@catbee/utils 1.0.5 → 1.1.0

package/build/index.cjs

@@ -26,29 +26,6 @@ var fsp__default = /*#__PURE__*/_interopDefault(fsp);
 var express__default = /*#__PURE__*/_interopDefault(express);
 var https__default = /*#__PURE__*/_interopDefault(https);
 
-/*
- * The MIT License
- * 
- * Copyright (c) 2025 Catbee Technologies. https://catbee.npm.hprasath.com/license
- * 
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to deal
- * in the Software without restriction, including without limitation the rights
- * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
- * copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- * 
- * The above copyright notice and this permission notice shall be included in all
- * copies or substantial portions of the Software.
- * 
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
- * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
- * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- */
 var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x, {
@@ -972,16 +949,30 @@ function setValueByPath(obj, path3, value) {
   if (!obj || typeof obj !== "object") return obj;
   const parts = path3.replace(/\[(\d+)\]/g, ".$1").split(".").filter(Boolean);
   if (parts.length === 0) return obj;
+  const forbiddenKeys = /* @__PURE__ */ new Set([
+    "__proto__",
+    "prototype",
+    "constructor"
+  ]);
   let current = obj;
   for (let i = 0; i < parts.length - 1; i++) {
     const key = parts[i];
-    const isArrayIndex = !isNaN(Number(parts[i + 1]));
+    if (forbiddenKeys.has(key)) {
+      return obj;
+    }
+    const nextKey = parts[i + 1];
+    const isArrayIndex = !isNaN(Number(nextKey));
     if (current[key] === void 0) {
-      current[key] = isArrayIndex ? [] : {};
+      current[key] = isArrayIndex ? [] : /* @__PURE__ */ Object.create(null);
+    } else if (typeof current[key] !== "object" || current[key] === null) {
+      current[key] = isArrayIndex ? [] : /* @__PURE__ */ Object.create(null);
     }
     current = current[key];
   }
   const finalKey = parts[parts.length - 1];
+  if (forbiddenKeys.has(finalKey)) {
+    return obj;
+  }
   current[finalKey] = value;
   return obj;
 }
@@ -1057,48 +1048,21 @@ function getAllPaths(obj, parentPath = "") {
 __name(getAllPaths, "getAllPaths");
 
 // src/config.ts
-var config = {
+var defaultCatbeeConfig = {
   logger: {
-    /**
-    * Logging level (e.g., 'info', 'debug', 'warn', 'error').
-    */
-    level: Env.get("LOGGER_LEVEL", "info"),
-    /**
-    * Name of the logger instance (defaults to npm package name).
-    */
+    level: Env.get("LOGGER_LEVEL", Env.isDev() ? "debug" : "info"),
     name: Env.get("LOGGER_NAME", Env.get("npm_package_name", "@catbee/utils")),
-    /**
-    * Enables pretty-print logging in development.
-    * Has no effect in production.
