@bymax-one/nest-logger 1.4.0 → 1.4.2

package/CHANGELOG.md

@@ -11,6 +11,92 @@ heading here.
 
 ## [Unreleased]
 
+## [1.4.2] - 2026-10-30
+
+No breaking changes. Dependency and build-tooling maintenance only. No source file under `src/` changes and the
+runtime JavaScript in `dist/` is byte-identical to `1.4.1`.
+
+### Security
+
+- Raise the pnpm override floors for transitive devDependencies that resolved to versions
+  with new advisories: `body-parser` `^2.4.0` (GHSA-27r3-jxmh-p828, DoS on trailing bytes after a
+  compressed body), `multer` `^2.5.0` (GHSA-q7qp-rjg7-q26m, DoS from a pending async
+  `fileFilter`), `qs` `^6.16.1` (GHSA-6pq8-jhm2-2vcw, `qs.stringify` DoS) and `zod` `^4.6.6`
+  (GHSA-mrhx-c7xc-m3w5, memory exhaustion on oversized collections). Dev-only: the published
+  package has zero runtime dependencies.
+- Ignore GHSA-gcqx-w48m-w2h4 (`deepmerge` <= 4.3.1, prototype poisoning in `mergeObject`) in
+  `osv-scanner.toml` until 2027-01-27. No patched release exists, and `deepmerge` is reached
+  only through `jest-config`, a devDependency. Remove the entry when a fixed `deepmerge` ships
+  or jest drops it.
+
+### Changed
+
+- Build with `tsup` 9 (devDependency, was 8.5). The published `.mjs` and `.cjs` bundles are
+  byte-identical; the `.d.ts` and `.d.cts` files re-emit type exports as a separate
+  `export type { … }` statement instead of inline `type` modifiers, which declares the same
+  public surface. `attw` reports no problems and the bundle-size budgets hold.
+- Resolve `@opentelemetry/api` to 1.10.0 in the lockfile (was 1.9.1), so the test suite runs
+  against the current API release. The `^1.9.0` range in `package.json`, devDependency and peer
+  alike, is unchanged.
+- Bump `github/codeql-action/upload-sarif` to 4.39.1 in the Scorecard workflow. CI only; nothing
+  ships.
+
+### Documentation
+
+- The runtime bundles are unchanged, and the type declarations were regenerated by `tsup` 9.
+- The 1.0.1 and 1.0.8 release notes are corrected: 1.0.8 now records the id-safe charset
+  validation of inbound `x-request-id` and tenant ids that it already shipped.
+
+#### Apply to a consumer
+
+No action required. There is no new public API, no peer range changed, and the runtime JavaScript
+is byte-identical to `1.4.1`; only the grouping of type exports in the declaration files differs.
+
+## [1.4.1] - 2026-10-23
+
+No breaking changes.
+
+### Added
+
+- **`PinoUnexpectedErrorSink` — the cause of a nest-core `500`, logged.** When nest-core's exception
+  filter turns an unexpected error into `500 BYMAX_INTERNAL_ERROR`, the access-log line carries the
+  cause only when this package's HTTP interceptor saw the error. An error raised before it (in a
+  guard or a middleware), or any error with HTTP logging off, left a synthetic
+  `Error("GET /url → 500")` or no line at all. nest-core 1.6.2 adds an
+  optional `BYMAX_UNEXPECTED_ERROR_SINK` token. This class implements it: one `error` entry per
+  unexpected error, keyed `HTTP_UNEXPECTED_ERROR`, with the original error's type, message, stack
+  and cause chain, plus `method`, the route template (`route`, never the raw URL) and
+  `correlationId`. It adds nothing else from the request — no body, headers or query string — and
+  `record()` never throws. The error keeps its own enumerable fields, as on every `err` entry, so
+  request data an error object carries itself is logged under the usual key-name redaction.
+
+  This package still does not depend on nest-core. The class matches nest-core's contract by
+  shape, and the types it implements are exported as `IUnexpectedErrorSink` and
+  `UnexpectedErrorReport`.
+
+  `HTTP_UNEXPECTED_ERROR` joins `RESERVED_LOG_KEYS`. An application that already writes that key
+  for its own events should rename them, or its queries will mix the two.
+
+#### Apply to a derived backend
+
+Requires `@bymax-one/nest-core` 1.6.2 or later. Nothing changes until you bind the sink: the token
+is optional and unbound by default. Bind it from a `@Global()` module imported next to
+`BymaxLoggerModule`:
+
+```typescript
+@Global()
+@Module({
+  providers: [{ provide: BYMAX_UNEXPECTED_ERROR_SINK, useClass: PinoUnexpectedErrorSink }],
+  exports: [BYMAX_UNEXPECTED_ERROR_SINK]
+})
+export class UnexpectedErrorSinkModule {}
+```
+
+`BYMAX_UNEXPECTED_ERROR_SINK` comes from `@bymax-one/nest-core` and `PinoUnexpectedErrorSink` from
+`@bymax-one/nest-logger`. To verify, make a route throw a plain `Error`: the response stays
+`500 BYMAX_INTERNAL_ERROR`, and the log gains one `HTTP_UNEXPECTED_ERROR` line next to the
+access-log line.
+
 ## [1.4.0] - 2026-08-30
 
 No breaking changes. Nothing you have wired stops working, and no export was renamed.
@@ -1654,8 +1740,9 @@ identical to `1.0.8`, and nothing changed but the version number.
 
