@geekmidas/logger 10.0.0-alpha.6 → 10.0.0-alpha.60

package/dist/pino.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"pino.d.mts","names":[],"sources":["../src/pino.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAqGA;;;;AAA8D;;;;;;;;;;;iBAA9C,YAAA,WAAsB,sBAAwB,KAAA,CAAA"}
+{"version":3,"file":"pino.d.mts","names":[],"sources":["../src/pino.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;wBA0GgB,aAAa,UAAS,qCAAwB"}

package/dist/pino.mjs

@@ -1,21 +1,52 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-DQoIXhkS.mjs";
+import { DEFAULT_REDACT_PATHS } from "./redact-paths.mjs";
 import { pino } from "pino";
-
 //#region src/pino.ts
 /**
+* Pino logger with built-in redaction support for sensitive data.
+*
+* Redaction is on by default: a logger that was never told about passwords
+* and tokens still masks them. `redact: false` is the explicit opt-out.
+*
+* @example
+* ```typescript
+* import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';
+*
+* // Redaction with sensible defaults — the same as `redact: true`
+* const logger = createLogger();
+*
+* // Sensitive data is automatically masked
+* logger.info({ password: 'secret123', user: 'john' }, 'Login');
+* // Output: { password: '[Redacted]', user: 'john' } Login
+*
+* // Add custom paths (merged with defaults)
+* const logger2 = createLogger({ redact: ['user.ssn'] });
+*
+* // Override defaults for full control
+* const logger3 = createLogger({
+*   redact: {
+*     paths: ['onlyThis'],
+*     resolution: 'override',
+*   }
+* });
+* ```
+*
+* @module
+*/
+/**
 * Resolves redaction configuration from options.
-* Returns undefined if redaction is disabled, or a pino-compatible redact config.
+* Returns undefined only when redaction is turned off with `false`; leaving it
+* unset is the same as `true`, so sensitive paths are masked unless someone
+* decides they should not be.
 *
 * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.
 * With resolution: 'override', only the custom paths are used.
 */
 function resolveRedactConfig(redact) {
-	if (redact === void 0 || redact === false) return void 0;
-	if (redact === true) return DEFAULT_REDACT_PATHS;
+	if (redact === false) return;
+	if (redact === void 0 || redact === true) return DEFAULT_REDACT_PATHS;
 	if (Array.isArray(redact)) return [...DEFAULT_REDACT_PATHS, ...redact];
 	const { resolution = "merge", paths, censor, remove } = redact;
-	const resolvedPaths = resolution === "override" ? paths : [...DEFAULT_REDACT_PATHS, ...paths];
-	const config = { paths: resolvedPaths };
+	const config = { paths: resolution === "override" ? paths : [...DEFAULT_REDACT_PATHS, ...paths] };
 	if (censor !== void 0) config.censor = censor;
 	if (remove !== void 0) config.remove = remove;
 	return config;
@@ -28,24 +59,24 @@ function resolveRedactConfig(redact) {
 *
 * @example
 * ```typescript
-* // Basic logger
+* // Basic logger — sensitive paths are redacted by default
 * const logger = createLogger({ level: 'debug' });
 *
-* // With redaction enabled
-* const secureLogger = createLogger({ redact: true });
+* // Opt out of redaction
+* const rawLogger = createLogger({ redact: false });
 *
 * // Pretty printing in development
-* const devLogger = createLogger({ pretty: true, redact: true });
+* const devLogger = createLogger({ pretty: true });
 * ```
 */
 function createLogger(options = {}) {
-	const pretty = options?.pretty && process.NODE_ENV !== "production";
+	const pretty = options?.pretty && process.env.NODE_ENV !== "production";
 	const baseOptions = pretty ? { transport: {
 		target: "pino-pretty",
 		options: { colorize: true }
 	} } : {};
 	const redact = resolveRedactConfig(options.redact);
-	return pino({
+	const pinoOptions = {
 		...baseOptions,
 		...options.level && { level: options.level },
 		...redact && { redact },
@@ -57,9 +88,10 @@ function createLogger(options = {}) {
 				return { level: label.toUpperCase() };
 			}
 		}
-	});
+	};
+	return options.destination && !pretty ? pino(pinoOptions, options.destination) : pino(pinoOptions);
 }
-
 //#endregion
 export { DEFAULT_REDACT_PATHS, createLogger };
+
 //# sourceMappingURL=pino.mjs.map

