stitchkit 0.45.0 → 0.47.0

package/dist/internal/secure-fetch.d.ts

@@ -4,9 +4,13 @@ export declare function isPrivateIp(ip: string): boolean;
  * Refuse a URL that is not `http(s)`, has no host, or whose host is — or
  * resolves to — a private/internal address. Called on the initial URL and on
  * every redirect hop, so a public host cannot `302` to an internal address or
- * to a `file:` / `gopher:` / `data:` scheme.
+ * to a `file:` / `gopher:` / `data:` scheme. The DNS lookup honours `signal`,
+ * so a slow resolver cannot outlive the caller's deadline.
+ *
+ * This is the single host-validation implementation — `fetchGuarded` and
+ * `fetchPinnedDocument` both go through `resolvePublicAddress`.
  */
-export declare function assertPublicUrl(url: URL): Promise<void>;
+export declare function assertPublicUrl(url: URL, signal?: AbortSignal): Promise<void>;
 /**
  * Fetch a URL with the SSRF guard enforced on the initial URL and on every
  * redirect hop — a public host can otherwise `302` to an internal address or a
@@ -17,7 +21,23 @@ export declare function assertPublicUrl(url: URL): Promise<void>;
  * per-hop re-check is the larger and fully-closed hole; a static private DNS
  * record is rejected outright.
  */
-export declare function fetchGuarded(start: URL, allowPrivate: boolean): Promise<Response>;
+export interface GuardedFetchOptions {
+    /**
+     * Deadline for producing the FINAL response headers — DNS, connects and every
+     * redirect hop share this single budget, so a redirect chain cannot multiply
+     * it. Default 15 seconds.
+     */
+    timeoutMs?: number;
+    /**
+     * Separate deadline for consuming the body once headers have arrived — a slow
+     * LARGE download must not be killed by the connection budget, but a drip-feed
+     * body must still end. Default 120 seconds.
+     */
+    bodyTimeoutMs?: number;
+    /** Optional caller cancellation, combined with both deadlines. */
+    signal?: AbortSignal;
+}
+export declare function fetchGuarded(start: URL, allowPrivate: boolean, options?: GuardedFetchOptions): Promise<Response>;
 export interface PinnedDocumentFetchOptions {
     maxBytes: number;
     timeoutMs: number;

package/dist/internal/secure-fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secure-fetch.d.ts","sourceRoot":"","sources":["../../src/internal/secure-fetch.ts"],"names":[],"mappings":"AAiEA,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA8D/C;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CA0B7D;AAED;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAavF;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;CACV;AAoCD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAgFjC;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBnF"}
+{"version":3,"file":"secure-fetch.d.ts","sourceRoot":"","sources":["../../src/internal/secure-fetch.ts"],"names":[],"mappings":"AAiEA,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CA8D/C;AA4BD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAEnF;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,GAAG,EACV,YAAY,EAAE,OAAO,EACrB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,QAAQ,CAAC,CAiDnB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,6DAA6D;IAC7D,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;CACV;AAsCD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,GAAG,EACV,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAkFjC;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAoBnF"}

package/dist/internal/typed.d.ts

@@ -3,6 +3,13 @@ export declare function typedEntries<T extends object>(value: T): Array<{
 }[keyof T]>;
 /** Narrow an unknown value to a plain object — not `null`, not an array. */
 export declare function isRecord(value: unknown): value is Record<string, unknown>;
+/** Invoke a runtime-discovered handler after a fail-first function check. */
+export declare function callRuntimeHandler(handler: unknown, context: unknown): unknown;
+/**
+ * Isolated loose-to-typed adapter boundary for transports whose decoder is
+ * selected at runtime while the contract fixes the generic result type.
+ */
+export declare function transportResult<T>(value: unknown): T;
 export declare function mapObject<TSource extends object, TResult extends {
     [K in keyof TSource]?: unknown;
 }>(source: TSource, mapper: <K extends keyof TSource>(key: K, value: TSource[K]) => TResult[K] | undefined): TResult;

