@dumanarge/xssrv-shared-lib 1.0.6 → 1.0.8

package/dist/log-events/log-event.types.d.ts

@@ -0,0 +1,138 @@
+export declare const LOG_KIND: {
+    readonly ACCESS: "access";
+    readonly AUDIT: "audit";
+    readonly EVENT: "event";
+};
+export type LogKind = (typeof LOG_KIND)[keyof typeof LOG_KIND];
+export declare const LOG_TRANSPORT: {
+    readonly HTTP: "http";
+    readonly GRAPHQL: "graphql";
+    readonly GRPC: "grpc";
+    readonly RABBITMQ: "rabbitmq";
+    readonly INTERNAL: "internal";
+};
+export type LogTransport = (typeof LOG_TRANSPORT)[keyof typeof LOG_TRANSPORT];
+export declare const ACCESS_LOG_RESULT_STATUS: {
+    readonly SUCCESS: "SUCCESS";
+    readonly FAILURE: "FAILURE";
+};
+export type AccessLogResultStatus = (typeof ACCESS_LOG_RESULT_STATUS)[keyof typeof ACCESS_LOG_RESULT_STATUS];
+export declare const ACCESS_LOG_OUTCOME: {
+    readonly SUCCESS: "success";
+    readonly ERROR: "error";
+    readonly TIMEOUT: "timeout";
+    readonly ABORTED: "aborted";
+    readonly CRASHED: "crashed";
+};
+export type AccessLogOutcome = (typeof ACCESS_LOG_OUTCOME)[keyof typeof ACCESS_LOG_OUTCOME];
+export declare const ACCESS_LOG_FAILURE_SOURCE: {
+    readonly APPLICATION: "application";
+    readonly TRANSPORT: "transport";
+    readonly UPSTREAM: "upstream";
+    readonly CLIENT: "client";
+};
+export type AccessLogFailureSource = (typeof ACCESS_LOG_FAILURE_SOURCE)[keyof typeof ACCESS_LOG_FAILURE_SOURCE];
+export declare const AUDIT_ACTOR_TYPE: {
+    readonly ACCOUNT: "ACCOUNT";
+    readonly SYSTEM: "SYSTEM";
+    readonly AUTOMATION: "AUTOMATION";
+    readonly DEVICE: "DEVICE";
+    readonly ANONYMOUS: "ANONYMOUS";
+};
+export type AuditActorType = (typeof AUDIT_ACTOR_TYPE)[keyof typeof AUDIT_ACTOR_TYPE];
+export declare const AUDIT_SEVERITY: {
+    readonly INFO: "INFO";
+    readonly WARN: "WARN";
+    readonly ERROR: "ERROR";
+};
+export type AuditSeverity = (typeof AUDIT_SEVERITY)[keyof typeof AUDIT_SEVERITY];
+export interface AccessLogPayload {
+    readonly started_at: string;
+    readonly completed_at: string;
+    readonly duration_ms: number;
+    readonly correlation_id: string;
+    readonly request_id?: string;
+    readonly trace_id?: string;
+    readonly span_id?: string;
+    readonly tenant_id?: string;
+    readonly tenant_name?: string;
+    readonly application_id?: string;
+    readonly application_name?: string;
+    readonly account_id?: string;
+    readonly email?: string;
+    readonly result_status: AccessLogResultStatus;
+    readonly outcome: AccessLogOutcome;
+    readonly failure_reason?: string;
+    readonly failure_source?: AccessLogFailureSource;
+    readonly error_key?: string;
+    readonly error_category?: string;
+    readonly exception_class?: string;
+    readonly method?: string;
+    readonly path?: string;
+    readonly status_code?: number;
+    readonly transport?: LogTransport;
+    readonly source_service?: string;
+    readonly source_transport?: LogTransport;
+    readonly source_operation?: string;
+    readonly request_headers?: Record<string, string>;
+    readonly request_body?: unknown;
+    readonly response_body?: unknown;
+    readonly body_truncated?: boolean;
+}
+export interface AccessLogEvent {
+    readonly kind: typeof LOG_KIND.ACCESS;
+    readonly transport: LogTransport;
+    readonly payload: AccessLogPayload;
+}
+export interface AuditLogPayload {
+    readonly started_at: string;
+    readonly correlation_id: string;
+    readonly request_id?: string;
+    readonly trace_id?: string;
+    readonly span_id?: string;
+    readonly tenant_id: string;
+    readonly tenant_name?: string;
+    readonly application_id?: string;
+    readonly application_name?: string;
+    readonly actor_type: AuditActorType;
+    readonly actor_id?: string;
+    readonly actor_email?: string;
+    readonly actor_email_hash?: string;
+    readonly actor_ip?: string;
+    readonly target_type?: string;
+    readonly target_id?: string;
+    readonly category?: string;
+    readonly severity?: AuditSeverity;
+    readonly before?: Record<string, unknown>;
+    readonly after?: Record<string, unknown>;
+    readonly diff?: Record<string, unknown>;
+    readonly metadata?: Record<string, unknown>;
+    readonly result_status: AccessLogResultStatus;
+    readonly failure_reason?: string;
+}
+export interface AuditLogEvent {
+    readonly kind: typeof LOG_KIND.AUDIT;
+    readonly action: string;
+    readonly payload: AuditLogPayload;
+}
+export interface DomainEventLogPayload {
+    readonly started_at: string;
+    readonly correlation_id: string;
+    readonly request_id?: string;
+    readonly trace_id?: string;
+    readonly span_id?: string;
+    readonly tenant_id?: string;
+    readonly event_type: string;
+    readonly aggregate_type: string;
+    readonly aggregate_id: string;
+    readonly event_version?: number;
+    readonly payload: Record<string, unknown>;
+    readonly metadata?: Record<string, unknown>;
+}
+export interface DomainLogEvent {
+    readonly kind: typeof LOG_KIND.EVENT;
+    readonly domain: string;
+    readonly payload: DomainEventLogPayload;
+}
+export type LogEvent = AccessLogEvent | AuditLogEvent | DomainLogEvent;
+export declare function buildLogRoutingKey(event: LogEvent, serviceName: string): string;

