@elisra-devops/docgen-data-provider 1.140.0 → 1.141.0

package/bin/tests/utils/logger.test.d.ts

@@ -0,0 +1 @@
+export {};

package/bin/tests/utils/logger.test.js

@@ -0,0 +1,238 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const winston = require("winston");
+const Transport = require("winston-transport");
+const logger_1 = require("../../utils/logger");
+const logSink_1 = require("../../utils/logSink");
+const runContext_1 = require("../../utils/runContext");
+const applyRedact = (info) => (0, logger_1.redact)().transform(Object.assign({}, info));
+describe('logger redact format', () => {
+    test('scrubs a top-level token/password/secret regardless of key casing', () => {
+        const out = applyRedact({ level: 'info', message: 'x', token: 'abc', Password: 'p', SECRET: 's' });
+        expect(out.token).toBe('[REDACTED]');
+        expect(out.Password).toBe('[REDACTED]');
+        expect(out.SECRET).toBe('[REDACTED]');
+    });
+    test('scrubs nested config.auth.password and config.headers.Authorization — the AxiosError.toJSON() leak', () => {
+        // This is the exact shape that was leaking via logger.error(JSON.stringify(error))
+        // in TicketsDataProvider.ts on ADO batch work-item failures.
+        const axiosLikeError = {
+            message: 'Request failed',
+            config: {
+                auth: { username: '', password: 'super-secret-pat' },
+                headers: { Authorization: 'Bearer abc.def.ghi' },
+            },
+        };
+        const out = applyRedact({ level: 'error', message: 'error populating workitems array', err: axiosLikeError });
+        expect(out.err.config.auth.password).toBe('[REDACTED]');
+        expect(out.err.config.headers.Authorization).toBe('[REDACTED]');
+        expect(out.err.message).toBe('Request failed');
+    });
+    test('leaves non-sensitive fields untouched', () => {
+        const out = applyRedact({ level: 'info', message: 'ok', project: 'Cube-ADCS', docType: 'SVD' });
+        expect(out.project).toBe('Cube-ADCS');
+        expect(out.docType).toBe('SVD');
+    });
+    test('never throws on a circular object', () => {
+        const circular = { name: 'x' };
+        circular.self = circular;
+        expect(() => applyRedact({ level: 'info', message: 'x', circular })).not.toThrow();
+    });
+    test('never throws and passes info through on null/undefined meta', () => {
+        expect(() => applyRedact({ level: 'info', message: 'x', meta: null })).not.toThrow();
+        expect(() => applyRedact({ level: 'info', message: 'x', meta: undefined })).not.toThrow();
+    });
+});
+// A capturing transport + the exact JSON format chain logger.ts uses (errors -> timestamp ->
+// redact -> splat -> json), so these tests exercise the real pipeline, not just redact() alone.
+class CaptureTransport extends Transport {
+    constructor() {
+        super(...arguments);
+        this.lines = [];
+    }
+    log(info, callback) {
+        var _a;
+        this.lines.push(JSON.parse((_a = info[Symbol.for('message')]) !== null && _a !== void 0 ? _a : JSON.stringify(info)));
+        callback();
+    }
+}
+function makeTestLogger() {
+    const capture = new CaptureTransport();
+    const logger = winston.createLogger({
+        level: 'silly',
+        format: winston.format.combine(winston.format.errors({ stack: true }), winston.format.timestamp(), (0, logger_1.redact)(), winston.format.splat(), winston.format.json()),
+        transports: [capture],
+    });
+    return { logger, capture };
+}
+describe('logger pipeline — errors({stack:true})', () => {
+    test('logger.error(err) (single-arg Error) still produces a non-empty message and a stack', () => {
+        // This is the regression errors({stack:true}) exists to prevent: without it, winston's
+        // single-arg path makes `info` *be* the Error, and message/stack are non-enumerable, so
+        // json() would emit {"level":"error","timestamp":"…"} — content-free.
+        const { logger, capture } = makeTestLogger();
+        logger.error(new Error('boom'));
+        expect(capture.lines).toHaveLength(1);
+        expect(capture.lines[0].message).toBe('boom');
+        expect(typeof capture.lines[0].stack).toBe('string');
+        expect(capture.lines[0].stack.length).toBeGreaterThan(0);
+    });
+});
+describe('logger pipeline — hostile inputs never throw', () => {
+    test.each([
+        ['null', null],
+        ['undefined', undefined],
+        ['NaN', NaN],
+        ['a circular object', (() => { const c = { a: 1 }; c.self = c; return c; })()],
+        ['an object with a throwing getter', { get boom() { throw new Error('nope'); } }],
+        ['a BigInt', BigInt(9007199254740993)],
+        ['a Symbol', Symbol('x')],
+        ['an Error with no message', new Error()],
+        ['a 10MB string', 'x'.repeat(10 * 1024 * 1024)],
+    ])('logger.error(%s) does not throw', (_label, value) => {
+        const { logger } = makeTestLogger();
+        expect(() => logger.error(value)).not.toThrow();
+    });
+});
+describe('DiagnosticsTransport (Phase 6a)', () => {
+    function makeDiagnosticsLogger() {
+        const capture = new CaptureTransport();
+        const logger = winston.createLogger({
+            level: 'silly',
+            format: winston.format.combine(winston.format.errors({ stack: true }), winston.format.timestamp(), (0, logger_1.redact)(), winston.format.splat(), winston.format.json()),
+            transports: [capture, new logger_1.DiagnosticsTransport()],
+        });
+        return { logger, capture };
