOptions as f, ScenarioEventSpec as g, ScenarioAddition as h, STABILITIES as i, proposeScenario as k, defineContract as l, EvaluateScenarioOptions as m, AttributeSpec as n, Stability as o, CompletionBoundary as p, AttributeType as r, TelemetryContract as s, ATTRIBUTE_TYPES as t, resolveAttributeSpec as u, ScenarioProposal as v, checkScenario as w, ScenarioSpec as x, ScenarioResult as y };
+//# sourceMappingURL=contract-Ymh_Q37N.d.ts.map

package/dist/contract-Ymh_Q37N.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-Ymh_Q37N.d.ts","names":[],"sources":["../src/scenario.ts","../src/contract.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAyCiB;EACf;EACA;EACA;EACA;EACA,aAAa;;EAEb;EACA;;;UAIe;EACf;EACA;;;;;;iBAOc,iBAAiB,gBAAgB,cAAc;;UAmC9C;;EAEf,uBAAuB;;;;;EAKvB;EACA;;;;;;;;;;KAWU;EACN;EAA0B;;EAC1B;EAAwB;EAAe;;EACvC;EAA+B;;;UAGpB;EACf;;EAEA,YAAY;;EAEZ,QAAQ,eAAe;;;;;;EAMvB,QAAQ;;EAER,gBAAgB;;KAGN;KAEA;;UAOK;EACf,MAAM;EACN;EACA;EACA;;;UAIe;EACf;EACA;EACA;EACA;;UAGe;EACf;EACA,SAAS;;EAET;EACA,YAAY;EACZ,WAAW;;EAEX,OAAO;;;;;;iBAmBO,qBAAqB,cAAc,MAAM;;iBA8DzC,iBACd,MAAM,cACN,gBAAgB;UAgCD;;EAEf;;EAEA;;;;;;;;;iBAUc,iBACd,MAAM,cACN,gBAAgB,gBAChB,UAAU,0BACT;UA0Fc;;EAEf;;EAEA;;EAEA;;;;;;;;;;;;;;;iBAgBoB,cACpB,MAAM,cACN,yBAAyB,iBAAiB,iBAAiB,iBAC3D,UAAU,uBACT,QAAQ;;iBAkDK,qBAAqB,QAAQ;UAS5B;EACf,UAAU;;EAEV;;;;;;;;iBASc,gBACd,MAAM,cAAc,cAAc,gBAClC;EAAY;IACX;;;;KCxdS;cAGC,0BAA0B;;;;;;KAc3B;cAEC,sBAAsB;;UAOlB;;EAEf,MAAM;;EAEN,YAAY;;EAEZ;;EAEA;;;;;;;EAOA;;EAEA;;EAEA;;EAEA;;;UAIe;;EAEf;;EAEA,YAAY;;EAEZ,aAAa,eAAe;;;;;EAK5B;;;UAIe;;EAEf;;;;;;EAMA;;EAEA,OAAO,eAAe;;EAEtB,mBAAmB,eAAe;;;;;EAKlC;;;;;;EAMA,YAAY,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiEb,eAAe,UAAU,oBAAoB;;;;;;iBAwC7C,qBACd,UAAU,mBACV,kBACA,cACC;;iBAQa,2BACd,UAAU,mBACV"}

package/dist/{diff-BQPh72vY.d.cts → diff-CAIC04O4.d.ts}

@@ -1,5 +1,4 @@
-import { o as Stability, r as AttributeType, s as TelemetryContract } from "./contract-DGjxR9nb.cjs";
-
+import { o as Stability, r as AttributeType, s as TelemetryContract } from "./contract-Ymh_Q37N.js";
 //#region src/attrs.d.ts
 /**
  * Wire constants for the schema contract — the keys autotel-schema reads from
@@ -13,7 +12,9 @@ import { o as Stability, r as AttributeType, s as TelemetryContract } from "./co
  * between "confidently correct" and "confidently wrong" after a rename.
  */
 declare const SCHEMA_ATTRS: {
-  /** The service this contract describes (mirrors `service.name`). */readonly SERVICE: "telemetry.schema.service"; /** Semver of the telemetry contract that produced this span. */
+  /** The service this contract describes (mirrors `service.name`). */
+  readonly SERVICE: "telemetry.schema.service";
+  /** Semver of the telemetry contract that produced this span. */
   readonly VERSION: "telemetry.schema.version";
 };
 type SchemaAttributeKey = (typeof SCHEMA_ATTRS)[keyof typeof SCHEMA_ATTRS];
@@ -86,4 +87,4 @@ declare function hasBreakingChanges(diff: SnapshotDiff): boolean;
 declare function formatDiff(diff: SnapshotDiff): string;
 //#endregion
 export { diffSnapshots as a, ContractSnapshot as c, contractToSnapshot as d, parseSnapshot as f, SchemaAttributeKey as g, SNAPSHOT_SPEC as h, SnapshotDiff as i, SnapshotAttribute as l, SCHEMA_ATTRS as m, ChangeType as n, formatDiff as o, serializeSnapshot as p, SnapshotChange as r, hasBreakingChanges as s, ChangeKind as t, SnapshotSpan as u };
-//# sourceMappingURL=diff-BQPh72vY.d.cts.map
+//# sourceMappingURL=diff-CAIC04O4.d.ts.map

package/dist/diff-CAIC04O4.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-CAIC04O4.d.ts","names":[],"sources":["../src/attrs.ts","../src/snapshot.ts","../src/diff.ts"],"mappings":";;;;;;;;;;;;;cAYa;;WAAA;;WAAA;;KAOD,6BACF,2BAA2B;;cAGxB;;;;UCPI;EACf,MAAM;EACN,WAAW;EACX;EACA;EACA;EACA;EACA;;UAGe;EACf,WAAW;EACX;EACA;EACA,YAAY,eAAe;;;UAIZ;EACf,aAAa;EACb;EACA;EACA,kBAAkB,eAAe;EACjC,OAAO,eAAe;;;;;;;iBA6BR,mBACd,UAAU,oBACT;;iBAgCa,kBAAkB,UAAU;;iBAK5B,cAAc,eAAe;;;KC/FjC;KAEA;UAeK;EACf,MAAM;EACN,MAAM;;EAEN;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA,UAAU;EACV,UAAU;EACV,SAAS;;;;;;iBAuKK,cACd,UAAU,kBACV,MAAM,mBACL;;iBA6Ca,mBAAmB,MAAM;;iBAKzB,WAAW,MAAM"}

package/dist/{diff-D7qkNn0-.d.ts → diff-CfvhW7ux.d.cts}

@@ -1,5 +1,4 @@
-import { o as Stability, r as AttributeType, s as TelemetryContract } from "./contract-DGjxR9nb.js";
-
+import { o as Stability, r as AttributeType, s as TelemetryContract } from "./contract-Ymh_Q37N.cjs";
 //#region src/attrs.d.ts
 /**
  * Wire constants for the schema contract — the keys autotel-schema reads from
@@ -13,7 +12,9 @@ import { o as Stability, r as AttributeType, s as TelemetryContract } from "./co
  * between "confidently correct" and "confidently wrong" after a rename.
  */
 declare const SCHEMA_ATTRS: {
-  /** The service this contract describes (mirrors `service.name`). */readonly SERVICE: "telemetry.schema.service"; /** Semver of the telemetry contract that produced this span. */
+  /** The service this contract describes (mirrors `service.name`). */
+  readonly SERVICE: "telemetry.schema.service";
+  /** Semver of the telemetry contract that produced this span. */
   readonly VERSION: "telemetry.schema.version";
 };
 type SchemaAttributeKey = (typeof SCHEMA_ATTRS)[keyof typeof SCHEMA_ATTRS];
@@ -86,4 +87,4 @@ declare function hasBreakingChanges(diff: SnapshotDiff): boolean;
 declare function formatDiff(diff: SnapshotDiff): string;
 //#endregion
 export { diffSnapshots as a, ContractSnapshot as c, contractToSnapshot as d, parseSnapshot as f, SchemaAttributeKey as g, SNAPSHOT_SPEC as h, SnapshotDiff as i, SnapshotAttribute as l, SCHEMA_ATTRS as m, ChangeType as n, formatDiff as o, serializeSnapshot as p, SnapshotChange as r, hasBreakingChanges as s, ChangeKind as t, SnapshotSpan as u };
-//# sourceMappingURL=diff-D7qkNn0-.d.ts.map
+//# sourceMappingURL=diff-CfvhW7ux.d.cts.map

package/dist/diff-CfvhW7ux.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-CfvhW7ux.d.cts","names":[],"sources":["../src/attrs.ts","../src/snapshot.ts","../src/diff.ts"],"mappings":";;;;;;;;;;;;;cAYa;;WAAA;;WAAA;;KAOD,6BACF,2BAA2B;;cAGxB;;;;UCPI;EACf,MAAM;EACN,WAAW;EACX;EACA;EACA;EACA;EACA;;UAGe;EACf,WAAW;EACX;EACA;EACA,YAAY,eAAe;;;UAIZ;EACf,aAAa;EACb;EACA;EACA,kBAAkB,eAAe;EACjC,OAAO,eAAe;;;;;;;iBA6BR,mBACd,UAAU,oBACT;;iBAgCa,kBAAkB,UAAU;;iBAK5B,cAAc,eAAe;;;KC/FjC;KAEA;UAeK;EACf,MAAM;EACN,MAAM;;EAEN;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA,UAAU;EACV,UAAU;EACV,SAAS;;;;;;iBAuKK,cACd,UAAU,kBACV,MAAM,mBACL;;iBA6Ca,mBAAmB,MAAM;;iBAKzB,WAAW,MAAM"}

