@memberjunction/server 5.40.1 → 5.41.0

package/dist/logging/StartupLogger.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Server log verbosity levels, ordered from least to most chatty.
+ *
+ * Reuses the SAME enum shape as `telemetry.level` in `config.ts` so operators
+ * have a single knob (`telemetry.level` in mj.config.cjs) that governs both
+ * telemetry verbosity and server-log verbosity — there is no parallel setting.
+ *
+ * Ordering (ascending): `minimal` < `standard` < `verbose` < `debug`.
+ */
+export type ServerLogLevel = 'minimal' | 'standard' | 'verbose' | 'debug';
+/**
+ * MJServer-local startup + per-request log gating helper.
+ *
+ * Holds the resolved {@link ServerLogLevel} (from `telemetry.level`) and exposes
+ * a small surface for level-gated logging, startup phase-timing capture, and the
+ * compact summary block printed once at the end of boot.
+ *
+ * This is deliberately NOT a `BaseSingleton` and does NOT touch
+ * `@memberjunction/core` logging internals — it is a thin, process-local gate
+ * that wraps `console.*` / `LogStatus`. The point is the *gating*, not a new
+ * logging framework.
+ *
+ * Usage:
+ * ```ts
+ * const logger = new StartupLogger();
+ * logger.LogIf('verbose', 'Registered auth provider: azure');
+ * const t = logger.StartPhase();
+ * // ... work ...
+ * logger.EndPhase('DB Pool Connect', t);
+ * logger.PrintSummary();
+ * ```
+ */
+export declare class StartupLogger {
+    private readonly resolvedLevel;
+    private readonly phaseTimings;
+    private readonly summary;
+    /**
+     * @param level Optional explicit level override (primarily for tests).
+     *              When omitted, the level is resolved from config.
+     */
+    constructor(level?: ServerLogLevel);
+    /**
+     * The resolved log level in effect for this logger instance.
+     */
+    get Level(): ServerLogLevel;
+    /**
+     * Resolves the active server log level from configuration.
+     *
+     * Source of truth is `telemetry.level` (the pre-existing enum), so a single
+     * operator knob governs both telemetry and server logging. Defaults to
+     * `standard` when unset or unrecognized.
+     */
+    static resolveLevelFromConfig(): ServerLogLevel;
+    /**
+     * True when the active level is at least `minLevel` (using the ascending
+     * `minimal < standard < verbose < debug` ordering).
+     */
+    IsAtLeast(minLevel: ServerLogLevel): boolean;
+    /**
+     * Logs `message` only when the active level is at least `minLevel`.
+     * Routes through MJ's `LogStatus` so the line participates in MJ's
+     * standard status-logging pipeline.
+     */
+    LogIf(minLevel: ServerLogLevel, message: string): void;
+    /**
+     * Starts a phase timer. Returns an opaque start timestamp to pass to
+     * {@link EndPhase}.
+     */
+    StartPhase(): number;
+    /**
+     * Records the elapsed time for a phase since `startedAt`, buffering it for the
+     * summary. At `verbose`+ the phase is also printed immediately (matching the
+     * legacy `⏱️ [Startup] X: Yms` lines); at `standard` it is collapsed into the
+     * one-line `Startup` summary printed by {@link PrintSummary}.
+     *
+     * @returns A fresh timestamp, so callers can chain phases ergonomically.
+     */
+    EndPhase(label: string, startedAt: number): number;
+    /** Records the server package version for the summary header. */
+    SetVersion(version: string | undefined): void;
+    /** Records DB platform + connection + entity count for the summary `DB` line. */
+    SetDatabaseInfo(platform: string, connection: string, entityCount: number): void;
+    /** Adds a registered auth-provider name to the summary `Auth` line. */
+    AddAuthProvider(name: string): void;
+    /** Records whether the REST API is enabled for the summary `Auth` line. */
+    SetRestEnabled(enabled: boolean): void;
+    /** Records the active scheduled-job count for the summary `Auth` line. */
+    SetScheduledJobCount(count: number): void;
+    /** Records the ready URL for the summary `Ready` line. */
+    SetReadyUrl(url: string): void;
+    /**
+     * Prints the boot summary appropriate for the active level:
+     *  - `minimal`: only the `Ready <url>` line.
+     *  - `standard`: the compact ~8-line summary block (with phases collapsed).
+     *  - `verbose`/`debug`: the same compact block (individual phase lines and
+     *    all detail lines were already printed inline during boot).
+     */
+    PrintSummary(): void;
+    /** Prints just the ready URL (minimal level). */
+    private printReadyLineOnly;
+    /** Renders and prints the multi-line compact summary block. */
+    private printSummaryBlock;
+    /** Builds the array of summary lines (header + indented detail rows). */
+    private buildSummaryLines;
+    /** `🚀 MemberJunction Server  ·  v<version>` (version omitted if unknown). */
+    private buildHeaderLine;
+    /** `   DB        <platform> · <connection> · <N> entities`. */
+    private buildDbLine;
+    /** `   Auth      <providers>          REST <on/off> · <N> scheduled jobs`. */
+    private buildAuthLine;
+    /** `   Startup   <total>s  (<phase> <x>s · <phase> <y>s …)`. */
+    private buildStartupLine;
+    /**
+     * Abbreviates a verbose phase label into a compact token for the collapsed
+     * summary line (e.g. "Metadata + Provider Setup" → "metadata").
+     */
+    private shortPhaseLabel;
+    /** `   Ready     <url>`. */
+    private buildReadyLine;
+}
+//# sourceMappingURL=StartupLogger.d.ts.map

