@geekmidas/logger 10.0.0-alpha.9 → 10.0.0-alpha.90

package/dist/redact-paths.cjs

@@ -1,3 +1,117 @@
-const require_redact_paths = require('./redact-paths-D0m0DIuQ.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+/**
+* `scheme://user:password@` — the userinfo of a URL that carries a secret.
+* A user with no password (`ssh://git@host`) names nobody's secret and is left
+* alone.
+*/
+const URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]*:\/\/)[^\s/?#@:]*:[^\s/?#@]*@/gi;
+/**
+* Replace the credentials of every URL in `text` with `REDACTED`, so
+* `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
+*
+* Path redaction cannot catch these: a URL turns up under any field name —
+* `url`, `origin`, `endpoint` — or inside a message, and blanking every such
+* field would hide the half of it that is useful.
+*/
+function redactUrlCredentials(text) {
+	return text.replace(URL_CREDENTIALS, "$1REDACTED@");
+}
+/** Deep enough for a log object; past it, values are logged as they are. */
+const MAX_DEPTH = 6;
+/**
+* A copy of `value` with {@link redactUrlCredentials} applied to every string
+* in it. Objects and arrays without such a string are returned as they were.
+*/
+function redactUrlCredentialsIn(value, depth = 0) {
+	if (typeof value === "string") return redactUrlCredentials(value);
+	if (depth >= MAX_DEPTH || value === null || typeof value !== "object") return value;
+	if (Array.isArray(value)) {
+		let changed = false;
+		const next = value.map((item) => {
+			const redacted = redactUrlCredentialsIn(item, depth + 1);
+			if (redacted !== item) changed = true;
+			return redacted;
+		});
+		return changed ? next : value;
+	}
+	const proto = Object.getPrototypeOf(value);
+	if (proto !== Object.prototype && proto !== null) return value;
+	let next;
+	for (const [key, item] of Object.entries(value)) {
+		const redacted = redactUrlCredentialsIn(item, depth + 1);
+		if (redacted !== item) {
+			next ??= { ...value };
+			next[key] = redacted;
+		}
+	}
+	return next ?? value;
+}
+//#endregion
+exports.DEFAULT_REDACT_PATHS = DEFAULT_REDACT_PATHS;
+exports.redactUrlCredentials = redactUrlCredentials;
+exports.redactUrlCredentialsIn = redactUrlCredentialsIn;
 
-exports.DEFAULT_REDACT_PATHS = require_redact_paths.DEFAULT_REDACT_PATHS;
+//# sourceMappingURL=redact-paths.cjs.map

