@agent-team-foundation/first-tree-hub 0.9.3 → 0.9.6

package/dist/index.mjs

@@ -1,6 +1,6 @@
-import "./logger-core-2yeIU1fc-B-__AsQO.mjs";
-import { a as resolveAccessToken, n as ensureFreshAccessToken, o as resolveServerUrl, r as ensureFreshAdminToken } from "./bootstrap-CWcBzk6C.mjs";
-import "./observability-CJzDFY_G-CmvgUuzc.mjs";
-import { A as printResults, B as SdkError, C as checkDatabase, D as checkServerHealth, E as checkServerConfig, F as stopPostgres, I as ClientRuntime, L as createOwner, M as status, N as ensurePostgres, O as checkServerReachable, P as isDockerAvailable, R as hasUser, S as checkClientConfig, T as checkNodeVersion, _ as isServiceSupported, b as runMigrations, c as promptMissingFields, d as onboardCheck, f as onboardCreate, g as installClientService, h as getClientServiceStatus, i as startServer, j as blank, k as checkWebSocket, l as formatCheckReport, m as runHomeMigration, o as isInteractive, s as promptAddAgent, v as resolveCliInvocation, w as checkDocker, x as checkAgentConfigs, y as uninstallClientService, z as FirstTreeHubSDK } from "./core-Y7M3d2aZ.mjs";
+import "./observability-DV_fQKqV-CuLWzBxQ.mjs";
+import { A as checkServerHealth, B as blank, C as runMigrations, D as checkDocker, E as checkDatabase, F as isDockerAvailable, G as SdkError, I as stopPostgres, L as ClientRuntime, M as checkWebSocket, N as printResults, O as checkNodeVersion, P as ensurePostgres, R as createOwner, S as uninstallClientService, T as checkClientConfig, U as status, W as FirstTreeHubSDK, _ as runHomeMigration, b as isServiceSupported, d as promptMissingFields, f as formatCheckReport, h as onboardCreate, j as checkServerReachable, k as checkServerConfig, l as isInteractive, m as onboardCheck, s as startServer, u as promptAddAgent, v as getClientServiceStatus, w as checkAgentConfigs, x as resolveCliInvocation, y as installClientService, z as hasUser } from "./core-USyOOh7y.mjs";
+import "./logger-core-BTmvdflj-DhdipBkV.mjs";
+import { a as resolveAccessToken, n as ensureFreshAccessToken, o as resolveServerUrl, r as ensureFreshAdminToken } from "./bootstrap-DWifXj9b.mjs";
 import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-GlaczcVf.mjs";
 export { ClientRuntime, FirstTreeHubSDK, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, runHomeMigration, runMigrations, startServer, status, stopPostgres, uninstallClientService };

package/dist/{logger-core-2yeIU1fc-B-__AsQO.mjs → logger-core-BTmvdflj-DhdipBkV.mjs}

@@ -1,6 +1,6 @@
 import { z } from "zod";
 import { Writable } from "node:stream";
-//#region ../shared/dist/logger-core-2yeIU1fc.mjs
+//#region ../shared/dist/logger-core-BTmvdflj.mjs
 /**
 * Logger core — format / level primitives shared between server and client.
 *
@@ -66,6 +66,39 @@ const SKIP_KEYS = new Set([
 	"hostname",
 	"v"
 ]);
+/**
+* Pino `redact.paths` entries applied to every root logger in Hub. Keeps the
+* list short on purpose — pino's redact walks each path on every log call, so
+* we target obvious sensitive field names plus a narrow set of nested forms
+* (`*.foo` matches a single nesting level in pino v9).
+*
+* Values matching these paths are replaced with the censor string `[REDACTED]`.
+*/
+const LOG_REDACT_PATHS = [
+	"password",
+	"*.password",
+	"token",
+	"*.token",
+	"accessToken",
+	"*.accessToken",
+	"refreshToken",
+	"*.refreshToken",
+	"jwt",
+	"*.jwt",
+	"secret",
+	"*.secret",
+	"apiKey",
+	"*.apiKey",
+	"api_key",
+	"*.api_key",
+	"credentials",
+	"*.credentials",
+	"authorization",
+	"*.authorization",
+	"*.headers.cookie",
+	"*.headers.authorization"
+];
+const LOG_REDACT_CENSOR = "[REDACTED]";
 function formatPrettyEntry(json) {
 	const obj = JSON.parse(json);
 	const level = obj.level;
@@ -92,20 +125,22 @@ function formatLocalTime() {
 	return `${d.toLocaleDateString("sv-SE")} ${d.toLocaleTimeString("en-GB", { hour12: false })}`;
 }
 function createLoggerOutputStream(options) {
+	const getDest = options.getDestination ?? (() => process.stderr);
 	return new Writable({ write(chunk, _, callback) {
 		const text = chunk.toString();
+		const dest = getDest();
 		try {
-			if (options.getFormat() === "pretty") process.stdout.write(formatPrettyEntry(text));
-			else process.stdout.write(text);
+			if (options.getFormat() === "pretty") dest.write(formatPrettyEntry(text));
+			else dest.write(text);
 			if (options.onJsonEntry) try {
 				const obj = JSON.parse(text);
 				options.onJsonEntry(obj);
 			} catch {}
 		} catch {
-			process.stdout.write(text);
+			dest.write(text);
 		}
 		callback();
 	} });
 }
 //#endregion
-export { logLevelSchema as a, logFormatSchema as i, createLoggerOutputStream as n, parseLogLevel as o, formatLocalTime as r, SKIP_KEYS as t };
+export { createLoggerOutputStream as a, logFormatSchema as c, SKIP_KEYS as i, logLevelSchema as l, LOG_REDACT_CENSOR as n, formatLocalTime as o, LOG_REDACT_PATHS as r, formatPrettyEntry as s, LOG_LEVELS as t, parseLogLevel as u };

