@revealui/core 0.11.1 → 0.12.1

package/dist/license.js

@@ -15,7 +15,7 @@
 // other modules in the auth route bundle during page data collection.
 import { z } from 'zod';
 import { decryptLicenseKey } from './license-encryption.js';
-import { logger } from './utils/logger.js';
+import { logger } from './observability/logger.js';
 async function getJose() {
     return await import('jose');
 }
@@ -127,6 +127,20 @@ let cachedState = {
 export function normalizePem(raw) {
     return raw.split('\\n').join('\n');
 }
+/**
+ * Read a PEM from `env[name]` (defaults to `process.env`), trim, and normalize
+ * escaped newlines. Returns `undefined` when missing or blank after trim.
+ * Canonical helper for the former 8+ copy-pasted license/webhook PEM unescapes (GAP-396).
+ */
+export function readPemEnv(name, env = process.env) {
+    const raw = env[name];
+    if (raw === undefined)
+        return undefined;
+    const trimmed = raw.trim();
+    if (trimmed.length === 0)
+        return undefined;
+    return normalizePem(trimmed);
+}
 /**
  * The ordered public-key candidates used to verify license JWTs.
  *
@@ -204,6 +218,47 @@ export async function computeKeyId(publicKeyPem) {
  * options below. Signature is enforced via the public key.
  */
 export async function validateLicenseKey(licenseKey, publicKey, expectedCustomerId) {
+    // Accept tokens expired within the subscription grace window so the payload
+    // is available for grace-period calculations in isLicensed().
+    return verifyAndParseLicenseJwt(licenseKey, publicKey, graceConfig.subscriptionDays * 86_400, expectedCustomerId);
+}
+/**
+ * How far past `exp` a license JWT is still accepted by the refresh endpoint
+ * (GAP-287 PR-1). Ratified by the owner 2026-07-18 at 30 days.
+ *
+ * Deliberately wider than the subscription validation grace
+ * (`LICENSE_GRACE_SUBSCRIPTION_DAYS`, default 3): the validation grace answers
+ * "may you still run", the refresh-accept window answers "may you still fetch
+ * your renewal". A customer returning from a month away should still be able to
+ * pull their current key rather than being bricked. Beyond this window the
+ * refresh path refuses and re-delivery goes through the authenticated admin
+ * account page.
+ */
+export const REFRESH_ACCEPT_DAYS = 30;
+/**
+ * Refresh-path validator (GAP-287 PR-1). Verifies a presented license JWT for
+ * `POST /api/license/refresh`, accepting a token whose `exp` is past by at most
+ * `refreshAcceptDays` (default {@link REFRESH_ACCEPT_DAYS}).
+ *
+ * It reuses the SAME ordered multi-key verification (GAP-259 rotation
+ * composition) and payload schema as {@link validateLicenseKey}, so a token
+ * minted under the outgoing private key during a dual-key rotation window still
+ * verifies. It performs NO `customerId` binding: the refresh endpoint trusts
+ * the token's `customerId` claim and then independently requires an ACTIVE
+ * license row for it. This function only proves possession of a recently-valid
+ * signed key. It never mints and never grants entitlement on its own.
+ */
+export async function validateLicenseKeyForRefresh(licenseKey, publicKey, refreshAcceptDays = REFRESH_ACCEPT_DAYS) {
+    return verifyAndParseLicenseJwt(licenseKey, publicKey, refreshAcceptDays * 86_400);
+}
+/**
+ * Shared verify + parse path for {@link validateLicenseKey} and
+ * {@link validateLicenseKeyForRefresh}. The ONLY behavioral difference between
+ * the two callers is `clockToleranceSeconds` — how far past `exp` a token is
+ * still accepted — so the rotation-aware multi-key loop and the payload schema
+ * live in exactly one place.