package/dist/pino.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pino.mjs","names":["redact: boolean | RedactOptions | undefined","config: PinoRedactConfig","options: CreateLoggerOptions"],"sources":["../src/pino.ts"],"sourcesContent":["/**\n * Pino logger with built-in redaction support for sensitive data.\n *\n * @example\n * ```typescript\n * import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';\n *\n * // Enable redaction with sensible defaults\n * const logger = createLogger({ redact: true });\n *\n * // Sensitive data is automatically masked\n * logger.info({ password: 'secret123', user: 'john' }, 'Login');\n * // Output: { password: '[Redacted]', user: 'john' } Login\n *\n * // Add custom paths (merged with defaults)\n * const logger2 = createLogger({ redact: ['user.ssn'] });\n *\n * // Override defaults for full control\n * const logger3 = createLogger({\n *   redact: {\n *     paths: ['onlyThis'],\n *     resolution: 'override',\n *   }\n * });\n * ```\n *\n * @module\n */\nimport { pino } from 'pino';\nimport { DEFAULT_REDACT_PATHS } from './redact-paths';\nimport type { CreateLoggerOptions, RedactOptions } from './types';\n\n// Re-export for backwards compatibility\nexport { DEFAULT_REDACT_PATHS } from './redact-paths';\n\n/**\n * Type for the resolved pino redact config (without our custom resolution field).\n */\ntype PinoRedactConfig =\n\t| string[]\n\t| {\n\t\t\tpaths: string[];\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\tremove?: boolean;\n\t  };\n\n/**\n * Resolves redaction configuration from options.\n * Returns undefined if redaction is disabled, or a pino-compatible redact config.\n *\n * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.\n * With resolution: 'override', only the custom paths are used.\n */\nfunction resolveRedactConfig(\n\tredact: boolean | RedactOptions | undefined,\n): PinoRedactConfig | undefined {\n\tif (redact === undefined || redact === false) {\n\t\treturn undefined;\n\t}\n\n\tif (redact === true) {\n\t\treturn DEFAULT_REDACT_PATHS;\n\t}\n\n\t// Array syntax - merge with defaults\n\tif (Array.isArray(redact)) {\n\t\treturn [...DEFAULT_REDACT_PATHS, ...redact];\n\t}\n\n\t// Object syntax - check resolution mode\n\tconst { resolution = 'merge', paths, censor, remove } = redact;\n\n\tconst resolvedPaths =\n\t\tresolution === 'override' ? paths : [...DEFAULT_REDACT_PATHS, ...paths];\n\n\t// Return clean pino config without our resolution field\n\tconst config: PinoRedactConfig = { paths: resolvedPaths };\n\tif (censor !== undefined) config.censor = censor;\n\tif (remove !== undefined) config.remove = remove;\n\n\treturn config;\n}\n\n/**\n * Creates a pino logger instance with optional redaction support.\n *\n * @param options - Logger configuration options\n * @returns A configured pino logger instance\n *\n * @example\n * ```typescript\n * // Basic logger\n * const logger = createLogger({ level: 'debug' });\n *\n * // With redaction enabled\n * const secureLogger = createLogger({ redact: true });\n *\n * // Pretty printing in development\n * const devLogger = createLogger({ pretty: true, redact: true });\n * ```\n */\nexport function createLogger(options: CreateLoggerOptions = {}) {\n\t// @ts-expect-error\n\tconst pretty = options?.pretty && process.NODE_ENV !