package/dist/diff.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"diff.cjs","names":[],"sources":["../src/diff.ts"],"sourcesContent":["/**\n * Snapshot diffing — the CI gate that catches breaking changes to your trace\n * surface before they ship.\n *\n * \"If you wouldn't ship a rename to your public API without a changelog, don't\n * do it to your traces.\" This module is what makes that enforceable: classify\n * every change between two snapshots as breaking, additive, or neutral, and let\n * CI fail on the breaking ones.\n */\n\nimport type { ContractSnapshot, SnapshotAttribute } from './snapshot.js';\n\nexport type ChangeKind = 'breaking' | 'additive' | 'neutral';\n\nexport type ChangeType =\n  | 'span_removed'\n  | 'span_added'\n  | 'attribute_removed'\n  | 'attribute_added'\n  | 'type_changed'\n  | 'required_added'\n  | 'required_removed'\n  | 'enum_value_removed'\n  | 'enum_value_added'\n  | 'stability_downgraded'\n  | 'stability_advanced'\n  | 'deprecated'\n  | 'replacement_documented';\n\nexport interface SnapshotChange {\n  kind: ChangeKind;\n  type: ChangeType;\n  /** Span the change applies to (`*` = common attributes / contract-wide). */\n  span: string;\n  attribute?: string;\n  message: string;\n}\n\nexport interface SnapshotDiff {\n  service: string;\n  previousVersion: string;\n  nextVersion: string;\n  breaking: SnapshotChange[];\n  additive: SnapshotChange[];\n  neutral: SnapshotChange[];\n}\n\n/**\n * How every cross-stability transition is classified. Keyed `prev->next` so all\n * six transitions are explicit and auditable — no silent fall-through. Same-\n * stability transitions are absent (no change to report).\n */\nconst STABILITY_TRANSITIONS: Record<\n  string,\n  { kind: ChangeKind; type: ChangeType }\n> = {\n  'stable->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n  'stable->deprecated': { kind: 'additive', type: 'deprecated' },\n  'experimental->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'experimental->deprecated': { kind: 'additive', type: 'deprecated' },\n  'deprecated->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'deprecated->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n};\n\nfunction stabilityMessage(\n  type: ChangeType,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): string {\n  if (type === 'deprecated') {\n    return `attribute \"${attribute}\" was deprecated${next.replacedBy ? ` (use \"${next.replacedBy}\")` : ''}`;\n  }\n  if (type === 'stability_downgraded') {\n    return `attribute \"${attribute}\" stability downgraded ${prev.stability} → ${next.stability}`;\n  }\n  return `attribute \"${attribute}\" promoted ${prev.stability} → ${next.stability}`;\n}\n\nfunction push(\n  diff: SnapshotDiff,\n  change: SnapshotChange,\n): void {\n  if (change.kind === 'breaking') diff.breaking.push(change);\n  else if (change.kind === 'additive') diff.additive.push(change);\n  else diff.neutral.push(change);\n}\n\nfunction diffAttribute(\n  diff: SnapshotDiff,\n  span: string,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): void {\n  if (prev.type !== next.type) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'type_changed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" changed type ${prev.type} → ${next.type}`,\n    });\n  }\n\n  if (!prev.required && next.required) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'required_added',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" became required`,\n    });\n  } else if (prev.required && !next.required) {\n    push(diff, {\n      kind: 'additive',\n      type: 'required_removed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" is no longer required`,\n    });\n  }\n\n  // Enum: removing a permitted value can break a producer that still emits it.\n  if (prev.enum && next.enum) {\n    const nextSet = new Set(next.enum);\n    const removed = prev.enum.filter((v) => !nextSet.has(v));\n    const prevSet = new Set(prev.enum);\n    const added = next.enum.filter((v) => !prevSet.has(v));\n    if (removed.length > 0) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'enum_value_removed',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" dropped enum value(s) ${JSON.stringify(removed)}`,\n      });\n    }\n    if (added.length > 0) {\n      push(diff, {\n        kind: 'additive',\n        type: 'enum_value_added',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" added enum value(s) ${JSON.stringify(added)}`,\n      });\n    }\n  }\n\n  if (prev.stability !== next.stability) {\n    const transition =\n      STABILITY_TRANSITIONS[`${prev.stability}->${next.stability}`];\n    if (transition) {\n      push(diff, {\n        ...transition,\n        span,\n        attribute,\n        message: stabilityMessage(transition.type, attribute, prev, next),\n      });\n    }\n  }\n}\n\nfunction diffAttributeMaps(\n  diff: SnapshotDiff,\n  span: string,\n  prev: Record<string, SnapshotAttribute>,\n  next: Record<string, SnapshotAttribute>,\n): void {\n  for (const [key, prevAttr] of Object.entries(prev)) {\n    const nextAttr = next[key];\n    if (!nextAttr) {\n      // A removed attribute whose replacement is named is a documented\n      // migration (still breaking — but reported as such with the pointer).\n      push(diff, {\n        kind: 'breaking',\n        type: prevAttr.replacedBy ? 'replacement_documented' : 'attribute_removed',\n        span,\n        attribute: key,\n        message: prevAttr.replacedBy\n          ? `attribute \"${key}\" removed — replaced by \"${prevAttr.replacedBy}\"`\n          : `attribute \"${key}\" was removed`,\n      });\n      continue;\n    }\n    diffAttribute(diff, span, key, prevAttr, nextAttr);\n  }\n  for (const key of Object.keys(next)) {\n    if (!prev[key]) {\n      const added = next[key];\n      // Always `attribute_added` (the event is \"new attribute\"); severity rides\n      // on `kind` — a new *required* attribute breaks existing producers.\n      push(diff, {\n        kind: added.required ? 'breaking' : 'additive',\n        type: 'attribute_added',\n        span,\n        attribute: key,\n        message: added.required\n          ? `new required attribute \"${key}\" added`\n          : `new attribute \"${key}\" added`,\n      });\n    }\n  }\n}\n\n/**\n * Diff two snapshots, classifying every change. The `breaking` array is what a\n * CI gate keys off; `hasBreakingChanges()` is the convenience predicate.\n */\nexport function diffSnapshots(\n  previous: ContractSnapshot,\n  next: ContractSnapshot,\n): SnapshotDiff {\n  const diff: SnapshotDiff = {\n    service: next.service,\n    previousVersion: previous.version,\n    nextVersion: next.version,\n    breaking: [],\n    additive: [],\n    neutral: [],\n  };\n\n  diffAttributeMaps(diff, '*', previous.commonAttributes, next.commonAttributes);\n\n  for (const [name, prevSpan] of Object.entries(previous.spans)) {\n    const nextSpan = next.spans[name];\n    if (!nextSpan) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'span_removed',\n        span: name,\n        message: `span \"${name}\" was removed`,\n      });\n      continue;\n    }\n    diffAttributeMaps(diff, name, prevSpan.attributes, nextSpan.attributes);\n  }\n  for (const name of Object.keys(next.spans)) {\n    if (!previous.spans[name]) {\n      push(diff, {\n        kind: 'additive',\n        type: 'span_added',\n        span: name,\n        message: `new span \"${name}\" added`,\n      });\n    }\n  }\n\n  return diff;\n}\n\n/** `true` when the diff contains at least one breaking change. */\nexport function hasBreakingChanges(diff: SnapshotDiff): boolean {\n  return diff.breaking.length > 0;\n}\n\n/** Markdown rendering of a diff — for CI logs and PR comments. */\nexport function formatDiff(diff: SnapshotDiff): string {\n  const lines: string[] = [ \n    `# Telemetry contract diff: ${diff.service} ${diff.previousVersion} → ${diff.nextVersion}`,\n    ''];\n  const section = (title: string, changes: SnapshotChange[]) => {\n    if (changes.length === 0) return;\n    lines.push(`## ${title} (${changes.length})`, '');\n    for (const c of changes) {\n      const where = c.attribute ? `\\`${c.span}.${c.attribute}\\`` : `\\`${c.span}\\``;\n      lines.push(`- ${where}: ${c.message}`);\n    }\n    lines.push('');\n  };\n  section('💥 Breaking', diff.breaking);\n  section('➕ Additive', diff.additive);\n  section('• Neutral', diff.neutral);\n  if (\n    diff.breaking.length === 0 &&\n    diff.additive.length === 0 &&\n    diff.neutral.length === 0\n  ) {\n    lines.push('No changes to the telemetry contract.', '');\n  }\n  return lines.join('\\n');\n}\n"],"mappings":";;;;;;;;AAoDA,MAAM,wBAGF;CACF,wBAAwB;EAAE,MAAM;EAAY,MAAM;CAAuB;CACzE,sBAAsB;EAAE,MAAM;EAAY,MAAM;CAAa;CAC7D,wBAAwB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACtE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAa;CACnE,sBAAsB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACpE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAuB;AAC/E;AAEA,SAAS,iBACP,MACA,WACA,MACA,MACQ;CACR,IAAI,SAAS,cACX,OAAO,cAAc,UAAU,kBAAkB,KAAK,aAAa,UAAU,KAAK,WAAW,MAAM;CAErG,IAAI,SAAS,wBACX,OAAO,cAAc,UAAU,yBAAyB,KAAK,UAAU,KAAK,KAAK;CAEnF,OAAO,cAAc,UAAU,aAAa,KAAK,UAAU,KAAK,KAAK;AACvE;AAEA,SAAS,KACP,MACA,QACM;CACN,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACpD,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACzD,KAAK,QAAQ,KAAK,MAAM;AAC/B;AAEA,SAAS,cACP,MACA,MACA,WACA,MACA,MACM;CACN,IAAI,KAAK,SAAS,KAAK,MACrB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU,iBAAiB,KAAK,KAAK,KAAK,KAAK;CACxE,CAAC;CAGH,IAAI,CAAC,KAAK,YAAY,KAAK,UACzB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;MACI,IAAI,KAAK,YAAY,CAAC,KAAK,UAChC,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;CAIH,IAAI,KAAK,QAAQ,KAAK,MAAM;EAC1B,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACvD,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,0BAA0B,KAAK,UAAU,OAAO;EACnF,CAAC;EAEH,IAAI,MAAM,SAAS,GACjB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,wBAAwB,KAAK,UAAU,KAAK;EAC/E,CAAC;CAEL;CAEA,IAAI,KAAK,cAAc,KAAK,WAAW;EACrC,MAAM,aACJ,sBAAsB,GAAG,KAAK,UAAU,IAAI,KAAK;EACnD,IAAI,YACF,KAAK,MAAM;GACT,GAAG;GACH;GACA;GACA,SAAS,iBAAiB,WAAW,MAAM,WAAW,MAAM,IAAI;EAClE,CAAC;CAEL;AACF;AAEA,SAAS,kBACP,MACA,MACA,MACA,MACM;CACN,KAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,IAAI,GAAG;EAClD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,UAAU;GAGb,KAAK,MAAM;IACT,MAAM;IACN,MAAM,SAAS,aAAa,2BAA2B;IACvD;IACA,WAAW;IACX,SAAS,SAAS,aACd,cAAc,IAAI,2BAA2B,SAAS,WAAW,KACjE,cAAc,IAAI;GACxB,CAAC;GACD;EACF;EACA,cAAc,MAAM,MAAM,KAAK,UAAU,QAAQ;CACnD;CACA,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,CAAC,KAAK,MAAM;EACd,MAAM,QAAQ,KAAK;EAGnB,KAAK,MAAM;GACT,MAAM,MAAM,WAAW,aAAa;GACpC,MAAM;GACN;GACA,WAAW;GACX,SAAS,MAAM,WACX,2BAA2B,IAAI,WAC/B,kBAAkB,IAAI;EAC5B,CAAC;CACH;AAEJ;;;;;AAMA,SAAgB,cACd,UACA,MACc;CACd,MAAM,OAAqB;EACzB,SAAS,KAAK;EACd,iBAAiB,SAAS;EAC1B,aAAa,KAAK;EAClB,UAAU,CAAC;EACX,UAAU,CAAC;EACX,SAAS,CAAC;CACZ;CAEA,kBAAkB,MAAM,KAAK,SAAS,kBAAkB,KAAK,gBAAgB;CAE7E,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAAG;EAC7D,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,CAAC,UAAU;GACb,KAAK,MAAM;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS,SAAS,KAAK;GACzB,CAAC;GACD;EACF;EACA,kBAAkB,MAAM,MAAM,SAAS,YAAY,SAAS,UAAU;CACxE;CACA,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,GACvC,IAAI,CAAC,SAAS,MAAM,OAClB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN,MAAM;EACN,SAAS,aAAa,KAAK;CAC7B,CAAC;CAIL,OAAO;AACT;;AAGA,SAAgB,mBAAmB,MAA6B;CAC9D,OAAO,KAAK,SAAS,SAAS;AAChC;;AAGA,SAAgB,WAAW,MAA4B;CACrD,MAAM,QAAkB,CACtB,8BAA8B,KAAK,QAAQ,GAAG,KAAK,gBAAgB,KAAK,KAAK,eAC7E,EAAE;CACJ,MAAM,WAAW,OAAe,YAA8B;EAC5D,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,KAAK,MAAM,MAAM,IAAI,QAAQ,OAAO,IAAI,EAAE;EAChD,KAAK,MAAM,KAAK,SAAS;GACvB,MAAM,QAAQ,EAAE,YAAY,KAAK,EAAE,KAAK,GAAG,EAAE,UAAU,MAAM,KAAK,EAAE,KAAK;GACzE,MAAM,KAAK,KAAK,MAAM,IAAI,EAAE,SAAS;EACvC;EACA,MAAM,KAAK,EAAE;CACf;CACA,QAAQ,eAAe,KAAK,QAAQ;CACpC,QAAQ,cAAc,KAAK,QAAQ;CACnC,QAAQ,aAAa,KAAK,OAAO;CACjC,IACE,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,WAAW,KACzB,KAAK,QAAQ,WAAW,GAExB,MAAM,KAAK,yCAAyC,EAAE;CAExD,OAAO,MAAM,KAAK,IAAI;AACxB"}
