evlog 2.17.0 → 2.19.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (202) hide show
  1. package/README.md +95 -2
  2. package/dist/adapters/axiom.d.mts +1 -1
  3. package/dist/adapters/axiom.mjs +2 -2
  4. package/dist/adapters/axiom.mjs.map +1 -1
  5. package/dist/adapters/better-stack.d.mts +1 -1
  6. package/dist/adapters/better-stack.mjs +2 -2
  7. package/dist/adapters/datadog.d.mts +1 -1
  8. package/dist/adapters/datadog.mjs +2 -2
  9. package/dist/adapters/fs.d.mts +1 -1
  10. package/dist/adapters/fs.mjs +2 -2
  11. package/dist/adapters/hyperdx.d.mts +1 -1
  12. package/dist/adapters/hyperdx.mjs +1 -1
  13. package/dist/adapters/memory.d.mts +116 -0
  14. package/dist/adapters/memory.d.mts.map +1 -0
  15. package/dist/adapters/memory.mjs +191 -0
  16. package/dist/adapters/memory.mjs.map +1 -0
  17. package/dist/adapters/otlp.d.mts +1 -1
  18. package/dist/adapters/otlp.mjs +4 -4
  19. package/dist/adapters/posthog.d.mts +1 -1
  20. package/dist/adapters/posthog.mjs +2 -2
  21. package/dist/adapters/sentry.d.mts +1 -1
  22. package/dist/adapters/sentry.mjs +3 -3
  23. package/dist/ai/index.d.mts +1 -1
  24. package/dist/{audit-pV5aLGP0.mjs → audit-BFwTUxBJ.mjs} +475 -151
  25. package/dist/audit-BFwTUxBJ.mjs.map +1 -0
  26. package/dist/{audit-CC8nfazi.d.mts → audit-BUAajsPU.d.mts} +126 -35
  27. package/dist/audit-BUAajsPU.d.mts.map +1 -0
  28. package/dist/better-auth/index.d.mts +1 -1
  29. package/dist/browser.d.mts +1 -1
  30. package/dist/{define-D6OJdSUH.mjs → define-Bpaymi-h.mjs} +2 -1
  31. package/dist/define-Bpaymi-h.mjs.map +1 -0
  32. package/dist/{define-MSdhzmXn.d.mts → define-DGwZkZ7x.d.mts} +8 -3
  33. package/dist/define-DGwZkZ7x.d.mts.map +1 -0
  34. package/dist/dev-terminal-D4UaEm17.mjs +54 -0
  35. package/dist/dev-terminal-D4UaEm17.mjs.map +1 -0
  36. package/dist/{dist-H3GIh-KK.mjs → dist-DdQWiZn8.mjs} +1 -1
  37. package/dist/{dist-H3GIh-KK.mjs.map → dist-DdQWiZn8.mjs.map} +1 -1
  38. package/dist/{drain-X7_5szSI.mjs → drain-D_fy7m0n.mjs} +3 -3
  39. package/dist/drain-D_fy7m0n.mjs.map +1 -0
  40. package/dist/elysia/index.d.mts +3 -3
  41. package/dist/elysia/index.d.mts.map +1 -1
  42. package/dist/elysia/index.mjs +8 -5
  43. package/dist/elysia/index.mjs.map +1 -1
  44. package/dist/enrich-drain-CG_2Nix-.mjs +122 -0
  45. package/dist/enrich-drain-CG_2Nix-.mjs.map +1 -0
  46. package/dist/{enricher-DxgML6IC.d.mts → enricher-CuMbbdqp.d.mts} +2 -2
  47. package/dist/{enricher-DxgML6IC.d.mts.map → enricher-CuMbbdqp.d.mts.map} +1 -1
  48. package/dist/{enricher-N0erZS87.mjs → enricher-DAWf2-Fx.mjs} +2 -2
  49. package/dist/{enricher-N0erZS87.mjs.map → enricher-DAWf2-Fx.mjs.map} +1 -1
  50. package/dist/enrichers.d.mts +2 -2
  51. package/dist/enrichers.mjs +2 -2
  52. package/dist/{error-CpbbtyXL.d.mts → error-DwajXSKM.d.mts} +2 -2
  53. package/dist/{error-CpbbtyXL.d.mts.map → error-DwajXSKM.d.mts.map} +1 -1
  54. package/dist/error.d.mts +1 -1
  55. package/dist/{errors-DySW1F9_.d.mts → errors-CAq8pYpW.d.mts} +2 -2
  56. package/dist/{errors-DySW1F9_.d.mts.map → errors-CAq8pYpW.d.mts.map} +1 -1
  57. package/dist/{errors-BQgyQ9xe.mjs → errors-DA0cyr8q.mjs} +1 -1
  58. package/dist/{errors-BQgyQ9xe.mjs.map → errors-DA0cyr8q.mjs.map} +1 -1
  59. package/dist/{event-1BMl7o0k.mjs → event-qwAv-7AZ.mjs} +1 -1
  60. package/dist/{event-1BMl7o0k.mjs.map → event-qwAv-7AZ.mjs.map} +1 -1
  61. package/dist/express/index.d.mts +3 -3
  62. package/dist/express/index.d.mts.map +1 -1
  63. package/dist/express/index.mjs +3 -3
  64. package/dist/express/index.mjs.map +1 -1
  65. package/dist/fastify/index.d.mts +9 -4
  66. package/dist/fastify/index.d.mts.map +1 -1
  67. package/dist/fastify/index.mjs +10 -8
  68. package/dist/fastify/index.mjs.map +1 -1
  69. package/dist/{fork-8u_zFOJq.mjs → fork-CYm453dq.mjs} +40 -14
  70. package/dist/fork-CYm453dq.mjs.map +1 -0
  71. package/dist/{headers-CU-QqnYg.mjs → headers-VtmnWcfn.mjs} +1 -1
  72. package/dist/{headers-CU-QqnYg.mjs.map → headers-VtmnWcfn.mjs.map} +1 -1
  73. package/dist/hono/index.d.mts +2 -2
  74. package/dist/hono/index.d.mts.map +1 -1
  75. package/dist/hono/index.mjs +10 -2
  76. package/dist/hono/index.mjs.map +1 -1
  77. package/dist/{http-6umVAKDW.mjs → http-Bept5EIC.mjs} +2 -2
  78. package/dist/{http-6umVAKDW.mjs.map → http-Bept5EIC.mjs.map} +1 -1
  79. package/dist/http.d.mts +1 -1
  80. package/dist/{index-o1_z4phv.d.mts → index-CE7kH0II.d.mts} +15 -8
  81. package/dist/index-CE7kH0II.d.mts.map +1 -0
  82. package/dist/index.d.mts +9 -9
  83. package/dist/index.mjs +9 -15
  84. package/dist/index.mjs.map +1 -1
  85. package/dist/{integration-DTZtjSqh.mjs → integration-CR601uyW.mjs} +3 -3
  86. package/dist/{integration-DTZtjSqh.mjs.map → integration-CR601uyW.mjs.map} +1 -1
  87. package/dist/{logger-DntcxxHg.d.mts → logger-BccCJUyD.d.mts} +11 -3
  88. package/dist/logger-BccCJUyD.d.mts.map +1 -0
  89. package/dist/logger.d.mts +2 -2
  90. package/dist/logger.mjs +2 -2
  91. package/dist/{middleware-U-lIAzHg.d.mts → middleware-DQ6-h8h0.d.mts} +9 -2
  92. package/dist/middleware-DQ6-h8h0.d.mts.map +1 -0
  93. package/dist/nestjs/index.d.mts +2 -2
  94. package/dist/nestjs/index.mjs +4 -4
  95. package/dist/next/client.d.mts +1 -1
  96. package/dist/next/index.d.mts +6 -5
  97. package/dist/next/index.d.mts.map +1 -1
  98. package/dist/next/index.mjs +36 -38
  99. package/dist/next/index.mjs.map +1 -1
  100. package/dist/next/instrumentation.d.mts +1 -1
  101. package/dist/next/instrumentation.mjs +1 -1
  102. package/dist/next/instrumentation.mjs.map +1 -1
  103. package/dist/nitro/errorHandler.mjs +10 -16
  104. package/dist/nitro/errorHandler.mjs.map +1 -1
  105. package/dist/nitro/module.d.mts +2 -2
  106. package/dist/nitro/module.d.mts.map +1 -1
  107. package/dist/nitro/module.mjs +8 -2
  108. package/dist/nitro/module.mjs.map +1 -1
  109. package/dist/nitro/plugin.mjs +37 -65
  110. package/dist/nitro/plugin.mjs.map +1 -1
  111. package/dist/nitro/v3/errorHandler.d.mts +0 -7
  112. package/dist/nitro/v3/errorHandler.mjs +13 -15
  113. package/dist/nitro/v3/errorHandler.mjs.map +1 -1
  114. package/dist/nitro/v3/index.d.mts +2 -2
  115. package/dist/nitro/v3/module.d.mts +1 -1
  116. package/dist/nitro/v3/module.d.mts.map +1 -1
  117. package/dist/nitro/v3/module.mjs +9 -4
  118. package/dist/nitro/v3/module.mjs.map +1 -1
  119. package/dist/nitro/v3/plugin.mjs +77 -44
  120. package/dist/nitro/v3/plugin.mjs.map +1 -1
  121. package/dist/nitro/v3/useLogger.d.mts +1 -1
  122. package/dist/nitro-ClRZLD1g.mjs +96 -0
  123. package/dist/nitro-ClRZLD1g.mjs.map +1 -0
  124. package/dist/{nitro-oZre8ab3.d.mts → nitro-zCXTylj4.d.mts} +7 -2
  125. package/dist/nitro-zCXTylj4.d.mts.map +1 -0
  126. package/dist/nitroConfigBridge-BkVWnSV3.mjs +164 -0
  127. package/dist/nitroConfigBridge-BkVWnSV3.mjs.map +1 -0
  128. package/dist/{nodeResponse-BkkionWl.mjs → nodeResponse-CIEEbrNE.mjs} +1 -1
  129. package/dist/{nodeResponse-BkkionWl.mjs.map → nodeResponse-CIEEbrNE.mjs.map} +1 -1
  130. package/dist/nuxt/module.d.mts +13 -4
  131. package/dist/nuxt/module.d.mts.map +1 -1
  132. package/dist/nuxt/module.mjs +11 -4
  133. package/dist/nuxt/module.mjs.map +1 -1
  134. package/dist/orpc/index.d.mts +115 -0
  135. package/dist/orpc/index.d.mts.map +1 -0
  136. package/dist/orpc/index.mjs +145 -0
  137. package/dist/orpc/index.mjs.map +1 -0
  138. package/dist/{package-v_MmOZeA.mjs → package-CUhII9DA.mjs} +2 -2
  139. package/dist/package-CUhII9DA.mjs.map +1 -0
  140. package/dist/{parseError-yVZ58wIK.d.mts → parseError-Cagr-Ctc.d.mts} +2 -2
  141. package/dist/parseError-Cagr-Ctc.d.mts.map +1 -0
  142. package/dist/pretty-error-CVVgwlTn.mjs +278 -0
  143. package/dist/pretty-error-CVVgwlTn.mjs.map +1 -0
  144. package/dist/pretty-error-snippet.node-c_bzjg7g.mjs +47 -0
  145. package/dist/pretty-error-snippet.node-c_bzjg7g.mjs.map +1 -0
  146. package/dist/react-router/index.d.mts +2 -2
  147. package/dist/react-router/index.mjs +5 -6
  148. package/dist/react-router/index.mjs.map +1 -1
  149. package/dist/{routes-CnIgYWf8.mjs → routes-4rMzRyTk.mjs} +1 -1
  150. package/dist/{routes-CnIgYWf8.mjs.map → routes-4rMzRyTk.mjs.map} +1 -1
  151. package/dist/runtime/client/log.d.mts +1 -1
  152. package/dist/runtime/server/routes/_evlog/ingest.post.mjs +28 -12
  153. package/dist/runtime/server/routes/_evlog/ingest.post.mjs.map +1 -1
  154. package/dist/runtime/server/useLogger.d.mts +1 -1
  155. package/dist/runtime/utils/parseError.d.mts +2 -2
  156. package/dist/runtime/utils/parseError.mjs +1 -1
  157. package/dist/{severity-R5Egq3qz.mjs → severity-CwXUSHt3.mjs} +1 -1
  158. package/dist/{severity-R5Egq3qz.mjs.map → severity-CwXUSHt3.mjs.map} +1 -1
  159. package/dist/{source-location-Dco0cRTz.mjs → source-location-xkDGiERl.mjs} +1 -1
  160. package/dist/{source-location-Dco0cRTz.mjs.map → source-location-xkDGiERl.mjs.map} +1 -1
  161. package/dist/{storage-Dwinmg8P.mjs → storage-7X37OToT.mjs} +2 -1
  162. package/dist/{storage-Dwinmg8P.mjs.map → storage-7X37OToT.mjs.map} +1 -1
  163. package/dist/stream.d.mts +1 -1
  164. package/dist/stream.mjs +1 -1
  165. package/dist/streamResponse-CmQ3qUbF.mjs +94 -0
  166. package/dist/streamResponse-CmQ3qUbF.mjs.map +1 -0
  167. package/dist/sveltekit/index.d.mts +3 -3
  168. package/dist/sveltekit/index.d.mts.map +1 -1
  169. package/dist/sveltekit/index.mjs +48 -16
  170. package/dist/sveltekit/index.mjs.map +1 -1
  171. package/dist/toolkit.d.mts +38 -7
  172. package/dist/toolkit.d.mts.map +1 -1
  173. package/dist/toolkit.mjs +15 -14
  174. package/dist/types.d.mts +2 -2
  175. package/dist/{useLogger-BsPL4AQm.d.mts → useLogger-Dv52PDpH.d.mts} +2 -2
  176. package/dist/{useLogger-BsPL4AQm.d.mts.map → useLogger-Dv52PDpH.d.mts.map} +1 -1
  177. package/dist/{utils-DLCeShxL.d.mts → utils-DmNbZwBZ.d.mts} +21 -4
  178. package/dist/{utils-DLCeShxL.d.mts.map → utils-DmNbZwBZ.d.mts.map} +1 -1
  179. package/dist/utils.d.mts +2 -2
  180. package/dist/utils.mjs +31 -9
  181. package/dist/utils.mjs.map +1 -1
  182. package/dist/vite/index.d.mts +1 -1
  183. package/dist/vite/index.mjs +1 -1
  184. package/dist/workers.d.mts +1 -1
  185. package/dist/workers.mjs +1 -1
  186. package/package.json +48 -15
  187. package/dist/audit-CC8nfazi.d.mts.map +0 -1
  188. package/dist/audit-pV5aLGP0.mjs.map +0 -1
  189. package/dist/define-D6OJdSUH.mjs.map +0 -1
  190. package/dist/define-MSdhzmXn.d.mts.map +0 -1
  191. package/dist/drain-X7_5szSI.mjs.map +0 -1
  192. package/dist/fork-8u_zFOJq.mjs.map +0 -1
  193. package/dist/index-o1_z4phv.d.mts.map +0 -1
  194. package/dist/logger-DntcxxHg.d.mts.map +0 -1
  195. package/dist/middleware-U-lIAzHg.d.mts.map +0 -1
  196. package/dist/nitro-DErMq_Zj.mjs +0 -34
  197. package/dist/nitro-DErMq_Zj.mjs.map +0 -1
  198. package/dist/nitro-oZre8ab3.d.mts.map +0 -1
  199. package/dist/nitroConfigBridge-DKk7eOn-.mjs +0 -92
  200. package/dist/nitroConfigBridge-DKk7eOn-.mjs.map +0 -1
  201. package/dist/package-v_MmOZeA.mjs.map +0 -1
  202. package/dist/parseError-yVZ58wIK.d.mts.map +0 -1
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-BFwTUxBJ.mjs","names":["isPlainObject","getSharedHeader"],"sources":["../src/redact.ts","../src/shared/plugin.ts","../src/logger.ts","../src/audit.ts"],"sourcesContent":["import type { RedactConfig } from './types'\nimport { globToRegExp } from './utils'\n\nconst DEFAULT_REPLACEMENT = '[REDACTED]'\n\nexport type Masker = [RegExp, (match: string) => string]\n\n/** Compiled matchers for {@link RedactConfig.paths} glob patterns. */\nexport interface RedactPathMatchers {\n exactPaths: Set<string>\n pathGlobs: RegExp[]\n keyGlobs: RegExp[]\n /** Single-segment shorthands (`password` → `**.password`) matched case-insensitively on leaf keys. */\n caseInsensitiveLeaves: Set<string>\n}\n\n/**\n * Normalize a redact path pattern.\n * Single segments without wildcards are shorthand for `**.<segment>`.\n */\nexport function normalizeRedactPathPattern(pattern: string): string {\n if (!pattern.includes('*') && !pattern.includes('.')) {\n return `**.${pattern}`\n }\n return pattern\n}\n\n/**\n * Compile `RedactConfig.paths` into exact paths, path globs, and key globs.\n * Returns `undefined` when `patterns` is empty.\n */\nexport function compileRedactPathMatchers(patterns?: string[]): RedactPathMatchers | undefined {\n if (!patterns?.length) return undefined\n\n const exactPaths = new Set<string>()\n const pathGlobs: RegExp[] = []\n const keyGlobs: RegExp[] = []\n const caseInsensitiveLeaves = new Set<string>()\n\n for (const raw of patterns) {\n if (!raw.includes('*')) {\n if (raw.includes('.')) {\n exactPaths.add(raw)\n } else {\n addPathGlobPattern(normalizeRedactPathPattern(raw), exactPaths, pathGlobs, caseInsensitiveLeaves)\n }\n continue\n }\n\n if (!raw.includes('.')) {\n keyGlobs.push(globToRegExp(raw, '.'))\n } else {\n addPathGlobPattern(raw, exactPaths, pathGlobs, caseInsensitiveLeaves)\n }\n }\n\n if (exactPaths.size === 0 && pathGlobs.length === 0 && keyGlobs.length === 0 && caseInsensitiveLeaves.size === 0) {\n return undefined\n }\n\n return { exactPaths, pathGlobs, keyGlobs, caseInsensitiveLeaves }\n}\n\n/** `**.segment` also matches a top-level `segment` field. */\nfunction addPathGlobPattern(\n pattern: string,\n exactPaths: Set<string>,\n pathGlobs: RegExp[],\n caseInsensitiveLeaves: Set<string>,\n): void {\n pathGlobs.push(globToRegExp(pattern, '.'))\n const leaf = pattern.match(/^\\*\\*\\.([^.?*]+)$/)\n if (leaf) {\n exactPaths.add(leaf[1]!)\n caseInsensitiveLeaves.add(leaf[1]!)\n }\n}\n\n/**\n * Whether a field at `fullPath` (dot-notation from root) with leaf key `leafKey`\n * should be fully redacted.\n */\nexport function matchesRedactPath(fullPath: string, leafKey: string, matchers: RedactPathMatchers): boolean {\n if (matchers.exactPaths.has(fullPath)) return true\n\n const leafLower = leafKey.toLowerCase()\n for (const name of matchers.caseInsensitiveLeaves) {\n if (leafLower === name.toLowerCase()) return true\n }\n\n for (const glob of matchers.pathGlobs) {\n glob.lastIndex = 0\n if (glob.test(fullPath)) return true\n }\n\n for (const glob of matchers.keyGlobs) {\n glob.lastIndex = 0\n if (glob.test(leafKey)) return true\n }\n\n return false\n}\n\n/**\n * Redact fields matching path globs recursively. Mutates `obj` in place (use on a clone).\n */\nexport function redactPathsInTree(\n obj: unknown,\n matchers: RedactPathMatchers,\n replacement: string,\n prefix = '',\n): void {\n if (obj === null || obj === undefined) return\n\n if (Array.isArray(obj)) {\n for (let i = 0; i < obj.length; i++) {\n const segment = String(i)\n const fullPath = prefix ? `${prefix}.${segment}` : segment\n redactPathsInTree(obj[i], matchers, replacement, fullPath)\n }\n return\n }\n\n if (typeof obj === 'object') {\n const record = obj as Record<string, unknown>\n for (const key in record) {\n const fullPath = prefix ? `${prefix}.${key}` : key\n if (matchesRedactPath(fullPath, key, matchers)) {\n record[key] = replacement\n } else {\n redactPathsInTree(record[key], matchers, replacement, fullPath)\n }\n }\n }\n}\n\n/**\n * Return a copy of `value` with path-pattern matches replaced by `replacement`.\n * Used by audit diffs; does not mutate the input.\n *\n * `pointerPath` is a JSON Pointer (e.g. `/user/password`).\n */\nexport function redactValueByPaths(\n value: unknown,\n matchers: RedactPathMatchers,\n replacement: string,\n pointerPath = '',\n): unknown {\n const segments = pointerPath.split('/').filter(Boolean)\n const dotPath = segments.join('.')\n const leafKey = segments.at(-1) ?? ''\n\n if (value === null || typeof value !== 'object') {\n if (dotPath && matchesRedactPath(dotPath, leafKey, matchers)) return replacement\n return value\n }\n\n if (Array.isArray(value)) {\n return value.map((v, i) => redactValueByPaths(v, matchers, replacement, `${pointerPath}/${i}`))\n }\n\n if (!isPlainRecord(value)) return value\n\n const out: Record<string, unknown> = {}\n for (const [k, v] of Object.entries(value)) {\n const childPointer = pointerPath ? `${pointerPath}/${k}` : `/${k}`\n const childDot = dotPath ? `${dotPath}.${k}` : k\n out[k] = matchesRedactPath(childDot, k, matchers)\n ? replacement\n : redactValueByPaths(v, matchers, replacement, childPointer)\n }\n return out\n}\n\n/**\n * Built-in PII detection patterns with smart masking.\n * Each builtin preserves just enough signal for debugging while scrubbing PII.\n */\nexport const builtinPatterns = {\n /** Credit card numbers → ****1111 (PCI DSS: last 4 allowed) */\n creditCard: {\n pattern: /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/g,\n mask: (m: string) => `****${m.replace(/[\\s-]/g, '').slice(-4)}`,\n },\n /** Email addresses → a***@***.com */\n email: {\n pattern: /[\\w.+-]+@[\\w-]+\\.[\\w.]+/g,\n mask: (m: string) => {\n const at = m.indexOf('@')\n if (at < 1) return '***@***'\n const tld = m.slice(m.lastIndexOf('.'))\n return `${m[0]}***@***${tld}`\n },\n },\n /** IPv4 addresses → ***.***.***.100 (last octet only) */\n ipv4: {\n pattern: /\\b(?!0\\.0\\.0\\.0\\b)(?!127\\.0\\.0\\.1\\b)\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\.\\d{1,3}\\b/g,\n mask: (m: string) => `***.***.***.${m.split('.').pop()}`,\n },\n /**\n * International phone numbers → `+33******78` (country code + last 2 digits).\n *\n * Requires an explicit phone signal (`+countryCode` prefix or `(areaCode)`\n * parens) to avoid false positives on digit-rich identifiers (UUIDs,\n * idempotency keys, order ids, hex hashes). Bare digit runs like `12345678`\n * are intentionally not matched — opt in via custom `patterns` if your app\n * stores phones in unformatted form.\n */\n phone: {\n pattern: /(?:\\+\\d{1,3}[\\s.-]?\\(?\\d{1,4}\\)?|\\(\\d{1,4}\\))(?:[\\s.-]?\\d{2,4}){2,4}\\b/g,\n mask: (m: string) => {\n const digits = m.replace(/[^\\d]/g, '')\n const hasPlus = m.startsWith('+')\n if (hasPlus && digits.length > 4) {\n const ccMatch = m.match(/^\\+\\d{1,3}/)\n const cc = ccMatch ? ccMatch[0] : '+'\n return `${cc}******${digits.slice(-2)}`\n }\n if (digits.length > 2) {\n return `${'*'.repeat(digits.length - 2)}${digits.slice(-2)}`\n }\n return '***'\n },\n },\n /** JWT tokens → eyJ***.*** */\n jwt: {\n pattern: /\\beyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*\\b/g,\n mask: () => 'eyJ***.***',\n },\n /** Bearer tokens → Bearer *** */\n bearer: {\n pattern: /\\bBearer\\s+[\\w\\-.~+/]{8,}=*/gi,\n mask: () => 'Bearer ***',\n },\n /** IBAN → FR76****189 (country + check digits + last 3) */\n iban: {\n pattern: /\\b[A-Z]{2}\\d{2}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}[\\s-]?[\\dA-Z]{0,4}\\b/g,\n mask: (m: string) => {\n const clean = m.replace(/[\\s-]/g, '')\n return `${clean.slice(0, 4)}****${clean.slice(-3)}`\n },\n },\n} as const\n\nexport type BuiltinPatternName = keyof typeof builtinPatterns\n\n/**\n * Resolve a `redact` option (boolean or object) into a concrete `RedactConfig`.\n *\n * - `true` → all built-in patterns with smart masking, no custom paths\n * - `{ ... }` → built-in maskers merged with user config (opt-out: `builtins: false`)\n * - `false` / `undefined` → `undefined` (no redaction)\n */\nexport function resolveRedactConfig(input: boolean | RedactConfig | undefined): RedactConfig | undefined {\n if (input === undefined || input === false) return undefined\n\n if (input === true) {\n return { _maskers: allBuiltinMaskers() }\n }\n\n if (input.builtins === false) {\n return input\n }\n\n const maskers = Array.isArray(input.builtins)\n ? input.builtins\n .map(name => builtinPatterns[name])\n .filter(Boolean)\n .map(b => [cloneRegex(b.pattern), b.mask] as Masker)\n : allBuiltinMaskers()\n\n return {\n ...input,\n _maskers: maskers,\n }\n}\n\nfunction allBuiltinMaskers(): Masker[] {\n return Object.values(builtinPatterns).map(b => [cloneRegex(b.pattern), b.mask] as Masker)\n}\n\nfunction cloneRegex(re: RegExp): RegExp {\n return new RegExp(re.source, re.flags)\n}\n\n/** @internal Set on wide events after initLogger redaction so middleware skips a second pass. */\nexport const globallyRedacted = Symbol.for('evlog.globallyRedacted')\n\n/** @internal Mark a wide event as already redacted by {@link initLogger}. */\nexport function markGloballyRedacted(event: Record<string, unknown>): void {\n Object.defineProperty(event, globallyRedacted, { value: true, enumerable: false, configurable: true })\n}\n\n/** @internal Whether global redaction already ran on this wide event. */\nexport function isGloballyRedacted(event: Record<string, unknown>): boolean {\n return Reflect.has(event, globallyRedacted)\n}\n\n/**\n * Clone before redaction. Wide events are JSON-shaped; fall back when\n * `structuredClone` rejects non-cloneable values (functions, symbols, etc.).