package/dist/internal/typed.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"typed.d.ts","sourceRoot":"","sources":["../../src/internal/typed.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,CAAC,GACP,KAAK,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAE/C;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,SAAS,CACvB,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GACrF,OAAO,CAOT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,OAAO,GACrE,OAAO,CAKT"}
+{"version":3,"file":"typed.d.ts","sourceRoot":"","sources":["../../src/internal/typed.ts"],"names":[],"mappings":"AAAA,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAC3C,KAAK,EAAE,CAAC,GACP,KAAK,CAAC;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAE/C;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,6EAA6E;AAC7E,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAK9E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAEpD;AAED,wBAAgB,SAAS,CACvB,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,GACrF,OAAO,CAOT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,SAAS,MAAM,EACtB,OAAO,SAAS;KAAG,CAAC,IAAI,MAAM,OAAO,CAAC,CAAC,EAAE,OAAO;CAAE,EAElD,MAAM,EAAE,OAAO,EACf,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,OAAO,CAAC,KAAK,OAAO,GACrE,OAAO,CAKT"}

package/dist/internal/within-dir.d.ts

@@ -4,4 +4,10 @@
  * check behind `staticRoute` and `view_file`'s local-file branch.
  */
 export declare function isWithinDir(root: string, target: string): boolean;
+/**
+ * Resolve both paths through the filesystem and return the real target only
+ * when it remains inside the real root. The lexical check must run first at a
+ * URL boundary; this second check closes symlink escapes.
+ */
+export declare function realPathWithinDir(root: string, target: string): Promise<string | null>;
 //# sourceMappingURL=within-dir.d.ts.map

package/dist/internal/within-dir.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"within-dir.d.ts","sourceRoot":"","sources":["../../src/internal/within-dir.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQjE"}
+{"version":3,"file":"within-dir.d.ts","sourceRoot":"","sources":["../../src/internal/within-dir.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAQjE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAO5F"}

package/dist/logger.d.ts

@@ -0,0 +1,8 @@
+/** Minimal structured logger shared by browser-safe and server entrypoints. */
+export interface StitchLogger {
+    info(msg: string, data?: Record<string, unknown>): void;
+    warn(msg: string, data?: Record<string, unknown>): void;
+    error(msg: string, data?: Record<string, unknown>): void;
+    debug(msg: string, data?: Record<string, unknown>): void;
+}
+//# sourceMappingURL=logger.d.ts.map

package/dist/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../src/logger.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACxD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACzD,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1D"}

package/dist/node.js

@@ -4,9 +4,8 @@ import {
   createImplement,
   createSocketIOServer,
   implement
-} from "./index-w0mec79h.js";
-import"./index-6jypn22c.js";
-import"./index-x3fcszf8.js";
+} from "./index-44xysy8r.js";
+import"./index-r1qp4rve.js";
 import {
   AppError,
   appError,
@@ -16,7 +15,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-yh0p5ddn.js";
+} from "./index-ee621cmy.js";
 // src/server/node.ts
 import { serve } from "srvx";
 async function serveNode(config) {

package/dist/observability/audit.d.ts

@@ -5,15 +5,30 @@ import { type SanitizeOptions } from './sanitize';
 /** One isolated RequestEvent sink and its sanitisation policy. */
 export interface RequestEventSinkConfig {
     /**
-     * The sink — persists one audit event. It runs fire-and-forget and its own
-     * errors are swallowed, so a slow or failing write never blocks or breaks the
-     * request it observes. Keep it asynchronous and self-contained.
+     * The sink — persists one audit event. It runs fire-and-forget; failures are
+     * reported through `onSinkError` without breaking the observed work.
      */
     write: (event: RequestEvent) => void | Promise<void>;
     /** Keep only events for which this returns `true`. Default: keep every event. */
     filter?: (event: RequestEvent) => boolean;
     /** Payload sanitisation tuning — passed through to `sanitizePayload`. */
     sanitize?: SanitizeOptions;
+    /** Maximum writes concurrently awaiting settlement. Default: 1000. */
+    maxPending?: number;
+    /** Observe failed filtering, projection or persistence. */
+    onSinkError?: (failure: SinkError) => void | Promise<void>;
+    /** Observe events rejected by bounded or closed admission. */
+    onDrop?: (drop: SinkDrop) => void | Promise<void>;
+}
+export type SinkDropReason = 'capacity' | 'closed';
+export interface SinkError {
+    error: unknown;
+    event?: RequestEvent;
+}
+export interface SinkDrop {
+    reason: SinkDropReason;
+    event: RequestEvent;
+    pending: number;
 }
 export interface RequestObservabilityConfig extends RequestEventSinkConfig {
     /** Clone and record JSON request bodies. Default false. */
@@ -39,6 +54,10 @@ export interface HttpRequestObserver {
 export interface Observability {
     request?: HttpRequestObserver;
     toolCall: ToolCallHooks;
+    /** Wait for events admitted before this call. */
+    flush(): Promise<void>;
+    /** Stop admission and drain every previously accepted event. Idempotent. */
+    close(): Promise<void>;
 }
 export declare function createObservability(config: ObservabilityConfig): Observability;
 //# sourceMappingURL=audit.d.ts.map