+{"version":3,"file":"diff.cjs","names":[],"sources":["../src/diff.ts"],"sourcesContent":["/**\n * Snapshot diffing — the CI gate that catches breaking changes to your trace\n * surface before they ship.\n *\n * \"If you wouldn't ship a rename to your public API without a changelog, don't\n * do it to your traces.\" This module is what makes that enforceable: classify\n * every change between two snapshots as breaking, additive, or neutral, and let\n * CI fail on the breaking ones.\n */\n\nimport type { ContractSnapshot, SnapshotAttribute } from './snapshot.js';\n\nexport type ChangeKind = 'breaking' | 'additive' | 'neutral';\n\nexport type ChangeType =\n  | 'span_removed'\n  | 'span_added'\n  | 'attribute_removed'\n  | 'attribute_added'\n  | 'type_changed'\n  | 'required_added'\n  | 'required_removed'\n  | 'enum_value_removed'\n  | 'enum_value_added'\n  | 'stability_downgraded'\n  | 'stability_advanced'\n  | 'deprecated'\n  | 'replacement_documented';\n\nexport interface SnapshotChange {\n  kind: ChangeKind;\n  type: ChangeType;\n  /** Span the change applies to (`*` = common attributes / contract-wide). */\n  span: string;\n  attribute?: string;\n  message: string;\n}\n\nexport interface SnapshotDiff {\n  service: string;\n  previousVersion: string;\n  nextVersion: string;\n  breaking: SnapshotChange[];\n  additive: SnapshotChange[];\n  neutral: SnapshotChange[];\n}\n\n/**\n * How every cross-stability transition is classified. Keyed `prev->next` so all\n * six transitions are explicit and auditable — no silent fall-through. Same-\n * stability transitions are absent (no change to report).\n */\nconst STABILITY_TRANSITIONS: Record<\n  string,\n  { kind: ChangeKind; type: ChangeType }\n> = {\n  'stable->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n  'stable->deprecated': { kind: 'additive', type: 'deprecated' },\n  'experimental->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'experimental->deprecated': { kind: 'additive', type: 'deprecated' },\n  'deprecated->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'deprecated->experimental': {\n    kind: 'breaking',\n    type: 'stability_downgraded',\n  },\n};\n\nfunction stabilityMessage(\n  type: ChangeType,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): string {\n  if (type === 'deprecated') {\n    return `attribute \"${attribute}\" was deprecated${next.replacedBy ? ` (use \"${next.replacedBy}\")` : ''}`;\n  }\n  if (type === 'stability_downgraded') {\n    return `attribute \"${attribute}\" stability downgraded ${prev.stability} → ${next.stability}`;\n  }\n  return `attribute \"${attribute}\" promoted ${prev.stability} → ${next.stability}`;\n}\n\nfunction push(diff: SnapshotDiff, change: SnapshotChange): void {\n  if (change.kind === 'breaking') diff.breaking.push(change);\n  else if (change.kind === 'additive') diff.additive.push(change);\n  else diff.neutral.push(change);\n}\n\nfunction diffAttribute(\n  diff: SnapshotDiff,\n  span: string,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): void {\n  if (prev.type !== next.type) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'type_changed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" changed type ${prev.type} → ${next.type}`,\n    });\n  }\n\n  if (!prev.required && next.required) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'required_added',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" became required`,\n    });\n  } else if (prev.required && !next.required) {\n    push(diff, {\n      kind: 'additive',\n      type: 'required_removed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" is no longer required`,\n    });\n  }\n\n  // Enum: removing a permitted value can break a producer that still emits it.\n  if (prev.enum && next.enum) {\n    const nextSet = new Set(next.enum);\n    const removed = prev.enum.filter((v) => !nextSet.has(v));\n    const prevSet = new Set(prev.enum);\n    const added = next.enum.filter((v) => !prevSet.has(v));\n    if (removed.length > 0) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'enum_value_removed',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" dropped enum value(s) ${JSON.stringify(removed)}`,\n      });\n    }\n    if (added.length > 0) {\n      push(diff, {\n        kind: 'additive',\n        type: 'enum_value_added',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" added enum value(s) ${JSON.stringify(added)}`,\n      });\n    }\n  }\n\n  if (prev.stability !== next.stability) {\n    const transition =\n      STABILITY_TRANSITIONS[`${prev.stability}->${next.stability}`];\n    if (transition) {\n      push(diff, {\n        ...transition,\n        span,\n        attribute,\n        message: stabilityMessage(transition.type, attribute, prev, next),\n      });\n    }\n  }\n}\n\nfunction diffAttributeMaps(\n  diff: SnapshotDiff,\n  span: string,\n  prev: Record<string, SnapshotAttribute>,\n  next: Record<string, SnapshotAttribute>,\n): void {\n  for (const [key, prevAttr] of Object.entries(prev)) {\n    const nextAttr = next[key];\n    if (!nextAttr) {\n      // A removed attribute whose replacement is named is a documented\n      // migration (still breaking — but reported as such with the pointer).\n      push(diff, {\n        kind: 'breaking',\n        type: prevAttr.replacedBy\n          ? 'replacement_documented'\n          : 'attribute_removed',\n        span,\n        attribute: key,\n        message: prevAttr.replacedBy\n          ? `attribute \"${key}\" removed — replaced by \"${prevAttr.replacedBy}\"`\n          : `attribute \"${key}\" was removed`,\n      });\n      continue;\n    }\n    diffAttribute(diff, span, key, prevAttr, nextAttr);\n  }\n  for (const key of Object.keys(next)) {\n    if (!prev[key]) {\n      const added = next[key];\n      // Always `attribute_added` (the event is \"new attribute\"); severity rides\n      // on `kind` — a new *required* attribute breaks existing producers.\n      push(diff, {\n        kind: added.required ? 'breaking' : 'additive',\n        type: 'attribute_added',\n        span,\n        attribute: key,\n        message: added.required\n          ? `new required attribute \"${key}\" added`\n          : `new attribute \"${key}\" added`,\n      });\n    }\n  }\n}\n\n/**\n * Diff two snapshots, classifying every change. The `breaking` array is what a\n * CI gate keys off; `hasBreakingChanges()` is the convenience predicate.\n */\nexport function diffSnapshots(\n  previous: ContractSnapshot,\n  next: ContractSnapshot,\n): SnapshotDiff {\n  const diff: SnapshotDiff = {\n    service: next.service,\n    previousVersion: previous.version,\n    nextVersion: next.version,\n    breaking: [],\n    additive: [],\n    neutral: [],\n  };\n\n  diffAttributeMaps(\n    diff,\n    '*',\n    previous.commonAttributes,\n    next.commonAttributes,\n  );\n\n  for (const [name, prevSpan] of Object.entries(previous.spans)) {\n    const nextSpan = next.spans[name];\n    if (!nextSpan) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'span_removed',\n        span: name,\n        message: `span \"${name}\" was removed`,\n      });\n      continue;\n    }\n    diffAttributeMaps(diff, name, prevSpan.attributes, nextSpan.attributes);\n  }\n  for (const name of Object.keys(next.spans)) {\n    if (!previous.spans[name]) {\n      push(diff, {\n        kind: 'additive',\n        type: 'span_added',\n        span: name,\n        message: `new span \"${name}\" added`,\n      });\n    }\n  }\n\n  return diff;\n}\n\n/** `true` when the diff contains at least one breaking change. */\nexport function hasBreakingChanges(diff: SnapshotDiff): boolean {\n  return diff.breaking.length > 0;\n}\n\n/** Markdown rendering of a diff — for CI logs and PR comments. */\nexport function formatDiff(diff: SnapshotDiff): string {\n  const lines: string[] = [\n    `# Telemetry contract diff: ${diff.service} ${diff.previousVersion} → ${diff.nextVersion}`,\n    '',\n  ];\n  const section = (title: string, changes: SnapshotChange[]) => {\n    if (changes.length === 0) return;\n    lines.push(`## ${title} (${changes.length})`, '');\n    for (const c of changes) {\n      const where = c.attribute\n        ? `\\`${c.span}.${c.attribute}\\``\n        : `\\`${c.span}\\``;\n      lines.push(`- ${where}: ${c.message}`);\n    }\n    lines.push('');\n  };\n  section('💥 Breaking', diff.breaking);\n  section('➕ Additive', diff.additive);\n  section('• Neutral', diff.neutral);\n  if (\n    diff.breaking.length === 0 &&\n    diff.additive.length === 0 &&\n    diff.neutral.length === 0\n  ) {\n    lines.push('No changes to the telemetry contract.', '');\n  }\n  return lines.join('\\n');\n}\n"],"mappings":";;;;;;;;AAoDA,MAAM,wBAGF;CACF,wBAAwB;EAAE,MAAM;EAAY,MAAM;CAAuB;CACzE,sBAAsB;EAAE,MAAM;EAAY,MAAM;CAAa;CAC7D,wBAAwB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACtE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAa;CACnE,sBAAsB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACpE,4BAA4B;EAC1B,MAAM;EACN,MAAM;CACR;AACF;AAEA,SAAS,iBACP,MACA,WACA,MACA,MACQ;CACR,IAAI,SAAS,cACX,OAAO,cAAc,UAAU,kBAAkB,KAAK,aAAa,UAAU,KAAK,WAAW,MAAM;CAErG,IAAI,SAAS,wBACX,OAAO,cAAc,UAAU,yBAAyB,KAAK,UAAU,KAAK,KAAK;CAEnF,OAAO,cAAc,UAAU,aAAa,KAAK,UAAU,KAAK,KAAK;AACvE;AAEA,SAAS,KAAK,MAAoB,QAA8B;CAC9D,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACpD,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACzD,KAAK,QAAQ,KAAK,MAAM;AAC/B;AAEA,SAAS,cACP,MACA,MACA,WACA,MACA,MACM;CACN,IAAI,KAAK,SAAS,KAAK,MACrB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU,iBAAiB,KAAK,KAAK,KAAK,KAAK;CACxE,CAAC;CAGH,IAAI,CAAC,KAAK,YAAY,KAAK,UACzB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;MACI,IAAI,KAAK,YAAY,CAAC,KAAK,UAChC,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;CAIH,IAAI,KAAK,QAAQ,KAAK,MAAM;EAC1B,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACvD,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,0BAA0B,KAAK,UAAU,OAAO;EACnF,CAAC;EAEH,IAAI,MAAM,SAAS,GACjB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,wBAAwB,KAAK,UAAU,KAAK;EAC/E,CAAC;CAEL;CAEA,IAAI,KAAK,cAAc,KAAK,WAAW;EACrC,MAAM,aACJ,sBAAsB,GAAG,KAAK,UAAU,IAAI,KAAK;EACnD,IAAI,YACF,KAAK,MAAM;GACT,GAAG;GACH;GACA;GACA,SAAS,iBAAiB,WAAW,MAAM,WAAW,MAAM,IAAI;EAClE,CAAC;CAEL;AACF;AAEA,SAAS,kBACP,MACA,MACA,MACA,MACM;CACN,KAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,IAAI,GAAG;EAClD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,UAAU;GAGb,KAAK,MAAM;IACT,MAAM;IACN,MAAM,SAAS,aACX,2BACA;IACJ;IACA,WAAW;IACX,SAAS,SAAS,aACd,cAAc,IAAI,2BAA2B,SAAS,WAAW,KACjE,cAAc,IAAI;GACxB,CAAC;GACD;EACF;EACA,cAAc,MAAM,MAAM,KAAK,UAAU,QAAQ;CACnD;CACA,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,CAAC,KAAK,MAAM;EACd,MAAM,QAAQ,KAAK;EAGnB,KAAK,MAAM;GACT,MAAM,MAAM,WAAW,aAAa;GACpC,MAAM;GACN;GACA,WAAW;GACX,SAAS,MAAM,WACX,2BAA2B,IAAI,WAC/B,kBAAkB,IAAI;EAC5B,CAAC;CACH;AAEJ;;;;;AAMA,SAAgB,cACd,UACA,MACc;CACd,MAAM,OAAqB;EACzB,SAAS,KAAK;EACd,iBAAiB,SAAS;EAC1B,aAAa,KAAK;EAClB,UAAU,CAAC;EACX,UAAU,CAAC;EACX,SAAS,CAAC;CACZ;CAEA,kBACE,MACA,KACA,SAAS,kBACT,KAAK,gBACP;CAEA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAAG;EAC7D,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,CAAC,UAAU;GACb,KAAK,MAAM;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS,SAAS,KAAK;GACzB,CAAC;GACD;EACF;EACA,kBAAkB,MAAM,MAAM,SAAS,YAAY,SAAS,UAAU;CACxE;CACA,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,GACvC,IAAI,CAAC,SAAS,MAAM,OAClB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN,MAAM;EACN,SAAS,aAAa,KAAK;CAC7B,CAAC;CAIL,OAAO;AACT;;AAGA,SAAgB,mBAAmB,MAA6B;CAC9D,OAAO,KAAK,SAAS,SAAS;AAChC;;AAGA,SAAgB,WAAW,MAA4B;CACrD,MAAM,QAAkB,CACtB,8BAA8B,KAAK,QAAQ,GAAG,KAAK,gBAAgB,KAAK,KAAK,eAC7E,EACF;CACA,MAAM,WAAW,OAAe,YAA8B;EAC5D,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,KAAK,MAAM,MAAM,IAAI,QAAQ,OAAO,IAAI,EAAE;EAChD,KAAK,MAAM,KAAK,SAAS;GACvB,MAAM,QAAQ,EAAE,YACZ,KAAK,EAAE,KAAK,GAAG,EAAE,UAAU,MAC3B,KAAK,EAAE,KAAK;GAChB,MAAM,KAAK,KAAK,MAAM,IAAI,EAAE,SAAS;EACvC;EACA,MAAM,KAAK,EAAE;CACf;CACA,QAAQ,eAAe,KAAK,QAAQ;CACpC,QAAQ,cAAc,KAAK,QAAQ;CACnC,QAAQ,aAAa,KAAK,OAAO;CACjC,IACE,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,WAAW,KACzB,KAAK,QAAQ,WAAW,GAExB,MAAM,KAAK,yCAAyC,EAAE;CAExD,OAAO,MAAM,KAAK,IAAI;AACxB"}