== 'production';\n\tconst baseOptions = pretty\n\t\t? {\n\t\t\t\ttransport: {\n\t\t\t\t\ttarget: 'pino-pretty',\n\t\t\t\t\toptions: { colorize: true },\n\t\t\t\t},\n\t\t\t}\n\t\t: {};\n\n\tconst redact = resolveRedactConfig(options.redact);\n\n\treturn pino({\n\t\t...baseOptions,\n\t\t...(options.level && { level: options.level }),\n\t\t...(redact && { redact }),\n\t\tformatters: {\n\t\t\tbindings() {\n\t\t\t\treturn { nodeVersion: process.version };\n\t\t\t},\n\t\t\tlevel: (label) => {\n\t\t\t\treturn { level: label.toUpperCase() };\n\t\t\t},\n\t\t},\n\t});\n}\n"],"mappings":";;;;;;;;;;;AAqDA,SAAS,oBACRA,QAC+B;AAC/B,KAAI,qBAAwB,WAAW,MACtC;AAGD,KAAI,WAAW,KACd,QAAO;AAIR,KAAI,MAAM,QAAQ,OAAO,CACxB,QAAO,CAAC,GAAG,sBAAsB,GAAG,MAAO;CAI5C,MAAM,EAAE,aAAa,SAAS,OAAO,QAAQ,QAAQ,GAAG;CAExD,MAAM,gBACL,eAAe,aAAa,QAAQ,CAAC,GAAG,sBAAsB,GAAG,KAAM;CAGxE,MAAMC,SAA2B,EAAE,OAAO,cAAe;AACzD,KAAI,kBAAsB,QAAO,SAAS;AAC1C,KAAI,kBAAsB,QAAO,SAAS;AAE1C,QAAO;AACP;;;;;;;;;;;;;;;;;;;AAoBD,SAAgB,aAAaC,UAA+B,CAAE,GAAE;CAE/D,MAAM,SAAS,SAAS,UAAU,QAAQ,aAAa;CACvD,MAAM,cAAc,SACjB,EACA,WAAW;EACV,QAAQ;EACR,SAAS,EAAE,UAAU,KAAM;CAC3B,EACD,IACA,CAAE;CAEL,MAAM,SAAS,oBAAoB,QAAQ,OAAO;AAElD,QAAO,KAAK;EACX,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAO;EAC7C,GAAI,UAAU,EAAE,OAAQ;EACxB,YAAY;GACX,WAAW;AACV,WAAO,EAAE,aAAa,QAAQ,QAAS;GACvC;GACD,OAAO,CAAC,UAAU;AACjB,WAAO,EAAE,OAAO,MAAM,aAAa,CAAE;GACrC;EACD;CACD,EAAC;AACF"}
+{"version":3,"file":"pino.mjs","names":[],"sources":["../src/pino.ts"],"sourcesContent":["/**\n * Pino logger with built-in redaction support for sensitive data.\n *\n * Redaction is on by default: a logger that was never told about passwords\n * and tokens still masks them. `redact: false` is the explicit opt-out.\n *\n * @example\n * ```typescript\n * import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';\n *\n * // Redaction with sensible defaults — the same as `redact: true`\n * const logger = createLogger();\n *\n * // Sensitive data is automatically masked\n * logger.info({ password: 'secret123', user: 'john' }, 'Login');\n * // Output: { password: '[Redacted]', user: 'john' } Login\n *\n * // Add custom paths (merged with defaults)\n * const logger2 = createLogger({ redact: ['user.ssn'] });\n *\n * // Override defaults for full control\n * const logger3 = createLogger({\n *   redact: {\n *     paths: ['onlyThis'],\n *     resolution: 'override',\n *   }\n * });\n * ```\n *\n * @module\n */\nimport { pino } from 'pino';\nimport { DEFAULT_REDACT_PATHS } from './redact-paths';\nimport type { CreateLoggerOptions, RedactOptions } from './types';\n\n// Re-export for backwards compatibility\nexport { DEFAULT_REDACT_PATHS } from './redact-paths';\n\n/**\n * Type for the resolved pino redact config (without our custom resolution field).\n */\ntype PinoRedactConfig =\n\t| string[]\n\t| {\n\t\t\tpaths: string[];\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\tremove?: boolean;\n\t  };\n\n/**\n * Resolves redaction configuration from options.\n * Returns undefined only when redaction is turned off with `false`; leaving it\n * unset is the same as `true`, so sensitive paths are masked unless someone\n * decides they should not be.\n *\n * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.\n * With resolution: 'override', only the custom paths are used.