@rawnodes/logger 2.8.0 → 2.10.0

package/dist/index.js

@@ -167,8 +167,10 @@ var DEFAULT_OPTIONS = {
 var BaseHttpTransport = class {
   buffer;
   onErrorCallback;
+  masker;
   constructor(opts = {}) {
     this.onErrorCallback = opts.onError;
+    this.masker = opts.masker;
     this.buffer = new MessageBuffer({
       batchSize: opts.batchSize ?? DEFAULT_OPTIONS.batchSize,
       flushInterval: opts.flushInterval ?? DEFAULT_OPTIONS.flushInterval,
@@ -203,12 +205,16 @@ var BaseHttpTransport = class {
   }
   transformMessage(info) {
     const { level, message, timestamp, context, ...meta } = info;
+    let resolvedMeta;
+    if (Object.keys(meta).length > 0) {
+      resolvedMeta = this.masker ? this.masker(meta) : meta;
+    }
     return {
       level,
       message: String(message),
       timestamp: timestamp instanceof Date ? timestamp : timestamp ? new Date(String(timestamp)) : /* @__PURE__ */ new Date(),
       context,
-      meta: Object.keys(meta).length > 0 ? meta : void 0
+      meta: resolvedMeta
     };
   }
   handleError(error, messages) {
@@ -255,7 +261,7 @@ var DEFAULT_REQUEST_TIMEOUT_MS = 1e4;
 var DiscordTransport = class extends BaseHttpTransport {
   config;
   requestTimeout;
-  constructor(config) {
+  constructor(config, masker) {
     super({
       batchSize: config.batchSize ?? 10,
       flushInterval: config.flushInterval ?? 2e3,
@@ -264,7 +270,8 @@ var DiscordTransport = class extends BaseHttpTransport {
       maxQueueSize: config.maxQueueSize,
       dropPolicy: config.dropPolicy,
       onDrop: config.onDrop,
-      onError: config.onError
+      onError: config.onError,
+      masker
     });
     this.config = config;
     this.requestTimeout = config.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT_MS;
@@ -404,7 +411,7 @@ var TelegramTransport = class extends BaseHttpTransport {
   config;
   apiUrl;
   requestTimeout;
-  constructor(config) {
+  constructor(config, masker) {
     super({
       batchSize: config.batchSize ?? 20,
       flushInterval: config.flushInterval ?? 1e3,
@@ -413,7 +420,8 @@ var TelegramTransport = class extends BaseHttpTransport {
       maxQueueSize: config.maxQueueSize,
       dropPolicy: config.dropPolicy,
       onDrop: config.onDrop,
-      onError: config.onError
+      onError: config.onError,
+      masker
     });
     this.config = config;
     this.apiUrl = `https://api.telegram.org/bot${config.botToken}`;
@@ -518,7 +526,7 @@ var ZohoCliqTransport = class extends BaseHttpTransport {
   config;
   endpoint;
   requestTimeout;
-  constructor(config) {
+  constructor(config, masker) {
     super({
       batchSize: config.batchSize ?? 20,
       flushInterval: config.flushInterval ?? 2e3,
@@ -527,7 +535,8 @@ var ZohoCliqTransport = class extends BaseHttpTransport {
       maxQueueSize: config.maxQueueSize,
       dropPolicy: config.dropPolicy,
       onDrop: config.onDrop,
-      onError: config.onError
+      onError: config.onError,
+      masker
     });
     this.config = config;
     this.requestTimeout = config.requestTimeout ?? DEFAULT_REQUEST_TIMEOUT_MS3;
@@ -649,7 +658,8 @@ var CloudWatchTransport = class extends BaseHttpTransport {
   initialized = false;
   initPromise = null;
   resolvedLogStreamName;
-  constructor(config, configHostname) {
+  maskReplacer;
+  constructor(config, configHostname, maskReplacerFn) {
     super({
       batchSize: config.batchSize ?? 100,
       flushInterval: config.flushInterval ?? 1e3,
@@ -660,6 +670,7 @@ var CloudWatchTransport = class extends BaseHttpTransport {
       onDrop: config.onDrop,
       onError: config.onError
     });
+    this.maskReplacer = maskReplacerFn;
     this.config = config;
     this.resolvedLogStreamName = resolveLogStreamName(config.logStreamName, configHostname);
     this.client = new clientCloudwatchLogs.CloudWatchLogsClient({
@@ -672,6 +683,7 @@ var CloudWatchTransport = class extends BaseHttpTransport {
   }
   async sendBatch(messages) {
     await this.ensureInitialized();
