@logtape/windows-eventlog 1.4.0-dev.428 → 1.4.0-dev.438

package/README.md

@@ -100,6 +100,34 @@ await configure({
 > This is the standard location for application events and does not require
 > administrator privileges.
 
+> [!NOTE]
+> The event ID is used to lookup a string resource from a dynamic link library.
+> If you do not register a library, “the system cannot open the file” will be
+> printed as description in the Event Log regardless of the parameters passed.
+
+If you want to log only the text supplied by the formatter into the event log,
+you can register the system generic string library using this command:
+
+~~~~ powershell
+New-Item `
+  -Path HKLM:\SYSTEM\CurrentControlSet\Services\EventLog\Application `
+  -Name MyApplication `
+  | New-ItemProperty `
+    -Name EventMessageFile `
+    -PropertyType ExpandString `
+    -Value %SystemRoot%\System32\netmsg.dll
+~~~~
+
+Replacing `MyApplication` with the name you passed as `sourceName` to the sink,
+and use the `NELOG_OEM_Code` (the default) as the event ID. Note that there is
+no quotation marks around the data part of that command, as this trips up the
+escaping of the percentage signs.
+
+> [!NOTE]
+> Event Viewer will cache the event message file when it is open. If you change
+> the entry in the registry, it will not be updated until Event Viewer is
+> restarted.
+
 
 Runtime support
 ---------------

package/dist/ffi.bun.cjs

@@ -6,23 +6,21 @@ const bun_ffi = require_rolldown_runtime.__toESM(require("bun:ffi"));
 /**
 * Bun FFI implementation for Windows Event Log API
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogBunFFI = class {
 	eventSource = null;
 	lib = null;
-	sourceName;
+	sourceName = "";
 	initialized = false;
 	metaLogger = (0, __logtape_logtape.getLogger)([
 		"logtape",
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initialize the FFI bindings and register event source
 	*/
-	initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
 		if (this.initialized) return;
 		try {
 			this.lib = (0, bun_ffi.dlopen)("advapi32.dll", {
@@ -62,15 +60,17 @@ var WindowsEventLogFFI = class {
 	/**
 	* Write an event to Windows Event Log
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.initialized || !this.eventSource || !this.lib) return;
 		try {
+			const ptrArray = new BigUint64Array(params.length + 1);
 			const encoder = new TextEncoder();
-			const messageBuffer = encoder.encode(message + "\0");
-			const ptrArray = new BigUint64Array(2);
-			ptrArray[0] = BigInt((0, bun_ffi.ptr)(messageBuffer));
-			ptrArray[1] = 0n;
-			const success = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, 1, 0, ptrArray, null);
+			for (let i = 0; i < params.length; i++) {
+				const paramBuffer = encoder.encode(params[i] + "\0");
+				ptrArray[i] = BigInt((0, bun_ffi.ptr)(paramBuffer));
+			}
+			ptrArray[params.length] = 0n;
+			const success = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, params.length, 0, ptrArray, null);
 			if (!success) throw new Error(`ReportEventA returned false`);
 		} catch (error) {
 			throw error;
@@ -99,4 +99,4 @@ var WindowsEventLogFFI = class {
 };
 
 //#endregion
-exports.WindowsEventLogFFI = WindowsEventLogFFI;
+exports.WindowsEventLogBunFFI = WindowsEventLogBunFFI;

package/dist/ffi.bun.js

@@ -5,23 +5,21 @@ import { FFIType, dlopen, ptr } from "bun:ffi";
 /**
 * Bun FFI implementation for Windows Event Log API
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogBunFFI = class {
 	eventSource = null;
 	lib = null;
-	sourceName;
+	sourceName = "";
 	initialized = false;
 	metaLogger = getLogger([
 		"logtape",
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initialize the FFI bindings and register event source
 	*/
-	initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
 		if (this.initialized) return;
 		try {
 			this.lib = dlopen("advapi32.dll", {
@@ -61,15 +59,17 @@ var WindowsEventLogFFI = class {
 	/**
 	* Write an event to Windows Event Log
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.initialized || !this.eventSource || !this.lib) return;
 		try {
+			const ptrArray = new BigUint64Array(params.length + 1);
 			const encoder = new TextEncoder();
-			const messageBuffer = encoder.encode(message + "\0");
-			const ptrArray = new BigUint64Array(2);
-			ptrArray[0] = BigInt(ptr(messageBuffer));
-			ptrArray[1] = 0n;
-			const success = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, 1, 0, ptrArray, null);
+			for (let i = 0; i < params.length; i++) {
+				const paramBuffer = encoder.encode(params[i] + "\0");
+				ptrArray[i] = BigInt(ptr(paramBuffer));
+			}
+			ptrArray[params.length] = 0n;
+			const success = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, params.length, 0, ptrArray, null);
 			if (!success) throw new Error(`ReportEventA returned false`);
 		} catch (error) {
 			throw error;
@@ -98,5 +98,5 @@ var WindowsEventLogFFI = class {
 };
 
 //#endregion
-export { WindowsEventLogFFI };
+export { WindowsEventLogBunFFI };
 //# sourceMappingURL=ffi.bun.js.map

