@cipherstash/stack 0.15.1 → 0.15.3

package/dist/encryption/index.cjs

@@ -113,8 +113,305 @@ function buildEncryptConfig(...protectTables) {
   return config;
 }
 
+// ../../node_modules/.pnpm/evlog@1.9.0/node_modules/evlog/dist/utils.mjs
+function formatDuration(ms) {
+  if (ms < 1e3) return `${Math.round(ms)}ms`;
+  return `${(ms / 1e3).toFixed(2)}s`;
+}
+function isDev() {
+  if (typeof process !== "undefined") return process.env.NODE_ENV !== "production";
+  if (typeof window !== "undefined") return true;
+  return false;
+}
+function detectEnvironment() {
+  const env = typeof process !== "undefined" ? process.env : {};
+  const defaultEnvironment = isDev() ? "development" : "production";
+  return {
+    environment: env.NODE_ENV || defaultEnvironment,
+    service: env.SERVICE_NAME || "app",
+    version: env.APP_VERSION,
+    commitHash: env.COMMIT_SHA || env.GITHUB_SHA || env.VERCEL_GIT_COMMIT_SHA || env.CF_PAGES_COMMIT_SHA,
+    region: env.VERCEL_REGION || env.AWS_REGION || env.FLY_REGION || env.CF_REGION
+  };
+}
+function getConsoleMethod(level) {
+  return level;
+}
+var colors = {
+  reset: "\x1B[0m",
+  bold: "\x1B[1m",
+  dim: "\x1B[2m",
+  red: "\x1B[31m",
+  green: "\x1B[32m",
+  yellow: "\x1B[33m",
+  blue: "\x1B[34m",
+  magenta: "\x1B[35m",
+  cyan: "\x1B[36m",
+  white: "\x1B[37m",
+  gray: "\x1B[90m"
+};
+function getLevelColor(level) {
+  switch (level) {
+    case "error":
+      return colors.red;
+    case "warn":
+      return colors.yellow;
+    case "info":
+      return colors.cyan;
+    case "debug":
+      return colors.gray;
+    default:
+      return colors.white;
+  }
+}
+function matchesPattern(path, pattern) {
+  const regexPattern = pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*/g, "{{GLOBSTAR}}").replace(/\*/g, "[^/]*").replace(/{{GLOBSTAR}}/g, ".*").replace(/\?/g, "[^/]");
+  return new RegExp(`^${regexPattern}$`).test(path);
+}
+
+// ../../node_modules/.pnpm/evlog@1.9.0/node_modules/evlog/dist/logger.mjs
+function isPlainObject(val) {
+  return val !== null && typeof val === "object" && !Array.isArray(val);
+}
+function deepDefaults(base, defaults) {
+  const result = { ...base };
+  for (const key in defaults) {
+    const baseVal = result[key];
+    const defaultVal = defaults[key];
+    if (baseVal === void 0 || baseVal === null) result[key] = defaultVal;
+    else if (isPlainObject(baseVal) && isPlainObject(defaultVal)) result[key] = deepDefaults(baseVal, defaultVal);
+  }
+  return result;
+}
+var globalEnv = {
+  service: "app",
+  environment: "development"
+};
+var globalPretty = isDev();
+var globalSampling = {};
+var globalStringify = true;
+var globalDrain;
+var globalEnabled = true;
+function initLogger(config = {}) {
+  globalEnabled = config.enabled ?? true;
+  const detected = detectEnvironment();
+  globalEnv = {
+    service: config.env?.service ?? detected.service ?? "app",
+    environment: config.env?.environment ?? detected.environment ?? "development",
+    version: config.env?.version ?? detected.version,
+    commitHash: config.env?.commitHash ?? detected.commitHash,
+    region: config.env?.region ?? detected.region
+  };
+  globalPretty = config.pretty ?? isDev();
+  globalSampling = config.sampling ?? {};
+  globalStringify = config.stringify ?? true;
+  globalDrain = config.drain;
+}
+function shouldSample(level) {
+  const { rates } = globalSampling;
+  if (!rates) return true;
+  const percentage = level === "error" && rates.error === void 0 ? 100 : rates[level] ?? 100;
+  if (percentage <= 0) return false;
+  if (percentage >= 100) return true;
+  return Math.random() * 100 < percentage;
+}
+function shouldKeep(ctx) {
+  const { keep } = globalSampling;
+  if (!keep?.length) return false;
+  return keep.some((condition) => {
+    if (condition.status !== void 0 && ctx.status !== void 0 && ctx.status >= condition.status) return true;
+    if (condition.duration !== void 0 && ctx.duration !== void 0 && ctx.duration >= condition.duration) return true;