+    }
+    test('pushes warn/error records to whatever sink is installed', () => {
+        var _a, _b;
+        const events = [];
+        const sink = { push: (e) => events.push(e) };
+        (0, logSink_1.installLogSink)(sink);
+        const { logger } = makeDiagnosticsLogger();
+        logger.warn('a stable warning');
+        logger.error('a stable error', Object.assign(new Error('boom'), { code: 'ECONN' }));
+        expect(events).toHaveLength(2);
+        expect(events[0].level).toBe('warn');
+        expect((_a = events[1].err) === null || _a === void 0 ? void 0 : _a.code).toBe('ECONN');
+        expect((_b = events[1].err) === null || _b === void 0 ? void 0 : _b.stack).toEqual(expect.any(String));
+    });
+    test('does not push info/debug records', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        logger.info('not interesting to the dashboard');
+        expect(events).toHaveLength(0);
+    });
+    test('a throwing sink cannot break the log call', () => {
+        (0, logSink_1.installLogSink)({
+            push: () => {
+                throw new Error('sink is down');
+            },
+        });
+        const { logger } = makeDiagnosticsLogger();
+        expect(() => logger.error('still must not throw')).not.toThrow();
+    });
+    test.each([
+        ['null', null],
+        ['undefined', undefined],
+        ['NaN', NaN],
+        ['a circular object', (() => { const c = { a: 1 }; c.self = c; return c; })()],
+        ['an object with a throwing getter', { get boom() { throw new Error('nope'); } }],
+        ['a BigInt', BigInt(9007199254740993)],
+        ['a Symbol', Symbol('x')],
+        ['an Error with no message', new Error()],
+        ['a 10MB string', 'x'.repeat(10 * 1024 * 1024)],
+    ])('logger.error(%s) with a sink installed does not throw', (_label, value) => {
+        (0, logSink_1.installLogSink)({ push: () => undefined });
+        const { logger } = makeDiagnosticsLogger();
+        expect(() => logger.error(value)).not.toThrow();
+    });
+});
+describe('textFormat safety (regression)', () => {
+    // The hostile-input matrix above exercises makeTestLogger()'s json() pipeline — it never
+    // touched the real singleton logger's text-format branch (LOG_FORMAT's default), which is
+    // where a Symbol message crashed: a template literal's implicit ToString throws on a Symbol,
+    // and this formatter sits with no try/catch around it.
+    test('logger.error(Symbol) does not throw through the real default-exported logger', () => {
+        // eslint-disable-next-line @typescript-eslint/no-var-requires
+        const logger = require('../../utils/logger').default;
+        expect(() => logger.error(Symbol('x'))).not.toThrow();
+    });
+});
+describe('DiagnosticsTransport capture policy (Phase 6b)', () => {
+    function makeDiagnosticsLogger() {
+        const capture = new CaptureTransport();
+        const logger = winston.createLogger({
+            level: 'silly',
+            format: winston.format.combine(winston.format.errors({ stack: true }), winston.format.timestamp(), (0, logger_1.redact)(), winston.format.splat(), winston.format.json()),
+            transports: [capture, new logger_1.DiagnosticsTransport()],
+        });
+        return { logger, capture };
+    }
+    test('normal mode (no captureMode) does not persist debug/info', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'run-1' }, () => {
+            logger.debug('a debug line');
+            logger.info('an info line');
+        });
+        expect(events).toHaveLength(0);
+    });
+    test('verbose mode persists debug and info', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'run-2', captureMode: 'verbose' }, () => {
+            logger.debug('a debug line');
+            logger.info('an info line');
+        });
+        expect(events).toHaveLength(2);
+        expect(events[0].retainPending).toBeUndefined();
+    });
+    test('warn/error persist regardless of capture mode', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'run-3' }, () => {
+            logger.warn('a warning');
+            logger.error('an error');
+        });
+        expect(events).toHaveLength(2);
+    });
+    test('retain-on-failure persists debug/info tagged retainPending: true', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'run-4', captureMode: 'retain-on-failure' }, () => {
+            logger.debug('a debug line');
+        });
+        expect(events).toHaveLength(1);
+        expect(events[0].retainPending).toBe(true);
+    });
+    test('retain-on-failure does not tag warn/error as retainPending', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'run-5', captureMode: 'retain-on-failure' }, () => {
+            logger.error('an error');
+        });
+        expect(events).toHaveLength(1);
+        expect(events[0].retainPending).toBeUndefined();
+    });
+    test('a concurrent normal-mode run is unaffected by a sibling verbose run', () => {
+        const events = [];
+        (0, logSink_1.installLogSink)({ push: (e) => events.push(e) });
+        const { logger } = makeDiagnosticsLogger();
+        runContext_1.runContextStore.run({ runId: 'verbose-run', captureMode: 'verbose' }, () => {
+            logger.debug('verbose debug');
+        });
+        runContext_1.runContextStore.run({ runId: 'normal-run' }, () => {
+            logger.debug('normal debug');
+        });
+        expect(events).toHaveLength(1);
+        expect(events[0].message).toBe('verbose debug');
+    });
+});
+//# sourceMappingURL=logger.test.js.map