package/dist/ffi.bun.js.map

@@ -1 +1 @@
-{"version":3,"file":"ffi.bun.js","names":["sourceName: string","eventType: EventType","eventId: number","message: string"],"sources":["../src/ffi.bun.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\n// @ts-types=\"npm:@types/bun@^1.2.16\"\nimport { dlopen, FFIType, ptr } from \"bun:ffi\";\nimport type { EventType } from \"./types.ts\";\n\n/**\n * Bun FFI implementation for Windows Event Log API\n */\nexport class WindowsEventLogFFI {\n  private eventSource: number | null = null;\n  // deno-lint-ignore no-explicit-any\n  private lib: any = null;\n  private sourceName: string;\n  private initialized = false;\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  constructor(sourceName: string) {\n    this.sourceName = sourceName;\n  }\n\n  /**\n   * Initialize the FFI bindings and register event source\n   */\n  initialize(): void {\n    if (this.initialized) return;\n\n    try {\n      // Load advapi32.dll using Bun FFI\n      this.lib = dlopen(\"advapi32.dll\", {\n        RegisterEventSourceA: {\n          args: [FFIType.ptr, FFIType.cstring],\n          returns: FFIType.ptr,\n        },\n        ReportEventA: {\n          args: [\n            FFIType.ptr, // hEventLog\n            FFIType.u16, // wType\n            FFIType.u16, // wCategory\n            FFIType.u32, // dwEventID\n            FFIType.ptr, // lpUserSid\n            FFIType.u16, // wNumStrings\n            FFIType.u32, // dwDataSize\n            FFIType.ptr, // lpStrings - pointer to array of string pointers\n            FFIType.ptr, // lpRawData\n          ],\n          returns: FFIType.bool,\n        },\n        DeregisterEventSource: {\n          args: [FFIType.ptr],\n          returns: FFIType.bool,\n        },\n      });\n\n      // Register event source using cstring\n      // Create a buffer for the source name\n      const encoder = new TextEncoder();\n      const sourceNameBuffer = encoder.encode(this.sourceName + \"\\0\");\n\n      const result = this.lib.symbols.RegisterEventSourceA(\n        null,\n        sourceNameBuffer,\n      );\n      this.eventSource = typeof result === \"number\" ? result : null;\n\n      if (!this.eventSource || this.eventSource === 0) {\n        throw new Error(\n          `Failed to register event source: ${this.sourceName}`,\n        );\n      }\n\n      this.initialized = true;\n    } catch (error) {\n      throw new Error(\n        `Failed to initialize Windows Event Log FFI: ${error}`,\n      );\n    }\n  }\n\n  /**\n   * Write an event to Windows Event Log\n   */\n  writeEvent(eventType: EventType, eventId: number, message: string): void {\n    if (!this.initialized || !this.eventSource || !this.lib) {\n      return;\n    }\n\n    try {\n      // Use string array approach which works with Bun FFI\n      const encoder = new TextEncoder();\n      const messageBuffer = encoder.encode(message + \"\\0\");\n\n      // Create pointer array for strings\n      const ptrArray = new BigUint64Array(2);\n      ptrArray[0] = BigInt(ptr(messageBuffer));\n      ptrArray[1] = 0n; // null terminator\n\n      const success = this.lib.symbols.ReportEventA(\n        this.eventSource,\n        eventType,\n        0, // category\n        eventId,\n        null, // user SID (null)\n        1, // number of strings\n        0, // data size\n        ptrArray, // pointer to array of string pointers\n        null, // raw data (null)\n      );\n\n      if (!success) {\n        throw new Error(`ReportEventA returned false`);\n      }\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /**\n   * Clean up resources\n   */\n  dispose(): void {\n    if (this.initialized && this.eventSource && this.lib) {\n      try {\n        this.lib.symbols.DeregisterEventSource(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n      this.initialized = false;\n\n      try {\n        this.lib.close();\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to close FFI library during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.lib = null;\n    }\n  }\n}\n\n// cSpell: ignore cstring\n"],"mappings":";;;;;;;AAQA,IAAa,qBAAb,MAAgC;CAC9B,AAAQ,cAA6B;CAErC,AAAQ,MAAW;CACnB,AAAQ;CACR,AAAQ,cAAc;CACtB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;CAEvE,YAAYA,YAAoB;AAC9B,OAAK,aAAa;CACnB;;;;CAKD,aAAmB;AACjB,MAAI,KAAK,YAAa;AAEtB,MAAI;AAEF,QAAK,MAAM,OAAO,gBAAgB;IAChC,sBAAsB;KACpB,MAAM,CAAC,QAAQ,KAAK,QAAQ,OAAQ;KACpC,SAAS,QAAQ;IAClB;IACD,cAAc;KACZ,MAAM;MACJ,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;KACT;KACD,SAAS,QAAQ;IAClB;IACD,uBAAuB;KACrB,MAAM,CAAC,QAAQ,GAAI;KACnB,SAAS,QAAQ;IAClB;GACF,EAAC;GAIF,MAAM,UAAU,IAAI;GACpB,MAAM,mBAAmB,QAAQ,OAAO,KAAK,aAAa,KAAK;GAE/D,MAAM,SAAS,KAAK,IAAI,QAAQ,qBAC9B,MACA,iBACD;AACD,QAAK,qBAAqB,WAAW,WAAW,SAAS;AAEzD,QAAK,KAAK,eAAe,KAAK,gBAAgB,EAC5C,OAAM,IAAI,OACP,mCAAmC,KAAK,WAAW;AAIxD,QAAK,cAAc;EACpB,SAAQ,OAAO;AACd,SAAM,IAAI,OACP,8CAA8C,MAAM;EAExD;CACF;;;;CAKD,WAAWC,WAAsBC,SAAiBC,SAAuB;AACvE,OAAK,KAAK,gBAAgB,KAAK,gBAAgB,KAAK,IAClD;AAGF,MAAI;GAEF,MAAM,UAAU,IAAI;GACpB,MAAM,gBAAgB,QAAQ,OAAO,UAAU,KAAK;GAGpD,MAAM,WAAW,IAAI,eAAe;AACpC,YAAS,KAAK,OAAO,IAAI,cAAc,CAAC;AACxC,YAAS,KAAK;GAEd,MAAM,UAAU,KAAK,IAAI,QAAQ,aAC/B,KAAK,aACL,WACA,GACA,SACA,MACA,GACA,GACA,UACA,KACD;AAED,QAAK,QACH,OAAM,IAAI,OAAO;EAEpB,SAAQ,OAAO;AACd,SAAM;EACP;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,eAAe,KAAK,eAAe,KAAK,KAAK;AACpD,OAAI;AACF,SAAK,IAAI,QAAQ,sBAAsB,KAAK,YAAY;GACzD,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;AACnB,QAAK,cAAc;AAEnB,OAAI;AACF,SAAK,IAAI,OAAO;GACjB,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,uDACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,MAAM;EACZ;CACF;AACF"}
+{"version":3,"file":"ffi.bun.js","names":["sourceName: string","eventType: EventType","eventId: number","params: string[]"],"sources":["../src/ffi.bun.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\n// @ts-types=\"npm:@types/bun@^1.2.16\"\nimport { dlopen, FFIType, ptr } from \"bun:ffi\";\nimport type { WindowsEventLogFFI } from \"./ffi.ts\";\nimport type { EventType } from \"./types.ts\";\n\n/**\n * Bun FFI implementation for Windows Event Log API\n */\nexport class WindowsEventLogBunFFI implements WindowsEventLogFFI {\n  private eventSource: number | null = null;\n  // deno-lint-ignore no-explicit-any\n  private lib: any = null;\n  private sourceName: string = \"\"; // immediately overwritten in initialize\n  private initialized = false;\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  /**\n   * Initialize the FFI bindings and register event source\n   */\n  initialize(sourceName: string): void {\n    this.sourceName = sourceName;\n    if (this.initialized) return;\n\n    try {\n      // Load advapi32.dll using Bun FFI\n      this.lib = dlopen(\"advapi32.dll\", {\n        RegisterEventSourceA: {\n          args: [FFIType.ptr, FFIType.cstring],\n          returns: FFIType.ptr,\n        },\n        ReportEventA: {\n          args: [\n            FFIType.ptr, // hEventLog\n            FFIType.u16, // wType\n            FFIType.u16, // wCategory\n            FFIType.u32, // dwEventID\n            FFIType.ptr, // lpUserSid\n            FFIType.u16, // wNumStrings\n            FFIType.u32, // dwDataSize\n            FFIType.ptr, // lpStrings - pointer to array of string pointers\n            FFIType.ptr, // lpRawData\n          ],\n          returns: FFIType.bool,\n        },\n        DeregisterEventSource: {\n          args: [FFIType.ptr],\n          returns: FFIType.bool,\n        },\n      });\n\n      // Register event source using cstring\n      // Create a buffer for the source name\n      const encoder = new TextEncoder();\n      const sourceNameBuffer = encoder.encode(this.sourceName + \"\\0\");\n\n      const result = this.lib.symbols.RegisterEventSourceA(\n        null,\n        sourceNameBuffer,\n      );\n      this.eventSource = typeof result === \"number\" ? result : null;\n\n      if (!this.eventSource || this.eventSource === 0) {\n        throw new Error(\n          `Failed to register event source: ${this.sourceName}`,\n        );\n      }\n\n      this.initialized = true;\n    } catch (error) {\n      throw new Error(\n        `Failed to initialize Windows Event Log FFI: ${error}`,\n      );\n    }\n  }\n\n  /**\n   * Write an event to Windows Event Log\n   */\n  writeEvent(eventType: EventType, eventId: number, params: string[]): void {\n    if (!this.initialized || !this.eventSource || !this.lib) {\n      return;\n    }\n\n    try {\n      // Create pointer array for strings\n      const ptrArray = new BigUint64Array(params.length + 1);\n\n      // Use string array approach which works with Bun FFI\n      const encoder = new TextEncoder();\n      for (let i = 0; i < params.length; i++) {\n        const paramBuffer = encoder.encode(params[i] + \"\\0\");\n        ptrArray[i] = BigInt(ptr(paramBuffer));\n      }\n      ptrArray[params.length] = 0n; // null terminator\n\n      const success = this.lib.symbols.ReportEventA(\n        this.eventSource,\n        eventType,\n        0, // category\n        eventId,\n        null, // user SID (null)\n        params.length, // number of strings\n        0, // data size\n        ptrArray, // pointer to array of string pointers\n        null, // raw data (null)\n      );\n\n      if (!success) {\n        throw new Error(`ReportEventA returned false`);\n      }\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /**\n   * Clean up resources\n   */\n  dispose(): void {\n    if (this.initialized && this.eventSource && this.lib) {\n      try {\n        this.lib.symbols.DeregisterEventSource(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n      this.initialized = false;\n\n      try {\n        this.lib.close();\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to close FFI library during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.lib = null;\n    }\n  }\n}\n\n// cSpell: ignore cstring\n"],"mappings":";;;;;;;AASA,IAAa,wBAAb,MAAiE;CAC/D,AAAQ,cAA6B;CAErC,AAAQ,MAAW;CACnB,AAAQ,aAAqB;CAC7B,AAAQ,cAAc;CACtB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;;;;CAKvE,WAAWA,YAA0B;AACnC,OAAK,aAAa;AAClB,MAAI,KAAK,YAAa;AAEtB,MAAI;AAEF,QAAK,MAAM,OAAO,gBAAgB;IAChC,sBAAsB;KACpB,MAAM,CAAC,QAAQ,KAAK,QAAQ,OAAQ;KACpC,SAAS,QAAQ;IAClB;IACD,cAAc;KACZ,MAAM;MACJ,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;MACR,QAAQ;KACT;KACD,SAAS,QAAQ;IAClB;IACD,uBAAuB;KACrB,MAAM,CAAC,QAAQ,GAAI;KACnB,SAAS,QAAQ;IAClB;GACF,EAAC;GAIF,MAAM,UAAU,IAAI;GACpB,MAAM,mBAAmB,QAAQ,OAAO,KAAK,aAAa,KAAK;GAE/D,MAAM,SAAS,KAAK,IAAI,QAAQ,qBAC9B,MACA,iBACD;AACD,QAAK,qBAAqB,WAAW,WAAW,SAAS;AAEzD,QAAK,KAAK,eAAe,KAAK,gBAAgB,EAC5C,OAAM,IAAI,OACP,mCAAmC,KAAK,WAAW;AAIxD,QAAK,cAAc;EACpB,SAAQ,OAAO;AACd,SAAM,IAAI,OACP,8CAA8C,MAAM;EAExD;CACF;;;;CAKD,WAAWC,WAAsBC,SAAiBC,QAAwB;AACxE,OAAK,KAAK,gBAAgB,KAAK,gBAAgB,KAAK,IAClD;AAGF,MAAI;GAEF,MAAM,WAAW,IAAI,eAAe,OAAO,SAAS;GAGpD,MAAM,UAAU,IAAI;AACpB,QAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;IACtC,MAAM,cAAc,QAAQ,OAAO,OAAO,KAAK,KAAK;AACpD,aAAS,KAAK,OAAO,IAAI,YAAY,CAAC;GACvC;AACD,YAAS,OAAO,UAAU;GAE1B,MAAM,UAAU,KAAK,IAAI,QAAQ,aAC/B,KAAK,aACL,WACA,GACA,SACA,MACA,OAAO,QACP,GACA,UACA,KACD;AAED,QAAK,QACH,OAAM,IAAI,OAAO;EAEpB,SAAQ,OAAO;AACd,SAAM;EACP;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,eAAe,KAAK,eAAe,KAAK,KAAK;AACpD,OAAI;AACF,SAAK,IAAI,QAAQ,sBAAsB,KAAK,YAAY;GACzD,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;AACnB,QAAK,cAAc;AAEnB,OAAI;AACF,SAAK,IAAI,OAAO;GACjB,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,uDACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,MAAM;EACZ;CACF;AACF"}