package/dist/logging/StartupLogger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"StartupLogger.d.ts","sourceRoot":"","sources":["../../src/logging/StartupLogger.ts"],"names":[],"mappings":"AAGA;;;;;;;;GAQG;AACH,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;AA8C1E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAiB;IAC/C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqB;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IAErE;;;OAGG;gBACS,KAAK,CAAC,EAAE,cAAc;IAIlC;;OAEG;IACH,IAAW,KAAK,IAAI,cAAc,CAEjC;IAED;;;;;;OAMG;WACW,sBAAsB,IAAI,cAAc;IAQtD;;;OAGG;IACI,SAAS,CAAC,QAAQ,EAAE,cAAc,GAAG,OAAO;IAInD;;;;OAIG;IACI,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAM7D;;;OAGG;IACI,UAAU,IAAI,MAAM;IAI3B;;;;;;;OAOG;IACI,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM;IAUzD,iEAAiE;IAC1D,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAIpD,iFAAiF;IAC1E,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAMvF,uEAAuE;IAChE,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI;IAI1C,2EAA2E;IACpE,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI;IAI7C,0EAA0E;IACnE,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAIhD,0DAA0D;IACnD,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAIrC;;;;;;OAMG;IACI,YAAY,IAAI,IAAI;IAQ3B,iDAAiD;IACjD,OAAO,CAAC,kBAAkB;IAO1B,+DAA+D;IAC/D,OAAO,CAAC,iBAAiB;IAMzB,yEAAyE;IACzE,OAAO,CAAC,iBAAiB;IAUzB,8EAA8E;IAC9E,OAAO,CAAC,eAAe;IAKvB,+DAA+D;IAC/D,OAAO,CAAC,WAAW;IAcnB,8EAA8E;IAC9E,OAAO,CAAC,aAAa;IAerB,gEAAgE;IAChE,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAuBvB,4BAA4B;IAC5B,OAAO,CAAC,cAAc;CAMvB"}