+    const replacer = this.maskReplacer;
     const logEvents = messages.map((msg) => ({
       timestamp: msg.timestamp.getTime(),
       message: JSON.stringify({
@@ -679,7 +691,7 @@ var CloudWatchTransport = class extends BaseHttpTransport {
         message: msg.message,
         context: msg.context,
         ...msg.meta
-      })
+      }, replacer)
     }));
     logEvents.sort((a, b) => (a.timestamp ?? 0) - (b.timestamp ?? 0));
     const command = new clientCloudwatchLogs.PutLogEventsCommand({
@@ -789,13 +801,27 @@ function getLevelName(levelNum) {
   if (levelNum >= 20) return "debug";
   return "silly";
 }
-function shouldPassTransport(log, level, rules, state) {
+var DEFAULT_RESPECTS_OVERRIDES = {
+  console: true,
+  file: true,
+  cloudwatch: true,
+  relay: true,
+  discord: false,
+  telegram: false,
+  zohoCliq: false
+};
+function resolveRespectsOverrides(kind, configFlag) {
+  return configFlag ?? DEFAULT_RESPECTS_OVERRIDES[kind];
+}
+function shouldPassTransport(log, level, rules, state, respectOverrides) {
   const logLevel = getLevelName(log.level);
-  const embeddedOverride = log.__or;
-  if (typeof embeddedOverride === "string") {
-    if (embeddedOverride === "off") return false;
-    const overrideLevel = embeddedOverride;
-    return LOG_LEVELS[logLevel] <= LOG_LEVELS[overrideLevel];
+  if (respectOverrides) {
+    const embeddedOverride = log.__or;
+    if (typeof embeddedOverride === "string") {
+      if (embeddedOverride === "off") return false;
+      const overrideLevel = embeddedOverride;
+      return LOG_LEVELS[logLevel] <= LOG_LEVELS[overrideLevel];
+    }
   }
   const context = log.context;
   if (rules && rules.length > 0) {
@@ -817,12 +843,12 @@ function shouldPassTransport(log, level, rules, state) {
   return LOG_LEVELS[logLevel] <= LOG_LEVELS[effectiveLevel];
 }
 var RESERVED_LOG_FIELDS = /* @__PURE__ */ new Set(["level", "time", "msg", "context", "__or"]);
-function formatLog(log, format, store) {
+function formatLog(log, format, state) {
   const levelName = getLevelName(log.level);
   const timestamp = new Date(log.time).toISOString();
   const context = log.context || "APP";
   const message = log.msg || "";
-  const storeContext = store.getStore();
+  const storeContext = state.store.getStore();
   const meta = {};
   for (const [key, value] of Object.entries(log)) {
     if (!RESERVED_LOG_FIELDS.has(key)) {
@@ -832,6 +858,7 @@ function formatLog(log, format, store) {
   if (storeContext) {
     Object.assign(meta, storeContext);
   }
+  const replacer = state.maskReplacer;
   if (format === "json") {
     return JSON.stringify({
       level: levelName,
@@ -839,7 +866,7 @@ function formatLog(log, format, store) {
       context,
       message,
       ...meta
-    }) + "\n";
+    }, replacer) + "\n";
   }
   if (format === "plain") {
     const LEVEL_COLORS = {
@@ -855,10 +882,11 @@ function formatLog(log, format, store) {
     const color = LEVEL_COLORS[levelName] || "";
     const coloredLevel = color ? `${color}${levelName}${RESET}` : levelName;
     const formatValue = (key, value) => {
-      if (typeof value === "string" && value.includes("\n")) {
-        return "\n    " + value.split("\n").join("\n    ");
+      const masked = replacer ? replacer.call(void 0, key, value) : value;
+      if (typeof masked === "string" && masked.includes("\n")) {
+        return "\n    " + masked.split("\n").join("\n    ");
       }
-      return JSON.stringify(value);
+      return JSON.stringify(masked, replacer);
     };
     const metaStr = Object.keys(meta).length > 0 ? "\n  " + Object.entries(meta).map(([k, v]) => `${k}: ${formatValue(k, v)}`).join("\n  ") : "";
     return `[${timestamp}] ${coloredLevel} [${context}] ${message}${metaStr}
@@ -867,14 +895,15 @@ function formatLog(log, format, store) {
   if (format === "logfmt") {
     const parts = [`level=${levelName}`, `msg="${message}"`, `context=${context}`, `ts=${timestamp}`];
     for (const [k, v] of Object.entries(meta)) {