+    if (condition.path && ctx.path && matchesPattern(ctx.path, condition.path)) return true;
+    return false;
+  });
+}
+function emitWideEvent(level, event, skipSamplingCheck = false) {
+  if (!globalEnabled) return null;
+  if (!skipSamplingCheck && !shouldSample(level)) return null;
+  const formatted = {
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    level,
+    ...globalEnv,
+    ...event
+  };
+  if (globalPretty) prettyPrintWideEvent(formatted);
+  else if (globalStringify) console[getConsoleMethod(level)](JSON.stringify(formatted));
+  else console[getConsoleMethod(level)](formatted);
+  if (globalDrain) Promise.resolve(globalDrain({ event: formatted })).catch((err) => {
+    console.error("[evlog] drain failed:", err);
+  });
+  return formatted;
+}
+function emitTaggedLog(level, tag, message) {
+  if (!globalEnabled) return;
+  if (globalPretty) {
+    if (!shouldSample(level)) return;
+    const color = getLevelColor(level);
+    const timestamp = (/* @__PURE__ */ new Date()).toISOString().slice(11, 23);
+    console.log(`${colors.dim}${timestamp}${colors.reset} ${color}[${tag}]${colors.reset} ${message}`);
+    return;
+  }
+  emitWideEvent(level, {
+    tag,
+    message
+  });
+}
+function formatValue(value) {
+  if (value === null || value === void 0) return String(value);
+  if (typeof value === "object") {
+    const pairs = [];
+    for (const [k, v] of Object.entries(value)) if (v !== void 0 && v !== null) if (typeof v === "object") pairs.push(`${k}=${JSON.stringify(v)}`);
+    else pairs.push(`${k}=${v}`);
+    return pairs.join(" ");
+  }
+  return String(value);
+}
+function prettyPrintWideEvent(event) {
+  const { timestamp, level, service, environment, version, ...rest } = event;
+  const levelColor = getLevelColor(level);
+  const ts = timestamp.slice(11, 23);
+  let header = `${colors.dim}${ts}${colors.reset} ${levelColor}${level.toUpperCase()}${colors.reset}`;
+  header += ` ${colors.cyan}[${service}]${colors.reset}`;
+  if (rest.method && rest.path) {
+    header += ` ${rest.method} ${rest.path}`;
+    delete rest.method;
+    delete rest.path;
+  }
+  if (rest.status) {
+    const statusColor = rest.status >= 400 ? colors.red : colors.green;
+    header += ` ${statusColor}${rest.status}${colors.reset}`;
+    delete rest.status;
+  }
+  if (rest.duration) {
+    header += ` ${colors.dim}in ${rest.duration}${colors.reset}`;
+    delete rest.duration;
+  }
+  console.log(header);
+  const entries = Object.entries(rest).filter(([_, v]) => v !== void 0);
+  const lastIndex = entries.length - 1;
+  entries.forEach(([key, value], index) => {
+    const prefix = index === lastIndex ? "\u2514\u2500" : "\u251C\u2500";
+    const formatted = formatValue(value);
+    console.log(`  ${colors.dim}${prefix}${colors.reset} ${colors.cyan}${key}:${colors.reset} ${formatted}`);
+  });
+}
+function createLogMethod(level) {
+  return function logMethod(tagOrEvent, message) {
+    if (typeof tagOrEvent === "string" && message !== void 0) emitTaggedLog(level, tagOrEvent, message);
+    else if (typeof tagOrEvent === "object") emitWideEvent(level, tagOrEvent);
+    else emitTaggedLog(level, "log", String(tagOrEvent));
+  };
+}
+var _log = {
+  info: createLogMethod("info"),
+  error: createLogMethod("error"),
+  warn: createLogMethod("warn"),
+  debug: createLogMethod("debug")
+};
+var noopLogger = {
+  set() {
+  },
+  error() {
+  },
+  info() {
+  },
+  warn() {
+  },
+  emit() {
+    return null;
+  },
+  getContext() {
+    return {};
+  }
+};
+function createRequestLogger(options = {}) {
+  if (!globalEnabled) return noopLogger;
+  const startTime = Date.now();
+  let context = {
+    method: options.method,
+    path: options.path,
+    requestId: options.requestId
+  };
+  let hasError = false;
+  let hasWarn = false;
+  function addRequestLog(level, message) {
+    const entry = {
+      level,
+      message,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    };
+    const requestLogs = Array.isArray(context.requestLogs) ? [...context.requestLogs, entry] : [entry];