package/dist/ffi.deno.cjs

@@ -3,9 +3,6 @@ const require_types = require('./types.cjs');
 const __logtape_logtape = require_rolldown_runtime.__toESM(require("@logtape/logtape"));
 
 //#region src/ffi.deno.ts
-const EVENTLOG_ERROR_TYPE = 1;
-const EVENTLOG_WARNING_TYPE = 2;
-const EVENTLOG_INFORMATION_TYPE = 4;
 const FFI_SYMBOLS = {
 	RegisterEventSourceA: {
 		parameters: ["pointer", "pointer"],
@@ -36,28 +33,30 @@ const FFI_SYMBOLS = {
 *
 * @since 1.0.0
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogDenoFFI = class {
 	lib = null;
 	eventSource = null;
+	sourceName = "";
+	initialized = false;
 	encoder = new TextEncoder();
 	metaLogger = (0, __logtape_logtape.getLogger)([
 		"logtape",
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initializes the FFI library and registers the event source.
 	* @throws {WindowsEventLogError} If initialization fails
 	*/
-	initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
+		if (this.initialized) return;
 		try {
 			this.lib = Deno.dlopen("advapi32.dll", FFI_SYMBOLS);
 			const sourceNamePtr = Deno.UnsafePointer.of(this.encoder.encode(this.sourceName + "\0"));
 			this.eventSource = this.lib.symbols.RegisterEventSourceA(null, sourceNamePtr);
 			if (!this.eventSource) throw new require_types.WindowsEventLogError(`Failed to register event source '${this.sourceName}'.`);
+			this.initialized = true;
 		} catch (error) {
 			if (error instanceof require_types.WindowsEventLogError) throw error;
 			throw new require_types.WindowsEventLogError(`Failed to initialize Windows Event Log FFI: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : void 0);
@@ -67,19 +66,23 @@ var WindowsEventLogFFI = class {
 	* Writes a message to the Windows Event Log.
 	*
 	* @param eventType Event type (error, warning, info)
-	* @param eventId Event ID number
-	* @param message Message string to log
+	* @param eventId Event ID number that gives us formatting string
+	* @param params Message parameter strings to log
 	* @throws {WindowsEventLogError} If the write operation fails
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.lib || !this.eventSource) throw new require_types.WindowsEventLogError("FFI not initialized. Call initialize() first.");
 		try {
-			const messageBuffer = this.encoder.encode(message + "\0");
-			const messagePtr = Deno.UnsafePointer.of(messageBuffer);
-			const messagePtrValue = messagePtr ? Deno.UnsafePointer.value(messagePtr) : 0n;
-			const stringsArray = new BigUint64Array([messagePtrValue]);
+			const unsafePointersToStrings = [];
+			for (let i = 0; i < params.length; i++) {
+				const paramBuffer = this.encoder.encode(params[i] + "\0");
+				const paramPtr = Deno.UnsafePointer.of(paramBuffer);
+				const paramPtrValue = paramPtr ? Deno.UnsafePointer.value(paramPtr) : 0n;
+				unsafePointersToStrings.push(paramPtrValue);
+			}
+			const stringsArray = new BigUint64Array(unsafePointersToStrings);
 			const stringsPtr = Deno.UnsafePointer.of(stringsArray);
-			const result = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, 1, 0, stringsPtr, null);
+			const result = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, stringsArray.length, 0, stringsPtr, null);
 			if (result === 0) throw new require_types.WindowsEventLogError(`Failed to write event to Event Log.`);
 		} catch (error) {
 			if (error instanceof require_types.WindowsEventLogError) throw error;
@@ -106,11 +109,9 @@ var WindowsEventLogFFI = class {
 			}
 			this.lib = null;
 		}
+		this.initialized = false;
 	}
 };
 
 //#endregion
-exports.EVENTLOG_ERROR_TYPE = EVENTLOG_ERROR_TYPE;
-exports.EVENTLOG_INFORMATION_TYPE = EVENTLOG_INFORMATION_TYPE;
-exports.EVENTLOG_WARNING_TYPE = EVENTLOG_WARNING_TYPE;
-exports.WindowsEventLogFFI = WindowsEventLogFFI;
+exports.WindowsEventLogDenoFFI = WindowsEventLogDenoFFI;

package/dist/ffi.deno.js

@@ -2,9 +2,6 @@ import { WindowsEventLogError } from "./types.js";
 import { getLogger } from "@logtape/logtape";
 