-    */
     pretty: Env.getBoolean("LOGGER_PRETTY", true),
-    /**
-    * Enables colorized output for pretty-print (default: true)
-    */
     colorize: Env.getBoolean("LOGGER_PRETTY_COLORIZE", true),
-    /**
-    * Single line output for pretty-print (default: false)
-    */
-    singleLine: Env.getBoolean("LOGGER_PRETTY_SINGLE_LINE", false)
+    singleLine: Env.getBoolean("LOGGER_PRETTY_SINGLE_LINE", false),
+    dir: Env.getPath("LOGGER_DIR", "", {
+      mustExist: false
+    })
   },
   cache: {
-    /**
-    * Default TTL (time to live) for cache entries in seconds
-    */
     defaultTtl: Env.getNumber("CACHE_DEFAULT_TTL_SECONDS", 3600) * 1e3
   },
   server: {
-    /**
-    * Skip healthz endpoint even if health checks are configured
-    * Default: false
-    * Set to true to return 200 OK for /healthz without checks
-    * Useful in environments where a simple liveness probe is needed
-    * without performing actual health checks
-    * Example: Kubernetes liveness probe
-    * Note: This does not disable the health check functionality itself
-    *       Health checks can still be performed programmatically
-    *       or via other endpoints if needed
-    */
     skipHealthz: Env.getBoolean("SERVER_SKIP_HEALTHZ", false)
   }
 };
@@ -1176,11 +1140,11 @@ var defaultServerConfig = {
   }
 };
 function setConfig(value) {
-  deepObjMerge(config, value);
+  deepObjMerge(defaultCatbeeConfig, value);
 }
 __name(setConfig, "setConfig");
 function getConfig() {
-  return config;
+  return defaultCatbeeConfig;
 }
 __name(getConfig, "getConfig");
 
@@ -1617,27 +1581,66 @@ var defaultSensitiveFields = [
   "password",
   "secret",
   "token",
-  "apiKey",
   "api_key",
   "auth",
+  "private_key",
+  "public_key",
   "jwt",
   "access_token",
-  "client_secret",
+  "refresh_token",
   "session_token",
-  "refresh_token"
+  "csrf_token",
+  "authorization",
+  "bearer",
+  "x-api-key",
+  "x-auth-token",
+  "x-access-token",
+  "client_secret",
+  "passphrase",
+  "otp",
+  "api_secret",
+  "token_secret"
 ];
-var globalRedactCensor = /* @__PURE__ */ __name((value, path3, sensitiveFields = defaultSensitiveFields) => {
+var defaultRedactPaths = [
+  "req.authorization",
+  "req.headers.authorization",
+  "req.headers.cookie",
+  'req.headers["x-api-key"]',
+  'req.headers["x-auth-token"]',
+  'req.headers["x-access-token"]',
+  "req.body.password",
+  "req.body.token",
+  "req.body.secret",
+  "req.query.token",
+  "req.query.api_key",
+  "req.query.apiKey",
+  "res.authorization",
+  "res.headers.authorization",
+  'res.headers["set-cookie"]',
+  "headers.authorization",
+  "headers.cookies",
+  'headers["set-cookie"]',
+  'headers["x-api-key"]',
+  'headers["x-auth-token"]',
+  'headers["x-access-token"]',
+  "url",
+  "uri",
+  "href",
+  "redirect_uri",
+  "redirectUri"
+];
+var globalRedactCensor = /* @__PURE__ */ __name((value, path3, sensitiveFields = getExpandedSensitiveFields()) => {
   if (typeof value !== "string") return "***";
-  const lowerPath = path3.map((p) => p.toLowerCase());
+  const lowerPath = path3.filter((p) => typeof p === "string").map((p) => p.toLowerCase());
   const lowerSensitiveFields = sensitiveFields.map((f) => f.toLowerCase());
   if (lowerPath.some((p) => lowerSensitiveFields.includes(p))) return "***";
-  if (lowerPath[0] === "url") {
+  if (lowerPath[0] === "url" || lowerPath[0] === "uri" || lowerPath[0] === "href" || lowerPath.includes("redirect_uri") || lowerPath.includes("redirecturi")) {
     return value.replace(new RegExp(`([?&](${lowerSensitiveFields.join("|")})=)[^&#]*`, "gi"), "$1***");
   }
   if (lowerPath.some((p) => p.includes("authorization") || p.includes("auth"))) {
     return value.replace(/^(\S+)\s+.+$/, "$1 ***") || "***";