package/bin/tests/utils/logger.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.test.js","sourceRoot":"","sources":["../../../src/tests/utils/logger.test.ts"],"names":[],"mappings":";;AAAA,mCAAmC;AACnC,+CAAgD;AAChD,+CAAkE;AAClE,iDAA+E;AAC/E,uDAAyD;AAEzD,MAAM,WAAW,GAAG,CAAC,IAA6B,EAAE,EAAE,CAAE,IAAA,eAAM,GAAU,CAAC,SAAS,mBAAM,IAAI,EAAG,CAAC;AAEhG,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC7E,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACnG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,oGAAoG,EAAE,GAAG,EAAE;QAC9G,mFAAmF;QACnF,6DAA6D;QAC7D,MAAM,cAAc,GAAG;YACrB,OAAO,EAAE,gBAAgB;YACzB,MAAM,EAAE;gBACN,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,kBAAkB,EAAE;gBACpD,OAAO,EAAE,EAAE,aAAa,EAAE,oBAAoB,EAAE;aACjD;SACF,CAAC;QACF,MAAM,GAAG,GAAQ,WAAW,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,kCAAkC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QACnH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAChG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,QAAQ,GAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QACpC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACrF,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,6FAA6F;AAC7F,gGAAgG;AAChG,MAAM,gBAAiB,SAAQ,SAAS;IAAxC;;QACE,UAAK,GAA8B,EAAE,CAAC;IAKxC,CAAC;IAJC,GAAG,CAAC,IAA6B,EAAE,QAAoB;;QACrD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAC,IAAY,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,mCAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1F,QAAQ,EAAE,CAAC;IACb,CAAC;CACF;AACD,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;QAClC,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACtC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,IAAA,eAAM,GAAE,EACR,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EACtB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;QACD,UAAU,EAAE,CAAC,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,IAAI,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC/F,uFAAuF;QACvF,wFAAwF;QACxF,sEAAsE;QACtE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,CAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;IAC5D,IAAI,CAAC,IAAI,CAAC;QACR,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,KAAK,EAAE,GAAG,CAAC;QACZ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,CAAC,kCAAkC,EAAE,EAAE,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,0BAA0B,EAAE,IAAI,KAAK,EAAE,CAAC;QACzC,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;KAChD,CAAC,CAAC,iCAAiC,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,SAAS,qBAAqB;QAC5B,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAClC,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACtC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,IAAA,eAAM,GAAE,EACR,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EACtB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;YACD,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,6BAAoB,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,yDAAyD,EAAE,GAAG,EAAE;;QACnE,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,MAAM,IAAI,GAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,IAAA,wBAAc,EAAC,IAAI,CAAC,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,MAAA,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,0CAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAA,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,0CAAE,KAAK,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACrD,IAAA,wBAAc,EAAC;YACb,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAClC,CAAC;SACF,CAAC,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC;QACR,CAAC,MAAM,EAAE,IAAI,CAAC;QACd,CAAC,WAAW,EAAE,SAAS,CAAC;QACxB,CAAC,KAAK,EAAE,GAAG,CAAC;QACZ,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,CAAC,kCAAkC,EAAE,EAAE,IAAI,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;QACtC,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,0BAA0B,EAAE,IAAI,KAAK,EAAE,CAAC;QACzC,CAAC,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;KAChD,CAAC,CAAC,uDAAuD,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAC5E,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC;QAC1C,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAY,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,yFAAyF;IACzF,0FAA0F;IAC1F,6FAA6F;IAC7F,uDAAuD;IACvD,IAAI,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACxF,8DAA8D;QAC9D,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC;QACrD,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,SAAS,qBAAqB;QAC5B,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;YAClC,KAAK,EAAE,OAAO;YACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAC5B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EACtC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,EAC1B,IAAA,eAAM,GAAE,EACR,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EACtB,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CACtB;YACD,UAAU,EAAE,CAAC,OAAO,EAAE,IAAI,6BAAoB,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;QACpE,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAChD,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE;YACnE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACzB,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC5E,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE;YAC7E,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACtE,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,EAAE,GAAG,EAAE;YAC7E,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,aAAa,EAAE,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC/E,MAAM,MAAM,GAAsB,EAAE,CAAC;QACrC,IAAA,wBAAc,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,EAAE,MAAM,EAAE,GAAG,qBAAqB,EAAE,CAAC;QAC3C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE;YACzE,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE;YAChD,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/tests/utils/runContext.test.d.ts