 //#region src/ffi.deno.ts
-const EVENTLOG_ERROR_TYPE = 1;
-const EVENTLOG_WARNING_TYPE = 2;
-const EVENTLOG_INFORMATION_TYPE = 4;
 const FFI_SYMBOLS = {
 	RegisterEventSourceA: {
 		parameters: ["pointer", "pointer"],
@@ -35,28 +32,30 @@ const FFI_SYMBOLS = {
 *
 * @since 1.0.0
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogDenoFFI = class {
 	lib = null;
 	eventSource = null;
+	sourceName = "";
+	initialized = false;
 	encoder = new TextEncoder();
 	metaLogger = getLogger([
 		"logtape",
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initializes the FFI library and registers the event source.
 	* @throws {WindowsEventLogError} If initialization fails
 	*/
-	initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
+		if (this.initialized) return;
 		try {
 			this.lib = Deno.dlopen("advapi32.dll", FFI_SYMBOLS);
 			const sourceNamePtr = Deno.UnsafePointer.of(this.encoder.encode(this.sourceName + "\0"));
 			this.eventSource = this.lib.symbols.RegisterEventSourceA(null, sourceNamePtr);
 			if (!this.eventSource) throw new WindowsEventLogError(`Failed to register event source '${this.sourceName}'.`);
+			this.initialized = true;
 		} catch (error) {
 			if (error instanceof WindowsEventLogError) throw error;
 			throw new WindowsEventLogError(`Failed to initialize Windows Event Log FFI: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : void 0);
@@ -66,19 +65,23 @@ var WindowsEventLogFFI = class {
 	* Writes a message to the Windows Event Log.
 	*
 	* @param eventType Event type (error, warning, info)
-	* @param eventId Event ID number
-	* @param message Message string to log
+	* @param eventId Event ID number that gives us formatting string
+	* @param params Message parameter strings to log
 	* @throws {WindowsEventLogError} If the write operation fails
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.lib || !this.eventSource) throw new WindowsEventLogError("FFI not initialized. Call initialize() first.");
 		try {
-			const messageBuffer = this.encoder.encode(message + "\0");
-			const messagePtr = Deno.UnsafePointer.of(messageBuffer);
-			const messagePtrValue = messagePtr ? Deno.UnsafePointer.value(messagePtr) : 0n;
-			const stringsArray = new BigUint64Array([messagePtrValue]);
+			const unsafePointersToStrings = [];
+			for (let i = 0; i < params.length; i++) {
+				const paramBuffer = this.encoder.encode(params[i] + "\0");
+				const paramPtr = Deno.UnsafePointer.of(paramBuffer);
+				const paramPtrValue = paramPtr ? Deno.UnsafePointer.value(paramPtr) : 0n;
+				unsafePointersToStrings.push(paramPtrValue);
+			}
+			const stringsArray = new BigUint64Array(unsafePointersToStrings);
 			const stringsPtr = Deno.UnsafePointer.of(stringsArray);
-			const result = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, 1, 0, stringsPtr, null);
+			const result = this.lib.symbols.ReportEventA(this.eventSource, eventType, 0, eventId, null, stringsArray.length, 0, stringsPtr, null);
 			if (result === 0) throw new WindowsEventLogError(`Failed to write event to Event Log.`);
 		} catch (error) {
 			if (error instanceof WindowsEventLogError) throw error;
@@ -105,9 +108,10 @@ var WindowsEventLogFFI = class {
 			}
 			this.lib = null;
 		}
+		this.initialized = false;
 	}
 };
 
 //#endregion
-export { EVENTLOG_ERROR_TYPE, EVENTLOG_INFORMATION_TYPE, EVENTLOG_WARNING_TYPE, WindowsEventLogFFI };
+export { WindowsEventLogDenoFFI };
 //# sourceMappingURL=ffi.deno.js.map