package/dist/logging/StartupLogger.js

@@ -0,0 +1,245 @@
+import { configInfo } from '../config.js';
+import { LogStatus } from '@memberjunction/core';
+/** Numeric rank for each level, used for `>=` threshold comparisons. */
+const LEVEL_RANK = {
+    minimal: 0,
+    standard: 1,
+    verbose: 2,
+    debug: 3,
+};
+/**
+ * MJServer-local startup + per-request log gating helper.
+ *
+ * Holds the resolved {@link ServerLogLevel} (from `telemetry.level`) and exposes
+ * a small surface for level-gated logging, startup phase-timing capture, and the
+ * compact summary block printed once at the end of boot.
+ *
+ * This is deliberately NOT a `BaseSingleton` and does NOT touch
+ * `@memberjunction/core` logging internals — it is a thin, process-local gate
+ * that wraps `console.*` / `LogStatus`. The point is the *gating*, not a new
+ * logging framework.
+ *
+ * Usage:
+ * ```ts
+ * const logger = new StartupLogger();
+ * logger.LogIf('verbose', 'Registered auth provider: azure');
+ * const t = logger.StartPhase();
+ * // ... work ...
+ * logger.EndPhase('DB Pool Connect', t);
+ * logger.PrintSummary();
+ * ```
+ */
+export class StartupLogger {
+    /**
+     * @param level Optional explicit level override (primarily for tests).
+     *              When omitted, the level is resolved from config.
+     */
+    constructor(level) {
+        this.phaseTimings = [];
+        this.summary = { AuthProviders: [] };
+        this.resolvedLevel = level ?? StartupLogger.resolveLevelFromConfig();
+    }
+    /**
+     * The resolved log level in effect for this logger instance.
+     */
+    get Level() {
+        return this.resolvedLevel;
+    }
+    /**
+     * Resolves the active server log level from configuration.
+     *
+     * Source of truth is `telemetry.level` (the pre-existing enum), so a single
+     * operator knob governs both telemetry and server logging. Defaults to
+     * `standard` when unset or unrecognized.
+     */
+    static resolveLevelFromConfig() {
+        const raw = configInfo.telemetry?.level;
+        if (raw === 'minimal' || raw === 'standard' || raw === 'verbose' || raw === 'debug') {
+            return raw;
+        }
+        return 'standard';
+    }
+    /**
+     * True when the active level is at least `minLevel` (using the ascending
+     * `minimal < standard < verbose < debug` ordering).
+     */
+    IsAtLeast(minLevel) {
+        return LEVEL_RANK[this.resolvedLevel] >= LEVEL_RANK[minLevel];
+    }
+    /**
+     * Logs `message` only when the active level is at least `minLevel`.
+     * Routes through MJ's `LogStatus` so the line participates in MJ's
+     * standard status-logging pipeline.
+     */
+    LogIf(minLevel, message) {
+        if (this.IsAtLeast(minLevel)) {
+            LogStatus(message);
+        }
+    }
+    /**
+     * Starts a phase timer. Returns an opaque start timestamp to pass to
+     * {@link EndPhase}.
+     */
+    StartPhase() {
+        return performance.now();
+    }
+    /**
+     * Records the elapsed time for a phase since `startedAt`, buffering it for the
+     * summary. At `verbose`+ the phase is also printed immediately (matching the
+     * legacy `⏱️ [Startup] X: Yms` lines); at `standard` it is collapsed into the
+     * one-line `Startup` summary printed by {@link PrintSummary}.
+     *
+     * @returns A fresh timestamp, so callers can chain phases ergonomically.
+     */
+    EndPhase(label, startedAt) {
+        const ms = performance.now() - startedAt;
+        this.phaseTimings.push({ Label: label, Ms: ms });
+        if (this.IsAtLeast('verbose')) {
+            // eslint-disable-next-line no-console
+            console.log(`⏱️  [Startup] ${label}: ${ms.toFixed(0)}ms`);
+        }
+        return performance.now();
+    }
+    /** Records the server package version for the summary header. */
+    SetVersion(version) {
+        this.summary.Version = version;
+    }
+    /** Records DB platform + connection + entity count for the summary `DB` line. */
+    SetDatabaseInfo(platform, connection, entityCount) {
+        this.summary.DbPlatform = platform;
+        this.summary.DbConnection = connection;
+        this.summary.EntityCount = entityCount;
+    }
+    /** Adds a registered auth-provider name to the summary `Auth` line. */
+    AddAuthProvider(name) {
+        this.summary.AuthProviders.push(name);
+    }
+    /** Records whether the REST API is enabled for the summary `Auth` line. */
+    SetRestEnabled(enabled) {
+        this.summary.RestEnabled = enabled;
+    }
+    /** Records the active scheduled-job count for the summary `Auth` line. */
+    SetScheduledJobCount(count) {
+        this.summary.ScheduledJobCount = count;
+    }
+    /** Records the ready URL for the summary `Ready` line. */
+    SetReadyUrl(url) {
+        this.summary.ReadyUrl = url;
+    }
+    /**
+     * Prints the boot summary appropriate for the active level:
+     *  - `minimal`: only the `Ready <url>` line.
+     *  - `standard`: the compact ~8-line summary block (with phases collapsed).
+     *  - `verbose`/`debug`: the same compact block (individual phase lines and
+     *    all detail lines were already printed inline during boot).
+     */
+    PrintSummary() {
+        if (this.resolvedLevel === 'minimal') {
+            this.printReadyLineOnly();
+            return;
+        }
+        this.printSummaryBlock();
+    }
+    /** Prints just the ready URL (minimal level). */
+    printReadyLineOnly() {
+        if (this.summary.ReadyUrl) {
+            // eslint-disable-next-line no-console
+            console.log(`🚀 Ready  ${this.summary.ReadyUrl}`);
+        }
+    }
+    /** Renders and prints the multi-line compact summary block. */
+    printSummaryBlock() {
+        const lines = this.buildSummaryLines();
+        // eslint-disable-next-line no-console
+        console.log('\n' + lines.join('\n') + '\n');
+    }
+    /** Builds the array of summary lines (header + indented detail rows). */
+    buildSummaryLines() {
+        const lines = [];
+        lines.push(this.buildHeaderLine());
+        lines.push(this.buildDbLine());
+        lines.push(this.buildAuthLine());
+        lines.push(this.buildStartupLine());
+        lines.push(this.buildReadyLine());
+        return lines.filter((l) => l.length > 0);
+    }
+    /** `🚀 MemberJunction Server  ·  v<version>` (version omitted if unknown). */
+    buildHeaderLine() {
+        const version = this.summary.Version ? `  ·  v${this.summary.Version}` : '';
+        return `🚀 MemberJunction Server${version}`;
+    }
+    /** `   DB        <platform> · <connection> · <N> entities`. */
+    buildDbLine() {
+        if (!this.summary.DbPlatform) {
+            return '';
+        }
+        const parts = [this.summary.DbPlatform];
+        if (this.summary.DbConnection) {
+            parts.push(this.summary.DbConnection);
+        }
+        if (this.summary.EntityCount != null) {
+            parts.push(`${this.summary.EntityCount} entities`);
+        }
+        return `   DB        ${parts.join(' · ')}`;
+    }
+    /** `   Auth      <providers>          REST <on/off> · <N> scheduled jobs`. */
+    buildAuthLine() {
+        const providers = this.summary.AuthProviders.length > 0
+            ? this.summary.AuthProviders.join(', ')
+            : 'none';
+        const rest = this.summary.RestEnabled == null
+            ? ''
+            : `REST ${this.summary.RestEnabled ? 'on' : 'off'}`;
+        const jobs = this.summary.ScheduledJobCount == null
+            ? ''
+            : `${this.summary.ScheduledJobCount} scheduled jobs`;
+        const trailer = [rest, jobs].filter((s) => s.length > 0).join(' · ');
+        const trailerPart = trailer ? `   ${trailer}` : '';
+        return `   Auth      ${providers}${trailerPart}`;
+    }
+    /** `   Startup   <total>s  (<phase> <x>s · <phase> <y>s …)`. */
+    buildStartupLine() {
+        if (this.phaseTimings.length === 0) {
+            return '';
+        }
+        const totalMs = this.phaseTimings.reduce((sum, p) => sum + p.Ms, 0);
+        const phaseParts = this.phaseTimings
+            .map((p) => `${this.shortPhaseLabel(p.Label)} ${(p.Ms / 1000).toFixed(1)}s`)
+            .join(' · ');
+        return `   Startup   ${(totalMs / 1000).toFixed(1)}s  (${phaseParts})`;
+    }
+    /**
+     * Abbreviates a verbose phase label into a compact token for the collapsed
+     * summary line (e.g. "Metadata + Provider Setup" → "metadata").
+     */
+    shortPhaseLabel(label) {
+        const lower = label.toLowerCase();
+        if (lower.includes('metadata') || lower.includes('provider')) {
+            return 'metadata';
+        }
+        if (lower.includes('schema')) {
+            return 'schema';
+        }
+        if (lower.includes('db') || lower.includes('pool')) {
+            return 'db';
+        }
+        if (lower.includes('resolver') || lower.includes('middleware')) {
+            return 'resolvers';
+        }
+        if (lower.includes('apollo') || lower.includes('express')) {
+            return 'http';
+        }
+        if (lower.includes('telemetry') || lower.includes('cache')) {
+            return 'cache';
+        }
+        return lower.split(' ')[0];
+    }
+    /** `   Ready     <url>`. */
+    buildReadyLine() {
+        if (!this.summary.ReadyUrl) {
+            return '';
+        }
+        return `   Ready     ${this.summary.ReadyUrl}`;
+    }
+}
+//# sourceMappingURL=StartupLogger.js.map

