@geekmidas/logger 10.0.0-alpha.99 → 10.0.0

package/dist/pino.d.cts

@@ -1,7 +1,9 @@
-import { CreateLoggerOptions } from "./types.cjs";
-import { DEFAULT_REDACT_PATHS } from "./redact-paths.cjs";
-import { Logger } from "pino";
+import { CreateLoggerOptions } from "./types-Dk_k2-f_.cjs";
+import { DEFAULT_REDACT_PATHS } from "./redact-paths-CsK0_uz-.cjs";
+import * as pino0 from "pino";
+
 //#region src/pino.d.ts
+
 /**
  * Creates a pino logger instance with optional redaction support.
  *
@@ -10,17 +12,18 @@ import { Logger } from "pino";
  *
  * @example
  * ```typescript
- * // Basic logger — sensitive paths are redacted by default
+ * // Basic logger
  * const logger = createLogger({ level: 'debug' });
  *
- * // Opt out of redaction
- * const rawLogger = createLogger({ redact: false });
+ * // With redaction enabled
+ * const secureLogger = createLogger({ redact: true });
  *
  * // Pretty printing in development
- * const devLogger = createLogger({ pretty: true });
+ * const devLogger = createLogger({ pretty: true, redact: true });
  * ```
  */
-export declare function createLogger(options?: CreateLoggerOptions): Logger<never, boolean>;
+declare function createLogger(options?: CreateLoggerOptions): pino0.Logger<never, boolean>;
+//# sourceMappingURL=pino.d.ts.map
 //#endregion
-export { DEFAULT_REDACT_PATHS };
+export { DEFAULT_REDACT_PATHS, createLogger };
 //# sourceMappingURL=pino.d.cts.map

package/dist/pino.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"pino.d.cts","names":[],"sources":["../src/pino.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;wBA+GgB,aAAa,UAAS,sBAAwB"}
+{"version":3,"file":"pino.d.cts","names":[],"sources":["../src/pino.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAqGA;;;;AAA8D;;;;;;;;;;;iBAA9C,YAAA,WAAsB,sBAAwB,KAAA,CAAA"}

package/dist/pino.d.mts

@@ -1,7 +1,9 @@
-import { CreateLoggerOptions } from "./types.mjs";
-import { DEFAULT_REDACT_PATHS } from "./redact-paths.mjs";
-import { Logger } from "pino";
+import { CreateLoggerOptions } from "./types-BDdpcrpy.mjs";
+import { DEFAULT_REDACT_PATHS } from "./redact-paths-D07eTMlH.mjs";
+import * as pino0 from "pino";
+
 //#region src/pino.d.ts
+
 /**
  * Creates a pino logger instance with optional redaction support.
  *
@@ -10,17 +12,18 @@ import { Logger } from "pino";
  *
  * @example
  * ```typescript
- * // Basic logger — sensitive paths are redacted by default
+ * // Basic logger
  * const logger = createLogger({ level: 'debug' });
  *
- * // Opt out of redaction
- * const rawLogger = createLogger({ redact: false });
+ * // With redaction enabled
+ * const secureLogger = createLogger({ redact: true });
  *
  * // Pretty printing in development
- * const devLogger = createLogger({ pretty: true });
+ * const devLogger = createLogger({ pretty: true, redact: true });
  * ```
  */
-export declare function createLogger(options?: CreateLoggerOptions): Logger<never, boolean>;
+declare function createLogger(options?: CreateLoggerOptions): pino0.Logger<never, boolean>;
+//# sourceMappingURL=pino.d.ts.map
 //#endregion
-export { DEFAULT_REDACT_PATHS };
+export { DEFAULT_REDACT_PATHS, createLogger };
 //# sourceMappingURL=pino.d.mts.map

package/dist/pino.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"pino.d.mts","names":[],"sources":["../src/pino.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;wBA+GgB,aAAa,UAAS,sBAAwB"}
+{"version":3,"file":"pino.d.mts","names":[],"sources":["../src/pino.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAqGA;;;;AAA8D;;;;;;;;;;;iBAA9C,YAAA,WAAsB,sBAAwB,KAAA,CAAA"}