-      parts.push(`${k}=${JSON.stringify(v)}`);
+      const masked = replacer ? replacer.call(void 0, k, v) : v;
+      parts.push(`${k}=${JSON.stringify(masked, replacer)}`);
     }
     return parts.join(" ") + "\n";
   }
   return `[${timestamp}] ${levelName}: ${message}
 `;
 }
-function createFormattedFilterStream(format, level, rules, state, destination) {
+function createFormattedFilterStream(format, level, rules, state, destination, respectOverrides) {
   return new stream.Transform({
     transform(chunk, _encoding, callback) {
       const line = chunk.toString().trim();
@@ -887,11 +916,11 @@ function createFormattedFilterStream(format, level, rules, state, destination) {
         callback();
         return;
       }
-      if (!shouldPassTransport(log, level, rules, state)) {
+      if (!shouldPassTransport(log, level, rules, state, respectOverrides)) {
         callback();
         return;
       }
-      const formatted = formatLog(log, format, state.store);
+      const formatted = formatLog(log, format, state);
       destination.write(formatted);
       callback();
     }
@@ -905,7 +934,8 @@ function createStreams(config, state) {
     config.console.level,
     config.console.rules,
     state,
-    process.stdout
+    process.stdout,
+    resolveRespectsOverrides("console", config.console.respectRuntimeOverrides)
   );
   streams.push({
     level: "trace",
@@ -938,7 +968,8 @@ function createStreams(config, state) {
       fileConfig.level,
       fileConfig.rules,
       state,
-      rotatingStream
+      rotatingStream,
+      resolveRespectsOverrides("file", fileConfig.respectRuntimeOverrides)
     );
     streams.push({
       level: "trace",
@@ -946,36 +977,60 @@ function createStreams(config, state) {
     });
   }
   for (const discordConfig of toArray(config.discord)) {
-    const transport = new DiscordTransport(discordConfig);
+    const transport = new DiscordTransport(discordConfig, state.maskerFn);
     transports.push(transport);
-    const discordStream = createHttpTransportStream(transport, discordConfig.level, discordConfig.rules, state);
+    const discordStream = createHttpTransportStream(
+      transport,
+      discordConfig.level,
+      discordConfig.rules,
+      state,
+      resolveRespectsOverrides("discord", discordConfig.respectRuntimeOverrides)
+    );
     streams.push({
       level: "trace",
       stream: discordStream
     });
   }
   for (const telegramConfig of toArray(config.telegram)) {
-    const transport = new TelegramTransport(telegramConfig);
+    const transport = new TelegramTransport(telegramConfig, state.maskerFn);
     transports.push(transport);
-    const telegramStream = createHttpTransportStream(transport, telegramConfig.level, telegramConfig.rules, state);
+    const telegramStream = createHttpTransportStream(
+      transport,
+      telegramConfig.level,
+      telegramConfig.rules,
+      state,
+      resolveRespectsOverrides("telegram", telegramConfig.respectRuntimeOverrides)
+    );
     streams.push({
       level: "trace",
       stream: telegramStream
     });
   }
   for (const zohoCliqConfig of toArray(config.zohoCliq)) {
-    const transport = new ZohoCliqTransport(zohoCliqConfig);
+    const transport = new ZohoCliqTransport(zohoCliqConfig, state.maskerFn);
     transports.push(transport);
-    const zohoStream = createHttpTransportStream(transport, zohoCliqConfig.level, zohoCliqConfig.rules, state);
+    const zohoStream = createHttpTransportStream(
+      transport,
+      zohoCliqConfig.level,
+      zohoCliqConfig.rules,
+      state,
+      resolveRespectsOverrides("zohoCliq", zohoCliqConfig.respectRuntimeOverrides)
+    );
     streams.push({
       level: "trace",
       stream: zohoStream
     });
   }
   for (const cloudwatchConfig of toArray(config.cloudwatch)) {
-    const transport = new CloudWatchTransport(cloudwatchConfig, config.hostname);
+    const transport = new CloudWatchTransport(cloudwatchConfig, config.hostname, state.maskReplacer);
     transports.push(transport);