 ## [1.0.8] - 2026-08-10
 
-Remediation of a local audit's redaction, attribution and correlation-id findings. No API
-changed; the fixes are in the default redact set, the acting-user resolution and the docs.
+Remediation of a local audit's redaction, attribution and correlation-id findings. The public
+API is unchanged; the fixes are in the default redact set, the acting-user resolution, the
+correlation-id validation and the docs.
 
 ### Fixed
 
@@ -1667,6 +1754,14 @@ changed; the fixes are in the default redact set, the acting-user resolution and
   exception filter now resolve the acting user as `sub ?? id`, so a JWT principal (every
   `@bymax-one/nest-auth` token) is attributed to its subject rather than an ORM `id` when a
   principal carries both.
+- **Inbound correlation and tenant ids are confined to an id-safe charset.** The inbound
+  `x-request-id` and tenant-id header values are now accepted only when they are drawn from an
+  id-safe character set and fit the length bound; anything else (control bytes, whitespace,
+  markup characters) is rejected. A rejected request id is replaced by a generated one (when
+  `shouldGenerateRequestId` is on) and a rejected tenant id is omitted. The request id is echoed
+  on the `x-request-id` response header and both ids are stored in the log context, so this keeps
+  a client from planting a control byte or markup fragment in the logs and the header of every
+  request it makes.
 
 ### Documentation
 
@@ -1911,11 +2006,11 @@ published `dist/` is identical — no runtime behaviour changes for consumers.
   Dev-only: the published package has zero runtime dependencies.
 - Force `qs` to `^6.15.3` (via `pnpm.overrides`) to clear GHSA-q8mj-m7cp-5q26
   (`qs.stringify` DoS). `typed-rest-client`, pulled in by Stryker, pins `qs` at
-  the affected `6.15.1` exactly, so no dependency refresh could resolve it
+  the affected `6.15.1` exactly, so no dependency refresh could resolve it.
 - Pin every third-party and GitHub-owned action to a full commit SHA, with the
   release tag kept as a trailing comment so Dependabot can still bump them. The
   org's own `bymaxone/.github` reusable workflows and composite action stay on
-  the `@v1` moving tag by design, so shared-pipeline fixes keep propagating
+  the `@v1` moving tag by design, so shared-pipeline fixes keep propagating.
 
 ### Changed
 
@@ -1981,7 +2076,9 @@ published `dist/` is identical — no runtime behaviour changes for consumers.
 - Professional CI suite: `ci.yml`, `bench.yml`, `codeql.yml`, `scorecard.yml`,
   `release.yml`, Dependabot, and issue templates
 
-[Unreleased]: https://github.com/bymaxone/nest-logger/compare/v1.4.0...HEAD
+[Unreleased]: https://github.com/bymaxone/nest-logger/compare/v1.4.2...HEAD
+[1.4.2]: https://github.com/bymaxone/nest-logger/compare/v1.4.1...v1.4.2
+[1.4.1]: https://github.com/bymaxone/nest-logger/compare/v1.4.0...v1.4.1
 [1.4.0]: https://github.com/bymaxone/nest-logger/compare/v1.3.1...v1.4.0
 [1.3.1]: https://github.com/bymaxone/nest-logger/compare/v1.3.0...v1.3.1
 [1.3.0]: https://github.com/bymaxone/nest-logger/compare/v1.2.9...v1.3.0

package/README.md

@@ -411,6 +411,48 @@ flushed** is reported as the success it was — the server completed and flushed
 peer read it is not knowable from the server side. What this catches is the case that matters
 operationally: the slow upstream, the load-balancer timeout, the cancelled request.
 