package/dist/observability/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACnD;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;CACzB;AAkFD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CA4G9E"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../src/observability/audit.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAc,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAqB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAe,KAAK,eAAe,EAAmB,MAAM,YAAY,CAAC;AAGhF,kEAAkE;AAClE,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC;IAC1C,yEAAyE;IACzE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,8DAA8D;IAC9D,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnD;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEnD,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA2B,SAAQ,sBAAsB;IACxE,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,0BAA0B,CAAC;IACrC,KAAK,CAAC,EAAE,sBAAsB,CAAC;CAChC;AAED,gEAAgE;AAChE,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,cAAc,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5B;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;CACnD;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,iDAAiD;IACjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,4EAA4E;IAC5E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAuKD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,mBAAmB,GAAG,aAAa,CAkI9E"}

package/dist/observability/event.d.ts

@@ -36,6 +36,8 @@ export interface RequestEvent {
     dimensions?: Record<string, string>;
     /** Tool name — tool calls only. */
     toolName?: string;
+    /** Distinguishes a completed operation from an MRTR input-gating round. */
+    toolPhase?: 'operation' | 'input-round';
     /** Validated MCP transport attribution, available only on MCP tool calls. */
     mcp?: {
         era: 'modern' | 'legacy';
@@ -81,6 +83,11 @@ export interface RequestEvent {
     resultSize: number | null;
     /** Serialised byte length of the result. */
     responseBytes: number;
+    /**
+     * Set when the result could not be serialised at all (bigint, a cycle) —
+     * distinguishes `responseBytes: 0` "nothing returned" from "unmeasurable".
+     */
+    resultUnserializable?: boolean;
     /** Resolved user id, when authenticated. */
     userId?: string;
     /** How the caller authenticated, when the app records it on the context. */

package/dist/observability/event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/observability/event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,MAAM,EAAE,eAAe,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,6EAA6E;IAC7E,GAAG,CAAC,EAAE;QACJ,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kFAAkF;QAClF,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,4CAA4C;QAC5C,OAAO,CAAC,EAAE,gBAAgB,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;QAC/E,8CAA8C;QAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,uEAAuE;IACvE,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,mDAAmD;IACnD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,SAAS,EAAE,IAAI,CAAC;CACjB"}
+{"version":3,"file":"event.d.ts","sourceRoot":"","sources":["../../src/observability/event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,mCAAmC;IACnC,MAAM,EAAE,eAAe,CAAC;IACxB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,mCAAmC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,SAAS,CAAC,EAAE,WAAW,GAAG,aAAa,CAAC;IACxC,6EAA6E;IAC7E,GAAG,CAAC,EAAE;QACJ,GAAG,EAAE,QAAQ,GAAG,QAAQ,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,kFAAkF;QAClF,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/C,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,MAAM,CAAC;QACjB,4CAA4C;QAC5C,OAAO,CAAC,EAAE,gBAAgB,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;QAC/E,8CAA8C;QAC9C,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kCAAkC;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,kCAAkC;IAClC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,SAAS,CAAC;IACxB,uEAAuE;IACvE,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,mDAAmD;IACnD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,SAAS,EAAE,IAAI,CAAC;CACjB"}