-    const cwStream = createHttpTransportStream(transport, cloudwatchConfig.level, cloudwatchConfig.rules, state);
+    const cwStream = createHttpTransportStream(
+      transport,
+      cloudwatchConfig.level,
+      cloudwatchConfig.rules,
+      state,
+      resolveRespectsOverrides("cloudwatch", cloudwatchConfig.respectRuntimeOverrides)
+    );
     streams.push({
       level: "trace",
       stream: cwStream
@@ -1000,7 +1055,7 @@ function toArray(value) {
   if (!value) return [];
   return Array.isArray(value) ? value : [value];
 }
-function createHttpTransportStream(transport, level, rules, state) {
+function createHttpTransportStream(transport, level, rules, state, respectOverrides) {
   return new stream.Writable({
     write(chunk, _encoding, callback) {
       const line = chunk.toString().trim();
@@ -1013,7 +1068,7 @@ function createHttpTransportStream(transport, level, rules, state) {
         callback();
         return;
       }
-      if (!shouldPassTransport(log, level, rules, state)) {
+      if (!shouldPassTransport(log, level, rules, state, respectOverrides)) {
         callback();
         return;
       }
@@ -1039,6 +1094,116 @@ function createHttpTransportStream(transport, level, rules, state) {
   });
 }
 
+// src/utils/mask-secrets.ts
+var DEFAULT_SECRET_PATTERNS = [
+  "password",
+  "secret",
+  "token",
+  "apikey",
+  "api_key",
+  "api-key",
+  "auth",
+  "credential",
+  "private"
+];
+var DEFAULT_MASK = "***";
+var REGEX_ESCAPE_RE = /[.*+?^${}()|[\]\\]/g;
+function buildSecretRe(patterns) {
+  const escaped = patterns.map((p) => p.replace(REGEX_ESCAPE_RE, "\\$&"));
+  return new RegExp(escaped.join("|"), "i");
+}
+var DEFAULT_SECRET_RE = buildSecretRe(DEFAULT_SECRET_PATTERNS);
+var DEFAULT_RESOLVED = {
+  secretRe: DEFAULT_SECRET_RE,
+  mask: DEFAULT_MASK,
+  deep: true
+};
+function resolveOptions(options) {
+  if (options.patterns === void 0 && options.mask === void 0 && options.deep === void 0) {
+    return DEFAULT_RESOLVED;
+  }
+  const { patterns = DEFAULT_SECRET_PATTERNS, mask = DEFAULT_MASK, deep = true } = options;
+  return {
+    secretRe: patterns === DEFAULT_SECRET_PATTERNS ? DEFAULT_SECRET_RE : buildSecretRe(patterns),
+    mask,
+    deep
+  };
+}
+function isSecretKey(key, secretRe) {
+  return secretRe.test(key);
+}
+function maskUrlCredentials(url, mask) {
+  try {
+    const parsed = new URL(url);
+    if (parsed.password) {
+      parsed.password = mask;
+    }
+    if (parsed.username && parsed.password) {
+      parsed.username = mask;
+    }
+    return parsed.toString();
+  } catch {
+    return url;
+  }
+}
+function maskString(str, mask) {
+  if (str.length < 10) return str;
+  if (str.charCodeAt(0) !== 104) return str;
+  if (!str.startsWith("http://") && !str.startsWith("https://")) return str;
+  if (str.indexOf("@") === -1) return str;
+  return maskUrlCredentials(str, mask);
+}
+function maskInternal(obj, opts) {
+  if (obj === null || obj === void 0) return obj;
+  const t = typeof obj;
+  if (t === "string") return maskString(obj, opts.mask);
+  if (t !== "object") return obj;
+  if (Array.isArray(obj)) {
+    return opts.deep ? obj.map((item) => maskInternal(item, opts)) : obj;
+  }
+  const { secretRe, mask, deep } = opts;
+  const result = {};
+  const syms = Object.getOwnPropertySymbols(obj);
+  for (let i = 0; i < syms.length; i++) {
+    const sym = syms[i];
+    result[sym] = obj[sym];
+  }
+  for (const [key, value] of Object.entries(obj)) {
+    if (isSecretKey(key, secretRe)) {
+      result[key] = mask;
+      continue;
+    }
+    const vt = typeof value;
+    if (vt === "string") {
+      result[key] = maskString(value, mask);
+    } else if (deep && vt === "object" && value !== null) {
+      result[key] = maskInternal(value, opts);
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function maskSecrets(obj, options = {}) {
+  return maskInternal(obj, resolveOptions(options));
+}
+function createMasker(options = {}) {
+  const opts = resolveOptions(options);