package/dist/log-events/log-event.types.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_SEVERITY = exports.AUDIT_ACTOR_TYPE = exports.ACCESS_LOG_FAILURE_SOURCE = exports.ACCESS_LOG_OUTCOME = exports.ACCESS_LOG_RESULT_STATUS = exports.LOG_TRANSPORT = exports.LOG_KIND = void 0;
+exports.buildLogRoutingKey = buildLogRoutingKey;
+exports.LOG_KIND = {
+    ACCESS: 'access',
+    AUDIT: 'audit',
+    EVENT: 'event',
+};
+exports.LOG_TRANSPORT = {
+    HTTP: 'http',
+    GRAPHQL: 'graphql',
+    GRPC: 'grpc',
+    RABBITMQ: 'rabbitmq',
+    INTERNAL: 'internal',
+};
+exports.ACCESS_LOG_RESULT_STATUS = {
+    SUCCESS: 'SUCCESS',
+    FAILURE: 'FAILURE',
+};
+exports.ACCESS_LOG_OUTCOME = {
+    SUCCESS: 'success',
+    ERROR: 'error',
+    TIMEOUT: 'timeout',
+    ABORTED: 'aborted',
+    CRASHED: 'crashed',
+};
+exports.ACCESS_LOG_FAILURE_SOURCE = {
+    APPLICATION: 'application',
+    TRANSPORT: 'transport',
+    UPSTREAM: 'upstream',
+    CLIENT: 'client',
+};
+exports.AUDIT_ACTOR_TYPE = {
+    ACCOUNT: 'ACCOUNT',
+    SYSTEM: 'SYSTEM',
+    AUTOMATION: 'AUTOMATION',
+    DEVICE: 'DEVICE',
+    ANONYMOUS: 'ANONYMOUS',
+};
+exports.AUDIT_SEVERITY = {
+    INFO: 'INFO',
+    WARN: 'WARN',
+    ERROR: 'ERROR',
+};
+function buildLogRoutingKey(event, serviceName) {
+    switch (event.kind) {
+        case exports.LOG_KIND.ACCESS:
+            return `access.${event.transport}.${serviceName}`;
+        case exports.LOG_KIND.AUDIT:
+            return `audit.${serviceName}.${event.action}`;
+        case exports.LOG_KIND.EVENT:
+            return `event.${serviceName}.${event.domain}`;
+    }
+}
+//# sourceMappingURL=log-event.types.js.map