\n */\nfunction cloneForRedaction(event: Record<string, unknown>): Record<string, unknown> {\n try {\n return structuredClone(event)\n } catch {\n try {\n return JSON.parse(JSON.stringify(event)) as Record<string, unknown>\n } catch {\n console.warn('[cloneForRedaction] Shallow clone used — nested objects may be mutated by redactPath, redactPatterns, and applyMaskersToTree')\n return { ...event }\n }\n }\n}\n\n/**\n * Redact sensitive data from a wide event without mutating the input.\n *\n * Returns a deep clone with redaction applied. Three strategies run in order:\n * 1. **Path-based**: dot-notation paths with optional globs (`password`, `**.password`, `*_token`, `user.*`) — full value replacement.\n * 2. **Masker-based**: built-in patterns with smart partial masking (e.g. `****1111`).\n * 3. **Pattern-based**: custom RegExp patterns on string values replaced with `replacement`.\n *\n * @param event - The wide event object (not mutated).\n * @param config - Redaction configuration.\n * @returns A redacted deep clone of `event`.\n */\nexport function redactEvent(event: Record<string, unknown>, config: RedactConfig): Record<string, unknown> {\n const clone = cloneForRedaction(event)\n const replacement = config.replacement ?? DEFAULT_REPLACEMENT\n\n const pathMatchers = compileRedactPathMatchers(config.paths)\n if (pathMatchers) {\n redactPathsInTree(clone, pathMatchers, replacement)\n }\n\n if (config._maskers?.length) {\n applyMaskersToTree(clone, config._maskers)\n }\n\n if (config.patterns?.length) {\n redactPatterns(clone, config.patterns, replacement)\n }\n\n return clone\n}\n\nfunction redactPatterns(obj: unknown, patterns: RegExp[], replacement: string): void {\n if (obj === null || obj === undefined) return\n\n if (Array.isArray(obj)) {\n for (let i = 0; i < obj.length; i++) {\n if (typeof obj[i] === 'string') {\n obj[i] = applyPatterns(obj[i] as string, patterns, replacement)\n } else if (typeof obj[i] === 'object') {\n redactPatterns(obj[i], patterns, replacement)\n }\n }\n return\n }\n\n if (typeof obj === 'object') {\n const record = obj as Record<string, unknown>\n for (const key in record) {\n const val = record[key]\n if (typeof val === 'string') {\n record[key] = applyPatterns(val, patterns, replacement)\n } else if (typeof val === 'object') {\n redactPatterns(val, patterns, replacement)\n }\n }\n }\n}\n\nfunction applyPatterns(value: string, patterns: RegExp[], replacement: string): string {\n let result = value\n for (const pattern of patterns) {\n pattern.lastIndex = 0\n result = result.replace(pattern, replacement)\n }\n return result\n}\n\nfunction applyMaskersToTree(obj: unknown, maskers: Masker[]): void {\n if (obj === null || obj === undefined) return\n\n if (Array.isArray(obj)) {\n for (let i = 0; i < obj.length; i++) {\n if (typeof obj[i] === 'string') {\n obj[i] = applyMaskers(obj[i] as string, maskers)\n } else if (typeof obj[i] === 'object') {\n applyMaskersToTree(obj[i], maskers)\n }\n }\n return\n }\n\n if (typeof obj === 'object') {\n const record = obj as Record<string, unknown>\n for (const key in record) {\n const val = record[key]\n if (typeof val === 'string') {\n record[key] = applyMaskers(val, maskers)\n } else if (typeof val === 'object') {\n applyMaskersToTree(val, maskers)\n }\n }\n }\n}\n\nfunction applyMaskers(value: string, maskers: Masker[]): string {\n let result = value\n for (const [pattern, mask] of maskers) {\n pattern.lastIndex = 0\n result = result.replace(pattern, mask)\n }\n return result\n}\n\n/**\n * Normalize a redact config that may have been deserialized from JSON\n * (e.g. via `process.env.__EVLOG_CONFIG`). Converts pattern strings\n * back to RegExp instances, then resolves built-in patterns.\n */\nexport function normalizeRedactConfig(raw: boolean | Record<string, unknown> | undefined): RedactConfig | undefined {\n if (raw === undefined || raw === false) return undefined\n if (raw === true) return resolveRedactConfig(true)\n\n const config: RedactConfig = {}\n\n if (Array.isArray(raw.paths)) {\n config.paths = raw.paths as string[]\n }\n\n if (typeof raw.replacement === 'string') {\n config.replacement = raw.replacement\n }\n\n if (raw.builtins === false) {\n config.builtins = false\n } else if (Array.isArray(raw.builtins)) {\n config.builtins = raw.builtins as BuiltinPatternName[]\n }\n\n if (Array.isArray(raw.patterns)) {\n config.patterns = deserializeRegexList(raw.patterns)\n }\n\n return resolveRedactConfig(config)\n}\n\nfunction isPlainRecord(value: unknown): value is Record<string, unknown> {\n if (value === null || typeof value !== 'object' || Array.isArray(value)) return false\n const proto = Object.getPrototypeOf(value)\n return proto === Object.prototype || proto === null\n}\n\nfunction deserializeRegexList(raw: unknown[]): RegExp[] {\n const patterns: RegExp[] = []\n for (const p of raw) {\n try {\n if (p instanceof RegExp) {\n patterns.push(cloneRegex(p))\n continue\n }\n if (typeof p === 'string') {\n patterns.push(new RegExp(p, 'g'))\n continue\n }\n if (typeof p === 'object' && p !== null && typeof (p as { source?: unknown }).source === 'string') {\n const flags = typeof (p as { flags?: unknown }).flags === 'string'\n ? (p as { flags: string }).flags\n : 'g'\n patterns.push(new RegExp((p as { source: string }).source, flags))\n }\n } catch {\n console.warn('[normalizeRedactConfig] Ignoring invalid redact regex entry')\n }\n }\n return patterns\n}\n","import type { DrainContext, EnrichContext, EnvironmentContext, RequestLogger, TailSamplingContext, WideEvent } from '../types'\n\n/** Context passed to {@link EvlogPlugin.setup} when the plugin is registered. */\nexport interface PluginSetupContext {\n env: EnvironmentContext\n}\n\n/** Per-request context for `onRequestStart` / `onRequestFinish`. */\nexport interface RequestLifecycleContext {\n logger: RequestLogger\n request: {\n method: string\n path: string\n requestId?: string\n }\n /** Pre-filtered safe request headers (sensitive headers stripped). */\n headers?: Record<string, string>\n}\n\nexport interface RequestFinishContext extends RequestLifecycleContext {\n /** `null` when the event was sampled out or disabled. */\n event: WideEvent | null\n status?: number\n durationMs: number\n error?: Error\n}\n\n/** Context passed to {@link EvlogPlugin.onClientLog} for client-submitted events. */\nexport interface ClientLogContext {\n /** Raw client payload, before normalization. */\n payload: Record<string, unknown>\n request?: {\n method?: string\n path?: string\n }\n headers?: Record<string, string>\n}\n\n/**\n * Canonical extension point for evlog. A plugin can opt into any subset of\n * hooks; drains and enrichers are special cases (see {@link drainPlugin} and\n * {@link enricherPlugin}).\n *\n * @example\n * ```ts\n * export const tenantPlugin = definePlugin({\n * name: 'tenant',\n * onRequestStart({ logger, headers }) {\n * const tenantId = headers?.['x-tenant-id']\n * if (tenantId) logger.set({ tenant: { id: tenantId } })\n * },\n * enrich({ event }) {\n * event.region = process.env.REGION\n * },\n * })\n * ```\n */\nexport interface EvlogPlugin {\n /** Stable identifier. Used for de-duplication and error messages. */\n name: string\n /** Run-once when the plugin is registered. */\n setup?: (ctx: PluginSetupContext) => void | Promise<void>\n /** Runs before drain. */\n enrich?: (ctx: EnrichContext) => void | Promise<void>\n /** Called for every emitted event. */\n drain?: (ctx: DrainContext) => void | Promise<void>\n /** Tail sampling hook. Set `ctx.shouldKeep = true` to force-keep. */\n keep?: (ctx: TailSamplingContext) => void | Promise<void>\n onRequestStart?: (ctx: RequestLifecycleContext) => void\n onRequestFinish?: (ctx: RequestFinishContext) => void\n /** Observe events submitted from browser/edge clients. */\n onClientLog?: (ctx: ClientLogContext) => void\n /**\n * Decorate per-request loggers with extra methods. Augment `RequestLogger`\n * in a `.d.ts` to expose them on `useLogger()`.\n */\n extendLogger?: (logger: RequestLogger) => void\n}\n\n/** Identity helper preserving plugin type inference. */\nexport function definePlugin(plugin: EvlogPlugin): EvlogPlugin {\n return plugin\n}\n\n/** Wrap a standalone drain callback as an {@link EvlogPlugin}. */\nexport function drainPlugin(name: string, drain: NonNullable<EvlogPlugin['drain']>): EvlogPlugin {\n return { name, drain }\n}\n\n/** Wrap a standalone enricher callback as an {@link EvlogPlugin}. */\nexport function enricherPlugin(name: string, enrich: NonNullable<EvlogPlugin['enrich']>): EvlogPlugin {\n return { name, enrich }\n}\n\n/**\n * Compiled view of a plugin set. Errors from individual hooks are caught and\n * logged to `console.error` with the plugin name — they never break the request.\n */\nexport interface PluginRunner {\n readonly plugins: readonly EvlogPlugin[]\n /** `true` when at least one plugin implements the matching hook. */\n readonly hasEnrich: boolean\n readonly hasDrain: boolean\n readonly hasKeep: boolean\n readonly hasRequestLifecycle: boolean\n readonly hasClientLog: boolean\n readonly hasExtendLogger: boolean\n applyExtendLogger: (logger: RequestLogger) => void\n runOnRequestStart: (ctx: RequestLifecycleContext) => void\n runOnRequestFinish: (ctx: RequestFinishContext) => void\n runEnrich: (ctx: EnrichContext) => Promise<void>\n /** Drains run concurrently (`Promise.allSettled`). */\n runDrain: (ctx: DrainContext) => Promise<void>\n runKeep: (ctx: TailSamplingContext) => Promise<void>\n runOnClientLog: (ctx: ClientLogContext) => void\n runSetup: (ctx: PluginSetupContext) => Promise<void>\n}\n\nfunction logPluginError(name: string, hook: string, err: unknown): void {\n console.error(`[evlog/${name}] ${hook} failed:`, err)\n}\n\n/** De-duplicates by `name` — last registration wins. */\nexport function createPluginRunner(plugins: EvlogPlugin[] = []): PluginRunner {\n const byName = new Map<string, EvlogPlugin>()\n for (const plugin of plugins) {\n byName.set(plugin.name, plugin)\n }\n const list = Array.from(byName.values())\n\n const hasEnrich = list.some(p => typeof p.enrich === 'function')\n const hasDrain = list.some(p => typeof p.drain === 'function')\n const hasKeep = list.some(p => typeof p.keep === 'function')\n const hasRequestLifecycle = list.some(\n p => typeof p.onRequestStart === 'function' || typeof p.onRequestFinish === 'function',\n )\n const hasClientLog = list.some(p => typeof p.onClientLog === 'function')\n const hasExtendLogger = list.some(p => typeof p.extendLogger === 'function')\n\n return {\n plugins: list,\n hasEnrich,\n hasDrain,\n hasKeep,\n hasRequestLifecycle,\n hasClientLog,\n hasExtendLogger,\n applyExtendLogger(logger) {\n for (const plugin of list) {\n if (!plugin.extendLogger) continue\n try {\n plugin.extendLogger(logger)\n } catch (err) {\n logPluginError(plugin.name, 'extendLogger', err)\n }\n }\n },\n runOnRequestStart(ctx) {\n for (const plugin of list) {\n if (!plugin.onRequestStart) continue\n try {\n plugin.onRequestStart(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'onRequestStart', err)\n }\n }\n },\n runOnRequestFinish(ctx) {\n for (const plugin of list) {\n if (!plugin.onRequestFinish) continue\n try {\n plugin.onRequestFinish(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'onRequestFinish', err)\n }\n }\n },\n async runEnrich(ctx) {\n for (const plugin of list) {\n if (!plugin.enrich) continue\n try {\n await plugin.enrich(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'enrich', err)\n }\n }\n },\n async runDrain(ctx) {\n const drains = list.filter(p => typeof p.drain === 'function')\n if (drains.length === 0) return\n await Promise.allSettled(\n drains.map(async (plugin) => {\n try {\n await plugin.drain!(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'drain', err)\n }\n }),\n )\n },\n async runKeep(ctx) {\n for (const plugin of list) {\n if (!plugin.keep) continue\n try {\n await plugin.keep(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'keep', err)\n }\n }\n },\n runOnClientLog(ctx) {\n for (const plugin of list) {\n if (!plugin.onClientLog) continue\n try {\n plugin.onClientLog(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'onClientLog', err)\n }\n }\n },\n async runSetup(ctx) {\n for (const plugin of list) {\n if (!plugin.setup) continue\n try {\n await plugin.setup(ctx)\n } catch (err) {\n logPluginError(plugin.name, 'setup', err)\n }\n }\n },\n }\n}\n\nconst emptyRunner = createPluginRunner([])\n\n/** Shared no-op runner used when no plugins are registered. */\nexport function getEmptyPluginRunner(): PluginRunner {\n return emptyRunner\n}\n","import type { AuditableLogger, AuditInput, AuditMethod } from './audit'\nimport type { DrainContext, EnvironmentContext, FieldContext, Log, LogLevel, LoggerConfig, RedactConfig, RequestLogger, RequestLoggerOptions, SamplingConfig, TailSamplingContext, WideEvent } from './types'\nimport { buildAuditFields, consumeAuditForceKeep, finalizeAudit } from './audit'\nimport { markGloballyRedacted, redactEvent, resolveRedactConfig } from './redact'\nimport type { PluginRunner } from './shared/plugin'\nimport { createPluginRunner, getEmptyPluginRunner } from './shared/plugin'\nimport { buildErrorEntries, PRETTY_ERROR_TREE_SPACER, registerPrettyErrorSnippetReader } from './shared/pretty-error'\nimport type { ResolvedPrettyError } from './shared/dev-terminal'\nimport { resolveDevTerminal } from './shared/dev-terminal'\nimport { EvlogError } from './error'\nimport { colors, cssColors, detectEnvironment, escapeFormatString, formatDuration, getConsoleMethod, getCssLevelColor, getLevelColor, isBrowser, isDev, isLevelEnabled, matchesPattern } from './utils'\n\nfunction isPlainObject(val: unknown): val is Record<string, unknown> {\n return val !== null && typeof val === 'object' && !Array.isArray(val)\n}\n\nconst _tsDate = new Date()\nfunction isoNow(): string {\n _tsDate.setTime(Date.now())\n return _tsDate.toISOString()\n}\n\n/** Shown after post-emit warnings so users can fix fire-and-forget / ALS continuations. */\nconst POST_EMIT_FORK_HINT =\n 'For intentional background work tied to this request, use log.fork(\\'label\\', fn) when your integration supports it (see https://evlog.dev).'\n\nfunction warnPostEmit(method: string, detail: string): void {\n console.warn(\n `[evlog] ${method} called after the wide event was emitted — ${detail} This data will not appear in observability. ${POST_EMIT_FORK_HINT}`,\n )\n}\n\nfunction mergeInto(target: Record<string, unknown>, source: Record<string, unknown>): void {\n for (const key in source) {\n const sourceVal = source[key]\n if (sourceVal === undefined || sourceVal === null) continue\n const targetVal = target[key]\n if (isPlainObject(sourceVal) && isPlainObject(targetVal)) {\n mergeInto(targetVal, sourceVal)\n } else if (Array.isArray(targetVal) && Array.isArray(sourceVal)) {\n target[key] = [...targetVal, ...sourceVal]\n } else {\n target[key] = sourceVal\n }\n }\n}\n\nconst pendingDrainState = new WeakMap<WideEvent, { drainStarted: boolean }>()\n\nfunction isAiOnlyFieldUpdate(data: Record<string, unknown>): boolean {\n const keys = Object.keys(data)\n return keys.length === 1 && keys[0] === 'ai'\n}\n\n/**\n * Mark a wide event as past the post-emit AI merge window so late `log.set({ ai })`\n * calls warn again. Called by framework enrich/drain pipelines before drain runs.\n *\n * @internal Used by middleware and framework integrations.\n */\nexport function markWideEventDrainStarted(event: WideEvent | null): void {\n if (!event) return\n const state = pendingDrainState.get(event)\n if (state) state.drainStarted = true\n}\n\n/**\n * @internal Wide-event field merge — exported for test mocks that mirror emit accumulation.\n */\nexport { mergeInto as mergeWideEventFields }\n\nlet globalEnv: EnvironmentContext = {\n service: 'app',\n environment: 'development',\n}\n\nlet globalPretty = isDev()\nlet globalPrettyError: ResolvedPrettyError = {\n snippet: isDev(),\n stackDepth: 2,\n compact: isDev(),\n detail: 'full',\n}\nlet globalSampling: SamplingConfig = {}\nlet globalStringify = true\nlet globalDrain: ((ctx: DrainContext) => void | Promise<void>) | undefined\nlet globalRedact: RedactConfig | undefined\nlet globalEnabled = true\nlet globalSilent = false\n/** Minimum level for the global `log` API only (`ownsEvent === false`). Default: all levels. */\nlet globalMinLevel: LogLevel = 'debug'\nlet _locked = false\nlet globalPluginRunner: PluginRunner = getEmptyPluginRunner()\n\n/**\n * Initialize the logger with configuration.\n * Call this once at application startup.\n */\nexport function initLogger(config: LoggerConfig = {}): void {\n globalEnabled = config.enabled ?? true\n const detected = detectEnvironment()\n\n globalEnv = {\n service: config.env?.service ?? detected.service ?? 'app',\n environment: config.env?.environment ?? detected.environment ?? 'development',\n version: config.env?.version ?? detected.version,\n commitHash: config.env?.commitHash ?? detected.commitHash,\n region: config.env?.region ?? detected.region,\n }\n\n globalPretty = config.pretty ?? isDev()\n globalPrettyError = resolveDevTerminal(config).prettyError\n globalSampling = config.sampling ?? {}\n globalStringify = config.stringify ?? true\n globalDrain = config.drain\n globalRedact = resolveRedactConfig(config.redact ?? !isDev())\n globalSilent = config.silent ?? false\n globalMinLevel = config.minLevel ?? 'debug'\n globalPluginRunner = config.plugins?.length\n ? createPluginRunner(config.plugins)\n : getEmptyPluginRunner()\n\n if (globalPluginRunner.plugins.length > 0) {\n void globalPluginRunner.runSetup({ env: { ...globalEnv } })\n }\n\n if (!isBrowser() && typeof process !== 'undefined' && process.versions?.node) {\n void import('./shared/pretty-error-snippet.node.js').then((mod) => {\n registerPrettyErrorSnippetReader(mod.readCodeSnippetFromDisk)\n }).catch(() => {\n registerPrettyErrorSnippetReader(null)\n })\n }\n\n const hasAnyDrain = !!globalDrain || globalPluginRunner.hasDrain\n if (globalSilent && !hasAnyDrain && !config._suppressDrainWarning) {\n console.warn('[evlog] silent mode is enabled but no drain is configured. Events will be built and sampled but not output anywhere. Set a drain via initLogger({ drain }) or a framework hook (evlog:drain).')\n }\n}\n\n/**\n * @internal Get the globally registered plugin runner.\n * Used by framework middleware so plugins also fire on routes that pre-date\n * the middleware-level options.\n */\nexport function getGlobalPluginRunner(): PluginRunner {\n return globalPluginRunner\n}\n\n/**\n * Check if logging is globally enabled.\n */\nexport function isEnabled(): boolean {\n return globalEnabled\n}\n\n/**\n * @internal Lock the logger to prevent re-initialization.\n * Called by instrumentation register() after setting up the logger with drain.\n * Prevents configureHandler() from overwriting the drain config.\n */\nexport function lockLogger(): void {\n _locked = true\n}\n\n/**\n * @internal Check if the logger has been locked by instrumentation.\n */\nexport function isLoggerLocked(): boolean {\n return _locked\n}\n\n/**\n * @internal Get the globally configured drain callback.\n * Used by framework middleware to fall back to the global drain\n * when no middleware-level drain is provided.\n */\nexport function getGlobalDrain(): ((ctx: DrainContext) => void | Promise<void>) | undefined {\n return globalDrain\n}\n\n/**\n * Determine if a log at the given level should be emitted based on sampling config.\n * Error level defaults to 100% (always logged) unless explicitly configured otherwise.\n */\nfunction shouldSample(level: LogLevel): boolean {\n const { rates } = globalSampling\n if (!rates) {\n return true // No sampling configured, log everything\n }\n\n // Error defaults to 100% unless explicitly set\n const percentage = level === 'error' && rates.error === undefined\n ? 100\n : rates[level] ?? 100\n\n // 0% = never log, 100% = always log\n if (percentage <= 0) return false\n if (percentage >= 100) return true\n\n return Math.random() * 100 < percentage\n}\n\n/**\n * Evaluate tail sampling conditions to determine if a log should be force-kept.\n * Returns true if ANY condition matches (OR logic).\n */\nexport function shouldKeep(ctx: TailSamplingContext): boolean {\n const { keep } = globalSampling\n if (!keep?.length) return false\n\n return keep.some((condition) => {\n if (condition.status !== undefined && ctx.status !== undefined && ctx.status >= condition.status) {\n return true\n }\n if (condition.duration !== undefined && ctx.duration !