package/dist/ffi.deno.js.map

@@ -1 +1 @@
-{"version":3,"file":"ffi.deno.js","names":["sourceName: string","eventType: number","eventId: number","message: string"],"sources":["../src/ffi.deno.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\nimport { WindowsEventLogError } from \"./types.ts\";\n\n/**\n * Windows Event Log API constants and types for FFI.\n * @since 1.0.0\n */\n\n// Event Log types\nexport const EVENTLOG_SUCCESS = 0x0000;\nexport const EVENTLOG_ERROR_TYPE = 0x0001;\nexport const EVENTLOG_WARNING_TYPE = 0x0002;\nexport const EVENTLOG_INFORMATION_TYPE = 0x0004;\n\n// FFI symbol definitions for Windows Event Log APIs\nconst FFI_SYMBOLS = {\n  RegisterEventSourceA: {\n    parameters: [\"pointer\", \"pointer\"] as const,\n    result: \"pointer\" as const,\n  },\n  DeregisterEventSource: {\n    parameters: [\"pointer\"] as const,\n    result: \"u32\" as const,\n  },\n  ReportEventA: {\n    parameters: [\n      \"pointer\", // hEventLog\n      \"u16\", // wType\n      \"u16\", // wCategory\n      \"u32\", // dwEventID\n      \"pointer\", // lpUserSid\n      \"u16\", // wNumStrings\n      \"u32\", // dwDataSize\n      \"pointer\", // lpStrings\n      \"pointer\", // lpRawData\n    ] as const,\n    result: \"u32\" as const,\n  },\n} as const;\n\n/**\n * Windows Event Log FFI wrapper class for Deno.\n * Provides direct access to Windows Event Log APIs through Deno's FFI.\n *\n * @since 1.0.0\n */\nexport class WindowsEventLogFFI {\n  private lib: Deno.DynamicLibrary<typeof FFI_SYMBOLS> | null = null;\n  private eventSource: Deno.PointerValue | null = null;\n  private encoder = new TextEncoder();\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  constructor(private sourceName: string) {}\n\n  /**\n   * Initializes the FFI library and registers the event source.\n   * @throws {WindowsEventLogError} If initialization fails\n   */\n  initialize(): void {\n    try {\n      // Load advapi32.dll\n      this.lib = Deno.dlopen(\"advapi32.dll\", FFI_SYMBOLS);\n\n      // Register event source\n      const sourceNamePtr = Deno.UnsafePointer.of(\n        this.encoder.encode(this.sourceName + \"\\0\"),\n      );\n      this.eventSource = this.lib.symbols.RegisterEventSourceA(\n        null,\n        sourceNamePtr,\n      );\n\n      if (!this.eventSource) {\n        throw new WindowsEventLogError(\n          `Failed to register event source '${this.sourceName}'.`,\n        );\n      }\n    } catch (error) {\n      if (error instanceof WindowsEventLogError) {\n        throw error;\n      }\n      throw new WindowsEventLogError(\n        `Failed to initialize Windows Event Log FFI: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  /**\n   * Writes a message to the Windows Event Log.\n   *\n   * @param eventType Event type (error, warning, info)\n   * @param eventId Event ID number\n   * @param message Message string to log\n   * @throws {WindowsEventLogError} If the write operation fails\n   */\n  writeEvent(eventType: number, eventId: number, message: string): void {\n    if (!this.lib || !this.eventSource) {\n      throw new WindowsEventLogError(\n        \"FFI not initialized. Call initialize() first.\",\n      );\n    }\n\n    try {\n      // Prepare message string\n      const messageBuffer = this.encoder.encode(message + \"\\0\");\n      const messagePtr = Deno.UnsafePointer.of(messageBuffer);\n      const messagePtrValue = messagePtr\n        ? Deno.UnsafePointer.value(messagePtr)\n        : 0n;\n      const stringsArray = new BigUint64Array([messagePtrValue]);\n      const stringsPtr = Deno.UnsafePointer.of(stringsArray);\n\n      // Call ReportEventA\n      const result = this.lib.symbols.ReportEventA(\n        this.eventSource, // hEventLog\n        eventType, // wType\n        0, // wCategory (0 = no category)\n        eventId, // dwEventID\n        null, // lpUserSid (null = current user)\n        1, // wNumStrings (1 string)\n        0, // dwDataSize (no additional data)\n        stringsPtr, // lpStrings\n        null, // lpRawData (no additional data)\n      );\n\n      if (result === 0) {\n        throw new WindowsEventLogError(\n          `Failed to write event to Event Log.`,\n        );\n      }\n    } catch (error) {\n      if (error instanceof WindowsEventLogError) {\n        throw error;\n      }\n      throw new WindowsEventLogError(\n        `Error writing to Event Log: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  /**\n   * Cleans up resources and deregisters the event source.\n   */\n  dispose(): void {\n    if (this.lib && this.eventSource) {\n      try {\n        this.lib.symbols.DeregisterEventSource(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n    }\n\n    if (this.lib) {\n      try {\n        this.lib.close();\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to close FFI library during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.lib = null;\n    }\n  }\n}\n"],"mappings":";;;;AAUA,MAAa,sBAAsB;AACnC,MAAa,wBAAwB;AACrC,MAAa,4BAA4B;AAGzC,MAAM,cAAc;CAClB,sBAAsB;EACpB,YAAY,CAAC,WAAW,SAAU;EAClC,QAAQ;CACT;CACD,uBAAuB;EACrB,YAAY,CAAC,SAAU;EACvB,QAAQ;CACT;CACD,cAAc;EACZ,YAAY;GACV;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD;EACD,QAAQ;CACT;AACF;;;;;;;AAQD,IAAa,qBAAb,MAAgC;CAC9B,AAAQ,MAAsD;CAC9D,AAAQ,cAAwC;CAChD,AAAQ,UAAU,IAAI;CACtB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;CAEvE,YAAoBA,YAAoB;EAApB;CAAsB;;;;;CAM1C,aAAmB;AACjB,MAAI;AAEF,QAAK,MAAM,KAAK,OAAO,gBAAgB,YAAY;GAGnD,MAAM,gBAAgB,KAAK,cAAc,GACvC,KAAK,QAAQ,OAAO,KAAK,aAAa,KAAK,CAC5C;AACD,QAAK,cAAc,KAAK,IAAI,QAAQ,qBAClC,MACA,cACD;AAED,QAAK,KAAK,YACR,OAAM,IAAI,sBACP,mCAAmC,KAAK,WAAW;EAGzD,SAAQ,OAAO;AACd,OAAI,iBAAiB,qBACnB,OAAM;AAER,SAAM,IAAI,sBACP,8CACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD,GACD,iBAAiB,QAAQ;EAE5B;CACF;;;;;;;;;CAUD,WAAWC,WAAmBC,SAAiBC,SAAuB;AACpE,OAAK,KAAK,QAAQ,KAAK,YACrB,OAAM,IAAI,qBACR;AAIJ,MAAI;GAEF,MAAM,gBAAgB,KAAK,QAAQ,OAAO,UAAU,KAAK;GACzD,MAAM,aAAa,KAAK,cAAc,GAAG,cAAc;GACvD,MAAM,kBAAkB,aACpB,KAAK,cAAc,MAAM,WAAW,GACpC;GACJ,MAAM,eAAe,IAAI,eAAe,CAAC,eAAgB;GACzD,MAAM,aAAa,KAAK,cAAc,GAAG,aAAa;GAGtD,MAAM,SAAS,KAAK,IAAI,QAAQ,aAC9B,KAAK,aACL,WACA,GACA,SACA,MACA,GACA,GACA,YACA,KACD;AAED,OAAI,WAAW,EACb,OAAM,IAAI,sBACP;EAGN,SAAQ,OAAO;AACd,OAAI,iBAAiB,qBACnB,OAAM;AAER,SAAM,IAAI,sBACP,8BACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD,GACD,iBAAiB,QAAQ;EAE5B;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,OAAO,KAAK,aAAa;AAChC,OAAI;AACF,SAAK,IAAI,QAAQ,sBAAsB,KAAK,YAAY;GACzD,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;EACpB;AAED,MAAI,KAAK,KAAK;AACZ,OAAI;AACF,SAAK,IAAI,OAAO;GACjB,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,uDACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,MAAM;EACZ;CACF;AACF"}
+{"version":3,"file":"ffi.deno.js","names":["sourceName: string","eventType: number","eventId: number","params: string[]","unsafePointersToStrings: bigint[]"],"sources":["../src/ffi.deno.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\nimport type { WindowsEventLogFFI } from \"./ffi.ts\";\nimport { WindowsEventLogError } from \"./types.ts\";\n\n/**\n * Windows Event Log API constants and types for FFI.\n * @since 1.0.0\n */\n\n// Event Log types\nexport const EVENTLOG_SUCCESS = 0x0000;\nexport const EVENTLOG_ERROR_TYPE = 0x0001;\nexport const EVENTLOG_WARNING_TYPE = 0x0002;\nexport const EVENTLOG_INFORMATION_TYPE = 0x0004;\n\n// FFI symbol definitions for Windows Event Log APIs\nconst FFI_SYMBOLS = {\n  RegisterEventSourceA: {\n    parameters: [\"pointer\", \"pointer\"] as const,\n    result: \"pointer\" as const,\n  },\n  DeregisterEventSource: {\n    parameters: [\"pointer\"] as const,\n    result: \"u32\" as const,\n  },\n  ReportEventA: {\n    parameters: [\n      \"pointer\", // hEventLog\n      \"u16\", // wType\n      \"u16\", // wCategory\n      \"u32\", // dwEventID\n      \"pointer\", // lpUserSid\n      \"u16\", // wNumStrings\n      \"u32\", // dwDataSize\n      \"pointer\", // lpStrings\n      \"pointer\", // lpRawData\n    ] as const,\n    result: \"u32\" as const,\n  },\n} as const;\n\n/**\n * Windows Event Log FFI wrapper class for Deno.\n * Provides direct access to Windows Event Log APIs through Deno's FFI.\n *\n * @since 1.0.0\n */\nexport class WindowsEventLogDenoFFI implements WindowsEventLogFFI {\n  private lib: Deno.DynamicLibrary<typeof FFI_SYMBOLS> | null = null;\n  private eventSource: Deno.PointerValue | null = null;\n  private sourceName: string = \"\"; // immediately overwritten in initialize\n  private initialized = false;\n  private encoder = new TextEncoder();\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  /**\n   * Initializes the FFI library and registers the event source.\n   * @throws {WindowsEventLogError} If initialization fails\n   */\n  initialize(sourceName: string): void {\n    this.sourceName = sourceName;\n    if (this.initialized) return;\n\n    try {\n      // Load advapi32.dll\n      this.lib = Deno.dlopen(\"advapi32.dll\", FFI_SYMBOLS);\n\n      // Register event source\n      const sourceNamePtr = Deno.UnsafePointer.of(\n        this.encoder.encode(this.sourceName + \"\\0\"),\n      );\n      this.eventSource = this.lib.symbols.RegisterEventSourceA(\n        null,\n        sourceNamePtr,\n      );\n\n      if (!this.eventSource) {\n        throw new WindowsEventLogError(\n          `Failed to register event source '${this.sourceName}'.`,\n        );\n      }\n\n      this.initialized = true;\n    } catch (error) {\n      if (error instanceof WindowsEventLogError) {\n        throw error;\n      }\n      throw new WindowsEventLogError(\n        `Failed to initialize Windows Event Log FFI: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  /**\n   * Writes a message to the Windows Event Log.\n   *\n   * @param eventType Event type (error, warning, info)\n   * @param eventId Event ID number that gives us formatting string\n   * @param params Message parameter strings to log\n   * @throws {WindowsEventLogError} If the write operation fails\n   */\n  writeEvent(eventType: number, eventId: number, params: string[]): void {\n    if (!this.lib || !this.eventSource) {\n      throw new WindowsEventLogError(\n        \"FFI not initialized. Call initialize() first.\",\n      );\n    }\n\n    try {\n      const unsafePointersToStrings: bigint[] = [];\n      for (let i = 0; i < params.length; i++) {\n        // Prepare message string\n        const paramBuffer = this.encoder.encode(params[i] + \"\\0\");\n        const paramPtr = Deno.UnsafePointer.of(paramBuffer);\n        const paramPtrValue = paramPtr\n          ? Deno.UnsafePointer.value(paramPtr)\n          : 0n;\n        unsafePointersToStrings.push(paramPtrValue);\n      }\n      const stringsArray = new BigUint64Array(unsafePointersToStrings);\n      const stringsPtr = Deno.UnsafePointer.of(stringsArray);\n\n      // Call ReportEventA\n      const result = this.lib.symbols.ReportEventA(\n        this.eventSource, // hEventLog\n        eventType, // wType\n        0, // wCategory (0 = no category)\n        eventId, // dwEventID\n        null, // lpUserSid (null = current user)\n        stringsArray.length, // wNumStrings\n        0, // dwDataSize (no additional data)\n        stringsPtr, // lpStrings\n        null, // lpRawData (no additional data)\n      );\n\n      if (result === 0) {\n        throw new WindowsEventLogError(\n          `Failed to write event to Event Log.`,\n        );\n      }\n    } catch (error) {\n      if (error instanceof WindowsEventLogError) {\n        throw error;\n      }\n      throw new WindowsEventLogError(\n        `Error writing to Event Log: ${\n          error instanceof Error ? error.message : String(error)\n        }`,\n        error instanceof Error ? error : undefined,\n      );\n    }\n  }\n\n  /**\n   * Cleans up resources and deregisters the event source.\n   */\n  dispose(): void {\n    if (this.lib && this.eventSource) {\n      try {\n        this.lib.symbols.DeregisterEventSource(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n    }\n\n    if (this.lib) {\n      try {\n        this.lib.close();\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to close FFI library during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.lib = null;\n    }\n\n    this.initialized = false;\n  }\n}\n"],"mappings":";;;;AAgBA,MAAM,cAAc;CAClB,sBAAsB;EACpB,YAAY,CAAC,WAAW,SAAU;EAClC,QAAQ;CACT;CACD,uBAAuB;EACrB,YAAY,CAAC,SAAU;EACvB,QAAQ;CACT;CACD,cAAc;EACZ,YAAY;GACV;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACD;EACD,QAAQ;CACT;AACF;;;;;;;AAQD,IAAa,yBAAb,MAAkE;CAChE,AAAQ,MAAsD;CAC9D,AAAQ,cAAwC;CAChD,AAAQ,aAAqB;CAC7B,AAAQ,cAAc;CACtB,AAAQ,UAAU,IAAI;CACtB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;;;;;CAMvE,WAAWA,YAA0B;AACnC,OAAK,aAAa;AAClB,MAAI,KAAK,YAAa;AAEtB,MAAI;AAEF,QAAK,MAAM,KAAK,OAAO,gBAAgB,YAAY;GAGnD,MAAM,gBAAgB,KAAK,cAAc,GACvC,KAAK,QAAQ,OAAO,KAAK,aAAa,KAAK,CAC5C;AACD,QAAK,cAAc,KAAK,IAAI,QAAQ,qBAClC,MACA,cACD;AAED,QAAK,KAAK,YACR,OAAM,IAAI,sBACP,mCAAmC,KAAK,WAAW;AAIxD,QAAK,cAAc;EACpB,SAAQ,OAAO;AACd,OAAI,iBAAiB,qBACnB,OAAM;AAER,SAAM,IAAI,sBACP,8CACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD,GACD,iBAAiB,QAAQ;EAE5B;CACF;;;;;;;;;CAUD,WAAWC,WAAmBC,SAAiBC,QAAwB;AACrE,OAAK,KAAK,QAAQ,KAAK,YACrB,OAAM,IAAI,qBACR;AAIJ,MAAI;GACF,MAAMC,0BAAoC,CAAE;AAC5C,QAAK,IAAI,IAAI,GAAG,IAAI,OAAO,QAAQ,KAAK;IAEtC,MAAM,cAAc,KAAK,QAAQ,OAAO,OAAO,KAAK,KAAK;IACzD,MAAM,WAAW,KAAK,cAAc,GAAG,YAAY;IACnD,MAAM,gBAAgB,WAClB,KAAK,cAAc,MAAM,SAAS,GAClC;AACJ,4BAAwB,KAAK,cAAc;GAC5C;GACD,MAAM,eAAe,IAAI,eAAe;GACxC,MAAM,aAAa,KAAK,cAAc,GAAG,aAAa;GAGtD,MAAM,SAAS,KAAK,IAAI,QAAQ,aAC9B,KAAK,aACL,WACA,GACA,SACA,MACA,aAAa,QACb,GACA,YACA,KACD;AAED,OAAI,WAAW,EACb,OAAM,IAAI,sBACP;EAGN,SAAQ,OAAO;AACd,OAAI,iBAAiB,qBACnB,OAAM;AAER,SAAM,IAAI,sBACP,8BACC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CACvD,GACD,iBAAiB,QAAQ;EAE5B;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,OAAO,KAAK,aAAa;AAChC,OAAI;AACF,SAAK,IAAI,QAAQ,sBAAsB,KAAK,YAAY;GACzD,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;EACpB;AAED,MAAI,KAAK,KAAK;AACZ,OAAI;AACF,SAAK,IAAI,OAAO;GACjB,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,uDACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,MAAM;EACZ;AAED,OAAK,cAAc;CACpB;AACF"}