+#### Unexpected errors behind `@bymax-one/nest-core`
+
+When nest-core's exception filter answers, an unexpected error becomes a fixed
+`500 BYMAX_INTERNAL_ERROR`. The access-log line for that response carries the cause only when this
+package's HTTP interceptor saw the error, which it does not for an error raised before it (in a
+guard or a middleware) or with HTTP logging off. nest-core 1.6.2 adds an optional sink token, `BYMAX_UNEXPECTED_ERROR_SINK`, and
+`PinoUnexpectedErrorSink` is a ready implementation of it. Bind it from a global module:
+
+```typescript
+import { Global, Module } from '@nestjs/common'
+import { BYMAX_UNEXPECTED_ERROR_SINK } from '@bymax-one/nest-core'
+import { PinoUnexpectedErrorSink } from '@bymax-one/nest-logger'
+
+@Global()
+@Module({
+  providers: [{ provide: BYMAX_UNEXPECTED_ERROR_SINK, useClass: PinoUnexpectedErrorSink }],
+  exports: [BYMAX_UNEXPECTED_ERROR_SINK]
+})
+export class UnexpectedErrorSinkModule {}
+```
+
+Import it next to `BymaxLoggerModule`. The binding resolves `PinoLoggerService` because
+`BymaxLoggerModule` is global by default; with `isGlobal: false`, add the same `forRoot`/`forRootAsync` result the
+application imports to the sink module's `imports`. Keep it in a constant: calling `forRoot` a
+second time builds a second logger. Each unexpected error then produces one `error` entry with the key
+`HTTP_UNEXPECTED_ERROR`:
+
+| Field           | Content                                                                                                 |
+| --------------- | ------------------------------------------------------------------------------------------------------- |
+| `err`           | The original error through the `err` serializer: type, message, scrubbed stack, cause chain, own fields |
+| `method`        | HTTP method                                                                                             |
+| `route`         | Matched route template (`/invoices/:id`), or `<unmatched>` before routing — never the raw URL           |
+| `correlationId` | nest-core's correlation id, when one resolved                                                           |
+
+The sink adds nothing from the request beyond `method`, `route` and `correlationId`: no body,
+headers or query string. The error is serialized as on every `err` entry, own enumerable fields
+included, so an error object that itself carries request data (a `url` with a query string, a copy
+of the headers) brings that data along, under the same key-name redaction. The trace id comes from the trace mixin, as on every other entry. `record()`
+never throws, so a failing destination cannot change the response. This package does not import
+nest-core: the class matches nest-core's contract by shape, and `IUnexpectedErrorSink` /
+`UnexpectedErrorReport` are exported for reference.
+
 ### 6. OpenTelemetry correlation
 
 Initialize the OTel SDK **before** importing NestJS — this is critical:
@@ -729,7 +771,7 @@ function assertValidLogKey(key: string) {
 
 The following keys are used internally by the library — do not reuse them in application code:
 
-`LOGGER_BOOTSTRAP_OK` · `LOGGER_BOOTSTRAP_WARNING` · `LOGGER_SHUTDOWN_OK` · `HTTP_REQUEST_START` · `HTTP_REQUEST_SUCCESS` · `HTTP_REQUEST_REDIRECT` · `HTTP_REQUEST_CLIENT_ERROR` · `HTTP_REQUEST_SERVER_ERROR` · `HTTP_REQUEST_ABORTED` · `HTTP_REQUEST_COMPLETED` · `HTTP_EXCEPTION_HANDLED` · `HTTP_EXCEPTION_UNHANDLED` · `METHOD_EXECUTION` · `METHOD_SLOW_EXECUTION` · `LOGGER_DESTINATION_INIT_FAILED` · `LOGGER_DESTINATION_WRITE_FAILED` · `LOGGER_ENTRY_TRUNCATED` · `LOGGER_REDACTION_FAILED`
+`LOGGER_BOOTSTRAP_OK` · `LOGGER_BOOTSTRAP_WARNING` · `LOGGER_SHUTDOWN_OK` · `HTTP_REQUEST_START` · `HTTP_REQUEST_SUCCESS` · `HTTP_REQUEST_REDIRECT` · `HTTP_REQUEST_CLIENT_ERROR` · `HTTP_REQUEST_SERVER_ERROR` · `HTTP_REQUEST_ABORTED` · `HTTP_REQUEST_COMPLETED` · `HTTP_EXCEPTION_HANDLED` · `HTTP_EXCEPTION_UNHANDLED` · `HTTP_UNEXPECTED_ERROR` · `METHOD_EXECUTION` · `METHOD_SLOW_EXECUTION` · `LOGGER_DESTINATION_INIT_FAILED` · `LOGGER_DESTINATION_WRITE_FAILED` · `LOGGER_ENTRY_TRUNCATED` · `LOGGER_REDACTION_FAILED`
 
 All reserved keys are exported as the `RESERVED_LOG_KEYS` constant from `@bymax-one/nest-logger/shared`.
 