@@ -0,0 +1 @@
+export {};

package/bin/tests/utils/runContext.test.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const winston = require("winston");
+const Transport = require("winston-transport");
+const logger_1 = require("../../utils/logger");
+const runContext_1 = require("../../utils/runContext");
+class CaptureTransport extends Transport {
+    constructor() {
+        super(...arguments);
+        this.lines = [];
+    }
+    log(info, callback) {
+        var _a;
+        this.lines.push(JSON.parse((_a = info[Symbol.for('message')]) !== null && _a !== void 0 ? _a : JSON.stringify(info)));
+        callback();
+    }
+}
+function makeTestLogger() {
+    const capture = new CaptureTransport();
+    const logger = winston.createLogger({
+        level: 'silly',
+        format: winston.format.combine((0, logger_1.withRunContext)(), winston.format.json()),
+        transports: [capture],
+    });
+    return { logger, capture };
+}
+describe('withRunContext', () => {
+    test('is a no-op when the store was never populated', () => {
+        const { logger, capture } = makeTestLogger();
+        logger.info('outside any run');
+        expect(capture.lines[0].runId).toBeUndefined();
+    });
+    test('stamps runId onto every log emitted inside store.run(...)', () => {
+        const { logger, capture } = makeTestLogger();
+        runContext_1.runContextStore.run({ runId: 'run-123' }, () => {
+            logger.info('inside the run');
+        });
+        logger.info('outside again');
+        expect(capture.lines[0].runId).toBe('run-123');
+        expect(capture.lines[1].runId).toBeUndefined();
+    });
+    test('async work started inside the run keeps the runId across the await boundary', async () => {
+        const { logger, capture } = makeTestLogger();
+        await runContext_1.runContextStore.run({ runId: 'run-async' }, async () => {
+            await new Promise((resolve) => setTimeout(resolve, 0));
+            logger.info('after await');
+        });
+        expect(capture.lines[0].runId).toBe('run-async');
+    });
+});
+//# sourceMappingURL=runContext.test.js.map