package/dist/pino.mjs

@@ -1,53 +1,21 @@
-import { otelStreamWrite } from "./otel.mjs";
-import { DEFAULT_REDACT_PATHS, redactUrlCredentials, redactUrlCredentialsIn } from "./redact-paths.mjs";
-import { pino, stdSerializers } from "pino";
+import { DEFAULT_REDACT_PATHS } from "./redact-paths-DQoIXhkS.mjs";
+import { pino } from "pino";
+
 //#region src/pino.ts
 /**
-* Pino logger with built-in redaction support for sensitive data.
-*
-* Redaction is on by default: a logger that was never told about passwords
-* and tokens still masks them. `redact: false` is the explicit opt-out.
-*
-* @example
-* ```typescript
-* import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';
-*
-* // Redaction with sensible defaults — the same as `redact: true`
-* const logger = createLogger();
-*
-* // Sensitive data is automatically masked
-* logger.info({ password: 'secret123', user: 'john' }, 'Login');
-* // Output: { password: '[Redacted]', user: 'john' } Login
-*
-* // Add custom paths (merged with defaults)
-* const logger2 = createLogger({ redact: ['user.ssn'] });
-*
-* // Override defaults for full control
-* const logger3 = createLogger({
-*   redact: {
-*     paths: ['onlyThis'],
-*     resolution: 'override',
-*   }
-* });
-* ```
-*
-* @module
-*/
-/**
 * Resolves redaction configuration from options.
-* Returns undefined only when redaction is turned off with `false`; leaving it
-* unset is the same as `true`, so sensitive paths are masked unless someone
-* decides they should not be.
+* Returns undefined if redaction is disabled, or a pino-compatible redact config.
 *
 * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.
 * With resolution: 'override', only the custom paths are used.
 */
 function resolveRedactConfig(redact) {
-	if (redact === false) return;
-	if (redact === void 0 || redact === true) return DEFAULT_REDACT_PATHS;
+	if (redact === void 0 || redact === false) return void 0;
+	if (redact === true) return DEFAULT_REDACT_PATHS;
 	if (Array.isArray(redact)) return [...DEFAULT_REDACT_PATHS, ...redact];
 	const { resolution = "merge", paths, censor, remove } = redact;
-	const config = { paths: resolution === "override" ? paths : [...DEFAULT_REDACT_PATHS, ...paths] };
+	const resolvedPaths = resolution === "override" ? paths : [...DEFAULT_REDACT_PATHS, ...paths];
+	const config = { paths: resolvedPaths };
 	if (censor !== void 0) config.censor = censor;
 	if (remove !== void 0) config.remove = remove;
 	return config;
@@ -60,45 +28,28 @@ function resolveRedactConfig(redact) {
 *
 * @example
 * ```typescript
-* // Basic logger — sensitive paths are redacted by default
+* // Basic logger
 * const logger = createLogger({ level: 'debug' });
 *
-* // Opt out of redaction
-* const rawLogger = createLogger({ redact: false });
+* // With redaction enabled
+* const secureLogger = createLogger({ redact: true });
 *
 * // Pretty printing in development
-* const devLogger = createLogger({ pretty: true });
+* const devLogger = createLogger({ pretty: true, redact: true });
 * ```
 */
 function createLogger(options = {}) {
-	const pretty = options?.pretty && process.env.NODE_ENV !== "production";
+	const pretty = options?.pretty && process.NODE_ENV !== "production";
 	const baseOptions = pretty ? { transport: {
 		target: "pino-pretty",
 		options: { colorize: true }
 	} } : {};
 	const redact = resolveRedactConfig(options.redact);
-	const serializeError = (value) => {
-		const serialized = stdSerializers.err(value);
-		if (!redact || serialized === value) return serialized;
-		return redactUrlCredentialsIn({ ...serialized });
-	};
-	const pinoOptions = {
+	return pino({
 		...baseOptions,
 		...options.level && { level: options.level },
 		...redact && { redact },
-		serializers: {
-			err: serializeError,
-			error: serializeError
-		},
-		hooks: {
-			...redact && { logMethod(args, method) {
-				const redacted = args.map((arg) => typeof arg === "string" ? redactUrlCredentials(arg) : arg);
-				return method.apply(this, redacted);
-			} },
-			streamWrite: otelStreamWrite
-		},
 		formatters: {
-			...redact && { log: (object) => redactUrlCredentialsIn(object) },
 			bindings() {
 				return { nodeVersion: process.version };
 			},
@@ -106,10 +57,9 @@ function createLogger(options = {}) {
 				return { level: label.toUpperCase() };
 			}
 		}
-	};
-	return options.destination && !pretty ? pino(pinoOptions, options.destination) : pino(pinoOptions);
+	});
 }
+
 //#endregion
 export { DEFAULT_REDACT_PATHS, createLogger };
-
 //# sourceMappingURL=pino.mjs.map