package/dist/log-events/log-event.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-event.types.js","sourceRoot":"","sources":["../../src/log-events/log-event.types.ts"],"names":[],"mappings":";;;AA+OA,gDAYC;AA5OY,QAAA,QAAQ,GAAG;IACtB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,OAAO;CACN,CAAC;AAIE,QAAA,aAAa,GAAG;IAC3B,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;CACZ,CAAC;AAIE,QAAA,wBAAwB,GAAG;IACtC,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAC;AAKE,QAAA,kBAAkB,GAAG;IAChC,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,OAAO;IACd,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;CACV,CAAC;AAKE,QAAA,yBAAyB,GAAG;IACvC,WAAW,EAAE,aAAa;IAC1B,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAKE,QAAA,gBAAgB,GAAG;IAC9B,OAAO,EAAE,SAAS;IAClB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;CACd,CAAC;AAKE,QAAA,cAAc,GAAG;IAC5B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE,OAAO;CACN,CAAC;AAkKX,SAAgB,kBAAkB,CAChC,KAAe,EACf,WAAmB;IAEnB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,gBAAQ,CAAC,MAAM;YAClB,OAAO,UAAU,KAAK,CAAC,SAAS,IAAI,WAAW,EAAE,CAAC;QACpD,KAAK,gBAAQ,CAAC,KAAK;YACjB,OAAO,SAAS,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAChD,KAAK,gBAAQ,CAAC,KAAK;YACjB,OAAO,SAAS,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;AACH,CAAC"}

package/dist/log-events/log-publisher.d.ts

@@ -0,0 +1,8 @@
+import type { LogEvent } from './log-event.types';
+export declare abstract class LogPublisher {
+    abstract publish(event: LogEvent): Promise<void>;
+    flush(_maxWaitMs?: number): Promise<void>;
+}
+export declare class NoopLogPublisher extends LogPublisher {
+    publish(_event: LogEvent): Promise<void>;
+}

package/dist/log-events/log-publisher.js

@@ -0,0 +1,26 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NoopLogPublisher = exports.LogPublisher = void 0;
+const common_1 = require("@nestjs/common");
+class LogPublisher {
+    async flush(_maxWaitMs) {
+        return;
+    }
+}
+exports.LogPublisher = LogPublisher;
+let NoopLogPublisher = class NoopLogPublisher extends LogPublisher {
+    async publish(_event) {
+        return;
+    }
+};
+exports.NoopLogPublisher = NoopLogPublisher;
+exports.NoopLogPublisher = NoopLogPublisher = __decorate([
+    (0, common_1.Injectable)()
+], NoopLogPublisher);
+//# sourceMappingURL=log-publisher.js.map

package/dist/log-events/log-publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-publisher.js","sourceRoot":"","sources":["../../src/log-events/log-publisher.ts"],"names":[],"mappings":";;;;;;;;;AAeA,2CAA4C;AAG5C,MAAsB,YAAY;IAOhC,KAAK,CAAC,KAAK,CAAC,UAAmB;QAC7B,OAAO;IACT,CAAC;CACF;AAVD,oCAUC;AAOM,IAAM,gBAAgB,GAAtB,MAAM,gBAAiB,SAAQ,YAAY;IAChD,KAAK,CAAC,OAAO,CAAC,MAAgB;QAC5B,OAAO;IACT,CAAC;CACF,CAAA;AAJY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;GACA,gBAAgB,CAI5B"}