package/bin/tests/utils/runContext.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runContext.test.js","sourceRoot":"","sources":["../../../src/tests/utils/runContext.test.ts"],"names":[],"mappings":";;AAAA,mCAAmC;AACnC,+CAAgD;AAChD,+CAAoD;AACpD,uDAAyD;AAEzD,MAAM,gBAAiB,SAAQ,SAAS;IAAxC;;QACE,UAAK,GAA8B,EAAE,CAAC;IAKxC,CAAC;IAJC,GAAG,CAAC,IAA6B,EAAE,QAAoB;;QACrD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAC,IAAY,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,mCAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1F,QAAQ,EAAE,CAAC;IACb,CAAC;CACF;AACD,SAAS,cAAc;IACrB,MAAM,OAAO,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;QAClC,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAA,uBAAc,GAAE,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvE,UAAU,EAAE,CAAC,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,IAAI,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACzD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC7C,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE;YAC7C,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,EAAE,CAAC;QAC7C,MAAM,4BAAe,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,KAAK,IAAI,EAAE;YAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/bin/utils/logSink.d.ts

@@ -0,0 +1,25 @@
+export interface DiagnosticEvent {
+    ts: string;
+    level: string;
+    service: string;
+    version: string;
+    runId?: string;
+    docType?: string;
+    step?: string;
+    contentControlType?: string;
+    contentControlTitle?: string;
+    project?: string;
+    userId?: string;
+    message: string;
+    err?: {
+        message: string;
+        code?: string;
+        stack?: string;
+    };
+    retainPending?: boolean;
+}
+export interface LogSink {
+    push(event: DiagnosticEvent): void;
+}
+export declare function getLogSink(): LogSink | undefined;
+export declare function installLogSink(sink: LogSink): void;

package/bin/utils/logSink.js

@@ -0,0 +1,16 @@
+'use strict';
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getLogSink = getLogSink;
+exports.installLogSink = installLogSink;
+// Symbol.for so this package's copy converges on the same installed sink as
+// docgen-content-control's (the host process this package runs inside) and
+// docgen-dg-skins-package's, the same reasoning as runContext.ts's AsyncLocalStorage. A
+// never-populated sink is a harmless no-op — this package only reads it, never installs one.
+const KEY = Symbol.for('elisradevops.docgen.logSink');
+function getLogSink() {
+    return globalThis[KEY];
+}
+function installLogSink(sink) {
+    globalThis[KEY] = sink;
+}
+//# sourceMappingURL=logSink.js.map

package/bin/utils/logSink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logSink.js","sourceRoot":"","sources":["../../src/utils/logSink.ts"],"names":[],"mappings":"AAAA,YAAY,CAAC;;AAqCb,gCAEC;AAED,wCAEC;AAZD,4EAA4E;AAC5E,2EAA2E;AAC3E,wFAAwF;AACxF,6FAA6F;AAC7F,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAEtD,SAAgB,UAAU;IACxB,OAAQ,UAAsC,CAAC,GAAG,CAAwB,CAAC;AAC7E,CAAC;AAED,SAAgB,cAAc,CAAC,IAAa;IACzC,UAAsC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;AACtD,CAAC"}

package/bin/utils/logger.d.ts

@@ -1,3 +1,9 @@
 import * as winston from 'winston';
+import * as Transport from 'winston-transport';
 declare let logger: winston.Logger;
+export declare const withRunContext: winston.Logform.FormatWrap;
+export declare const redact: winston.Logform.FormatWrap;
+export declare class DiagnosticsTransport extends Transport {
+    log(info: Record<string, unknown>, callback: () => void): void;
+}
 export default logger;