+  return (obj) => maskInternal(obj, opts);
+}
+function maskReplacer(options = {}) {
+  const { secretRe, mask } = resolveOptions(options);
+  return function(key, value) {
+    if (key !== "" && secretRe.test(key)) return mask;
+    if (typeof value !== "string") return value;
+    if (value.length < 10) return value;
+    if (value.charCodeAt(0) !== 104) return value;
+    if (!value.startsWith("http://") && !value.startsWith("https://")) return value;
+    if (value.indexOf("@") === -1) return value;
+    return maskUrlCredentials(value, mask);
+  };
+}
+
 // src/state.ts
 var CUSTOM_LEVELS = {
   http: 25,
@@ -1087,6 +1252,7 @@ function createState(config, store) {
     levelOverrides.set(key, rule);
   }
   const { contextIndex, complexRules } = buildIndexes(levelOverrides);
+  const maskOptions = config.maskSecrets === true ? {} : config.maskSecrets || void 0;
   const state = {
     pino: null,
     store: loggerStore,
@@ -1095,7 +1261,9 @@ function createState(config, store) {
     contextIndex,
     complexRules,
     callerConfig: void 0,
-    transports: []
+    transports: [],
+    maskReplacer: maskOptions ? maskReplacer(maskOptions) : void 0,
+    maskerFn: maskOptions ? createMasker(maskOptions) : void 0
   };
   const { destination, transports } = createStreams(config, state);
   state.transports = transports;
@@ -1172,12 +1340,14 @@ var LevelRuleSchema = zod.z.object({
 var ConsoleConfigSchema = zod.z.object({
   format: LogFormatSchema,
   level: LogLevelSchema.optional(),
-  rules: zod.z.array(LevelRuleSchema).optional()
+  rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional()
 });
 var FileConfigSchema = zod.z.object({
   format: LogFormatSchema,
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   dirname: zod.z.string().min(1, "dirname is required"),
   filename: zod.z.string().min(1, "filename is required"),
   datePattern: zod.z.string().optional(),
@@ -1189,6 +1359,7 @@ var FileConfigSchema = zod.z.object({
 var HttpTransportBaseConfigSchema = zod.z.object({
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   batchSize: zod.z.number().int().positive().optional(),
   flushInterval: zod.z.number().int().positive().optional(),
   maxRetries: zod.z.number().int().nonnegative().optional(),
@@ -1202,6 +1373,7 @@ var HttpTransportBaseConfigSchema = zod.z.object({
 var DiscordConfigSchema = zod.z.object({
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   batchSize: zod.z.number().int().positive().optional(),
   flushInterval: zod.z.number().int().positive().optional(),
   maxRetries: zod.z.number().int().nonnegative().optional(),
@@ -1223,6 +1395,7 @@ var DiscordConfigSchema = zod.z.object({
 var TelegramConfigSchema = zod.z.object({
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   batchSize: zod.z.number().int().positive().optional(),
   flushInterval: zod.z.number().int().positive().optional(),
   maxRetries: zod.z.number().int().nonnegative().optional(),
@@ -1260,6 +1433,7 @@ var LogStreamNameSchema = zod.z.union([
 var CloudWatchConfigSchema = zod.z.object({
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   batchSize: zod.z.number().int().positive().optional(),
   flushInterval: zod.z.number().int().positive().optional(),
   maxRetries: zod.z.number().int().nonnegative().optional(),
@@ -1280,6 +1454,7 @@ var CloudWatchConfigSchema = zod.z.object({
 var ZohoCliqConfigBaseSchema = zod.z.object({
   level: LogLevelSchema.optional(),
   rules: zod.z.array(LevelRuleSchema).optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
   batchSize: zod.z.number().int().positive().optional(),
   flushInterval: zod.z.number().int().positive().optional(),
   maxRetries: zod.z.number().int().nonnegative().optional(),
@@ -1312,7 +1487,17 @@ var RelayConfigSchema = zod.z.object({
   pollInterval: zod.z.number().int().positive().optional(),
   bufferSize: zod.z.number().int().positive().optional(),
   reconnectDelay: zod.z.number().int().positive().optional(),