package/dist/server/index.cjs

@@ -185,6 +185,7 @@ var RESERVED_LOG_KEYS = Object.freeze({
   HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED",
   HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED",
   HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED",
+  HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR",
   METHOD_EXECUTION: "METHOD_EXECUTION",
   METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION",
   LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED",
@@ -2909,6 +2910,63 @@ var ALL_ROUTES = "/";
 function applyRequestIdMiddleware(consumer, routes = ALL_ROUTES) {
   consumer.apply(exports.RequestIdMiddleware, exports.HttpAccessLogMiddleware).forRoutes(routes);
 }
+exports.PinoUnexpectedErrorSink = class PinoUnexpectedErrorSink {
+  /**
+   * @param logger - The structured logger the entry is written to. Injected by
+   *   token explicitly: the package is bundled without `emitDecoratorMetadata`,
+   *   so implicit class-type injection would not resolve.
+   */
+  constructor(logger) {
+    this.logger = logger;
+  }
+  /**
+   * Write one `error` entry for an unexpected error. Never throws.
+   *
+   * The entry carries `err` (name, message, scrubbed stack, cause chain and own
+   * fields, through the configured `err` serializer), `method`, `route` and,
+   * when present, `correlationId`. It deliberately carries nothing else from
+   * the request: the report has no body, headers or query to leak, and this
+   * method adds none.
+   *
+   * `report.traceId` is not written. The trace mixin already stamps the active
+   * span's trace id under the configured `otel.traceIdField` — the same span
+   * nest-core read it from — and writing it here would override that field and
+   * ignore `otel.shouldAutoInjectTraceContext: false`.
+   *
+   * @param report - The error and its request coordinates, from nest-core.
+   * @example
+   *   sink.record({ error: new TypeError('x is undefined'), method: 'GET', route: '/invoices/:id', correlationId: 'req-1' })
+   *   // → { level: 'error', logKey: 'HTTP_UNEXPECTED_ERROR', msg: 'x is undefined',
+   *   //     err: { type: 'TypeError', message: 'x is undefined', stack: '…' },
+   *   //     method: 'GET', route: '/invoices/:id', correlationId: 'req-1' }
+   */
+  record(report) {
+    try {
+      const metadata = { method: report.method, route: report.route };
+      if (report.correlationId !== void 0) {
+        metadata["correlationId"] = report.correlationId;
+      }
+      this.logger.errorStructured(
+        RESERVED_LOG_KEYS.HTTP_UNEXPECTED_ERROR,
+        toLoggableError(report.error),
+        void 0,
+        metadata
+      );
+    } catch {
+    }
+  }
+};
+exports.PinoUnexpectedErrorSink = __decorateClass([
+  common.Injectable(),
+  __decorateParam(0, common.Inject(exports.PinoLoggerService))
+], exports.PinoUnexpectedErrorSink);
+function toLoggableError(value) {
+  try {
+    return isErrorLike(value) ? value : sanitizeError(value);
+  } catch {
+    return sanitizeError(value);
+  }
+}
 var INJECT_LOGGER_CONTEXT_METADATA_KEY = "bymax_logger:context";
 function InjectLogger(context) {
   return (target, propertyKey, parameterIndex) => {

package/dist/server/index.d.cts

@@ -572,6 +572,7 @@ declare const RESERVED_LOG_KEYS: Readonly<{
     readonly HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED";
     readonly HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED";
     readonly HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED";
+    readonly HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR";
     readonly METHOD_EXECUTION: "METHOD_EXECUTION";
     readonly METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION";
     readonly LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED";
@@ -1671,6 +1672,84 @@ declare class RequestIdMiddleware implements NestMiddleware {
     private resolveTenantId;
 }
 