package/dist/log-events/rabbitmq-log-publisher.d.ts

@@ -0,0 +1,34 @@
+import { type OnModuleDestroy, type OnModuleInit } from '@nestjs/common';
+import { LogPublisher } from './log-publisher';
+import { type LogEvent } from './log-event.types';
+export interface RabbitMqLogPublisherPort {
+    publish(exchange: string, routingKey: string, buffer: Buffer, options?: Record<string, unknown>): Promise<void>;
+}
+export interface RabbitMqLogPublisherOptions {
+    readonly publisher: RabbitMqLogPublisherPort;
+    readonly serviceName: string;
+    readonly exchange?: string;
+    readonly bufferCapacity?: number;
+    readonly drainIntervalMs?: number;
+    readonly drainBatchSize?: number;
+}
+export declare class RabbitMqLogPublisher extends LogPublisher implements OnModuleInit, OnModuleDestroy {
+    private readonly logger;
+    private readonly port;
+    private readonly serviceName;
+    private readonly exchange;
+    private readonly buffer;
+    private readonly drainIntervalMs;
+    private readonly drainBatchSize;
+    private drainTimer;
+    private draining;
+    constructor(options: RabbitMqLogPublisherOptions);
+    static create(options: RabbitMqLogPublisherOptions): RabbitMqLogPublisher;
+    onModuleInit(): void;
+    onModuleDestroy(): Promise<void>;
+    publish(event: LogEvent): Promise<void>;
+    flush(maxWaitMs?: number): Promise<void>;
+    private drainBuffer;
+    private tryDirectPublish;
+    protected serializeEvent(event: LogEvent): Buffer;
+}

package/dist/log-events/rabbitmq-log-publisher.js

@@ -0,0 +1,159 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var RabbitMqLogPublisher_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RabbitMqLogPublisher = void 0;
+const common_1 = require("@nestjs/common");
+const span_decorator_1 = require("../tracing/span.decorator");
+const log_publisher_1 = require("./log-publisher");
+const ring_buffer_1 = require("./ring-buffer");
+const log_event_types_1 = require("./log-event.types");
+const DEFAULT_EXCHANGE = 'xenonsmart.logs';
+const DEFAULT_BUFFER_CAPACITY = 10_000;
+const DEFAULT_DRAIN_INTERVAL_MS = 2_000;
+const DEFAULT_DRAIN_BATCH_SIZE = 100;
+const DEFAULT_FLUSH_TIMEOUT_MS = 5_000;
+let RabbitMqLogPublisher = RabbitMqLogPublisher_1 = class RabbitMqLogPublisher extends log_publisher_1.LogPublisher {
+    logger = new common_1.Logger(RabbitMqLogPublisher_1.name);
+    port;
+    serviceName;
+    exchange;
+    buffer;
+    drainIntervalMs;
+    drainBatchSize;
+    drainTimer = null;
+    draining = false;
+    constructor(options) {
+        super();
+        this.port = options.publisher;
+        this.serviceName = options.serviceName;
+        this.exchange =
+            options.exchange ??
+                process.env.RABBITMQ_LOGS_EXCHANGE ??
+                DEFAULT_EXCHANGE;
+        this.buffer = new ring_buffer_1.RingBuffer({
+            capacity: options.bufferCapacity ?? DEFAULT_BUFFER_CAPACITY,
+        });
+        this.drainIntervalMs =
+            options.drainIntervalMs ?? DEFAULT_DRAIN_INTERVAL_MS;
+        this.drainBatchSize =
+            options.drainBatchSize ?? DEFAULT_DRAIN_BATCH_SIZE;
+    }
+    static create(options) {
+        return new RabbitMqLogPublisher_1(options);
+    }
+    onModuleInit() {
+        this.drainTimer = setInterval(() => {
+            void this.drainBuffer();
+        }, this.drainIntervalMs);
+        this.logger.log(`RabbitMqLogPublisher ready (exchange=${this.exchange}, bufferCapacity=${this.buffer.maxCapacity})`);
+    }
+    async onModuleDestroy() {