== undefined && ctx.duration >= condition.duration) {\n return true\n }\n if (condition.path && ctx.path && matchesPattern(ctx.path, condition.path)) {\n return true\n }\n return false\n })\n}\n\ninterface EmitWideEventOptions {\n deferDrain?: boolean\n ownsEvent?: boolean\n waitUntil?: (promise: Promise<unknown>) => void\n}\n\nfunction emitWideEvent(\n level: LogLevel,\n event: Record<string, unknown>,\n options: EmitWideEventOptions = {},\n): WideEvent | null {\n const { deferDrain = false, ownsEvent = false, waitUntil } = options\n if (!globalEnabled) return null\n\n if (!ownsEvent) {\n if (!isLevelEnabled(level, globalMinLevel)) {\n return null\n }\n if (!shouldSample(level)) {\n return null\n }\n }\n\n let formatted: WideEvent\n if (ownsEvent) {\n event.timestamp = isoNow()\n event.level = level\n if (event.service === undefined) event.service = globalEnv.service\n if (event.environment === undefined) event.environment = globalEnv.environment\n if (globalEnv.version !== undefined && event.version === undefined) event.version = globalEnv.version\n if (globalEnv.commitHash !== undefined && event.commitHash === undefined) event.commitHash = globalEnv.commitHash\n if (globalEnv.region !== undefined && event.region === undefined) event.region = globalEnv.region\n formatted = event as WideEvent\n } else {\n formatted = {\n timestamp: isoNow(),\n level,\n ...globalEnv,\n ...event,\n }\n }\n\n finalizeAudit(formatted)\n\n if (globalRedact) {\n formatted = redactEvent(formatted, globalRedact) as WideEvent\n markGloballyRedacted(formatted)\n }\n\n if (!globalSilent) {\n if (globalPretty) {\n prettyPrintWideEvent(formatted)\n } else if (globalStringify) {\n console[getConsoleMethod(level)](JSON.stringify(formatted))\n } else {\n console[getConsoleMethod(level)](formatted)\n }\n }\n\n if (!deferDrain) {\n const drainPromises: Array<Promise<unknown>> = []\n if (globalDrain) {\n drainPromises.push(\n (async () => {\n try {\n await globalDrain!({ event: formatted })\n } catch (err) {\n console.error('[evlog] drain failed:', err)\n }\n })(),\n )\n }\n if (globalPluginRunner.hasDrain) {\n drainPromises.push(globalPluginRunner.runDrain({ event: formatted }))\n }\n if (drainPromises.length > 0 && waitUntil) {\n waitUntil(Promise.all(drainPromises))\n }\n }\n\n return formatted\n}\n\nfunction emitTaggedLog(level: LogLevel, tag: string, message: string): void {\n if (!globalEnabled) return\n\n if (globalPretty && !globalSilent) {\n if (!isLevelEnabled(level, globalMinLevel)) {\n return\n }\n if (!shouldSample(level)) {\n return\n }\n\n if (isBrowser()) {\n const levelColor = getCssLevelColor(level)\n const timestamp = isoNow().slice(11, 23)\n console.log(\n `%c${timestamp}%c %c[${escapeFormatString(tag)}]%c ${escapeFormatString(message)}`,\n cssColors.dim,\n cssColors.reset,\n levelColor,\n cssColors.reset,\n )\n } else {\n const color = getLevelColor(level)\n const timestamp = isoNow().slice(11, 23)\n console.log(`${colors.dim}${timestamp}${colors.reset} ${color}[${tag}]${colors.reset} ${message}`)\n }\n\n return\n }\n emitWideEvent(level, { tag, message })\n}\n\nfunction formatValue(value: unknown): string {\n if (value === null || value === undefined) {\n return String(value)\n }\n if (isPlainObject(value)) {\n const pairs: string[] = []\n for (const [k, v] of Object.entries(value)) {\n if (v !== undefined && v !== null) {\n if (typeof v === 'object') {\n pairs.push(`${k}=${JSON.stringify(v)}`)\n } else {\n pairs.push(`${k}=${v}`)\n }\n }\n }\n return pairs.join(' ')\n }\n return String(value)\n}\n\nfunction formatCost(cost: number): string {\n if (cost < 0.01) return `$${cost.toFixed(6)}`\n if (cost < 1) return `$${cost.toFixed(4)}`\n return `$${cost.toFixed(2)}`\n}\n\ninterface TreeEntry {\n key: string\n value: string\n children?: string[]\n}\n\nfunction asNumber(value: unknown): number | undefined {\n return typeof value === 'number' ? value : undefined\n}\n\nfunction asStringArray(value: unknown): string[] | undefined {\n if (!Array.isArray(value)) return undefined\n return value.every(item => typeof item === 'string') ? value : undefined\n}\n\ninterface ToolUsageEntry {\n name: string\n durationMs: number\n success: boolean\n error?: string\n}\n\nfunction isToolUsageEntry(value: unknown): value is ToolUsageEntry {\n return isPlainObject(value)\n && typeof value.name === 'string'\n && typeof value.durationMs === 'number'\n && typeof value.success === 'boolean'\n}\n\nfunction asToolUsageArray(value: unknown): ToolUsageEntry[] | undefined {\n if (!Array.isArray(value)) return undefined\n return value.every(isToolUsageEntry) ? value : undefined\n}\n\ninterface ToolCallEntry {\n name: string\n input: unknown\n}\n\nfunction serializeToolInput(input: unknown): string {\n if (typeof input === 'string') return input\n const seen = new WeakSet<object>()\n try {\n const serialized = JSON.stringify(input, (_key, value) => {\n if (typeof value === 'bigint') return value.toString()\n if (typeof value === 'object' && value !== null) {\n if (seen.has(value)) return '[Circular]'\n seen.add(value)\n }\n return value\n })\n return serialized ?? ''\n } catch {\n return '[unserializable tool input]'\n }\n}\n\nfunction isToolCallEntry(value: unknown): value is ToolCallEntry {\n return isPlainObject(value) && typeof value.name === 'string' && 'input' in value\n}\n\nfunction asToolCallArray(value: unknown): ToolCallEntry[] | undefined {\n if (!Array.isArray(value)) return undefined\n return value.every(isToolCallEntry) ? value : undefined\n}\n\nfunction buildAIEntries(ai: Record<string, unknown>): TreeEntry[] {\n const entries: TreeEntry[] = []\n\n // Header\n const headerParts: string[] = []\n if (ai.model) {\n let m = String(ai.model)\n if (ai.provider) m += ` (${ai.provider})`\n headerParts.push(m)\n }\n if (ai.calls) {\n const calls = asNumber(ai.calls)\n if (calls !== undefined) headerParts.push(`${calls} call${calls > 1 ? 's' : ''}`)\n }\n const steps = asNumber(ai.steps)\n if (steps !== undefined && steps > 1) headerParts.push(`${steps} steps`)\n entries.push({ key: 'ai', value: headerParts.join(' · ') })\n\n // Tokens\n const inputTokens = asNumber(ai.inputTokens)\n const outputTokens = asNumber(ai.outputTokens)\n const totalTokens = asNumber(ai.totalTokens)\n if (inputTokens !== undefined && outputTokens !== undefined) {\n let tokLine = `${inputTokens} in → ${outputTokens} out`\n if (totalTokens) tokLine += ` (${totalTokens} total)`\n const extras: string[] = []\n if (ai.cacheReadTokens) extras.push(`${ai.cacheReadTokens} cache read`)\n if (ai.cacheWriteTokens) extras.push(`${ai.cacheWriteTokens} cache write`)\n if (ai.reasoningTokens) extras.push(`${ai.reasoningTokens} reasoning`)\n if (extras.length) tokLine += ` · ${extras.join(' · ')}`\n entries.push({ key: 'ai.tokens', value: tokLine })\n }\n\n // Streaming\n const msFirst = asNumber(ai.msToFirstChunk)\n const msFinish = asNumber(ai.msToFinish)\n const tps = asNumber(ai.tokensPerSecond)\n if (msFirst !== undefined || msFinish !== undefined) {\n const parts: string[] = []\n if (msFirst !== undefined) parts.push(`${formatDuration(msFirst)} to first chunk`)\n if (msFinish !== undefined) parts.push(`${formatDuration(msFinish)} total`)\n let streamLine = parts.join(' → ')\n if (tps) streamLine += ` · ${tps} tok/s`\n entries.push({ key: 'ai.streaming', value: streamLine })\n }\n\n // Cost\n const estimatedCost = asNumber(ai.estimatedCost)\n if (estimatedCost !== undefined) {\n entries.push({ key: 'ai.cost', value: formatCost(estimatedCost) })\n }\n\n // Total duration\n const totalDurationMs = asNumber(ai.totalDurationMs)\n if (totalDurationMs !== undefined) {\n entries.push({ key: 'ai.totalDuration', value: formatDuration(totalDurationMs) })\n }\n\n // Tools — merged from toolCalls (middleware) + tools (telemetry)\n const toolCalls = Array.isArray(ai.toolCalls) ? ai.toolCalls : undefined\n const tools = asToolUsageArray(ai.tools)\n const toolCallEntries = toolCalls ? asToolCallArray(toolCalls) : undefined\n const hasInputs = toolCallEntries !== undefined && toolCallEntries.length > 0\n\n if (tools?.length) {\n const children = tools.map((t, idx) => {\n const mark = t.success ? '✓' : '✗'\n let line = `${t.name} ${formatDuration(t.durationMs)} ${mark}`\n if (t.error) line += ` ${t.error}`\n if (hasInputs && toolCallEntries && idx < toolCallEntries.length) {\n const tc = toolCallEntries[idx]\n const inputStr = serializeToolInput(tc.input)\n const truncated = inputStr.length > 100 ? `${inputStr.slice(0, 100)}…` : inputStr\n line += ` ${truncated}`\n }\n return line\n })\n entries.push({ key: 'ai.tools', value: '', children })\n } else if (toolCalls?.length) {\n if (toolCallEntries?.length) {\n const children = toolCallEntries.map((tc) => {\n const inputStr = serializeToolInput(tc.input)\n const truncated = inputStr.length > 100 ? `${inputStr.slice(0, 100)}…` : inputStr\n return `${tc.name}(${truncated})`\n })\n entries.push({ key: 'ai.tools', value: '', children })\n } else {\n const names = asStringArray(toolCalls)\n if (names?.length) entries.push({ key: 'ai.tools', value: names.join(', ') })\n }\n }\n\n // Steps\n const stepsUsage = Array.isArray(ai.stepsUsage)\n ? ai.stepsUsage.filter(isPlainObject)\n : undefined\n if (stepsUsage?.length) {\n const firstModel = stepsUsage[0]?.model\n const allSameModel = firstModel !== undefined && stepsUsage.every(s => s.model === firstModel)\n const children = stepsUsage.map((s) => {\n const prefix = allSameModel ? '' : `${String(s.model)} `\n let line = `${prefix}${s.inputTokens} in → ${s.outputTokens} out`\n const stepTools = asStringArray(s.toolCalls)\n if (stepTools?.length) line += ` [${stepTools.join(', ')}]`\n return line\n })\n entries.push({ key: 'ai.steps', value: '', children })\n } else if (steps !== undefined && steps > 1) {\n entries.push({ key: 'ai.steps', value: String(steps) })\n }\n\n // Embedding\n const embedding = isPlainObject(ai.embedding) ? ai.embedding : undefined\n if (embedding) {\n const parts: string[] = []\n if (embedding.model) parts.push(String(embedding.model))\n parts.push(`${embedding.tokens} tokens`)\n if (embedding.dimensions) parts.push(`${embedding.dimensions}d`)\n if (embedding.count) parts.push(`${embedding.count} items`)\n entries.push({ key: 'ai.embedding', value: parts.join(' · ') })\n }\n\n if (ai.finishReason) entries.push({ key: 'ai.finishReason', value: String(ai.finishReason) })\n if (ai.error) entries.push({ key: 'ai.error', value: String(ai.error) })\n if (ai.responseId) entries.push({ key: 'ai.responseId', value: String(ai.responseId) })\n\n return entries\n}\n\nfunction flushPrettyLines(lines: string[]): void {\n if (lines.length === 0) return\n const text = `${lines.join('\\n')}\\n`\n if (\n typeof process !== 'undefined'\n && typeof process.stdout?.write === 'function'\n && !isBrowser()\n && process.env.VITEST !== 'true'\n ) {\n process.stdout.write(text)\n return\n }\n console.log(lines.join('\\n'))\n}\n\nfunction prettyPrintWideEvent(event: Record<string, unknown>): void {\n const { timestamp, level, service, environment, version, ...rest } = event\n const ts = typeof timestamp === 'string' ? timestamp.slice(11, 23) : ''\n const levelLabel = typeof level === 'string' ? level : 'info'\n const browser = isBrowser()\n const lines: string[] = []\n const writeLine = (...args: unknown[]) => {\n if (browser) {\n console.log(...args)\n return\n }\n const [line] = args\n if (typeof line === 'string') lines.push(line)\n }\n\n const parts: string[] = []\n const styles: string[] = []\n\n if (browser) {\n const lc = getCssLevelColor(levelLabel)\n parts.push(`%c${ts}%c %c${levelLabel.toUpperCase()}%c %c[${escapeFormatString(String(service))}]%c`)\n styles.push(cssColors.dim, cssColors.reset, lc, cssColors.reset, cssColors.cyan, cssColors.reset)\n } else {\n const lc = getLevelColor(levelLabel)\n if (isDev()) {\n parts.push(`${lc}${levelLabel.toUpperCase()}${colors.reset} ${colors.cyan}[${service}]${colors.reset}`)\n } else {\n parts.push(`${colors.dim}${ts}${colors.reset} ${lc}${levelLabel.toUpperCase()}${colors.reset} ${colors.cyan}[${service}]${colors.reset}`)\n }\n }\n\n if (rest.method && rest.path) {\n parts.push(browser ? ` ${escapeFormatString(String(rest.method))} ${escapeFormatString(String(rest.path))}` : ` ${rest.method} ${rest.path}`)\n delete rest.method\n delete rest.path\n }\n\n if (rest.status) {\n const statusCode = asNumber(rest.status) ?? Number(rest.status)\n const sc = browser\n ? (statusCode >= 400 ? cssColors.red : cssColors.green)\n : (statusCode >= 400 ? colors.red : colors.green)\n if (browser) {\n parts.push(` %c${rest.status}%c`)\n styles.push(sc, cssColors.reset)\n } else {\n parts.push(` ${sc}${rest.status}${colors.reset}`)\n }\n delete rest.status\n }\n\n if (rest.duration) {\n if (browser) {\n parts.push(` %c${escapeFormatString(`in ${rest.duration}`)}%c`)\n styles.push(cssColors.dim, cssColors.reset)\n } else {\n parts.push(` ${colors.dim}in ${rest.duration}${colors.reset}`)\n }\n delete rest.duration\n }\n\n writeLine(parts.join(''), ...styles)\n\n const aiData = isPlainObject(rest.ai) ? rest.ai : undefined\n if (aiData) {\n delete rest.ai\n }\n\n const errorData = rest.error\n if (errorData !== undefined) {\n delete rest.error\n }\n\n const restEntries = Object.entries(rest).filter(([_, v]) => v !== undefined)\n const aiEntries = aiData ? buildAIEntries(aiData) : []\n const errorEntries = errorData !== undefined\n ? buildErrorEntries(errorData, globalPrettyError)\n : []\n const contextEntries: TreeEntry[] = [\n ...restEntries.map(([key, value]) => ({ key, value: formatValue(value) })),\n ...aiEntries,\n ]\n const allEntries: TreeEntry[] = errorEntries.length > 0\n ? [...errorEntries, ...contextEntries]\n : contextEntries\n\n for (let i = 0; i < allEntries.length; i++) {\n const entry = allEntries[i]\n if (!entry) continue\n\n const { children } = entry\n const hasChildren = children !== undefined && children.length > 0\n const isLast = i === allEntries.length - 1 && !hasChildren\n const prefix = isLast ? '└─' : '├─'\n\n if (browser) {\n const val = entry.value ? ` ${escapeFormatString(entry.value)}` : ''\n writeLine(` %c${prefix}%c %c${escapeFormatString(entry.key)}:%c${val}`, cssColors.dim, cssColors.reset, cssColors.cyan, cssColors.reset)\n } else {\n const val = entry.value ? ` ${entry.value}` : ''\n writeLine(` ${colors.dim}${prefix}${colors.reset} ${colors.cyan}${entry.key}:${colors.reset}${val}`)\n }\n\n if (hasChildren && children) {\n const isLastEntry = i === allEntries.length - 1\n const connector = isLastEntry ? ' ' : '│'\n for (let j = 0; j < children.length; j++) {\n const child = children[j]\n if (child === undefined) continue\n if (child === PRETTY_ERROR_TREE_SPACER) {\n writeLine(` ${colors.dim}${connector}${colors.reset}`)\n continue\n }\n const isLastChild = j === children.length - 1\n const childPrefix = isLastChild ? '└─' : '├─'\n if (child === '') {\n writeLine('')\n continue\n }\n if (browser) {\n writeLine(` %c${connector} ${childPrefix}%c ${escapeFormatString(child)}`, cssColors.dim, cssColors.reset)\n } else if (child.startsWith(' ') || child.startsWith('\\x1B')) {\n writeLine(` ${colors.dim}${connector}${colors.reset}${child}`)\n } else {\n writeLine(` ${colors.dim}${connector} ${childPrefix}${colors.reset} ${child}`)\n }\n }\n }\n }\n\n if (!browser && lines.length > 0) {\n flushPrettyLines(lines)\n }\n}\n\nfunction createLogMethod(level: LogLevel) {\n return function logMethod(tagOrEvent: string | Record<string, unknown>, message?: string): void {\n if (typeof tagOrEvent === 'string' && message !== undefined) {\n emitTaggedLog(level, tagOrEvent, message)\n } else if (typeof tagOrEvent === 'object') {\n emitWideEvent(level, tagOrEvent)\n } else {\n emitTaggedLog(level, 'log', String(tagOrEvent))\n }\n }\n}\n\n/**\n * Simple logging API - as easy as console.log\n *\n * @example\n * ```ts\n * log.info('auth', 'User logged in')\n * log.error({ action: 'payment', error: 'failed' })\n * ```\n */\nconst _log: Log = {\n info: createLogMethod('info'),\n error: createLogMethod('error'),\n warn: createLogMethod('warn'),\n debug: createLogMethod('debug'),\n}\n\nexport { _log as log }\n\nconst noopAudit = Object.assign(() => {}, { deny: () => {} }) as AuditMethod\nconst noopLogger: AuditableLogger = {\n set() {},\n setLevel() {},\n error() {},\n info() {},\n warn() {},\n emit() {\n return null\n },\n getContext() {\n return {}\n },\n audit: noopAudit,\n}\n\n/**\n * @internal Options for createLogger that are not part of the public API.\n */\ninterface CreateLoggerInternalOptions {\n /**\n * When true, the global drain is skipped on emit.\n * Used by framework middleware that runs its own enrich+drain pipeline.\n */\n _deferDrain?: boolean\n /**\n * @see {@link RequestLoggerOptions.waitUntil}\n */\n waitUntil?: (promise: Promise<unknown>) => void\n}\n\n/**\n * Create a scoped logger for building wide events.\n * Use this for any context: workflows, jobs, scripts, queues, etc.\n *\n * After `emit()` (including when sampling returns `null`), the logger is sealed and\n * further mutations log `[evlog]` warnings. Standalone loggers do not have `fork`;\n * that method is only attached by supported framework integrations.\n *\n * @example\n * ```ts\n * const log = createLogger({ jobId: job.id, queue: 'emails' })\n * log.set({ batch: { size: 50, processed: 12 } })\n * log.emit()\n * ```\n */\nexport function createLogger<T extends object = Record<string, unknown>>(initialContext: Record<string, unknown> = {}, internalOptions?: CreateLoggerInternalOptions): AuditableLogger<T> {\n if (!globalEnabled) return noopLogger as unknown as AuditableLogger<T>\n\n const deferDrain = internalOptions?._deferDrain ?? false\n const waitUntil = internalOptions?.waitUntil\n const startTime = Date.now()\n const context: Record<string, unknown> = { ...initialContext }\n let hasError = false\n let hasWarn = false\n let manualLevel: LogLevel | undefined\n let emitted = false\n let pendingWideEvent: WideEvent | null = null\n\n function addLog(level: 'info' | 'warn', message: string): void {\n if (!Array.isArray(context.requestLogs)) {\n context.requestLogs = []\n }\n (context.requestLogs as unknown[]).push({\n level,\n message,\n timestamp: isoNow(),\n })\n }\n\n const auditMethod = function audit(input: AuditInput): void {\n if (emitted) {\n warnPostEmit('log.audit()', `Audit dropped: action=${input.action}.`)\n return\n }\n const fields = buildAuditFields(input)\n if (!isPlainObject(context.audit)) {\n context.audit = fields as unknown as Record<string, unknown>\n } else {\n mergeInto(context.audit as Record<string, unknown>, fields as unknown as Record<string, unknown>)\n }\n context._auditForceKeep = true\n } as AuditMethod<T>\n\n auditMethod.deny = function deny(reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>): void {\n auditMethod({ ...input, outcome: 'denied', reason })\n }\n\n return {\n audit: auditMethod,\n set(data: FieldContext<T>): void {\n if (emitted) {\n const record = data as Record<string, unknown>\n const pendingState = pendingWideEvent ? pendingDrainState.get(pendingWideEvent) : undefined\n if (\n pendingWideEvent\n && pendingState\n && !pendingState.drainStarted\n && isAiOnlyFieldUpdate(record)\n ) {\n mergeInto(pendingWideEvent as Record<string, unknown>, record)\n return\n }\n const keys = Object.keys(record)\n warnPostEmit('log.set()', `Keys dropped: ${keys.length ? keys.join(', ') : '(empty)'}.`)\n return\n }\n mergeInto(context, data as Record<string, unknown>)\n },\n\n setLevel(level: LogLevel): void {\n if (emitted) {\n warnPostEmit('log.setLevel()', `Level dropped: ${level}.`)\n return\n }\n manualLevel = level\n },\n\n error(error: Error | string, errorContext?: FieldContext<T>): void {\n if (emitted) {\n const keys = errorContext\n ? [...Object.keys(errorContext as Record<string, unknown>), 'error']\n : ['error']\n warnPostEmit('log.error()', `Keys dropped: ${keys.join(', ')}.`)\n return\n }\n hasError = true\n const err = typeof error === 'string' ? new Error(error) : error\n\n if (errorContext) {\n mergeInto(context, errorContext as Record<string, unknown>)\n }\n\n const errorObj: Record<string, unknown> = {\n name: err.name,\n message: err.message,\n stack: err.stack,\n }\n const errRecord = err as unknown as Record<string, unknown>\n for (const k of ['code', 'status', 'statusText', 'statusCode', 'statusMessage', 'data', 'cause', 'internal'] as const) {\n if (k in err) errorObj[k] = errRecord[k]\n }\n\n if (err instanceof EvlogError) {\n if (err.code) errorObj.code = err.code\n if (err.why) errorObj.why = err.why\n if (err.fix) errorObj.fix = err.fix\n if (err.link) errorObj.link = err.link\n if (err.status) errorObj.status = err.status\n }\n\n if (isPlainObject(context.error)) {\n mergeInto(context.error as Record<string, unknown>, errorObj)\n } else {\n context.error = errorObj\n }\n },\n\n info(message: string, infoContext?: FieldContext<T>): void {\n if (emitted) {\n const keys = infoContext\n ? ['message', ...Object.keys(infoContext as Record<string, unknown>).filter(k => k !== 'requestLogs')]\n : ['message']\n warnPostEmit('log.info()', `Keys dropped: ${keys.join(', ')}.