package/dist/logging/StartupLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"StartupLogger.js","sourceRoot":"","sources":["../../src/logging/StartupLogger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAajD,wEAAwE;AACxE,MAAM,UAAU,GAAmC;IACjD,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,KAAK,EAAE,CAAC;CACT,CAAC;AAsCF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,aAAa;IAKxB;;;OAGG;IACH,YAAY,KAAsB;QAPjB,iBAAY,GAAkB,EAAE,CAAC;QACjC,YAAO,GAAuB,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAOnE,IAAI,CAAC,aAAa,GAAG,KAAK,IAAI,aAAa,CAAC,sBAAsB,EAAE,CAAC;IACvE,CAAC;IAED;;OAEG;IACH,IAAW,KAAK;QACd,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACI,MAAM,CAAC,sBAAsB;QAClC,MAAM,GAAG,GAAG,UAAU,CAAC,SAAS,EAAE,KAAK,CAAC;QACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED;;;OAGG;IACI,SAAS,CAAC,QAAwB;QACvC,OAAO,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,QAAwB,EAAE,OAAe;QACpD,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,SAAS,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,UAAU;QACf,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED;;;;;;;OAOG;IACI,QAAQ,CAAC,KAAa,EAAE,SAAiB;QAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;IAED,iEAAiE;IAC1D,UAAU,CAAC,OAA2B;QAC3C,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC;IACjC,CAAC;IAED,iFAAiF;IAC1E,eAAe,CAAC,QAAgB,EAAE,UAAkB,EAAE,WAAmB;QAC9E,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC;QACnC,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,WAAW,CAAC;IACzC,CAAC;IAED,uEAAuE;IAChE,eAAe,CAAC,IAAY;QACjC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,2EAA2E;IACpE,cAAc,CAAC,OAAgB;QACpC,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;IACrC,CAAC;IAED,0EAA0E;IACnE,oBAAoB,CAAC,KAAa;QACvC,IAAI,CAAC,OAAO,CAAC,iBAAiB,GAAG,KAAK,CAAC;IACzC,CAAC;IAED,0DAA0D;IACnD,WAAW,CAAC,GAAW;QAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC;IAC9B,CAAC;IAED;;;;;;OAMG;IACI,YAAY;QACjB,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAED,iDAAiD;IACzC,kBAAkB;QACxB,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC1B,sCAAsC;YACtC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAED,+DAA+D;IACvD,iBAAiB;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvC,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9C,CAAC;IAED,yEAAyE;IACjE,iBAAiB;QACvB,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,8EAA8E;IACtE,eAAe;QACrB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,2BAA2B,OAAO,EAAE,CAAC;IAC9C,CAAC;IAED,+DAA+D;IACvD,WAAW;QACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,WAAW,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,gBAAgB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IAC7C,CAAC;IAED,8EAA8E;IACtE,aAAa;QACnB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACrD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACvC,CAAC,CAAC,MAAM,CAAC;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,IAAI;YAC3C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,IAAI,IAAI;YACjD,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,iBAAiB,CAAC;QACvD,MAAM,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,gBAAgB,SAAS,GAAG,WAAW,EAAE,CAAC;IACnD,CAAC;IAED,gEAAgE;IACxD,gBAAgB;QACtB,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;aAC3E,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,gBAAgB,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,UAAU,GAAG,CAAC;IACzE,CAAC;IAED;;;OAGG;IACK,eAAe,CAAC,KAAa;QACnC,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC;QAClC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC/D,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1D,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,4BAA4B;IACpB,cAAc;QACpB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC3B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,gBAAgB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IACjD,CAAC;CACF"}