package/dist/diff.d.cts

@@ -1,2 +1,2 @@
-import { a as diffSnapshots, i as SnapshotDiff, n as ChangeType, o as formatDiff, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind } from "./diff-BQPh72vY.cjs";
+import { a as diffSnapshots, i as SnapshotDiff, n as ChangeType, o as formatDiff, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind } from "./diff-CfvhW7ux.cjs";
 export { ChangeKind, ChangeType, SnapshotChange, SnapshotDiff, diffSnapshots, formatDiff, hasBreakingChanges };

package/dist/diff.d.ts

@@ -1,2 +1,2 @@
-import { a as diffSnapshots, i as SnapshotDiff, n as ChangeType, o as formatDiff, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind } from "./diff-D7qkNn0-.js";
+import { a as diffSnapshots, i as SnapshotDiff, n as ChangeType, o as formatDiff, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind } from "./diff-CAIC04O4.js";
 export { ChangeKind, ChangeType, SnapshotChange, SnapshotDiff, diffSnapshots, formatDiff, hasBreakingChanges };

package/dist/diff.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff.js","names":[],"sources":["../src/diff.ts"],"sourcesContent":["/**\n * Snapshot diffing — the CI gate that catches breaking changes to your trace\n * surface before they ship.\n *\n * \"If you wouldn't ship a rename to your public API without a changelog, don't\n * do it to your traces.\" This module is what makes that enforceable: classify\n * every change between two snapshots as breaking, additive, or neutral, and let\n * CI fail on the breaking ones.\n */\n\nimport type { ContractSnapshot, SnapshotAttribute } from './snapshot.js';\n\nexport type ChangeKind = 'breaking' | 'additive' | 'neutral';\n\nexport type ChangeType =\n  | 'span_removed'\n  | 'span_added'\n  | 'attribute_removed'\n  | 'attribute_added'\n  | 'type_changed'\n  | 'required_added'\n  | 'required_removed'\n  | 'enum_value_removed'\n  | 'enum_value_added'\n  | 'stability_downgraded'\n  | 'stability_advanced'\n  | 'deprecated'\n  | 'replacement_documented';\n\nexport interface SnapshotChange {\n  kind: ChangeKind;\n  type: ChangeType;\n  /** Span the change applies to (`*` = common attributes / contract-wide). */\n  span: string;\n  attribute?: string;\n  message: string;\n}\n\nexport interface SnapshotDiff {\n  service: string;\n  previousVersion: string;\n  nextVersion: string;\n  breaking: SnapshotChange[];\n  additive: SnapshotChange[];\n  neutral: SnapshotChange[];\n}\n\n/**\n * How every cross-stability transition is classified. Keyed `prev->next` so all\n * six transitions are explicit and auditable — no silent fall-through. Same-\n * stability transitions are absent (no change to report).\n */\nconst STABILITY_TRANSITIONS: Record<\n  string,\n  { kind: ChangeKind; type: ChangeType }\n> = {\n  'stable->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n  'stable->deprecated': { kind: 'additive', type: 'deprecated' },\n  'experimental->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'experimental->deprecated': { kind: 'additive', type: 'deprecated' },\n  'deprecated->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'deprecated->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n};\n\nfunction stabilityMessage(\n  type: ChangeType,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): string {\n  if (type === 'deprecated') {\n    return `attribute \"${attribute}\" was deprecated${next.replacedBy ? ` (use \"${next.replacedBy}\")` : ''}`;\n  }\n  if (type === 'stability_downgraded') {\n    return `attribute \"${attribute}\" stability downgraded ${prev.stability} → ${next.stability}`;\n  }\n  return `attribute \"${attribute}\" promoted ${prev.stability} → ${next.stability}`;\n}\n\nfunction push(\n  diff: SnapshotDiff,\n  change: SnapshotChange,\n): void {\n  if (change.kind === 'breaking') diff.breaking.push(change);\n  else if (change.kind === 'additive') diff.additive.push(change);\n  else diff.neutral.push(change);\n}\n\nfunction diffAttribute(\n  diff: SnapshotDiff,\n  span: string,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): void {\n  if (prev.type !== next.type) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'type_changed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" changed type ${prev.type} → ${next.type}`,\n    });\n  }\n\n  if (!prev.required && next.required) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'required_added',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" became required`,\n    });\n  } else if (prev.required && !next.required) {\n    push(diff, {\n      kind: 'additive',\n      type: 'required_removed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" is no longer required`,\n    });\n  }\n\n  // Enum: removing a permitted value can break a producer that still emits it.\n  if (prev.enum && next.enum) {\n    const nextSet = new Set(next.enum);\n    const removed = prev.enum.filter((v) => !nextSet.has(v));\n    const prevSet = new Set(prev.enum);\n    const added = next.enum.filter((v) => !prevSet.has(v));\n    if (removed.length > 0) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'enum_value_removed',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" dropped enum value(s) ${JSON.stringify(removed)}`,\n      });\n    }\n    if (added.length > 0) {\n      push(diff, {\n        kind: 'additive',\n        type: 'enum_value_added',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" added enum value(s) ${JSON.stringify(added)}`,\n      });\n    }\n  }\n\n  if (prev.stability !== next.stability) {\n    const transition =\n      STABILITY_TRANSITIONS[`${prev.stability}->${next.stability}`];\n    if (transition) {\n      push(diff, {\n        ...transition,\n        span,\n        attribute,\n        message: stabilityMessage(transition.type, attribute, prev, next),\n      });\n    }\n  }\n}\n\nfunction diffAttributeMaps(\n  diff: SnapshotDiff,\n  span: string,\n  prev: Record<string, SnapshotAttribute>,\n  next: Record<string, SnapshotAttribute>,\n): void {\n  for (const [key, prevAttr] of Object.entries(prev)) {\n    const nextAttr = next[key];\n    if (!nextAttr) {\n      // A removed attribute whose replacement is named is a documented\n      // migration (still breaking — but reported as such with the pointer).\n      push(diff, {\n        kind: 'breaking',\n        type: prevAttr.replacedBy ? 'replacement_documented' : 'attribute_removed',\n        span,\n        attribute: key,\n        message: prevAttr.replacedBy\n          ? `attribute \"${key}\" removed — replaced by \"${prevAttr.replacedBy}\"`\n          : `attribute \"${key}\" was removed`,\n      });\n      continue;\n    }\n    diffAttribute(diff, span, key, prevAttr, nextAttr);\n  }\n  for (const key of Object.keys(next)) {\n    if (!prev[key]) {\n      const added = next[key];\n      // Always `attribute_added` (the event is \"new attribute\"); severity rides\n      // on `kind` — a new *required* attribute breaks existing producers.\n      push(diff, {\n        kind: added.required ? 'breaking' : 'additive',\n        type: 'attribute_added',\n        span,\n        attribute: key,\n        message: added.required\n          ? `new required attribute \"${key}\" added`\n          : `new attribute \"${key}\" added`,\n      });\n    }\n  }\n}\n\n/**\n * Diff two snapshots, classifying every change. The `breaking` array is what a\n * CI gate keys off; `hasBreakingChanges()` is the convenience predicate.\n */\nexport function diffSnapshots(\n  previous: ContractSnapshot,\n  next: ContractSnapshot,\n): SnapshotDiff {\n  const diff: SnapshotDiff = {\n    service: next.service,\n    previousVersion: previous.version,\n    nextVersion: next.version,\n    breaking: [],\n    additive: [],\n    neutral: [],\n  };\n\n  diffAttributeMaps(diff, '*', previous.commonAttributes, next.commonAttributes);\n\n  for (const [name, prevSpan] of Object.entries(previous.spans)) {\n    const nextSpan = next.spans[name];\n    if (!nextSpan) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'span_removed',\n        span: name,\n        message: `span \"${name}\" was removed`,\n      });\n      continue;\n    }\n    diffAttributeMaps(diff, name, prevSpan.attributes, nextSpan.attributes);\n  }\n  for (const name of Object.keys(next.spans)) {\n    if (!previous.spans[name]) {\n      push(diff, {\n        kind: 'additive',\n        type: 'span_added',\n        span: name,\n        message: `new span \"${name}\" added`,\n      });\n    }\n  }\n\n  return diff;\n}\n\n/** `true` when the diff contains at least one breaking change. */\nexport function hasBreakingChanges(diff: SnapshotDiff): boolean {\n  return diff.breaking.length > 0;\n}\n\n/** Markdown rendering of a diff — for CI logs and PR comments. */\nexport function formatDiff(diff: SnapshotDiff): string {\n  const lines: string[] = [ \n    `# Telemetry contract diff: ${diff.service} ${diff.previousVersion} → ${diff.nextVersion}`,\n    ''];\n  const section = (title: string, changes: SnapshotChange[]) => {\n    if (changes.length === 0) return;\n    lines.push(`## ${title} (${changes.length})`, '');\n    for (const c of changes) {\n      const where = c.attribute ? `\\`${c.span}.${c.attribute}\\`` : `\\`${c.span}\\``;\n      lines.push(`- ${where}: ${c.message}`);\n    }\n    lines.push('');\n  };\n  section('💥 Breaking', diff.breaking);\n  section('➕ Additive', diff.additive);\n  section('• Neutral', diff.neutral);\n  if (\n    diff.breaking.length === 0 &&\n    diff.additive.length === 0 &&\n    diff.neutral.length === 0\n  ) {\n    lines.push('No changes to the telemetry contract.', '');\n  }\n  return lines.join('\\n');\n}\n"],"mappings":";;;;;;AAoDA,MAAM,wBAGF;CACF,wBAAwB;EAAE,MAAM;EAAY,MAAM;CAAuB;CACzE,sBAAsB;EAAE,MAAM;EAAY,MAAM;CAAa;CAC7D,wBAAwB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACtE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAa;CACnE,sBAAsB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACpE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAuB;AAC/E;AAEA,SAAS,iBACP,MACA,WACA,MACA,MACQ;CACR,IAAI,SAAS,cACX,OAAO,cAAc,UAAU,kBAAkB,KAAK,aAAa,UAAU,KAAK,WAAW,MAAM;CAErG,IAAI,SAAS,wBACX,OAAO,cAAc,UAAU,yBAAyB,KAAK,UAAU,KAAK,KAAK;CAEnF,OAAO,cAAc,UAAU,aAAa,KAAK,UAAU,KAAK,KAAK;AACvE;AAEA,SAAS,KACP,MACA,QACM;CACN,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACpD,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACzD,KAAK,QAAQ,KAAK,MAAM;AAC/B;AAEA,SAAS,cACP,MACA,MACA,WACA,MACA,MACM;CACN,IAAI,KAAK,SAAS,KAAK,MACrB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU,iBAAiB,KAAK,KAAK,KAAK,KAAK;CACxE,CAAC;CAGH,IAAI,CAAC,KAAK,YAAY,KAAK,UACzB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;MACI,IAAI,KAAK,YAAY,CAAC,KAAK,UAChC,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;CAIH,IAAI,KAAK,QAAQ,KAAK,MAAM;EAC1B,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACvD,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,0BAA0B,KAAK,UAAU,OAAO;EACnF,CAAC;EAEH,IAAI,MAAM,SAAS,GACjB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,wBAAwB,KAAK,UAAU,KAAK;EAC/E,CAAC;CAEL;CAEA,IAAI,KAAK,cAAc,KAAK,WAAW;EACrC,MAAM,aACJ,sBAAsB,GAAG,KAAK,UAAU,IAAI,KAAK;EACnD,IAAI,YACF,KAAK,MAAM;GACT,GAAG;GACH;GACA;GACA,SAAS,iBAAiB,WAAW,MAAM,WAAW,MAAM,IAAI;EAClE,CAAC;CAEL;AACF;AAEA,SAAS,kBACP,MACA,MACA,MACA,MACM;CACN,KAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,IAAI,GAAG;EAClD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,UAAU;GAGb,KAAK,MAAM;IACT,MAAM;IACN,MAAM,SAAS,aAAa,2BAA2B;IACvD;IACA,WAAW;IACX,SAAS,SAAS,aACd,cAAc,IAAI,2BAA2B,SAAS,WAAW,KACjE,cAAc,IAAI;GACxB,CAAC;GACD;EACF;EACA,cAAc,MAAM,MAAM,KAAK,UAAU,QAAQ;CACnD;CACA,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,CAAC,KAAK,MAAM;EACd,MAAM,QAAQ,KAAK;EAGnB,KAAK,MAAM;GACT,MAAM,MAAM,WAAW,aAAa;GACpC,MAAM;GACN;GACA,WAAW;GACX,SAAS,MAAM,WACX,2BAA2B,IAAI,WAC/B,kBAAkB,IAAI;EAC5B,CAAC;CACH;AAEJ;;;;;AAMA,SAAgB,cACd,UACA,MACc;CACd,MAAM,OAAqB;EACzB,SAAS,KAAK;EACd,iBAAiB,SAAS;EAC1B,aAAa,KAAK;EAClB,UAAU,CAAC;EACX,UAAU,CAAC;EACX,SAAS,CAAC;CACZ;CAEA,kBAAkB,MAAM,KAAK,SAAS,kBAAkB,KAAK,gBAAgB;CAE7E,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAAG;EAC7D,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,CAAC,UAAU;GACb,KAAK,MAAM;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS,SAAS,KAAK;GACzB,CAAC;GACD;EACF;EACA,kBAAkB,MAAM,MAAM,SAAS,YAAY,SAAS,UAAU;CACxE;CACA,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,GACvC,IAAI,CAAC,SAAS,MAAM,OAClB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN,MAAM;EACN,SAAS,aAAa,KAAK;CAC7B,CAAC;CAIL,OAAO;AACT;;AAGA,SAAgB,mBAAmB,MAA6B;CAC9D,OAAO,KAAK,SAAS,SAAS;AAChC;;AAGA,SAAgB,WAAW,MAA4B;CACrD,MAAM,QAAkB,CACtB,8BAA8B,KAAK,QAAQ,GAAG,KAAK,gBAAgB,KAAK,KAAK,eAC7E,EAAE;CACJ,MAAM,WAAW,OAAe,YAA8B;EAC5D,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,KAAK,MAAM,MAAM,IAAI,QAAQ,OAAO,IAAI,EAAE;EAChD,KAAK,MAAM,KAAK,SAAS;GACvB,MAAM,QAAQ,EAAE,YAAY,KAAK,EAAE,KAAK,GAAG,EAAE,UAAU,MAAM,KAAK,EAAE,KAAK;GACzE,MAAM,KAAK,KAAK,MAAM,IAAI,EAAE,SAAS;EACvC;EACA,MAAM,KAAK,EAAE;CACf;CACA,QAAQ,eAAe,KAAK,QAAQ;CACpC,QAAQ,cAAc,KAAK,QAAQ;CACnC,QAAQ,aAAa,KAAK,OAAO;CACjC,IACE,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,WAAW,KACzB,KAAK,QAAQ,WAAW,GAExB,MAAM,KAAK,yCAAyC,EAAE;CAExD,OAAO,MAAM,KAAK,IAAI;AACxB"}