package/dist/redact-paths.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.cjs","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n\n/**\n * `scheme://user:password@` — the userinfo of a URL that carries a secret.\n * A user with no password (`ssh://git@host`) names nobody's secret and is left\n * alone.\n */\nconst URL_CREDENTIALS = /\\b([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/?#@:]*:[^\\s/?#@]*@/gi;\n\n/**\n * Replace the credentials of every URL in `text` with `REDACTED`, so\n * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.\n *\n * Path redaction cannot catch these: a URL turns up under any field name —\n * `url`, `origin`, `endpoint` — or inside a message, and blanking every such\n * field would hide the half of it that is useful.\n */\nexport function redactUrlCredentials(text: string): string {\n\treturn text.replace(URL_CREDENTIALS, '$1REDACTED@');\n}\n\n/** Deep enough for a log object; past it, values are logged as they are. */\nconst MAX_DEPTH = 6;\n\n/**\n * A copy of `value` with {@link redactUrlCredentials} applied to every string\n * in it. Objects and arrays without such a string are returned as they were.\n */\nexport function redactUrlCredentialsIn<T>(value: T, depth = 0): T {\n\tif (typeof value === 'string') {\n\t\treturn redactUrlCredentials(value) as T;\n\t}\n\tif (depth >= MAX_DEPTH || value === null || typeof value !== 'object') {\n\t\treturn value;\n\t}\n\tif (Array.isArray(value)) {\n\t\tlet changed = false;\n\t\tconst next = value.map((item) => {\n\t\t\tconst redacted = redactUrlCredentialsIn(item, depth + 1);\n\t\t\tif (redacted !== item) changed = true;\n\t\t\treturn redacted;\n\t\t});\n\t\treturn (changed ? next : value) as T;\n\t}\n\tconst proto = Object.getPrototypeOf(value);\n\tif (proto !== Object.prototype && proto !== null) return value;\n\n\tlet next: Record<string, unknown> | undefined;\n\tfor (const [key, item] of Object.entries(value)) {\n\t\tconst redacted = redactUrlCredentialsIn(item, depth + 1);\n\t\tif (redacted !== item) {\n\t\t\tnext ??= { ...(value as Record<string, unknown>) };\n\t\t\tnext[key] = redacted;\n\t\t}\n\t}\n\treturn (next ?? value) as T;\n}\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAa,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACD;;;;;;AAOA,MAAM,kBAAkB;;;;;;;;;AAUxB,SAAgB,qBAAqB,MAAsB;CAC1D,OAAO,KAAK,QAAQ,iBAAiB,aAAa;AACnD;;AAGA,MAAM,YAAY;;;;;AAMlB,SAAgB,uBAA0B,OAAU,QAAQ,GAAM;CACjE,IAAI,OAAO,UAAU,UACpB,OAAO,qBAAqB,KAAK;CAElC,IAAI,SAAS,aAAa,UAAU,QAAQ,OAAO,UAAU,UAC5D,OAAO;CAER,IAAI,MAAM,QAAQ,KAAK,GAAG;EACzB,IAAI,UAAU;EACd,MAAM,OAAO,MAAM,KAAK,SAAS;GAChC,MAAM,WAAW,uBAAuB,MAAM,QAAQ,CAAC;GACvD,IAAI,aAAa,MAAM,UAAU;GACjC,OAAO;EACR,CAAC;EACD,OAAQ,UAAU,OAAO;CAC1B;CACA,MAAM,QAAQ,OAAO,eAAe,KAAK;CACzC,IAAI,UAAU,OAAO,aAAa,UAAU,MAAM,OAAO;CAEzD,IAAI;CACJ,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,WAAW,uBAAuB,MAAM,QAAQ,CAAC;EACvD,IAAI,aAAa,MAAM;GACtB,SAAS,EAAE,GAAI,MAAkC;GACjD,KAAK,OAAO;EACb;CACD;CACA,OAAQ,QAAQ;AACjB"}

package/dist/redact-paths.d.cts

@@ -1,2 +1,31 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-CsK0_uz-.cjs";
-export { DEFAULT_REDACT_PATHS };
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+export declare const DEFAULT_REDACT_PATHS: string[];
+/**
+ * Replace the credentials of every URL in `text` with `REDACTED`, so
+ * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
+ *
+ * Path redaction cannot catch these: a URL turns up under any field name —
+ * `url`, `origin`, `endpoint` — or inside a message, and blanking every such
+ * field would hide the half of it that is useful.
+ */
+export declare function redactUrlCredentials(text: string): string;
+/**
+ * A copy of `value` with {@link redactUrlCredentials} applied to every string
+ * in it. Objects and arrays without such a string are returned as they were.
+ */
+export declare function redactUrlCredentialsIn<T>(value: T, depth?: number): T;
+//#endregion
+//# sourceMappingURL=redact-paths.d.cts.map

package/dist/redact-paths.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.d.cts","names":[],"sources":["../src/redact-paths.ts"],"mappings":";;;;;;;;;;;;;;qBAaa;;;;;;;;;wBA0EG,qBAAqB;;;;;wBAWrB,uBAAuB,GAAG,OAAO,GAAG,iBAAY"}

package/dist/redact-paths.d.mts

@@ -1,2 +1,31 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-D07eTMlH.mjs";
-export { DEFAULT_REDACT_PATHS };
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+export declare const DEFAULT_REDACT_PATHS: string[];
+/**
+ * Replace the credentials of every URL in `text` with `REDACTED`, so
+ * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
+ *
+ * Path redaction cannot catch these: a URL turns up under any field name —
+ * `url`, `origin`, `endpoint` — or inside a message, and blanking every such
+ * field would hide the half of it that is useful.
+ */
+export declare function redactUrlCredentials(text: string): string;
+/**
+ * A copy of `value` with {@link redactUrlCredentials} applied to every string
+ * in it. Objects and arrays without such a string are returned as they were.
+ */
+export declare function redactUrlCredentialsIn<T>(value: T, depth?: number): T;
+//#endregion
+//# sourceMappingURL=redact-paths.d.mts.map