package/dist/logging/variablesLoggingMiddleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"variablesLoggingMiddleware.d.ts","sourceRoot":"","sources":["../../src/logging/variablesLoggingMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAKjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2E9C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,YAAY,CAAC,UAAU,CAsE/D,CAAC"}
+{"version":3,"file":"variablesLoggingMiddleware.d.ts","sourceRoot":"","sources":["../../src/logging/variablesLoggingMiddleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAKjD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA2F9C;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,0BAA0B,EAAE,YAAY,CAAC,UAAU,CA0E/D,CAAC"}

package/dist/logging/variablesLoggingMiddleware.js

@@ -3,6 +3,21 @@ import { getNamedType } from 'graphql';
 import { configInfo } from '../config.js';
 import { redactArg } from './secretRedactor.js';
 import { hasNoLogParameter, getNoLogFields } from './NoLog.js';
+import { StartupLogger } from './StartupLogger.js';
+/**
+ * Memoized "is the server log level `debug`?" check. The per-resolver
+ * variables echo is gated behind BOTH `logVariables` (opt-in redaction path)
+ * AND `level === 'debug'` — it is a raw, constantly-on debug line, so it should
+ * never fire unless an operator explicitly opted into debug verbosity. Config
+ * is immutable post-boot, so caching the resolution is safe.
+ */
+let isDebugLevelCache;
+function isDebugLogLevel() {
+    if (isDebugLevelCache === undefined) {
+        isDebugLevelCache = StartupLogger.resolveLevelFromConfig() === 'debug';
+    }
+    return isDebugLevelCache;
+}
 let resolverLookup;
 function getResolverLookup() {
     if (resolverLookup !== undefined) {
@@ -94,8 +109,12 @@ export const variablesLoggingMiddleware = async (action, next) => {
             hasUndecoratedCustomArg = true;
         }
     }
-    // eslint-disable-next-line no-console
-    console.dir({ operation: action.info.fieldName, args: redactedArgs }, { depth: null, breakLength: 200 });
+    // Raw per-resolver variables echo — gated to debug-only so it never streams
+    // constantly even when an operator turns on logVariables at a lower level.
+    if (isDebugLogLevel()) {
+        // eslint-disable-next-line no-console
+        console.dir({ operation: action.info.fieldName, args: redactedArgs }, { depth: null, breakLength: 200 });
+    }
     if (hasUndecoratedCustomArg && resolverEntry) {
         const signature = `${resolverEntry.target.name}.${resolverEntry.methodName}`;
         if (!warnedResolverSignatures.has(signature)) {