package/dist/observability/index.d.ts

@@ -6,7 +6,7 @@
  * framework-owned HTTP completion plus canonical tool hooks into independent
  * sinks.
  */
-export { createObservability, type HttpRequestCompletion, type HttpRequestObserver, type Observability, type ObservabilityConfig, type RequestEventSinkConfig, type RequestObservabilityConfig, } from './audit';
+export { createObservability, type HttpRequestCompletion, type HttpRequestObserver, type Observability, type ObservabilityConfig, type RequestEventSinkConfig, type RequestObservabilityConfig, type SinkDrop, type SinkDropReason, type SinkError, } from './audit';
 export { getRequestContext, getTraceId, getUserId, type RequestContext, runWithRequestContext, setRequestDimensions, setRequestEndpoint, setRequestError, setRequestUser, type WrapRequestContextOptions, wrapInRequestContext, } from './context';
 export type { RequestEvent } from './event';
 export { type JsonValue, measureSize, redact, type SanitizeOptions, type SizeMeasure, sanitizePayload, truncatePreview, } from './sanitize';

package/dist/observability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,GAChC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,cAAc,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,KAAK,yBAAyB,EAC9B,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,WAAW,EACX,MAAM,EACN,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EACL,mBAAmB,EACnB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,SAAS,GACf,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,SAAS,EACT,KAAK,cAAc,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,KAAK,yBAAyB,EAC9B,oBAAoB,GACrB,MAAM,WAAW,CAAC;AACnB,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EACL,KAAK,SAAS,EACd,WAAW,EACX,MAAM,EACN,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,eAAe,EACf,eAAe,GAChB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,yBAAyB,EACzB,mBAAmB,EACnB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC"}

package/dist/observability/index.js

@@ -1,3 +1,9 @@
+import {
+  measureSize,
+  redact,
+  sanitizePayload,
+  truncatePreview
+} from "../index-8ekq6res.js";
 import {
   childSpan,
   createTraceContext,
@@ -6,7 +12,6 @@ import {
   getTraceId,
   getUserId,
   isRecord,
-  isUnsafeKey,
   parseTraceparent,
   recordedErrorMessage,
   resolvePropagationContext,
@@ -17,88 +22,7 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-yh0p5ddn.js";
-
-// src/observability/sanitize.ts
-var DEFAULT_SENSITIVE_KEYS = /(password|passwd|pwd|secret|token|apikey|api[-_ ]?key|auth|authorization|bearer|session|cookie|init[-_ ]?data|credential|private[-_ ]?key)/i;
-var DEFAULT_MAX_BYTES = 16000;
-var DEFAULT_MAX_DEPTH = 20;
-var MASK = "[redacted]";
-function redact(value, options = {}) {
-  const sensitive = options.sensitiveKeys ?? DEFAULT_SENSITIVE_KEYS;
-  const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
-  const ancestors = new Set;
-  const walk = (input, depth) => {
-    if (depth > maxDepth)
-      return "[max depth]";
-    if (input === null || input === undefined)
-      return null;
-    if (typeof input === "string" || typeof input === "number" || typeof input === "boolean") {
-      return input;
-    }
-    if (input instanceof Uint8Array || input instanceof ArrayBuffer) {
-      return { _type: "binary", size: input.byteLength };
-    }
-    if (input instanceof Blob) {
-      return { _type: "blob", size: input.size, mime: input.type };
-    }
-    if (typeof FormData !== "undefined" && input instanceof FormData) {
-      return { _type: "formdata", keys: [...input.keys()] };
-    }
-    if (Array.isArray(input)) {
-      if (ancestors.has(input))
-        return "[circular]";
-      ancestors.add(input);
-      const result = input.map((item) => walk(item, depth + 1));
-      ancestors.delete(input);
-      return result;
-    }
-    if (isRecord(input)) {
-      if (ancestors.has(input))
-        return "[circular]";
-      ancestors.add(input);
-      const out = {};
-      for (const [key, val] of Object.entries(input)) {
-        if (isUnsafeKey(key))
-          continue;
-        out[key] = sensitive.test(key) ? MASK : walk(val, depth + 1);
-      }
-      ancestors.delete(input);
-      return out;
-    }
-    return String(input);
-  };
-  return walk(value, 0);
-}
-function truncatePreview(value, maxBytes = DEFAULT_MAX_BYTES) {
-  const json = JSON.stringify(value);
-  const bytes = Buffer.byteLength(json, "utf8");
-  if (bytes <= maxBytes)
-    return value;
-  return {
-    _truncated: true,
-    _originalBytes: bytes,
-    preview: `${json.slice(0, maxBytes)}…`
-  };
-}
-function sanitizePayload(value, options = {}) {
-  if (value === undefined || value === null)
-    return null;
-  return truncatePreview(redact(value, options), options.maxBytes ?? DEFAULT_MAX_BYTES);
-}
-function measureSize(value) {
-  if (value === undefined || value === null) {
-    return { resultSize: null, responseBytes: 0 };
-  }
-  const responseBytes = Buffer.byteLength(JSON.stringify(value), "utf8");
-  if (Array.isArray(value)) {
-    return { resultSize: value.length, responseBytes };
-  }
-  if (isRecord(value) && Array.isArray(value.items) && "nextCursor" in value) {
-    return { resultSize: value.items.length, responseBytes };
-  }
-  return { resultSize: null, responseBytes };
-}
+} from "../index-ee621cmy.js";
 