`)\n return\n }\n addLog('info', message)\n if (infoContext) {\n const { requestLogs: _, ...rest } = infoContext as Record<string, unknown>\n mergeInto(context, rest)\n }\n },\n\n warn(message: string, warnContext?: FieldContext<T>): void {\n if (emitted) {\n const keys = warnContext\n ? ['message', ...Object.keys(warnContext as Record<string, unknown>).filter(k => k !== 'requestLogs')]\n : ['message']\n warnPostEmit('log.warn()', `Keys dropped: ${keys.join(', ')}.`)\n return\n }\n hasWarn = true\n addLog('warn', message)\n if (warnContext) {\n const { requestLogs: _, ...rest } = warnContext as Record<string, unknown>\n mergeInto(context, rest)\n }\n },\n\n emit(overrides?: FieldContext<T> & { _forceKeep?: boolean }): WideEvent | null {\n if (emitted) {\n warnPostEmit('log.emit()', 'Ignoring duplicate emit.')\n return null\n }\n\n const durationMs = Date.now() - startTime\n const level: LogLevel = manualLevel ?? (hasError ? 'error' : hasWarn ? 'warn' : 'info')\n\n let forceKeep = false\n if (overrides?._forceKeep) {\n forceKeep = true\n } else if (consumeAuditForceKeep(context)) {\n forceKeep = true\n } else if (globalSampling.keep?.length) {\n const status = (overrides as Record<string, unknown> | undefined)?.status ?? context.status\n forceKeep = shouldKeep({\n status: status as number | undefined,\n duration: durationMs,\n path: context.path as string | undefined,\n method: context.method as string | undefined,\n context,\n })\n }\n\n if (!forceKeep && !shouldSample(level)) {\n emitted = true\n pendingWideEvent = null\n return null\n }\n\n if (overrides) {\n const obj = overrides as Record<string, unknown>\n for (const key in obj) {\n if (key !== '_forceKeep') context[key] = obj[key]\n }\n }\n context.duration = formatDuration(durationMs)\n\n const wide = emitWideEvent(level, context, { deferDrain, ownsEvent: true, waitUntil })\n emitted = true\n pendingWideEvent = wide\n if (wide) {\n // Only enable the AI merge window when middleware defers drain until finish.\n pendingDrainState.set(wide, { drainStarted: !deferDrain })\n }\n return wide\n },\n\n getContext(): FieldContext<T> & Record<string, unknown> {\n return { ...context } as FieldContext<T> & Record<string, unknown>\n },\n }\n}\n\n/**\n * Create a request-scoped logger for building wide events.\n * Convenience wrapper around `createLogger` that pre-populates HTTP request fields.\n *\n * @example\n * ```ts\n * const log = createRequestLogger({ method: 'POST', path: '/checkout' })\n * log.set({ user: { id: '123' } })\n * log.set({ cart: { items: 3 } })\n * log.emit()\n * ```\n *\n * @example Cloudflare Workers — pass `waitUntil` so `initLogger({ drain })` completes after the response:\n * ```ts\n * export default {\n * async fetch(request, env, ctx) {\n * const log = createRequestLogger({\n * method: request.method,\n * path: new URL(request.url).pathname,\n * waitUntil: ctx.waitUntil.bind(ctx),\n * })\n * log.emit()\n * return new Response('ok')\n * },\n * }\n * ```\n */\nexport function createRequestLogger<T extends object = Record<string, unknown>>(options: RequestLoggerOptions = {}, internalOptions?: CreateLoggerInternalOptions): AuditableLogger<T> {\n const { method, path, requestId, waitUntil: optionsWaitUntil } = options\n const initial: Record<string, unknown> = {}\n if (method !== undefined) initial.method = method\n if (path !== undefined) initial.path = path\n if (requestId !== undefined) initial.requestId = requestId\n return createLogger<T>(initial, {\n ...internalOptions,\n waitUntil: internalOptions?.waitUntil ?? optionsWaitUntil,\n })\n}\n\n/**\n * Get the current environment context.\n */\nexport function getEnvironment(): EnvironmentContext {\n return { ...globalEnv }\n}\n\n// eslint-disable-next-line @typescript-eslint/naming-convention\ndeclare const __EVLOG_CONFIG__: import('./types').LoggerConfig | undefined\n\nif (typeof __EVLOG_CONFIG__ !== 'undefined') initLogger(__EVLOG_CONFIG__)\n","import type { AuditActor, AuditActionDefinition, AuditFields, AuditPatchOp, AuditTarget, DrainContext, EnrichContext, FieldContext, RedactConfig, RequestLogger, WideEvent } from './types'\nimport { createLogger } from './logger'\nimport { compileRedactPathMatchers, redactValueByPaths } from './redact'\nimport { getHeader as getSharedHeader } from './shared/headers'\n\n/**\n * Current version of the audit envelope. Bumped when `AuditFields` evolves\n * in a backward-incompatible way so downstream pipelines can branch on it.\n */\nexport const AUDIT_SCHEMA_VERSION = 1\n\n/**\n * Input accepted by `log.audit()`, `audit()`, and `withAudit()`.\n *\n * `outcome` defaults to `'success'`. Internal fields populated by the audit\n * pipeline (`idempotencyKey`, `context`, `signature`, `prevHash`, `hash`) are\n * stripped — pass them through `log.set({ audit })` if you really need to.\n */\nexport interface AuditInput {\n action: string\n actor: AuditActor\n target?: AuditTarget\n outcome?: AuditFields['outcome']\n reason?: string\n changes?: AuditFields['changes']\n causationId?: string\n correlationId?: string\n version?: number\n}\n\n/**\n * @internal Stable JSON stringification with deterministic key order.\n * Used by `idempotencyKey` and `hash-chain` so the same logical event always\n * produces the same digest, regardless of how object keys were added.\n */\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n if (typeof value !== 'object' || value === null || Array.isArray(value)) return false\n if (Object.prototype.toString.call(value) !== '[object Object]') return false\n const proto = Object.getPrototypeOf(value)\n return proto === Object.prototype || value.constructor === Object\n}\n\nfunction stableStringify(value: unknown): string {\n if (value === null || typeof value !== 'object') return JSON.stringify(value)\n if (Array.isArray(value)) return `[${value.map(stableStringify).join(',')}]`\n if (!isPlainObject(value)) return JSON.stringify(value)\n const keys = Object.keys(value).sort()\n return `{${keys.map(k => `${JSON.stringify(k)}:${stableStringify(value[k])}`).join(',')}}`\n}\n\n/**\n * @internal Sync, isomorphic 32-bit FNV-1a. Used to derive the idempotency\n * key without pulling `node:crypto` into the static import graph (which would\n * break browser / Cloudflare Workers bundles that import `evlog` for types\n * or shared utilities). Idempotency keys are dedup tokens, not security\n * primitives — collision resistance at 128 bits is more than sufficient.\n */\nfunction fnv1a32(input: string, seed: number): number {\n let h = seed >>> 0\n for (let i = 0; i < input.length; i++) {\n h ^= input.charCodeAt(i) & 0xff\n h = Math.imul(h, 0x01000193) >>> 0\n }\n return h >>> 0\n}\n\n/**\n * @internal Compute the deterministic idempotency key for an audit event.\n * Includes `action`, `actor.{type,id}`, `target.{type,id}`, `outcome`, and\n * `timestamp` rounded to the second so retries within the same second collapse.\n *\n * Uses four interleaved FNV-1a 32-bit hashes (128-bit output, 32 hex chars)\n * so the implementation stays sync and isomorphic across Node, browsers,\n * Bun, Deno, and Cloudflare Workers.\n */\nfunction computeIdempotencyKey(audit: AuditFields, timestamp: string): string {\n const seconds = timestamp.slice(0, 19)\n const payload = stableStringify({\n action: audit.action,\n actor: { type: audit.actor.type, id: audit.actor.id },\n target: audit.target ? { type: audit.target.type, id: audit.target.id } : undefined,\n outcome: audit.outcome,\n timestamp: seconds,\n })\n const a = fnv1a32(payload, 0x811c9dc5).toString(16).padStart(8, '0')\n const b = fnv1a32(payload, 0xdeadbeef).toString(16).padStart(8, '0')\n const c = fnv1a32(payload, 0x1f83d9ab).toString(16).padStart(8, '0')\n const d = fnv1a32(payload, 0x5be0cd19).toString(16).padStart(8, '0')\n return a + b + c + d\n}\n\n/**\n * Build a normalised {@link AuditFields} from caller input. Defaults:\n * - `outcome` → `'success'`\n * - `version` → {@link AUDIT_SCHEMA_VERSION}\n *\n * `idempotencyKey` is filled at emit time with the event timestamp so retries\n * stay deterministic.\n */\nexport function buildAuditFields(input: AuditInput): AuditFields {\n return {\n action: input.action,\n actor: input.actor,\n target: input.target,\n outcome: input.outcome ?? 'success',\n reason: input.reason,\n changes: input.changes,\n causationId: input.causationId,\n correlationId: input.correlationId,\n version: input.version ?? AUDIT_SCHEMA_VERSION,\n }\n}\n\n/**\n * @internal Test-collector hook installed by {@link mockAudit}. When set, every\n * audit event flowing through `log.audit()` / `audit()` is also pushed to it.\n */\nlet _testCollector: ((event: AuditFields, wide: WideEvent | null) => void) | null = null\n\n/** @internal Emit-time decoration: assign timestamp-based idempotency key. */\nfunction decorateAudit(audit: AuditFields, timestamp: string): AuditFields {\n if (audit.idempotencyKey) return audit\n return { ...audit, idempotencyKey: computeIdempotencyKey(audit, timestamp) }\n}\n\n/**\n * Add audit semantics to an existing {@link RequestLogger}.\n *\n * Mutates the logger in place by adding an `audit` method (with a `.deny()`\n * sub-method). Strictly equivalent to calling `log.set({ audit: ... })` plus\n * `_forceKeep` on emit. Idempotent: calling twice on the same logger only\n * attaches the methods once.\n *\n * @example\n * ```ts\n * const log = withAuditMethods(createLogger())\n * log.audit({\n * action: 'invoice.refund',\n * actor: { type: 'user', id: user.id },\n * target: { type: 'invoice', id: 'inv_889' },\n * })\n * ```\n */\nexport function withAuditMethods<T extends object = Record<string, unknown>>(logger: RequestLogger<T>): AuditableLogger<T> {\n const target = logger as AuditableLogger<T>\n if ((target as { audit?: AuditMethod<T> }).audit) return target\n\n const audit = function audit(input: AuditInput): void {\n const fields = buildAuditFields(input)\n target.set({ audit: fields } as unknown as FieldContext<T>)\n markForceKeep(target)\n } as AuditMethod<T>\n\n audit.deny = function deny(reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>): void {\n audit({ ...input, outcome: 'denied', reason })\n }\n\n target.audit = audit\n return target\n}\n\n/**\n * @internal Mark a logger so its next `emit()` is force-kept past tail sampling.\n * Implemented by stamping a hidden flag on the accumulated context which\n * `emit()` reads via `_forceKeep`.\n */\nfunction markForceKeep<T extends object>(logger: RequestLogger<T>): void {\n const ctx = logger.getContext() as Record<string, unknown>\n ctx._auditForceKeep = true\n}\n\n/**\n * Logger augmented with `.audit()` / `.audit.deny()` helpers.\n */\nexport type AuditableLogger<T extends object = Record<string, unknown>> = RequestLogger<T> & { audit: AuditMethod<T> }\n\n/** Method shape attached to {@link AuditableLogger}. */\nexport interface AuditMethod<T extends object = Record<string, unknown>> {\n (input: AuditInput): void\n /**\n * Record an AuthZ-denied action. Forces `outcome: 'denied'` and requires\n * a human-readable `reason`. Most teams forget to log denials — they are\n * exactly what auditors and security teams ask for.\n */\n deny: (reason: string, input: Omit<AuditInput, 'outcome' | 'reason'>) => void\n}\n\n/**\n * Standalone audit emitter for non-request contexts (jobs, scripts, CLIs).\n *\n * Creates a one-shot logger, sets the audit fields, and emits immediately.\n * The event is force-kept past tail sampling. Returns the emitted wide event,\n * or `null` if logging is globally disabled.\n *\n * @example\n * ```ts\n * import { audit } from 'evlog'\n *\n * audit({\n * action: 'cron.cleanup',\n * actor: { type: 'system', id: 'cron' },\n * target: { type: 'job', id: 'cleanup-stale-sessions' },\n * outcome: 'success',\n * })\n * ```\n */\nexport function audit(input: AuditInput): WideEvent | null {\n const fields = buildAuditFields(input)\n const logger = createLogger({ audit: fields })\n return logger.emit({ _forceKeep: true } as FieldContext<Record<string, unknown>> & { _forceKeep?: boolean })\n}\n\n/**\n * Wrap a function so its outcome (success / failure / denied) is automatically\n * audited.\n *\n * Behaviour:\n * - If `fn` resolves, an audit event with `outcome: 'success'` is emitted.\n * - If `fn` throws an `EvlogError` (or any error) with `status === 403`, the\n * audit event is recorded as `'denied'` with the error message as `reason`.\n * - Any other thrown error produces `outcome: 'failure'` and re-throws.\n *\n * Use {@link AuditDeniedError} to signal denial without an HTTP status.\n *\n * @example\n * ```ts\n * const refundInvoice = withAudit(\n * { action: 'invoice.refund', target: (input) => ({ type: 'invoice', id: input.id }) },\n * async (input: { id: string }, ctx: { actor: AuditActor }) => {\n * await db.invoices.refund(input.id)\n * }\n * )\n *\n * await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: user.id } })\n * ```\n */\nexport function withAudit<TInput, TOutput>(\n options: WithAuditOptions<TInput>,\n fn: (input: TInput, ctx: WithAuditContext) => Promise<TOutput> | TOutput,\n): (input: TInput, ctx: WithAuditContext) => Promise<TOutput> {\n return async (input, ctx) => {\n const target = typeof options.target === 'function' ? options.target(input) : options.target\n try {\n const result = await fn(input, ctx)\n audit({\n action: options.action,\n actor: ctx.actor,\n target,\n outcome: 'success',\n causationId: ctx.causationId,\n correlationId: ctx.correlationId,\n })\n return result\n } catch (err) {\n const error = err as Error & { status?: number; statusCode?: number }\n const status = error.status ?? error.statusCode\n const denied = err instanceof AuditDeniedError || status === 403\n audit({\n action: options.action,\n actor: ctx.actor,\n target,\n outcome: denied ? 'denied' : 'failure',\n reason: error.message,\n causationId: ctx.causationId,\n correlationId: ctx.correlationId,\n })\n throw err\n }\n }\n}\n\n/**\n * Throw inside a {@link withAudit} body to mark the action as `outcome: 'denied'`\n * regardless of the underlying HTTP status. The constructor message becomes the\n * audit `reason`.\n */\nexport class AuditDeniedError extends Error {\n\n constructor(reason: string) {\n super(reason)\n this.name = 'AuditDeniedError'\n }\n\n}\n\n/** Options for {@link withAudit}. `target` may be derived from the input. */\nexport interface WithAuditOptions<TInput> {\n action: string\n target?: AuditTarget | ((input: TInput) => AuditTarget | undefined)\n}\n\n/**\n * Runtime context required by a {@link withAudit}-wrapped function.\n * The actor is always required; correlation IDs are optional.\n */\nexport interface WithAuditContext {\n actor: AuditActor\n causationId?: string\n correlationId?: string\n}\n\n/**\n * Compute a compact, redact-aware diff between two objects for the\n * `changes` field. Output is a JSON Patch-style array (RFC 6902 subset:\n * `add`, `remove`, `replace`) — small enough to ship over the wire.\n *\n * Fields matching `redactPaths` glob patterns (e.g. `'password'`, `'**.password'`,\n * `'*_token'`, `'user.email'`) are replaced with `'[REDACTED]'` so PII\n * never leaks through the diff.\n *\n * @example\n * ```ts\n * log.audit({\n * action: 'user.update',\n * actor: { type: 'user', id: user.id },\n * target: { type: 'user', id: 'usr_42' },\n * changes: auditDiff(before, after, { redactPaths: ['password'] }),\n * })\n * ```\n */\nexport function auditDiff(\n before: unknown,\n after: unknown,\n options: AuditDiffOptions = {},\n): { before?: unknown, after?: unknown, patch: AuditPatchOp[] } {\n const replacement = options.replacement ?? '[REDACTED]'\n const pathMatchers = compileRedactPathMatchers(options.redactPaths) ?? {\n exactPaths: new Set<string>(),\n pathGlobs: [],\n keyGlobs: [],\n caseInsensitiveLeaves: new Set<string>(),\n }\n const patch: AuditPatchOp[] = []\n\n function diff(a: unknown, b: unknown, path: string): void {\n if (a === b) return\n\n if (a === undefined && b !== undefined) {\n patch.push({ op: 'add', path: path || '/', value: redactValue(b, path) })\n return\n }\n if (a !== undefined && b === undefined) {\n patch.push({ op: 'remove', path: path || '/' })\n return\n }\n\n if (\n a !== null && b !== null\n && typeof a === 'object' && typeof b === 'object'\n && !Array.isArray(a) && !Array.isArray(b)\n ) {\n const keys = new Set([...Object.keys(a as object), ...Object.keys(b as object)])\n for (const key of keys) {\n diff((a as Record<string, unknown>)[key], (b as Record<string, unknown>)[key], `${path}/${key}`)\n }\n return\n }\n\n patch.push({ op: 'replace', path: path || '/', value: redactValue(b, path) })\n }\n\n function redactValue(value: unknown, path: string): unknown {\n return redactValueByPaths(value, pathMatchers, replacement, path)\n }\n\n diff(before, after, '')\n const result: { before?: unknown, after?: unknown, patch: AuditPatchOp[] } = { patch }\n if (options.includeBefore) result.before = redactValue(before, '')\n if (options.includeAfter) result.after = redactValue(after, '')\n return result\n}\n\nexport type { AuditPatchOp } from './types'\n\n/** Options for {@link auditDiff}. */\nexport interface AuditDiffOptions {\n /** Path globs (same syntax as `RedactConfig.paths`) whose values are replaced with `[REDACTED]`. */\n redactPaths?: string[]\n /** Custom replacement string. @default '[REDACTED]' */\n replacement?: string\n /** Include the full redacted `before` snapshot alongside the patch. */\n includeBefore?: boolean\n /** Include the full redacted `after` snapshot alongside the patch. */\n includeAfter?: boolean\n}\n\n/** Options for {@link defineAuditAction}. Same shape as {@link AuditCatalogEntry}. */\nexport type DefineAuditActionOptions = AuditActionDefinition\n\n/**\n * Define a typed audit action with optional fixed target type and catalog metadata.\n *\n * Returns a curried helper that fills in the action name (and target shape\n * if provided) so call sites stay terse and the action set is discoverable\n * in one place. Metadata (`description`, `severity`, `requiresChanges`, …)\n * is exposed on the factory for introspection, docs, and review tooling.\n *\n * @example\n * ```ts\n * const refund = defineAuditAction('invoice.refund', {\n * target: 'invoice',\n * severity: 'high',\n * requiresChanges: true,\n * redactPaths: ['cardNumber'],\n * })\n *\n * log.audit(refund({\n * actor: { type: 'user', id: user.id },\n * target: { id: 'inv_889' }, // type inferred as 'invoice'\n * outcome: 'success',\n * }))\n * ```\n */\nexport function defineAuditAction<\n const TAction extends string,\n const TOptions extends DefineAuditActionOptions = DefineAuditActionOptions,\n>(action: TAction, options?: TOptions): DefinedAuditAction<TAction, TOptions> {\n const targetType = options?.target\n const factory = ((input) => {\n const merged: AuditInput = {\n ...(input as AuditInput),\n action,\n }\n if (targetType && input.target && !input.target.type) {\n merged.target = { ...input.target, type: targetType } as AuditTarget\n }\n return merged\n }) as DefinedAuditAction<TAction, TOptions>\n\n Object.defineProperties(factory, {\n action: { value: action, enumerable: true },\n target: { value: options?.target, enumerable: true },\n description: { value: options?.description, enumerable: true },\n severity: { value: options?.severity, enumerable: true },\n requiresChanges: { value: options?.requiresChanges, enumerable: true },\n requiresReason: { value: options?.requiresReason, enumerable: true },\n redactPaths: { value: options?.redactPaths, enumerable: true },\n })\n\n return factory\n}\n\n/**\n * Return type of {@link defineAuditAction}. Accepts a partial input (no\n * `action`, target type pre-filled when provided).\n */\nexport type DefinedAuditAction<\n TAction extends string = string,\n TOptions extends DefineAuditActionOptions = DefineAuditActionOptions,\n> =\n & ((\n input: TOptions['target'] extends string\n ? Omit<AuditInput, 'action' | 'target'> & { target?: Omit<AuditTarget, 'type'> & { type?: TOptions['target'] } }\n : Omit<AuditInput, 'action'>,\n ) => AuditInput)\n & {\n readonly action: TAction\n readonly target: TOptions['target']\n readonly description: TOptions['description']\n readonly severity: TOptions['severity']\n readonly requiresChanges: TOptions['requiresChanges']\n readonly requiresReason: TOptions['requiresReason']\n readonly redactPaths: TOptions['redactPaths']\n }\n\n/**\n * Test helper that captures every audit event emitted while it is active.\n *\n * Returns `{ events, restore, toIncludeAuditOf, assertAudit }`:\n * - `events` — live array of captured `AuditFields`, populated as audits fire.\n * - `restore()` — uninstall the collector. Call from `afterEach()`.\n * - `toIncludeAuditOf(matcher)` — returns `true` if at least one captured event matches.