+/**
+ * Structural mirror of `@bymax-one/nest-core`'s unexpected-error sink contract.
+ *
+ * Layer: server/interfaces — the shapes `PinoUnexpectedErrorSink` implements.
+ * Declared here, not imported: this package has no dependency on nest-core and
+ * does not take one. TypeScript compares the two contracts by shape, so
+ * `PinoUnexpectedErrorSink` binds to nest-core's `BYMAX_UNEXPECTED_ERROR_SINK`
+ * token as long as these shapes stay compatible with nest-core's.
+ */
+/**
+ * What nest-core hands the sink for one unexpected (non-`HttpException`) error.
+ *
+ * It never carries the request body, headers, query string or raw URL.
+ */
+interface UnexpectedErrorReport {
+    /** The original thrown value, by identity — not necessarily an `Error`. */
+    readonly error: unknown;
+    /** HTTP method, e.g. `'GET'`. */
+    readonly method: string;
+    /**
+     * The matched route template, e.g. `'/invoices/:id'`, or `'<unmatched>'` when
+     * the error was raised before routing. Never the raw URL.
+     */
+    readonly route: string;
+    /** The request's correlation id. The key is absent when none resolved. */
+    readonly correlationId?: string;
+    /** The active OpenTelemetry trace id. The key is absent when nothing is recording. */
+    readonly traceId?: string;
+}
+/**
+ * A receiver for unexpected errors, called synchronously by nest-core's
+ * exception filter before the response is written.
+ */
+interface IUnexpectedErrorSink {
+    /**
+     * Record one unexpected error. Must be cheap: it runs on the response path.
+     *
+     * @param report - The error and its request coordinates.
+     */
+    record(report: UnexpectedErrorReport): void;
+}
+
+/**
+ * Writes each unexpected error nest-core reports as one `HTTP_UNEXPECTED_ERROR`
+ * entry at `error` level.
+ */
+declare class PinoUnexpectedErrorSink implements IUnexpectedErrorSink {
+    private readonly logger;
+    /**
+     * @param logger - The structured logger the entry is written to. Injected by
+     *   token explicitly: the package is bundled without `emitDecoratorMetadata`,
+     *   so implicit class-type injection would not resolve.
+     */
+    constructor(logger: PinoLoggerService);
+    /**
+     * Write one `error` entry for an unexpected error. Never throws.
+     *
+     * The entry carries `err` (name, message, scrubbed stack, cause chain and own
+     * fields, through the configured `err` serializer), `method`, `route` and,
+     * when present, `correlationId`. It deliberately carries nothing else from
+     * the request: the report has no body, headers or query to leak, and this
+     * method adds none.
+     *
+     * `report.traceId` is not written. The trace mixin already stamps the active
+     * span's trace id under the configured `otel.traceIdField` — the same span
+     * nest-core read it from — and writing it here would override that field and
+     * ignore `otel.shouldAutoInjectTraceContext: false`.
+     *
+     * @param report - The error and its request coordinates, from nest-core.
+     * @example
+     *   sink.record({ error: new TypeError('x is undefined'), method: 'GET', route: '/invoices/:id', correlationId: 'req-1' })
+     *   // → { level: 'error', logKey: 'HTTP_UNEXPECTED_ERROR', msg: 'x is undefined',
+     *   //     err: { type: 'TypeError', message: 'x is undefined', stack: '…' },
+     *   //     method: 'GET', route: '/invoices/:id', correlationId: 'req-1' }
+     */
+    record(report: UnexpectedErrorReport): void;
+}
+
 /**
  * Inject a logger into a constructor parameter.
  *
@@ -1865,4 +1944,5 @@ interface LogEntry {
  */
 declare const LOG_KEYS_CONVENTION_REGEX: RegExp;
 
-export { BymaxLoggerModule, type BymaxLoggerModuleAsyncOptions, type BymaxLoggerModuleOptions, type BymaxLoggerModuleOptionsFactory, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, type EmittedDeploymentResource, type EmittedServiceResource, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, type HttpOptions, type ILogDestination, type IncomingHeaders, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, type LogContext$1 as LogContextBag, LogContextService, type LogEntry, type LogLevel, LogPerformance, type LoggableRequest, type LoggableResponse, type NextHandler, type OtelOptions, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PrettyDevDestination, type PrettyViewOptions, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, type ReservedLogKey, type ResolvedBymaxLoggerModuleOptions, type ResolvedServiceMetadata, type ServiceMetadata, applyAccessLog, applyRequestIdMiddleware };
+export { BymaxLoggerModule, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, LogContextService, LogPerformance, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PinoUnexpectedErrorSink, PrettyDevDestination, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, applyAccessLog, applyRequestIdMiddleware };
+export type { BymaxLoggerModuleAsyncOptions, BymaxLoggerModuleOptions, BymaxLoggerModuleOptionsFactory, EmittedDeploymentResource, EmittedServiceResource, HttpOptions, ILogDestination, IUnexpectedErrorSink, IncomingHeaders, LogContext$1 as LogContextBag, LogEntry, LogLevel, LoggableRequest, LoggableResponse, NextHandler, OtelOptions, PrettyViewOptions, ReservedLogKey, ResolvedBymaxLoggerModuleOptions, ResolvedServiceMetadata, ServiceMetadata, UnexpectedErrorReport };

package/dist/server/index.d.ts

@@ -572,6 +572,7 @@ declare const RESERVED_LOG_KEYS: Readonly<{
     readonly HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED";
     readonly HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED";
     readonly HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED";
+    readonly HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR";
     readonly METHOD_EXECUTION: "METHOD_EXECUTION";
     readonly METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION";
     readonly LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED";
@@ -1671,6 +1672,84 @@ declare class RequestIdMiddleware implements NestMiddleware {
     private resolveTenantId;
 }
 