 // src/observability/audit.ts
 function toolErrorMessage(result) {
@@ -139,24 +63,81 @@ function readMcpContext(value) {
     ...round !== undefined && { round }
   };
 }
-function createEmitter(config) {
-  return async (event) => {
+var DEFAULT_MAX_PENDING = 1000;
+function invokeIsolated(callback) {
+  if (!callback)
+    return;
+  Promise.resolve().then(callback).catch(() => {});
+}
+function createSinkManager(config) {
+  const maxPending = config.maxPending ?? DEFAULT_MAX_PENDING;
+  if (!Number.isSafeInteger(maxPending) || maxPending <= 0) {
+    throw new TypeError("Observability maxPending must be a positive safe integer");
+  }
+  let sequence = 0;
+  let closed = false;
+  let closePromise;
+  const preparing = new Map;
+  const writes = new Map;
+  const reportError = (error, event) => {
+    invokeIsolated(config.onSinkError ? () => config.onSinkError?.({ error, ...event !== undefined && { event } }) : undefined);
+  };
+  const reportDrop = (reason, event) => {
+    invokeIsolated(config.onDrop ? () => config.onDrop?.({ reason, event, pending: writes.size }) : undefined);
+  };
+  const admit = (id, event) => {
     try {
       if (config.filter && !config.filter(event))
         return;
-      await config.write(event);
-    } catch {}
+    } catch (error) {
+      reportError(error, event);
+      return;
+    }
+    if (writes.size >= maxPending) {
+      reportDrop("capacity", event);
+      return;
+    }
+    const write = Promise.resolve().then(() => config.write(event)).catch((error) => reportError(error, event)).finally(() => writes.delete(id));
+    writes.set(id, write);
+  };
+  const awaitGeneration = async (boundary) => {
+    const through = (values) => [...values].filter(([id]) => id <= boundary).map(([, value]) => value);
+    await Promise.allSettled(through(preparing));
+    await Promise.allSettled(through(writes));
+  };
+  return {
+    submit(produce) {
+      const id = ++sequence;
+      if (closed) {
+        Promise.resolve().then(produce).then((event) => reportDrop("closed", event)).catch((error) => reportError(error));
+        return;
+      }
+      const preparation = Promise.resolve().then(produce).then((event) => admit(id, event)).catch((error) => reportError(error)).finally(() => preparing.delete(id));
+      preparing.set(id, preparation);
+    },
+    flush() {
+      return awaitGeneration(sequence);
+    },
+    close() {
+      if (closePromise)
+        return closePromise;
+      closed = true;
+      closePromise = awaitGeneration(sequence);
+      return closePromise;
+    }
   };
 }
 function createObservability(config) {
+  const requestManager = config.request ? createSinkManager(config.request) : undefined;
+  const toolManager = config.tools ? createSinkManager(config.tools) : undefined;
+  let closePromise;
   const request = config.request ? {
     includePayload: config.request.includePayload ?? false,
     complete: ({ context, statusCode, durationMs, payload }) => {
       const requestConfig = config.request;
       if (!requestConfig)
         return;
-      const emit = createEmitter(requestConfig);
-      (async () => {
+      requestManager?.submit(async () => {
         let body;
         if (payload) {
           try {
@@ -165,7 +146,7 @@ function createObservability(config) {
             body = undefined;
           }
         }
-        await emit({
+        return {
           source: context.source,
           method: context.method,
           path: context.path,
@@ -194,58 +175,73 @@ function createObservability(config) {
           ipAddress: context.ipAddress,
           userAgent: context.userAgent,
           startedAt: new Date(Date.now() - durationMs)
-        });
-      })();
+        };
+      });
     }
   } : undefined;
   const toolCall = config.tools ? {
     afterToolCall: ({ toolName, args, result, durationMs, context, endpoint, error }) => {
-      const toolConfig = config.tools;
-      if (!toolConfig)
-        return;
-      const emit = createEmitter(toolConfig);
-      const requestCtx = getRequestContext();
-      const span = requestCtx ? childSpan(requestCtx.trace) : createTraceContext();