package/dist/{observability-CJzDFY_G-CmvgUuzc.mjs → observability-DV_fQKqV-CuLWzBxQ.mjs}

@@ -1,5 +1,6 @@
 import { a as diag, d as __exportAll, f as __require, l as __commonJSMin, m as __toESM, n as init_esm$2, o as context, p as __toCommonJS, r as trace, s as SpanStatusCode, t as esm_exports$2, u as __esmMin } from "./esm-CYu4tXXn.mjs";
-import { n as createLoggerOutputStream, o as parseLogLevel, r as formatLocalTime, t as SKIP_KEYS } from "./logger-core-2yeIU1fc-B-__AsQO.mjs";
+import { a as createLoggerOutputStream, i as SKIP_KEYS, n as LOG_REDACT_CENSOR, o as formatLocalTime, r as LOG_REDACT_PATHS, u as parseLogLevel } from "./logger-core-BTmvdflj-DhdipBkV.mjs";
+import { Writable } from "node:stream";
 import * as fs from "fs";
 import * as path from "path";
 import * as zlib from "zlib";
@@ -33466,7 +33467,7 @@ var require_src = /* @__PURE__ */ __commonJSMin(((exports) => {
 	});
 }));
 //#endregion
-//#region ../server/dist/observability-CJzDFY_G.mjs
+//#region ../server/dist/observability-DV_fQKqV.mjs
 var import_pino = /* @__PURE__ */ __toESM(require_pino(), 1);
 var import_otel = /* @__PURE__ */ __toESM(require_otel(), 1);
 init_esm$2();
@@ -33540,7 +33541,11 @@ const outputStream = createLoggerOutputStream({
 });
 const rootLogger = (0, import_pino.default)({
 	level: _level,
-	timestamp: () => `,"time":"${formatLocalTime()}"`
+	timestamp: () => `,"time":"${formatLocalTime()}"`,
+	redact: {
+		paths: [...LOG_REDACT_PATHS],
+		censor: LOG_REDACT_CENSOR
+	}
 }, outputStream);
 if (initialLevel.fellBack) rootLogger.warn({ envValue: process.env.FIRST_TREE_HUB_LOG_LEVEL }, "invalid FIRST_TREE_HUB_LOG_LEVEL; falling back to info");
 /** Create a module-scoped child logger. Module name is shown as `[Module]` in pretty output. */

package/dist/{observability-Xi-sEZI7.mjs → observability-hDEdrmMS.mjs}

@@ -1,4 +1,4 @@
 import "./esm-CYu4tXXn.mjs";
-import "./logger-core-2yeIU1fc-B-__AsQO.mjs";
-import { m as shutdownTelemetry, s as initTelemetry } from "./observability-CJzDFY_G-CmvgUuzc.mjs";
+import { m as shutdownTelemetry, s as initTelemetry } from "./observability-DV_fQKqV-CuLWzBxQ.mjs";
+import "./logger-core-BTmvdflj-DhdipBkV.mjs";
 export { initTelemetry, shutdownTelemetry };