@hasna/logs 0.3.29 → 0.3.30

package/dist/cli/index.js

@@ -8,7 +8,7 @@ import {
   runJob,
   structuredLogToEntry,
   validateStructuredLogReferences
-} from "../index-89jb7jg9.js";
+} from "../index-k9w7zfsv.js";
 import {
   PACKAGE_VERSION,
   createPage,
@@ -30,7 +30,7 @@ import {
   searchTestReports,
   summarizeLogs,
   validateUniversalEventInput
-} from "../index-dbhpykkz.js";
+} from "../index-mx0f61s2.js";
 import {
   getStorageStatus,
   storagePull,

package/dist/{index-89jb7jg9.js → index-k9w7zfsv.js}

@@ -8,7 +8,7 @@ import {
   redactValue,
   saveSnapshot,
   touchPage
-} from "./index-dbhpykkz.js";
+} from "./index-mx0f61s2.js";
 import {
   getEventStoreDataDir
 } from "./index-t3x838zw.js";

package/dist/{index-dbhpykkz.js → index-mx0f61s2.js}

@@ -237,7 +237,7 @@ async function fireAlert(db, rule, count) {
 }
 
 // src/lib/ingest.ts
-import { randomBytes } from "crypto";
+import { createHash, randomBytes } from "crypto";
 
 // src/lib/event-bus.ts
 class LogEventBus {
@@ -511,6 +511,23 @@ var REDACTED = "[REDACTED]";
 var SENSITIVE_KEY = /(?:authorization|cookie|set-cookie|credentials?\b|api[_-]?key|token|secret|password|passwd|pwd|private[_-]?key|access[_-]?token|refresh[_-]?token|session[_-]?secret|client[_-]?(?:secret|credentials?))/i;
 var SENSITIVE_FLAG = /^(?:authorization|auth|credentials?|api[-_]?key|token|secret|password|passwd|pwd|private[-_]?key|access[-_]?token|refresh[-_]?token|session[-_]?secret|client[-_]?(?:secret|credentials?))$/i;
 var SENSITIVE_FLAG_NAME = /(?:authorization|credentials?\b|api[-_]?key|token|secret|password|passwd|pwd|private[-_]?key|access[-_]?token|refresh[-_]?token|session[-_]?secret|client[-_]?(?:secret|credentials?))/i;
+var LOG_ENTRY_REDACTABLE_TOP_LEVEL_FIELDS = [
+  "id",
+  "source_event_id",
+  "service",
+  "machine_id",
+  "repo_id",
+  "app_id",
+  "process_id",
+  "run_id",
+  "trace_id",
+  "span_id",
+  "parent_span_id",
+  "session_id",
+  "release_id",
+  "environment",
+  "agent"
+];
 var STRING_PATTERNS = [
   {
     label: "openlogs_canary",
@@ -586,6 +603,14 @@ var STRING_PATTERNS = [
 function redactLogEntry(entry) {
   const reports = [];
   const next = { ...entry };
+  for (const field of LOG_ENTRY_REDACTABLE_TOP_LEVEL_FIELDS) {
+    const value = entry[field];
+    if (typeof value !== "string")
+      continue;
+    const result = redactString(value, field);
+    next[field] = result.value;
+    reports.push(result.report);
+  }
   if (typeof entry.message === "string") {
     const result = redactString(entry.message, "message");
     next.message = result.value;
@@ -732,7 +757,8 @@ function ingestLog(db, entry) {
   return withEventStoreLock(db, () => ingestLogLocked(db, entry));
 }
 function ingestLogLocked(db, entry) {
-  const eventId = entry.id ?? createEventId();
+  const eventIdRedaction = typeof entry.id === "string" ? redactString(entry.id, "id") : null;
+  const eventId = entry.id ? eventIdRedaction?.report.applied ? createRedactedEventId(entry.id) : entry.id : createEventId();
   const existing = db.prepare("SELECT * FROM logs WHERE id = ?").get(eventId);
   if (existing)
     return existing;
@@ -750,6 +776,14 @@ function ingestLogLocked(db, entry) {
   };
   const redacted = redactLogEntry(normalized);
   const safeEntry = redacted.value;
+  if (eventIdRedaction?.report.applied) {
+    const report = mergeRedactionReports(eventIdRedaction.report, redacted.report);
+    safeEntry.metadata = {
+      ...safeEntry.metadata ?? {},
+      redaction: redactionMetadata(report)
+    };
+  }
+  const safeSourceEventId = safeEntry.source_event_id ?? null;
   const identity = extractIdentity(safeEntry);
   const envelope = createLogEnvelope(safeEntry, eventId, eventTime, ingestTime, identity);
   const write = appendRawEvent(db, envelope);
@@ -778,7 +812,7 @@ function ingestLogLocked(db, entry) {
     indexRawEvent(db, {
       event_id: eventId,
       schema_version: envelope.schema_version,
-      source_event_id: sourceEventId,
+      source_event_id: safeSourceEventId,
       event_type: envelope.type,
       event_time: eventTime,
       ingest_time: ingestTime,
@@ -918,6 +952,10 @@ function stringMetadata(metadata, key) {
 function createEventId() {
   return randomBytes(16).toString("hex");
 }
+function createRedactedEventId(value) {
+  const digest = createHash("sha256").update(value).digest("hex").slice(0, 32);
+  return `log_redacted_${digest}`;
+}
 
 // src/lib/package-meta.ts
 import { existsSync, readFileSync } from "fs";
@@ -1302,7 +1340,7 @@ function clampNonNegativeInt2(value, fallback) {
 }
 
 // src/lib/universal-ingest.ts
-import { createHash, randomBytes as randomBytes2 } from "crypto";
+import { createHash as createHash2, randomBytes as randomBytes2 } from "crypto";
 var UNIVERSAL_EVENT_TYPES = [
   "log",
   "exception",
@@ -1822,7 +1860,7 @@ function normalizeIsoTime(value, field) {
 function deterministicSourceEventId(source, sourceEventId) {
   if (!sourceEventId)
     return;
-  const digest = createHash("sha256").update(source).update("\x00").update(sourceEventId).digest("hex").slice(0, 32);
+  const digest = createHash2("sha256").update(source).update("\x00").update(sourceEventId).digest("hex").slice(0, 32);
   return `evt_src_${digest}`;
 }
 function compactObject(value) {

package/dist/mcp/index.js

@@ -93,7 +93,7 @@ import {
   searchTestReports,
   summarizeLogs,
   validateUniversalEventInput
-} from "../index-dbhpykkz.js";
+} from "../index-mx0f61s2.js";
 import {
   getStoragePg,
   getStorageStatus,

package/dist/server/index.js

@@ -8,7 +8,7 @@ import {
   startScheduler,
   structuredLogPayloadToEntries,
   validateStructuredLogReferences
-} from "../index-89jb7jg9.js";
+} from "../index-k9w7zfsv.js";
 import {
   countLogs
 } from "../index-gcd14q2f.js";
@@ -50,7 +50,7 @@ import {
   updateAlertRule,
   updateProject,
   validateUniversalEventInput
-} from "../index-dbhpykkz.js";
+} from "../index-mx0f61s2.js";
 import {
   getDb,
   getIssue,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hasna/logs",
-  "version": "0.3.29",
+  "version": "0.3.30",
   "description": "Log aggregation + browser script + headless page scanner + performance monitoring for AI agents",
   "type": "module",
   "main": "./dist/index.js",