package/dist/redact-paths.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.d.mts","names":[],"sources":["../src/redact-paths.ts"],"mappings":";;;;;;;;;;;;;;qBAaa;;;;;;;;;wBA0EG,qBAAqB;;;;;wBAWrB,uBAAuB,GAAG,OAAO,GAAG,iBAAY"}

package/dist/redact-paths.mjs

@@ -1,3 +1,114 @@
-import { DEFAULT_REDACT_PATHS } from "./redact-paths-DQoIXhkS.mjs";
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+/**
+* `scheme://user:password@` — the userinfo of a URL that carries a secret.
+* A user with no password (`ssh://git@host`) names nobody's secret and is left
+* alone.
+*/
+const URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]*:\/\/)[^\s/?#@:]*:[^\s/?#@]*@/gi;
+/**
+* Replace the credentials of every URL in `text` with `REDACTED`, so
+* `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
+*
+* Path redaction cannot catch these: a URL turns up under any field name —
+* `url`, `origin`, `endpoint` — or inside a message, and blanking every such
+* field would hide the half of it that is useful.
+*/
+function redactUrlCredentials(text) {
+	return text.replace(URL_CREDENTIALS, "$1REDACTED@");
+}
+/** Deep enough for a log object; past it, values are logged as they are. */
+const MAX_DEPTH = 6;
+/**
+* A copy of `value` with {@link redactUrlCredentials} applied to every string
+* in it. Objects and arrays without such a string are returned as they were.
+*/
+function redactUrlCredentialsIn(value, depth = 0) {
+	if (typeof value === "string") return redactUrlCredentials(value);
+	if (depth >= MAX_DEPTH || value === null || typeof value !== "object") return value;
+	if (Array.isArray(value)) {
+		let changed = false;
+		const next = value.map((item) => {
+			const redacted = redactUrlCredentialsIn(item, depth + 1);
+			if (redacted !== item) changed = true;
+			return redacted;
+		});
+		return changed ? next : value;
+	}
+	const proto = Object.getPrototypeOf(value);
+	if (proto !== Object.prototype && proto !== null) return value;
+	let next;
+	for (const [key, item] of Object.entries(value)) {
+		const redacted = redactUrlCredentialsIn(item, depth + 1);
+		if (redacted !== item) {
+			next ??= { ...value };
+			next[key] = redacted;
+		}
+	}
+	return next ?? value;
+}
+//#endregion
+export { DEFAULT_REDACT_PATHS, redactUrlCredentials, redactUrlCredentialsIn };
 