\n */\nfunction resolveRedactConfig(\n\tredact: boolean | RedactOptions | undefined,\n): PinoRedactConfig | undefined {\n\tif (redact === false) {\n\t\treturn undefined;\n\t}\n\n\tif (redact === undefined || redact === true) {\n\t\treturn DEFAULT_REDACT_PATHS;\n\t}\n\n\t// Array syntax - merge with defaults\n\tif (Array.isArray(redact)) {\n\t\treturn [...DEFAULT_REDACT_PATHS, ...redact];\n\t}\n\n\t// Object syntax - check resolution mode\n\tconst { resolution = 'merge', paths, censor, remove } = redact;\n\n\tconst resolvedPaths =\n\t\tresolution === 'override' ? paths : [...DEFAULT_REDACT_PATHS, ...paths];\n\n\t// Return clean pino config without our resolution field\n\tconst config: PinoRedactConfig = { paths: resolvedPaths };\n\tif (censor !== undefined) config.censor = censor;\n\tif (remove !== undefined) config.remove = remove;\n\n\treturn config;\n}\n\n/**\n * Creates a pino logger instance with optional redaction support.\n *\n * @param options - Logger configuration options\n * @returns A configured pino logger instance\n *\n * @example\n * ```typescript\n * // Basic logger — sensitive paths are redacted by default\n * const logger = createLogger({ level: 'debug' });\n *\n * // Opt out of redaction\n * const rawLogger = createLogger({ redact: false });\n *\n * // Pretty printing in development\n * const devLogger = createLogger({ pretty: true });\n * ```\n */\nexport function createLogger(options: CreateLoggerOptions = {}) {\n\t// Pretty printing spawns a transport worker and writes for humans; in\n\t// production the output is for a log pipeline, so `pretty` is ignored there.\n\tconst pretty = options?.pretty && process.env.NODE_ENV !== 'production';\n\tconst baseOptions = pretty\n\t\t? {\n\t\t\t\ttransport: {\n\t\t\t\t\ttarget: 'pino-pretty',\n\t\t\t\t\toptions: { colorize: true },\n\t\t\t\t},\n\t\t\t}\n\t\t: {};\n\n\tconst redact = resolveRedactConfig(options.redact);\n\n\tconst pinoOptions = {\n\t\t...baseOptions,\n\t\t...(options.level && { level: options.level }),\n\t\t...(redact && { redact }),\n\t\tformatters: {\n\t\t\tbindings() {\n\t\t\t\treturn { nodeVersion: process.version };\n\t\t\t},\n\t\t\tlevel: (label: string) => {\n\t\t\t\treturn { level: label.toUpperCase() };\n\t\t\t},\n\t\t},\n\t};\n\n\t// A transport writes on its own worker, so a destination only applies when\n\t// the logger is not pretty-printing.\n\treturn options.destination && !pretty\n\t\t? pino(pinoOptions, options.destination)\n\t\t: pino(pinoOptions);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0DA,SAAS,oBACR,QAC+B;CAC/B,IAAI,WAAW,OACd;CAGD,IAAI,WAAW,KAAA,KAAa,WAAW,MACtC,OAAO;CAIR,IAAI,MAAM,QAAQ,MAAM,GACvB,OAAO,CAAC,GAAG,sBAAsB,GAAG,MAAM;CAI3C,MAAM,EAAE,aAAa,SAAS,OAAO,QAAQ,WAAW;CAMxD,MAAM,SAA2B,EAAE,OAHlC,eAAe,aAAa,QAAQ,CAAC,GAAG,sBAAsB,GAAG,KAAK,EAGf;CACxD,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;CAC1C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;CAE1C,OAAO;AACR;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,aAAa,UAA+B,CAAC,GAAG;CAG/D,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,aAAa;CAC3D,MAAM,cAAc,SACjB,EACA,WAAW;EACV,QAAQ;EACR,SAAS,EAAE,UAAU,KAAK;CAC3B,EACD,IACC,CAAC;CAEJ,MAAM,SAAS,oBAAoB,QAAQ,MAAM;CAEjD,MAAM,cAAc;EACnB,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAM;EAC5C,GAAI,UAAU,EAAE,OAAO;EACvB,YAAY;GACX,WAAW;IACV,OAAO,EAAE,aAAa,QAAQ,QAAQ;GACvC;GACA,QAAQ,UAAkB;IACzB,OAAO,EAAE,OAAO,MAAM,YAAY,EAAE;GACrC;EACD;CACD;CAIA,OAAO,QAAQ,eAAe,CAAC,SAC5B,KAAK,aAAa,QAAQ,WAAW,IACrC,KAAK,WAAW;AACpB"}