package/dist/logging/variablesLoggingMiddleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"variablesLoggingMiddleware.js","sourceRoot":"","sources":["../../src/logging/variablesLoggingMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AA+B/D,IAAI,cAAsD,CAAC;AAE3D,SAAS,iBAAiB;IACxB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,EAKjC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,OAA2C,EAAQ,EAAE;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/B,cAAc,GAAG,MAAM,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,OAAO,GAAG,kBAAkB,EAA0E,CAAC;IAC7G,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAClE,OAAO,KAAK,EAAE,MAAM,CAAC;AACvB,CAAC;AAED,4CAA4C;AAC5C,SAAS,UAAU,CAAC,CAAmB;IACrC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA6B,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IACzF,yGAAyG;IACzG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QACrD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,SAAS,GAAuC,CAAC,aAAa,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEvG,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,IAAsC,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,SAAS,IAAI,aAAa;YAC/C,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;YACpF,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QAEhF,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;YACpC,aAAa;YACb,QAAQ;YACR,QAAQ;YACR,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzE,uBAAuB,GAAG,IAAI,CAAC;QACjC,CAAC;IACH,CAAC;IAED,sCAAsC;IACtC,OAAO,CAAC,GAAG,CACT,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EACxD,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAClC,CAAC;IAEF,IAAI,uBAAuB,IAAI,aAAa,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;QAC7E,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CACV,uBAAuB,SAAS,qDAAqD;gBACrF,0FAA0F;gBAC1F,uDAAuD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,SAAS,WAAW,CAClB,aAAqB,EACrB,WAAgC,EAChC,QAA4D;IAE5D,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC;AAChB,CAAC"}
+{"version":3,"file":"variablesLoggingMiddleware.js","sourceRoot":"","sources":["../../src/logging/variablesLoggingMiddleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;;;;;GAMG;AACH,IAAI,iBAAsC,CAAC;AAC3C,SAAS,eAAe;IACtB,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,iBAAiB,GAAG,aAAa,CAAC,sBAAsB,EAAE,KAAK,OAAO,CAAC;IACzE,CAAC;IACD,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AA+BD,IAAI,cAAsD,CAAC;AAE3D,SAAS,iBAAiB;IACxB,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,EAKjC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,OAA2C,EAAQ,EAAE;QACpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE;gBAC3B,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/B,cAAc,GAAG,MAAM,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB;IACtC,MAAM,OAAO,GAAG,kBAAkB,EAA0E,CAAC;IAC7G,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IAClE,OAAO,KAAK,EAAE,MAAM,CAAC;AACvB,CAAC;AAED,4CAA4C;AAC5C,SAAS,UAAU,CAAC,CAAmB;IACrC,OAAO,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEnD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA6B,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;IACzF,yGAAyG;IACzG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACxC,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,yDAAyD;IACzD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QACrD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC;IACzD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC;IAED,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,MAAM,SAAS,GAAuC,CAAC,aAAa,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAEvG,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,IAAsC,EAAE,CAAC;QACrE,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,cAAc,GAAG,SAAS,IAAI,aAAa;YAC/C,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC;YACpF,CAAC,CAAC,KAAK,CAAC;QAEV,MAAM,UAAU,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QAEhF,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;YACpC,aAAa;YACb,QAAQ;YACR,QAAQ;YACR,cAAc;YACd,WAAW;SACZ,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,IAAI,WAAW,CAAC,aAAa,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzE,uBAAuB,GAAG,IAAI,CAAC;QACjC,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,IAAI,eAAe,EAAE,EAAE,CAAC;QACtB,sCAAsC;QACtC,OAAO,CAAC,GAAG,CACT,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EACxD,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,CAClC,CAAC;IACJ,CAAC;IAED,IAAI,uBAAuB,IAAI,aAAa,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC,UAAU,EAAE,CAAC;QAC7E,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,wBAAwB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CACV,uBAAuB,SAAS,qDAAqD;gBACrF,0FAA0F;gBAC1F,uDAAuD,CACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,SAAS,WAAW,CAClB,aAAqB,EACrB,WAAgC,EAChC,QAA4D;IAE5D,IAAI,WAAW,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC;AAChB,CAAC"}

package/dist/middleware/RateLimitMiddleware.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Global rate-limiting middleware for MJ Server.
+ *
+ * Registers as a BaseServerMiddleware plugin via @RegisterClass and contributes
+ * pre-auth Express handlers when rateLimiting.enabled is true in mj.config.cjs.
+ *
+ * Disabled by default — opt-in via config to preserve backward compatibility.
+ */
+import { BaseServerMiddleware } from './BaseServerMiddleware.js';
+import type { RequestHandler } from 'express';
+export declare class RateLimitMiddleware extends BaseServerMiddleware {
+    get Label(): string;
+    get Enabled(): boolean;
+    GetPreAuthMiddleware(): RequestHandler[];
+}
+//# sourceMappingURL=RateLimitMiddleware.d.ts.map

package/dist/middleware/RateLimitMiddleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitMiddleware.d.ts","sourceRoot":"","sources":["../../src/middleware/RateLimitMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAGjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAE9C,qBACa,mBAAoB,SAAQ,oBAAoB;IACzD,IAAI,KAAK,IAAI,MAAM,CAA2B;IAE9C,IAAI,OAAO,IAAI,OAAO,CAErB;IAED,oBAAoB,IAAI,cAAc,EAAE;CAqC3C"}