+    context = {
+      ...context,
+      requestLogs
+    };
+  }
+  return {
+    set(data) {
+      context = deepDefaults(data, context);
+    },
+    error(error, errorContext) {
+      hasError = true;
+      const err = typeof error === "string" ? new Error(error) : error;
+      context = deepDefaults({
+        ...errorContext,
+        error: {
+          name: err.name,
+          message: err.message,
+          stack: err.stack,
+          ..."status" in err && { status: err.status },
+          ..."statusText" in err && { statusText: err.statusText },
+          ..."statusCode" in err && { statusCode: err.statusCode },
+          ..."statusMessage" in err && { statusMessage: err.statusMessage },
+          ..."data" in err && { data: err.data },
+          ..."cause" in err && { cause: err.cause }
+        }
+      }, context);
+    },
+    info(message, infoContext) {
+      addRequestLog("info", message);
+      if (infoContext) {
+        const { requestLogs: _, ...rest } = infoContext;
+        context = deepDefaults(rest, context);
+      }
+    },
+    warn(message, warnContext) {
+      hasWarn = true;
+      addRequestLog("warn", message);
+      if (warnContext) {
+        const { requestLogs: _, ...rest } = warnContext;
+        context = deepDefaults(rest, context);
+      }
+    },
+    emit(overrides) {
+      const durationMs = Date.now() - startTime;
+      const duration = formatDuration(durationMs);
+      const level = hasError ? "error" : hasWarn ? "warn" : "info";
+      const { _forceKeep, ...restOverrides } = overrides ?? {};
+      const tailCtx = {
+        status: context.status ?? restOverrides.status,
+        duration: durationMs,
+        path: context.path,
+        method: context.method,
+        context: {
+          ...context,
+          ...restOverrides
+        }
+      };
+      if (!(_forceKeep || shouldKeep(tailCtx)) && !shouldSample(level)) return null;
+      return emitWideEvent(level, {
+        ...context,
+        ...restOverrides,
+        duration
+      }, true);
+    },
+    getContext() {
+      return { ...context };
+    }
+  };
+}
+
 // src/utils/logger/index.ts
-var import_evlog = require("evlog");
 var validLevels = ["debug", "info", "error"];
 function levelFromEnv() {
   const env = process.env.STASH_STACK_LOG;
@@ -138,7 +435,7 @@ function initStackLogger() {
   initialized = true;
   const level = levelFromEnv();
   const rates = samplingRatesForLevel(level);
-  (0, import_evlog.initLogger)({
+  initLogger({
     env: { service: "@cipherstash/stack" },
     enabled: true,
     sampling: { rates }
@@ -150,7 +447,7 @@ function safeMessage(args) {
 }
 var logger = {
   debug(...args) {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       level: "debug",
       source: "@cipherstash/stack",
@@ -159,18 +456,18 @@ var logger = {
     log.emit();
   },
   info(...args) {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({ source: "@cipherstash/stack" });
     log.info(safeMessage(args));
     log.emit();
   },
   warn(...args) {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.warn(safeMessage(args));
     log.emit();
   },
   error(...args) {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.error(safeMessage(args));
     log.emit();
   }
@@ -408,7 +705,7 @@ var BatchEncryptQueryOperation = class extends EncryptionOperation {
     );
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "batchEncryptQuery",
       count: this.terms.length,
@@ -453,7 +750,7 @@ var BatchEncryptQueryOperationWithLockContext = class extends EncryptionOperatio
     this.auditMetadata = auditMetadata;
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "batchEncryptQuery",
       count: this.terms.length,
@@ -533,7 +830,7 @@ var BulkDecryptOperation = class extends EncryptionOperation {
     return new BulkDecryptOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkDecrypt",
       count: this.encryptedPayloads?.length ?? 0,
@@ -585,7 +882,7 @@ var BulkDecryptOperationWithLockContext = class extends EncryptionOperation {