package/bin/utils/logger.js

@@ -1,35 +1,227 @@
 'use strict';
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DiagnosticsTransport = exports.redact = exports.withRunContext = void 0;
 const winston = require("winston");
+const fs = require("fs");
+const path = require("path");
+const Transport = require("winston-transport");
+const runContext_1 = require("./runContext");
+const logSink_1 = require("./logSink");
 let logger;
-const logFormat = winston.format.printf((info) => `${info.timestamp} - ${info.level}: ${info.message}`);
-// if (typeof window === "undefined") {
-//   let logsPath = process.env.logs_path || "./logs/";
-//   logger = winston.createLogger({
-//     format: winston.format.timestamp(),
-//     level: "silly",
-//     transports: [
-//       new winston.transports.File({
-//         filename: `${logsPath}azure-rest-api-errors.log`,
-//         level: "error",
-//         format: logFormat,
-//       }),
-//       new winston.transports.File({
-//         filename: `${logsPath}azure-rest-api-all.log`,
-//         format: logFormat,
-//       }),
-//       new winston.transports.Console({ format: logFormat, level: "debug" }),
-//     ],
-//   });
-// } else {
+// Merges the ambient runId (set by content-control's request middleware, once Phase 3 lands
+// there) into every log record. A never-populated store is a harmless no-op — this package
+// only reads it, never sets it.
+exports.withRunContext = winston.format((info) => {
+    const store = runContext_1.runContextStore.getStore();
+    if (store === null || store === void 0 ? void 0 : store.runId)
+        info.runId = store.runId;
+    // Phase 7b — same ambient, per-run treatment as runId.
+    if (store === null || store === void 0 ? void 0 : store.docType)
+        info.docType = store.docType;
+    // Phase 7c — same read-only treatment; populated by content-control's attachRunContext.
+    if (store === null || store === void 0 ? void 0 : store.project)
+        info.project = store.project;
+    return info;
+});
+// Defense-in-depth: scrubs known-sensitive keys out of any object attached to a log call
+// (meta, splat, an Error's own enumerable props — e.g. AxiosError.toJSON()'s
+// config.auth.password / config.headers.Authorization, which is exactly how a PAT was
+// leaking via `logger.error(JSON.stringify(error))` on ADO REST failures). Does not
+// redact secrets interpolated into a message string — that's the corresponding call-site
+// fixes' job; this is a backstop for structured fields.
+// "accesskey" (not just "minioaccesskey") so this also catches an *AccessKeyId-style field —
+// a real gap found in api-gate's copy during the Phase 5 manifest work: only the *SecretKey
+// sibling was covered before, via "secret". Applied here too to keep the four copies in sync.
+const SENSITIVE_KEY = /token|pat|password|secret|authorization|accesskey|minioaccesskey|miniosecretkey/i;
+// A per-key try/catch on the *read*, not just around the whole loop: a getter that throws
+// (e.g. `{ get boom() { throw ... } }`) would otherwise abort redaction for every remaining
+// key in the same object, or — worse — survive redaction untouched and re-throw later, inside
+// winston's json() formatter, which is not wrapped in anything. redactValue always returns a
+// freshly built plain object/array, never the original reference, so once a value has passed
+// through here nothing downstream can re-trigger a throwing accessor on it.
+function safeRead(obj, key) {
+    try {
+        return { ok: true, value: obj[key] };
+    }
+    catch (_a) {
+        return { ok: false };
+    }
+}
+function redactValue(value, depth = 0, seen = new WeakSet()) {
+    if (depth > 6 || value === null || typeof value !== 'object')
+        return value;
+    if (seen.has(value))
+        return '[Circular]';
+    seen.add(value);
+    if (Array.isArray(value))
+        return value.map((v) => redactValue(v, depth + 1, seen));
+    const out = {};
+    for (const key of Object.keys(value)) {
+        const read = safeRead(value, key);
+        if (!read.ok) {
+            out[key] = '[Unreadable property]';
+            continue;
+        }
+        out[key] = SENSITIVE_KEY.test(key) ? '[REDACTED]' : redactValue(read.value, depth + 1, seen);
+    }
+    return out;
+}
+exports.redact = winston.format((info) => {
+    const target = info;
+    for (const key of Object.keys(target)) {
+        // level/timestamp are always plain strings winston sets itself — never touched. message is
+        // NOT exempt: when logger.error(x) is called with a single non-string/non-Error argument,
+        // winston nests the whole thing under info.message (this is exactly the shape hit by a raw
+        // object argument), so message can carry a throwing getter or a sensitive key just as much
+        // as any other field — redactValue already no-ops on a plain string, so including it here