+{"version":3,"file":"diff.js","names":[],"sources":["../src/diff.ts"],"sourcesContent":["/**\n * Snapshot diffing — the CI gate that catches breaking changes to your trace\n * surface before they ship.\n *\n * \"If you wouldn't ship a rename to your public API without a changelog, don't\n * do it to your traces.\" This module is what makes that enforceable: classify\n * every change between two snapshots as breaking, additive, or neutral, and let\n * CI fail on the breaking ones.\n */\n\nimport type { ContractSnapshot, SnapshotAttribute } from './snapshot.js';\n\nexport type ChangeKind = 'breaking' | 'additive' | 'neutral';\n\nexport type ChangeType =\n  | 'span_removed'\n  | 'span_added'\n  | 'attribute_removed'\n  | 'attribute_added'\n  | 'type_changed'\n  | 'required_added'\n  | 'required_removed'\n  | 'enum_value_removed'\n  | 'enum_value_added'\n  | 'stability_downgraded'\n  | 'stability_advanced'\n  | 'deprecated'\n  | 'replacement_documented';\n\nexport interface SnapshotChange {\n  kind: ChangeKind;\n  type: ChangeType;\n  /** Span the change applies to (`*` = common attributes / contract-wide). */\n  span: string;\n  attribute?: string;\n  message: string;\n}\n\nexport interface SnapshotDiff {\n  service: string;\n  previousVersion: string;\n  nextVersion: string;\n  breaking: SnapshotChange[];\n  additive: SnapshotChange[];\n  neutral: SnapshotChange[];\n}\n\n/**\n * How every cross-stability transition is classified. Keyed `prev->next` so all\n * six transitions are explicit and auditable — no silent fall-through. Same-\n * stability transitions are absent (no change to report).\n */\nconst STABILITY_TRANSITIONS: Record<\n  string,\n  { kind: ChangeKind; type: ChangeType }\n> = {\n  'stable->experimental': { kind: 'breaking', type: 'stability_downgraded' },\n  'stable->deprecated': { kind: 'additive', type: 'deprecated' },\n  'experimental->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'experimental->deprecated': { kind: 'additive', type: 'deprecated' },\n  'deprecated->stable': { kind: 'neutral', type: 'stability_advanced' },\n  'deprecated->experimental': {\n    kind: 'breaking',\n    type: 'stability_downgraded',\n  },\n};\n\nfunction stabilityMessage(\n  type: ChangeType,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): string {\n  if (type === 'deprecated') {\n    return `attribute \"${attribute}\" was deprecated${next.replacedBy ? ` (use \"${next.replacedBy}\")` : ''}`;\n  }\n  if (type === 'stability_downgraded') {\n    return `attribute \"${attribute}\" stability downgraded ${prev.stability} → ${next.stability}`;\n  }\n  return `attribute \"${attribute}\" promoted ${prev.stability} → ${next.stability}`;\n}\n\nfunction push(diff: SnapshotDiff, change: SnapshotChange): void {\n  if (change.kind === 'breaking') diff.breaking.push(change);\n  else if (change.kind === 'additive') diff.additive.push(change);\n  else diff.neutral.push(change);\n}\n\nfunction diffAttribute(\n  diff: SnapshotDiff,\n  span: string,\n  attribute: string,\n  prev: SnapshotAttribute,\n  next: SnapshotAttribute,\n): void {\n  if (prev.type !== next.type) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'type_changed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" changed type ${prev.type} → ${next.type}`,\n    });\n  }\n\n  if (!prev.required && next.required) {\n    push(diff, {\n      kind: 'breaking',\n      type: 'required_added',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" became required`,\n    });\n  } else if (prev.required && !next.required) {\n    push(diff, {\n      kind: 'additive',\n      type: 'required_removed',\n      span,\n      attribute,\n      message: `attribute \"${attribute}\" is no longer required`,\n    });\n  }\n\n  // Enum: removing a permitted value can break a producer that still emits it.\n  if (prev.enum && next.enum) {\n    const nextSet = new Set(next.enum);\n    const removed = prev.enum.filter((v) => !nextSet.has(v));\n    const prevSet = new Set(prev.enum);\n    const added = next.enum.filter((v) => !prevSet.has(v));\n    if (removed.length > 0) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'enum_value_removed',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" dropped enum value(s) ${JSON.stringify(removed)}`,\n      });\n    }\n    if (added.length > 0) {\n      push(diff, {\n        kind: 'additive',\n        type: 'enum_value_added',\n        span,\n        attribute,\n        message: `attribute \"${attribute}\" added enum value(s) ${JSON.stringify(added)}`,\n      });\n    }\n  }\n\n  if (prev.stability !== next.stability) {\n    const transition =\n      STABILITY_TRANSITIONS[`${prev.stability}->${next.stability}`];\n    if (transition) {\n      push(diff, {\n        ...transition,\n        span,\n        attribute,\n        message: stabilityMessage(transition.type, attribute, prev, next),\n      });\n    }\n  }\n}\n\nfunction diffAttributeMaps(\n  diff: SnapshotDiff,\n  span: string,\n  prev: Record<string, SnapshotAttribute>,\n  next: Record<string, SnapshotAttribute>,\n): void {\n  for (const [key, prevAttr] of Object.entries(prev)) {\n    const nextAttr = next[key];\n    if (!nextAttr) {\n      // A removed attribute whose replacement is named is a documented\n      // migration (still breaking — but reported as such with the pointer).\n      push(diff, {\n        kind: 'breaking',\n        type: prevAttr.replacedBy\n          ? 'replacement_documented'\n          : 'attribute_removed',\n        span,\n        attribute: key,\n        message: prevAttr.replacedBy\n          ? `attribute \"${key}\" removed — replaced by \"${prevAttr.replacedBy}\"`\n          : `attribute \"${key}\" was removed`,\n      });\n      continue;\n    }\n    diffAttribute(diff, span, key, prevAttr, nextAttr);\n  }\n  for (const key of Object.keys(next)) {\n    if (!prev[key]) {\n      const added = next[key];\n      // Always `attribute_added` (the event is \"new attribute\"); severity rides\n      // on `kind` — a new *required* attribute breaks existing producers.\n      push(diff, {\n        kind: added.required ? 'breaking' : 'additive',\n        type: 'attribute_added',\n        span,\n        attribute: key,\n        message: added.required\n          ? `new required attribute \"${key}\" added`\n          : `new attribute \"${key}\" added`,\n      });\n    }\n  }\n}\n\n/**\n * Diff two snapshots, classifying every change. The `breaking` array is what a\n * CI gate keys off; `hasBreakingChanges()` is the convenience predicate.\n */\nexport function diffSnapshots(\n  previous: ContractSnapshot,\n  next: ContractSnapshot,\n): SnapshotDiff {\n  const diff: SnapshotDiff = {\n    service: next.service,\n    previousVersion: previous.version,\n    nextVersion: next.version,\n    breaking: [],\n    additive: [],\n    neutral: [],\n  };\n\n  diffAttributeMaps(\n    diff,\n    '*',\n    previous.commonAttributes,\n    next.commonAttributes,\n  );\n\n  for (const [name, prevSpan] of Object.entries(previous.spans)) {\n    const nextSpan = next.spans[name];\n    if (!nextSpan) {\n      push(diff, {\n        kind: 'breaking',\n        type: 'span_removed',\n        span: name,\n        message: `span \"${name}\" was removed`,\n      });\n      continue;\n    }\n    diffAttributeMaps(diff, name, prevSpan.attributes, nextSpan.attributes);\n  }\n  for (const name of Object.keys(next.spans)) {\n    if (!previous.spans[name]) {\n      push(diff, {\n        kind: 'additive',\n        type: 'span_added',\n        span: name,\n        message: `new span \"${name}\" added`,\n      });\n    }\n  }\n\n  return diff;\n}\n\n/** `true` when the diff contains at least one breaking change. */\nexport function hasBreakingChanges(diff: SnapshotDiff): boolean {\n  return diff.breaking.length > 0;\n}\n\n/** Markdown rendering of a diff — for CI logs and PR comments. */\nexport function formatDiff(diff: SnapshotDiff): string {\n  const lines: string[] = [\n    `# Telemetry contract diff: ${diff.service} ${diff.previousVersion} → ${diff.nextVersion}`,\n    '',\n  ];\n  const section = (title: string, changes: SnapshotChange[]) => {\n    if (changes.length === 0) return;\n    lines.push(`## ${title} (${changes.length})`, '');\n    for (const c of changes) {\n      const where = c.attribute\n        ? `\\`${c.span}.${c.attribute}\\``\n        : `\\`${c.span}\\``;\n      lines.push(`- ${where}: ${c.message}`);\n    }\n    lines.push('');\n  };\n  section('💥 Breaking', diff.breaking);\n  section('➕ Additive', diff.additive);\n  section('• Neutral', diff.neutral);\n  if (\n    diff.breaking.length === 0 &&\n    diff.additive.length === 0 &&\n    diff.neutral.length === 0\n  ) {\n    lines.push('No changes to the telemetry contract.', '');\n  }\n  return lines.join('\\n');\n}\n"],"mappings":";;;;;;AAoDA,MAAM,wBAGF;CACF,wBAAwB;EAAE,MAAM;EAAY,MAAM;CAAuB;CACzE,sBAAsB;EAAE,MAAM;EAAY,MAAM;CAAa;CAC7D,wBAAwB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACtE,4BAA4B;EAAE,MAAM;EAAY,MAAM;CAAa;CACnE,sBAAsB;EAAE,MAAM;EAAW,MAAM;CAAqB;CACpE,4BAA4B;EAC1B,MAAM;EACN,MAAM;CACR;AACF;AAEA,SAAS,iBACP,MACA,WACA,MACA,MACQ;CACR,IAAI,SAAS,cACX,OAAO,cAAc,UAAU,kBAAkB,KAAK,aAAa,UAAU,KAAK,WAAW,MAAM;CAErG,IAAI,SAAS,wBACX,OAAO,cAAc,UAAU,yBAAyB,KAAK,UAAU,KAAK,KAAK;CAEnF,OAAO,cAAc,UAAU,aAAa,KAAK,UAAU,KAAK,KAAK;AACvE;AAEA,SAAS,KAAK,MAAoB,QAA8B;CAC9D,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACpD,IAAI,OAAO,SAAS,YAAY,KAAK,SAAS,KAAK,MAAM;MACzD,KAAK,QAAQ,KAAK,MAAM;AAC/B;AAEA,SAAS,cACP,MACA,MACA,WACA,MACA,MACM;CACN,IAAI,KAAK,SAAS,KAAK,MACrB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU,iBAAiB,KAAK,KAAK,KAAK,KAAK;CACxE,CAAC;CAGH,IAAI,CAAC,KAAK,YAAY,KAAK,UACzB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;MACI,IAAI,KAAK,YAAY,CAAC,KAAK,UAChC,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN;EACA;EACA,SAAS,cAAc,UAAU;CACnC,CAAC;CAIH,IAAI,KAAK,QAAQ,KAAK,MAAM;EAC1B,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,UAAU,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACvD,MAAM,UAAU,IAAI,IAAI,KAAK,IAAI;EACjC,MAAM,QAAQ,KAAK,KAAK,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;EACrD,IAAI,QAAQ,SAAS,GACnB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,0BAA0B,KAAK,UAAU,OAAO;EACnF,CAAC;EAEH,IAAI,MAAM,SAAS,GACjB,KAAK,MAAM;GACT,MAAM;GACN,MAAM;GACN;GACA;GACA,SAAS,cAAc,UAAU,wBAAwB,KAAK,UAAU,KAAK;EAC/E,CAAC;CAEL;CAEA,IAAI,KAAK,cAAc,KAAK,WAAW;EACrC,MAAM,aACJ,sBAAsB,GAAG,KAAK,UAAU,IAAI,KAAK;EACnD,IAAI,YACF,KAAK,MAAM;GACT,GAAG;GACH;GACA;GACA,SAAS,iBAAiB,WAAW,MAAM,WAAW,MAAM,IAAI;EAClE,CAAC;CAEL;AACF;AAEA,SAAS,kBACP,MACA,MACA,MACA,MACM;CACN,KAAK,MAAM,CAAC,KAAK,aAAa,OAAO,QAAQ,IAAI,GAAG;EAClD,MAAM,WAAW,KAAK;EACtB,IAAI,CAAC,UAAU;GAGb,KAAK,MAAM;IACT,MAAM;IACN,MAAM,SAAS,aACX,2BACA;IACJ;IACA,WAAW;IACX,SAAS,SAAS,aACd,cAAc,IAAI,2BAA2B,SAAS,WAAW,KACjE,cAAc,IAAI;GACxB,CAAC;GACD;EACF;EACA,cAAc,MAAM,MAAM,KAAK,UAAU,QAAQ;CACnD;CACA,KAAK,MAAM,OAAO,OAAO,KAAK,IAAI,GAChC,IAAI,CAAC,KAAK,MAAM;EACd,MAAM,QAAQ,KAAK;EAGnB,KAAK,MAAM;GACT,MAAM,MAAM,WAAW,aAAa;GACpC,MAAM;GACN;GACA,WAAW;GACX,SAAS,MAAM,WACX,2BAA2B,IAAI,WAC/B,kBAAkB,IAAI;EAC5B,CAAC;CACH;AAEJ;;;;;AAMA,SAAgB,cACd,UACA,MACc;CACd,MAAM,OAAqB;EACzB,SAAS,KAAK;EACd,iBAAiB,SAAS;EAC1B,aAAa,KAAK;EAClB,UAAU,CAAC;EACX,UAAU,CAAC;EACX,SAAS,CAAC;CACZ;CAEA,kBACE,MACA,KACA,SAAS,kBACT,KAAK,gBACP;CAEA,KAAK,MAAM,CAAC,MAAM,aAAa,OAAO,QAAQ,SAAS,KAAK,GAAG;EAC7D,MAAM,WAAW,KAAK,MAAM;EAC5B,IAAI,CAAC,UAAU;GACb,KAAK,MAAM;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS,SAAS,KAAK;GACzB,CAAC;GACD;EACF;EACA,kBAAkB,MAAM,MAAM,SAAS,YAAY,SAAS,UAAU;CACxE;CACA,KAAK,MAAM,QAAQ,OAAO,KAAK,KAAK,KAAK,GACvC,IAAI,CAAC,SAAS,MAAM,OAClB,KAAK,MAAM;EACT,MAAM;EACN,MAAM;EACN,MAAM;EACN,SAAS,aAAa,KAAK;CAC7B,CAAC;CAIL,OAAO;AACT;;AAGA,SAAgB,mBAAmB,MAA6B;CAC9D,OAAO,KAAK,SAAS,SAAS;AAChC;;AAGA,SAAgB,WAAW,MAA4B;CACrD,MAAM,QAAkB,CACtB,8BAA8B,KAAK,QAAQ,GAAG,KAAK,gBAAgB,KAAK,KAAK,eAC7E,EACF;CACA,MAAM,WAAW,OAAe,YAA8B;EAC5D,IAAI,QAAQ,WAAW,GAAG;EAC1B,MAAM,KAAK,MAAM,MAAM,IAAI,QAAQ,OAAO,IAAI,EAAE;EAChD,KAAK,MAAM,KAAK,SAAS;GACvB,MAAM,QAAQ,EAAE,YACZ,KAAK,EAAE,KAAK,GAAG,EAAE,UAAU,MAC3B,KAAK,EAAE,KAAK;GAChB,MAAM,KAAK,KAAK,MAAM,IAAI,EAAE,SAAS;EACvC;EACA,MAAM,KAAK,EAAE;CACf;CACA,QAAQ,eAAe,KAAK,QAAQ;CACpC,QAAQ,cAAc,KAAK,QAAQ;CACnC,QAAQ,aAAa,KAAK,OAAO;CACjC,IACE,KAAK,SAAS,WAAW,KACzB,KAAK,SAAS,WAAW,KACzB,KAAK,QAAQ,WAAW,GAExB,MAAM,KAAK,yCAAyC,EAAE;CAExD,OAAO,MAAM,KAAK,IAAI;AACxB"}