-      const measure = result.ok ? measureSize(result.data) : { resultSize: null, responseBytes: 0 };
-      const mcp = context.source === "mcp" ? readMcpContext(context.mcp) : undefined;
-      emit({
-        source: context.source,
-        method: "TOOL",
-        httpMethod: endpoint.method,
-        path: `/${context.source}/${toolName}`,
-        serviceName: endpoint.serviceName,
-        action: endpoint.key,
-        ...requestCtx?.dimensions !== undefined && {
-          dimensions: requestCtx.dimensions
-        },
-        toolName,
-        ...mcp !== undefined && { mcp },
-        traceId: span.traceId,
-        spanId: span.spanId,
-        parentSpanId: span.parentSpanId,
-        ok: result.ok,
-        statusCode: result.ok ? 200 : 400,
-        durationMs,
-        errorCode: result.ok ? undefined : result.code,
-        errorMessage: result.ok ? undefined : auditErrorMessage(result, error),
-        ...!result.ok && result.details !== undefined && {
-          errorDetail: sanitizePayload(result.details, toolConfig.sanitize)
-        },
-        payload: sanitizePayload(args, toolConfig.sanitize),
-        resultSize: measure.resultSize,
-        responseBytes: measure.responseBytes,
-        userId: readString(context.userId),
-        authMethod: readString(context.authMethod),
-        clientId: readString(context.clientId),
-        ipAddress: readString(context.ipAddress),
-        userAgent: readString(context.userAgent),
-        startedAt: new Date(Date.now() - durationMs)
-      });
+      try {
+        const toolConfig = config.tools;
+        if (!toolConfig)
+          return;
+        const requestCtx = getRequestContext();
+        const span = requestCtx ? childSpan(requestCtx.trace) : createTraceContext();
+        const measure = result.ok ? measureSize(result.data) : { resultSize: null, responseBytes: 0 };
+        const mcp = context.source === "mcp" ? readMcpContext(context.mcp) : undefined;
+        const toolPhase = mcp?.outcome === "input_required" ? "input-round" : "operation";
+        toolManager?.submit(() => ({
+          source: context.source,
+          method: "TOOL",
+          httpMethod: endpoint.method,
+          path: `/${context.source}/${toolName}`,
+          serviceName: endpoint.serviceName,
+          action: endpoint.key,
+          ...requestCtx?.dimensions !== undefined && {
+            dimensions: requestCtx.dimensions
+          },
+          toolName,
+          toolPhase,
+          ...mcp !== undefined && { mcp },
+          traceId: span.traceId,
+          spanId: span.spanId,
+          parentSpanId: span.parentSpanId,
+          ok: result.ok,
+          statusCode: result.ok ? 200 : 400,
+          durationMs,
+          errorCode: result.ok ? undefined : result.code,
+          errorMessage: result.ok ? undefined : auditErrorMessage(result, error),
+          ...!result.ok && result.details !== undefined && {
+            errorDetail: sanitizePayload(result.details, toolConfig.sanitize)
+          },
+          payload: sanitizePayload(args, toolConfig.sanitize),
+          resultSize: measure.resultSize,
+          responseBytes: measure.responseBytes,
+          ..."unserializable" in measure && measure.unserializable && { resultUnserializable: true },
+          userId: readString(context.userId),
+          authMethod: readString(context.authMethod),
+          clientId: readString(context.clientId),
+          ipAddress: readString(context.ipAddress),
+          userAgent: readString(context.userAgent),
+          startedAt: new Date(Date.now() - durationMs)
+        }));
+      } catch {}
     }
   } : undefined;
   return {
     ...request && { request },
-    toolCall: toolCall ?? {}
+    toolCall: toolCall ?? {},
+    async flush() {
+      await Promise.all([requestManager?.flush(), toolManager?.flush()]);
+    },
+    close() {
+      if (!closePromise) {
+        closePromise = Promise.all([requestManager?.close(), toolManager?.close()]).then(() => {
+          return;
+        });
+      }
+      return closePromise;
+    }
   };
 }
 export {