package/dist/ffi.node.cjs

@@ -1,14 +1,14 @@
 const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
 const __logtape_logtape = require_rolldown_runtime.__toESM(require("@logtape/logtape"));
+const koffi = require_rolldown_runtime.__toESM(require("koffi"));
 
 //#region src/ffi.node.ts
 /**
 * Node.js FFI implementation for Windows Event Log API using koffi
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogNodeFFI = class {
 	eventSource = null;
-	koffi = null;
-	sourceName;
+	sourceName = "";
 	initialized = false;
 	lib = null;
 	metaLogger = (0, __logtape_logtape.getLogger)([
@@ -16,18 +16,14 @@ var WindowsEventLogFFI = class {
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initialize the FFI bindings and register event source
 	*/
-	async initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
 		if (this.initialized) return;
 		try {
-			const koffiModule = await import("koffi");
-			this.koffi = koffiModule.default || koffiModule;
-			this.lib = this.koffi.load("advapi32.dll");
+			this.lib = koffi.default.load("advapi32.dll");
 			const RegisterEventSourceA = this.lib.func("uintptr __stdcall RegisterEventSourceA(uintptr lpUNCServerName, str lpSourceName)");
 			const ReportEventA = this.lib.func("bool __stdcall ReportEventA(uintptr hEventLog, uint16 wType, uint16 wCategory, uint32 dwEventID, uintptr lpUserSid, uint16 wNumStrings, uint32 dwDataSize, char** lpStrings, uint8* lpRawData)");
 			const DeregisterEventSource = this.lib.func("bool __stdcall DeregisterEventSource(uintptr hEventLog)");
@@ -47,12 +43,11 @@ var WindowsEventLogFFI = class {
 	/**
 	* Write an event to Windows Event Log
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.initialized || !this.eventSource || !this.ReportEventA) return;
 		try {
-			const messageWithNull = message + "\0";
-			const messages = [messageWithNull];
-			const success = this.ReportEventA(this.eventSource, eventType, 0, eventId, 0, 1, 0, messages, null);
+			const nullTerminatedParams = params.map((s) => s + "\0");
+			const success = this.ReportEventA(this.eventSource, eventType, 0, eventId, 0, nullTerminatedParams.length, 0, nullTerminatedParams, null);
 			if (!success) throw new Error("ReportEventA() returned false.");
 		} catch (error) {
 			throw error;
@@ -75,4 +70,4 @@ var WindowsEventLogFFI = class {
 };
 
 //#endregion
-exports.WindowsEventLogFFI = WindowsEventLogFFI;
+exports.WindowsEventLogNodeFFI = WindowsEventLogNodeFFI;

package/dist/ffi.node.js

@@ -1,13 +1,13 @@
 import { getLogger } from "@logtape/logtape";
+import koffi from "koffi";
 
 //#region src/ffi.node.ts
 /**
 * Node.js FFI implementation for Windows Event Log API using koffi
 */
-var WindowsEventLogFFI = class {
+var WindowsEventLogNodeFFI = class {
 	eventSource = null;
-	koffi = null;
-	sourceName;
+	sourceName = "";
 	initialized = false;
 	lib = null;
 	metaLogger = getLogger([
@@ -15,18 +15,14 @@ var WindowsEventLogFFI = class {
 		"meta",
 		"windows-eventlog"
 	]);
-	constructor(sourceName) {
-		this.sourceName = sourceName;
-	}
 	/**
 	* Initialize the FFI bindings and register event source
 	*/
-	async initialize() {
+	initialize(sourceName) {
+		this.sourceName = sourceName;
 		if (this.initialized) return;
 		try {
-			const koffiModule = await import("koffi");
-			this.koffi = koffiModule.default || koffiModule;
-			this.lib = this.koffi.load("advapi32.dll");
+			this.lib = koffi.load("advapi32.dll");
 			const RegisterEventSourceA = this.lib.func("uintptr __stdcall RegisterEventSourceA(uintptr lpUNCServerName, str lpSourceName)");
 			const ReportEventA = this.lib.func("bool __stdcall ReportEventA(uintptr hEventLog, uint16 wType, uint16 wCategory, uint32 dwEventID, uintptr lpUserSid, uint16 wNumStrings, uint32 dwDataSize, char** lpStrings, uint8* lpRawData)");
 			const DeregisterEventSource = this.lib.func("bool __stdcall DeregisterEventSource(uintptr hEventLog)");
@@ -46,12 +42,11 @@ var WindowsEventLogFFI = class {
 	/**
 	* Write an event to Windows Event Log
 	*/
-	writeEvent(eventType, eventId, message) {
+	writeEvent(eventType, eventId, params) {
 		if (!this.initialized || !this.eventSource || !this.ReportEventA) return;
 		try {
-			const messageWithNull = message + "\0";
-			const messages = [messageWithNull];
-			const success = this.ReportEventA(this.eventSource, eventType, 0, eventId, 0, 1, 0, messages, null);
+			const nullTerminatedParams = params.map((s) => s + "\0");
+			const success = this.ReportEventA(this.eventSource, eventType, 0, eventId, 0, nullTerminatedParams.length, 0, nullTerminatedParams, null);
 			if (!success) throw new Error("ReportEventA() returned false.");
 		} catch (error) {
 			throw error;
@@ -74,5 +69,5 @@ var WindowsEventLogFFI = class {
 };
 