-export { DEFAULT_REDACT_PATHS };
+//# sourceMappingURL=redact-paths.mjs.map

package/dist/redact-paths.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths.mjs","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n\n/**\n * `scheme://user:password@` — the userinfo of a URL that carries a secret.\n * A user with no password (`ssh://git@host`) names nobody's secret and is left\n * alone.\n */\nconst URL_CREDENTIALS = /\\b([a-z][a-z0-9+.-]*:\\/\\/)[^\\s/?#@:]*:[^\\s/?#@]*@/gi;\n\n/**\n * Replace the credentials of every URL in `text` with `REDACTED`, so\n * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.\n *\n * Path redaction cannot catch these: a URL turns up under any field name —\n * `url`, `origin`, `endpoint` — or inside a message, and blanking every such\n * field would hide the half of it that is useful.\n */\nexport function redactUrlCredentials(text: string): string {\n\treturn text.replace(URL_CREDENTIALS, '$1REDACTED@');\n}\n\n/** Deep enough for a log object; past it, values are logged as they are. */\nconst MAX_DEPTH = 6;\n\n/**\n * A copy of `value` with {@link redactUrlCredentials} applied to every string\n * in it. Objects and arrays without such a string are returned as they were.\n */\nexport function redactUrlCredentialsIn<T>(value: T, depth = 0): T {\n\tif (typeof value === 'string') {\n\t\treturn redactUrlCredentials(value) as T;\n\t}\n\tif (depth >= MAX_DEPTH || value === null || typeof value !== 'object') {\n\t\treturn value;\n\t}\n\tif (Array.isArray(value)) {\n\t\tlet changed = false;\n\t\tconst next = value.map((item) => {\n\t\t\tconst redacted = redactUrlCredentialsIn(item, depth + 1);\n\t\t\tif (redacted !== item) changed = true;\n\t\t\treturn redacted;\n\t\t});\n\t\treturn (changed ? next : value) as T;\n\t}\n\tconst proto = Object.getPrototypeOf(value);\n\tif (proto !== Object.prototype && proto !== null) return value;\n\n\tlet next: Record<string, unknown> | undefined;\n\tfor (const [key, item] of Object.entries(value)) {\n\t\tconst redacted = redactUrlCredentialsIn(item, depth + 1);\n\t\tif (redacted !== item) {\n\t\t\tnext ??= { ...(value as Record<string, unknown>) };\n\t\t\tnext[key] = redacted;\n\t\t}\n\t}\n\treturn (next ?? value) as T;\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAa,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACD;;;;;;AAOA,MAAM,kBAAkB;;;;;;;;;AAUxB,SAAgB,qBAAqB,MAAsB;CAC1D,OAAO,KAAK,QAAQ,iBAAiB,aAAa;AACnD;;AAGA,MAAM,YAAY;;;;;AAMlB,SAAgB,uBAA0B,OAAU,QAAQ,GAAM;CACjE,IAAI,OAAO,UAAU,UACpB,OAAO,qBAAqB,KAAK;CAElC,IAAI,SAAS,aAAa,UAAU,QAAQ,OAAO,UAAU,UAC5D,OAAO;CAER,IAAI,MAAM,QAAQ,KAAK,GAAG;EACzB,IAAI,UAAU;EACd,MAAM,OAAO,MAAM,KAAK,SAAS;GAChC,MAAM,WAAW,uBAAuB,MAAM,QAAQ,CAAC;GACvD,IAAI,aAAa,MAAM,UAAU;GACjC,OAAO;EACR,CAAC;EACD,OAAQ,UAAU,OAAO;CAC1B;CACA,MAAM,QAAQ,OAAO,eAAe,KAAK;CACzC,IAAI,UAAU,OAAO,aAAa,UAAU,MAAM,OAAO;CAEzD,IAAI;CACJ,KAAK,MAAM,CAAC,KAAK,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,MAAM,WAAW,uBAAuB,MAAM,QAAQ,CAAC;EACvD,IAAI,aAAa,MAAM;GACtB,SAAS,EAAE,GAAI,MAAkC;GACjD,KAAK,OAAO;EACb;CACD;CACA,OAAQ,QAAQ;AACjB"}

package/dist/types.cjs

@@ -1,3 +1,33 @@
-const require_types = require('./types-ag_0Cvbg.cjs');
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region src/types.ts
+/**
+* Console-based logger implementation that outputs to standard console methods.
+* Supports structured logging with automatic timestamp injection and context inheritance.
+*
+* @implements {Logger}
+*
+* @example
+* ```typescript
+* const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });
+* logger.info({ userId: 123 }, 'User action performed');
+* // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed
+*
+* const childLogger = logger.child({ module: 'auth' });
+* childLogger.debug({ action: 'validate' }, 'Validating token');
+* // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token
+* ```
+*/
+let LogLevel = /* @__PURE__ */ function(LogLevel) {
+	LogLevel["Trace"] = "trace";
+	LogLevel["Debug"] = "debug";
+	LogLevel["Info"] = "info";
+	LogLevel["Warn"] = "warn";
+	LogLevel["Error"] = "error";
+	LogLevel["Fatal"] = "fatal";
+	LogLevel["Silent"] = "silent";
+	return LogLevel;
+}({});
+//#endregion
+exports.LogLevel = LogLevel;
 