package/dist/pino.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"pino.mjs","names":[],"sources":["../src/pino.ts"],"sourcesContent":["/**\n * Pino logger with built-in redaction support for sensitive data.\n *\n * Redaction is on by default: a logger that was never told about passwords\n * and tokens still masks them. `redact: false` is the explicit opt-out.\n *\n * @example\n * ```typescript\n * import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';\n *\n * // Redaction with sensible defaults — the same as `redact: true`\n * const logger = createLogger();\n *\n * // Sensitive data is automatically masked\n * logger.info({ password: 'secret123', user: 'john' }, 'Login');\n * // Output: { password: '[Redacted]', user: 'john' } Login\n *\n * // Add custom paths (merged with defaults)\n * const logger2 = createLogger({ redact: ['user.ssn'] });\n *\n * // Override defaults for full control\n * const logger3 = createLogger({\n *   redact: {\n *     paths: ['onlyThis'],\n *     resolution: 'override',\n *   }\n * });\n * ```\n *\n * @module\n */\nimport { type LogFn, type Logger, pino, stdSerializers } from 'pino';\nimport { otelStreamWrite } from './otel';\nimport {\n\tDEFAULT_REDACT_PATHS,\n\tredactUrlCredentials,\n\tredactUrlCredentialsIn,\n} from './redact-paths';\nimport type { CreateLoggerOptions, RedactOptions } from './types';\n\n// Re-export for backwards compatibility\nexport { DEFAULT_REDACT_PATHS } from './redact-paths';\n\n/**\n * Type for the resolved pino redact config (without our custom resolution field).\n */\ntype PinoRedactConfig =\n\t| string[]\n\t| {\n\t\t\tpaths: string[];\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\tremove?: boolean;\n\t  };\n\n/**\n * Resolves redaction configuration from options.\n * Returns undefined only when redaction is turned off with `false`; leaving it\n * unset is the same as `true`, so sensitive paths are masked unless someone\n * decides they should not be.\n *\n * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.\n * With resolution: 'override', only the custom paths are used.\n */\nfunction resolveRedactConfig(\n\tredact: boolean | RedactOptions | undefined,\n): PinoRedactConfig | undefined {\n\tif (redact === false) {\n\t\treturn undefined;\n\t}\n\n\tif (redact === undefined || redact === true) {\n\t\treturn DEFAULT_REDACT_PATHS;\n\t}\n\n\t// Array syntax - merge with defaults\n\tif (Array.isArray(redact)) {\n\t\treturn [...DEFAULT_REDACT_PATHS, ...redact];\n\t}\n\n\t// Object syntax - check resolution mode\n\tconst { resolution = 'merge', paths, censor, remove } = redact;\n\n\tconst resolvedPaths =\n\t\tresolution === 'override' ? paths : [...DEFAULT_REDACT_PATHS, ...paths];\n\n\t// Return clean pino config without our resolution field\n\tconst config: PinoRedactConfig = { paths: resolvedPaths };\n\tif (censor !== undefined) config.censor = censor;\n\tif (remove !== undefined) config.remove = remove;\n\n\treturn config;\n}\n\n/**\n * Creates a pino logger instance with optional redaction support.\n *\n * @param options - Logger configuration options\n * @returns A configured pino logger instance\n *\n * @example\n * ```typescript\n * // Basic logger — sensitive paths are redacted by default\n * const logger = createLogger({ level: 'debug' });\n *\n * // Opt out of redaction\n * const rawLogger = createLogger({ redact: false });\n *\n * // Pretty printing in development\n * const devLogger = createLogger({ pretty: true });\n * ```\n */\nexport function createLogger(options: CreateLoggerOptions = {}) {\n\t// Pretty printing spawns a transport worker and writes for humans; in\n\t// production the output is for a log pipeline, so `pretty` is ignored there.\n\tconst pretty = options?.pretty && process.env.NODE_ENV !== 'production';\n\tconst baseOptions = pretty\n\t\t? {\n\t\t\t\ttransport: {\n\t\t\t\t\ttarget: 'pino-pretty',\n\t\t\t\t\toptions: { colorize: true },\n\t\t\t\t},\n\t\t\t}\n\t\t: {};\n\n\tconst redact = resolveRedactConfig(options.redact);\n\n\t// An Error is serialized only under a key pino has a serializer for — `err`\n\t// by default — and anything else is JSON.stringify'd, which an Error survives\n\t// as `{}`: no message, no stack. `logger.error({ error }, …)` is how most\n\t// code writes it, so `error` gets the same serializer as `err`.