 //#endregion
-export { WindowsEventLogFFI };
+export { WindowsEventLogNodeFFI };
 //# sourceMappingURL=ffi.node.js.map

package/dist/ffi.node.js.map

@@ -1 +1 @@
-{"version":3,"file":"ffi.node.js","names":["sourceName: string","eventType: EventType","eventId: number","message: string"],"sources":["../src/ffi.node.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\nimport type { EventType } from \"./types.ts\";\n\n/**\n * Node.js FFI implementation for Windows Event Log API using koffi\n */\nexport class WindowsEventLogFFI {\n  private eventSource: unknown = null;\n  private koffi: unknown = null;\n  private sourceName: string;\n  private initialized = false;\n  private lib: unknown = null;\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  constructor(sourceName: string) {\n    this.sourceName = sourceName;\n  }\n\n  /**\n   * Initialize the FFI bindings and register event source\n   */\n  async initialize(): Promise<void> {\n    if (this.initialized) return;\n\n    try {\n      // Dynamic import for koffi\n      const koffiModule = await import(\"koffi\");\n      this.koffi = koffiModule.default || koffiModule;\n\n      // Load advapi32.dll\n      this.lib = (this.koffi as unknown as { load: (lib: string) => unknown })\n        .load(\"advapi32.dll\");\n\n      // Define Windows API functions with correct koffi types using __stdcall convention\n      const RegisterEventSourceA =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"uintptr __stdcall RegisterEventSourceA(uintptr lpUNCServerName, str lpSourceName)\",\n        );\n      // ReportEventA expects LPCSTR* (array of string pointers) for lpStrings\n      // Use char** for null-terminated array of strings\n      const ReportEventA =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"bool __stdcall ReportEventA(uintptr hEventLog, uint16 wType, uint16 wCategory, uint32 dwEventID, uintptr lpUserSid, uint16 wNumStrings, uint32 dwDataSize, char** lpStrings, uint8* lpRawData)\",\n        );\n      const DeregisterEventSource =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"bool __stdcall DeregisterEventSource(uintptr hEventLog)\",\n        );\n\n      // Store functions\n      this.RegisterEventSourceA = RegisterEventSourceA;\n      this.ReportEventA = ReportEventA;\n      this.DeregisterEventSource = DeregisterEventSource;\n\n      // Register event source\n      this.eventSource = (this.RegisterEventSourceA as unknown as (\n        ...args: unknown[]\n      ) => unknown)(0, this.sourceName);\n\n      if (!this.eventSource || this.eventSource === 0) {\n        throw new Error(\n          `Failed to register event source: ${this.sourceName}`,\n        );\n      }\n\n      this.initialized = true;\n    } catch (error) {\n      throw new Error(\n        `Failed to initialize Windows Event Log FFI: ${error}`,\n      );\n    }\n  }\n\n  private RegisterEventSourceA: unknown = null;\n  private ReportEventA: unknown = null;\n  private DeregisterEventSource: unknown = null;\n\n  /**\n   * Write an event to Windows Event Log\n   */\n  writeEvent(eventType: EventType, eventId: number, message: string): void {\n    if (!this.initialized || !this.eventSource || !this.ReportEventA) {\n      return;\n    }\n\n    try {\n      // Create null-terminated string\n      const messageWithNull = message + \"\\0\";\n\n      // Create an array with a single string pointer\n      // In koffi, we pass an array of strings for char**\n      const messages = [messageWithNull];\n\n      // Report the event using strings array approach\n      const success =\n        (this.ReportEventA as unknown as (...args: unknown[]) => unknown)(\n          this.eventSource,\n          eventType,\n          0, // category\n          eventId,\n          0, // user SID (null)\n          1, // number of strings (1 - we have one message)\n          0, // data size (0 - not using raw data)\n          messages, // strings array with our message\n          null, // raw data (null - not using)\n        );\n\n      if (!success) {\n        throw new Error(\"ReportEventA() returned false.\");\n      }\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /**\n   * Clean up resources\n   */\n  dispose(): void {\n    if (this.initialized && this.eventSource && this.DeregisterEventSource) {\n      try {\n        (this.DeregisterEventSource as unknown as (\n          ...args: unknown[]\n        ) => unknown)(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n      this.initialized = false;\n    }\n  }\n}\n"],"mappings":";;;;;;AAMA,IAAa,qBAAb,MAAgC;CAC9B,AAAQ,cAAuB;CAC/B,AAAQ,QAAiB;CACzB,AAAQ;CACR,AAAQ,cAAc;CACtB,AAAQ,MAAe;CACvB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;CAEvE,YAAYA,YAAoB;AAC9B,OAAK,aAAa;CACnB;;;;CAKD,MAAM,aAA4B;AAChC,MAAI,KAAK,YAAa;AAEtB,MAAI;GAEF,MAAM,cAAc,MAAM,OAAO;AACjC,QAAK,QAAQ,YAAY,WAAW;AAGpC,QAAK,MAAM,AAAC,KAAK,MACd,KAAK,eAAe;GAGvB,MAAM,uBACJ,AAAC,KAAK,IAAsD,KAC1D,oFACD;GAGH,MAAM,eACJ,AAAC,KAAK,IAAsD,KAC1D,iMACD;GACH,MAAM,wBACJ,AAAC,KAAK,IAAsD,KAC1D,0DACD;AAGH,QAAK,uBAAuB;AAC5B,QAAK,eAAe;AACpB,QAAK,wBAAwB;AAG7B,QAAK,cAAc,AAAC,KAAK,qBAEX,GAAG,KAAK,WAAW;AAEjC,QAAK,KAAK,eAAe,KAAK,gBAAgB,EAC5C,OAAM,IAAI,OACP,mCAAmC,KAAK,WAAW;AAIxD,QAAK,cAAc;EACpB,SAAQ,OAAO;AACd,SAAM,IAAI,OACP,8CAA8C,MAAM;EAExD;CACF;CAED,AAAQ,uBAAgC;CACxC,AAAQ,eAAwB;CAChC,AAAQ,wBAAiC;;;;CAKzC,WAAWC,WAAsBC,SAAiBC,SAAuB;AACvE,OAAK,KAAK,gBAAgB,KAAK,gBAAgB,KAAK,aAClD;AAGF,MAAI;GAEF,MAAM,kBAAkB,UAAU;GAIlC,MAAM,WAAW,CAAC,eAAgB;GAGlC,MAAM,UACJ,AAAC,KAAK,aACJ,KAAK,aACL,WACA,GACA,SACA,GACA,GACA,GACA,UACA,KACD;AAEH,QAAK,QACH,OAAM,IAAI,MAAM;EAEnB,SAAQ,OAAO;AACd,SAAM;EACP;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,eAAe,KAAK,eAAe,KAAK,uBAAuB;AACtE,OAAI;AACF,IAAC,KAAK,sBAEQ,KAAK,YAAY;GAChC,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;AACnB,QAAK,cAAc;EACpB;CACF;AACF"}
+{"version":3,"file":"ffi.node.js","names":["sourceName: string","eventType: EventType","eventId: number","params: string[]"],"sources":["../src/ffi.node.ts"],"sourcesContent":["import { getLogger } from \"@logtape/logtape\";\nimport koffi from \"koffi\";\nimport type { WindowsEventLogFFI } from \"./ffi.ts\";\nimport type { EventType } from \"./types.ts\";\n\n/**\n * Node.js FFI implementation for Windows Event Log API using koffi\n */\nexport class WindowsEventLogNodeFFI implements WindowsEventLogFFI {\n  private eventSource: unknown = null;\n  private sourceName: string = \"\"; // immediately overwritten in initialize;\n  private initialized = false;\n  private lib: unknown = null;\n  private metaLogger = getLogger([\"logtape\", \"meta\", \"windows-eventlog\"]);\n\n  /**\n   * Initialize the FFI bindings and register event source\n   */\n  initialize(sourceName: string): void {\n    this.sourceName = sourceName;\n    if (this.initialized) return;\n\n    try {\n      // Load advapi32.dll\n      this.lib = koffi.load(\"advapi32.dll\");\n\n      // Define Windows API functions with correct koffi types using __stdcall convention\n      const RegisterEventSourceA =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"uintptr __stdcall RegisterEventSourceA(uintptr lpUNCServerName, str lpSourceName)\",\n        );\n      // ReportEventA expects LPCSTR* (array of string pointers) for lpStrings\n      // Use char** for null-terminated array of strings\n      const ReportEventA =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"bool __stdcall ReportEventA(uintptr hEventLog, uint16 wType, uint16 wCategory, uint32 dwEventID, uintptr lpUserSid, uint16 wNumStrings, uint32 dwDataSize, char** lpStrings, uint8* lpRawData)\",\n        );\n      const DeregisterEventSource =\n        (this.lib as unknown as { func: (sig: string) => unknown }).func(\n          \"bool __stdcall DeregisterEventSource(uintptr hEventLog)\",\n        );\n\n      // Store functions\n      this.RegisterEventSourceA = RegisterEventSourceA;\n      this.ReportEventA = ReportEventA;\n      this.DeregisterEventSource = DeregisterEventSource;\n\n      // Register event source\n      this.eventSource = (this.RegisterEventSourceA as unknown as (\n        ...args: unknown[]\n      ) => unknown)(0, this.sourceName);\n\n      if (!this.eventSource || this.eventSource === 0) {\n        throw new Error(\n          `Failed to register event source: ${this.sourceName}`,\n        );\n      }\n\n      this.initialized = true;\n    } catch (error) {\n      throw new Error(\n        `Failed to initialize Windows Event Log FFI: ${error}`,\n      );\n    }\n  }\n\n  private RegisterEventSourceA: unknown = null;\n  private ReportEventA: unknown = null;\n  private DeregisterEventSource: unknown = null;\n\n  /**\n   * Write an event to Windows Event Log\n   */\n  writeEvent(eventType: EventType, eventId: number, params: string[]): void {\n    if (!this.initialized || !this.eventSource || !this.ReportEventA) {\n      return;\n    }\n\n    try {\n      // Create null-terminated strings\n      // In koffi, we pass an array of strings for char**\n      const nullTerminatedParams = params.map((s) => s + \"\\0\");\n\n      // Report the event using strings array approach\n      const success =\n        (this.ReportEventA as unknown as (...args: unknown[]) => unknown)(\n          this.eventSource,\n          eventType,\n          0, // category\n          eventId,\n          0, // user SID (null)\n          nullTerminatedParams.length, // number of strings\n          0, // data size (0 - not using raw data)\n          nullTerminatedParams, // strings array with our message\n          null, // raw data (null - not using)\n        );\n\n      if (!success) {\n        throw new Error(\"ReportEventA() returned false.\");\n      }\n    } catch (error) {\n      throw error;\n    }\n  }\n\n  /**\n   * Clean up resources\n   */\n  dispose(): void {\n    if (this.initialized && this.eventSource && this.DeregisterEventSource) {\n      try {\n        (this.DeregisterEventSource as unknown as (\n          ...args: unknown[]\n        ) => unknown)(this.eventSource);\n      } catch (error) {\n        this.metaLogger.error(\n          \"Failed to deregister event source during cleanup: {error}\",\n          { error },\n        );\n      }\n      this.eventSource = null;\n      this.initialized = false;\n    }\n  }\n}\n"],"mappings":";;;;;;;AAQA,IAAa,yBAAb,MAAkE;CAChE,AAAQ,cAAuB;CAC/B,AAAQ,aAAqB;CAC7B,AAAQ,cAAc;CACtB,AAAQ,MAAe;CACvB,AAAQ,aAAa,UAAU;EAAC;EAAW;EAAQ;CAAmB,EAAC;;;;CAKvE,WAAWA,YAA0B;AACnC,OAAK,aAAa;AAClB,MAAI,KAAK,YAAa;AAEtB,MAAI;AAEF,QAAK,MAAM,MAAM,KAAK,eAAe;GAGrC,MAAM,uBACJ,AAAC,KAAK,IAAsD,KAC1D,oFACD;GAGH,MAAM,eACJ,AAAC,KAAK,IAAsD,KAC1D,iMACD;GACH,MAAM,wBACJ,AAAC,KAAK,IAAsD,KAC1D,0DACD;AAGH,QAAK,uBAAuB;AAC5B,QAAK,eAAe;AACpB,QAAK,wBAAwB;AAG7B,QAAK,cAAc,AAAC,KAAK,qBAEX,GAAG,KAAK,WAAW;AAEjC,QAAK,KAAK,eAAe,KAAK,gBAAgB,EAC5C,OAAM,IAAI,OACP,mCAAmC,KAAK,WAAW;AAIxD,QAAK,cAAc;EACpB,SAAQ,OAAO;AACd,SAAM,IAAI,OACP,8CAA8C,MAAM;EAExD;CACF;CAED,AAAQ,uBAAgC;CACxC,AAAQ,eAAwB;CAChC,AAAQ,wBAAiC;;;;CAKzC,WAAWC,WAAsBC,SAAiBC,QAAwB;AACxE,OAAK,KAAK,gBAAgB,KAAK,gBAAgB,KAAK,aAClD;AAGF,MAAI;GAGF,MAAM,uBAAuB,OAAO,IAAI,CAAC,MAAM,IAAI,KAAK;GAGxD,MAAM,UACJ,AAAC,KAAK,aACJ,KAAK,aACL,WACA,GACA,SACA,GACA,qBAAqB,QACrB,GACA,sBACA,KACD;AAEH,QAAK,QACH,OAAM,IAAI,MAAM;EAEnB,SAAQ,OAAO;AACd,SAAM;EACP;CACF;;;;CAKD,UAAgB;AACd,MAAI,KAAK,eAAe,KAAK,eAAe,KAAK,uBAAuB;AACtE,OAAI;AACF,IAAC,KAAK,sBAEQ,KAAK,YAAY;GAChC,SAAQ,OAAO;AACd,SAAK,WAAW,MACd,6DACA,EAAE,MAAO,EACV;GACF;AACD,QAAK,cAAc;AACnB,QAAK,cAAc;EACpB;CACF;AACF"}