package/dist/index.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
 const require_snapshot = require('./snapshot-CyWGJaJT.cjs');
-const require_processor = require('./processor-D93TAXvZ.cjs');
+const require_processor = require('./processor-Gu8Yl_dS.cjs');
 const require_diff = require('./diff.cjs');
 
 //#region src/redaction.ts
@@ -185,18 +185,25 @@ exports.SNAPSHOT_SPEC = require_snapshot.SNAPSHOT_SPEC;
 exports.STABILITIES = require_processor.STABILITIES;
 exports.SchemaValidationSpanProcessor = require_processor.SchemaValidationSpanProcessor;
 exports.allowsAdditionalAttributes = require_processor.allowsAdditionalAttributes;
+exports.checkScenario = require_processor.checkScenario;
 exports.contractToSnapshot = require_snapshot.contractToSnapshot;
 exports.createSchemaValidationProcessor = require_processor.createSchemaValidationProcessor;
 exports.defineContract = require_processor.defineContract;
 exports.diffSnapshots = require_diff.diffSnapshots;
+exports.evaluateScenario = require_processor.evaluateScenario;
 exports.formatDiff = require_diff.formatDiff;
+exports.formatScenarioResult = require_processor.formatScenarioResult;
 exports.formatViolation = require_processor.formatViolation;
 exports.hasBreakingChanges = require_diff.hasBreakingChanges;
 exports.hasErrors = require_processor.hasErrors;
 exports.highCardinalityKeys = highCardinalityKeys;
 exports.isHighCardinalityKey = isHighCardinalityKey;
+exports.isScenarioClosed = require_processor.isScenarioClosed;
+exports.parseCardinality = require_processor.parseCardinality;
 exports.parseSnapshot = require_snapshot.parseSnapshot;
+exports.proposeScenario = require_processor.proposeScenario;
 exports.resolveAttributeSpec = require_processor.resolveAttributeSpec;
 exports.serializeSnapshot = require_snapshot.serializeSnapshot;
+exports.validateScenarioSpec = require_processor.validateScenarioSpec;
 exports.validateSpan = require_processor.validateSpan;
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","names":["defineContract"],"sources":["../src/redaction.ts","../src/contracts/agent-security.ts"],"sourcesContent":["/**\n * Cardinality posture helpers.\n *\n * The old cardinality rule — \"keep unique-value counts down\" — was a constraint\n * invented because dashboards have pixels and a graph with 10k series is\n * unreadable to a human. An agent does not look at the graph; it reads the\n * spans. A high-cardinality field (the user id, the sender domain, the request\n * id) is then the single most useful attribute on a trace when the agent is\n * chasing one specific failure.\n *\n * So the contract lets you mark attributes `highCardinality: true` as a\n * deliberate signal, and this module turns that into a *protect list*: the keys\n * a redactor or span-name normalizer must NOT strip, even when an aggressive\n * default would otherwise drop them.\n */\n\nimport type { TelemetryContract } from './contract.js';\n\n/**\n * Every attribute key in the contract flagged `highCardinality: true`, across\n * both common and per-span attributes. Feed this into a redaction/normalization\n * allow-list so the fields most useful to an agent reader survive.\n *\n * @example\n * ```ts\n * import { init } from 'autotel';\n * import { highCardinalityKeys } from 'autotel-schema';\n * import { contract } from './telemetry.contract';\n *\n * init({\n *   service: 'checkout',\n *   // keep user.id / request.id intact even under the strict redactor\n *   attributeRedactor: { allowKeys: highCardinalityKeys(contract), preset: 'strict' },\n * });\n * ```\n */\nexport function highCardinalityKeys(contract: TelemetryContract): string[] {\n  const keys = new Set<string>();\n  for (const [key, spec] of Object.entries(contract.commonAttributes ?? {})) {\n    if (spec.highCardinality) keys.add(key);\n  }\n  for (const spanSpec of Object.values(contract.spans)) {\n    for (const [key, spec] of Object.entries(spanSpec.attributes ?? {})) {\n      if (spec.highCardinality) keys.add(key);\n    }\n  }\n  return [...keys].toSorted();\n}\n\n/**\n * Predicate form of {@link highCardinalityKeys} — `true` when `key` is declared\n * high-cardinality anywhere in the contract. Useful inside a custom\n * `spanNameNormalizer` or redactor callback.\n */\nexport function isHighCardinalityKey(\n  contract: TelemetryContract,\n  key: string,\n): boolean {\n  if (contract.commonAttributes?.[key]?.highCardinality) return true;\n  for (const spanSpec of Object.values(contract.spans)) {\n    if (spanSpec.attributes?.[key]?.highCardinality) return true;\n  }\n  return false;\n}\n","import { defineContract } from '../contract.js';\n\nconst stringAttr = { type: 'string' as const };\nconst boolAttr = { type: 'boolean' as const };\nconst numberAttr = { type: 'number' as const };\nconst stringArrayAttr = { type: 'string[]' as const };\n\n/**\n * Published telemetry contract for Google SAIF-aligned agent security observability.\n * Span names are illustrative — attributes are the stable surface under validation.\n */\nexport const AGENT_SECURITY_TELEMETRY_CONTRACT = defineContract({\n  service: 'autotel-agent-security',\n  version: '1.0.0',\n  commonAttributes: {\n    'autotel.agent': { ...boolAttr, required: false, description: 'Agent audit marker' },\n    'agent.controller.id': {\n      ...stringAttr,\n      highCardinality: true,\n      description: 'Hashed controlling human user id',\n    },\n    'agent.input.provenance': {\n      ...stringAttr,\n      enum: [\n        'user_direct',\n        'user_voice',\n        'rag',\n        'memory',\n        'tool_result',\n        'external_untrusted',\n      ],\n    },\n    'agent.action.risk_class': {\n      ...stringAttr,\n      enum: ['read', 'write', 'destructive', 'financial', 'exfiltration_capable'],\n    },\n    'agent.consent.required': { ...boolAttr },\n    'agent.consent.outcome': {\n      ...stringAttr,\n      enum: ['approved', 'denied', 'timeout', 'revoked'],\n    },\n    'agent.scope.active': { ...stringArrayAttr },\n    'agent.memory.operation': {\n      ...stringAttr,\n      enum: ['read', 'write', 'delete', 'search'],\n    },\n    'agent.memory.isolation_key': { ...stringAttr, highCardinality: true },\n    'agent.plan.step_index': { ...numberAttr },\n    'agent.plan.tool_intents': { ...stringArrayAttr },\n    'agent.plan.risk.verdict': {\n      ...stringAttr,\n      enum: ['low', 'medium', 'high', 'critical'],\n    },\n    'agent.plan.risk.score': { ...numberAttr },\n    'agent.plan.risk.categories': { ...stringArrayAttr },\n    'policy.decision': {\n      ...stringAttr,\n      enum: ['permit', 'deny', 'challenge', 'observe', 'error'],\n    },\n    'tool.input_hash': { ...stringAttr },\n    'tool.output_hash': { ...stringAttr },\n    'mcp.tool.destructive': { ...boolAttr },\n    'mcp.tool.untrusted_content': { ...boolAttr },\n    'mcp.security.injection.verdict': {\n      ...stringAttr,\n      enum: ['clean', 'suspicious', 'malicious'],\n    },\n    'security.event': { ...stringAttr },\n    'security.category': { ...stringAttr },\n    'security.outcome': { ...stringAttr },\n    'security.severity': {\n      ...stringAttr,\n      enum: ['info', 'warning', 'error', 'critical'],\n    },\n  },\n  spans: {\n    'agent.action': {\n      description: 'Scoped agent action or tool call with audit metadata',\n      attributes: {\n        'agent.id': { ...stringAttr, required: true },\n        'tool.name': { ...stringAttr },\n      },\n    },\n    'tools/call': {\n      description: 'MCP tool invocation with boundary security signals',\n      attributes: {\n        'mcp.tool.name': { ...stringAttr, required: true },\n      },\n    },\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,SAAgB,oBAAoB,UAAuC;CACzE,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,SAAS,oBAAoB,CAAC,CAAC,GACtE,IAAI,KAAK,iBAAiB,KAAK,IAAI,GAAG;CAExC,KAAK,MAAM,YAAY,OAAO,OAAO,SAAS,KAAK,GACjD,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,SAAS,cAAc,CAAC,CAAC,GAChE,IAAI,KAAK,iBAAiB,KAAK,IAAI,GAAG;CAG1C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS;AAC5B;;;;;;AAOA,SAAgB,qBACd,UACA,KACS;CACT,IAAI,SAAS,mBAAmB,IAAI,EAAE,iBAAiB,OAAO;CAC9D,KAAK,MAAM,YAAY,OAAO,OAAO,SAAS,KAAK,GACjD,IAAI,SAAS,aAAa,IAAI,EAAE,iBAAiB,OAAO;CAE1D,OAAO;AACT;;;;AC7DA,MAAM,aAAa,EAAE,MAAM,SAAkB;AAC7C,MAAM,WAAW,EAAE,MAAM,UAAmB;AAC5C,MAAM,aAAa,EAAE,MAAM,SAAkB;AAC7C,MAAM,kBAAkB,EAAE,MAAM,WAAoB;;;;;AAMpD,MAAa,oCAAoCA,iCAAe;CAC9D,SAAS;CACT,SAAS;CACT,kBAAkB;EAChB,iBAAiB;GAAE,GAAG;GAAU,UAAU;GAAO,aAAa;EAAqB;EACnF,uBAAuB;GACrB,GAAG;GACH,iBAAiB;GACjB,aAAa;EACf;EACA,0BAA0B;GACxB,GAAG;GACH,MAAM;IACJ;IACA;IACA;IACA;IACA;IACA;GACF;EACF;EACA,2BAA2B;GACzB,GAAG;GACH,MAAM;IAAC;IAAQ;IAAS;IAAe;IAAa;GAAsB;EAC5E;EACA,0BAA0B,EAAE,GAAG,SAAS;EACxC,yBAAyB;GACvB,GAAG;GACH,MAAM;IAAC;IAAY;IAAU;IAAW;GAAS;EACnD;EACA,sBAAsB,EAAE,GAAG,gBAAgB;EAC3C,0BAA0B;GACxB,GAAG;GACH,MAAM;IAAC;IAAQ;IAAS;IAAU;GAAQ;EAC5C;EACA,8BAA8B;GAAE,GAAG;GAAY,iBAAiB;EAAK;EACrE,yBAAyB,EAAE,GAAG,WAAW;EACzC,2BAA2B,EAAE,GAAG,gBAAgB;EAChD,2BAA2B;GACzB,GAAG;GACH,MAAM;IAAC;IAAO;IAAU;IAAQ;GAAU;EAC5C;EACA,yBAAyB,EAAE,GAAG,WAAW;EACzC,8BAA8B,EAAE,GAAG,gBAAgB;EACnD,mBAAmB;GACjB,GAAG;GACH,MAAM;IAAC;IAAU;IAAQ;IAAa;IAAW;GAAO;EAC1D;EACA,mBAAmB,EAAE,GAAG,WAAW;EACnC,oBAAoB,EAAE,GAAG,WAAW;EACpC,wBAAwB,EAAE,GAAG,SAAS;EACtC,8BAA8B,EAAE,GAAG,SAAS;EAC5C,kCAAkC;GAChC,GAAG;GACH,MAAM;IAAC;IAAS;IAAc;GAAW;EAC3C;EACA,kBAAkB,EAAE,GAAG,WAAW;EAClC,qBAAqB,EAAE,GAAG,WAAW;EACrC,oBAAoB,EAAE,GAAG,WAAW;EACpC,qBAAqB;GACnB,GAAG;GACH,MAAM;IAAC;IAAQ;IAAW;IAAS;GAAU;EAC/C;CACF;CACA,OAAO;EACL,gBAAgB;GACd,aAAa;GACb,YAAY;IACV,YAAY;KAAE,GAAG;KAAY,UAAU;IAAK;IAC5C,aAAa,EAAE,GAAG,WAAW;GAC/B;EACF;EACA,cAAc;GACZ,aAAa;GACb,YAAY,EACV,iBAAiB;IAAE,GAAG;IAAY,UAAU;GAAK,EACnD;EACF;CACF;AACF,CAAC"}