\n\t//\n\t// The serialized copy is a plain object, so URL credentials in the message\n\t// or the stack are masked like any other field; path redaction runs after\n\t// serializers, so `err.message` and `error.stack` are paths it can reach.\n\tconst serializeError = (value: unknown) => {\n\t\tconst serialized = stdSerializers.err(value as Error);\n\t\tif (!redact || serialized === value) return serialized;\n\t\treturn redactUrlCredentialsIn({ ...serialized });\n\t};\n\n\tconst pinoOptions = {\n\t\t...baseOptions,\n\t\t...(options.level && { level: options.level }),\n\t\t...(redact && { redact }),\n\t\tserializers: { err: serializeError, error: serializeError },\n\t\thooks: {\n\t\t\t// Redaction also masks the credentials of any URL, in any field or\n\t\t\t// in the message: `s3://KEY:SECRET@uploads` is logged with its\n\t\t\t// secret under a name no path list can predict.\n\t\t\t...(redact && {\n\t\t\t\tlogMethod(this: Logger, args: Parameters<LogFn>, method: LogFn) {\n\t\t\t\t\tconst redacted = args.map((arg) =>\n\t\t\t\t\t\ttypeof arg === 'string' ? redactUrlCredentials(arg) : arg,\n\t\t\t\t\t) as Parameters<LogFn>;\n\t\t\t\t\treturn method.apply(this, redacted);\n\t\t\t\t},\n\t\t\t}),\n\t\t\t// Each line, once redacted and serialized, also goes to\n\t\t\t// OpenTelemetry when a LoggerProvider is registered. On the calling\n\t\t\t// thread, before any transport, so the active span is the caller's.\n\t\t\tstreamWrite: otelStreamWrite,\n\t\t},\n\t\tformatters: {\n\t\t\t...(redact && {\n\t\t\t\tlog: (object: Record<string, unknown>) =>\n\t\t\t\t\tredactUrlCredentialsIn(object),\n\t\t\t}),\n\t\t\tbindings() {\n\t\t\t\treturn { nodeVersion: process.version };\n\t\t\t},\n\t\t\tlevel: (label: string) => {\n\t\t\t\treturn { level: label.toUpperCase() };\n\t\t\t},\n\t\t},\n\t};\n\n\t// A transport writes on its own worker, so a destination only applies when\n\t// the logger is not pretty-printing.\n\treturn options.destination && !pretty\n\t\t? pino(pinoOptions, options.destination)\n\t\t: pino(pinoOptions);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+DA,SAAS,oBACR,QAC+B;CAC/B,IAAI,WAAW,OACd;CAGD,IAAI,WAAW,KAAA,KAAa,WAAW,MACtC,OAAO;CAIR,IAAI,MAAM,QAAQ,MAAM,GACvB,OAAO,CAAC,GAAG,sBAAsB,GAAG,MAAM;CAI3C,MAAM,EAAE,aAAa,SAAS,OAAO,QAAQ,WAAW;CAMxD,MAAM,SAA2B,EAAE,OAHlC,eAAe,aAAa,QAAQ,CAAC,GAAG,sBAAsB,GAAG,KAAK,EAGf;CACxD,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;CAC1C,IAAI,WAAW,KAAA,GAAW,OAAO,SAAS;CAE1C,OAAO;AACR;;;;;;;;;;;;;;;;;;;AAoBA,SAAgB,aAAa,UAA+B,CAAC,GAAG;CAG/D,MAAM,SAAS,SAAS,UAAU,QAAQ,IAAI,aAAa;CAC3D,MAAM,cAAc,SACjB,EACA,WAAW;EACV,QAAQ;EACR,SAAS,EAAE,UAAU,KAAK;CAC3B,EACD,IACC,CAAC;CAEJ,MAAM,SAAS,oBAAoB,QAAQ,MAAM;CAUjD,MAAM,kBAAkB,UAAmB;EAC1C,MAAM,aAAa,eAAe,IAAI,KAAc;EACpD,IAAI,CAAC,UAAU,eAAe,OAAO,OAAO;EAC5C,OAAO,uBAAuB,EAAE,GAAG,WAAW,CAAC;CAChD;CAEA,MAAM,cAAc;EACnB,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAM;EAC5C,GAAI,UAAU,EAAE,OAAO;EACvB,aAAa;GAAE,KAAK;GAAgB,OAAO;EAAe;EAC1D,OAAO;GAIN,GAAI,UAAU,EACb,UAAwB,MAAyB,QAAe;IAC/D,MAAM,WAAW,KAAK,KAAK,QAC1B,OAAO,QAAQ,WAAW,qBAAqB,GAAG,IAAI,GACvD;IACA,OAAO,OAAO,MAAM,MAAM,QAAQ;GACnC,EACD;GAIA,aAAa;EACd;EACA,YAAY;GACX,GAAI,UAAU,EACb,MAAM,WACL,uBAAuB,MAAM,EAC/B;GACA,WAAW;IACV,OAAO,EAAE,aAAa,QAAQ,QAAQ;GACvC;GACA,QAAQ,UAAkB;IACzB,OAAO,EAAE,OAAO,MAAM,YAAY,EAAE;GACrC;EACD;CACD;CAIA,OAAO,QAAQ,eAAe,CAAC,SAC5B,KAAK,aAAa,QAAQ,WAAW,IACrC,KAAK,WAAW;AACpB"}