+        if (this.drainTimer) {
+            clearInterval(this.drainTimer);
+            this.drainTimer = null;
+        }
+        await this.flush(DEFAULT_FLUSH_TIMEOUT_MS);
+    }
+    async publish(event) {
+        const delivered = await this.tryDirectPublish(event);
+        if (!delivered) {
+            this.buffer.push(event);
+            this.logger.debug(`Log publish buffered (kind=${event.kind}, bufferLen=${this.buffer.length}, drops=${this.buffer.totalDrops})`);
+        }
+    }
+    async flush(maxWaitMs = DEFAULT_FLUSH_TIMEOUT_MS) {
+        const deadline = Date.now() + maxWaitMs;
+        while (this.buffer.length > 0 && Date.now() < deadline) {
+            const drained = await this.drainBuffer();
+            if (!drained && this.buffer.length > 0) {
+                await new Promise((resolve) => setTimeout(resolve, 100));
+            }
+        }
+        if (this.buffer.length > 0) {
+            this.logger.warn(`LogPublisher flush timeout — ${this.buffer.length} events remained unflushed`);
+        }
+    }
+    async drainBuffer() {
+        if (this.draining) {
+            return false;
+        }
+        if (this.buffer.length === 0) {
+            return true;
+        }
+        this.draining = true;
+        try {
+            const maxPerTick = Math.min(this.drainBatchSize, this.buffer.length);
+            for (let i = 0; i < maxPerTick; i++) {
+                const event = this.buffer.shift();
+                if (!event) {
+                    break;
+                }
+                const delivered = await this.tryDirectPublish(event);
+                if (!delivered) {
+                    this.buffer.push(event);
+                    return false;
+                }
+            }
+            return true;
+        }
+        finally {
+            this.draining = false;
+        }
+    }
+    async tryDirectPublish(event) {
+        const routingKey = (0, log_event_types_1.buildLogRoutingKey)(event, this.serviceName);
+        const body = this.serializeEvent(event);
+        try {
+            await this.port.publish(this.exchange, routingKey, body, {
+                persistent: true,
+                contentType: 'application/json',
+                headers: {
+                    'x-log-kind': event.kind,
+                    'x-source-service': this.serviceName,
+                },
+            });
+            return true;
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            this.logger.debug(`Log direct publish failed (kind=${event.kind}, routingKey=${routingKey}): ${message}`);
+            return false;
+        }
+    }
+    serializeEvent(event) {
+        const envelope = {
+            kind: event.kind,
+            serviceName: this.serviceName,
+            publishedAt: new Date().toISOString(),
+            ...event,
+        };
+        return Buffer.from(JSON.stringify(envelope));
+    }
+};
+exports.RabbitMqLogPublisher = RabbitMqLogPublisher;
+__decorate([
+    (0, span_decorator_1.Span)('logs.publish'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], RabbitMqLogPublisher.prototype, "publish", null);
+__decorate([
+    (0, span_decorator_1.Span)('logs.drain'),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], RabbitMqLogPublisher.prototype, "drainBuffer", null);
+exports.RabbitMqLogPublisher = RabbitMqLogPublisher = RabbitMqLogPublisher_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [Object])
+], RabbitMqLogPublisher);
+//# sourceMappingURL=rabbitmq-log-publisher.js.map