+ */
+async function verifyAndParseLicenseJwt(licenseKey, publicKey, clockToleranceSeconds, expectedCustomerId) {
     const candidates = typeof publicKey === 'string' ? [publicKey] : [...publicKey];
     if (candidates.length === 0)
         return null;
@@ -218,11 +273,9 @@ export async function validateLicenseKey(licenseKey, publicKey, expectedCustomer
         for (const candidate of ordered) {
             try {
                 const key = await jose.importSPKI(candidate, 'EdDSA');
-                // Accept tokens expired within the subscription grace window so the
-                // payload is available for grace-period calculations in isLicensed().
                 const { payload } = await jose.jwtVerify(licenseKey, key, {
                     algorithms: ['EdDSA'],
-                    clockTolerance: graceConfig.subscriptionDays * 86_400,
+                    clockTolerance: clockToleranceSeconds,
                     issuer: LICENSE_ISSUER,
                     audience: LICENSE_AUDIENCE,
                 });
@@ -232,7 +285,7 @@ export async function validateLicenseKey(licenseKey, publicKey, expectedCustomer
             }
             catch {
                 // This candidate did not verify (wrong key, malformed PEM, bad
-                // iss/aud, or expired beyond grace) — try the next before giving up.
+                // iss/aud, or expired beyond tolerance) — try the next before giving up.
             }
         }
         if (!verified) {
@@ -617,6 +670,100 @@ export function getMaxAgentTasks() {
         return 10_000;
     return 1_000;
 }
+/**
+ * Default subscription license JWT lifetime (seconds) — one year. Used as the
+ * fallback when a subscription's billing period is unavailable at mint time (an
+ * abnormal Stripe shape) so a period-bound token is never SHORTER than the
+ * pre-GAP-287 behavior, and as the default lifetime for {@link generateLicenseKey}
+ * when no explicit value is passed.
+ */
+export const DEFAULT_SUBSCRIPTION_TTL_SECONDS = 365 * 24 * 60 * 60;
+/**
+ * Slack added to a hosted subscription's `current_period_end` when deriving the
+ * license JWT `exp` (GAP-287 PR-2). Ratified by the owner 2026-07-18 at 7 days.
+ *
+ * The token's lifetime equals what billing has actually granted plus this slack.
+ * The slack must cover the Stripe dunning/retry window so a card that recovers
+ * on retry never presents a lapsed key. Renewals advance the exp each billing
+ * cycle by re-minting on `invoice.payment_succeeded`.
+ */
+export const RENEWAL_SLACK_DAYS = 7;
+export const RENEWAL_SLACK_SECONDS = RENEWAL_SLACK_DAYS * 24 * 60 * 60;
+/**
+ * Default lifetime, in days, for a license JWT minted by the admin
+ * `POST /generate` manual-mint endpoint when the caller does not supply an
+ * explicit `expiresInDays` (GAP-287 PR-3). Ratified by the owner 2026-07-18 at
+ * 90, down from the prior flat 365-day default: this is an operator tool, and
+ * a short default nudges the right renewal habit for manually-issued keys. An
+ * explicit `expiresInDays` on the request is always honored unchanged.
+ */
+export const DEFAULT_MANUAL_MINT_DAYS = 90;
+/**
+ * Derives the relative `expiresInSeconds` argument for {@link generateLicenseKey}
+ * at the hosted subscription mint sites (GAP-287 PR-2): the token should expire
+ * at `periodEnd + RENEWAL_SLACK_SECONDS`. Because generateLicenseKey interprets a
+ * numeric lifetime relative to issue time, this returns that absolute bound minus
+ * now.
+ *
+ * Falls back to {@link DEFAULT_SUBSCRIPTION_TTL_SECONDS} when `periodEnd` is
+ * absent (a subscription with no billing period) so an unexpected Stripe shape