   }
-  if (lowerPath.some((pathPart) => lowerSensitiveFields.some((field) => pathPart.includes(field)))) {
+  if (lowerPath.some((p) => lowerSensitiveFields.some((f) => p.includes(f)))) {
     return "***";
   }
   if (path3.length > 0 && ![
@@ -1663,34 +1666,44 @@ function redact(value, path3, sensitiveFields) {
 __name(redact, "redact");
 function addRedactFields(fields) {
   const prev = globalRedactCensor;
-  globalRedactCensor = /* @__PURE__ */ __name((value, path3, sensitiveFields = defaultSensitiveFields) => prev(value, path3, [
+  globalRedactCensor = /* @__PURE__ */ __name((value, path3, sensitiveFields = getExpandedSensitiveFields()) => prev(value, path3, [
     ...sensitiveFields || [],
     ...fields
   ]), "globalRedactCensor");
+  cachedExpandedFields = null;
 }
 __name(addRedactFields, "addRedactFields");
+var cachedExpandedFields = null;
+function getExpandedSensitiveFields() {
+  if (!cachedExpandedFields) {
+    cachedExpandedFields = expandSensitiveFields(defaultSensitiveFields);
+  }
+  return cachedExpandedFields;
+}
+__name(getExpandedSensitiveFields, "getExpandedSensitiveFields");
 function setSensitiveFields(fields) {
   defaultSensitiveFields.splice(0, defaultSensitiveFields.length, ...fields);
+  cachedExpandedFields = null;
 }
 __name(setSensitiveFields, "setSensitiveFields");
 function addSensitiveFields(fields) {
   defaultSensitiveFields.push(...fields);
+  cachedExpandedFields = null;
 }
 __name(addSensitiveFields, "addSensitiveFields");
 var _globalThis = typeof globalThis === "object" ? globalThis : global;
 var _global = _globalThis;
 function setupLogger(isGlobal = true) {
+  const sensitiveFields = getExpandedSensitiveFields();
+  const paths = /* @__PURE__ */ new Set([
+    ...defaultRedactPaths,
+    ...sensitiveFields.flatMap((field) => generateDeepPaths(field, 2))
+  ]);
   const logParams = {
-    name: config.logger.name || "@catbee/utils",
-    level: config.logger.level || "info",
+    name: defaultCatbeeConfig.logger?.name || "@catbee/utils",
+    level: defaultCatbeeConfig.logger?.level || "info",
     redact: {
-      paths: [
-        "req.authorization",
-        "res.authorization",
-        "url",
-        "headers.authorization",
-        "headers.cookies"
-      ],
+      paths: Array.from(paths),
       censor: /* @__PURE__ */ __name((value, path3) => redact(value, path3), "censor")
     },
     serializers: {
@@ -1703,64 +1716,147 @@ function setupLogger(isGlobal = true) {
     },
     timestamp: pino.stdTimeFunctions.isoTime
   };
-  const logger2 = config.logger.pretty ? pino__default.default(logParams, pino__default.default.transport({
-    target: "pino-pretty",
-    options: {
-      colorize: config.logger.colorize,
-      translateTime: "SYS:standard",
-      ignore: "pid,hostname",
-      singleLine: config.logger.singleLine,
-      levelFirst: true
-    }
-  })) : pino__default.default(logParams);
+  let logger;
+  const logDir = defaultCatbeeConfig.logger?.dir?.trim();
+  const hasFileLogging = Boolean(logDir);
+  if (hasFileLogging && defaultCatbeeConfig.logger?.pretty) {
+    logger = pino__default.default(logParams, pino__default.default.transport({
+      targets: [
+        {
+          target: "pino-pretty",
+          level: defaultCatbeeConfig.logger?.level ?? "info",
+          options: {
+            colorize: defaultCatbeeConfig.logger?.colorize,
+            translateTime: "SYS:standard",
+            ignore: "pid,hostname",
+            singleLine: defaultCatbeeConfig.logger?.singleLine,
+            levelFirst: true
+          }
+        },
+        {
+          target: "pino/file",
+          level: defaultCatbeeConfig.logger?.level ?? "info",