+{"version":3,"file":"pino.mjs","names":["redact: boolean | RedactOptions | undefined","config: PinoRedactConfig","options: CreateLoggerOptions"],"sources":["../src/pino.ts"],"sourcesContent":["/**\n * Pino logger with built-in redaction support for sensitive data.\n *\n * @example\n * ```typescript\n * import { createLogger, DEFAULT_REDACT_PATHS } from '@geekmidas/logger/pino';\n *\n * // Enable redaction with sensible defaults\n * const logger = createLogger({ redact: true });\n *\n * // Sensitive data is automatically masked\n * logger.info({ password: 'secret123', user: 'john' }, 'Login');\n * // Output: { password: '[Redacted]', user: 'john' } Login\n *\n * // Add custom paths (merged with defaults)\n * const logger2 = createLogger({ redact: ['user.ssn'] });\n *\n * // Override defaults for full control\n * const logger3 = createLogger({\n *   redact: {\n *     paths: ['onlyThis'],\n *     resolution: 'override',\n *   }\n * });\n * ```\n *\n * @module\n */\nimport { pino } from 'pino';\nimport { DEFAULT_REDACT_PATHS } from './redact-paths';\nimport type { CreateLoggerOptions, RedactOptions } from './types';\n\n// Re-export for backwards compatibility\nexport { DEFAULT_REDACT_PATHS } from './redact-paths';\n\n/**\n * Type for the resolved pino redact config (without our custom resolution field).\n */\ntype PinoRedactConfig =\n\t| string[]\n\t| {\n\t\t\tpaths: string[];\n\t\t\tcensor?: string | ((value: unknown, path: string[]) => unknown);\n\t\t\tremove?: boolean;\n\t  };\n\n/**\n * Resolves redaction configuration from options.\n * Returns undefined if redaction is disabled, or a pino-compatible redact config.\n *\n * By default (resolution: 'merge'), custom paths are merged with DEFAULT_REDACT_PATHS.\n * With resolution: 'override', only the custom paths are used.\n */\nfunction resolveRedactConfig(\n\tredact: boolean | RedactOptions | undefined,\n): PinoRedactConfig | undefined {\n\tif (redact === undefined || redact === false) {\n\t\treturn undefined;\n\t}\n\n\tif (redact === true) {\n\t\treturn DEFAULT_REDACT_PATHS;\n\t}\n\n\t// Array syntax - merge with defaults\n\tif (Array.isArray(redact)) {\n\t\treturn [...DEFAULT_REDACT_PATHS, ...redact];\n\t}\n\n\t// Object syntax - check resolution mode\n\tconst { resolution = 'merge', paths, censor, remove } = redact;\n\n\tconst resolvedPaths =\n\t\tresolution === 'override' ? paths : [...DEFAULT_REDACT_PATHS, ...paths];\n\n\t// Return clean pino config without our resolution field\n\tconst config: PinoRedactConfig = { paths: resolvedPaths };\n\tif (censor !== undefined) config.censor = censor;\n\tif (remove !== undefined) config.remove = remove;\n\n\treturn config;\n}\n\n/**\n * Creates a pino logger instance with optional redaction support.\n *\n * @param options - Logger configuration options\n * @returns A configured pino logger instance\n *\n * @example\n * ```typescript\n * // Basic logger\n * const logger = createLogger({ level: 'debug' });\n *\n * // With redaction enabled\n * const secureLogger = createLogger({ redact: true });\n *\n * // Pretty printing in development\n * const devLogger = createLogger({ pretty: true, redact: true });\n * ```\n */\nexport function createLogger(options: CreateLoggerOptions = {}) {\n\t// @ts-expect-error\n\tconst pretty = options?.pretty && process.NODE_ENV !== 'production';\n\tconst baseOptions = pretty\n\t\t? {\n\t\t\t\ttransport: {\n\t\t\t\t\ttarget: 'pino-pretty',\n\t\t\t\t\toptions: { colorize: true },\n\t\t\t\t},\n\t\t\t}\n\t\t: {};\n\n\tconst redact = resolveRedactConfig(options.redact);\n\n\treturn pino({\n\t\t...baseOptions,\n\t\t...(options.level && { level: options.level }),\n\t\t...(redact && { redact }),\n\t\tformatters: {\n\t\t\tbindings() {\n\t\t\t\treturn { nodeVersion: process.version };\n\t\t\t},\n\t\t\tlevel: (label) => {\n\t\t\t\treturn { level: label.toUpperCase() };\n\t\t\t},\n\t\t},\n\t});\n}\n"],"mappings":";;;;;;;;;;;AAqDA,SAAS,oBACRA,QAC+B;AAC/B,KAAI,qBAAwB,WAAW,MACtC;AAGD,KAAI,WAAW,KACd,QAAO;AAIR,KAAI,MAAM,QAAQ,OAAO,CACxB,QAAO,CAAC,GAAG,sBAAsB,GAAG,MAAO;CAI5C,MAAM,EAAE,aAAa,SAAS,OAAO,QAAQ,QAAQ,GAAG;CAExD,MAAM,gBACL,eAAe,aAAa,QAAQ,CAAC,GAAG,sBAAsB,GAAG,KAAM;CAGxE,MAAMC,SAA2B,EAAE,OAAO,cAAe;AACzD,KAAI,kBAAsB,QAAO,SAAS;AAC1C,KAAI,kBAAsB,QAAO,SAAS;AAE1C,QAAO;AACP;;;;;;;;;;;;;;;;;;;AAoBD,SAAgB,aAAaC,UAA+B,CAAE,GAAE;CAE/D,MAAM,SAAS,SAAS,UAAU,QAAQ,aAAa;CACvD,MAAM,cAAc,SACjB,EACA,WAAW;EACV,QAAQ;EACR,SAAS,EAAE,UAAU,KAAM;CAC3B,EACD,IACA,CAAE;CAEL,MAAM,SAAS,oBAAoB,QAAQ,OAAO;AAElD,QAAO,KAAK;EACX,GAAG;EACH,GAAI,QAAQ,SAAS,EAAE,OAAO,QAAQ,MAAO;EAC7C,GAAI,UAAU,EAAE,OAAQ;EACxB,YAAY;GACX,WAAW;AACV,WAAO,EAAE,aAAa,QAAQ,QAAS;GACvC;GACD,OAAO,CAAC,UAAU;AACjB,WAAO,EAAE,OAAO,MAAM,aAAa,CAAE;GACrC;EACD;CACD,EAAC;AACF"}