-exports.LogLevel = require_types.LogLevel;
+//# sourceMappingURL=types.cjs.map

package/dist/types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.cjs","names":[],"sources":["../src/types.ts"],"sourcesContent":["/**\n * Logging function type that supports both structured and simple logging.\n * Can be called with an object for structured logging or just a message string.\n *\n * @example\n * ```typescript\n * // Structured logging with context object\n * logger.info({ userId: 123, action: 'login' }, 'User logged in');\n *\n * // Simple string logging\n * logger.info('Application started');\n * ```\n */\nexport type LogFn = {\n\t/** Structured logging with context object, optional message, and additional arguments */\n\t<T extends object>(obj: T, msg?: string, ...args: any[]): void;\n\t/** Simple string logging */\n\t(msg: string): void;\n};\n\n/**\n * Standard logger interface with multiple log levels and child logger support.\n * Follows common logging patterns with structured logging capabilities.\n *\n * @interface Logger\n */\nexport interface Logger {\n\t/** Debug level logging - verbose information for debugging */\n\tdebug: LogFn;\n\t/** Info level logging - general informational messages */\n\tinfo: LogFn;\n\t/** Warning level logging - potentially harmful situations */\n\twarn: LogFn;\n\t/** Error level logging - error events that might still allow the application to continue */\n\terror: LogFn;\n\t/** Fatal level logging - severe errors that will likely cause the application to abort */\n\tfatal: LogFn;\n\t/** Trace level logging - most detailed information */\n\ttrace: LogFn;\n\t/**\n\t * Creates a child logger with additional context.\n\t * Child loggers inherit parent context and add their own.\n\t *\n\t * @param obj - Additional context to include in all child logger calls\n\t * @returns A new Logger instance with merged context\n\t */\n\tchild: (obj: object) => Logger;\n}\n\n/**\n * Console-based logger implementation that outputs to standard console methods.\n * Supports structured logging with automatic timestamp injection and context inheritance.\n *\n * @implements {Logger}\n *\n * @example\n * ```typescript\n * const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });\n * logger.info({ userId: 123 }, 'User action performed');\n * // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed\n *\n * const childLogger = logger.child({ module: 'auth' });\n * childLogger.debug({ action: 'validate' }, 'Validating token');\n * // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token\n * ```\n */\nexport enum LogLevel {\n\tTrace = 'trace',\n\tDebug = 'debug',\n\tInfo = 'info',\n\tWarn = 'warn',\n\tError = 'error',\n\tFatal = 'fatal',\n\tSilent = 'silent',\n}\n\n/**\n * Redaction configuration for masking sensitive data in logs.\n * Uses pino's fast-redact library under the hood.\n *\n * By default, custom paths are merged with the default sensitive paths.\n * Use `resolution: 'override'` to use only your custom paths.\n *\n * @example\n * ```typescript\n * // Simple path array (merges with defaults)\n * redact: ['user.ssn', 'custom.field']\n *\n * // Override defaults completely\n * redact: {\n *   paths: ['only.these.paths'],\n *   resolution: 'override',\n * }\n *\n * // With custom censor\n * redact: {\n *   paths: ['extra.secret'],\n *   censor: '***',\n * }\n *\n * // Remove fields entirely\n * redact: {\n *   paths: ['temporary.data'],\n *   remove: true,\n * }\n * ```\n */\nexport type RedactOptions =\n\t| string[]\n\t| {\n\t\t\t/** Paths to redact using dot notation or bracket notation for special chars */\n\t\t\tpaths: string[];\n\t\t\t/** Custom replacement text (default: '[REDACTED]') */\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\t/** Remove the field entirely instead of replacing (default: false) */\n\t\t\tremove?: boolean;\n\t\t\t/**\n\t\t\t * How to combine custom paths with default sensitive paths.\n\t\t\t * - 'merge': Custom paths are added to default paths (default)\n\t\t\t * - 'override': Only custom paths are used, defaults are ignored\n\t\t\t */\n\t\t\tresolution?: 'merge' | 'override';\n\t  };\n\nexport type CreateLoggerOptions = {\n\t/** Enable pretty printing with colors (disabled in production) */\n\tpretty?: boolean;\n\t/** Minimum log level to output */\n\tlevel?: LogLevel;\n\t/**\n\t * Redaction configuration for masking sensitive data.\n\t *\n\t * - `true` or `undefined` (the default): Uses default sensitive paths\n\t *   (password, token, secret, etc.)\n\t * - `false`: No redaction applied — the explicit opt-out\n\t * - `string[]`: Custom paths merged with defaults\n\t * - `object`: Advanced config with paths, censor, remove, and resolution options\n\t *\n\t * By default, custom paths are **merged** with the default sensitive paths.\n\t * Use `resolution: 'override'` to disable defaults and use only your paths.\n\t *\n\t * @example\n\t * ```typescript\n\t * // Use defaults only (the same as leaving `redact` out)\n\t * createLogger({ redact: true });\n\t *\n\t * // Opt out\n\t * createLogger({ redact: false });\n\t *\n\t * // Add custom paths (merged with defaults)\n\t * createLogger({ redact: ['user.ssn', 'custom.field'] });\n\t *\n\t * // Override defaults completely\n\t * createLogger({\n\t *   redact: {\n\t *     paths: ['only.these.paths'],\n\t *     resolution: 'override',\n\t *   }\n\t * });\n\t *\n\t * // Merge with custom censor\n\t * createLogger({\n\t *   redact: {\n\t *     paths: ['extra.secret'],\n\t *     censor: '***',\n\t *   }\n\t * });\n\t * ```\n\t */\n\tredact?: boolean | RedactOptions;\n\t/**\n\t * Where log lines are written (pino logger only). Defaults to stdout.\n\t * Ignored when `pretty` is on, since the pretty transport owns its output.\n\t */\n\tdestination?: { write(line: string): unknown };\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkEA,IAAY,WAAL,yBAAA,UAAA;CACN,SAAA,WAAA;CACA,SAAA,WAAA;CACA,SAAA,UAAA;CACA,SAAA,UAAA;CACA,SAAA,WAAA;CACA,SAAA,WAAA;CACA,SAAA,YAAA;;AACD,EAAA,CAAA,CAAA"}

