Module workspace_diagnostics 

Log-only identifiers and redaction for execution/Workspace diagnostics. Privacy-preserving execution/Workspace correlation; never authority.

Structs

WorkspaceLogContext

Functions

annotated_error

error_chain

fence_fingerprint

record_current_error

Used inside an inherited Workspace span before an existing API flattens a typed filesystem/Project error. It does not create another operation ID.

record_failure

Preserve the source chain before callers flatten an I/O error into ToolError. A returned number can be shown to the user and searched in server logs.

redacted

Only fixed diagnostic labels enter default logs. Arbitrary Display text can contain a relative path, an escaped JSON value, or a credential without any recognizable delimiter, so a best-effort path scanner cannot make it safe. The opaque fingerprint correlates the original detail without disclosing it.

safe_identifier

scope_fingerprint