package/dist/log-events/rabbitmq-log-publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rabbitmq-log-publisher.js","sourceRoot":"","sources":["../../src/log-events/rabbitmq-log-publisher.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAsBA,2CAKwB;AACxB,8DAAiD;AACjD,mDAA+C;AAC/C,+CAA2C;AAC3C,uDAG2B;AAwB3B,MAAM,gBAAgB,GAAW,iBAAiB,CAAC;AACnD,MAAM,uBAAuB,GAAW,MAAM,CAAC;AAC/C,MAAM,yBAAyB,GAAW,KAAK,CAAC;AAChD,MAAM,wBAAwB,GAAW,GAAG,CAAC;AAC7C,MAAM,wBAAwB,GAAW,KAAK,CAAC;AAGxC,IAAM,oBAAoB,4BAA1B,MAAM,oBACX,SAAQ,4BAAY;IAGH,MAAM,GAAW,IAAI,eAAM,CAAC,sBAAoB,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAA2B;IAC/B,WAAW,CAAS;IACpB,QAAQ,CAAS;IACjB,MAAM,CAAuB;IAC7B,eAAe,CAAS;IACxB,cAAc,CAAS;IAChC,UAAU,GAA0B,IAAI,CAAC;IACzC,QAAQ,GAAY,KAAK,CAAC;IAElC,YAAY,OAAoC;QAC9C,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,CAAC;QAC9B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,QAAQ;gBAChB,OAAO,CAAC,GAAG,CAAC,sBAAsB;gBAClC,gBAAgB,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,IAAI,wBAAU,CAAW;YACrC,QAAQ,EAAE,OAAO,CAAC,cAAc,IAAI,uBAAuB;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,eAAe;YAClB,OAAO,CAAC,eAAe,IAAI,yBAAyB,CAAC;QACvD,IAAI,CAAC,cAAc;YACjB,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACvD,CAAC;IAKD,MAAM,CAAC,MAAM,CACX,OAAoC;QAEpC,OAAO,IAAI,sBAAoB,CAAC,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,YAAY;QACV,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,wCAAwC,IAAI,CAAC,QAAQ,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,GAAG,CACpG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC7C,CAAC;IAGK,AAAN,KAAK,CAAC,OAAO,CAAC,KAAe;QAC3B,MAAM,SAAS,GAAY,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,8BAA8B,KAAK,CAAC,IAAI,eAAe,IAAI,CAAC,MAAM,CAAC,MAAM,WAAW,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,CAC9G,CAAC;QACJ,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,KAAK,CAAC,YAAoB,wBAAwB;QACtD,MAAM,QAAQ,GAAW,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QAChD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YACvD,MAAM,OAAO,GAAY,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;YAClD,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,gCAAgC,IAAI,CAAC,MAAM,CAAC,MAAM,4BAA4B,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAGa,AAAN,KAAK,CAAC,WAAW;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,UAAU,GAAW,IAAI,CAAC,GAAG,CACjC,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CACnB,CAAC;YACF,KAAK,IAAI,CAAC,GAAW,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5C,MAAM,KAAK,GAAyB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACxD,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,MAAM;gBACR,CAAC;gBAED,MAAM,SAAS,GAAY,MAAM,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;gBAC9D,IAAI,CAAC,SAAS,EAAE,CAAC;oBAEf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACxB,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,KAAe;QAC5C,MAAM,UAAU,GAAW,IAAA,oCAAkB,EAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,MAAM,IAAI,GAAW,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEhD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE;gBACvD,UAAU,EAAE,IAAI;gBAChB,WAAW,EAAE,kBAAkB;gBAC/B,OAAO,EAAE;oBACP,YAAY,EAAE,KAAK,CAAC,IAAI;oBACxB,kBAAkB,EAAE,IAAI,CAAC,WAAW;iBACrC;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,mCAAmC,KAAK,CAAC,IAAI,gBAAgB,UAAU,MAAM,OAAO,EAAE,CACvF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAMS,cAAc,CAAC,KAAe;QACtC,MAAM,QAAQ,GAA4B;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,GAAG,KAAK;SACT,CAAC;QACF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF,CAAA;AA9JY,oDAAoB;AA0DzB;IADL,IAAA,qBAAI,EAAC,cAAc,CAAC;;;;mDASpB;AAsBa;IADb,IAAA,qBAAI,EAAC,YAAY,CAAC;;;;uDAgClB;+BAvHU,oBAAoB;IADhC,IAAA,mBAAU,GAAE;;GACA,oBAAoB,CA8JhC"}