package/dist/redact-paths.cjs

@@ -1,3 +1,68 @@
-const require_redact_paths = require('./redact-paths-D0m0DIuQ.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+//#endregion
+exports.DEFAULT_REDACT_PATHS = DEFAULT_REDACT_PATHS;
 
-exports.DEFAULT_REDACT_PATHS = require_redact_paths.DEFAULT_REDACT_PATHS;
+//# sourceMappingURL=redact-paths.cjs.map

package/dist/redact-paths.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.cjs","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAa,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACD"}

package/dist/redact-paths.d.cts

@@ -1,2 +1,17 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-CsK0_uz-.cjs";
-export { DEFAULT_REDACT_PATHS };
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+export declare const DEFAULT_REDACT_PATHS: string[];
+//#endregion
+//# sourceMappingURL=redact-paths.d.cts.map

package/dist/redact-paths.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.d.cts","names":[],"sources":["../src/redact-paths.ts"],"mappings":";;;;;;;;;;;;;;qBAaa"}

package/dist/redact-paths.d.mts

@@ -1,2 +1,17 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-D07eTMlH.mjs";
-export { DEFAULT_REDACT_PATHS };
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+export declare const DEFAULT_REDACT_PATHS: string[];
+//#endregion
+//# sourceMappingURL=redact-paths.d.mts.map

package/dist/redact-paths.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.d.mts","names":[],"sources":["../src/redact-paths.ts"],"mappings":";;;;;;;;;;;;;;qBAaa"}

package/dist/redact-paths.mjs

@@ -1,3 +1,67 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-DQoIXhkS.mjs";
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+//#endregion
+export { DEFAULT_REDACT_PATHS };
 
-export { DEFAULT_REDACT_PATHS };
+//# sourceMappingURL=redact-paths.mjs.map

package/dist/redact-paths.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.mjs","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAa,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACD"}

package/dist/types.cjs

@@ -1,3 +1,33 @@
-const require_types = require('./types-ag_0Cvbg.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/types.ts
+/**
+* Console-based logger implementation that outputs to standard console methods.
+* Supports structured logging with automatic timestamp injection and context inheritance.
+*
+* @implements {Logger}
+*
+* @example
+* ```typescript
+* const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });
+* logger.info({ userId: 123 }, 'User action performed');
+* // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed
+*
+* const childLogger = logger.child({ module: 'auth' });
+* childLogger.debug({ action: 'validate' }, 'Validating token');
+* // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token
+* ```
+*/
+let LogLevel = /* @__PURE__ */ function(LogLevel) {
+	LogLevel["Trace"] = "trace";
+	LogLevel["Debug"] = "debug";
+	LogLevel["Info"] = "info";
+	LogLevel["Warn"] = "warn";
+	LogLevel["Error"] = "error";
+	LogLevel["Fatal"] = "fatal";
+	LogLevel["Silent"] = "silent";
+	return LogLevel;
+}({});
+//#endregion
+exports.LogLevel = LogLevel;
 