+ * never mints a shorter-than-before token. Never returns a non-positive lifetime:
+ * a period end already in the past floors at one second, leaving expiry to the
+ * validation grace + refresh window rather than minting an already-invalid token.
+ */
+export function subscriptionLicenseExpiresInSeconds(periodEnd, nowMs = Date.now()) {
+    if (!periodEnd)
+        return DEFAULT_SUBSCRIPTION_TTL_SECONDS;
+    const boundMs = periodEnd.getTime() + RENEWAL_SLACK_SECONDS * 1000;
+    return Math.max(1, Math.floor((boundMs - nowMs) / 1000));
+}
+/**
+ * Absolute epoch-second bound `periodEnd + RENEWAL_SLACK_SECONDS` a hosted
+ * subscription key should reach (GAP-287 PR-2). The renewal cadence re-mints IFF
+ * the stored key's `exp` is below this bound, so the comparison uses this
+ * absolute form while the mint uses the relative
+ * {@link subscriptionLicenseExpiresInSeconds}.
+ */
+export function subscriptionExpBound(periodEnd) {
+    return Math.floor(periodEnd.getTime() / 1000) + RENEWAL_SLACK_SECONDS;
+}
+/**
+ * Idempotency tolerance for the renewal re-mint decision (fast-follow from the
+ * non-blocking finding on the #1978 guardrail-2 verdict). `subscriptionLicenseExpiresInSeconds`
+ * floors its relative TTL to whole seconds and the JWT signer floors `exp` to
+ * `iat + expiresInSeconds` at its own second granularity, so the `exp` actually
+ * persisted for a subscription key can land exactly 1s below
+ * {@link subscriptionExpBound}'s value even though the mint targeted that bound.
+ * Without this tolerance a duplicate/retried `invoice.payment_succeeded` lands on
+ * that 1s gap and re-enters the re-mint path instead of no-opping.
+ */
+export const RENEWAL_IDEMPOTENCY_TOLERANCE_SECONDS = 1;
+/**
+ * True when a stored license `exp` already covers the renewal bound, within the
+ * {@link RENEWAL_IDEMPOTENCY_TOLERANCE_SECONDS} idempotency tolerance  -  i.e. the
+ * renewal re-mint should be SKIPPED. `null` (perpetual token, or an undecodable
+ * key) never covers, so the caller falls through to re-mint.
+ */
+export function coversRenewalBound(storedExp, newBound) {
+    return storedExp !== null && storedExp >= newBound - RENEWAL_IDEMPOTENCY_TOLERANCE_SECONDS;
+}
+/**
+ * Reads the `exp` (epoch seconds) claim from a license JWT WITHOUT verifying its
+ * signature. Internal use only, for the GAP-287 PR-2 renewal cadence: the token
+ * comes from our OWN store and the caller needs only its expiry to decide whether
+ * to re-mint — never as an authentication or entitlement decision. Returns null
+ * for a perpetual token (no exp claim) or one that cannot be decoded.
+ */
+export async function readLicenseExp(licenseKey) {
+    try {
+        const jose = await getJose();
+        const payload = jose.decodeJwt(licenseKey);
+        return typeof payload.exp === 'number' ? payload.exp : null;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * Generates a signed license key JWT.
  * Server-only in practice (requires the private key) but edge-compatible —
@@ -630,7 +777,7 @@ export function getMaxAgentTasks() {
  *   claim is added to the JWT header for forward-compatible key rotation.
  * @returns Signed JWT string
  */
-export async function generateLicenseKey(payload, privateKey, expiresInSeconds = 365 * 24 * 60 * 60, publicKey) {
+export async function generateLicenseKey(payload, privateKey, expiresInSeconds = DEFAULT_SUBSCRIPTION_TTL_SECONDS, publicKey) {
     const jose = await getJose();
     const key = await jose.importPKCS8(privateKey, 'EdDSA');
     const kid = publicKey ? await computeKeyId(publicKey) : undefined;