   }
   async execute() {
     const { client, encryptedPayloads } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkDecrypt",
       count: encryptedPayloads?.length ?? 0,
@@ -1156,7 +1453,7 @@ var BulkDecryptModelsOperation = class extends EncryptionOperation {
     return new BulkDecryptModelsOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkDecryptModels",
       count: this.models.length,
@@ -1203,7 +1500,7 @@ var BulkDecryptModelsOperationWithLockContext = class extends EncryptionOperatio
   }
   async execute() {
     const { client, models } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkDecryptModels",
       count: models.length,
@@ -1268,7 +1565,7 @@ var BulkEncryptOperation = class extends EncryptionOperation {
     return new BulkEncryptOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkEncrypt",
       table: this.table.tableName,
@@ -1334,7 +1631,7 @@ var BulkEncryptOperationWithLockContext = class extends EncryptionOperation {
   }
   async execute() {
     const { client, plaintexts, column, table } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkEncrypt",
       table: table.tableName,
@@ -1401,7 +1698,7 @@ var BulkEncryptModelsOperation = class extends EncryptionOperation {
     return new BulkEncryptModelsOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkEncryptModels",
       table: this.table.tableName,
@@ -1455,7 +1752,7 @@ var BulkEncryptModelsOperationWithLockContext = class extends EncryptionOperatio
   }
   async execute() {
     const { client, models, table } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "bulkEncryptModels",
       table: table.tableName,
@@ -1509,7 +1806,7 @@ var DecryptOperation = class extends EncryptionOperation {
     return new DecryptOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "decrypt",
       lockContext: false
@@ -1558,7 +1855,7 @@ var DecryptOperationWithLockContext = class extends EncryptionOperation {
     }
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "decrypt",
       lockContext: true
@@ -1609,7 +1906,7 @@ var DecryptModelOperation = class extends EncryptionOperation {
     return new DecryptModelOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "decryptModel",
       lockContext: false
@@ -1654,7 +1951,7 @@ var DecryptModelOperationWithLockContext = class extends EncryptionOperation {
     }
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "decryptModel",
       lockContext: true
@@ -1710,7 +2007,7 @@ var EncryptOperation = class extends EncryptionOperation {
     return new EncryptOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encrypt",
       table: this.table.tableName,
@@ -1771,7 +2068,7 @@ var EncryptOperationWithLockContext = class extends EncryptionOperation {
   }
   async execute() {
     const { client, plaintext, column, table } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encrypt",
       table: table.tableName,
@@ -1827,7 +2124,7 @@ var EncryptModelOperation = class extends EncryptionOperation {
     return new EncryptModelOperationWithLockContext(this, lockContext);
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encryptModel",
       table: this.table.tableName,
@@ -1880,7 +2177,7 @@ var EncryptModelOperationWithLockContext = class extends EncryptionOperation {
   }
   async execute() {
     const { client, model, table } = this.operation.getOperation();
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encryptModel",
       table: table.tableName,
@@ -1938,7 +2235,7 @@ var EncryptQueryOperation = class extends EncryptionOperation {
     );
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encryptQuery",
       table: this.opts.table.tableName,
@@ -2001,7 +2298,7 @@ var EncryptQueryOperationWithLockContext = class extends EncryptionOperation {
     this.auditMetadata = auditMetadata;
   }
   async execute() {
-    const log = (0, import_evlog.createRequestLogger)();
+    const log = createRequestLogger();
     log.set({
       op: "encryptQuery",
       table: this.opts.table.tableName,