+          options: {
+            destination: `${logDir}/app.log`,
+            mkdir: true
+          }
+        }
+      ]
+    }));
+  } else if (hasFileLogging) {
+    logger = pino__default.default(logParams, pino__default.default.transport({
+      target: "pino/file",
+      options: {
+        destination: `${logDir}/app.log`,
+        mkdir: true
+      }
+    }));
+  } else if (defaultCatbeeConfig.logger?.pretty) {
+    logger = pino__default.default(logParams, pino__default.default.transport({
+      target: "pino-pretty",
+      options: {
+        colorize: defaultCatbeeConfig.logger?.colorize,
+        translateTime: "SYS:standard",
+        ignore: "pid,hostname",
+        singleLine: defaultCatbeeConfig.logger?.singleLine,
+        levelFirst: true
+      }
+    }));
+  } else {
+    logger = pino__default.default(logParams);
+  }
   if (isGlobal) {
-    _global[GLOBAL_LOGGER_KEY] = logger2;
-    _global[GLOBAL_LOGGER_KEY]?.debug("Logger initialized");
+    _global[GLOBAL_LOGGER_KEY] = logger;
+    _global[GLOBAL_LOGGER_KEY]?.debug({
+      logDir: logDir || "none"
+    }, "Logger initialized");
   }
-  return logger2;
+  return logger;
 }
 __name(setupLogger, "setupLogger");
 function getLogger(newInstance = false) {
   if (newInstance) {
     return setupLogger(false);
   }
-  const logger2 = ContextStore.get(StoreKeys.LOGGER);
-  if (logger2) return logger2;
+  const logger = ContextStore.get(StoreKeys.LOGGER);
+  if (logger) return logger;
   if (!_global[GLOBAL_LOGGER_KEY]) {
     setupLogger();
   }
   return _global[GLOBAL_LOGGER_KEY];
 }
 __name(getLogger, "getLogger");
-var logger = getLogger(false);
 function createChildLogger(bindings, parentLogger) {
-  const logger2 = parentLogger || getLogger();
-  return logger2.child(bindings);
+  const logger = parentLogger || getLogger();
+  return logger.child(bindings);
 }
 __name(createChildLogger, "createChildLogger");
 function createRequestLogger(requestId2, additionalContext = {}) {
-  const logger2 = createChildLogger({
+  const logger = createChildLogger({
     requestId: requestId2,
     ...additionalContext
   });
   try {
-    ContextStore.set(StoreKeys.LOGGER, logger2);
+    ContextStore.set(StoreKeys.LOGGER, logger);
   } catch {
-    logger2.debug("Failed to store logger in context - AsyncLocalStorage not initialized");
+    logger.debug("Failed to store logger in context - AsyncLocalStorage not initialized");
   }
-  return logger2;
+  return logger;
 }
 __name(createRequestLogger, "createRequestLogger");
 function logError(error, message, context) {
-  const logger2 = getLogger();
+  const logger = getLogger();
   const errObj = error instanceof Error ? error : new Error(String(error));
   const logContext = {
     ...context,
     error: errObj
   };
-  logger2.error(logContext, message || errObj.message);
+  logger.error(logContext, message || errObj.message);
 }
 __name(logError, "logError");
+function expandSensitiveFields(fields) {
+  const set = /* @__PURE__ */ new Set();
+  for (const field of fields) {
+    for (const v of expandSensitiveField(field)) {
+      set.add(v);
+    }
+  }
+  return Array.from(set);
+}
+__name(expandSensitiveFields, "expandSensitiveFields");
+function expandSensitiveField(field) {
+  const parts = field.split(/[_-]/g).filter(Boolean);
+  const camel = parts[0].toLowerCase() + parts.slice(1).map((p) => p.charAt(0).toUpperCase() + p.slice(1).toLowerCase()).join("");
+  const mergedLower = parts.join("").toLowerCase();
+  const mergedUpper = parts.join("").toUpperCase();
+  const kebab = parts.map((p) => p.toLowerCase()).join("-");
+  const snakeLower = parts.map((p) => p.toLowerCase()).join("_");
+  const snakeUpper = parts.map((p) => p.toUpperCase()).join("_");