package/dist/types.d.cts

@@ -1,2 +1,175 @@
-import { CreateLoggerOptions, LogFn, LogLevel, Logger, RedactOptions } from "./types-Dk_k2-f_.cjs";
-export { CreateLoggerOptions, LogFn, LogLevel, Logger, RedactOptions };
+//#region src/types.d.ts
+/**
+ * Logging function type that supports both structured and simple logging.
+ * Can be called with an object for structured logging or just a message string.
+ *
+ * @example
+ * ```typescript
+ * // Structured logging with context object
+ * logger.info({ userId: 123, action: 'login' }, 'User logged in');
+ *
+ * // Simple string logging
+ * logger.info('Application started');
+ * ```
+ */
+export type LogFn = {
+  /** Structured logging with context object, optional message, and additional arguments */
+  <T extends object>(obj: T, msg?: string, ...args: any[]): void;
+  /** Simple string logging */
+  (msg: string): void;
+};
+/**
+ * Standard logger interface with multiple log levels and child logger support.
+ * Follows common logging patterns with structured logging capabilities.
+ *
+ * @interface Logger
+ */
+export interface Logger {
+  /** Debug level logging - verbose information for debugging */
+  debug: LogFn;
+  /** Info level logging - general informational messages */
+  info: LogFn;
+  /** Warning level logging - potentially harmful situations */
+  warn: LogFn;
+  /** Error level logging - error events that might still allow the application to continue */
+  error: LogFn;
+  /** Fatal level logging - severe errors that will likely cause the application to abort */
+  fatal: LogFn;
+  /** Trace level logging - most detailed information */
+  trace: LogFn;
+  /**
+   * Creates a child logger with additional context.
+   * Child loggers inherit parent context and add their own.
+   *
+   * @param obj - Additional context to include in all child logger calls
+   * @returns A new Logger instance with merged context
+   */
+  child: (obj: object) => Logger;
+}
+/**
+ * Console-based logger implementation that outputs to standard console methods.
+ * Supports structured logging with automatic timestamp injection and context inheritance.
+ *
+ * @implements {Logger}
+ *
+ * @example
+ * ```typescript
+ * const logger = new ConsoleLogger({ app: 'myApp', version: '1.0.0' });
+ * logger.info({ userId: 123 }, 'User action performed');
+ * // Output: { app: 'myApp', version: '1.0.0', userId: 123, ts: 1234567890 } User action performed
+ *
+ * const childLogger = logger.child({ module: 'auth' });
+ * childLogger.debug({ action: 'validate' }, 'Validating token');
+ * // Output: { app: 'myApp', version: '1.0.0', module: 'auth', action: 'validate', ts: 1234567891 } Validating token
+ * ```
+ */
+export declare enum LogLevel {
+  Trace = "trace",
+  Debug = "debug",
+  Info = "info",
+  Warn = "warn",
+  Error = "error",
+  Fatal = "fatal",
+  Silent = "silent"
+}
+/**
+ * Redaction configuration for masking sensitive data in logs.
+ * Uses pino's fast-redact library under the hood.
+ *
+ * By default, custom paths are merged with the default sensitive paths.
+ * Use `resolution: 'override'` to use only your custom paths.
+ *
+ * @example
+ * ```typescript
+ * // Simple path array (merges with defaults)
+ * redact: ['user.ssn', 'custom.field']