package/dist/redact-paths-CsK0_uz-.d.cts

@@ -0,0 +1,19 @@
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+declare const DEFAULT_REDACT_PATHS: string[];
+//# sourceMappingURL=redact-paths.d.ts.map
+//#endregion
+export { DEFAULT_REDACT_PATHS };
+//# sourceMappingURL=redact-paths-CsK0_uz-.d.cts.map

package/dist/redact-paths-CsK0_uz-.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths-CsK0_uz-.d.cts","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":[],"mappings":";;AAaA;;;;;;;;;;;;cAAa"}

package/dist/redact-paths-D07eTMlH.d.mts

@@ -0,0 +1,19 @@
+//#region src/redact-paths.d.ts
+/**
+ * Default sensitive field paths for redaction.
+ *
+ * These paths are automatically used when `redact: true` is set,
+ * and merged with custom paths unless `resolution: 'override'` is specified.
+ *
+ * Includes:
+ * - Authentication: password, token, apiKey, authorization, credentials
+ * - Headers: authorization, cookie, x-api-key, x-auth-token
+ * - Personal data: ssn, creditCard, cvv, pin
+ * - Secrets: secret, connectionString, databaseUrl
+ * - Wildcards: *.password, *.secret, *.token (catches nested fields)
+ */
+declare const DEFAULT_REDACT_PATHS: string[];
+//# sourceMappingURL=redact-paths.d.ts.map
+//#endregion
+export { DEFAULT_REDACT_PATHS };
+//# sourceMappingURL=redact-paths-D07eTMlH.d.mts.map

package/dist/redact-paths-D07eTMlH.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths-D07eTMlH.d.mts","names":[],"sources":["../src/redact-paths.ts"],"sourcesContent":[],"mappings":";;AAaA;;;;;;;;;;;;cAAa"}

package/dist/redact-paths-D0m0DIuQ.cjs

@@ -0,0 +1,73 @@
+
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+
+//#endregion
+Object.defineProperty(exports, 'DEFAULT_REDACT_PATHS', {
+  enumerable: true,
+  get: function () {
+    return DEFAULT_REDACT_PATHS;
+  }
+});
+//# sourceMappingURL=redact-paths-D0m0DIuQ.cjs.map

package/dist/redact-paths-D0m0DIuQ.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths-D0m0DIuQ.cjs","names":["DEFAULT_REDACT_PATHS: string[]"],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n"],"mappings":";;;;;;;;;;;;;;;AAaA,MAAaA,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACA"}

package/dist/redact-paths-DQoIXhkS.mjs

@@ -0,0 +1,67 @@
+//#region src/redact-paths.ts
+/**
+* Default sensitive field paths for redaction.
+*
+* These paths are automatically used when `redact: true` is set,
+* and merged with custom paths unless `resolution: 'override'` is specified.
+*
+* Includes:
+* - Authentication: password, token, apiKey, authorization, credentials
+* - Headers: authorization, cookie, x-api-key, x-auth-token
+* - Personal data: ssn, creditCard, cvv, pin
+* - Secrets: secret, connectionString, databaseUrl
+* - Wildcards: *.password, *.secret, *.token (catches nested fields)
+*/
+const DEFAULT_REDACT_PATHS = [
+	"password",
+	"pass",
+	"passwd",
+	"secret",
+	"token",
+	"accessToken",
+	"refreshToken",
+	"idToken",
+	"apiKey",
+	"api_key",
+	"apikey",
+	"auth",
+	"authorization",
+	"credential",
+	"credentials",
+	"*.password",
+	"*.secret",
+	"*.token",
+	"*.apiKey",
+	"*.api_key",
+	"*.authorization",
+	"*.accessToken",
+	"*.refreshToken",
+	"headers.authorization",
+	"headers.Authorization",
+	"headers[\"authorization\"]",
+	"headers[\"Authorization\"]",
+	"headers.cookie",
+	"headers.Cookie",
+	"headers[\"x-api-key\"]",
+	"headers[\"X-Api-Key\"]",
+	"headers[\"x-auth-token\"]",
+	"headers[\"X-Auth-Token\"]",
+	"ssn",
+	"socialSecurityNumber",
+	"social_security_number",
+	"creditCard",
+	"credit_card",
+	"cardNumber",
+	"card_number",
+	"cvv",
+	"cvc",
+	"pin",
+	"connectionString",
+	"connection_string",
+	"databaseUrl",
+	"database_url"
+];
+
+//#endregion
+export { DEFAULT_REDACT_PATHS };
+//# sourceMappingURL=redact-paths-DQoIXhkS.mjs.map