package/dist/formatter.cjs

@@ -0,0 +1,38 @@
+
+//#region src/formatter.ts
+/**
+* Formats a log record message into a string suitable for Windows Event Log.
+* Combines the template and arguments into a readable message.
+*/
+function formatMessage(record) {
+	let message = "";
+	for (let i = 0; i < record.message.length; i++) if (i % 2 === 0) message += record.message[i];
+	else {
+		const arg = record.message[i];
+		if (typeof arg === "string") message += arg;
+		else message += JSON.stringify(arg);
+	}
+	return message;
+}
+/**
+* Formats additional context information for the log entry.
+* Includes category, properties, and other metadata.
+*/
+function formatContext(record) {
+	const context = [];
+	if (record.category && record.category.length > 0) context.push(`Category: ${record.category.join(".")}`);
+	if (record.properties && Object.keys(record.properties).length > 0) context.push(`Properties: ${JSON.stringify(record.properties)}`);
+	context.push(`Timestamp: ${new Date(record.timestamp).toISOString()}`);
+	return context.length > 0 ? `\n\n${context.join("\n")}` : "";
+}
+/**
+* Default way of rendering a record into text that goes in the event log.
+*/
+function defaultWindowsEventlogFormatter(record) {
+	const msg = formatMessage(record);
+	const ctx = formatContext(record);
+	return msg + ctx;
+}
+
+//#endregion
+exports.defaultWindowsEventlogFormatter = defaultWindowsEventlogFormatter;

package/dist/formatter.js

@@ -0,0 +1,38 @@
+//#region src/formatter.ts
+/**
+* Formats a log record message into a string suitable for Windows Event Log.
+* Combines the template and arguments into a readable message.
+*/
+function formatMessage(record) {
+	let message = "";
+	for (let i = 0; i < record.message.length; i++) if (i % 2 === 0) message += record.message[i];
+	else {
+		const arg = record.message[i];
+		if (typeof arg === "string") message += arg;
+		else message += JSON.stringify(arg);
+	}
+	return message;
+}
+/**
+* Formats additional context information for the log entry.
+* Includes category, properties, and other metadata.
+*/
+function formatContext(record) {
+	const context = [];
+	if (record.category && record.category.length > 0) context.push(`Category: ${record.category.join(".")}`);
+	if (record.properties && Object.keys(record.properties).length > 0) context.push(`Properties: ${JSON.stringify(record.properties)}`);
+	context.push(`Timestamp: ${new Date(record.timestamp).toISOString()}`);
+	return context.length > 0 ? `\n\n${context.join("\n")}` : "";
+}
+/**
+* Default way of rendering a record into text that goes in the event log.
+*/
+function defaultWindowsEventlogFormatter(record) {
+	const msg = formatMessage(record);
+	const ctx = formatContext(record);
+	return msg + ctx;
+}
+
+//#endregion
+export { defaultWindowsEventlogFormatter };
+//# sourceMappingURL=formatter.js.map