+{"version":3,"file":"index.cjs","names":["defineContract"],"sources":["../src/redaction.ts","../src/contracts/agent-security.ts"],"sourcesContent":["/**\n * Cardinality posture helpers.\n *\n * The old cardinality rule — \"keep unique-value counts down\" — was a constraint\n * invented because dashboards have pixels and a graph with 10k series is\n * unreadable to a human. An agent does not look at the graph; it reads the\n * spans. A high-cardinality field (the user id, the sender domain, the request\n * id) is then the single most useful attribute on a trace when the agent is\n * chasing one specific failure.\n *\n * So the contract lets you mark attributes `highCardinality: true` as a\n * deliberate signal, and this module turns that into a *protect list*: the keys\n * a redactor or span-name normalizer must NOT strip, even when an aggressive\n * default would otherwise drop them.\n */\n\nimport type { TelemetryContract } from './contract.js';\n\n/**\n * Every attribute key in the contract flagged `highCardinality: true`, across\n * both common and per-span attributes. Feed this into a redaction/normalization\n * allow-list so the fields most useful to an agent reader survive.\n *\n * @example\n * ```ts\n * import { init } from 'autotel';\n * import { highCardinalityKeys } from 'autotel-schema';\n * import { contract } from './telemetry.contract';\n *\n * init({\n *   service: 'checkout',\n *   // keep user.id / request.id intact even under the strict redactor\n *   attributeRedactor: { allowKeys: highCardinalityKeys(contract), preset: 'strict' },\n * });\n * ```\n */\nexport function highCardinalityKeys(contract: TelemetryContract): string[] {\n  const keys = new Set<string>();\n  for (const [key, spec] of Object.entries(contract.commonAttributes ?? {})) {\n    if (spec.highCardinality) keys.add(key);\n  }\n  for (const spanSpec of Object.values(contract.spans)) {\n    for (const [key, spec] of Object.entries(spanSpec.attributes ?? {})) {\n      if (spec.highCardinality) keys.add(key);\n    }\n  }\n  return [...keys].toSorted();\n}\n\n/**\n * Predicate form of {@link highCardinalityKeys} — `true` when `key` is declared\n * high-cardinality anywhere in the contract. Useful inside a custom\n * `spanNameNormalizer` or redactor callback.\n */\nexport function isHighCardinalityKey(\n  contract: TelemetryContract,\n  key: string,\n): boolean {\n  if (contract.commonAttributes?.[key]?.highCardinality) return true;\n  for (const spanSpec of Object.values(contract.spans)) {\n    if (spanSpec.attributes?.[key]?.highCardinality) return true;\n  }\n  return false;\n}\n","import { defineContract } from '../contract.js';\n\nconst stringAttr = { type: 'string' as const };\nconst boolAttr = { type: 'boolean' as const };\nconst numberAttr = { type: 'number' as const };\nconst stringArrayAttr = { type: 'string[]' as const };\n\n/**\n * Published telemetry contract for Google SAIF-aligned agent security observability.\n * Span names are illustrative — attributes are the stable surface under validation.\n */\nexport const AGENT_SECURITY_TELEMETRY_CONTRACT = defineContract({\n  service: 'autotel-agent-security',\n  version: '1.0.0',\n  commonAttributes: {\n    'autotel.agent': {\n      ...boolAttr,\n      required: false,\n      description: 'Agent audit marker',\n    },\n    'agent.controller.id': {\n      ...stringAttr,\n      highCardinality: true,\n      description: 'Hashed controlling human user id',\n    },\n    'agent.input.provenance': {\n      ...stringAttr,\n      enum: [\n        'user_direct',\n        'user_voice',\n        'rag',\n        'memory',\n        'tool_result',\n        'external_untrusted',\n      ],\n    },\n    'agent.action.risk_class': {\n      ...stringAttr,\n      enum: [\n        'read',\n        'write',\n        'destructive',\n        'financial',\n        'exfiltration_capable',\n      ],\n    },\n    'agent.consent.required': { ...boolAttr },\n    'agent.consent.outcome': {\n      ...stringAttr,\n      enum: ['approved', 'denied', 'timeout', 'revoked'],\n    },\n    'agent.scope.active': { ...stringArrayAttr },\n    'agent.memory.operation': {\n      ...stringAttr,\n      enum: ['read', 'write', 'delete', 'search'],\n    },\n    'agent.memory.isolation_key': { ...stringAttr, highCardinality: true },\n    'agent.plan.step_index': { ...numberAttr },\n    'agent.plan.tool_intents': { ...stringArrayAttr },\n    'agent.plan.risk.verdict': {\n      ...stringAttr,\n      enum: ['low', 'medium', 'high', 'critical'],\n    },\n    'agent.plan.risk.score': { ...numberAttr },\n    'agent.plan.risk.categories': { ...stringArrayAttr },\n    'policy.decision': {\n      ...stringAttr,\n      enum: ['permit', 'deny', 'challenge', 'observe', 'error'],\n    },\n    'tool.input_hash': { ...stringAttr },\n    'tool.output_hash': { ...stringAttr },\n    'mcp.tool.destructive': { ...boolAttr },\n    'mcp.tool.untrusted_content': { ...boolAttr },\n    'mcp.security.injection.verdict': {\n      ...stringAttr,\n      enum: ['clean', 'suspicious', 'malicious'],\n    },\n    'security.event': { ...stringAttr },\n    'security.category': { ...stringAttr },\n    'security.outcome': { ...stringAttr },\n    'security.severity': {\n      ...stringAttr,\n      enum: ['info', 'warning', 'error', 'critical'],\n    },\n  },\n  spans: {\n    'agent.action': {\n      description: 'Scoped agent action or tool call with audit metadata',\n      attributes: {\n        'agent.id': { ...stringAttr, required: true },\n        'tool.name': { ...stringAttr },\n      },\n    },\n    'tools/call': {\n      description: 'MCP tool invocation with boundary security signals',\n      attributes: {\n        'mcp.tool.name': { ...stringAttr, required: true },\n      },\n    },\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;AAoCA,SAAgB,oBAAoB,UAAuC;CACzE,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,SAAS,oBAAoB,CAAC,CAAC,GACtE,IAAI,KAAK,iBAAiB,KAAK,IAAI,GAAG;CAExC,KAAK,MAAM,YAAY,OAAO,OAAO,SAAS,KAAK,GACjD,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,SAAS,cAAc,CAAC,CAAC,GAChE,IAAI,KAAK,iBAAiB,KAAK,IAAI,GAAG;CAG1C,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,SAAS;AAC5B;;;;;;AAOA,SAAgB,qBACd,UACA,KACS;CACT,IAAI,SAAS,mBAAmB,IAAI,EAAE,iBAAiB,OAAO;CAC9D,KAAK,MAAM,YAAY,OAAO,OAAO,SAAS,KAAK,GACjD,IAAI,SAAS,aAAa,IAAI,EAAE,iBAAiB,OAAO;CAE1D,OAAO;AACT;;;;AC7DA,MAAM,aAAa,EAAE,MAAM,SAAkB;AAC7C,MAAM,WAAW,EAAE,MAAM,UAAmB;AAC5C,MAAM,aAAa,EAAE,MAAM,SAAkB;AAC7C,MAAM,kBAAkB,EAAE,MAAM,WAAoB;;;;;AAMpD,MAAa,oCAAoCA,iCAAe;CAC9D,SAAS;CACT,SAAS;CACT,kBAAkB;EAChB,iBAAiB;GACf,GAAG;GACH,UAAU;GACV,aAAa;EACf;EACA,uBAAuB;GACrB,GAAG;GACH,iBAAiB;GACjB,aAAa;EACf;EACA,0BAA0B;GACxB,GAAG;GACH,MAAM;IACJ;IACA;IACA;IACA;IACA;IACA;GACF;EACF;EACA,2BAA2B;GACzB,GAAG;GACH,MAAM;IACJ;IACA;IACA;IACA;IACA;GACF;EACF;EACA,0BAA0B,EAAE,GAAG,SAAS;EACxC,yBAAyB;GACvB,GAAG;GACH,MAAM;IAAC;IAAY;IAAU;IAAW;GAAS;EACnD;EACA,sBAAsB,EAAE,GAAG,gBAAgB;EAC3C,0BAA0B;GACxB,GAAG;GACH,MAAM;IAAC;IAAQ;IAAS;IAAU;GAAQ;EAC5C;EACA,8BAA8B;GAAE,GAAG;GAAY,iBAAiB;EAAK;EACrE,yBAAyB,EAAE,GAAG,WAAW;EACzC,2BAA2B,EAAE,GAAG,gBAAgB;EAChD,2BAA2B;GACzB,GAAG;GACH,MAAM;IAAC;IAAO;IAAU;IAAQ;GAAU;EAC5C;EACA,yBAAyB,EAAE,GAAG,WAAW;EACzC,8BAA8B,EAAE,GAAG,gBAAgB;EACnD,mBAAmB;GACjB,GAAG;GACH,MAAM;IAAC;IAAU;IAAQ;IAAa;IAAW;GAAO;EAC1D;EACA,mBAAmB,EAAE,GAAG,WAAW;EACnC,oBAAoB,EAAE,GAAG,WAAW;EACpC,wBAAwB,EAAE,GAAG,SAAS;EACtC,8BAA8B,EAAE,GAAG,SAAS;EAC5C,kCAAkC;GAChC,GAAG;GACH,MAAM;IAAC;IAAS;IAAc;GAAW;EAC3C;EACA,kBAAkB,EAAE,GAAG,WAAW;EAClC,qBAAqB,EAAE,GAAG,WAAW;EACrC,oBAAoB,EAAE,GAAG,WAAW;EACpC,qBAAqB;GACnB,GAAG;GACH,MAAM;IAAC;IAAQ;IAAW;IAAS;GAAU;EAC/C;CACF;CACA,OAAO;EACL,gBAAgB;GACd,aAAa;GACb,YAAY;IACV,YAAY;KAAE,GAAG;KAAY,UAAU;IAAK;IAC5C,aAAa,EAAE,GAAG,WAAW;GAC/B;EACF;EACA,cAAc;GACZ,aAAa;GACb,YAAY,EACV,iBAAiB;IAAE,GAAG;IAAY,UAAU;GAAK,EACnD;EACF;CACF;AACF,CAAC"}