+  return Array.from(/* @__PURE__ */ new Set([
+    field,
+    camel,
+    mergedLower,
+    mergedUpper,
+    kebab,
+    snakeLower,
+    snakeUpper
+  ]));
+}
+__name(expandSensitiveField, "expandSensitiveField");
+function generateDeepPaths(field, depth) {
+  const set = /* @__PURE__ */ new Set([
+    field
+  ]);
+  let prefix = "";
+  for (let i = 1; i <= depth; i++) {
+    prefix = prefix ? `${prefix}.*` : "*";
+    set.add(`${prefix}.${field}`);
+  }
+  return [
+    ...set
+  ];
+}
+__name(generateDeepPaths, "generateDeepPaths");
 
 // src/utils/async.utils.ts
 function sleep(ms) {
@@ -2140,7 +2236,7 @@ var TTLCache = class {
   * @param options - Configuration options for the cache
   */
   constructor(options = {}) {
-    this.ttlMs = options.ttlMs ?? config.cache.defaultTtl;
+    this.ttlMs = options.ttlMs ?? defaultCatbeeConfig.cache.defaultTtl;
     this.maxSize = options.maxSize;
     const autoCleanupMs = options.autoCleanupMs;
     if (autoCleanupMs && autoCleanupMs > 0) {
@@ -3751,7 +3847,7 @@ function Timeout(ms) {
 __name(Timeout, "Timeout");
 function Log(options) {
   return (target, propertyKey, _descriptor) => {
-    const config2 = {
+    const config = {
       logEntry: true,
       logExit: true,
       logBody: false,
@@ -3760,9 +3856,9 @@ function Log(options) {
       ...options
     };
     if (typeof propertyKey === "undefined") {
-      Reflect.defineMetadata(LOG_KEY, config2, target);
+      Reflect.defineMetadata(LOG_KEY, config, target);
     } else {
-      Reflect.defineMetadata(LOG_KEY, config2, target, propertyKey);
+      Reflect.defineMetadata(LOG_KEY, config, target, propertyKey);
     }
   };
 }
@@ -3872,7 +3968,7 @@ function registerControllers(router, controllers) {
             res.setHeader("Cache-Control", `public, max-age=${cache.ttlSeconds}`);
           }
           if (logConfig?.logEntry) {
-            const logger2 = getLogger();
+            const logger = getLogger();
             const logData = {
               method: req.method,
               url: req.originalUrl || req.url,
@@ -3883,7 +3979,7 @@ function registerControllers(router, controllers) {
               logData.query = req.query;
             }
             if (logConfig.logBody) logData.body = req.body;
-            logger2.info({
+            logger.info({
               entry: logData
             }, "Route Entry:");
           }
@@ -3961,7 +4057,7 @@ function registerControllers(router, controllers) {
             res.json(awaited);
           }
           if (logConfig?.logExit) {
-            const logger2 = getLogger();
+            const logger = getLogger();
             const logData = {
               method: req.method,
               url: req.originalUrl || req.url,
@@ -3969,7 +4065,7 @@ function registerControllers(router, controllers) {
               duration: `${Date.now() - req.startTime}ms`
             };
             if (logConfig.logResponse) logData.response = awaited;
-            logger2.info({
+            logger.info({
               exit: logData
             }, "Route Exit:");
           }
@@ -4840,36 +4936,36 @@ function timeSync(fn, options = {}) {
     label
   };
   if (log) {
-    const logger2 = getLogger();
+    const logger = getLogger();
     const message = `${label} completed in ${durationMs.toFixed(2)}ms`;
     switch (logLevel) {
       case "trace":
-        logger2.trace({
+        logger.trace({
           timing
         }, message);
         break;
       case "debug":
-        logger2.debug({
+        logger.debug({
           timing
         }, message);
         break;
       case "info":
-        logger2.info({
+        logger.info({
           timing