package/dist/observability/sanitize.d.ts

@@ -4,7 +4,12 @@ export type JsonValue = string | number | boolean | null | JsonValue[] | {
 };
 /** Tuning for `redact` / `sanitizePayload`. */
 export interface SanitizeOptions {
-    /** Keys whose VALUE is masked. Default covers passwords, tokens, secrets… */
+    /**
+     * Keys whose VALUE is masked, tested against the raw key name. When omitted,
+     * the default matcher splits the key into words (camelCase, `-`, `_`, spaces)
+     * and masks it when a word IS a secret term — so `sessionToken` and
+     * `X-Api-Key` are masked while `authorId` and `sessionCount` survive.
+     */
     sensitiveKeys?: RegExp;
     /** Cap on the serialised payload — anything larger collapses to a preview. Default 16 KB. */
     maxBytes?: number;
@@ -17,6 +22,8 @@ export interface SizeMeasure {
     resultSize: number | null;
     /** Serialised byte length. */
     responseBytes: number;
+    /** Set when the value cannot be serialised at all (bigint, a cycle). */
+    unserializable?: true;
 }
 /**
  * Deep-copy `value` into a JSON-safe shape: secret-named keys masked, binary

package/dist/observability/sanitize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/observability/sanitize.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC;CACvB;AASD;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,SAAS,CAoD/E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,SAAoB,GAAG,SAAS,CASzF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,GAC5B,SAAS,GAAG,IAAI,CAGlB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAcvD"}
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/observability/sanitize.ts"],"names":[],"mappings":"AAOA,8EAA8E;AAC9E,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,WAAW;IAC1B,wEAAwE;IACxE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,cAAc,CAAC,EAAE,IAAI,CAAC;CACvB;AAwED;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,GAAE,eAAoB,GAAG,SAAS,CA4F/E;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,SAAoB,GAAG,SAAS,CAgBzF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,eAAoB,GAC5B,SAAS,GAAG,IAAI,CAOlB;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAqBvD"}

package/dist/observability/trace.d.ts

@@ -20,6 +20,8 @@ export interface TraceContext {
     tracestate?: string;
     /** Valid bounded W3C baggage, retained for propagation only. */
     baggage?: string;
+    /** W3C trace flags byte, preserved end to end (for example `00` or `01`). */
+    traceFlags?: string;
 }
 /** A fresh root trace — a new trace id, a new span id, no parent. */
 export declare function createTraceContext(): TraceContext;
@@ -30,7 +32,7 @@ export declare function createTraceContext(): TraceContext;
  * missing or malformed header.
  */
 export declare function parseTraceparent(header: string | null | undefined): TraceContext | null;
-/** Render a `TraceContext` as a `traceparent` header value (sampled flag `01`). */
+/** Render a `TraceContext` with its actual W3C trace-flags byte. */
 export declare function formatTraceparent(ctx: TraceContext): string;
 /**
  * The trace for an incoming request — the caller's `traceparent` continued