+        // costs nothing for the common case and closes that gap for the uncommon one.
+        if (key === 'level' || key === 'timestamp')
+            continue;
+        const read = safeRead(target, key);
+        const value = !read.ok
+            ? '[Unreadable property]'
+            : // A top-level primitive (e.g. token: "abc") has no children for redactValue to walk into —
+                // the key itself has to be checked here too, not just inside the recursive object walk.
+                SENSITIVE_KEY.test(key)
+                    ? '[REDACTED]'
+                    : redactValue(read.value);
+        try {
+            target[key] = value;
+        }
+        catch (_a) {
+            // The original property could be a getter-only accessor with no setter, which throws on
+            // plain assignment in strict mode — redefine it outright rather than skip it.
+            Object.defineProperty(target, key, { value, writable: true, enumerable: true, configurable: true });
+        }
+    }
+    return info;
+});
+// Resolves the package's own version for defaultMeta. Node-only (this package is currently
+// only ever consumed by docgen-content-control at runtime — the browser transport below is
+// unused/commented out), so fs/path are safe here.
+function readOwnVersion() {
+    const candidates = [
+        path.resolve(__dirname, '../package.json'),
+        path.resolve(__dirname, '../../package.json'),
+        path.resolve(process.cwd(), 'package.json'),
+    ];
+    for (const candidate of candidates) {
+        try {
+            if (!fs.existsSync(candidate))
+                continue;
+            return JSON.parse(fs.readFileSync(candidate, 'utf8')).version || 'unknown';
+        }
+        catch (_a) {
+            // try next candidate
+        }
+    }
+    return 'unknown';
+}
+// A template literal's implicit ToString throws on a Symbol value (unlike String(), which
+// calls Symbol.prototype.toString() explicitly) — logger.error(Symbol('x')) would otherwise
+// crash inside this formatter itself, the one place in the pipeline with no try/catch around
+// it. Symbol.toString() itself never throws, so this needs no further guarding.
+const safeMessageString = (value) => typeof value === 'symbol' ? value.toString() : String(value);
+const textFormat = winston.format.printf((info) => `${info.timestamp} - ${info.level}: ${safeMessageString(info.message)}`);
+// Bounded so one oversized message/stack can't produce an unbounded LogEvent document.
+const MAX_MESSAGE_LEN = 2000;
+const MAX_STACK_LEN = 4000;
+function clamp(value, max) {
+    if (typeof value !== 'string')
+        return undefined;
+    return value.length > max ? value.slice(0, max) : value;
+}
+// Ships warn/error records to whatever LogSink the host process (docgen-content-control's
+// index.ts) has installed — this package never installs one itself, only reads it. This is
+// the dominant source of real ADO error records (tfs.ts's executeWithRetry is the single
+// static axios instance handling all Azure DevOps traffic), so without this transport most
+// real generation failures either never reach the store or get misattributed to
+// dg-content-control. Reads info *after* the rest of the format chain has already run —
+// redact() has already scrubbed it by the time this transport sees it. Never throws, never
+// blocks the call path, and never logs through `logger` itself (that would recurse back
+// into this same transport) — failures go to console.error only.
+const DIAGNOSTICS_CAPTURE_ENABLED = (process.env.DIAGNOSTICS_CAPTURE_ENABLED || 'true').toLowerCase() !== 'false';
+// Exported for tests, the same treatment as redact()/withRunContext() — so a test pipeline
+// can exercise this transport without going through the real singleton logger's env-gated
+// json()/textFormat branch.
+class DiagnosticsTransport extends Transport {
+    log(info, callback) {
+        var _a, _b, _c, _d, _e;
+        setImmediate(() => this.emit('logged', info));
+        try {
+            const level = info.level;
+            const isWarnOrError = level === 'warn' || level === 'error';
+            // Phase 6b — the logger's own level gate is now 'debug' (see createLogger below), so a
+            // debug/info call reaches this transport regardless of mode; this is the one place that
+            // decides whether it's actually persisted, keyed off the per-run capture mode rather
+            // than a process-wide setting — concurrent runs in 'normal' mode are unaffected by a
+            // sibling run's 'verbose'/'retain-on-failure' opt-in.
+            const captureMode = (_a = runContext_1.runContextStore.getStore()) === null || _a === void 0 ? void 0 : _a.captureMode;
+            const isCapturedDebugOrInfo = (level === 'debug' || level === 'info') && (captureMode === 'verbose' || captureMode === 'retain-on-failure');
+            if (DIAGNOSTICS_CAPTURE_ENABLED && (isWarnOrError || isCapturedDebugOrInfo)) {