package/dist/log-events/redaction.d.ts

@@ -0,0 +1,16 @@
+export declare const REDACTED_VALUE: string;
+export declare const DEFAULT_REDACTED_HEADER_KEYS: ReadonlyArray<string>;
+export declare const DEFAULT_REDACTED_BODY_KEYS: ReadonlyArray<string>;
+export interface RedactionOptions {
+    readonly keys?: ReadonlyArray<string>;
+    readonly maxDepth?: number;
+}
+export declare function redactHeaders(headers: Record<string, string | string[] | undefined> | undefined, options?: RedactionOptions): Record<string, string>;
+export declare function redactObject<T>(input: T, options?: RedactionOptions): T;
+export interface TruncateBodyResult<T> {
+    readonly body: T | string;
+    readonly truncated: boolean;
+    readonly size_bytes: number;
+}
+export declare function truncateBody<T>(body: T, maxBytes: number): TruncateBodyResult<T>;
+export declare function hashEmail(email: string, tenantSalt: string): string;

package/dist/log-events/redaction.js

@@ -0,0 +1,140 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REDACTED_BODY_KEYS = exports.DEFAULT_REDACTED_HEADER_KEYS = exports.REDACTED_VALUE = void 0;
+exports.redactHeaders = redactHeaders;
+exports.redactObject = redactObject;
+exports.truncateBody = truncateBody;
+exports.hashEmail = hashEmail;
+const crypto_1 = require("crypto");
+exports.REDACTED_VALUE = '[REDACTED]';
+exports.DEFAULT_REDACTED_HEADER_KEYS = [
+    'authorization',
+    'cookie',
+    'set-cookie',
+    'proxy-authorization',
+    'x-api-key',
+    'x-auth-token',
+    'x-access-token',
+    'x-refresh-token',
+    'x-user-token',
+    'x-session-token',
+    'x-csrf-token',
+    'x-amz-security-token',
+];
+exports.DEFAULT_REDACTED_BODY_KEYS = [
+    'password',
+    'new_password',
+    'old_password',
+    'password_confirmation',
+    'token',
+    'access_token',
+    'refresh_token',
+    'id_token',
+    'api_key',
+    'apikey',
+    'secret',
+    'client_secret',
+    'private_key',
+    'credit_card',
+    'card_number',
+    'cvv',
+    'cvc',
+    'ssn',
+    'tc_kimlik',
+    'tc_kimlik_no',
+    'pin',
+    'otp',
+    'mfa_code',
+    'verification_code',
+];
+const DEFAULT_MAX_DEPTH = 10;
+function normalizeKey(key) {
+    return key.toLowerCase().trim();
+}
+function toKeySet(keys) {
+    const set = new Set();
+    for (const key of keys) {
+        set.add(normalizeKey(key));
+    }
+    return set;
+}
+function redactHeaders(headers, options = {}) {
+    if (!headers) {
+        return {};
+    }
+    const redactedKeys = toKeySet(options.keys ?? exports.DEFAULT_REDACTED_HEADER_KEYS);
+    const redacted = {};
+    for (const [rawKey, rawValue] of Object.entries(headers)) {
+        if (rawValue === undefined) {
+            continue;
+        }
+        const normalizedKey = normalizeKey(rawKey);
+        const value = Array.isArray(rawValue) ? rawValue.join(',') : rawValue;
+        redacted[rawKey] = redactedKeys.has(normalizedKey) ? exports.REDACTED_VALUE : value;
+    }
+    return redacted;
+}
+function redactObject(input, options = {}) {
+    const redactedKeys = toKeySet(options.keys ?? exports.DEFAULT_REDACTED_BODY_KEYS);
+    const maxDepth = options.maxDepth ?? DEFAULT_MAX_DEPTH;
+    return recursiveRedact(input, redactedKeys, maxDepth, 0);
+}
+function recursiveRedact(value, keys, maxDepth, depth) {
+    if (depth >= maxDepth) {
+        return value;
+    }
+    if (value === null || value === undefined) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => recursiveRedact(item, keys, maxDepth, depth + 1));
+    }
+    if (typeof value === 'object') {
+        const source = value;
+        const next = {};
+        for (const [rawKey, rawValue] of Object.entries(source)) {
+            const normalizedKey = normalizeKey(rawKey);
+            if (keys.has(normalizedKey)) {
+                next[rawKey] = exports.REDACTED_VALUE;
+            }
+            else {
+                next[rawKey] = recursiveRedact(rawValue, keys, maxDepth, depth + 1);
+            }
+        }
+        return next;
+    }
+    return value;
+}
+function truncateBody(body, maxBytes) {
+    if (body === undefined || body === null) {
+        return { body, truncated: false, size_bytes: 0 };
+    }
+    let serialized;
+    try {
+        serialized = typeof body === 'string' ? body : JSON.stringify(body);
+    }
+    catch {
+        return {
+            body: '[UNSERIALIZABLE]',
+            truncated: true,
+            size_bytes: 0,
+        };
+    }
+    const sizeBytes = Buffer.byteLength(serialized, 'utf8');
+    if (sizeBytes <= maxBytes) {
+        return { body, truncated: false, size_bytes: sizeBytes };
+    }
+    const truncatedText = serialized.slice(0, Math.max(0, maxBytes - '[...TRUNCATED]'.length));
+    return {
+        body: `${truncatedText}[...TRUNCATED]`,
+        truncated: true,
+        size_bytes: sizeBytes,
+    };
+}
+function hashEmail(email, tenantSalt) {
+    const normalized = email.trim().toLowerCase();
+    return (0, crypto_1.createHash)('sha256')
+        .update(`${tenantSalt}:${normalized}`)
+        .digest('hex');
+}
+//# sourceMappingURL=redaction.js.map