-exports.LogLevel = require_types.LogLevel;
+//# sourceMappingURL=types.cjs.map

package/dist/types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.cjs","names":[],"sources":["../src/types.ts"],"sourcesContent":["/**\n * Logging function type that supports both structured and simple logging.\n * Can be called with an object for structured logging or just a message string.\n *\n * @example\n * ```typescript\n * // Structured logging with context object\n * logger.info({ userId: 123, action: 'login' }, 'User logged in');\n *\n * // Simple string logging\n * logger.info('Application started');\n * ```\n */\nexport type LogFn = {\n\t/** Structured logging with context object, optional message, and additional arguments */\n\t<T extends object>(obj: T, msg?: string, ...args: any[]): void;\n\t/** Simple string logging */\n\t(msg: string): void;\n};\n\n/**\n * Standard logger interface with multiple log levels and child logger support.\n * Follows common logging patterns with structured logging capabilities.\n *\n * @interface Logger\n */\nexport interface Logger {\n\t/** Debug level logging - verbose information for debugging */\n\tdebug: LogFn;\n\t/** Info level logging - general informational messages */\n\tinfo: LogFn;\n\t/** Warning level logging - potentially harmful situations */\n\twarn: LogFn;\n\t/** Error level logging - error events that might still allow the application to continue */\n\terror: LogFn;\n\t/** Fatal level logging - severe errors that will likely cause the application to abort */\n\tfatal: LogFn;\n\t/** Trace level logging - most detailed information */\n\ttrace: LogFn;\n\t/**\n\t * Creates a child logger with additional context.\n\t * Child loggers inherit parent context and add their own.\n\t *\n\t * @param obj - Additional context to include in all child logger calls\n\t * @returns A new Logger instance with merged context\n\t */\n\tchild: (obj: object) => Logger;\n}\n\n/**\n * Console-based logger implementation that outputs to standard console methods.\n * Supports structured logging with automatic timestamp injection and context inheritance.\n *\n * @implements {Logger}\n *\n * @example\n * ```typescript\n * const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });\n * logger.info({ userId: 123 }, 'User action performed');\n * // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed\n *\n * const childLogger = logger.child({ module: 'auth' });\n * childLogger.debug({ action: 'validate' }, 'Validating token');\n * // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token\n * ```\n */\nexport enum LogLevel {\n\tTrace = 'trace',\n\tDebug = 'debug',\n\tInfo = 'info',\n\tWarn = 'warn',\n\tError = 'error',\n\tFatal = 'fatal',\n\tSilent = 'silent',\n}\n\n/**\n * Redaction configuration for masking sensitive data in logs.\n * Uses pino's fast-redact library under the hood.\n *\n * By default, custom paths are merged with the default sensitive paths.\n * Use `resolution: 'override'` to use only your custom paths.\n *\n * @example\n * ```typescript\n * // Simple path array (merges with defaults)\n * redact: ['user.ssn', 'custom.field']\n *\n * // Override defaults completely\n * redact: {\n *   paths: ['only.these.paths'],\n *   resolution: 'override',\n * }\n *\n * // With custom censor\n * redact: {\n *   paths: ['extra.secret'],\n *   censor: '***',\n * }\n *\n * // Remove fields entirely\n * redact: {\n *   paths: ['temporary.data'],\n *   remove: true,\n * }\n * ```\n */\nexport type RedactOptions =\n\t| string[]\n\t| {\n\t\t\t/** Paths to redact using dot notation or bracket notation for special chars */\n\t\t\tpaths: string[];\n\t\t\t/** Custom replacement text (default: '[REDACTED]') */\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\t/** Remove the field entirely instead of replacing (default: false) */\n\t\t\tremove?: boolean;\n\t\t\t/**\n\t\t\t * How to combine custom paths with default sensitive paths.\n\t\t\t * - 'merge': Custom paths are added to default paths (default)\n\t\t\t * - 'override': Only custom paths are used, defaults are ignored\n\t\t\t */\n\t\t\tresolution?: 'merge' | 'override';\n\t  };\n\nexport type CreateLoggerOptions = {\n\t/** Enable pretty printing with colors (disabled in production) */\n\tpretty?: boolean;\n\t/** Minimum log level to output */\n\tlevel?: LogLevel;\n\t/**\n\t * Redaction configuration for masking sensitive data.\n\t *\n\t * - `true` or `undefined` (the default): Uses default sensitive paths\n\t *   (password, token, secret, etc.)\n\t * - `false`: No redaction applied — the explicit opt-out\n\t * - `string[]`: Custom paths merged with defaults\n\t * - `object`: Advanced config with paths, censor, remove, and resolution options\n\t *\n\t * By default, custom paths are **merged** with the default sensitive paths.\n\t * Use `resolution: 'override'` to disable defaults and use only your paths.\n\t *\n\t * @example\n\t * ```typescript\n\t * // Use defaults only (the same as leaving `redact` out)\n\t * createLogger({ redact: true });\n\t *\n\t * // Opt out\n\t * createLogger({ redact: false });\n\t *\n\t * // Add custom paths (merged with defaults)\n\t * createLogger({ redact: ['user.ssn', 'custom.field'] });\n\t *\n\t * // Override defaults completely\n\t * createLogger({\n\t *   redact: {\n\t *     paths: ['only.these.paths'],\n\t *     resolution: 'override',\n\t *   }\n\t * });\n\t *\n\t * // Merge with custom censor\n\t * createLogger({\n\t *   redact: {\n\t *     paths: ['extra.secret'],\n\t *     censor: '***',\n\t *   }\n\t * });\n\t * ```\n\t */\n\tredact?: boolean | RedactOptions;\n\t/**\n\t * Where log lines are written (pino logger only). Defaults to stdout.\n\t * Ignored when `pretty` is on, since the pretty transport owns its output.\n\t */\n\tdestination?: { write(line: string): unknown };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkEA,IAAY,WAAL,yBAAA,UAAA;CACN,SAAA,WAAA;CACA,SAAA,WAAA;CACA,SAAA,UAAA;CACA,SAAA,UAAA;CACA,SAAA,WAAA;CACA,SAAA,WAAA;CACA,SAAA,YAAA;;AACD,EAAA,CAAA,CAAA"}