package/dist/redact-paths-DQoIXhkS.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-paths-DQoIXhkS.mjs","names":["DEFAULT_REDACT_PATHS: string[]"],"sources":["../src/redact-paths.ts"],"sourcesContent":["/**\n * Default sensitive field paths for redaction.\n *\n * These paths are automatically used when `redact: true` is set,\n * and merged with custom paths unless `resolution: 'override'` is specified.\n *\n * Includes:\n * - Authentication: password, token, apiKey, authorization, credentials\n * - Headers: authorization, cookie, x-api-key, x-auth-token\n * - Personal data: ssn, creditCard, cvv, pin\n * - Secrets: secret, connectionString, databaseUrl\n * - Wildcards: *.password, *.secret, *.token (catches nested fields)\n */\nexport const DEFAULT_REDACT_PATHS: string[] = [\n\t// Authentication & authorization\n\t'password',\n\t'pass',\n\t'passwd',\n\t'secret',\n\t'token',\n\t'accessToken',\n\t'refreshToken',\n\t'idToken',\n\t'apiKey',\n\t'api_key',\n\t'apikey',\n\t'auth',\n\t'authorization',\n\t'credential',\n\t'credentials',\n\n\t// Common nested patterns (headers, body, etc.)\n\t'*.password',\n\t'*.secret',\n\t'*.token',\n\t'*.apiKey',\n\t'*.api_key',\n\t'*.authorization',\n\t'*.accessToken',\n\t'*.refreshToken',\n\n\t// HTTP headers (case variations)\n\t'headers.authorization',\n\t'headers.Authorization',\n\t'headers[\"authorization\"]',\n\t'headers[\"Authorization\"]',\n\t'headers.cookie',\n\t'headers.Cookie',\n\t'headers[\"x-api-key\"]',\n\t'headers[\"X-Api-Key\"]',\n\t'headers[\"x-auth-token\"]',\n\t'headers[\"X-Auth-Token\"]',\n\n\t// Common sensitive data fields\n\t'ssn',\n\t'socialSecurityNumber',\n\t'social_security_number',\n\t'creditCard',\n\t'credit_card',\n\t'cardNumber',\n\t'card_number',\n\t'cvv',\n\t'cvc',\n\t'pin',\n\n\t// Database & connection strings\n\t'connectionString',\n\t'connection_string',\n\t'databaseUrl',\n\t'database_url',\n];\n"],"mappings":";;;;;;;;;;;;;;AAaA,MAAaA,uBAAiC;CAE7C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAGA;CACA;CACA;CACA;AACA"}

package/dist/redact-paths.cjs

@@ -1,117 +1,3 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-//#region src/redact-paths.ts
-/**
-* Default sensitive field paths for redaction.
-*
-* These paths are automatically used when `redact: true` is set,
-* and merged with custom paths unless `resolution: 'override'` is specified.
-*
-* Includes:
-* - Authentication: password, token, apiKey, authorization, credentials
-* - Headers: authorization, cookie, x-api-key, x-auth-token
-* - Personal data: ssn, creditCard, cvv, pin
-* - Secrets: secret, connectionString, databaseUrl
-* - Wildcards: *.password, *.secret, *.token (catches nested fields)
-*/
-const DEFAULT_REDACT_PATHS = [
-	"password",
-	"pass",
-	"passwd",
-	"secret",
-	"token",
-	"accessToken",
-	"refreshToken",
-	"idToken",
-	"apiKey",
-	"api_key",
-	"apikey",
-	"auth",
-	"authorization",
-	"credential",
-	"credentials",
-	"*.password",
-	"*.secret",
-	"*.token",
-	"*.apiKey",
-	"*.api_key",
-	"*.authorization",
-	"*.accessToken",
-	"*.refreshToken",
-	"headers.authorization",
-	"headers.Authorization",
-	"headers[\"authorization\"]",
-	"headers[\"Authorization\"]",
-	"headers.cookie",
-	"headers.Cookie",
-	"headers[\"x-api-key\"]",
-	"headers[\"X-Api-Key\"]",
-	"headers[\"x-auth-token\"]",
-	"headers[\"X-Auth-Token\"]",
-	"ssn",
-	"socialSecurityNumber",
-	"social_security_number",
-	"creditCard",
-	"credit_card",
-	"cardNumber",
-	"card_number",
-	"cvv",
-	"cvc",
-	"pin",
-	"connectionString",
-	"connection_string",
-	"databaseUrl",
-	"database_url"
-];
-/**
-* `scheme://user:password@` — the userinfo of a URL that carries a secret.
-* A user with no password (`ssh://git@host`) names nobody's secret and is left
-* alone.
-*/
-const URL_CREDENTIALS = /\b([a-z][a-z0-9+.-]*:\/\/)[^\s/?#@:]*:[^\s/?#@]*@/gi;
-/**
-* Replace the credentials of every URL in `text` with `REDACTED`, so
-* `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
-*
-* Path redaction cannot catch these: a URL turns up under any field name —
-* `url`, `origin`, `endpoint` — or inside a message, and blanking every such
-* field would hide the half of it that is useful.
-*/
-function redactUrlCredentials(text) {
-	return text.replace(URL_CREDENTIALS, "$1REDACTED@");
-}
-/** Deep enough for a log object; past it, values are logged as they are. */
-const MAX_DEPTH = 6;
-/**
-* A copy of `value` with {@link redactUrlCredentials} applied to every string
-* in it. Objects and arrays without such a string are returned as they were.
-*/
-function redactUrlCredentialsIn(value, depth = 0) {
-	if (typeof value === "string") return redactUrlCredentials(value);
-	if (depth >= MAX_DEPTH || value === null || typeof value !== "object") return value;
-	if (Array.isArray(value)) {
-		let changed = false;
-		const next = value.map((item) => {
-			const redacted = redactUrlCredentialsIn(item, depth + 1);
-			if (redacted !== item) changed = true;
-			return redacted;
-		});
-		return changed ? next : value;
-	}
-	const proto = Object.getPrototypeOf(value);
-	if (proto !== Object.prototype && proto !== null) return value;
-	let next;
-	for (const [key, item] of Object.entries(value)) {
-		const redacted = redactUrlCredentialsIn(item, depth + 1);
-		if (redacted !== item) {
-			next ??= { ...value };
-			next[key] = redacted;
-		}
-	}
-	return next ?? value;
-}
-//#endregion
-exports.DEFAULT_REDACT_PATHS = DEFAULT_REDACT_PATHS;
-exports.redactUrlCredentials = redactUrlCredentials;
-exports.redactUrlCredentialsIn = redactUrlCredentialsIn;
+const require_redact_paths = require('./redact-paths-D0m0DIuQ.cjs');
 