package/dist/log-events/redaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.js","sourceRoot":"","sources":["../../src/log-events/redaction.ts"],"names":[],"mappings":";;;AA4FA,sCAuBC;AAMD,oCASC;AAkDD,oCAiCC;AAMD,8BAKC;AA/MD,mCAAoC;AAEvB,QAAA,cAAc,GAAW,YAAY,CAAC;AAKtC,QAAA,4BAA4B,GAA0B;IACjE,eAAe;IACf,QAAQ;IACR,YAAY;IACZ,qBAAqB;IACrB,WAAW;IACX,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;IACd,iBAAiB;IACjB,cAAc;IACd,sBAAsB;CACvB,CAAC;AAKW,QAAA,0BAA0B,GAA0B;IAC/D,UAAU;IACV,cAAc;IACd,cAAc;IACd,uBAAuB;IACvB,OAAO;IACP,cAAc;IACd,eAAe;IACf,UAAU;IACV,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,eAAe;IACf,aAAa;IACb,aAAa;IACb,aAAa;IACb,KAAK;IACL,KAAK;IACL,KAAK;IACL,WAAW;IACX,cAAc;IACd,KAAK;IACL,KAAK;IACL,UAAU;IACV,mBAAmB;CACpB,CAAC;AAOF,MAAM,iBAAiB,GAAW,EAAE,CAAC;AAErC,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,QAAQ,CAAC,IAA2B;IAC3C,MAAM,GAAG,GAAgB,IAAI,GAAG,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAMD,SAAgB,aAAa,CAC3B,OAAkE,EAClE,UAA4B,EAAE;IAE9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAgB,QAAQ,CACxC,OAAO,CAAC,IAAI,IAAI,oCAA4B,CAC7C,CAAC;IACF,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QACD,MAAM,aAAa,GAAW,YAAY,CAAC,MAAM,CAAC,CAAC;QACnD,MAAM,KAAK,GAAW,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC9E,QAAQ,CAAC,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,sBAAc,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9E,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAMD,SAAgB,YAAY,CAC1B,KAAQ,EACR,UAA4B,EAAE;IAE9B,MAAM,YAAY,GAAgB,QAAQ,CACxC,OAAO,CAAC,IAAI,IAAI,kCAA0B,CAC3C,CAAC;IACF,MAAM,QAAQ,GAAW,OAAO,CAAC,QAAQ,IAAI,iBAAiB,CAAC;IAC/D,OAAO,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,CAAM,CAAC;AAChE,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,IAAiB,EACjB,QAAgB,EAChB,KAAa;IAEb,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACxB,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CACjD,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAA4B,KAAgC,CAAC;QACzE,MAAM,IAAI,GAA4B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACxD,MAAM,aAAa,GAAW,YAAY,CAAC,MAAM,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,sBAAc,CAAC;YAChC,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAaD,SAAgB,YAAY,CAC1B,IAAO,EACP,QAAgB;IAEhB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IACnD,CAAC;IAED,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,kBAAkB;YACxB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,CAAC;SACd,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAW,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAChE,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,aAAa,GAAW,UAAU,CAAC,KAAK,CAC5C,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAChD,CAAC;IACF,OAAO;QACL,IAAI,EAAE,GAAG,aAAa,gBAAgB;QACtC,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAMD,SAAgB,SAAS,CAAC,KAAa,EAAE,UAAkB;IACzD,MAAM,UAAU,GAAW,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,UAAU,IAAI,UAAU,EAAE,CAAC;SACrC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC"}

package/dist/log-events/ring-buffer.d.ts

@@ -0,0 +1,18 @@
+export interface RingBufferOptions {
+    readonly capacity: number;
+}
+export declare class RingBuffer<T> {
+    private readonly items;
+    private readonly capacity;
+    private head;
+    private tail;
+    private count;
+    private dropCount;
+    constructor(options: RingBufferOptions);
+    push(item: T): boolean;
+    shift(): T | undefined;
+    get length(): number;
+    get maxCapacity(): number;
+    get totalDrops(): number;
+    resetDropCounter(): void;
+}