+/**
+ * Structural mirror of `@bymax-one/nest-core`'s unexpected-error sink contract.
+ *
+ * Layer: server/interfaces — the shapes `PinoUnexpectedErrorSink` implements.
+ * Declared here, not imported: this package has no dependency on nest-core and
+ * does not take one. TypeScript compares the two contracts by shape, so
+ * `PinoUnexpectedErrorSink` binds to nest-core's `BYMAX_UNEXPECTED_ERROR_SINK`
+ * token as long as these shapes stay compatible with nest-core's.
+ */
+/**
+ * What nest-core hands the sink for one unexpected (non-`HttpException`) error.
+ *
+ * It never carries the request body, headers, query string or raw URL.
+ */
+interface UnexpectedErrorReport {
+    /** The original thrown value, by identity — not necessarily an `Error`. */
+    readonly error: unknown;
+    /** HTTP method, e.g. `'GET'`. */
+    readonly method: string;
+    /**
+     * The matched route template, e.g. `'/invoices/:id'`, or `'<unmatched>'` when
+     * the error was raised before routing. Never the raw URL.
+     */
+    readonly route: string;
+    /** The request's correlation id. The key is absent when none resolved. */
+    readonly correlationId?: string;
+    /** The active OpenTelemetry trace id. The key is absent when nothing is recording. */
+    readonly traceId?: string;
+}
+/**
+ * A receiver for unexpected errors, called synchronously by nest-core's
+ * exception filter before the response is written.
+ */
+interface IUnexpectedErrorSink {
+    /**
+     * Record one unexpected error. Must be cheap: it runs on the response path.
+     *
+     * @param report - The error and its request coordinates.
+     */
+    record(report: UnexpectedErrorReport): void;
+}
+
+/**
+ * Writes each unexpected error nest-core reports as one `HTTP_UNEXPECTED_ERROR`
+ * entry at `error` level.
+ */
+declare class PinoUnexpectedErrorSink implements IUnexpectedErrorSink {
+    private readonly logger;
+    /**
+     * @param logger - The structured logger the entry is written to. Injected by
+     *   token explicitly: the package is bundled without `emitDecoratorMetadata`,
+     *   so implicit class-type injection would not resolve.
+     */
+    constructor(logger: PinoLoggerService);
+    /**
+     * Write one `error` entry for an unexpected error. Never throws.
+     *
+     * The entry carries `err` (name, message, scrubbed stack, cause chain and own
+     * fields, through the configured `err` serializer), `method`, `route` and,
+     * when present, `correlationId`. It deliberately carries nothing else from
+     * the request: the report has no body, headers or query to leak, and this
+     * method adds none.
+     *
+     * `report.traceId` is not written. The trace mixin already stamps the active
+     * span's trace id under the configured `otel.traceIdField` — the same span
+     * nest-core read it from — and writing it here would override that field and
+     * ignore `otel.shouldAutoInjectTraceContext: false`.
+     *
+     * @param report - The error and its request coordinates, from nest-core.
+     * @example
+     *   sink.record({ error: new TypeError('x is undefined'), method: 'GET', route: '/invoices/:id', correlationId: 'req-1' })
+     *   // → { level: 'error', logKey: 'HTTP_UNEXPECTED_ERROR', msg: 'x is undefined',
+     *   //     err: { type: 'TypeError', message: 'x is undefined', stack: '…' },
+     *   //     method: 'GET', route: '/invoices/:id', correlationId: 'req-1' }
+     */
+    record(report: UnexpectedErrorReport): void;
+}
+
 /**
  * Inject a logger into a constructor parameter.
  *
@@ -1865,4 +1944,5 @@ interface LogEntry {
  */
 declare const LOG_KEYS_CONVENTION_REGEX: RegExp;
 
-export { BymaxLoggerModule, type BymaxLoggerModuleAsyncOptions, type BymaxLoggerModuleOptions, type BymaxLoggerModuleOptionsFactory, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, type EmittedDeploymentResource, type EmittedServiceResource, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, type HttpOptions, type ILogDestination, type IncomingHeaders, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, type LogContext$1 as LogContextBag, LogContextService, type LogEntry, type LogLevel, LogPerformance, type LoggableRequest, type LoggableResponse, type NextHandler, type OtelOptions, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PrettyDevDestination, type PrettyViewOptions, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, type ReservedLogKey, type ResolvedBymaxLoggerModuleOptions, type ResolvedServiceMetadata, type ServiceMetadata, applyAccessLog, applyRequestIdMiddleware };
+export { BymaxLoggerModule, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, LogContextService, LogPerformance, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PinoUnexpectedErrorSink, PrettyDevDestination, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, applyAccessLog, applyRequestIdMiddleware };
+export type { BymaxLoggerModuleAsyncOptions, BymaxLoggerModuleOptions, BymaxLoggerModuleOptionsFactory, EmittedDeploymentResource, EmittedServiceResource, HttpOptions, ILogDestination, IUnexpectedErrorSink, IncomingHeaders, LogContext$1 as LogContextBag, LogEntry, LogLevel, LoggableRequest, LoggableResponse, NextHandler, OtelOptions, PrettyViewOptions, ReservedLogKey, ResolvedBymaxLoggerModuleOptions, ResolvedServiceMetadata, ServiceMetadata, UnexpectedErrorReport };