package/dist/observability/trace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/observability/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAaD,qEAAqE;AACrE,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CASvF;AAED,mFAAmF;AACnF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAQ5D;AAuBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,QAAQ,CAAC,EAAE,YAAY,GACtB,YAAY,CAgBd"}
+{"version":3,"file":"trace.d.ts","sourceRoot":"","sources":["../../src/observability/trace.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAaD,qEAAqE;AACrE,wBAAgB,kBAAkB,IAAI,YAAY,CAEjD;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,GAAG,IAAI,CAmBvF;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,GAAG,MAAM,CAE3D;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,CAE9D;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,YAAY,CAS5D;AAuBD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,EAC7C,QAAQ,CAAC,EAAE,YAAY,GACtB,YAAY,CAkBd"}

package/dist/react/cache-bridge.d.ts

@@ -40,6 +40,8 @@ export interface CacheBridgeConfig<TEvents> {
     handlers: CacheBridgeHandlers<TEvents>;
     /** Window (ms) after `markFresh()` during which `isFresh()` returns true. Default 500. */
     freshWindow?: number;
+    /** Maximum remembered freshness keys. Oldest entries are evicted first. Default 1,000. */
+    maxFreshKeys?: number;
 }
 export interface CacheBridge {
     connect(): void;
@@ -47,6 +49,8 @@ export interface CacheBridge {
     /** Mark a query key as just-mutated. Call from a mutation's onSuccess so
      *  handlers can skip a stale socket echo via `ctx.isFresh()`. */
     markFresh(key: QueryKey): void;
+    /** Forget every freshness marker without changing socket subscriptions. */
+    clearFresh(): void;
 }
 export declare function createCacheBridge<TEvents>(config: CacheBridgeConfig<TEvents>): CacheBridge;
 export {};

package/dist/react/cache-bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-bridge.d.ts","sourceRoot":"","sources":["../../src/react/cache-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEnE,wEAAwE;AACxE,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;CACjF;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,gFAAgF;IAChF,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;CACjC;AAED,oEAAoE;AACpE,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC;AAE3E,MAAM,MAAM,kBAAkB,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAE7F,MAAM,MAAM,mBAAmB,CAAC,OAAO,IAAI;KACxC,CAAC,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC;AAEF,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,WAAW,EAAE,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC;IAC/C,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,IAAI,CAAC;IACnB;qEACiE;IACjE,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;CAChC;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,WAAW,CA8C1F"}
+{"version":3,"file":"cache-bridge.d.ts","sourceRoot":"","sources":["../../src/react/cache-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAEnE,wEAAwE;AACxE,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC,EAAE,CAAC,CAAC,SAAS,MAAM,OAAO,GAAG,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC;CACjF;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,WAAW,CAAC;IACzB,gFAAgF;IAChF,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC;CACjC;AAED,oEAAoE;AACpE,KAAK,YAAY,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC;AAE3E,MAAM,MAAM,kBAAkB,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,kBAAkB,KAAK,IAAI,CAAC;AAE7F,MAAM,MAAM,mBAAmB,CAAC,OAAO,IAAI;KACxC,CAAC,IAAI,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,EAAE,kBAAkB,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;CAC7E,CAAC;AAEF,MAAM,WAAW,iBAAiB,CAAC,OAAO;IACxC,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACnC;;;;;OAKG;IACH,WAAW,EAAE,WAAW,GAAG,CAAC,MAAM,WAAW,CAAC,CAAC;IAC/C,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACvC,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,IAAI,IAAI,CAAC;IAChB,UAAU,IAAI,IAAI,CAAC;IACnB;qEACiE;IACjE,SAAS,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC/B,2EAA2E;IAC3E,UAAU,IAAI,IAAI,CAAC;CACpB;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,WAAW,CAsF1F"}