package/dist/types.d.cts

@@ -1,2 +1,175 @@
-import { CreateLoggerOptions, LogFn, LogLevel, Logger, RedactOptions } from "./types-Dk_k2-f_.cjs";
-export { CreateLoggerOptions, LogFn, LogLevel, Logger, RedactOptions };
+//#region src/types.d.ts
+/**
+ * Logging function type that supports both structured and simple logging.
+ * Can be called with an object for structured logging or just a message string.
+ *
+ * @example
+ * ```typescript
+ * // Structured logging with context object
+ * logger.info({ userId: 123, action: 'login' }, 'User logged in');
+ *
+ * // Simple string logging
+ * logger.info('Application started');
+ * ```
+ */
+export type LogFn = {
+  /** Structured logging with context object, optional message, and additional arguments */
+  <T extends object>(obj: T, msg?: string, ...args: any[]): void;
+  /** Simple string logging */
+  (msg: string): void;
+};
+/**
+ * Standard logger interface with multiple log levels and child logger support.
+ * Follows common logging patterns with structured logging capabilities.
+ *
+ * @interface Logger
+ */
+export interface Logger {
+  /** Debug level logging - verbose information for debugging */
+  debug: LogFn;
+  /** Info level logging - general informational messages */
+  info: LogFn;
+  /** Warning level logging - potentially harmful situations */
+  warn: LogFn;
+  /** Error level logging - error events that might still allow the application to continue */
+  error: LogFn;
+  /** Fatal level logging - severe errors that will likely cause the application to abort */
+  fatal: LogFn;
+  /** Trace level logging - most detailed information */
+  trace: LogFn;
+  /**
+   * Creates a child logger with additional context.
+   * Child loggers inherit parent context and add their own.
+   *
+   * @param obj - Additional context to include in all child logger calls
+   * @returns A new Logger instance with merged context
+   */
+  child: (obj: object) => Logger;
+}
+/**
+ * Console-based logger implementation that outputs to standard console methods.
+ * Supports structured logging with automatic timestamp injection and context inheritance.
+ *
+ * @implements {Logger}
+ *
+ * @example
+ * ```typescript
+ * const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });
+ * logger.info({ userId: 123 }, 'User action performed');
+ * // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed
+ *
+ * const childLogger = logger.child({ module: 'auth' });
+ * childLogger.debug({ action: 'validate' }, 'Validating token');
+ * // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token
+ * ```
+ */
+export declare enum LogLevel {
+  Trace = "trace",
+  Debug = "debug",
+  Info = "info",
+  Warn = "warn",
+  Error = "error",
+  Fatal = "fatal",
+  Silent = "silent"
+}
+/**
+ * Redaction configuration for masking sensitive data in logs.
+ * Uses pino's fast-redact library under the hood.
+ *
+ * By default, custom paths are merged with the default sensitive paths.
+ * Use `resolution: 'override'` to use only your custom paths.
+ *
+ * @example
+ * ```typescript
+ * // Simple path array (merges with defaults)
+ * redact: ['user.ssn', 'custom.field']
+ *
+ * // Override defaults completely