package/dist/middleware/RateLimitMiddleware.js

@@ -0,0 +1,77 @@
+/**
+ * Global rate-limiting middleware for MJ Server.
+ *
+ * Registers as a BaseServerMiddleware plugin via @RegisterClass and contributes
+ * pre-auth Express handlers when rateLimiting.enabled is true in mj.config.cjs.
+ *
+ * Disabled by default — opt-in via config to preserve backward compatibility.
+ */
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+import { RegisterClass } from '@memberjunction/global';
+import { BaseServerMiddleware } from './BaseServerMiddleware.js';
+import { configInfo } from '../config.js';
+import { rateLimit } from 'express-rate-limit';
+let RateLimitMiddleware = class RateLimitMiddleware extends BaseServerMiddleware {
+    get Label() { return 'mj:rateLimit'; }
+    get Enabled() {
+        return configInfo.rateLimiting?.enabled ?? false;
+    }
+    GetPreAuthMiddleware() {
+        const cfg = configInfo.rateLimiting;
+        if (!cfg?.enabled)
+            return [];
+        const handlers = [];
+        // Global rate limit — all requests, keyed by IP
+        handlers.push(rateLimit({
+            windowMs: cfg.global.windowMs,
+            max: cfg.global.maxRequests,
+            message: cfg.global.message,
+            standardHeaders: true,
+            legacyHeaders: false,
+        }));
+        // GraphQL-specific rate limit — tighter limit on the GraphQL endpoint.
+        // Uses graphqlRootPath from config (defaults to '/').
+        const gqlPath = configInfo.graphqlRootPath ?? '/';
+        handlers.push(createPathScopedLimiter(gqlPath, {
+            windowMs: cfg.graphql.windowMs,
+            max: cfg.graphql.maxRequests,
+        }));
+        // Auth endpoint rate limit — protects against brute-force login attempts
+        handlers.push(createPathScopedLimiter('/auth', {
+            windowMs: cfg.auth.windowMs,
+            max: cfg.auth.maxAttempts,
+        }));
+        return handlers;
+    }
+};
+RateLimitMiddleware = __decorate([
+    RegisterClass(BaseServerMiddleware, 'mj:rateLimit')
+], RateLimitMiddleware);
+export { RateLimitMiddleware };
+/**
+ * Creates a rate limiter scoped to a specific path prefix.
+ * Requests that don't match the prefix pass through untouched.
+ */
+function createPathScopedLimiter(pathPrefix, opts) {
+    const limiter = rateLimit({
+        windowMs: opts.windowMs,
+        max: opts.max,
+        standardHeaders: true,
+        legacyHeaders: false,
+    });
+    const handler = (req, res, next) => {
+        if (req.path.startsWith(pathPrefix)) {
+            limiter(req, res, next);
+        }
+        else {
+            next();
+        }
+    };
+    return handler;
+}
+//# sourceMappingURL=RateLimitMiddleware.js.map

package/dist/middleware/RateLimitMiddleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"RateLimitMiddleware.js","sourceRoot":"","sources":["../../src/middleware/RateLimitMiddleware.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;;;;;;;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAIxC,IAAM,mBAAmB,GAAzB,MAAM,mBAAoB,SAAQ,oBAAoB;IACzD,IAAI,KAAK,KAAa,OAAO,cAAc,CAAC,CAAC,CAAC;IAE9C,IAAI,OAAO;QACP,OAAO,UAAU,CAAC,YAAY,EAAE,OAAO,IAAI,KAAK,CAAC;IACrD,CAAC;IAED,oBAAoB;QAChB,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,GAAG,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QAE7B,MAAM,QAAQ,GAAqB,EAAE,CAAC;QAEtC,gDAAgD;QAChD,QAAQ,CAAC,IAAI,CACT,SAAS,CAAC;YACN,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;YAC7B,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW;YAC3B,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;YAC3B,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,KAAK;SACvB,CAAmB,CACvB,CAAC;QAEF,uEAAuE;QACvE,sDAAsD;QACtD,MAAM,OAAO,GAAG,UAAU,CAAC,eAAe,IAAI,GAAG,CAAC;QAClD,QAAQ,CAAC,IAAI,CACT,uBAAuB,CAAC,OAAO,EAAE;YAC7B,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ;YAC9B,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;SAC/B,CAAC,CACL,CAAC;QAEF,yEAAyE;QACzE,QAAQ,CAAC,IAAI,CACT,uBAAuB,CAAC,OAAO,EAAE;YAC7B,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ;YAC3B,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW;SAC5B,CAAC,CACL,CAAC;QAEF,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ,CAAA;AA5CY,mBAAmB;IAD/B,aAAa,CAAC,oBAAoB,EAAE,cAAc,CAAC;GACvC,mBAAmB,CA4C/B;;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAC5B,UAAkB,EAClB,IAAuC;IAEvC,MAAM,OAAO,GAAG,SAAS,CAAC;QACtB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,eAAe,EAAE,IAAI;QACrB,aAAa,EAAE,KAAK;KACvB,CAAmB,CAAC;IAErB,MAAM,OAAO,GAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/C,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACJ,IAAI,EAAE,CAAC;QACX,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/middleware/index.d.ts