+ *
+ * // Override defaults completely
+ * redact: {
+ *   paths: ['only.these.paths'],
+ *   resolution: 'override',
+ * }
+ *
+ * // With custom censor
+ * redact: {
+ *   paths: ['extra.secret'],
+ *   censor: '***',
+ * }
+ *
+ * // Remove fields entirely
+ * redact: {
+ *   paths: ['temporary.data'],
+ *   remove: true,
+ * }
+ * ```
+ */
+export type RedactOptions = string[] | {
+  /** Paths to redact using dot notation or bracket notation for special chars */
+  paths: string[];
+  /** Custom replacement text (default: '[REDACTED]') */
+  censor?: string | ((value: unknown, path: string[]) => unknown);
+  /** Remove the field entirely instead of replacing (default: false) */
+  remove?: boolean;
+  /**
+   * How to combine custom paths with default sensitive paths.
+   * - 'merge': Custom paths are added to default paths (default)
+   * - 'override': Only custom paths are used, defaults are ignored
+   */
+  resolution?: 'merge' | 'override';
+};
+export type CreateLoggerOptions = {
+  /** Enable pretty printing with colors (disabled in production) */
+  pretty?: boolean;
+  /** Minimum log level to output */
+  level?: LogLevel;
+  /**
+   * Redaction configuration for masking sensitive data.
+   *
+   * - `true` or `undefined` (the default): Uses default sensitive paths
+   *   (password, token, secret, etc.)
+   * - `false`: No redaction applied — the explicit opt-out
+   * - `string[]`: Custom paths merged with defaults
+   * - `object`: Advanced config with paths, censor, remove, and resolution options
+   *
+   * By default, custom paths are **merged** with the default sensitive paths.
+   * Use `resolution: 'override'` to disable defaults and use only your paths.
+   *
+   * @example
+   * ```typescript
+   * // Use defaults only (the same as leaving `redact` out)
+   * createLogger({ redact: true });
+   *
+   * // Opt out
+   * createLogger({ redact: false });
+   *
+   * // Add custom paths (merged with defaults)
+   * createLogger({ redact: ['user.ssn', 'custom.field'] });
+   *
+   * // Override defaults completely
+   * createLogger({
+   *   redact: {
+   *     paths: ['only.these.paths'],
+   *     resolution: 'override',
+   *   }
+   * });
+   *
+   * // Merge with custom censor
+   * createLogger({
+   *   redact: {
+   *     paths: ['extra.secret'],
+   *     censor: '***',
+   *   }
+   * });
+   * ```
+   */
+  redact?: boolean | RedactOptions;
+  /**
+   * Where log lines are written (pino logger only). Defaults to stdout.
+   * Ignored when `pretty` is on, since the pretty transport owns its output.
+   */
+  destination?: {
+    write(line: string): unknown;
+  };
+};
+//#endregion
+//# sourceMappingURL=types.d.cts.map

package/dist/types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.cts","names":[],"sources":["../src/types.ts"],"mappings":";;;;;;;;;;;;;;YAaY;;GAEV,kBAAkB,KAAK,GAAG,iBAAiB;;GAE3C;;;;;;;;iBASe;;EAEhB,OAAO;;EAEP,MAAM;;EAEN,MAAM;;EAEN,OAAO;;EAEP,OAAO;;EAEP,OAAO;;;;;;;;EAQP,QAAQ,gBAAgB;;;;;;;;;;;;;;;;;;;oBAoBb;EACX;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkCW;;EAIT;;EAEA,oBAAoB,gBAAgB;;EAEpC;;;;;;EAMA;;YAGS;;EAEX;;EAEA,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyCR,mBAAmB;;;;;EAKnB;IAAgB,MAAM"}