         }, message);
         break;
       case "warn":
-        logger2.warn({
+        logger.warn({
           timing
         }, message);
         break;
       case "error":
-        logger2.error({
+        logger.error({
           timing
         }, message);
         break;
       default:
-        logger2.debug({
+        logger.debug({
           timing
         }, message);
         break;
@@ -4896,36 +4992,36 @@ async function timeAsync(fn, options = {}) {
     label
   };
   if (log) {
-    const logger2 = getLogger();
+    const logger = getLogger();
     const message = `${label} completed in ${durationMs.toFixed(2)}ms`;
     switch (logLevel) {
       case "trace":
-        logger2.trace({
+        logger.trace({
           timing
         }, message);
         break;
       case "debug":
-        logger2.debug({
+        logger.debug({
           timing
         }, message);
         break;
       case "info":
-        logger2.info({
+        logger.info({
           timing
         }, message);
         break;
       case "warn":
-        logger2.warn({
+        logger.warn({
           timing
         }, message);
         break;
       case "error":
-        logger2.error({
+        logger.error({
           timing
         }, message);
         break;
       default:
-        logger2.debug({
+        logger.debug({
           timing
         }, message);
         break;
@@ -5596,10 +5692,26 @@ function isPort(value) {
 }
 __name(isPort, "isPort");
 function isEmail(str) {
-  if (!/^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(str)) return false;
-  const [local, domain] = str.split("@");
+  if (typeof str !== "string" || str.length > 254) return false;
+  const atIndex = str.indexOf("@");
+  if (atIndex === -1 || atIndex !== str.lastIndexOf("@")) return false;
+  const local = str.slice(0, atIndex);
+  const domain = str.slice(atIndex + 1);
   if (!local || !domain) return false;
-  if (local.includes("..") || domain.includes("..")) return false;
+  const dotAtom = /^[A-Za-z0-9!#$%&'*+/=?^_`{|}~-]+(\.[A-Za-z0-9!#$%&'*+/=?^_`{|}~-]+)*$/;
+  const quotedLocal = /^"([\s\x21\x23-\x5B\x5D-\x7E]|\\[\x20-\x7E])*"$/;
+  if (!dotAtom.test(local) && !quotedLocal.test(local)) return false;
+  if (domain.includes("..")) return false;
+  const labels = domain.split(".");
+  if (labels.some((l) => !l.length)) return false;
+  if (labels.length < 2) return false;
+  const labelRegex = /^[A-Za-z0-9-]{1,63}$/;
+  for (const label of labels) {
+    if (!labelRegex.test(label)) return false;
+    if (label.startsWith("-") || label.endsWith("-")) return false;
+  }
+  const tld = labels[labels.length - 1];
+  if (!/^[A-Za-z]{2,63}$/.test(tld)) return false;
   return true;
 }
 __name(isEmail, "isEmail");
@@ -6343,12 +6455,12 @@ var ServerConfigBuilder = class {
   * ```
   */
   build() {
-    const config2 = deepObjMerge({}, defaultServerConfig, this.config);
-    if (config2.openApi?.enable && !config2.openApi.filePath) {
+    const config = deepObjMerge({}, defaultServerConfig, this.config);
+    if (config.openApi?.enable && !config.openApi.filePath) {
       throw new Error("OpenAPI is enabled but no filePath is specified");
     }
     return Object.freeze({
-      ...config2,
+      ...config,
       [BUILD_MARKER]: true
     });
   }
@@ -6419,11 +6531,11 @@ var ExpressServer = class _ExpressServer {
   * - Health checks
   * - Request tracing
   */
-  constructor(config2, hooks = {}) {
-    if (_ExpressServer.isBuiltServerConfig(config2)) {
-      this.config = config2;
+  constructor(config, hooks = {}) {
+    if (_ExpressServer.isBuiltServerConfig(config)) {
+      this.config = config;
     } else {