\n * - `assertAudit(matcher)` — returns the matched event or throws with a readable summary.\n *\n * Captures audits on emit from `log.audit()`, standalone `audit()`, and\n * `log.set({ audit })` — including auto-filled `idempotencyKey`.\n *\n * @example\n * ```ts\n * const captured = mockAudit()\n * await refundInvoice('inv_889')\n * expect(captured.events).toHaveLength(1)\n * expect(captured.toIncludeAuditOf({ action: 'invoice.refund' })).toBe(true)\n * captured.restore()\n * ```\n */\nexport function mockAudit(): MockAudit {\n const events: AuditFields[] = []\n const previous = _testCollector\n _testCollector = (event) => {\n events.push(event)\n }\n\n return {\n events,\n restore() {\n _testCollector = previous\n },\n toIncludeAuditOf(matcher) {\n return events.some(event => matchesAudit(event, matcher))\n },\n assertAudit(matcher) {\n const match = events.find(event => matchesAudit(event, matcher))\n if (!match) {\n const summary = events.map(e => ({ action: e.action, outcome: e.outcome }))\n const matcherStr = JSON.stringify(matcher, (_k, v) => (v instanceof RegExp ? v.toString() : v))\n throw new Error(\n `No audit event matched ${matcherStr}. Captured ${events.length} event(s): ${JSON.stringify(summary)}`,\n )\n }\n return match\n },\n }\n}\n\n/** Result of {@link mockAudit}. */\nexport interface MockAudit {\n events: AuditFields[]\n restore: () => void\n toIncludeAuditOf: (matcher: AuditMatcher) => boolean\n /** Throws when no captured event matches; returns the matched event otherwise. */\n assertAudit: (matcher: AuditMatcher) => AuditFields\n}\n\n/** Partial structural matcher for {@link MockAudit.toIncludeAuditOf}. */\nexport interface AuditMatcher {\n action?: string | RegExp\n outcome?: AuditFields['outcome']\n actor?: Partial<AuditActor>\n target?: Partial<AuditTarget>\n}\n\nfunction matchesAudit(event: AuditFields, matcher: AuditMatcher): boolean {\n if (matcher.action !== undefined) {\n if (matcher.action instanceof RegExp) {\n if (!matcher.action.test(event.action)) return false\n } else if (event.action !== matcher.action) {\n return false\n }\n }\n if (matcher.outcome !== undefined && event.outcome !== matcher.outcome) return false\n if (matcher.actor) {\n for (const [k, v] of Object.entries(matcher.actor)) {\n if ((event.actor as unknown as Record<string, unknown>)[k] !== v) return false\n }\n }\n if (matcher.target) {\n if (!event.target) return false\n for (const [k, v] of Object.entries(matcher.target)) {\n if ((event.target as Record<string, unknown>)[k] !== v) return false\n }\n }\n return true\n}\n\n/**\n * @internal Hook used by `RequestLogger.emit()` to detect audit-driven\n * force-keep flags on the accumulated context. Returns whether the event was\n * marked by `log.audit()` and clears the flag.\n */\nexport function consumeAuditForceKeep(context: Record<string, unknown>): boolean {\n if (context._auditForceKeep) {\n delete context._auditForceKeep\n return true\n }\n if (context.audit) return true\n return false\n}\n\n/**\n * @internal Decorate the audit field on an event right before drain — fills\n * in the deterministic idempotency key. Called by the logger pipeline so\n * it works for both `log.audit()` and direct `log.set({ audit })` paths.\n */\nexport function finalizeAudit(event: WideEvent): void {\n const a = event.audit as AuditFields | undefined\n if (!a) return\n const decorated = decorateAudit(a, String(event.timestamp))\n event.audit = decorated\n _testCollector?.(decorated, event)\n}\n\n/** Shape of the optional better-auth bridge for the audit enricher. */\nexport interface AuditEnricherBetterAuthBridge {\n /** Read the current authenticated session for this request, if any. */\n getSession: (ctx: EnrichContext) => Promise<AuditActor | null | undefined> | AuditActor | null | undefined\n}\n\n/** Options for {@link auditEnricher}. */\nexport interface AuditEnricherOptions {\n /**\n * Resolve the tenant id for the current request. The result is stored at\n * `event.audit.context.tenantId`. Multi-tenant SaaS gets isolation by default.\n */\n tenantId?: (ctx: EnrichContext) => string | undefined\n /**\n * Bridge to populate `event.audit.actor` from the authenticated session.\n * Only used when the application has not already filled `actor`.\n */\n bridge?: AuditEnricherBetterAuthBridge\n /** When true, overwrite existing context fields. @default false */\n overwrite?: boolean\n}\n\n/**\n * Enrich audit-bearing wide events with request, runtime, and tenant context.\n *\n * Runs only when `event.audit` is present — every other event passes through\n * untouched. Populates:\n * - `event.audit.context.requestId` from `ctx.request.requestId`\n * - `event.audit.context.traceId` from `event.traceId`\n * - `event.audit.context.ip` from `x-forwarded-for` / `x-real-ip`\n * - `event.audit.context.userAgent` from `user-agent`\n * - `event.audit.context.tenantId` from `options.tenantId(ctx)`\n *\n * Optionally fills `event.audit.actor` from the better-auth bridge when the\n * caller did not provide one. Anything else (custom actor strategies,\n * extra context) belongs in a custom enricher — replace this one entirely.\n */\nexport function auditEnricher(options: AuditEnricherOptions = {}): (ctx: EnrichContext) => void | Promise<void> {\n return async (ctx) => {\n const event = ctx.event as WideEvent & { audit?: AuditFields }\n const a = event.audit\n if (!a) return\n\n const context = { ...(a.context ?? {}) }\n\n function setIfMissing(key: string, value: string | undefined): void {\n if (value === undefined) return\n if (options.overwrite || context[key] === undefined) context[key] = value\n }\n\n setIfMissing('requestId', ctx.request?.requestId)\n setIfMissing('traceId', typeof event.traceId === 'string' ? event.traceId : undefined)\n setIfMissing('ip', getHeader(ctx.headers, 'x-forwarded-for')?.split(',')[0]?.trim() ?? getHeader(ctx.headers, 'x-real-ip'))\n setIfMissing('userAgent', getHeader(ctx.headers, 'user-agent'))\n\n if (options.tenantId) {\n const tid = options.tenantId(ctx)\n if (tid !== undefined) setIfMissing('tenantId', tid)\n }\n\n let { actor } = a\n if (!actor && options.bridge) {\n const fromBridge = await options.bridge.getSession(ctx)\n if (fromBridge) actor = fromBridge\n }\n\n event.audit = { ...a, context, actor: actor ?? a.actor }\n }\n}\n\n// Re-imported here to avoid changing the long list of named imports at the top\n// of this file; identical semantics to `getHeader` exported from `evlog/toolkit`.\nfunction getHeader(headers: Record<string, string> | undefined, name: string): string | undefined {\n return getSharedHeader(headers, name)\n}\n\n/** Options accepted by {@link auditOnly}. */\nexport interface AuditOnlyOptions {\n /**\n * When true, the wrapper awaits the wrapped drain so the event is flushed\n * before the request resolves. Use for crash-safe audit storage.\n * @default false\n */\n await?: boolean\n}\n\n/** Drain function signature accepted by all wrappers. Matches `LoggerConfig['drain']`. */\nexport type DrainFn = (ctx: DrainContext) => void | Promise<void>\n\n/**\n * Wrap any drain so it only receives events that carry an `audit` field.\n *\n * Use to route audit events to dedicated storage (separate Axiom dataset,\n * append-only Postgres table, FS journal) without affecting your main drain.\n *\n * Per-sink failure isolation comes from `initLogger({ drain: [...] })`: each\n * drain in the array is invoked independently, so a crashed Axiom call never\n * blocks the FS audit drain.\n *\n * @example\n * ```ts\n * import { initLogger, auditOnly } from 'evlog'\n * import { createAxiomDrain } from 'evlog/axiom'\n * import { createFsDrain } from 'evlog/fs'\n *\n * initLogger({\n * drain: [\n * createAxiomDrain({ dataset: 'logs' }),\n * auditOnly(createFsDrain({ dir: '.audit' }), { await: true }),\n * ],\n * })\n * ```\n */\nexport function auditOnly(drain: DrainFn, options: AuditOnlyOptions = {}): DrainFn {\n return async (ctx) => {\n if (!ctx.event.audit) return\n if (options.await) {\n await drain(ctx)\n return\n }\n drain(ctx)\n }\n}\n\n/** Pluggable persistence for the hash-chain state. */\nexport interface SignedChainState {\n /** Load the previous hash from durable storage, or `null` on first run. */\n load: () => Promise<string | null> | string | null\n /** Persist the latest hash so the chain survives process restarts. */\n save: (hash: string) => Promise<void> | void\n}\n\n/** Options for {@link signed}. Pick a strategy at construction time. */\nexport type SignedOptions =\n | { strategy: 'hmac', secret: string, algorithm?: 'sha256' | 'sha512' }\n | { strategy: 'hash-chain', state?: SignedChainState, algorithm?: 'sha256' | 'sha512' }\n\n/**\n * Wrap a drain so every event passing through gains tamper-evident integrity.\n *\n * - `'hmac'` — adds `event.audit.signature` (HMAC of the canonical event).\n * - `'hash-chain'` — adds `event.audit.prevHash` and `event.audit.hash` so the\n * sequence of events forms a verifiable chain. State persists in memory\n * by default; pass a `state: { load, save }` for cross-process / durable\n * chains (Redis, file, Postgres).\n *\n * The signature is computed before the event is forwarded to the wrapped\n * drain — combine with {@link auditOnly} when you only want integrity for\n * audit events.\n *\n * @example\n * ```ts\n * import { initLogger, auditOnly, signed } from 'evlog'\n * import { createFsDrain } from 'evlog/fs'\n *\n * initLogger({\n * drain: auditOnly(\n * signed(createFsDrain({ dir: '.audit' }), { strategy: 'hash-chain' }),\n * { await: true },\n * ),\n * })\n * ```\n */\nexport function signed(drain: DrainFn, options: SignedOptions): DrainFn {\n if (options.strategy === 'hmac') {\n const algorithm = options.algorithm ?? 'sha256'\n const { secret } = options\n return async (ctx) => {\n const a = ctx.event.audit as AuditFields | undefined\n if (a) {\n const payload = stableStringify(stripIntegrity(ctx.event))\n const signature = await hmacHex(algorithm, secret, payload)\n ctx.event.audit = { ...a, signature }\n }\n await drain(ctx)\n }\n }\n\n const algorithm = options.algorithm ?? 'sha256'\n const { state } = options\n let inMemoryPrev: string | null = null\n let initialised = !state\n let queue: Promise<void> = Promise.resolve()\n\n return (ctx) => {\n queue = queue.then(async () => {\n const a = ctx.event.audit as AuditFields | undefined\n if (a) {\n if (!initialised && state) {\n inMemoryPrev = (await state.load()) ?? null\n initialised = true\n }\n const prevHash = inMemoryPrev ?? undefined\n const payload = stableStringify({ ...stripIntegrity(ctx.event), audit: { ...stripIntegrity(ctx.event).audit, prevHash } })\n const hash = await digestHex(algorithm, payload)\n ctx.event.audit = { ...a, prevHash, hash }\n inMemoryPrev = hash\n await state?.save(hash)\n }\n await drain(ctx)\n }).catch((err) => {\n console.error('[evlog/audit] signed drain failed:', err)\n })\n return queue\n }\n}\n\n/**\n * @internal Resolve the Web Crypto SubtleCrypto interface. Available natively\n * in browsers, Node 19+, Bun, Deno, and Cloudflare Workers. Falls back to\n * Node's `webcrypto` for Node 18 (where `globalThis.crypto` is gated behind\n * a flag). The dynamic import keeps `node:crypto` out of browser bundles.\n */\nasync function getSubtle(): Promise<SubtleCrypto> {\n const c = (globalThis as { crypto?: { subtle?: SubtleCrypto } }).crypto\n if (c?.subtle) return c.subtle\n const mod = await import(/* @vite-ignore */ 'node:crypto') as { webcrypto: { subtle: SubtleCrypto } }\n return mod.webcrypto.subtle\n}\n\nfunction normalizeAlgo(algorithm: string): string {\n switch (algorithm.toLowerCase()) {\n case 'sha1':\n case 'sha-1':\n return 'SHA-1'\n case 'sha256':\n case 'sha-256':\n return 'SHA-256'\n case 'sha384':\n case 'sha-384':\n return 'SHA-384'\n case 'sha512':\n case 'sha-512':\n return 'SHA-512'\n default:\n return 'SHA-256'\n }\n}\n\nfunction bufToHex(buf: ArrayBuffer): string {\n let out = ''\n for (const byte of new Uint8Array(buf)) out += byte.toString(16).padStart(2, '0')\n return out\n}\n\nasync function digestHex(algorithm: string, data: string): Promise<string> {\n const subtle = await getSubtle()\n const buf = await subtle.digest(normalizeAlgo(algorithm), new TextEncoder().encode(data))\n return bufToHex(buf)\n}\n\nasync function hmacHex(algorithm: string, secret: string, data: string): Promise<string> {\n const subtle = await getSubtle()\n const hash = normalizeAlgo(algorithm)\n const key = await subtle.importKey('raw', new TextEncoder().encode(secret), { name: 'HMAC', hash }, false, ['sign'])\n const sig = await subtle.sign('HMAC', key, new TextEncoder().encode(data))\n return bufToHex(sig)\n}\n\n/** @internal Strip integrity fields before hashing so signatures stay stable. */\nfunction stripIntegrity(event: WideEvent): WideEvent {\n const a = event.audit as AuditFields | undefined\n if (!a) return event\n const { signature, prevHash, hash, ...rest } = a\n return { ...event, audit: rest as AuditFields }\n}\n\n/**\n * Strict redact preset for audit events.\n *\n * Combine with the user's existing redact configuration via spread:\n * `initLogger({ redact: { paths: [...auditRedactPreset.paths!, ...mine] } })`.\n *\n * Hardens PII handling:\n * - Drops `Authorization` and `Cookie` headers anywhere they appear.\n * - Drops common credential field names (`password`, `passwordHash`, `token`,\n * `apiKey`, `secret`, `accessToken`, `refreshToken`, `cardNumber`, `cvv`,\n * `ssn`).\n *\n * Built-in pattern maskers (email, credit card, …) keep their default\n * behaviour — partial masking, not full redaction — so audit trails retain\n * enough signal to be useful.\n */\nexport const auditRedactPreset: RedactConfig = {\n paths: [\n 'password',\n 'passwordHash',\n 'token',\n 'apiKey',\n 'secret',\n 'accessToken',\n 'refreshToken',\n 'cardNumber',\n 'cvv',\n 'ssn',\n 'authorization',\n 'cookie',\n 'set-cookie',\n ],\n}\n"],"mappings":";;;;;;AAGA,MAAM,sBAAsB;;;;;AAiB5B,SAAgB,2BAA2B,SAAyB;AAClE,KAAI,CAAC,QAAQ,SAAS,IAAI,IAAI,CAAC,QAAQ,SAAS,IAAI,CAClD,QAAO,MAAM;AAEf,QAAO;;;;;;AAOT,SAAgB,0BAA0B,UAAqD;AAC7F,KAAI,CAAC,UAAU,OAAQ,QAAO,KAAA;CAE9B,MAAM,6BAAa,IAAI,KAAa;CACpC,MAAM,YAAsB,EAAE;CAC9B,MAAM,WAAqB,EAAE;CAC7B,MAAM,wCAAwB,IAAI,KAAa;AAE/C,MAAK,MAAM,OAAO,UAAU;AAC1B,MAAI,CAAC,IAAI,SAAS,IAAI,EAAE;AACtB,OAAI,IAAI,SAAS,IAAI,CACnB,YAAW,IAAI,IAAI;OAEnB,oBAAmB,2BAA2B,IAAI,EAAE,YAAY,WAAW,sBAAsB;AAEnG;;AAGF,MAAI,CAAC,IAAI,SAAS,IAAI,CACpB,UAAS,KAAK,aAAa,KAAK,IAAI,CAAC;MAErC,oBAAmB,KAAK,YAAY,WAAW,sBAAsB;;AAIzE,KAAI,WAAW,SAAS,KAAK,UAAU,WAAW,KAAK,SAAS,WAAW,KAAK,sBAAsB,SAAS,EAC7G;AAGF,QAAO;EAAE;EAAY;EAAW;EAAU;EAAuB;;;AAInE,SAAS,mBACP,SACA,YACA,WACA,uBACM;AACN,WAAU,KAAK,aAAa,SAAS,IAAI,CAAC;CAC1C,MAAM,OAAO,QAAQ,MAAM,oBAAoB;AAC/C,KAAI,MAAM;AACR,aAAW,IAAI,KAAK,GAAI;AACxB,wBAAsB,IAAI,KAAK,GAAI;;;;;;;AAQvC,SAAgB,kBAAkB,UAAkB,SAAiB,UAAuC;AAC1G,KAAI,SAAS,WAAW,IAAI,SAAS,CAAE,QAAO;CAE9C,MAAM,YAAY,QAAQ,aAAa;AACvC,MAAK,MAAM,QAAQ,SAAS,sBAC1B,KAAI,cAAc,KAAK,aAAa,CAAE,QAAO;AAG/C,MAAK,MAAM,QAAQ,SAAS,WAAW;AACrC,OAAK,YAAY;AACjB,MAAI,KAAK,KAAK,SAAS,CAAE,QAAO;;AAGlC,MAAK,MAAM,QAAQ,SAAS,UAAU;AACpC,OAAK,YAAY;AACjB,MAAI,KAAK,KAAK,QAAQ,CAAE,QAAO;;AAGjC,QAAO;;;;;AAMT,SAAgB,kBACd,KACA,UACA,aACA,SAAS,IACH;AACN,KAAI,QAAQ,QAAQ,QAAQ,KAAA,EAAW;AAEvC,KAAI,MAAM,QAAQ,IAAI,EAAE;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;GACnC,MAAM,UAAU,OAAO,EAAE;GACzB,MAAM,WAAW,SAAS,GAAG,OAAO,GAAG,YAAY;AACnD,qBAAkB,IAAI,IAAI,UAAU,aAAa,SAAS;;AAE5D;;AAGF,KAAI,OAAO,QAAQ,UAAU;EAC3B,MAAM,SAAS;AACf,OAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,WAAW,SAAS,GAAG,OAAO,GAAG,QAAQ;AAC/C,OAAI,kBAAkB,UAAU,KAAK,SAAS,CAC5C,QAAO,OAAO;OAEd,mBAAkB,OAAO,MAAM,UAAU,aAAa,SAAS;;;;;;;;;;AAYvE,SAAgB,mBACd,OACA,UACA,aACA,cAAc,IACL;CACT,MAAM,WAAW,YAAY,MAAM,IAAI,CAAC,OAAO,QAAQ;CACvD,MAAM,UAAU,SAAS,KAAK,IAAI;CAClC,MAAM,UAAU,SAAS,GAAG,GAAG,IAAI;AAEnC,KAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,MAAI,WAAW,kBAAkB,SAAS,SAAS,SAAS,CAAE,QAAO;AACrE,SAAO;;AAGT,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,KAAK,GAAG,MAAM,mBAAmB,GAAG,UAAU,aAAa,GAAG,YAAY,GAAG,IAAI,CAAC;AAGjG,KAAI,CAAC,cAAc,MAAM,CAAE,QAAO;CAElC,MAAM,MAA+B,EAAE;AACvC,MAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,EAAE;EAC1C,MAAM,eAAe,cAAc,GAAG,YAAY,GAAG,MAAM,IAAI;AAE/D,MAAI,KAAK,kBADQ,UAAU,GAAG,QAAQ,GAAG,MAAM,GACV,GAAG,SAAS,GAC7C,cACA,mBAAmB,GAAG,UAAU,aAAa,aAAa;;AAEhE,QAAO;;;;;;AAOT,MAAa,kBAAkB;;CAE7B,YAAY;EACV,SAAS;EACT,OAAO,MAAc,OAAO,EAAE,QAAQ,UAAU,GAAG,CAAC,MAAM,GAAG;EAC9D;;CAED,OAAO;EACL,SAAS;EACT,OAAO,MAAc;AAEnB,OADW,EAAE,QAAQ,IACf,GAAG,EAAG,QAAO;GACnB,MAAM,MAAM,EAAE,MAAM,EAAE,YAAY,IAAI,CAAC;AACvC,UAAO,GAAG,EAAE,GAAG,SAAS;;EAE3B;;CAED,MAAM;EACJ,SAAS;EACT,OAAO,MAAc,eAAe,EAAE,MAAM,IAAI,CAAC,KAAK;EACvD;;;;;;;;;;CAUD,OAAO;EACL,SAAS;EACT,OAAO,MAAc;GACnB,MAAM,SAAS,EAAE,QAAQ,UAAU,GAAG;AAEtC,OADgB,EAAE,WAAW,IAClB,IAAI,OAAO,SAAS,GAAG;IAChC,MAAM,UAAU,EAAE,MAAM,aAAa;AAErC,WAAO,GADI,UAAU,QAAQ,KAAK,IACrB,QAAQ,OAAO,MAAM,GAAG;;AAEvC,OAAI,OAAO,SAAS,EAClB,QAAO,GAAG,IAAI,OAAO,OAAO,SAAS,EAAE,GAAG,OAAO,MAAM,GAAG;AAE5D,UAAO;;EAEV;;CAED,KAAK;EACH,SAAS;EACT,YAAY;EACb;;CAED,QAAQ;EACN,SAAS;EACT,YAAY;EACb;;CAED,MAAM;EACJ,SAAS;EACT,OAAO,MAAc;GACnB,MAAM,QAAQ,EAAE,QAAQ,UAAU,GAAG;AACrC,UAAO,GAAG,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,MAAM,MAAM,GAAG;;EAEpD;CACF;;;;;;;;AAWD,SAAgB,oBAAoB,OAAqE;AACvG,KAAI,UAAU,KAAA,KAAa,UAAU,MAAO,QAAO,KAAA;AAEnD,KAAI,UAAU,KACZ,QAAO,EAAE,UAAU,mBAAmB,EAAE;AAG1C,KAAI,MAAM,aAAa,MACrB,QAAO;CAGT,MAAM,UAAU,MAAM,QAAQ,MAAM,SAAS,GACzC,MAAM,SACL,KAAI,SAAQ,gBAAgB,MAAM,CAClC,OAAO,QAAQ,CACf,KAAI,MAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAW,GACpD,mBAAmB;AAEvB,QAAO;EACL,GAAG;EACH,UAAU;EACX;;AAGH,SAAS,oBAA8B;AACrC,QAAO,OAAO,OAAO,gBAAgB,CAAC,KAAI,MAAK,CAAC,WAAW,EAAE,QAAQ,EAAE,EAAE,KAAK,CAAW;;AAG3F,SAAS,WAAW,IAAoB;AACtC,QAAO,IAAI,OAAO,GAAG,QAAQ,GAAG,MAAM;;;AAIxC,MAAa,mBAAmB,OAAO,IAAI,yBAAyB;;AAGpE,SAAgB,qBAAqB,OAAsC;AACzE,QAAO,eAAe,OAAO,kBAAkB;EAAE,OAAO;EAAM,YAAY;EAAO,cAAc;EAAM,CAAC;;;AAIxG,SAAgB,mBAAmB,OAAyC;AAC1E,QAAO,QAAQ,IAAI,OAAO,iBAAiB;;;;;;AAO7C,SAAS,kBAAkB,OAAyD;AAClF,KAAI;AACF,SAAO,gBAAgB,MAAM;SACvB;AACN,MAAI;AACF,UAAO,KAAK,MAAM,KAAK,UAAU,MAAM,CAAC;UAClC;AACN,WAAQ,KAAK,+HAA+H;AAC5I,UAAO,EAAE,GAAG,OAAO;;;;;;;;;;;;;;;;AAiBzB,SAAgB,YAAY,OAAgC,QAA+C;CACzG,MAAM,QAAQ,kBAAkB,MAAM;CACtC,MAAM,cAAc,OAAO,eAAe;CAE1C,MAAM,eAAe,0BAA0B,OAAO,MAAM;AAC5D,KAAI,aACF,mBAAkB,OAAO,cAAc,YAAY;AAGrD,KAAI,OAAO,UAAU,OACnB,oBAAmB,OAAO,OAAO,SAAS;AAG5C,KAAI,OAAO,UAAU,OACnB,gBAAe,OAAO,OAAO,UAAU,YAAY;AAGrD,QAAO;;AAGT,SAAS,eAAe,KAAc,UAAoB,aAA2B;AACnF,KAAI,QAAQ,QAAQ,QAAQ,KAAA,EAAW;AAEvC,KAAI,MAAM,QAAQ,IAAI,EAAE;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,IAC9B,KAAI,OAAO,IAAI,OAAO,SACpB,KAAI,KAAK,cAAc,IAAI,IAAc,UAAU,YAAY;WACtD,OAAO,IAAI,OAAO,SAC3B,gBAAe,IAAI,IAAI,UAAU,YAAY;AAGjD;;AAGF,KAAI,OAAO,QAAQ,UAAU;EAC3B,MAAM,SAAS;AACf,OAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,MAAM,OAAO;AACnB,OAAI,OAAO,QAAQ,SACjB,QAAO,OAAO,cAAc,KAAK,UAAU,YAAY;YAC9C,OAAO,QAAQ,SACxB,gBAAe,KAAK,UAAU,YAAY;;;;AAMlD,SAAS,cAAc,OAAe,UAAoB,aAA6B;CACrF,IAAI,SAAS;AACb,MAAK,MAAM,WAAW,UAAU;AAC9B,UAAQ,YAAY;AACpB,WAAS,OAAO,QAAQ,SAAS,YAAY;;AAE/C,QAAO;;AAGT,SAAS,mBAAmB,KAAc,SAAyB;AACjE,KAAI,QAAQ,QAAQ,QAAQ,KAAA,EAAW;AAEvC,KAAI,MAAM,QAAQ,IAAI,EAAE;AACtB,OAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,IAC9B,KAAI,OAAO,IAAI,OAAO,SACpB,KAAI,KAAK,aAAa,IAAI,IAAc,QAAQ;WACvC,OAAO,IAAI,OAAO,SAC3B,oBAAmB,IAAI,IAAI,QAAQ;AAGvC;;AAGF,KAAI,OAAO,QAAQ,UAAU;EAC3B,MAAM,SAAS;AACf,OAAK,MAAM,OAAO,QAAQ;GACxB,MAAM,MAAM,OAAO;AACnB,OAAI,OAAO,QAAQ,SACjB,QAAO,OAAO,aAAa,KAAK,QAAQ;YAC/B,OAAO,QAAQ,SACxB,oBAAmB,KAAK,QAAQ;;;;AAMxC,SAAS,aAAa,OAAe,SAA2B;CAC9D,IAAI,SAAS;AACb,MAAK,MAAM,CAAC,SAAS,SAAS,SAAS;AACrC,UAAQ,YAAY;AACpB,WAAS,OAAO,QAAQ,SAAS,KAAK;;AAExC,QAAO;;;;;;;AAQT,SAAgB,sBAAsB,KAA8E;AAClH,KAAI,QAAQ,KAAA,KAAa,QAAQ,MAAO,QAAO,KAAA;AAC/C,KAAI,QAAQ,KAAM,QAAO,oBAAoB,KAAK;CAElD,MAAM,SAAuB,EAAE;AAE/B,KAAI,MAAM,QAAQ,IAAI,MAAM,CAC1B,QAAO,QAAQ,IAAI;AAGrB,KAAI,OAAO,IAAI,gBAAgB,SAC7B,QAAO,cAAc,IAAI;AAG3B,KAAI,IAAI,aAAa,MACnB,QAAO,WAAW;UACT,MAAM,QAAQ,IAAI,SAAS,CACpC,QAAO,WAAW,IAAI;AAGxB,KAAI,MAAM,QAAQ,IAAI,SAAS,CAC7B,QAAO,WAAW,qBAAqB,IAAI,SAAS;AAGtD,QAAO,oBAAoB,OAAO;;AAGpC,SAAS,cAAc,OAAkD;AACvE,KAAI,UAAU,QAAQ,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAAE,QAAO;CAChF,MAAM,QAAQ,OAAO,eAAe,MAAM;AAC1C,QAAO,UAAU,OAAO,aAAa,UAAU;;AAGjD,SAAS,qBAAqB,KAA0B;CACtD,MAAM,WAAqB,EAAE;AAC7B,MAAK,MAAM,KAAK,IACd,KAAI;AACF,MAAI,aAAa,QAAQ;AACvB,YAAS,KAAK,WAAW,EAAE,CAAC;AAC5B;;AAEF,MAAI,OAAO,MAAM,UAAU;AACzB,YAAS,KAAK,IAAI,OAAO,GAAG,IAAI,CAAC;AACjC;;AAEF,MAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,OAAQ,EAA2B,WAAW,UAAU;GACjG,MAAM,QAAQ,OAAQ,EAA0B,UAAU,WACrD,EAAwB,QACzB;AACJ,YAAS,KAAK,IAAI,OAAQ,EAAyB,QAAQ,MAAM,CAAC;;SAE9D;AACN,UAAQ,KAAK,8DAA8D;;AAG/E,QAAO;;;;;AC/YT,SAAgB,aAAa,QAAkC;AAC7D,QAAO;;;AAIT,SAAgB,YAAY,MAAc,OAAuD;AAC/F,QAAO;EAAE;EAAM;EAAO;;;AAIxB,SAAgB,eAAe,MAAc,QAAyD;AACpG,QAAO;EAAE;EAAM;EAAQ;;AA2BzB,SAAS,eAAe,