-//# sourceMappingURL=redact-paths.cjs.map
+exports.DEFAULT_REDACT_PATHS = require_redact_paths.DEFAULT_REDACT_PATHS;

package/dist/redact-paths.d.cts

@@ -1,31 +1,2 @@
-//#region src/redact-paths.d.ts
-/**
- * Default sensitive field paths for redaction.
- *
- * These paths are automatically used when `redact: true` is set,
- * and merged with custom paths unless `resolution: 'override'` is specified.
- *
- * Includes:
- * - Authentication: password, token, apiKey, authorization, credentials
- * - Headers: authorization, cookie, x-api-key, x-auth-token
- * - Personal data: ssn, creditCard, cvv, pin
- * - Secrets: secret, connectionString, databaseUrl
- * - Wildcards: *.password, *.secret, *.token (catches nested fields)
- */
-export declare const DEFAULT_REDACT_PATHS: string[];
-/**
- * Replace the credentials of every URL in `text` with `REDACTED`, so
- * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
- *
- * Path redaction cannot catch these: a URL turns up under any field name —
- * `url`, `origin`, `endpoint` — or inside a message, and blanking every such
- * field would hide the half of it that is useful.
- */
-export declare function redactUrlCredentials(text: string): string;
-/**
- * A copy of `value` with {@link redactUrlCredentials} applied to every string
- * in it. Objects and arrays without such a string are returned as they were.
- */
-export declare function redactUrlCredentialsIn<T>(value: T, depth?: number): T;
-//#endregion
-//# sourceMappingURL=redact-paths.d.cts.map
+import { DEFAULT_REDACT_PATHS } from "./redact-paths-CsK0_uz-.cjs";
+export { DEFAULT_REDACT_PATHS };

package/dist/redact-paths.d.mts

@@ -1,31 +1,2 @@
-//#region src/redact-paths.d.ts
-/**
- * Default sensitive field paths for redaction.
- *
- * These paths are automatically used when `redact: true` is set,
- * and merged with custom paths unless `resolution: 'override'` is specified.
- *
- * Includes:
- * - Authentication: password, token, apiKey, authorization, credentials
- * - Headers: authorization, cookie, x-api-key, x-auth-token
- * - Personal data: ssn, creditCard, cvv, pin
- * - Secrets: secret, connectionString, databaseUrl
- * - Wildcards: *.password, *.secret, *.token (catches nested fields)
- */
-export declare const DEFAULT_REDACT_PATHS: string[];
-/**
- * Replace the credentials of every URL in `text` with `REDACTED`, so
- * `s3://KEY:SECRET@uploads` is logged as `s3://REDACTED@uploads`.
- *
- * Path redaction cannot catch these: a URL turns up under any field name —
- * `url`, `origin`, `endpoint` — or inside a message, and blanking every such
- * field would hide the half of it that is useful.
- */
-export declare function redactUrlCredentials(text: string): string;
-/**
- * A copy of `value` with {@link redactUrlCredentials} applied to every string
- * in it. Objects and arrays without such a string are returned as they were.
- */
-export declare function redactUrlCredentialsIn<T>(value: T, depth?: number): T;
-//#endregion
-//# sourceMappingURL=redact-paths.d.mts.map
+import { DEFAULT_REDACT_PATHS } from "./redact-paths-D07eTMlH.mjs";
+export { DEFAULT_REDACT_PATHS };