package/dist/index.d.cts

@@ -1,7 +1,6 @@
-import { a as diffSnapshots, c as ContractSnapshot, d as contractToSnapshot, f as parseSnapshot, g as SchemaAttributeKey, h as SNAPSHOT_SPEC, i as SnapshotDiff, l as SnapshotAttribute, m as SCHEMA_ATTRS, n as ChangeType, o as formatDiff, p as serializeSnapshot, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind, u as SnapshotSpan } from "./diff-BQPh72vY.cjs";
-import { a as SpanSpec, c as allowsAdditionalAttributes, i as STABILITIES, l as defineContract, n as AttributeSpec, o as Stability, r as AttributeType, s as TelemetryContract, t as ATTRIBUTE_TYPES, u as resolveAttributeSpec } from "./contract-DGjxR9nb.cjs";
-import { a as SchemaValidationSpanProcessor, c as createSchemaValidationProcessor, d as ValidateOptions, f as ViolationCode, g as validateSpan, h as hasErrors, i as SchemaValidationProcessorOptions, l as SchemaViolation, m as formatViolation, n as ReadableSpanLike, o as SpanLike, p as ViolationSeverity, r as SchemaProcessorMode, s as SpanProcessorLike, t as OtelContext, u as SpanShape } from "./processor-CkBkzK6y.cjs";
-
+import { a as diffSnapshots, c as ContractSnapshot, d as contractToSnapshot, f as parseSnapshot, g as SchemaAttributeKey, h as SNAPSHOT_SPEC, i as SnapshotDiff, l as SnapshotAttribute, m as SCHEMA_ATTRS, n as ChangeType, o as formatDiff, p as serializeSnapshot, r as SnapshotChange, s as hasBreakingChanges, t as ChangeKind, u as SnapshotSpan } from "./diff-CfvhW7ux.cjs";
+import { A as validateScenarioSpec, C as ScenarioViolationCode, D as isScenarioClosed, E as formatScenarioResult, O as parseCardinality, S as ScenarioViolation, T as evaluateScenario, _ as ScenarioOutcome, a as SpanSpec, b as ScenarioSpan, c as allowsAdditionalAttributes, d as Cardinality, f as CheckScenarioOptions, g as ScenarioEventSpec, h as ScenarioAddition, i as STABILITIES, k as proposeScenario, l as defineContract, m as EvaluateScenarioOptions, n as AttributeSpec, o as Stability, p as CompletionBoundary, r as AttributeType, s as TelemetryContract, t as ATTRIBUTE_TYPES, u as resolveAttributeSpec, v as ScenarioProposal, w as checkScenario, x as ScenarioSpec, y as ScenarioResult } from "./contract-Ymh_Q37N.cjs";
+import { a as SchemaValidationSpanProcessor, c as createSchemaValidationProcessor, d as ValidateOptions, f as ViolationCode, g as validateSpan, h as hasErrors, i as SchemaValidationProcessorOptions, l as SchemaViolation, m as formatViolation, n as ReadableSpanLike, o as SpanLike, p as ViolationSeverity, r as SchemaProcessorMode, s as SpanProcessorLike, t as OtelContext, u as SpanShape } from "./processor-DVcsS6Rz.cjs";
 //#region src/redaction.d.ts
 /**
  * Every attribute key in the contract flagged `highCardinality: true`, across
@@ -36,5 +35,5 @@ declare function isHighCardinalityKey(contract: TelemetryContract, key: string):
  */
 declare const AGENT_SECURITY_TELEMETRY_CONTRACT: TelemetryContract;
 //#endregion
-export { AGENT_SECURITY_TELEMETRY_CONTRACT, ATTRIBUTE_TYPES, type AttributeSpec, type AttributeType, type ChangeKind, type ChangeType, type ContractSnapshot, type OtelContext, type ReadableSpanLike, SCHEMA_ATTRS, SNAPSHOT_SPEC, STABILITIES, type SchemaAttributeKey, type SchemaProcessorMode, type SchemaValidationProcessorOptions, SchemaValidationSpanProcessor, type SchemaViolation, type SnapshotAttribute, type SnapshotChange, type SnapshotDiff, type SnapshotSpan, type SpanLike, type SpanProcessorLike, type SpanShape, type SpanSpec, type Stability, type TelemetryContract, type ValidateOptions, type ViolationCode, type ViolationSeverity, allowsAdditionalAttributes, contractToSnapshot, createSchemaValidationProcessor, defineContract, diffSnapshots, formatDiff, formatViolation, hasBreakingChanges, hasErrors, highCardinalityKeys, isHighCardinalityKey, parseSnapshot, resolveAttributeSpec, serializeSnapshot, validateSpan };
+export { AGENT_SECURITY_TELEMETRY_CONTRACT, ATTRIBUTE_TYPES, type AttributeSpec, type AttributeType, type Cardinality, type ChangeKind, type ChangeType, type CheckScenarioOptions, type CompletionBoundary, type ContractSnapshot, type EvaluateScenarioOptions, type OtelContext, type ReadableSpanLike, SCHEMA_ATTRS, SNAPSHOT_SPEC, STABILITIES, type ScenarioAddition, type ScenarioEventSpec, type ScenarioOutcome, type ScenarioProposal, type ScenarioResult, type ScenarioSpan, type ScenarioSpec, type ScenarioViolation, type ScenarioViolationCode, type SchemaAttributeKey, type SchemaProcessorMode, type SchemaValidationProcessorOptions, SchemaValidationSpanProcessor, type SchemaViolation, type SnapshotAttribute, type SnapshotChange, type SnapshotDiff, type SnapshotSpan, type SpanLike, type SpanProcessorLike, type SpanShape, type SpanSpec, type Stability, type TelemetryContract, type ValidateOptions, type ViolationCode, type ViolationSeverity, allowsAdditionalAttributes, checkScenario, contractToSnapshot, createSchemaValidationProcessor, defineContract, diffSnapshots, evaluateScenario, formatDiff, formatScenarioResult, formatViolation, hasBreakingChanges, hasErrors, highCardinalityKeys, isHighCardinalityKey, isScenarioClosed, parseCardinality, parseSnapshot, proposeScenario, resolveAttributeSpec, serializeSnapshot, validateScenarioSpec, validateSpan };
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","names":[],"sources":["../src/redaction.ts","../src/contracts/agent-security.ts"],"mappings":";;;;;;;AAwDa;;;;AC7Cb;;;;AA+EE;;;;;;;;iBDtDc,mBAAA,CAAoB,QAA2B,EAAjB,iBAAiB;;;;;;iBAkB/C,oBAAA,CACd,QAAA,EAAU,iBAAiB,EAC3B,GAAA;;;;;;;cC7CW,iCAAA,EA+EX,iBAAA"}
+{"version":3,"file":"index.d.cts","names":[],"sources":["../src/redaction.ts","../src/contracts/agent-security.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;iBAoCgB,oBAAoB,UAAU;;;;;;iBAkB9B,qBACd,UAAU,mBACV;;;;;;;cC7CW,mCAAA"}