@@ -1,3 +1,4 @@
 export * from './BaseServerMiddleware.js';
 export * from './MJTenantFilterMiddleware.js';
+export * from './RateLimitMiddleware.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/middleware/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC"}

package/dist/middleware/index.js

@@ -1,3 +1,4 @@
 export * from './BaseServerMiddleware.js';
 export * from './MJTenantFilterMiddleware.js';
+export * from './RateLimitMiddleware.js';
 //# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/middleware/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,0BAA0B,CAAC"}

package/dist/resolvers/AgentSessionResolver.d.ts

@@ -0,0 +1,42 @@
+import { AppContext } from '../types.js';
+import { ResolverBase } from '../generic/ResolverBase.js';
+/** Result of {@link AgentSessionResolver.StartAgentSession}. */
+export declare class StartAgentSessionResult {
+    /** ID of the newly created session. */
+    agentSessionId: string;
+    /** Lifecycle status of the session (always `Active` on a successful start). */
+    status: string;
+    /** ID of the conversation the session is attached to (supplied or freshly created). */
+    conversationId: string;
+}
+/**
+ * Resolver for the AI Agent Session record lifecycle. A single {@link SessionManager} instance is
+ * shared across requests — it holds no per-user/provider state (only heartbeat-coalescing
+ * timestamps), and every method is passed the request `contextUser` + provider explicitly.
+ */
+export declare class AgentSessionResolver extends ResolverBase {
+    private readonly sessionManager;
+    /**
+     * Open a new session for an agent. Authorization (`CanRun`) is enforced inside
+     * {@link SessionManager.CreateSession}; a denial surfaces as a thrown error and no row is written.
+     */
+    StartAgentSession(agentId: string, { userPayload, providers }: AppContext, conversationId?: string, lastSessionId?: string, configJson?: string): Promise<StartAgentSessionResult>;
+    /**
+     * Close a session. Rejects unless the caller owns it. Returns `true` on a successful (or
+     * idempotent) close, `false` if the session can't be loaded.
+     */
+    CloseAgentSession(agentSessionId: string, { userPayload, providers }: AppContext): Promise<boolean>;
+    /**
+     * Record activity on a session (coalesced). Rejects unless the caller owns it. Returns `true`
+     * when the heartbeat was accepted (written or coalesced), `false` if the session is gone/closed.
+     */
+    AgentSessionHeartbeat(agentSessionId: string, { userPayload, providers }: AppContext): Promise<boolean>;
+    /** Resolve the request user + read-write provider, throwing a clear error if unauthenticated. */
+    private requireUserAndProvider;
+    /**
+     * Inbound ownership gate (the one genuinely new session-authz primitive): the session's `UserID`
+     * must equal the caller's. Throws on mismatch or when the session can't be loaded.
+     */
+    private assertOwnership;
+}
+//# sourceMappingURL=AgentSessionResolver.d.ts.map

package/dist/resolvers/AgentSessionResolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AgentSessionResolver.d.ts","sourceRoot":"","sources":["../../src/resolvers/AgentSessionResolver.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAI1D,gEAAgE;AAChE,qBACa,uBAAuB;IAChC,uCAAuC;IAEvC,cAAc,EAAE,MAAM,CAAC;IAEvB,+EAA+E;IAE/E,MAAM,EAAE,MAAM,CAAC;IAEf,uFAAuF;IAEvF,cAAc,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBACa,oBAAqB,SAAQ,YAAY;IAClD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IAEvD;;;OAGG;IAEG,iBAAiB,CACH,OAAO,EAAE,MAAM,EACxB,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,EACF,cAAc,CAAC,EAAE,MAAM,EACxB,aAAa,CAAC,EAAE,MAAM,EACzB,UAAU,CAAC,EAAE,MAAM,GAC3D,OAAO,CAAC,uBAAuB,CAAC;IAkBnC;;;OAGG;IAEG,iBAAiB,CACI,cAAc,EAAE,MAAM,EACtC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,GAC9C,OAAO,CAAC,OAAO,CAAC;IAMnB;;;OAGG;IAEG,qBAAqB,CACA,cAAc,EAAE,MAAM,EACtC,EAAE,WAAW,EAAE,SAAS,EAAE,EAAE,UAAU,GAC9C,OAAO,CAAC,OAAO,CAAC;IAQnB,iGAAiG;IACjG,OAAO,CAAC,sBAAsB;IAW9B;;;OAGG;YACW,eAAe;CAehC"}