package/dist/server/index.mjs

@@ -182,6 +182,7 @@ var RESERVED_LOG_KEYS = Object.freeze({
   HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED",
   HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED",
   HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED",
+  HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR",
   METHOD_EXECUTION: "METHOD_EXECUTION",
   METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION",
   LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED",
@@ -2906,6 +2907,63 @@ var ALL_ROUTES = "/";
 function applyRequestIdMiddleware(consumer, routes = ALL_ROUTES) {
   consumer.apply(RequestIdMiddleware, HttpAccessLogMiddleware).forRoutes(routes);
 }
+var PinoUnexpectedErrorSink = class {
+  /**
+   * @param logger - The structured logger the entry is written to. Injected by
+   *   token explicitly: the package is bundled without `emitDecoratorMetadata`,
+   *   so implicit class-type injection would not resolve.
+   */
+  constructor(logger) {
+    this.logger = logger;
+  }
+  /**
+   * Write one `error` entry for an unexpected error. Never throws.
+   *
+   * The entry carries `err` (name, message, scrubbed stack, cause chain and own
+   * fields, through the configured `err` serializer), `method`, `route` and,
+   * when present, `correlationId`. It deliberately carries nothing else from
+   * the request: the report has no body, headers or query to leak, and this
+   * method adds none.
+   *
+   * `report.traceId` is not written. The trace mixin already stamps the active
+   * span's trace id under the configured `otel.traceIdField` — the same span
+   * nest-core read it from — and writing it here would override that field and
+   * ignore `otel.shouldAutoInjectTraceContext: false`.
+   *
+   * @param report - The error and its request coordinates, from nest-core.
+   * @example
+   *   sink.record({ error: new TypeError('x is undefined'), method: 'GET', route: '/invoices/:id', correlationId: 'req-1' })
+   *   // → { level: 'error', logKey: 'HTTP_UNEXPECTED_ERROR', msg: 'x is undefined',
+   *   //     err: { type: 'TypeError', message: 'x is undefined', stack: '…' },
+   *   //     method: 'GET', route: '/invoices/:id', correlationId: 'req-1' }
+   */
+  record(report) {
+    try {
+      const metadata = { method: report.method, route: report.route };
+      if (report.correlationId !== void 0) {
+        metadata["correlationId"] = report.correlationId;
+      }
+      this.logger.errorStructured(
+        RESERVED_LOG_KEYS.HTTP_UNEXPECTED_ERROR,
+        toLoggableError(report.error),
+        void 0,
+        metadata
+      );
+    } catch {
+    }
+  }
+};
+PinoUnexpectedErrorSink = __decorateClass([
+  Injectable(),
+  __decorateParam(0, Inject(PinoLoggerService))
+], PinoUnexpectedErrorSink);
+function toLoggableError(value) {
+  try {
+    return isErrorLike(value) ? value : sanitizeError(value);
+  } catch {
+    return sanitizeError(value);
+  }
+}
 var INJECT_LOGGER_CONTEXT_METADATA_KEY = "bymax_logger:context";
 function InjectLogger(context) {
   return (target, propertyKey, parameterIndex) => {
@@ -2967,4 +3025,4 @@ function LogPerformance(thresholdMs = DEFAULT_THRESHOLD_MS) {
 // src/shared/constants/log-keys-convention.constants.ts
 var LOG_KEYS_CONVENTION_REGEX = /^[A-Z][A-Z0-9_]+_[A-Z][A-Z0-9_]+(_[A-Z][A-Z0-9_]+)?$/;
 
-export { BymaxLoggerModule, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, LogContextService, LogPerformance, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PrettyDevDestination, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, applyAccessLog, applyRequestIdMiddleware };
+export { BymaxLoggerModule, DEFAULT_REDACT_PATHS, DefaultStdoutDestination, HttpAccessLogMiddleware, HttpExceptionFilter, HttpLoggingInterceptor, InjectLogger, LOGGER_DESTINATIONS_TOKEN, LOGGER_OPTIONS_TOKEN, LOGGER_PINO_INSTANCE_TOKEN, LOG_CONTEXT_METADATA_KEY, LOG_CONTEXT_TOKEN, LOG_KEYS_CONVENTION_REGEX, LogContext, LogContextService, LogPerformance, PINO_LEVEL_NAMES, PINO_LEVEL_NUMBERS, PinoLoggerService, PinoUnexpectedErrorSink, PrettyDevDestination, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, RequestIdMiddleware, applyAccessLog, applyRequestIdMiddleware };