MAAc,MAAc,KAAoB;AACtE,SAAQ,MAAM,UAAU,KAAK,IAAI,KAAK,WAAW,IAAI;;;AAIvD,SAAgB,mBAAmB,UAAyB,EAAE,EAAgB;CAC5E,MAAM,yBAAS,IAAI,KAA0B;AAC7C,MAAK,MAAM,UAAU,QACnB,QAAO,IAAI,OAAO,MAAM,OAAO;CAEjC,MAAM,OAAO,MAAM,KAAK,OAAO,QAAQ,CAAC;AAWxC,QAAO;EACL,SAAS;EACT,WAXgB,KAAK,MAAK,MAAK,OAAO,EAAE,WAAW,WAW1C;EACT,UAXe,KAAK,MAAK,MAAK,OAAO,EAAE,UAAU,WAWzC;EACR,SAXc,KAAK,MAAK,MAAK,OAAO,EAAE,SAAS,WAWxC;EACP,qBAX0B,KAAK,MAC/B,MAAK,OAAO,EAAE,mBAAmB,cAAc,OAAO,EAAE,oBAAoB,WAUzD;EACnB,cATmB,KAAK,MAAK,MAAK,OAAO,EAAE,gBAAgB,WAS/C;EACZ,iBATsB,KAAK,MAAK,MAAK,OAAO,EAAE,iBAAiB,WAShD;EACf,kBAAkB,QAAQ;AACxB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,aAAc;AAC1B,QAAI;AACF,YAAO,aAAa,OAAO;aACpB,KAAK;AACZ,oBAAe,OAAO,MAAM,gBAAgB,IAAI;;;;EAItD,kBAAkB,KAAK;AACrB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,eAAgB;AAC5B,QAAI;AACF,YAAO,eAAe,IAAI;aACnB,KAAK;AACZ,oBAAe,OAAO,MAAM,kBAAkB,IAAI;;;;EAIxD,mBAAmB,KAAK;AACtB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,gBAAiB;AAC7B,QAAI;AACF,YAAO,gBAAgB,IAAI;aACpB,KAAK;AACZ,oBAAe,OAAO,MAAM,mBAAmB,IAAI;;;;EAIzD,MAAM,UAAU,KAAK;AACnB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,OAAQ;AACpB,QAAI;AACF,WAAM,OAAO,OAAO,IAAI;aACjB,KAAK;AACZ,oBAAe,OAAO,MAAM,UAAU,IAAI;;;;EAIhD,MAAM,SAAS,KAAK;GAClB,MAAM,SAAS,KAAK,QAAO,MAAK,OAAO,EAAE,UAAU,WAAW;AAC9D,OAAI,OAAO,WAAW,EAAG;AACzB,SAAM,QAAQ,WACZ,OAAO,IAAI,OAAO,WAAW;AAC3B,QAAI;AACF,WAAM,OAAO,MAAO,IAAI;aACjB,KAAK;AACZ,oBAAe,OAAO,MAAM,SAAS,IAAI;;KAE3C,CACH;;EAEH,MAAM,QAAQ,KAAK;AACjB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,KAAM;AAClB,QAAI;AACF,WAAM,OAAO,KAAK,IAAI;aACf,KAAK;AACZ,oBAAe,OAAO,MAAM,QAAQ,IAAI;;;;EAI9C,eAAe,KAAK;AAClB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,YAAa;AACzB,QAAI;AACF,YAAO,YAAY,IAAI;aAChB,KAAK;AACZ,oBAAe,OAAO,MAAM,eAAe,IAAI;;;;EAIrD,MAAM,SAAS,KAAK;AAClB,QAAK,MAAM,UAAU,MAAM;AACzB,QAAI,CAAC,OAAO,MAAO;AACnB,QAAI;AACF,WAAM,OAAO,MAAM,IAAI;aAChB,KAAK;AACZ,oBAAe,OAAO,MAAM,SAAS,IAAI;;;;EAIhD;;AAGH,MAAM,cAAc,mBAAmB,EAAE,CAAC;;AAG1C,SAAgB,uBAAqC;AACnD,QAAO;;;;ACjOT,SAASA,gBAAc,KAA8C;AACnE,QAAO,QAAQ,QAAQ,OAAO,QAAQ,YAAY,CAAC,MAAM,QAAQ,IAAI;;AAGvE,MAAM,0BAAU,IAAI,MAAM;AAC1B,SAAS,SAAiB;AACxB,SAAQ,QAAQ,KAAK,KAAK,CAAC;AAC3B,QAAO,QAAQ,aAAa;;;AAI9B,MAAM,sBACJ;AAEF,SAAS,aAAa,QAAgB,QAAsB;AAC1D,SAAQ,KACN,WAAW,OAAO,6CAA6C,OAAO,+CAA+C,sBACtH;;AAGH,SAAS,UAAU,QAAiC,QAAuC;AACzF,MAAK,MAAM,OAAO,QAAQ;EACxB,MAAM,YAAY,OAAO;AACzB,MAAI,cAAc,KAAA,KAAa,cAAc,KAAM;EACnD,MAAM,YAAY,OAAO;AACzB,MAAIA,gBAAc,UAAU,IAAIA,gBAAc,UAAU,CACtD,WAAU,WAAW,UAAU;WACtB,MAAM,QAAQ,UAAU,IAAI,MAAM,QAAQ,UAAU,CAC7D,QAAO,OAAO,CAAC,GAAG,WAAW,GAAG,UAAU;MAE1C,QAAO,OAAO;;;AAKpB,MAAM,oCAAoB,IAAI,SAA+C;AAE7E,SAAS,oBAAoB,MAAwC;CACnE,MAAM,OAAO,OAAO,KAAK,KAAK;AAC9B,QAAO,KAAK,WAAW,KAAK,KAAK,OAAO;;;;;;;;AAS1C,SAAgB,0BAA0B,OAA+B;AACvE,KAAI,CAAC,MAAO;CACZ,MAAM,QAAQ,kBAAkB,IAAI,MAAM;AAC1C,KAAI,MAAO,OAAM,eAAe;;AAQlC,IAAI,YAAgC;CAClC,SAAS;CACT,aAAa;CACd;AAED,IAAI,eAAe,OAAO;AAC1B,IAAI,oBAAyC;CAC3C,SAAS,OAAO;CAChB,YAAY;CACZ,SAAS,OAAO;CAChB,QAAQ;CACT;AACD,IAAI,iBAAiC,EAAE;AACvC,IAAI,kBAAkB;AACtB,IAAI;AACJ,IAAI;AACJ,IAAI,gBAAgB;AACpB,IAAI,eAAe;;AAEnB,IAAI,iBAA2B;AAC/B,IAAI,UAAU;AACd,IAAI,qBAAmC,sBAAsB;;;;;AAM7D,SAAgB,WAAW,SAAuB,EAAE,EAAQ;AAC1D,iBAAgB,OAAO,WAAW;CAClC,MAAM,WAAW,mBAAmB;AAEpC,aAAY;EACV,SAAS,OAAO,KAAK,WAAW,SAAS,WAAW;EACpD,aAAa,OAAO,KAAK,eAAe,SAAS,eAAe;EAChE,SAAS,OAAO,KAAK,WAAW,SAAS;EACzC,YAAY,OAAO,KAAK,cAAc,SAAS;EAC/C,QAAQ,OAAO,KAAK,UAAU,SAAS;EACxC;AAED,gBAAe,OAAO,UAAU,OAAO;AACvC,qBAAoB,mBAAmB,OAAO,CAAC;AAC/C,kBAAiB,OAAO,YAAY,EAAE;AACtC,mBAAkB,OAAO,aAAa;AACtC,eAAc,OAAO;AACrB,gBAAe,oBAAoB,OAAO,UAAU,CAAC,OAAO,CAAC;AAC7D,gBAAe,OAAO,UAAU;AAChC,kBAAiB,OAAO,YAAY;AACpC,sBAAqB,OAAO,SAAS,SACjC,mBAAmB,OAAO,QAAQ,GAClC,sBAAsB;AAE1B,KAAI,mBAAmB,QAAQ,SAAS,EACjC,oBAAmB,SAAS,EAAE,KAAK,EAAE,GAAG,WAAW,EAAE,CAAC;AAG7D,KAAI,CAAC,WAAW,IAAI,OAAO,YAAY,eAAe,QAAQ,UAAU,KACjE,QAAO,4CAAA,MAAA,MAAA,EAAA,EAAA,CAAyC,MAAM,QAAQ;AACjE,mCAAiC,IAAI,wBAAwB;GAC7D,CAAC,YAAY;AACb,mCAAiC,KAAK;GACtC;CAGJ,MAAM,cAAc,CAAC,CAAC,eAAe,mBAAmB;AACxD,KAAI,gBAAgB,CAAC,eAAe,CAAC,OAAO,sBAC1C,SAAQ,KAAK,gMAAgM;;;;;;;AASjN,SAAgB,wBAAsC;AACpD,QAAO;;;;;AAMT,SAAgB,YAAqB;AACnC,QAAO;;;;;;;AAQT,SAAgB,aAAmB;AACjC,WAAU;;;;;AAMZ,SAAgB,iBAA0B;AACxC,QAAO;;;;;;;AAQT,SAAgB,iBAA4E;AAC1F,QAAO;;;;;;AAOT,SAAS,aAAa,OAA0B;CAC9C,MAAM,EAAE,UAAU;AAClB,KAAI,CAAC,MACH,QAAO;CAIT,MAAM,aAAa,UAAU,WAAW,MAAM,UAAU,KAAA,IACpD,MACA,MAAM,UAAU;AAGpB,KAAI,cAAc,EAAG,QAAO;AAC5B,KAAI,cAAc,IAAK,QAAO;AAE9B,QAAO,KAAK,QAAQ,GAAG,MAAM;;;;;;AAO/B,SAAgB,WAAW,KAAmC;CAC5D,MAAM,EAAE,SAAS;AACjB,KAAI,CAAC,MAAM,OAAQ,QAAO;AAE1B,QAAO,KAAK,MAAM,cAAc;AAC9B,MAAI,UAAU,WAAW,KAAA,KAAa,IAAI,WAAW,KAAA,KAAa,IAAI,UAAU,UAAU,OACxF,QAAO;AAET,MAAI,UAAU,aAAa,KAAA,KAAa,IAAI,aAAa,KAAA,KAAa,IAAI,YAAY,UAAU,SAC9F,QAAO;AAET,MAAI,UAAU,QAAQ,IAAI,QAAQ,eAAe,IAAI,MAAM,UAAU,KAAK,CACxE,QAAO;AAET,SAAO;GACP;;AASJ,SAAS,cACP,OACA,OACA,UAAgC,EAAE,EAChB;CAClB,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO,cAAc;AAC7D,KAAI,CAAC,cAAe,QAAO;AAE3B,KAAI,CAAC,WAAW;AACd,MAAI,CAAC,eAAe,OAAO,eAAe,CACxC,QAAO;AAET,MAAI,CAAC,aAAa,MAAM,CACtB,QAAO;;CAIX,IAAI;AACJ,KAAI,WAAW;AACb,QAAM,YAAY,QAAQ;AAC1B,QAAM,QAAQ;AACd,MAAI,MAAM,YAAY,KAAA,EAAW,OAAM,UAAU,UAAU;AAC3D,MAAI,MAAM,gBAAgB,KAAA,EAAW,OAAM,cAAc,UAAU;AACnE,MAAI,UAAU,YAAY,KAAA,KAAa,MAAM,YAAY,KAAA,EAAW,OAAM,UAAU,UAAU;AAC9F,MAAI,UAAU,eAAe,KAAA,KAAa,MAAM,eAAe,KAAA,EAAW,OAAM,aAAa,UAAU;AACvG,MAAI,UAAU,WAAW,KAAA,KAAa,MAAM,WAAW,KAAA,EAAW,OAAM,SAAS,UAAU;AAC3F,cAAY;OAEZ,aAAY;EACV,WAAW,QAAQ;EACnB;EACA,GAAG;EACH,GAAG;EACJ;AAGH,eAAc,UAAU;AAExB,KAAI,cAAc;AAChB,cAAY,YAAY,WAAW,aAAa;AAChD,uBAAqB,UAAU;;AAGjC,KAAI,CAAC,aACH,KAAI,aACF,sBAAqB,UAAU;UACtB,gBACT,SAAQ,iBAAiB,MAAM,EAAE,KAAK,UAAU,UAAU,CAAC;KAE3D,SAAQ,iBAAiB,MAAM,EAAE,UAAU;AAI/C,KAAI,CAAC,YAAY;EACf,MAAM,gBAAyC,EAAE;AACjD,MAAI,YACF,eAAc,MACX,YAAY;AACX,OAAI;AACF,UAAM,YAAa,EAAE,OAAO,WAAW,CAAC;YACjC,KAAK;AACZ,YAAQ,MAAM,yBAAyB,IAAI;;MAE3C,CACL;AAEH,MAAI,mBAAmB,SACrB,eAAc,KAAK,mBAAmB,SAAS,EAAE,OAAO,WAAW,CAAC,CAAC;AAEvE,MAAI,cAAc,SAAS,KAAK,UAC9B,WAAU,QAAQ,IAAI,cAAc,CAAC;;AAIzC,QAAO;;AAGT,SAAS,cAAc,OAAiB,KAAa,SAAuB;AAC1E,KAAI,CAAC,cAAe;AAEpB,KAAI,gBAAgB,CAAC,cAAc;AACjC,MAAI,CAAC,eAAe,OAAO,eAAe,CACxC;AAEF,MAAI,CAAC,aAAa,MAAM,CACtB;AAGF,MAAI,WAAW,EAAE;GACf,MAAM,aAAa,iBAAiB,MAAM;GAC1C,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,GAAG;AACxC,WAAQ,IACN,KAAK,UAAU,QAAQ,mBAAmB,IAAI,CAAC,MAAM,mBAAmB,QAAQ,IAChF,UAAU,KACV,UAAU,OACV,YACA,UAAU,MACX;SACI;GACL,MAAM,QAAQ,cAAc,MAAM;GAClC,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,GAAG;AACxC,WAAQ,IAAI,GAAG,OAAO,MAAM,YAAY,OAAO,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,MAAM,GAAG,UAAU;;AAGpG;;AAEF,eAAc,OAAO;EAAE;EAAK;EAAS,CAAC;;AAGxC,SAAS,YAAY,OAAwB;AAC3C,KAAI,UAAU,QAAQ,UAAU,KAAA,EAC9B,QAAO,OAAO,MAAM;AAEtB,KAAIA,gBAAc,MAAM,EAAE;EACxB,MAAM,QAAkB,EAAE;AAC1B,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,MAAM,CACxC,KAAI,MAAM,KAAA,KAAa,MAAM,KAC3B,KAAI,OAAO,MAAM,SACf,OAAM,KAAK,GAAG,EAAE,GAAG,KAAK,UAAU,EAAE,GAAG;MAEvC,OAAM,KAAK,GAAG,EAAE,GAAG,IAAI;AAI7B,SAAO,MAAM,KAAK,IAAI;;AAExB,QAAO,OAAO,MAAM;;AAGtB,SAAS,WAAW,MAAsB;AACxC,KAAI,OAAO,IAAM,QAAO,IAAI,KAAK,QAAQ,EAAE;AAC3C,KAAI,OAAO,EAAG,QAAO,IAAI,KAAK,QAAQ,EAAE;AACxC,QAAO,IAAI,KAAK,QAAQ,EAAE;;AAS5B,SAAS,SAAS,OAAoC;AACpD,QAAO,OAAO,UAAU,WAAW,QAAQ,KAAA;;AAG7C,SAAS,cAAc,OAAsC;AAC3D,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO,KAAA;AAClC,QAAO,MAAM,OAAM,SAAQ,OAAO,SAAS,SAAS,GAAG,QAAQ,KAAA;;AAUjE,SAAS,iBAAiB,OAAyC;AACjE,QAAOA,gBAAc,MAAM,IACtB,OAAO,MAAM,SAAS,YACtB,OAAO,MAAM,eAAe,YAC5B,OAAO,MAAM,YAAY;;AAGhC,SAAS,iBAAiB,OAA8C;AACtE,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO,KAAA;AAClC,QAAO,MAAM,MAAM,iBAAiB,GAAG,QAAQ,KAAA;;AAQjD,SAAS,mBAAmB,OAAwB;AAClD,KAAI,OAAO,UAAU,SAAU,QAAO;CACtC,MAAM,uBAAO,IAAI,SAAiB;AAClC,KAAI;AASF,SARmB,KAAK,UAAU,QAAQ,MAAM,UAAU;AACxD,OAAI,OAAO,UAAU,SAAU,QAAO,MAAM,UAAU;AACtD,OAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,QAAI,KAAK,IAAI,MAAM,CAAE,QAAO;AAC5B,SAAK,IAAI,MAAM;;AAEjB,UAAO;IAEQ,IAAI;SACf;AACN,SAAO;;;AAIX,SAAS,gBAAgB,OAAwC;AAC/D,QAAOA,gBAAc,MAAM,IAAI,OAAO,MAAM,SAAS,YAAY,WAAW;;AAG9E,SAAS,gBAAgB,OAA6C;AACpE,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO,KAAA;AAClC,QAAO,MAAM,MAAM,gBAAgB,GAAG,QAAQ,KAAA;;AAGhD,SAAS,eAAe,IAA0C;CAChE,MAAM,UAAuB,EAAE;CAG/B,MAAM,cAAwB,EAAE;AAChC,KAAI,GAAG,OAAO;EACZ,IAAI,IAAI,OAAO,GAAG,MAAM;AACxB,MAAI,GAAG,SAAU,MAAK,KAAK,GAAG,SAAS;AACvC,cAAY,KAAK,EAAE;;AAErB,KAAI,GAAG,OAAO;EACZ,MAAM,QAAQ,SAAS,GAAG,MAAM;AAChC,MAAI,UAAU,KAAA,EAAW,aAAY,KAAK,GAAG,MAAM,OAAO,QAAQ,IAAI,MAAM,KAAK;;CAEnF,MAAM,QAAQ,SAAS,GAAG,MAAM;AAChC,KAAI,UAAU,KAAA,KAAa,QAAQ,EAAG,aAAY,KAAK,GAAG,MAAM,QAAQ;AACxE,SAAQ,KAAK;EAAE,KAAK;EAAM,OAAO,YAAY,KAAK,MAAM;EAAE,CAAC;CAG3D,MAAM,cAAc,SAAS,GAAG,YAAY;CAC5C,MAAM,eAAe,SAAS,GAAG,aAAa;CAC9C,MAAM,cAAc,SAAS,GAAG,YAAY;AAC5C,KAAI,gBAAgB,KAAA,KAAa,iBAAiB,KAAA,GAAW;EAC3D,IAAI,UAAU,GAAG,YAAY,QAAQ,aAAa;AAClD,MAAI,YAAa,YAAW,KAAK,YAAY;EAC7C,MAAM,SAAmB,EAAE;AAC3B,MAAI,GAAG,gBAAiB,QAAO,KAAK,GAAG,GAAG,gBAAgB,aAAa;AACvE,MAAI,GAAG,iBAAkB,QAAO,KAAK,GAAG,GAAG,iBAAiB,cAAc;AAC1E,MAAI,GAAG,gBAAiB,QAAO,KAAK,GAAG,GAAG,gBAAgB,YAAY;AACtE,MAAI,OAAO,OAAQ,YAAW,MAAM,OAAO,KAAK,MAAM;AACtD,UAAQ,KAAK;GAAE,KAAK;GAAa,OAAO;GAAS,CAAC;;CAIpD,MAAM,UAAU,SAAS,GAAG,eAAe;CAC3C,MAAM,WAAW,SAAS,GAAG,WAAW;CACxC,MAAM,MAAM,SAAS,GAAG,gBAAgB;AACxC,KAAI,YAAY,KAAA,KAAa,aAAa,KAAA,GAAW;EACnD,MAAM,QAAkB,EAAE;AAC1B,MAAI,YAAY,KAAA,EAAW,OAAM,KAAK,GAAG,eAAe,QAAQ,CAAC,iBAAiB;AAClF,MAAI,aAAa,KAAA,EAAW,OAAM,KAAK,GAAG,eAAe,SAAS,CAAC,QAAQ;EAC3E,IAAI,aAAa,MAAM,KAAK,MAAM;AAClC,MAAI,IAAK,eAAc,MAAM,IAAI;AACjC,UAAQ,KAAK;GAAE,KAAK;GAAgB,OAAO;GAAY,CAAC;;CAI1D,MAAM,gBAAgB,SAAS,GAAG,cAAc;AAChD,KAAI,kBAAkB,KAAA,EACpB,SAAQ,KAAK;EAAE,KAAK;EAAW,OAAO,WAAW,cAAc;EAAE,CAAC;CAIpE,MAAM,kBAAkB,SAAS,GAAG,gBAAgB;AACpD,KAAI,oBAAoB,KAAA,EACtB,SAAQ,KAAK;EAAE,KAAK;EAAoB,OAAO,eAAe,gBAAgB;EAAE,CAAC;CAInF,MAAM,YAAY,MAAM,QAAQ,GAAG,UAAU,GAAG,GAAG,YAAY,KAAA;CAC/D,MAAM,QAAQ,iBAAiB,GAAG,MAAM;CACxC,MAAM,kBAAkB,YAAY,gBAAgB,UAAU,GAAG,KAAA;CACjE,MAAM,YAAY,oBAAoB,KAAA,KAAa,gBAAgB,SAAS;AAE5E,KAAI,OAAO,QAAQ;EACjB,MAAM,WAAW,MAAM,KAAK,GAAG,QAAQ;GACrC,MAAM,OAAO,EAAE,UAAU,MAAM;GAC/B,IAAI,OAAO,GAAG,EAAE,KAAK,GAAG,eAAe,EAAE,WAAW,CAAC,GAAG;AACxD,OAAI,EAAE,MAAO,SAAQ,IAAI,EAAE;AAC3B,OAAI,aAAa,mBAAmB,MAAM,gBAAgB,QAAQ;IAChE,MAAM,KAAK,gBAAgB;IAC3B,MAAM,WAAW,mBAAmB,GAAG,MAAM;IAC7C,MAAM,YAAY,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,IAAI,CAAC,KAAK;AACzE,YAAQ,IAAI;;AAEd,UAAO;IACP;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;YAC7C,WAAW,OACpB,KAAI,iBAAiB,QAAQ;EAC3B,MAAM,WAAW,gBAAgB,KAAK,OAAO;GAC3C,MAAM,WAAW,mBAAmB,GAAG,MAAM;GAC7C,MAAM,YAAY,SAAS,SAAS,MAAM,GAAG,SAAS,MAAM,GAAG,IAAI,CAAC,KAAK;AACzE,UAAO,GAAG,GAAG,KAAK,GAAG,UAAU;IAC/B;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;QACjD;EACL,MAAM,QAAQ,cAAc,UAAU;AACtC,MAAI,OAAO,OAAQ,SAAQ,KAAK;GAAE,KAAK;GAAY,OAAO,MAAM,KAAK,KAAK;GAAE,CAAC;;CAKjF,MAAM,aAAa,MAAM,QAAQ,GAAG,WAAW,GAC3C,GAAG,WAAW,OAAOA,gBAAc,GACnC,KAAA;AACJ,KAAI,YAAY,QAAQ;EACtB,MAAM,aAAa,WAAW,IAAI;EAClC,MAAM,eAAe,eAAe,KAAA,KAAa,WAAW,OAAM,MAAK,EAAE,UAAU,WAAW;EAC9F,MAAM,WAAW,WAAW,KAAK,MAAM;GAErC,IAAI,OAAO,GADI,eAAe,KAAK,GAAG,OAAO,EAAE,MAAM,CAAC,KAC/B,EAAE,YAAY,QAAQ,EAAE,aAAa;GAC5D,MAAM,YAAY,cAAc,EAAE,UAAU;AAC5C,OAAI,WAAW,OAAQ,SAAQ,KAAK,UAAU,KAAK,KAAK,CAAC;AACzD,UAAO;IACP;AACF,UAAQ,KAAK;GAAE,KAAK;GAAY,OAAO;GAAI;GAAU,CAAC;YAC7C,UAAU,KAAA,KAAa,QAAQ,EACxC,SAAQ,KAAK;EAAE,KAAK;EAAY,OAAO,OAAO,MAAM;EAAE,CAAC;CAIzD,MAAM,YAAYA,gBAAc,GAAG,UAAU,GAAG,GAAG,YAAY,KAAA;AAC/D,KAAI,WAAW;EACb,MAAM,QAAkB,EAAE;AAC1B,MAAI,UAAU,MAAO,OAAM,KAAK,OAAO,UAAU,MAAM,CAAC;AACxD,QAAM,KAAK,GAAG,UAAU,OAAO,SAAS;AACxC,MAAI,UAAU,WAAY,OAAM,KAAK,GAAG,UAAU,WAAW,GAAG;AAChE,MAAI,UAAU,MAAO,OAAM,KAAK,GAAG,UAAU,MAAM,QAAQ;AAC3D,UAAQ,KAAK;GAAE,KAAK;GAAgB,OAAO,MAAM,KAAK,MAAM;GAAE,CAAC;;AAGjE,KAAI,GAAG,aAAc,SAAQ,KAAK;EAAE,KAAK;EAAmB,OAAO,OAAO,GAAG,aAAa;EAAE,CAAC;AAC7F,KAAI,GAAG,MAAO,SAAQ,KAAK;EAAE,KAAK;EAAY,OAAO,OAAO,GAAG,MAAM;EAAE,CAAC;AACxE,KAAI,GAAG,WAAY,SAAQ,KAAK;EAAE,KAAK;EAAiB,OAAO,OAAO,GAAG,WAAW;EAAE,CAAC;AAEvF,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,KAAI,MAAM,WAAW,EAAG;CACxB,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,CAAC;AACjC,KACE,OAAO,YAAY,eAChB,OAAO,QAAQ,QAAQ,UAAU,cACjC,CAAC,WAAW,IACZ,QAAQ,IAAI,WAAW,QAC1B;AACA,UAAQ,OAAO,MAAM,KAAK;AAC1B;;AAEF,SAAQ,IAAI,MAAM,KAAK,KAAK,CAAC;;AAG/B,SAAS,qBAAqB,OAAsC;CAClE,MAAM,EAAE,WAAW,OAAO,SAAS,aAAa,SAAS,GAAG,SAAS;CACrE,MAAM,KAAK,OAAO,cAAc,WAAW,UAAU,MAAM,IAAI,GAAG,GAAG;CACrE,MAAM,aAAa,OAAO,UAAU,WAAW,QAAQ;CACvD,MAAM,UAAU,WAAW;CAC3B,MAAM,QAAkB,EAAE;CAC1B,MAAM,aAAa,GAAG,SAAoB;AACxC,MAAI,SAAS;AACX,WAAQ,IAAI,GAAG,KAAK;AACpB;;EAEF,MAAM,CAAC,QAAQ;AACf,MAAI,OAAO,SAAS,SAAU,OAAM,KAAK,KAAK;;CAGhD,MAAM,QAAkB,EAAE;CAC1B,MAAM,SAAmB,EAAE;AAE3B,KAAI,SAAS;EACX,MAAM,KAAK,iBAAiB,WAAW;AACvC,QAAM,KAAK,KAAK,GAAG,OAAO,WAAW,aAAa,CAAC,QAAQ,mBAAmB,OAAO,QAAQ,CAAC,CAAC,KAAK;AACpG,SAAO,KAAK,UAAU,KAAK,UAAU,OAAO,IAAI,UAAU,OAAO,UAAU,MAAM,UAAU,MAAM;QAC5F;EACL,MAAM,KAAK,cAAc,WAAW;AACpC,MAAI,OAAO,CACT,OAAM,KAAK,GAAG,KAAK,WAAW,aAAa,GAAG,OAAO,MAAM,GAAG,OAAO,KAAK,GAAG,QAAQ,GAAG,OAAO,QAAQ;MAEvG,OAAM,KAAK,GAAG,OAAO,MAAM,KAAK,OAAO,MAAM,GAAG,KAAK,WAAW,aAAa,GAAG,OAAO,MAAM,GAAG,OAAO,KAAK,GAAG,QAAQ,GAAG,OAAO,QAAQ;;AAI7I,KAAI,KAAK,UAAU,KAAK,MAAM;AAC5B,QAAM,KAAK,UAAU,IAAI,mBAAmB,OAAO,KAAK,OAAO,CAAC,CAAC,GAAG,mBAAmB,OAAO,KAAK,KAAK,CAAC,KAAK,IAAI,KAAK,OAAO,GAAG,KAAK,OAAO;AAC7I,SAAO,KAAK;AACZ,SAAO,KAAK;;AAGd,KAAI,KAAK,QAAQ;EACf,MAAM,aAAa,SAAS,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO;EAC/D,MAAM,KAAK,UACN,cAAc,MAAM,UAAU,MAAM,UAAU,QAC9C,cAAc,MAAM,OAAO,MAAM,OAAO;AAC7C,MAAI,SAAS;AACX,SAAM,KAAK,MAAM,KAAK,OAAO,IAAI;AACjC,UAAO,KAAK,IAAI,UAAU,MAAM;QAEhC,OAAM,KAAK,IAAI,KAAK,KAAK,SAAS,OAAO,QAAQ;AAEnD,SAAO,KAAK;;AAGd,KAAI,KAAK,UAAU;AACjB,MAAI,SAAS;AACX,SAAM,KAAK,MAAM,mBAAmB,MAAM,KAAK,WAAW,CAAC,IAAI;AAC/D,UAAO,KAAK,UAAU,KAAK,UAAU,MAAM;QAE3C,OAAM,KAAK,IAAI,OAAO,IAAI,KAAK,KAAK,WAAW,OAAO,QAAQ;AAEhE,SAAO,KAAK;;AAGd,WAAU,MAAM,KAAK,GAAG,EAAE,GAAG,OAAO;CAEpC,MAAM,SAASA,gBAAc,KAAK,GAAG,GAAG,KAAK,KAAK,KAAA;AAClD,KAAI,OACF,QAAO,KAAK;CAGd,MAAM,YAAY,KAAK;AACvB,KAAI,cAAc,KAAA,EAChB,QAAO,KAAK;CAGd,MAAM,cAAc,OAAO,QAAQ,KAAK,CAAC,QAAQ,CAAC,GAAG,OAAO,MAAM,KAAA,EAAU;CAC5E,MAAM,YAAY,SAAS,eAAe,OAAO,GAAG,EAAE;CACtD,MAAM,eAAe,cAAc,KAAA,IAC/B,kBAAkB,WAAW,kBAAkB,GAC/C,EAAE;CACN,MAAM,iBAA8B,CAClC,GAAG,YAAY,KAAK,CAAC,KAAK,YAAY;EAAE;EAAK,OAAO,YAAY,MAAM;EAAE,EAAE,EAC1E,GAAG,UACJ;CACD,MAAM,aAA0B,aAAa,SAAS,IAClD,CAAC,GAAG,cAAc,GAAG,eAAe,GACpC;AAEJ,MAAK,IAAI,IAAI,GAAG,IAAI,WAAW,QAAQ,KAAK;EAC1C,MAAM,QAAQ,WAAW;AACzB,MAAI,CAAC,MAAO;EAEZ,MAAM,EAAE,aAAa;EACrB,MAAM,cAAc,aAAa,KAAA,KAAa,SAAS,SAAS;EAEhE,MAAM,SADS,MAAM,WAAW,SAAS,KAAK,CAAC,cACvB,OAAO;AAE/B,MAAI,SAAS;GACX,MAAM,MAAM,MAAM,QAAQ,IAAI,mBAAmB,MAAM,MAAM,KAAK;AAClE,aAAU,OAAO,OAAO,OAAO,mBAAmB,MAAM,IAAI,CAAC,KAAK,OAAO,UAAU,KAAK,UAAU,OAAO,UAAU,MAAM,UAAU,MAAM;SACpI;GACL,MAAM,MAAM,MAAM,QAAQ,IAAI,MAAM,UAAU;AAC9C,aAAU,KAAK,OAAO,MAAM,SAAS,OAAO,MAAM,GAAG,OAAO,OAAO,MAAM,IAAI,GAAG,OAAO,QAAQ,MAAM;;AAGvG,MAAI,eAAe,UAAU;GAE3B,MAAM,YADc,MAAM,WAAW,SAAS,IACd,MAAM;AACtC,QAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;IACxC,MAAM,QAAQ,SAAS;AACvB,QAAI,UAAU,KAAA,EAAW;AACzB,QAAI,UAAA,yBAAoC;AACtC,eAAU,KAAK,OAAO,MAAM,YAAY,OAAO,QAAQ;AACvD;;IAGF,MAAM,cADc,MAAM,SAAS,SAAS,IACV,OAAO;AACzC,QAAI,UAAU,IAAI;AAChB,eAAU,GAAG;AACb;;AAEF,QAAI,QACF,WAAU,OAAO,UAAU,IAAI,YAAY,KAAK,mBAAmB,MAAM,IAAI,UAAU,KAAK,UAAU,MAAM;aACnG,MAAM,WAAW,IAAI,IAAI,MAAM,WAAW,OAAO,CAC1D,WAAU,KAAK,OAAO,MAAM,YAAY,OAAO,QAAQ,QAAQ;QAE/D,WAAU,KAAK,OAAO,MAAM,UAAU,IAAI,cAAc,OAAO,MAAM,GAAG,QAAQ;;;;AAMxF,KAAI,CAAC,WAAW,MAAM,SAAS,EAC7B,kBAAiB,MAAM;;AAI3B,SAAS,gBAAgB,OAAiB;AACxC,QAAO,SAAS,UAAU,YAA8C,SAAwB;AAC9F,MAAI,OAAO,eAAe,YAAY,YAAY,KAAA,EAChD,eAAc,OAAO,YAAY,QAAQ;WAChC,OAAO,eAAe,SAC/B,eAAc,OAAO,WAAW;MAEhC,eAAc,OAAO,OAAO,OAAO,WAAW,CAAC;;;;;;;;;;;;AAcrD,MAAM,OAAY;CAChB,MAAM,gBAAgB,OAAO;CAC7B,OAAO,gBAAgB,QAAQ;CAC/B,MAAM,gBAAgB,OAAO;CAC7B,OAAO,gBAAgB,QAAQ;CAChC;AAKD,MAAM,aAA8B;CAClC,MAAM;CACN,WAAW;CACX,QAAQ;CACR,OAAO;CACP,OAAO;CACP,OAAO;AACL,SAAO;;CAET,aAAa;AACX,SAAO,EAAE;;CAEX,OAbgB,OAAO,aAAa,IAAI,EAAE,YAAY,IAAI,CAa1C;CACjB;;;;;;;;;;;;;;;;AAgCD,SAAgB,aAAyD,iBAA0C,EAAE,EAAE,iBAAmE;AACxL,KAAI,CAAC,cAAe,QAAO;CAE3B,MAAM,aAAa,iBAAiB,eAAe;CACnD,MAAM,YAAY,iBAAiB;CACnC,MAAM,YAAY,KAAK,KAAK;CAC5B,MAAM,UAAmC,EAAE,GAAG,gBAAgB;CAC9D,IAAI,WAAW;CACf,IAAI,UAAU;CACd,IAAI;CACJ,IAAI,UAAU;CACd,IAAI,mBAAqC;CAEzC,SAAS,OAAO,OAAwB,SAAuB;AAC7D,MAAI,CAAC,MAAM,QAAQ,QAAQ,YAAY,CACrC,SAAQ,cAAc,EAAE;AAEzB,UAAQ,YAA0B,KAAK;GACtC;GACA;GACA,WAAW,QAAQ;GACpB,CAAC;;CAGJ,MAAM,cAAc,SAAS,MAAM,OAAyB;AAC1D,MAAI,SAAS;AACX,gBAAa,eAAe,yBAAyB,MAAM,OAAO,GAAG;AACrE;;EAEF,MAAM,SAAS,iBAAiB,MAAM;AACtC,MAAI,CAACA,gBAAc,QAAQ,MAAM,CAC/B,SAAQ,QAAQ;MAEhB,WAAU,QAAQ,OAAkC,OAA6C;AAEnG,UAAQ,kBAAkB;;AAG5B,aAAY,OAAO,SAAS,KAAK,QAAgB,OAAqD;AACpG,cAAY;GAAE,GAAG;GAAO,SAAS;GAAU;GAAQ,CAAC;;AAGtD,QAAO;EACL,OAAO;EACP,IAAI,MAA6B;AAC/B,OAAI,SAAS;IACX,MAAM,SAAS;IACf,MAAM,eAAe,mBAAmB,kBAAkB,IAAI,iBAAiB,GAAG,KAAA;AAClF,QACE,oBACG,gBACA,CAAC,aAAa,gBACd,oBAAoB,OAAO,EAC9B;AACA,eAAU,kBAA6C,OAAO;AAC9D;;IAEF,MAAM,OAAO,OAAO,KAAK,OAAO;AAChC,iBAAa,aAAa,iBAAiB,KAAK,SAAS,KAAK,KAAK,KAAK,GAAG,UAAU,GAAG;AACxF;;AAEF,aAAU,SAAS,KAAgC;;EAGrD,SAAS,OAAuB;AAC9B,OAAI,SAAS;AACX,iBAAa,kBAAkB,kBAAkB,MAAM,GAAG;AAC1D;;AAEF,iBAAc;;EAGhB,MAAM,OAAuB,cAAsC;AACjE,OAAI,SAAS;AAIX,iBAAa,eAAe,kBAHf,eACT,CAAC,GAAG,OAAO,KAAK,aAAwC,EAAE,QAAQ,GAClE,CAAC,QAAQ,EACqC,KAAK,KAAK,CAAC,GAAG;AAChE;;AAEF,cAAW;GACX,MAAM,MAAM,OAAO,UAAU,WAAW,IAAI,MAAM,MAAM,GAAG;AAE3D,OAAI,aACF,WAAU,SAAS,aAAwC;GAG7D,MAAM,WAAoC;IACxC,MAAM,IAAI;IACV,SAAS,IAAI;IACb,OAAO,IAAI;IACZ;GACD,MAAM,YAAY;AAClB,QAAK,MAAM,KAAK;IAAC;IAAQ;IAAU;IAAc;IAAc;IAAiB;IAAQ;IAAS;IAAW,CAC1G,KAAI,KAAK,IAAK,UAAS,KAAK,UAAU;AAGxC,OAAI,eAAe,YAAY;AAC7B,QAAI,IAAI,KAAM,UAAS,OAAO,IAAI;AAClC,QAAI,IAAI,IAAK,UAAS,MAAM,IAAI;AAChC,QAAI,IAAI,IAAK,UAAS,MAAM,IAAI;AAChC,QAAI,IAAI,KAAM,UAAS,OAAO,IAAI;AAClC,QAAI,IAAI,OAAQ,UAAS,SAAS,IAAI;;AAGxC,OAAIA,gBAAc,QAAQ,MAAM,CAC9B,WAAU,QAAQ,OAAkC,SAAS;OAE7D,SAAQ,QAAQ;;EAIpB,KAAK,SAAiB,aAAqC;AACzD,OAAI,SAAS;AAIX,iBAAa,cAAc,kBAHd,cACT,CAAC,WAAW,GAAG,OAAO,KAAK,YAAuC,CAAC,QAAO,MAAK,MAAM,cAAc,CAAC,GACpG,CAAC,UAAU,EACkC,KAAK,KAAK,CAAC,GAAG;AAC/D;;AAEF,UAAO,QAAQ,QAAQ;AACvB,OAAI,aAAa;IACf,MAAM,EAAE,aAAa,GAAG,GAAG,SAAS;AACpC,cAAU,SAAS,KAAK;;;EAI5B,KAAK,SAAiB,aAAqC;AACzD,OAAI,SAAS;AAIX,iBAAa,cAAc,kBAHd,cACT,CAAC,WAAW,GAAG,OAAO,KAAK,YAAuC,CAAC,QAAO,MAAK,MAAM,cAAc,CAAC,GACpG,CAAC,UAAU,EACkC,KAAK,KAAK,CAAC,GAAG;AAC/D;;AAEF,aAAU;AACV,UAAO,QAAQ,QAAQ;AACvB,OAAI,aAAa;IACf,MAAM,EAAE,aAAa,GAAG,GAAG,SAAS;AACpC,cAAU,SAAS,KAAK;;;EAI5B,KAAK,WAA0E;AAC7E,OAAI,SAAS;AACX,iBAAa,cAAc,2BAA2B;AACtD,WAAO;;GAGT,MAAM,aAAa,KAAK,KAAK,GAAG;GAChC,MAAM,QAAkB,gBAAgB,WAAW,UAAU,UAAU,SAAS;GAEhF,IAAI,YAAY;AAChB,OAAI,WAAW,WACb,aAAY;YACH,sBAAsB,QAAQ,CACvC,aAAY;YACH,eAAe,MAAM,OAE9B,aAAY,WAAW;IACrB,QAFc,WAAmD,UAAU,QAAQ;IAGnF,UAAU;IACV,MAAM,QAAQ;IACd,QAAQ,QAAQ;IAChB;IACD,CAAC;AAGJ,OAAI,CAAC,aAAa,CAAC,aAAa,MAAM,EAAE;AACtC,cAAU;AACV,uBAAmB;AACnB,WAAO;;AAGT,OAAI,WAAW;IACb,MAAM,MAAM;AACZ,SAAK,MAAM,OAAO,IAChB,KAAI,QAAQ,aAAc,SAAQ,OAAO,IAAI;;AAGjD,WAAQ,WAAW,eAAe,WAAW;GAE7C,MAAM,OAAO,cAAc,OAAO,SAAS;IAAE;IAAY,WAAW;IAAM;IAAW,CAAC;AACtF,aAAU;AACV,sBAAmB;AACnB,OAAI,KAEF,mBAAkB,IAAI,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC;AAE5D,UAAO;;EAGT,aAAwD;AACtD,UAAO,EAAE,GAAG,SAAS;;EAExB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8BH,SAAgB,oBAAgE,UAAgC,EAAE,EAAE,iBAAmE;CACrL,MAAM,EAAE,QAAQ,MAAM,WAAW,WAAW,qBAAqB;CACjE,MAAM,UAAmC,EAAE;AAC3C,KAAI,WAAW,KAAA,EAAW,SAAQ,SAAS;AAC3C,KAAI,SAAS,KAAA,EAAW,SAAQ,OAAO;AACvC,KAAI,cAAc,KAAA,EAAW,SAAQ,YAAY;AACjD,QAAO,aAAgB,SAAS;EAC9B,GAAG;EACH,WAAW,iBAAiB,aAAa;EAC1C,CAAC;;;;;AAMJ,SAAgB,iBAAqC;AACnD,QAAO,EAAE,GAAG,WAAW;;AAMzB,IAAI,OAAO,qBAAqB,YAAa,YAAW,iBAAiB;;;;;;;ACjgCzE,MAAa,uBAAuB;;;;;;AA0BpC,SAAS,cAAc,OAAkD;AACvE,KAAI,OAAO,UAAU,YAAY,UAAU,QAAQ,MAAM,QAAQ,MAAM,CAAE,QAAO;AAChF,KAAI,OAAO,UAAU,SAAS,KAAK,MAAM,KAAK,kBAAmB,QAAO;AAExE,QADc,OAAO,eAAe,MACxB,KAAK,OAAO,aAAa,MAAM,gBAAgB;;AAG7D,SAAS,gBAAgB,OAAwB;AAC/C,KAAI,UAAU,QAAQ,OAAO,UAAU,SAAU,QAAO,KAAK,UAAU,MAAM;AAC7E,KAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,IAAI,MAAM,IAAI,gBAAgB,CAAC,KAAK,IAAI,CAAC;AAC1E,KAAI,CAAC,cAAc,MAAM,CAAE,QAAO,KAAK,UAAU,MAAM;AAEvD,QAAO,IADM,OAAO,KAAK,MAAM,CAAC,MACjB,CAAC,KAAI,MAAK,GAAG,KAAK,UAAU,EAAE,CAAC,GAAG,gBAAgB,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC;;;;;;;;;AAU1F,SAAS,QAAQ,OAAe,MAAsB;CACpD,IAAI,IAAI,SAAS;AACjB,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,OAAK,MAAM,WAAW,EAAE,GAAG;AAC3B,MAAI,KAAK,KAAK,GAAG,SAAW,KAAK;;AAEnC,QAAO,MAAM;;;;;;;;;;;AAYf,SAAS,sBAAsB,OAAoB,WAA2B;CAC5E,MAAM,UAAU,UAAU,MAAM,GAAG,GAAG;CACtC,MAAM,UAAU,gBAAgB;EAC9B,QAAQ,MAAM;EACd,OAAO;GAAE,MAAM,MAAM,MAAM;GAAM,IAAI,MAAM,MAAM;GAAI;EACrD,QAAQ,MAAM,SAAS;GAAE,MAAM,MAAM,OAAO;GAAM,IAAI,MAAM,OAAO;GAAI,GAAG,KAAA;EAC1E,SAAS,MAAM;EACf,WAAW;EACZ,CAAC;CACF,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,UAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;CACpE,MAAM,IAAI,QAAQ,SAAS,WAAW,CAAC,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;AACpE,QAAO,IAAI,IAAI,IAAI;;;;;;;;;;AAWrB,SAAgB,iBAAiB,OAAgC;AAC/D,QAAO;EACL,QAAQ,MAAM;EACd,OAAO,MAAM;EACb,QAAQ,MAAM;EACd,SAAS,MAAM,WAAW;EAC1B,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,aAAa,MAAM;EACnB,eAAe,MAAM;EACrB,SAAS,MAAM,WAAA;EAChB;;;;;;AAOH,IAAI,iBAAgF;;AAGpF,SAAS,cAAc,OAAoB,WAAgC;AACzE,KAAI,MAAM,eAAgB,QAAO;AACjC,QAAO;EAAE,GAAG;EAAO,gBAAgB,sBAAsB,OAAO,UAAU;EAAE;;;;;;;;;;;;;;;;;;;;AAqB9E,SAAgB,iBAA6D,QAA8C;CACzH,MAAM,SAAS;AACf,KAAK,OAAsC,MAAO,QAAO;CAEzD,MAAM,QAAQ,SAAS,MAAM,OAAyB;EACpD,MAAM,SAAS,iBAAiB,MAAM;AACtC,SAAO,IAAI,EAAE,OAAO,QAAQ,CAA+B;AAC3D,gBAAc,OAAO;;AAGvB,OAAM,OAAO,SAAS,KAAK,QAAgB,OAAqD;AAC9F,QAAM;GAAE,GAAG;GAAO,SAAS;GAAU;GAAQ,CAAC;;AAGhD,QAAO,QAAQ;AACf,QAAO;;;;;;;AAQT,SAAS,cAAgC,QAAgC;CACvE,MAAM,MAAM,OAAO,YAAY;AAC/B,KAAI,kBAAkB;;;;;;;;;;;;;;;;;;;;;AAsCxB,SAAgB,MAAM,OAAqC;AAGzD,QADe,aAAa,EAAE,OADf,iBAAiB,MACW,EAAE,CAChC,CAAC,KAAK,EAAE,YAAY,MAAM,CAAqE;;;;;;;;;;;;;;;;;;;;;;;;;;AA2B9G,SAAgB,UACd,SACA,IAC4D;AAC5D,QAAO,OAAO,OAAO,QAAQ;EAC3B,MAAM,SAAS,OAAO,QAAQ,WAAW,aAAa,QAAQ,OAAO,MAAM,GAAG,QAAQ;AACtF,MAAI;GACF,MAAM,SAAS,MAAM,GAAG,OAAO,IAAI;AACnC,SAAM;IACJ,QAAQ,QAAQ;IAChB,OAAO,IAAI;IACX;IACA,SAAS;IACT,aAAa,IAAI;IACjB,eAAe,IAAI;IACpB,CAAC;AACF,UAAO;WACA,KAAK;GACZ,MAAM,QAAQ;GACd,MAAM,SAAS,MAAM,UAAU,MAAM;GACrC,MAAM,SAAS,eAAe,oBAAoB,WAAW;AAC7D,SAAM;IACJ,QAAQ,QAAQ;IAChB,OAAO,IAAI;IACX;IACA,SAAS,SAAS,WAAW;IAC7B,QAAQ,MAAM;IACd,aAAa,IAAI;IACjB,eAAe,IAAI;IACpB,CAAC;AACF,SAAM;;;;;;;;;AAUZ,IAAa,mBAAb,cAAsC,MAAM;CAE1C,YAAY,QAAgB;AAC1B,QAAM,OAAO;AACb,OAAK,OAAO;;;;;;;;;;;;;;;;;;;;;;AAwChB,SAAgB,UACd,QACA,OACA,UAA4B,EAAE,EACgC;CAC9D,MAAM,cAAc,QAAQ,eAAe;CAC3C,MAAM,eAAe,0BAA0B,QAAQ,YAAY,IAAI;EACrE,4BAAY,IAAI,KAAa;EAC7B,WAAW,EAAE;EACb,UAAU,EAAE;EACZ,uCAAuB,IAAI,KAAa;EACzC;CACD,MAAM,QAAwB,EAAE;CAEhC,SAAS,KAAK,GAAY,GAAY,MAAoB;AACxD,MAAI,MAAM,EAAG;AAEb,MAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAAW;AACtC,SAAM,KAAK;IAAE,IAAI;IAAO,MAAM,QAAQ;IAAK,OAAO,YAAY,GAAG,KAAK;IAAE,CAAC;AACzE;;AAEF,MAAI,MAAM,KAAA,KAAa,MAAM,KAAA,GAAW;AACtC,SAAM,KAAK;IAAE,IAAI;IAAU,MAAM,QAAQ;IAAK,CAAC;AAC/C;;AAGF,MACE,MAAM,QAAQ,MAAM,QACjB,OAAO,MAAM,YAAY,OAAO,MAAM,YACtC,CAAC,MAAM,QAAQ,EAAE,IAAI,CAAC,MAAM,QAAQ,EAAE,EACzC;GACA,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,EAAY,EAAE,GAAG,OAAO,KAAK,EAAY,CAAC,CAAC;AAChF,QAAK,MAAM,OAAO,KAChB,MAAM,EAA8B,MAAO,EAA8B,MAAM,GAAG,KAAK,GAAG,MAAM;AAElG;;AAGF,QAAM,KAAK;GAAE,IAAI;GAAW,MAAM,QAAQ;GAAK,OAAO,YAAY,GAAG,KAAK;GAAE,CAAC;;CAG/E,SAAS,YAAY,OAAgB,MAAuB;AAC1D,SAAO,mBAAmB,OAAO,cAAc,aAAa,KAAK;;AAGnE,MAAK,QAAQ,OAAO,GAAG;CACvB,MAAM,SAAuE,EAAE,OAAO;AACtF,KAAI,QAAQ,cAAe,QAAO,SAAS,YAAY,QAAQ,GAAG;AAClE,KAAI,QAAQ,aAAc,QAAO,QAAQ,YAAY,OAAO,GAAG;AAC/D,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CT,SAAgB,kBAGd,QAAiB,SAA2D;CAC5E,MAAM,aAAa,SAAS;CAC5B,MAAM,YAAY,UAAU;EAC1B,MAAM,SAAqB;GACzB,GAAI;GACJ;GACD;AACD,MAAI,cAAc,MAAM,UAAU,CAAC,MAAM,OAAO,KAC9C,QAAO,SAAS;GAAE,GAAG,MAAM;GAAQ,MAAM;GAAY;AAEvD,SAAO;;AAGT,QAAO,iBAAiB,SAAS;EAC/B,QAAQ;GAAE,OAAO;GAAQ,YAAY;GAAM;EAC3C,QAAQ;GAAE,OAAO,SAAS;GAAQ,YAAY;GAAM;EACpD,aAAa;GAAE,OAAO,SAAS;GAAa,YAAY;GAAM;EAC9D,UAAU;GAAE,OAAO,SAAS;GAAU,YAAY;GAAM;EACxD,iBAAiB;GAAE,OAAO,SAAS;GAAiB,YAAY;GAAM;EACtE,gBAAgB;GAAE,OAAO,SAAS;GAAgB,YAAY;GAAM;EACpE,aAAa;GAAE,OAAO,SAAS;GAAa,YAAY;GAAM;EAC/D,CAAC;AAEF,QAAO;;;;;;;;;;;;;;;;;;;;;;;AA+CT,SAAgB,YAAuB;CACrC,MAAM,SAAwB,EAAE;CAChC,MAAM,WAAW;AACjB,mBAAkB,UAAU;AAC1B,SAAO,KAAK,MAAM;;AAGpB,QAAO;EACL;EACA,UAAU;AACR,oBAAiB;;EAEnB,iBAAiB,SAAS;AACxB,UAAO,OAAO,MAAK,UAAS,aAAa,OAAO,QAAQ,CAAC;;EAE3D,YAAY,SAAS;GACnB,MAAM,QAAQ,OAAO,MAAK,UAAS,aAAa,OAAO,QAAQ,CAAC;AAChE,OAAI,CAAC,OAAO;IACV,MAAM,UAAU,OAAO,KAAI,OAAM;KAAE,QAAQ,EAAE;KAAQ,SAAS,EAAE;KAAS,EAAE;IAC3E,MAAM,aAAa,KAAK,UAAU,UAAU,IAAI,MAAO,aAAa,SAAS,EAAE,UAAU,GAAG,EAAG;AAC/F,UAAM,IAAI,MACR,0BAA0B,WAAW,aAAa,OAAO,OAAO,aAAa,KAAK,UAAU,QAAQ,GACrG;;AAEH,UAAO;;EAEV;;AAoBH,SAAS,aAAa,OAAoB,SAAgC;AACxE,KAAI,QAAQ,WAAW,KAAA;MACjB,QAAQ,kBAAkB;OACxB,CAAC,QAAQ,OAAO,KAAK,MAAM,OAAO,CAAE,QAAO;aACtC,MAAM,WAAW,QAAQ,OAClC,QAAO;;AAGX,KAAI,QAAQ,YAAY,KAAA,KAAa,MAAM,YAAY,QAAQ,QAAS,QAAO;AAC/E,KAAI,QAAQ;OACL,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,QAAQ,MAAM,CAChD,KAAK,MAAM,MAA6C,OAAO,EAAG,QAAO;;AAG7E,KAAI,QAAQ,QAAQ;AAClB,MAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,OAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,QAAQ,OAAO,CACjD,KAAK,MAAM,OAAmC,OAAO,EAAG,QAAO;;AAGnE,QAAO;;;;;;;AAQT,SAAgB,sBAAsB,SAA2C;AAC/E,KAAI,QAAQ,iBAAiB;AAC3B,SAAO,QAAQ;AACf,SAAO;;AAET,KAAI,QAAQ,MAAO,QAAO;AAC1B,QAAO;;;;;;;AAQT,SAAgB,cAAc,OAAwB;CACpD,MAAM,IAAI,MAAM;AAChB,KAAI,CAAC,EAAG;CACR,MAAM,YAAY,cAAc,GAAG,OAAO,MAAM,UAAU,CAAC;AAC3D,OAAM,QAAQ;AACd,kBAAiB,WAAW,MAAM;;;;;;;;;;;;;;;;;AAwCpC,SAAgB,cAAc,UAAgC,EAAE,EAAgD;AAC9G,QAAO,OAAO,QAAQ;EACpB,MAAM,QAAQ,IAAI;EAClB,MAAM,IAAI,MAAM;AAChB,MAAI,CAAC,EAAG;EAER,MAAM,UAAU,EAAE,GAAI,EAAE,WAAW,EAAE,EAAG;EAExC,SAAS,aAAa,KAAa,OAAiC;AAClE,OAAI,UAAU,KAAA,EAAW;AACzB,OAAI,QAAQ,aAAa,QAAQ,SAAS,KAAA,EAAW,SAAQ,OAAO;;AAGtE,eAAa,aAAa,IAAI,SAAS,UAAU;AACjD,eAAa,WAAW,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAA,EAAU;AACtF,eAAa,MAAM,UAAU,IAAI,SAAS,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,UAAU,IAAI,SAAS,YAAY,CAAC;AAC3H,eAAa,aAAa,UAAU,IAAI,SAAS,aAAa,CAAC;AAE/D,MAAI,QAAQ,UAAU;GACpB,MAAM,MAAM,QAAQ,SAAS,IAAI;AACjC,OAAI,QAAQ,KAAA,EAAW,cAAa,YAAY,IAAI;;EAGtD,IAAI,EAAE,UAAU;AAChB,MAAI,CAAC,SAAS,QAAQ,QAAQ;GAC5B,MAAM,aAAa,MAAM,QAAQ,OAAO,WAAW,IAAI;AACvD,OAAI,WAAY,SAAQ;;AAG1B,QAAM,QAAQ;GAAE,GAAG;GAAG;GAAS,OAAO,SAAS,EAAE;GAAO;;;AAM5D,SAAS,UAAU,SAA6C,MAAkC;AAChG,QAAOC,YAAgB,SAAS,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;AAwCvC,SAAgB,UAAU,OAAgB,UAA4B,EAAE,EAAW;AACjF,QAAO,OAAO,QAAQ;AACpB,MAAI,CAAC,IAAI,MAAM,MAAO;AACtB,MAAI,QAAQ,OAAO;AACjB,SAAM,MAAM,IAAI;AAChB;;AAEF,QAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2Cd,SAAgB,OAAO,OAAgB,SAAiC;AACtE,KAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,YAAY,QAAQ,aAAa;EACvC,MAAM,EAAE,WAAW;AACnB,SAAO,OAAO,QAAQ;GACpB,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,GAAG;IAEL,MAAM,YAAY,MAAM,QAAQ,WAAW,QAD3B,gBAAgB,eAAe,IAAI,MAAM,CACC,CAAC;AAC3D,QAAI,MAAM,QAAQ;KAAE,GAAG;KAAG;KAAW;;AAEvC,SAAM,MAAM,IAAI;;;CAIpB,MAAM,YAAY,QAAQ,aAAa;CACvC,MAAM,EAAE,UAAU;CAClB,IAAI,eAA8B;CAClC,IAAI,cAAc,CAAC;CACnB,IAAI,QAAuB,QAAQ,SAAS;AAE5C,SAAQ,QAAQ;AACd,UAAQ,MAAM,KAAK,YAAY;GAC7B,MAAM,IAAI,IAAI,MAAM;AACpB,OAAI,GAAG;AACL,QAAI,CAAC,eAAe,OAAO;AACzB,oBAAgB,MAAM,MAAM,MAAM,IAAK;AACvC,mBAAc;;IAEhB,MAAM,WAAW,gBAAgB,KAAA;IAEjC,MAAM,OAAO,MAAM,UAAU,WADb,gBAAgB;KAAE,GAAG,eAAe,IAAI,MAAM;KAAE,OAAO;MAAE,GAAG,eAAe,IAAI,MAAM,CAAC;MAAO;MAAU;KAAE,CAC1E,CAAC;AAChD,QAAI,MAAM,QAAQ;KAAE,GAAG;KAAG;KAAU;KAAM;AAC1C,mBAAe;AACf,UAAM,OAAO,KAAK,KAAK;;AAEzB,SAAM,MAAM,IAAI;IAChB,CAAC,OAAO,QAAQ;AAChB,WAAQ,MAAM,sCAAsC,IAAI;IACxD;AACF,SAAO;;;;;;;;;AAUX,eAAe,YAAmC;CAChD,MAAM,IAAK,WAAsD;AACjE,KAAI,GAAG,OAAQ,QAAO,EAAE;AAExB,SAAO,MADW;;EAA0B;GACjC,UAAU;;AAGvB,SAAS,cAAc,WAA2B;AAChD,SAAQ,UAAU,aAAa,EAA/B;EACE,KAAK;EACL,KAAK,QACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,KAAK;EACL,KAAK,UACH,QAAO;EACT,QACE,QAAO;;;AAIb,SAAS,SAAS,KAA0B;CAC1C,IAAI,MAAM;AACV,MAAK,MAAM,QAAQ,IAAI,WAAW,IAAI,CAAE,QAAO,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;AACjF,QAAO;;AAGT,eAAe,UAAU,WAAmB,MAA+B;AAGzE,QAAO,SAAS,OADE,MADG,WAAW,EACP,OAAO,cAAc,UAAU,EAAE,IAAI,aAAa,CAAC,OAAO,KAAK,CAAC,CACrE;;AAGtB,eAAe,QAAQ,WAAmB,QAAgB,MAA+B;CACvF,MAAM,SAAS,MAAM,WAAW;CAChC,MAAM,OAAO,cAAc,UAAU;CACrC,MAAM,MAAM,MAAM,OAAO,UAAU,OAAO,IAAI,aAAa,CAAC,OAAO,OAAO,EAAE;EAAE,MAAM;EAAQ;EAAM,EAAE,OAAO,CAAC,OAAO,CAAC;AAEpH,QAAO,SAAS,MADE,OAAO,KAAK,QAAQ,KAAK,IAAI,aAAa,CAAC,OAAO,KAAK,CAAC,CACtD;;;AAItB,SAAS,eAAe,OAA6B;CACnD,MAAM,IAAI,MAAM;AAChB,KAAI,CAAC,EAAG,QAAO;CACf,MAAM,EAAE,WAAW,UAAU,MAAM,GAAG,SAAS;AAC/C,QAAO;EAAE,GAAG;EAAO,OAAO;EAAqB;;;;;;;;;;;;;;;;;;AAmBjD,MAAa,oBAAkC,EAC7C,OAAO;CACL;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD,EACF"}
@@ -105,6 +105,27 @@ declare function createPluginRunner(plugins?: EvlogPlugin[]): PluginRunner;
105
105
  /** Shared no-op runner used when no plugins are registered. */
106
106
  declare function getEmptyPluginRunner(): PluginRunner;
107
107
  //#endregion
108
+ //#region src/shared/dev-terminal.d.ts
109
+ /** Dev terminal preset — shorthand for common overlay + pretty-error combinations. */
110
+ type DevTerminalPreset = 'evlog' | 'nitro' | 'both';
111
+ /** How much stack detail evlog prints inside the wide-event error block. */
112
+ type DevPrettyErrorDetail = 'full' | 'guidance';
113
+ /** Pretty-print options for the `error:` block in dev wide events. */
114
+ interface DevPrettyErrorConfig {
115
+ snippet?: boolean;
116
+ stackDepth?: number;
117
+ compact?: boolean;
118
+ detail?: DevPrettyErrorDetail;
119
+ }
120
+ /** Resolved dev terminal object (alternative to preset strings). */
121
+ interface DevTerminalConfigObject {
122
+ /** Show Nitro `[request error]` + Youch in the terminal. @default false when pretty in dev. */
123
+ frameworkOverlay?: boolean;
124
+ prettyError?: DevPrettyErrorConfig;
125
+ }
126
+ /** User-facing dev terminal config: preset string or explicit object. */
127
+ type DevTerminalInput = DevTerminalPreset | DevTerminalConfigObject;
128
+ //#endregion
108
129
  //#region src/types.d.ts
109
130
  declare module 'nitropack/types' {
110
131
  interface NitroRuntimeHooks {
@@ -196,21 +217,27 @@ interface IngestPayload {
196
217
  * or select specific ones with `builtins: ['email', 'creditCard']`.
197
218
  */
198
219
  interface RedactConfig {
199
- /** Dot-notation paths to redact (e.g., 'user.email', 'headers.x-forwarded-for') */
220
+ /**
221
+ * Dot-notation paths to redact. Supports globs:
222
+ * - `'user.email'` — exact path only
223
+ * - `'password'` or `'**.password'` — key at any nesting depth
224
+ * - `'*_token'` — key-name glob at any depth
225
+ * - `'user.*'` — path glob under `user`
226
+ */
200
227
  paths?: string[];
201
228
  /** Additional regex patterns to match and replace string values anywhere in the event */
202
229
  patterns?: RegExp[];
203
230
  /**
204
231
  * Control built-in PII patterns.
205
232
  * - `undefined` / omitted → all built-ins enabled (default)
206
- * - `false` → no built-ins, only custom `paths`/`patterns`
233
+ * - `false` → no built-ins, only custom `paths` and `patterns`
207
234
  * - `['email', 'creditCard', ...]` → only the listed built-ins
208
235
  *
209
236
  * Available: `'creditCard'`, `'email'`, `'ipv4'`, `'phone'`, `'jwt'`, `'bearer'`, `'iban'`
210
237
  */
211
238
  builtins?: false | Array<'creditCard' | 'email' | 'ipv4' | 'phone' | 'jwt' | 'bearer' | 'iban'>;
212
239
  /**
213
- * Replacement string used for path-based and custom pattern redaction.
240
+ * Replacement string used for path- and custom pattern redaction.
214
241
  * Built-in patterns use smart partial masking instead (e.g. `****1111` for credit cards).
215
242
  * @default '[REDACTED]'
216
243
  */
@@ -379,6 +406,11 @@ interface LoggerConfig {
379
406
  env?: Partial<EnvironmentContext>;
380
407
  /** Enable pretty printing (auto-detected: true in dev, false in prod) */
381
408
  pretty?: boolean;
409
+ /**
410
+ * Dev terminal output: preset or explicit overlay + pretty-error settings.
411
+ * @default 'evlog' when pretty in development
412
+ */
413
+ dev?: DevTerminalInput;
382
414
  /** Sampling configuration for filtering logs */
383
415
  sampling?: SamplingConfig;
384
416
  /**
@@ -502,6 +534,26 @@ interface LoggerConfig {
502
534
  * `tools`, `reason`, and `promptId` are filled when `type === 'agent'` and
503
535
  * mirror the AI SDK fields already used by `evlog/ai`.
504
536
  */
537
+ /** Relative importance of an audit action for alerting and review prioritisation. */
538
+ type AuditSeverity = 'low' | 'medium' | 'high' | 'critical';
539
+ /**
540
+ * Static metadata for a single audit action — used by {@link defineAuditAction}
541
+ * and each entry of {@link defineAuditCatalog}.
542
+ */
543
+ interface AuditActionDefinition {
544
+ /** Default `target.type` for every audit emitted from this action. */
545
+ target?: string;
546
+ /** Human-readable description for docs, SIEM rules, and review tooling. */
547
+ description?: string;
548
+ /** Relative importance for alerting and review prioritisation. */
549
+ severity?: AuditSeverity;
550
+ /** When true, callers should supply `changes` (e.g. via {@link auditDiff}). */
551
+ requiresChanges?: boolean;
552
+ /** When true, callers should supply `reason` (especially for denials). */
553
+ requiresReason?: boolean;
554
+ /** Default redact paths merged with {@link auditDiff} for this action. */
555
+ redactPaths?: readonly string[];
556
+ }
505
557
  interface AuditActor {
506
558
  type: 'user' | 'system' | 'api' | 'agent';
507
559
  id: string;
@@ -544,6 +596,18 @@ interface AuditTarget {
544
596
  * - `context` — request/runtime context auto-populated by {@link auditEnricher}
545
597
  * (`requestId`, `traceId`, `ip`, `userAgent`, `tenantId`).
546
598
  */
599
+ /** Single JSON Patch operation for audit change tracking (RFC 6902 subset). */
600
+ interface AuditPatchOp {
601
+ op: 'add' | 'remove' | 'replace';
602
+ path: string;
603
+ value?: unknown;
604
+ }
605
+ /** Before/after snapshots and optional patch produced by {@link auditDiff}. */
606
+ interface AuditChanges {
607
+ before?: unknown;
608
+ after?: unknown;
609
+ patch?: AuditPatchOp[];
610
+ }
547
611
  interface AuditFields {
548
612
  /** Action name. Convention: `'<resource>.<verb>'`, e.g. `'invoice.refund'`. */
549
613
  action: string;
@@ -552,11 +616,8 @@ interface AuditFields {
552
616
  outcome: 'success' | 'failure' | 'denied';
553
617
  /** Human-readable explanation, especially required for `outcome: 'denied'`. */
554
618
  reason?: string;
555
- /** Before/after snapshots for mutating actions. */
556
- changes?: {
557
- before?: unknown;
558
- after?: unknown;
559
- };
619
+ /** Before/after snapshots and optional patch from {@link auditDiff}. */
620
+ changes?: AuditChanges;
560
621
  /** ID of the action that caused this one. */
561
622
  causationId?: string;
562
623
  /** ID shared by every action in the same logical operation. */
@@ -679,6 +740,26 @@ interface RequestLogger<T extends object = Record<string, unknown>> {
679
740
  * No-ops with a console warning after the wide event has been emitted.
680
741
  */
681
742
  set: (context: FieldContext<T>) => void;
743
+ /**
744
+ * Set the wide event level explicitly without touching the error context.
745
+ *
746
+ * Use this when you want to mark an event as `error` or `warn` while
747
+ * controlling the `error` field yourself (e.g. a typed error code without a
748
+ * stack), or when neither `.error()` nor `.warn()` fits the situation.
749
+ *
750
+ * The explicit level wins over the default computation derived from
751
+ * `.error()` / `.warn()` calls, so a later `.error()` will *not* override
752
+ * the manual level.
753
+ *
754
+ * No-ops with a console warning after the wide event has been emitted.
755
+ *
756
+ * @example
757
+ * ```ts
758
+ * log.setLevel('error')
759
+ * log.set({ error: { code: 'INVALID_INPUT' } })
760
+ * ```
761
+ */
762
+ setLevel: (level: LogLevel) => void;
682
763
  /**
683
764
  * Log an error and capture its details.
684
765
  *
@@ -908,6 +989,8 @@ interface H3EventContext {
908
989
  _evlogStartTime?: number;
909
990
  /** Internal: flag to prevent double emission on errors */
910
991
  _evlogEmitted?: boolean;
992
+ /** Internal: error hook is mid-emit; blocks concurrent afterResponse/response emission */
993
+ _evlogEmitting?: boolean;
911
994
  /** Internal: whether the route matched shouldLog filtering (emit-time guard) */
912
995
  _evlogShouldEmit?: boolean;
913
996
  [key: string]: unknown;
@@ -1093,8 +1176,8 @@ interface WithAuditContext {
1093
1176
  * `changes` field. Output is a JSON Patch-style array (RFC 6902 subset:
1094
1177
  * `add`, `remove`, `replace`) — small enough to ship over the wire.
1095
1178
  *
1096
- * Object keys whose name matches one of the `redactPaths` (dot-notation, e.g.
1097
- * `'user.password'`, `'card.cvv'`) are replaced with `'[REDACTED]'` so PII
1179
+ * Fields matching `redactPaths` glob patterns (e.g. `'password'`, `'**.password'`,
1180
+ * `'*_token'`, `'user.email'`) are replaced with `'[REDACTED]'` so PII
1098
1181
  * never leaks through the diff.
1099
1182
  *
1100
1183
  * @example
@@ -1112,15 +1195,9 @@ declare function auditDiff(before: unknown, after: unknown, options?: AuditDiffO
1112
1195
  after?: unknown;
1113
1196
  patch: AuditPatchOp[];
1114
1197
  };
1115
- /** Single JSON Patch operation produced by {@link auditDiff}. */
1116
- interface AuditPatchOp {
1117
- op: 'add' | 'remove' | 'replace';
1118
- path: string;
1119
- value?: unknown;
1120
- }
1121
1198
  /** Options for {@link auditDiff}. */
1122
1199
  interface AuditDiffOptions {
1123
- /** Object keys (dot-notation) whose values should be replaced with `[REDACTED]`. */
1200
+ /** Path globs (same syntax as `RedactConfig.paths`) whose values are replaced with `[REDACTED]`. */
1124
1201
  redactPaths?: string[];
1125
1202
  /** Custom replacement string. @default '[REDACTED]' */
1126
1203
  replacement?: string;
@@ -1129,16 +1206,24 @@ interface AuditDiffOptions {
1129
1206
  /** Include the full redacted `after` snapshot alongside the patch. */
1130
1207
  includeAfter?: boolean;
1131
1208
  }
1209
+ /** Options for {@link defineAuditAction}. Same shape as {@link AuditCatalogEntry}. */
1210
+ type DefineAuditActionOptions = AuditActionDefinition;
1132
1211
  /**
1133
- * Define a typed audit action with an optional fixed target type.
1212
+ * Define a typed audit action with optional fixed target type and catalog metadata.
1134
1213
  *
1135
1214
  * Returns a curried helper that fills in the action name (and target shape
1136
1215
  * if provided) so call sites stay terse and the action set is discoverable
1137
- * in one place.
1216
+ * in one place. Metadata (`description`, `severity`, `requiresChanges`, …)
1217
+ * is exposed on the factory for introspection, docs, and review tooling.
1138
1218
  *
1139
1219
  * @example
1140
1220
  * ```ts
1141
- * const refund = defineAuditAction('invoice.refund', { target: 'invoice' })
1221
+ * const refund = defineAuditAction('invoice.refund', {
1222
+ * target: 'invoice',
1223
+ * severity: 'high',
1224
+ * requiresChanges: true,
1225
+ * redactPaths: ['cardNumber'],
1226
+ * })
1142
1227
  *
1143
1228
  * log.audit(refund({
1144
1229
  * actor: { type: 'user', id: user.id },
@@ -1147,31 +1232,35 @@ interface AuditDiffOptions {
1147
1232
  * }))
1148
1233
  * ```
1149
1234
  */
1150
- declare function defineAuditAction<TTargetType extends string | undefined = undefined>(action: string, options?: {
1151
- target?: TTargetType;
1152
- }): DefinedAuditAction<TTargetType>;
1235
+ declare function defineAuditAction<const TAction extends string, const TOptions extends DefineAuditActionOptions = DefineAuditActionOptions>(action: TAction, options?: TOptions): DefinedAuditAction<TAction, TOptions>;
1153
1236
  /**
1154
1237
  * Return type of {@link defineAuditAction}. Accepts a partial input (no
1155
1238
  * `action`, target type pre-filled when provided).
1156
1239
  */
1157
- type DefinedAuditAction<TTargetType extends string | undefined> = (input: TTargetType extends string ? Omit<AuditInput, 'action' | 'target'> & {
1240
+ type DefinedAuditAction<TAction extends string = string, TOptions extends DefineAuditActionOptions = DefineAuditActionOptions> = ((input: TOptions['target'] extends string ? Omit<AuditInput, 'action' | 'target'> & {
1158
1241
  target?: Omit<AuditTarget, 'type'> & {
1159
- type?: TTargetType;
1242
+ type?: TOptions['target'];
1160
1243
  };
1161
- } : Omit<AuditInput, 'action'>) => AuditInput;
1244
+ } : Omit<AuditInput, 'action'>) => AuditInput) & {
1245
+ readonly action: TAction;
1246
+ readonly target: TOptions['target'];
1247
+ readonly description: TOptions['description'];
1248
+ readonly severity: TOptions['severity'];
1249
+ readonly requiresChanges: TOptions['requiresChanges'];
1250
+ readonly requiresReason: TOptions['requiresReason'];
1251
+ readonly redactPaths: TOptions['redactPaths'];
1252
+ };
1162
1253
  /**
1163
1254
  * Test helper that captures every audit event emitted while it is active.
1164
1255
  *
1165
- * Returns `{ events, restore, expect }`:
1256
+ * Returns `{ events, restore, toIncludeAuditOf, assertAudit }`:
1166
1257
  * - `events` — live array of captured `AuditFields`, populated as audits fire.
1167
1258
  * - `restore()` — uninstall the collector. Call from `afterEach()`.
1168
- * - `expect.toIncludeAuditOf(matcher)` — assertion helper used inside `expect`
1169
- * blocks, returns `true` if at least one captured event matches.
1259
+ * - `toIncludeAuditOf(matcher)` — returns `true` if at least one captured event matches.
1260
+ * - `assertAudit(matcher)` returns the matched event or throws with a readable summary.
1170
1261
  *
1171
- * Only captures audits going through `log.audit()` and the standalone
1172
- * `audit()` function. Events emitted via raw `log.set({ audit })` skip the
1173
- * collector by design — wrap them with `log.audit()` to make them visible to
1174
- * tests.
1262
+ * Captures audits on emit from `log.audit()`, standalone `audit()`, and
1263
+ * `log.set({ audit })` including auto-filled `idempotencyKey`.