-      this.config = deepObjMerge({}, defaultServerConfig, config2);
+      this.config = deepObjMerge({}, defaultServerConfig, config);
     }
     if (!isPort(this.config.port)) {
       getLogger().error(`Port must be a valid number between 1 and 65535, got: ${this.config.port}`);
@@ -6508,8 +6620,8 @@ var ExpressServer = class _ExpressServer {
         prefix: `${safeAppName}_`
       });
     }
-    if (config2.healthCheck?.checks) {
-      this.healthChecks.push(...config2.healthCheck.checks);
+    if (config.healthCheck?.checks) {
+      this.healthChecks.push(...config.healthCheck.checks);
     }
     this.globalPrefix = this.normalizePath(this.config.globalPrefix ?? "", false);
     this.hooks = hooks;
@@ -6666,14 +6778,14 @@ var ExpressServer = class _ExpressServer {
           const skip = this.config.requestLogging?.ignorePaths?.some((path3) => req.path.startsWith(path3));
           if (skip) return next();
         }
-        const logger2 = getLogger();
+        const logger = getLogger();
         const incomingRequestMetaData = {
           requestId: req.id,
           method: req.method,
           url: req.originalUrl || req.url,
           ip: req.ip
         };
-        logger2.info(incomingRequestMetaData, "Incoming Request");
+        logger.info(incomingRequestMetaData, "Incoming Request");
         next();
       });
     }
@@ -6818,7 +6930,7 @@ var ExpressServer = class _ExpressServer {
     const healthCheckPath = this.normalizePath(this.config.healthCheck?.path || "/healthz", this.config.healthCheck?.withGlobalPrefix);
     this.app.get(healthCheckPath, async (_req, res) => {
       try {
-        if (!this.healthChecks.length || config.server.skipHealthz) {
+        if (!this.healthChecks.length || defaultCatbeeConfig.server.skipHealthz) {
           return res.status(HttpStatusCodes.OK).json(new SuccessResponse("OK"));
         }
         const checkResults = await Promise.allSettled(this.healthChecks.map(async ({ name, check }) => {
@@ -7268,8 +7380,8 @@ var ExpressServer = class _ExpressServer {
       process.exit(1);
     }
   }
-  static isBuiltServerConfig(config2) {
-    if (config2[BUILD_MARKER]) {
+  static isBuiltServerConfig(config) {
+    if (config[BUILD_MARKER]) {
       return true;
     }
     return false;
@@ -7408,6 +7520,8 @@ exports.ensureEmptyDir = ensureEmptyDir;
 exports.ensureType = ensureType;
 exports.equalsIgnoreCase = equalsIgnoreCase;
 exports.errorHandler = errorHandler;
+exports.expandSensitiveField = expandSensitiveField;
+exports.expandSensitiveFields = expandSensitiveFields;
 exports.extractFilterParams = extractFilterParams;
 exports.extractPaginationParams = extractPaginationParams;
 exports.extractQueryParams = extractQueryParams;
@@ -7423,6 +7537,7 @@ exports.flattenObject = flattenObject;
 exports.formatDate = formatDate;
 exports.formatRelativeTime = formatRelativeTime;
 exports.generateApiKey = generateApiKey;
+exports.generateDeepPaths = generateDeepPaths;
 exports.generateRandomBytes = generateRandomBytes;
 exports.generateRandomBytesAsString = generateRandomBytesAsString;
 exports.getAllPaths = getAllPaths;
@@ -7431,6 +7546,7 @@ exports.getDirSize = getDirSize;
 exports.getDirStats = getDirStats;
 exports.getDomain = getDomain;
 exports.getErrorMessage = getErrorMessage;
+exports.getExpandedSensitiveFields = getExpandedSensitiveFields;
 exports.getExtension = getExtension;
 exports.getFileSize = getFileSize;
 exports.getFileStats = getFileStats;
@@ -7485,7 +7601,6 @@ exports.isValidUrl = isValidUrl;
 exports.joinPaths = joinPaths;
 exports.listFiles = listFiles;
 exports.logError = logError;
-exports.logger = logger;
 exports.mapObject = mapObject;
 exports.mask = mask;
 exports.matchesPattern = matchesPattern;