package/dist/observability/index.d.ts

@@ -2,11 +2,14 @@
  * Observability Module
  *
  * Centralized exports for observability functionality including logging,
- * metrics, tracing, alerts, and health checks.
+ * metrics, alerts, and health checks.
+ *
+ * In-memory `TracingSystem` was removed (fleet-redundancy C11, 2026-07-23):
+ * unmounted, tests-only, zero app consumers. Prefer OpenTelemetry when
+ * distributed tracing is wired.
  */
 export * from './alerts.js';
 export * from './health-check.js';
 export * from './logger.js';
 export * from './metrics.js';
-export * from './tracing.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/observability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/observability/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC"}

package/dist/observability/index.js

@@ -2,10 +2,13 @@
  * Observability Module
  *
  * Centralized exports for observability functionality including logging,
- * metrics, tracing, alerts, and health checks.
+ * metrics, alerts, and health checks.
+ *
+ * In-memory `TracingSystem` was removed (fleet-redundancy C11, 2026-07-23):
+ * unmounted, tests-only, zero app consumers. Prefer OpenTelemetry when
+ * distributed tracing is wired.
  */
 export * from './alerts.js';
 export * from './health-check.js';
 export * from './logger.js';
 export * from './metrics.js';
-export * from './tracing.js';

package/dist/observability/logger.d.ts

@@ -1,8 +1,10 @@
 /**
- * Structured Logging Infrastructure
+ * Structured Logging Infrastructure (canonical core facade)
  *
- * Re-exports from @revealui/utils to maintain backward compatibility.
- * The actual implementation has been moved to @revealui/utils to break circular dependencies.
+ * Preferred import for packages that already depend on `@revealui/core`
+ * (ADR-008). Re-exports `@revealui/utils/logger` and adds core-only helpers
+ * (`createRequestLogger`, `logPerformance`, …). Leaf packages without a core
+ * dependency should import `@revealui/utils/logger` directly.
  */
 export type { LogContext, LogEntry, LoggerConfig, LogLevel, } from '@revealui/utils/logger';
 export { createLogger, Logger, logAudit, logError, logger, logQuery, } from '@revealui/utils/logger';

package/dist/observability/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/observability/logger.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,YAAY,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAKhC;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,GAAG,OAAO,EAAE,SAAS,GAAG,OAAO,EACzE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,IAG/D,SAAS,QAAQ,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;QACrC,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC5C,CAAC;CACH,EACD,MAAM,MAAM,OAAO,CAAC,SAAS,CAAC,KAC7B,OAAO,CAAC,SAAS,CAAC,CA6CtB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAgBN;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,EAC5C,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKrF"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/observability/logger.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,YAAY,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAKhC;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,GAAG,OAAO,EAAE,SAAS,GAAG,OAAO,EACzE,OAAO,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,IAG/D,SAAS,QAAQ,GAAG;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;QACrC,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;KAC5C,CAAC;CACH,EACD,MAAM,MAAM,OAAO,CAAC,SAAS,CAAC,KAC7B,OAAO,CAAC,SAAS,CAAC,CA6CtB;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAgBN;AAED;;GAEG;AACH,wBAAgB,QAAQ,CACtB,SAAS,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,EAC5C,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,IAAI,CAMN;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKrF"}

package/dist/observability/logger.js

@@ -1,8 +1,10 @@
 /**
- * Structured Logging Infrastructure
+ * Structured Logging Infrastructure (canonical core facade)
  *
- * Re-exports from @revealui/utils to maintain backward compatibility.
- * The actual implementation has been moved to @revealui/utils to break circular dependencies.
+ * Preferred import for packages that already depend on `@revealui/core`
+ * (ADR-008). Re-exports `@revealui/utils/logger` and adds core-only helpers
+ * (`createRequestLogger`, `logPerformance`, …). Leaf packages without a core
+ * dependency should import `@revealui/utils/logger` directly.
  */
 // Import logger for internal use
 import { logger as utilsLogger } from '@revealui/utils/logger';

package/dist/relationships/analyzer.js

@@ -1,4 +1,4 @@
-import { defaultLogger } from '../instance/logger.js';
+import { logger } from '../observability/logger.js';
 /**
  * Analyzes a collection or global configuration and extracts all relationship fields
  * with their storage metadata for proper query building.
@@ -51,7 +51,7 @@ export function getRelationshipFields(config, collectionSlug) {
     const validation = validateRelationshipMetadata(relationships);
     if (!validation.valid) {
         for (const error of validation.errors) {
-            defaultLogger.warn(`[RelationshipAnalyzer] ${error}`);
+            logger.warn(`[RelationshipAnalyzer] ${error}`);
         }
     }
     return relationships;