package/dist/shared/index.cjs

@@ -17,6 +17,7 @@ var RESERVED_LOG_KEYS = Object.freeze({
   HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED",
   HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED",
   HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED",
+  HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR",
   METHOD_EXECUTION: "METHOD_EXECUTION",
   METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION",
   LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED",

package/dist/shared/index.d.cts

@@ -238,6 +238,7 @@ declare const RESERVED_LOG_KEYS: Readonly<{
     readonly HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED";
     readonly HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED";
     readonly HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED";
+    readonly HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR";
     readonly METHOD_EXECUTION: "METHOD_EXECUTION";
     readonly METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION";
     readonly LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED";
@@ -269,4 +270,5 @@ declare const RESERVED_LOG_KEYS_NOT_EMITTED: Readonly<{
  */
 type ReservedLogKey = (typeof RESERVED_LOG_KEYS)[keyof typeof RESERVED_LOG_KEYS];
 
-export { type EmittedDeploymentResource, type EmittedServiceResource, LOG_KEYS_CONVENTION_REGEX, type LogEntry, type LogLevel, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, type ReservedLogKey, type ResolvedServiceMetadata, type ServiceMetadata };
+export { LOG_KEYS_CONVENTION_REGEX, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED };
+export type { EmittedDeploymentResource, EmittedServiceResource, LogEntry, LogLevel, ReservedLogKey, ResolvedServiceMetadata, ServiceMetadata };

package/dist/shared/index.d.ts

@@ -238,6 +238,7 @@ declare const RESERVED_LOG_KEYS: Readonly<{
     readonly HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED";
     readonly HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED";
     readonly HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED";
+    readonly HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR";
     readonly METHOD_EXECUTION: "METHOD_EXECUTION";
     readonly METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION";
     readonly LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED";
@@ -269,4 +270,5 @@ declare const RESERVED_LOG_KEYS_NOT_EMITTED: Readonly<{
  */
 type ReservedLogKey = (typeof RESERVED_LOG_KEYS)[keyof typeof RESERVED_LOG_KEYS];
 
-export { type EmittedDeploymentResource, type EmittedServiceResource, LOG_KEYS_CONVENTION_REGEX, type LogEntry, type LogLevel, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED, type ReservedLogKey, type ResolvedServiceMetadata, type ServiceMetadata };
+export { LOG_KEYS_CONVENTION_REGEX, RESERVED_LOG_KEYS, RESERVED_LOG_KEYS_NOT_EMITTED };
+export type { EmittedDeploymentResource, EmittedServiceResource, LogEntry, LogLevel, ReservedLogKey, ResolvedServiceMetadata, ServiceMetadata };

package/dist/shared/index.mjs

@@ -15,6 +15,7 @@ var RESERVED_LOG_KEYS = Object.freeze({
   HTTP_REQUEST_ABORTED: "HTTP_REQUEST_ABORTED",
   HTTP_EXCEPTION_HANDLED: "HTTP_EXCEPTION_HANDLED",
   HTTP_EXCEPTION_UNHANDLED: "HTTP_EXCEPTION_UNHANDLED",
+  HTTP_UNEXPECTED_ERROR: "HTTP_UNEXPECTED_ERROR",
   METHOD_EXECUTION: "METHOD_EXECUTION",
   METHOD_SLOW_EXECUTION: "METHOD_SLOW_EXECUTION",
   LOGGER_DESTINATION_INIT_FAILED: "LOGGER_DESTINATION_INIT_FAILED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bymax-one/nest-logger",
-  "version": "1.4.0",
+  "version": "1.4.2",
   "description": "Structured JSON logging for NestJS based on Pino 10, with optional OpenTelemetry correlation.",
   "author": "Bymax One <support@bymax.one>",
   "license": "MIT",
@@ -61,8 +61,8 @@
     "check:mutants": "node scripts/check-mutation-directives.mjs",
     "check:published": "node scripts/check-published-surface.mjs",
     "clean": "rm -rf dist coverage",
-    "lint": "eslint src",
-    "lint:fix": "eslint src --fix",
+    "lint": "eslint src scripts test bench '*.config.ts' '*.config.mjs' '*.config.cjs'",
+    "lint:fix": "eslint src scripts test bench '*.config.ts' '*.config.mjs' '*.config.cjs' --fix",
     "mutation": "stryker run",
     "mutation:full": "node -e \"require('node:fs').rmSync('reports/stryker-incremental.json',{force:true,recursive:true})\" && stryker run",
     "mutation:dry-run": "stryker run --dryRunOnly",
@@ -142,7 +142,7 @@
     "tinybench": "^6.0.2",
     "ts-jest": "^29.4.9",
     "ts-node": "^10.9.2",
-    "tsup": "^8.5.1",
+    "tsup": "^9.0.0",
     "tsx": "^4.19.2",
     "typescript": "^5.9.3"
   },