+                // winston.errors({stack:true}) merges an Error's own enumerable properties (stack,
+                // and anything else the call site set, e.g. `err.code`) directly onto `info` — there
+                // is no separate nested info.err. `info.stack`'s presence is the only reliable signal
+                // that this record came from `logger.error('...', err)`/`logger.error(err)` rather
+                // than a plain string message. When present, info.message is already the
+                // stable-message-plus-error-message string winston produced, so err.message reuses it.
+                const hasErr = typeof info.stack === 'string';
+                const message = (_b = clamp(info.message, MAX_MESSAGE_LEN)) !== null && _b !== void 0 ? _b : '';
+                const event = {
+                    ts: typeof info.timestamp === 'string' ? info.timestamp : new Date().toISOString(),
+                    level: String(info.level),
+                    service: String((_c = info.service) !== null && _c !== void 0 ? _c : '@elisra-devops/docgen-data-provider'),
+                    version: String((_d = info.version) !== null && _d !== void 0 ? _d : 'unknown'),
+                    runId: typeof info.runId === 'string' ? info.runId : undefined,
+                    docType: typeof info.docType === 'string' ? info.docType : undefined,
+                    step: typeof info.step === 'string' ? info.step : undefined,
+                    contentControlType: typeof info.contentControlType === 'string' ? info.contentControlType : undefined,
+                    contentControlTitle: typeof info.contentControlTitle === 'string' ? info.contentControlTitle : undefined,
+                    project: typeof info.project === 'string' ? info.project : undefined,
+                    userId: typeof info.userId === 'string' ? info.userId : undefined,
+                    message,
+                    err: hasErr
+                        ? {
+                            message,
+                            code: typeof info.code === 'string' ? info.code : undefined,
+                            stack: clamp(info.stack, MAX_STACK_LEN),
+                        }
+                        : undefined,
+                    retainPending: !isWarnOrError && captureMode === 'retain-on-failure' ? true : undefined,
+                };
+                (_e = (0, logSink_1.getLogSink)()) === null || _e === void 0 ? void 0 : _e.push(event);
+            }
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.error('DiagnosticsTransport failed to push event', e);
+        }
+        callback();
+    }
+}
+exports.DiagnosticsTransport = DiagnosticsTransport;
+// LOG_FORMAT=json is the eventual default (structured stdout a collector can parse), but
+// stays opt-in for one release so switching is a config change, not an image rebuild, if
+// anyone reading raw console output needs to roll back.
+const useJson = (process.env.LOG_FORMAT || 'text').toLowerCase() === 'json';
+// Phase 6b — the Logger's own level gate must be 'debug' (winston's most permissive) so a
+// debug/info call always reaches every transport's log(); a static per-logger level can't
+// depend on the ALS store's per-run capture mode, so DiagnosticsTransport has to be the one
+// deciding what's actually persisted. The Console transport below gets its own explicit
+// level so stdout's default behavior (info/warn/error unless LOG_LEVEL=debug) is unchanged —
+// this only spends the format-chain cost on debug() calls that previously short-circuited
+// for free; info/warn/error volume (Phase 4's focus) is unaffected either way.
+const CONSOLE_LOG_LEVEL = process.env.LOG_LEVEL || 'info';
 logger = winston.createLogger({
-    format: winston.format.timestamp(),
-    level: 'silly',
-    transports: [
-        new winston.transports.Console({ format: logFormat, level: 'debug' }),
-        // new BrowserConsole({ format: logFormat, level: 'debug' }),
-    ],
+    level: 'debug',
+    defaultMeta: { service: '@elisra-devops/docgen-data-provider', version: readOwnVersion() },
+    format: useJson
+        ? winston.format.combine(winston.format.errors({ stack: true }), winston.format.timestamp(), (0, exports.withRunContext)(), (0, exports.redact)(), winston.format.splat(), winston.format.json())
+        : winston.format.combine(winston.format.errors({ stack: true }), winston.format.timestamp(), (0, exports.withRunContext)(), (0, exports.redact)(), winston.format.splat(), textFormat),
+    // Stdout only — no File transports, consistent with the other DocGen services (no mounted
+    // log volume anywhere in this deployment, so a File transport is invisible to `kubectl logs`
+    // and can throw at import time under a read-only root filesystem).
+    transports: [new winston.transports.Console({ level: CONSOLE_LOG_LEVEL }), new DiagnosticsTransport()],
 });
-// }
 exports.default = logger;
 //# sourceMappingURL=logger.js.map