+ * redact: {
+ *   paths: ['only.these.paths'],
+ *   resolution: 'override',
+ * }
+ *
+ * // With custom censor
+ * redact: {
+ *   paths: ['extra.secret'],
+ *   censor: '***',
+ * }
+ *
+ * // Remove fields entirely
+ * redact: {
+ *   paths: ['temporary.data'],
+ *   remove: true,
+ * }
+ * ```
+ */
+export type RedactOptions = string[] | {
+  /** Paths to redact using dot notation or bracket notation for special chars */
+  paths: string[];
+  /** Custom replacement text (default: '[REDACTED]') */
+  censor?: string | ((value: unknown, path: string[]) => unknown);
+  /** Remove the field entirely instead of replacing (default: false) */
+  remove?: boolean;
+  /**
+   * How to combine custom paths with default sensitive paths.
+   * - 'merge': Custom paths are added to default paths (default)
+   * - 'override': Only custom paths are used, defaults are ignored
+   */
+  resolution?: 'merge' | 'override';
+};
+export type CreateLoggerOptions = {
+  /** Enable pretty printing with colors (disabled in production) */
+  pretty?: boolean;
+  /** Minimum log level to output */
+  level?: LogLevel;
+  /**
+   * Redaction configuration for masking sensitive data.
+   *
+   * - `true` or `undefined` (the default): Uses default sensitive paths
+   *   (password, token, secret, etc.)
+   * - `false`: No redaction applied — the explicit opt-out
+   * - `string[]`: Custom paths merged with defaults
+   * - `object`: Advanced config with paths, censor, remove, and resolution options
+   *
+   * By default, custom paths are **merged** with the default sensitive paths.
+   * Use `resolution: 'override'` to disable defaults and use only your paths.
+   *
+   * @example
+   * ```typescript
+   * // Use defaults only (the same as leaving `redact` out)
+   * createLogger({ redact: true });
+   *
+   * // Opt out
+   * createLogger({ redact: false });
+   *
+   * // Add custom paths (merged with defaults)
+   * createLogger({ redact: ['user.ssn', 'custom.field'] });
+   *
+   * // Override defaults completely
+   * createLogger({
+   *   redact: {
+   *     paths: ['only.these.paths'],
+   *     resolution: 'override',
+   *   }
+   * });
+   *
+   * // Merge with custom censor
+   * createLogger({
+   *   redact: {
+   *     paths: ['extra.secret'],
+   *     censor: '***',
+   *   }
+   * });
+   * ```
+   */
+  redact?: boolean | RedactOptions;
+  /**
+   * Where log lines are written (pino logger only). Defaults to stdout.
+   * Ignored when `pretty` is on, since the pretty transport owns its output.
+   */
+  destination?: {
+    write(line: string): unknown;
+  };
+};
+//#endregion
+//# sourceMappingURL=types.d.cts.map

package/dist/types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.cts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;;;;;;;;YAaY;;GAEV,kBAAkB,KAAK,GAAG,iBAAiB;;GAE3C;;;;;;;;iBASe;;EAEhB,OAAO;;EAEP,MAAM;;EAEN,MAAM;;EAEN,OAAO;;EAEP,OAAO;;EAEP,OAAO;;;;;;;;EAQP,QAAQ,gBAAgB;;;;;;;;;;;;;;;;;;;oBAoBb;EACX;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCW;;EAIT;;EAEA,oBAAoB,gBAAgB;;EAEpC;;;;;;EAMA;;YAGS;;EAEX;;EAEA,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyCR,mBAAmB;;;;;EAKnB;IAAgB,MAAM"}