package/dist/revforge-license.d.ts

@@ -14,6 +14,15 @@ import { type LicensePayload } from './license.js';
 export declare const SLUG_PATTERN: RegExp;
 export declare const VALID_REVFORGE_TIERS: readonly ["pro", "max", "enterprise"];
 export type RevForgeTier = (typeof VALID_REVFORGE_TIERS)[number];
+/**
+ * Default lifetime, in days, for a RevForge kit license JWT when neither
+ * `expiresInDays` nor `perpetual` is supplied (GAP-287 PR-3). Ratified by the
+ * owner 2026-07-18: stays at 365 (no behavior change), matching the annual
+ * kit contract — the renewal path already exists via the GAP-316
+ * `stamp.sh --license-only` re-mint. This constant only names the value that
+ * was previously an inline literal.
+ */
+export declare const DEFAULT_KIT_MINT_DAYS = 365;
 export interface IssueRevForgeLicenseOptions {
     /** Customer slug; becomes the JWT customerId. Must match SLUG_PATTERN. */
     slug: string;

package/dist/revforge-license.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"revforge-license.d.ts","sourceRoot":"","sources":["../src/revforge-license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAsB,KAAK,cAAc,EAAsB,MAAM,cAAc,CAAC;AAE3F,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,eAAO,MAAM,oBAAoB,uCAAwC,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IACnB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oFAAoF;IACpF,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,EACjC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,0BAA0B,CAAC,CAuFrC"}
+{"version":3,"file":"revforge-license.d.ts","sourceRoot":"","sources":["../src/revforge-license.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAsB,KAAK,cAAc,EAAsB,MAAM,cAAc,CAAC;AAE3F,eAAO,MAAM,YAAY,QAAyB,CAAC;AAEnD,eAAO,MAAM,oBAAoB,uCAAwC,CAAC;AAC1E,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC,MAAM,WAAW,2BAA2B;IAC1C,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,IAAI,EAAE,YAAY,CAAC;IACnB,6FAA6F;IAC7F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,6FAA6F;IAC7F,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,IAAI,EAAE,YAAY,CAAC;IACnB,0DAA0D;IAC1D,SAAS,EAAE,OAAO,CAAC;IACnB,sCAAsC;IACtC,QAAQ,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,oFAAoF;IACpF,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC,CAAC;CACtD;AAED;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,2BAA2B,EACjC,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC9C,OAAO,CAAC,0BAA0B,CAAC,CAwFrC"}

package/dist/revforge-license.js

@@ -13,6 +13,15 @@
 import { generateLicenseKey, validateLicenseKey } from './license.js';
 export const SLUG_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
 export const VALID_REVFORGE_TIERS = ['pro', 'max', 'enterprise'];
+/**
+ * Default lifetime, in days, for a RevForge kit license JWT when neither
+ * `expiresInDays` nor `perpetual` is supplied (GAP-287 PR-3). Ratified by the
+ * owner 2026-07-18: stays at 365 (no behavior change), matching the annual
+ * kit contract — the renewal path already exists via the GAP-316
+ * `stamp.sh --license-only` re-mint. This constant only names the value that
+ * was previously an inline literal.
+ */
+export const DEFAULT_KIT_MINT_DAYS = 365;
 /**
  * Issue a signed RevForge license JWT for a paying customer.
  *
@@ -55,12 +64,13 @@ export async function issueRevForgeLicense(opts, keys) {
         ...(opts.domains && opts.domains.length > 0 ? { domains: opts.domains } : {}),
     };
     // Perpetual: pass null to omit exp claim. Otherwise translate days → seconds.
-    // Default (neither flag): 365-day subscription, matching generateLicenseKey's default.
+    // Default (neither flag): DEFAULT_KIT_MINT_DAYS (GAP-287 PR-3 named constant;
+    // value unchanged at 365).
     const expiresInSeconds = opts.perpetual
         ? null
         : opts.expiresInDays !== undefined
             ? opts.expiresInDays * 24 * 60 * 60
-            : 365 * 24 * 60 * 60;
+            : DEFAULT_KIT_MINT_DAYS * 24 * 60 * 60;
     const issuedAtMs = Date.now();
     const licenseKey = await generateLicenseKey(payload, keys.privateKey, expiresInSeconds, keys.publicKey);
     // Pair-match guard: prove the supplied public key can verify the JWT we just