-  maxReconnectDelay: zod.z.number().int().positive().optional()
+  maxReconnectDelay: zod.z.number().int().positive().optional(),
+  respectRuntimeOverrides: zod.z.boolean().optional(),
+  allowedWsHosts: zod.z.array(zod.z.string()).optional(),
+  maskSecrets: zod.z.union([
+    zod.z.boolean(),
+    zod.z.object({
+      patterns: zod.z.array(zod.z.string()).optional(),
+      mask: zod.z.string().optional(),
+      deep: zod.z.boolean().optional()
+    })
+  ]).optional()
 });
 var LevelConfigObjectSchema = zod.z.object({
   default: LogLevelSchema,
@@ -1330,6 +1515,11 @@ var AutoShutdownConfigSchema = zod.z.object({
   timeout: zod.z.number().int().positive().optional(),
   signals: zod.z.array(zod.z.string()).optional()
 });
+var MaskSecretsOptionsSchema = zod.z.object({
+  patterns: zod.z.array(zod.z.string()).optional(),
+  mask: zod.z.string().optional(),
+  deep: zod.z.boolean().optional()
+});
 var LoggerConfigSchema = zod.z.object({
   level: LevelConfigSchema,
   console: ConsoleConfigSchema,
@@ -1341,7 +1531,8 @@ var LoggerConfigSchema = zod.z.object({
   relay: RelayConfigSchema.optional(),
   caller: zod.z.union([zod.z.boolean(), CallerConfigSchema]).optional(),
   hostname: zod.z.string().optional(),
-  autoShutdown: zod.z.union([zod.z.boolean(), AutoShutdownConfigSchema]).optional()
+  autoShutdown: zod.z.union([zod.z.boolean(), AutoShutdownConfigSchema]).optional(),
+  maskSecrets: zod.z.union([zod.z.boolean(), MaskSecretsOptionsSchema]).optional()
 });
 function validateConfig(config) {
   return LoggerConfigSchema.parse(config);
@@ -1879,75 +2070,6 @@ function getOrGenerateRequestId(headers, options = {}) {
   return extractRequestId(headers) ?? generateRequestId(options);
 }
 
-// src/utils/mask-secrets.ts
-var DEFAULT_SECRET_PATTERNS = [
-  "password",
-  "secret",
-  "token",
-  "apikey",
-  "api_key",
-  "api-key",
-  "auth",
-  "credential",
-  "private"
-];
-var DEFAULT_MASK = "***";
-function isSecretKey(key, patterns) {
-  const lowerKey = key.toLowerCase();
-  return patterns.some((pattern) => lowerKey.includes(pattern.toLowerCase()));
-}
-function maskUrlCredentials(url, mask) {
-  try {
-    const parsed = new URL(url);
-    if (parsed.password) {
-      parsed.password = mask;
-    }
-    if (parsed.username && parsed.password) {
-      parsed.username = mask;
-    }
-    return parsed.toString();
-  } catch {
-    return url;
-  }
-}
-function maskSecrets(obj, options = {}) {
-  const { patterns = DEFAULT_SECRET_PATTERNS, mask = DEFAULT_MASK, deep = true } = options;
-  if (obj === null || obj === void 0) {
-    return obj;
-  }
-  if (typeof obj === "string") {
-    if (obj.startsWith("http://") || obj.startsWith("https://")) {
-      return maskUrlCredentials(obj, mask);
-    }
-    return obj;
-  }
-  if (Array.isArray(obj)) {
-    return deep ? obj.map((item) => maskSecrets(item, options)) : obj;
-  }
-  if (typeof obj === "object") {
-    const result = {};
-    for (const sym of Object.getOwnPropertySymbols(obj)) {
-      result[sym] = obj[sym];
-    }
-    for (const [key, value] of Object.entries(obj)) {
-      if (isSecretKey(key, patterns)) {
-        result[key] = mask;
-      } else if (deep && typeof value === "object" && value !== null) {
-        result[key] = maskSecrets(value, options);
-      } else if (typeof value === "string") {
-        result[key] = maskSecrets(value, options);
-      } else {
-        result[key] = value;
-      }
-    }
-    return result;
-  }
-  return obj;
-}
-function createMasker(options = {}) {
-  return (obj) => maskSecrets(obj, options);
-}
-
 // src/formatters.ts
 var MAX_FLATTEN_DEPTH = 10;
 var CIRCULAR_REF = "[Circular]";
@@ -2040,6 +2162,7 @@ exports.generateRequestId = generateRequestId;
 exports.getCallerInfo = getCallerInfo;
 exports.getOrGenerateRequestId = getOrGenerateRequestId;
 exports.isValidLogLevel = isValidLogLevel;
+exports.maskReplacer = maskReplacer;
 exports.maskSecrets = maskSecrets;
 exports.matchesContext = matchesContext;
 exports.measureAsync = measureAsync;