1175
1264
  *
1176
1265
  * @example
1177
1266
  * ```ts
@@ -1188,6 +1277,8 @@ interface MockAudit {
1188
1277
  events: AuditFields[];
1189
1278
  restore: () => void;
1190
1279
  toIncludeAuditOf: (matcher: AuditMatcher) => boolean;
1280
+ /** Throws when no captured event matches; returns the matched event otherwise. */
1281
+ assertAudit: (matcher: AuditMatcher) => AuditFields;
1191
1282
  }
1192
1283
  /** Partial structural matcher for {@link MockAudit.toIncludeAuditOf}. */
1193
1284
  interface AuditMatcher {
@@ -1330,5 +1421,5 @@ declare function signed(drain: DrainFn, options: SignedOptions): DrainFn;
1330
1421
  */
1331
1422
  declare const auditRedactPreset: RedactConfig;
1332
1423
  //#endregion
1333
- export { RequestLogger as $, AuditActor as A, ErrorOptions as B, buildAuditFields as C, withAudit as D, signed as E, DeepPartial as F, Log as G, H3EventContext as H, DrainContext as I, ParsedError as J, LogLevel as K, EnrichContext as L, AuditLoggerMethod as M, AuditTarget as N, withAuditMethods as O, BaseWideEvent as P, RequestLogEntry as Q, EnvironmentContext as R, auditRedactPreset as S, mockAudit as T, IngestPayload as U, FieldContext as V, InternalFields as W, RegisteredAuditCatalogs as X, RedactConfig as Y, RegisteredErrorCatalogs as Z, WithAuditOptions as _, drainPlugin as _t, AuditInput as a, TailSamplingCondition as at, auditEnricher as b, AuditOnlyOptions as c, WideEvent as ct, DefinedAuditAction as d, PluginRunner as dt, RequestLoggerOptions as et, DrainFn as f, PluginSetupContext as ft, WithAuditContext as g, definePlugin as gt, SignedOptions as h, createPluginRunner as ht, AuditEnricherOptions as i, ServerEvent as it, AuditFields as j, AuditAction as k, AuditPatchOp as l, ClientLogContext as lt, SignedChainState as m, RequestLifecycleContext as mt, AuditDeniedError as n, SamplingConfig as nt, AuditMatcher as o, TailSamplingContext as ot, MockAudit as p, RequestFinishContext as pt, LoggerConfig as q, AuditDiffOptions as r, SamplingRates as rt, AuditMethod as s, TransportConfig as st, AUDIT_SCHEMA_VERSION as t, RouteConfig as tt, AuditableLogger as u, EvlogPlugin as ut, audit as v, enricherPlugin as vt, defineAuditAction as w, auditOnly as x, auditDiff as y, getEmptyPluginRunner as yt, ErrorCode as z };
1334
- //# sourceMappingURL=audit-CC8nfazi.d.mts.map
1424
+ export { RedactConfig as $, AuditActionDefinition as A, DrainContext as B, buildAuditFields as C, enricherPlugin as Ct, withAudit as D, signed as E, AuditPatchOp as F, FieldContext as G, EnvironmentContext as H, AuditSeverity as I, InternalFields as J, H3EventContext as K, AuditTarget as L, AuditChanges as M, AuditFields as N, withAuditMethods as O, AuditLoggerMethod as P, ParsedError as Q, BaseWideEvent as R, auditRedactPreset as S, drainPlugin as St, mockAudit as T, ErrorCode as U, EnrichContext as V, ErrorOptions as W, LogLevel as X, Log as Y, LoggerConfig as Z, WithAuditOptions as _, PluginSetupContext as _t, AuditInput as a, RouteConfig as at, auditEnricher as b, createPluginRunner as bt, AuditOnlyOptions as c, ServerEvent as ct, DefinedAuditAction as d, TransportConfig as dt, RegisteredAuditCatalogs as et, DrainFn as f, WideEvent as ft, WithAuditContext as g, PluginRunner as gt, SignedOptions as h, EvlogPlugin as ht, AuditEnricherOptions as i, RequestLoggerOptions as it, AuditActor as j, AuditAction as k, AuditableLogger as l, TailSamplingCondition as lt, SignedChainState as m, ClientLogContext as mt, AuditDeniedError as n, RequestLogEntry as nt, AuditMatcher as o, SamplingConfig as ot, MockAudit as p, DevTerminalInput as pt, IngestPayload as q, AuditDiffOptions as r, RequestLogger as rt, AuditMethod as s, SamplingRates as st, AUDIT_SCHEMA_VERSION as t, RegisteredErrorCatalogs as tt, DefineAuditActionOptions as u, TailSamplingContext as ut, audit as v, RequestFinishContext as vt, defineAuditAction as w, getEmptyPluginRunner as wt, auditOnly as x, definePlugin as xt, auditDiff as y, RequestLifecycleContext as yt, DeepPartial as z };
1425
+ //# sourceMappingURL=audit-BUAajsPU.d.mts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"audit-BUAajsPU.d.mts","names":[],"sources":["../src/shared/plugin.ts","../src/shared/dev-terminal.ts","../src/types.ts","../src/audit.ts"],"mappings":";AAGA;AAAA,UAAiB,kBAAA;EACf,GAAA,EAAK,kBAAA;AAAA;;UAIU,uBAAA;EACf,MAAA,EAAQ,aAAA;EACR,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;EAFA;EAKF,OAAA,GAAU,MAAA;AAAA;AAAA,UAGK,oBAAA,SAA6B,uBAAA;EAHlC;EAKV,KAAA,EAAO,SAAA;EACP,MAAA;EACA,UAAA;EACA,KAAA,GAAQ,KAAA;AAAA;;UAIO,gBAAA;EAT6B;EAW5C,OAAA,EAAS,MAAA;EACT,OAAA;IACE,MAAA;IACA,IAAA;EAAA;EAEF,OAAA,GAAU,MAAA;AAAA;;;;;AAPZ;;;;;;;;;;;;;AA6BA;;UAAiB,WAAA;EAID;EAFd,IAAA;EAIe;EAFf,KAAA,IAAS,GAAA,EAAK,kBAAA,YAA8B,OAAA;EAI9B;EAFd,MAAA,IAAU,GAAA,EAAK,aAAA,YAAyB,OAAA;EAI3B;EAFb,KAAA,IAAS,GAAA,EAAK,YAAA,YAAwB,OAAA;EAGf;EADvB,IAAA,IAAQ,GAAA,EAAK,mBAAA,YAA+B,OAAA;EAC5C,cAAA,IAAkB,GAAA,EAAK,uBAAA;EACvB,eAAA,IAAmB,GAAA,EAAK,oBAAA;EAOa;EALrC,WAAA,IAAe,GAAA,EAAK,gBAAA;EAZpB;;;;EAiBA,YAAA,IAAgB,MAAA,EAAQ,aAAA;AAAA;;iBAIV,YAAA,CAAa,MAAA,EAAQ,WAAA,GAAc,WAAA;;iBAKnC,WAAA,CAAY,IAAA,UAAc,KAAA,EAAO,WAAA,CAAY,WAAA,aAAwB,WAAA;;iBAKrE,cAAA,CAAe,IAAA,UAAc,MAAA,EAAQ,WAAA,CAAY,WAAA,cAAyB,WAAA;;;;;UAQzE,YAAA;EAAA,SACN,OAAA,WAAkB,WAAA;EA/BJ;EAAA,SAiCd,SAAA;EAAA,SACA,QAAA;EAAA,SACA,OAAA;EAAA,SACA,mBAAA;EAAA,SACA,YAAA;EAAA,SACA,eAAA;EACT,iBAAA,GAAoB,MAAA,EAAQ,aAAA;EAC5B,iBAAA,GAAoB,GAAA,EAAK,uBAAA;EACzB,kBAAA,GAAqB,GAAA,EAAK,oBAAA;EAC1B,SAAA,GAAY,GAAA,EAAK,aAAA,KAAkB,OAAA;EAlCE;EAoCrC,QAAA,GAAW,GAAA,EAAK,YAAA,KAAiB,OAAA;EACjC,OAAA,GAAU,GAAA,EAAK,mBAAA,KAAwB,OAAA;EACvC,cAAA,GAAiB,GAAA,EAAK,gBAAA;EACtB,QAAA,GAAW,GAAA,EAAK,kBAAA,KAAuB,OAAA;AAAA;;iBAQzB,kBAAA,CAAmB,OAAA,GAAS,WAAA,KAAqB,YAAA;;iBAiHjD,oBAAA,CAAA,GAAwB,YAAA;;;;KCzO5B,iBAAA;;KAGA,oBAAA;;UAGK,oBAAA;EACf,OAAA;EACA,UAAA;EACA,OAAA;EACA,MAAA,GAAS,oBAAA;AAAA;;UAOM,uBAAA;EDPb;ECSF,gBAAA;EACA,WAAA,GAAc,oBAAA;AAAA;;KAIJ,gBAAA,GAAmB,iBAAA,GAAoB,uBAAA;;;;YCvBvC,iBAAA;IFAL;;;AAIP;;;;;;;;;;IEUI,iBAAA,GAAoB,GAAA,EAAK,mBAAA,YAA+B,OAAA;IFFhD;;;AAGZ;;;;;;;;IEYI,cAAA,GAAiB,GAAA,EAAK,aAAA,YAAyB,OAAA;IFVjD;;;;;;;;AAOF;;;;;;;;IEqBI,aAAA,GAAgB,GAAA,EAAK,YAAA,YAAwB,OAAA;EAAA;AAAA;AAAA;EAAA,UAKrC,iBAAA;IACR,iBAAA,GAAoB,GAAA,EAAK,mBAAA,YAA+B,OAAA;IACxD,cAAA,GAAiB,GAAA,EAAK,aAAA,YAAyB,OAAA;IAC/C,aAAA,GAAgB,GAAA,EAAK,YAAA,YAAwB,OAAA;EAAA;AAAA;;;;UAOhC,eAAA;EFGF;;;;EEEb,OAAA;EFOwB;;;;EEDxB,QAAA;EFdc;;;;EEoBd,WAAA,GAAc,kBAAA;AAAA;;;;UAMC,aAAA;EACf,SAAA;EACA,KAAA;EAAA,CACC,GAAA;AAAA;;;;;;;;UAUc,YAAA;EF7BK;;;;;;;EEqCpB,KAAA;EF5B0B;EE8B1B,QAAA,GAAW,MAAA;EF9BiD;;;;;;AAK9D;;EEkCE,QAAA,WAAmB,KAAA;EFlCwC;;;;;EEwC3D,WAAA;EFxC+C;EE0C/C,QAAA,GAAW,KAAA,EAAO,MAAA,GAAS,KAAA;AAAA;;;;UAMZ,aAAA;EF3Ca;EE6C5B,IAAA;EF7C+D;EE+C/D,IAAA;EF/CwF;EEiDxF,KAAA;EFjDmG;EEmDnG,KAAA;AAAA;;;;;UAOe,qBAAA;EFlDA;EEoDf,MAAA;;EAEA,QAAA;EF7C4B;EE+C5B,IAAA;AAAA;;;;;UAOe,mBAAA;EFhDwB;EEkDvC,MAAA;EFhDgB;EEkDhB,QAAA;EFlD8C;EEoD9C,IAAA;EFpES;EEsET,MAAA;EFpES;EEsET,OAAA,EAAS,MAAA;EFpEA;;;;EEyET,UAAA;AAAA;;;;;UAOe,aAAA;EF1EW;EE4E1B,KAAA,EAAO,SAAA;EF3EP;EE6EA,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;EF9ES;EEiFX,OAAA,GAAU,MAAA;EFhFV;EEkFA,QAAA;IACE,MAAA;IACA,OAAA,GAAU,MAAA;EAAA;AAAA;;;;;UAQG,YAAA;EF1F+B;EE4F9C,KAAA,EAAO,SAAA;EFpFO;EEsFd,OAAA;IACE,MAAA;IACA,IAAA;IACA,SAAA;EAAA;EFzF6D;EE4F/D,OAAA,GAAU,MAAA;AAAA;AFqBZ;;;AAAA,UEfiB,cAAA;EFemC;;;;ACzOpD;;;;;AAGA;;;;;AAGA;;;;ECuOE,KAAA,GAAQ,aAAA;EDrOR;;;;;;AASF;;;;;;;;;AAOA;;ECwOE,IAAA,GAAO,qBAAA;AAAA;;;;UAMQ,WAAA;EAxQ4C;EA0Q3D,OAAA;AAAA;;;;UAMe,kBAAA;EAhOQ;EAkOvB,OAAA;EAlOsD;EAoOtD,WAAA;EAjRU;EAmRV,OAAA;EArQ2B;EAuQ3B,UAAA;EAvQ0D;EAyQ1D,MAAA;AAAA;;;;UAMe,YAAA;EAhPG;;;;;EAsPlB,OAAA;EAtPsD;EAwPtD,GAAA,GAAM,OAAA,CAAQ,kBAAA;EAlPa;EAoP3B,MAAA;EAnPwB;;;;EAwPxB,GAAA,GAAM,gBAAA;EAvPgD;EAyPtD,QAAA,GAAW,cAAA;EA3PT;;;;;;EAkQF,QAAA,GAAW,QAAA;EAjQsC;;;;;EAuQjD,SAAA;EAtQsD;;AAOxD;;;;;EAuQE,MAAA;EAtPA;;;;AAMF;;;;;;;;;AAaA;;;;;;;;;;;;;;;;;;EAmQE,MAAA,aAAmB,YAAA;EAxOqB;;AAM1C;;;;;;;;;;AAeA;;;;;;;;;AAaA;;;;;;;;;;EAsOE,KAAA,IAAS,GAAA,EAAK,YAAA,YAAwB,OAAA;EAvN5B;;AAOZ;;;;;;;;;;;;;;;;;;;;;;EAyOE,OAAA,GAAU,KAAA,CAzBmC,WAAA;EA1LlB;EAqN3B,qBAAA;AAAA;;;;;;;;;;KAYU,aAAA;AAjNZ;;;;AAAA,UAuNiB,qBAAA;EApMP;EAsMR,MAAA;EAnLO;EAqLP,WAAA;EArL4B;EAuL5B,QAAA,GAAW,aAAA;EAjLe;EAmL1B,eAAA;EAjLA;EAmLA,cAAA;EA7Ke;EA+Kf,WAAA;AAAA;AAAA,UAGe,UAAA;EACf,IAAA;EACA,EAAA;EACA,WAAA;EACA,KAAA;EACA,KAAA;EACA,KAAA;EACA,MAAA;EACA,QAAA;AAAA;;;;;;;;UAUe,WAAA;EACf,IAAA;EACA,EAAA;EAAA,CACC,GAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;UAwBc,YAAA;EACf,EAAA;EACA,IAAA;EACA,KAAA;AAAA;AArEF;AAAA,UAyEiB,YAAA;EACf,MAAA;EACA,KAAA;EACA,KAAA,GAAQ,YAAA;AAAA;AAAA,UAGO,WAAA;;EAEf,MAAA;EACA,KAAA,EAAO,UAAA;EACP,MAAA,GAAS,WAAA;EACT,OAAA;EAxEW;EA0EX,MAAA;EAtEA;EAwEA,OAAA,GAAU,YAAA;EAtEC;EAwEX,WAAA;EArEe;EAuEf,aAAA;;EAEA,OAAA;EAxEA;EA0EA,cAAA;EAxEA;EA0EA,OAAA;IACE,SAAA;IACA,OAAA;IACA,EAAA;IACA,SAAA;IACA,QAAA;IAAA,CACC,GAAA;EAAA;EAjEuB;EAoE1B,SAAA;EApE0B;EAsE1B,QAAA;EApEA;EAsEA,IAAA;AAAA;;AA7CF;;;;;UAsDiB,aAAA;EACf,SAAA;EACA,KAAA;EACA,OAAA;EACA,WAAA;EACA,OAAA;EACA,UAAA;EACA,MAAA;EACA,KAAA,GAAQ,WAAA;AAAA;;;;KAME,SAAA,GAAY,aAAA,GAAgB,MAAA;AAvDxC;;;;AAAA,KA6DY,WAAA,MAAiB,CAAA,SAAU,KAAA,YACnC,CAAA,GACA,CAAA,gCACgB,CAAA,IAAK,WAAA,CAAY,CAAA,CAAE,CAAA,OACjC,CAAA;;;;;UAMW,cAAA;EACf,MAAA;EACA,OAAA;EACA,WAAA,GAAc,eAAA;EAjEd;EAmEA,SAAA;EAjEA;EAmEA,gBAAA;AAAA;;;;UAMe,eAAA;EACf,KAAA;EACA,OAAA;EACA,SAAA;AAAA;;;;;;AA9CF;KAuDY,YAAA,oBAAgC,MAAA,qBAC1C,WAAA,CAAY,IAAA,CAAK,CAAA,QAAS,cAAA,KAAmB,cAAA;;;;;;;;;;;;;;AA1C/C;;;;;AAMA;;;;;;;;;;;;;;;;;UAyEiB,aAAA,oBAAiC,MAAA;EAvE9C;;;;;;;;EAgFF,GAAA,GAAM,OAAA,EAAS,YAAA,CAAa,CAAA;EAxEb;;;;;;;;;;;;AAajB;;;;;;;EAgFE,QAAA,GAAW,KAAA,EAAO,QAAA;EA7ET;AASX;;;;EA2EE,KAAA,GAAQ,KAAA,EAAO,KAAA,WAAgB,OAAA,GAAU,YAAA,CAAa,CAAA;EA1E5B;;;;;EAiF1B,IAAA,GAAO,OAAA,UAAiB,OAAA,GAAU,YAAA,CAAa,CAAA;EAlFxB;;;;;EAyFvB,IAAA,GAAO,OAAA,UAAiB,OAAA,GAAU,YAAA,CAAa,CAAA;EAxFF;;;AAqC/C;;;;EA4DE,IAAA,GAAO,SAAA,GAAY,YAAA,CAAa,CAAA;IAAO,UAAA;EAAA,MAA2B,SAAA;EAvBnD;;;EA4Bf,UAAA,QAAkB,YAAA,CAAa,CAAA,IAAK,MAAA;EArBF;;;;;;;;;;;;;;;;;;;EA0ClC,IAAA,IAAQ,KAAA,UAAe,EAAA,eAAiB,OAAA;EAxDtB;;;;;;;;;;;;;;;;;;;;;;EAgFlB,KAAA,GAAQ,iBAAA;AAAA;;UAIO,iBAAA;EAAA,CACd,KAAA,EAD+B,UAAA;EAEhC,IAAA,GAAO,MAAA,UAAgB,KAAA,EAAO,IAAA,CADM,UAAA;AAAA;;;;KAO1B,QAAA;;;;AARZ;;;;;;UAmBiB,GAAA;EAjBmB;;;;;EAuBlC,IAAA,CAAK,GAAA,UAAa,OAAA;EAClB,IAAA,CAAK,KAAA,EAAO,MAAA;EAxBW;;;AAMzB;;EAyBE,KAAA,CAAM,GAAA,UAAa,OAAA;EACnB,KAAA,CAAM,KAAA,EAAO,MAAA;EA1BK;AAWpB;;;;EAsBE,IAAA,CAAK,GAAA,UAAa,OAAA;EAClB,IAAA,CAAK,KAAA,EAAO,MAAA;EAQC;;;;;EADb,KAAA,CAAM,GAAA,UAAa,OAAA;EACnB,KAAA,CAAM,KAAA,EAAO,MAAA;AAAA;;;;;;;;;;;;;;;;;;;UAqBE,uBAAA;;AAAjB;;;;UAOiB,uBAAA;;KAGZ,mBAAA,MAAyB,CAAA;EAAA,SAAqB,MAAA,EAAQ,aAAA;AAAA,IAA0C,CAAA;AAH1D;AAAA,KAMtC,qBAAA,MAA2B,CAAA;EAAA,SAAqB,QAAA,EAAU,aAAA;AAAA,IAA0C,CAAA;;;;;;KAO7F,SAAA,iBACE,uBAAA,GAA0B,mBAAA,CAAoB,uBAAA,CAAwB,CAAA,WAC5E,uBAAA;AAZ8F;;;;AAAA,KAkB1F,WAAA,iBACE,uBAAA,GAA0B,qBAAA,CAAsB,uBAAA,CAAwB,CAAA,WAC9E,uBAAA;;;;UAKS,YAAA;EAtByF;EAwBxG,OAAA;EAjBmB;;;;;;;;;EA2BnB,IAAA,GAAO,SAAA;EA1BK;EA4BZ,MAAA;EA5B0D;EA8B1D,GAAA;EA7BM;EA+BN,GAAA;EA/B6B;EAiC7B,IAAA;EA3BqB;EA6BrB,KAAA,GAAQ,KAAA;EA5BI;;;;EAiCZ,QAAA,GAAW,MAAA;AAAA;;;;UAMI,oBAAA;EACf,MAAA;EACA,IAAA;EACA,SAAA;EAzC6B;;AAK/B;;;;;;;EA8CE,SAAA,IAAa,OAAA,EAAS,OAAA;AAAA;;;;UAMP,cAAA;EACf,GAAA,GAAM,aAAA;EACN,SAAA;EACA,MAAA;EAjCQ;EAmCR,eAAA;EA9BW;EAgCX,aAAA;EAhCiB;EAkCjB,cAAA;EA5BmC;EA8BnC,gBAAA;EAAA,CACC,GAAA;AAAA;;;;UAMc,WAAA;EACf,MAAA;EACA,IAAA;EACA,OAAA,EAAS,cAAA;IArBM,yEAuBb,UAAA;MACE,OAAA;QACE,SAAA,GAAY,OAAA,EAAS,OAAA;MAAA;IAAA,GAvB3B;IA2BE,SAAA,IAAa,OAAA,EAAS,OAAA;EAAA;EAExB,IAAA;IAAS,GAAA;MAAQ,UAAA;IAAA;EAAA;EACjB,QAAA,GAAW,QAAA;AAAA;;;;UAMI,WAAA;EACf,OAAA;EACA,MAAA;EARmB;;;;;;;EAgBnB,IAAA,GAAO,SAAA;EACP,GAAA;EACA,GAAA;EACA,IAAA;EACA,GAAA;AAAA;;;AFp8BF;;;;AAAA,cGMa,oBAAA;AHDb;;;;;;;AAAA,UGUiB,UAAA;EACf,MAAA;EACA,KAAA,EAAO,UAAA;EACP,MAAA,GAAS,WAAA;EACT,OAAA,GAAU,WAAA;EACV,MAAA;EACA,OAAA,GAAU,WAAA;EACV,WAAA;EACA,aAAA;EACA,OAAA;AAAA;;;;;;;;;iBAwEc,gBAAA,CAAiB,KAAA,EAAO,UAAA,GAAa,WAAA;;;;;AHvErD;;;;;;;;;;;;;AA6BA;iBGsFgB,gBAAA,oBAAoC,MAAA,kBAAA,CAAyB,MAAA,EAAQ,aAAA,CAAc,CAAA,IAAK,eAAA,CAAgB,CAAA;;;;KA+B5G,eAAA,oBAAmC,MAAA,qBAA2B,aAAA,CAAc,CAAA;EAAO,KAAA,EAAO,WAAA,CAAY,CAAA;AAAA;;UAGjG,WAAA,oBAA+B,MAAA;EAAA,CAC7C,KAAA,EAAO,UAAA;EH9Ge;;;;;EGoHvB,IAAA,GAAO,MAAA,UAAgB,KAAA,EAAO,IAAA,CAAK,UAAA;AAAA;;;;;;;;;;;;;;;;;;;;iBAsBrB,KAAA,CAAM,KAAA,EAAO,UAAA,GAAa,SAAA;;;;;;;;;;;AH9H1C;;;;;;;;;AAKA;;;;;iBGuJgB,SAAA,iBAAA,CACd,OAAA,EAAS,gBAAA,CAAiB,MAAA,GAC1B,EAAA,GAAK,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,gBAAA,KAAqB,OAAA,CAAQ,OAAA,IAAW,OAAA,IAC/D,KAAA,EAAO,MAAA,EAAQ,GAAA,EAAK,gBAAA,KAAqB,OAAA,CAAQ,OAAA;;;;;;cAqCxC,gBAAA,SAAyB,KAAA;cAExB,MAAA;AAAA;;UAQG,gBAAA;EACf,MAAA;EACA,MAAA,GAAS,WAAA,KAAgB,KAAA,EAAO,MAAA,KAAW,WAAA;AAAA;;;;;UAO5B,gBAAA;EACf,KAAA,EAAO,UAAA;EACP,WAAA;EACA,aAAA;AAAA;;;AHxMF;;;;;;;;;;;;;;;;;iBG8NgB,SAAA,CACd,MAAA,WACA,KAAA,WACA,OAAA,GAAS,gBAAA;EACN,MAAA;EAAkB,KAAA;EAAiB,KAAA,EAAO,YAAA;AAAA;;UAmD9B,gBAAA;EH7QN;EG+QT,WAAA;EH9Q4B;EGgR5B,WAAA;EH/QA;EGiRA,aAAA;EHjRoB;EGmRpB,YAAA;AAAA;;KAIU,wBAAA,GAA2B,qBAAA;;;;;;;;;;;;;;;;;;;;;AHxQvC;;;;iBGkSgB,iBAAA,sDAES,wBAAA,GAA2B,wBAAA,CAAA,CAClD,MAAA,EAAQ,OAAA,EAAS,OAAA,GAAU,QAAA,GAAW,kBAAA,CAAmB,OAAA,EAAS,QAAA;;;;;KA8BxD,kBAAA,mDAEO,wBAAA,GAA2B,wBAAA,MAG1C,KAAA,EAAO,QAAA,4BACH,IAAA,CAAK,UAAA;EAAqC,MAAA,GAAS,IAAA,CAAK,WAAA;IAAyB,IAAA,GAAO,QAAA;EAAA;AAAA,IACxF,IAAA,CAAK,UAAA,gBACN,UAAA;EAAA,SAEM,MAAA,EAAQ,OAAA;EAAA,SACR,MAAA,EAAQ,QAAA;EAAA,SACR,WAAA,EAAa,QAAA;EAAA,SACb,QAAA,EAAU,QAAA;EAAA,SACV,eAAA,EAAiB,QAAA;EAAA,SACjB,cAAA,EAAgB,QAAA;EAAA,SAChB,WAAA,EAAa,QAAA;AAAA;AFxc1B;;;;;AAGA;;;;;;;;;;;AAWA;;;;;AAdA,iBEgegB,SAAA,CAAA,GAAa,SAAA;;UA8BZ,SAAA;EACf,MAAA,EAAQ,WAAA;EACR,OAAA;EACA,gBAAA,GAAmB,OAAA,EAAS,YAAA;;EAE5B,WAAA,GAAc,OAAA,EAAS,YAAA,KAAiB,WAAA;AAAA;;UAIzB,YAAA;EACf,MAAA,YAAkB,MAAA;EAClB,OAAA,GAAU,WAAA;EACV,KAAA,GAAQ,OAAA,CAAQ,UAAA;EAChB,MAAA,GAAS,OAAA,CAAQ,WAAA;AAAA;;UAsDF,6BAAA;EDxiBI;EC0iBnB,UAAA,GAAa,GAAA,EAAK,aAAA,KAAkB,OAAA,CAAQ,UAAA,uBAAiC,UAAA;AAAA;;UAI9D,oBAAA;ED5hBgC;;;;ECiiB/C,QAAA,IAAY,GAAA,EAAK,aAAA;EDjiBqC;;;;ECsiBtD,MAAA,GAAS,6BAAA;ED/hBwC;ECiiBjD,SAAA;AAAA;;;;;;;;;;;;;;;;iBAkBc,aAAA,CAAc,OAAA,GAAS,oBAAA,IAA6B,GAAA,EAAK,aAAA,YAAyB,OAAA;;UAwCjF,gBAAA;EDnlBA;;;;;ECylBf,KAAA;AAAA;;KAIU,OAAA,IAAW,GAAA,EAAK,YAAA,YAAwB,OAAA;;ADtkBpD;;;;;;;;;AAaA;;;;;;;;;;;;;;iBCmlBgB,SAAA,CAAU,KAAA,EAAO,OAAA,EAAS,OAAA,GAAS,gBAAA,GAAwB,OAAA;;UAY1D,gBAAA;EDpkBG;ECskBlB,IAAA,QAAY,OAAA;EDtkB4B;ECwkBxC,IAAA,GAAO,IAAA,aAAiB,OAAA;AAAA;;KAId,aAAA;EACN,QAAA;EAAkB,MAAA;EAAgB,SAAA;AAAA;EAClC,QAAA;EAAwB,KAAA,GAAQ,gBAAA;EAAkB,SAAA;AAAA;;;;;;;;;AD5iBxD;;;;;;;;;;;;;AAsBA;;;;;iBCkjBgB,MAAA,CAAO,KAAA,EAAO,OAAA,EAAS,OAAA,EAAS,aAAA,GAAgB,OAAA;;;;;;;;;;;;;;;;;cAwHnD,iBAAA,EAAmB,YAAA"}