package/dist/storage/object-storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"object-storage.d.ts","sourceRoot":"","sources":["../../src/storage/object-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kEAAkE;IAClE,WAAW,CAAC,EAAE;QACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF;;;;;;OAMG;IACH,eAAe,EAAE,MAAM,eAAe,CAAC;IACvC,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAiGjE"}
+{"version":3,"file":"object-storage.d.ts","sourceRoot":"","sources":["../../src/storage/object-storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,kEAAkE;IAClE,WAAW,CAAC,EAAE;QACZ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACxB,CAAC;IACF;;;;;;OAMG;IACH,eAAe,EAAE,MAAM,eAAe,CAAC;IACvC,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAuGjE"}

package/dist/storage/object-storage.js

@@ -17,7 +17,7 @@
  * WARNING: This module is server-only.
  * Do NOT import in client-side code or edge runtime.
  */
-import { defaultLogger } from '../instance/logger.js';
+import { logger } from '../observability/logger.js';
 export function objectStorage(config) {
     const prefix = config.prefix || 'uploads';
     // Memoize the provider so the underlying client (S3 / Blob) is constructed
@@ -71,7 +71,7 @@ export function objectStorage(config) {
                                             };
                                         }
                                         catch (error) {
-                                            defaultLogger.error('Object storage upload error:', error);
+                                            logger.error('Object storage upload error', error instanceof Error ? error : new Error(String(error)));
                                             throw error;
                                         }
                                     },
@@ -86,7 +86,7 @@ export function objectStorage(config) {
                                             await getProvider().del(keyOrUrl);
                                         }
                                         catch (error) {
-                                            defaultLogger.error('Object storage delete error:', error);
+                                            logger.error('Object storage delete error', error instanceof Error ? error : new Error(String(error)));
                                             throw error;
                                         }
                                     },

package/dist/utils/errors.d.ts

@@ -14,14 +14,26 @@ export declare class ApplicationError extends Error {
     constructor(message: string, code: string, statusCode?: number, context?: Record<string, unknown> | undefined);
 }
 /**
- * Validation Error
- * Use for input validation failures, schema validation failures
+ * Validation Error (canonical domain / API / field-ingress class)
+ *
+ * Single source for server-side validation failures. Carries HTTP 400 via
+ * `status` / `statusCode` so REST and middleware treat field-ingress and
+ * API validation the same. Distinct from `ClientValidationError` in the
+ * React error-boundary module (client form field map).
+ *
+ * Always branch with `instanceof ValidationError` — never `name ===
+ * 'ValidationError'`, which false-positives against other classes that
+ * historically shared the same name.
  */
 export declare class ValidationError extends Error {
     field: string;
-    value: unknown;
+    value?: unknown | undefined;
     context?: Record<string, unknown> | undefined;
-    constructor(message: string, field: string, value: unknown, context?: Record<string, unknown> | undefined);
+    /** HTTP status for transports that read `error.status` (e.g. rest.ts). */
+    readonly status = 400;
+    /** Alias for handlers that read `statusCode`. */
+    readonly statusCode = 400;
+    constructor(message: string, field: string, value?: unknown | undefined, context?: Record<string, unknown> | undefined);
 }
 /**
  * Database Error

package/dist/utils/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IAGhC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IAG/B,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,OAAO;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHxC,OAAO,EAAE,MAAM,EACR,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,MAAM,CAAC,EAAE,MAAM;IACf,UAAU,CAAC,EAAE,MAAM;IACnB,KAAK,CAAC,EAAE,MAAM;IACd,MAAM,CAAC,EAAE,MAAM;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAPxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAY,EACxB,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,KAAK,CAAC,EAAE,MAAM,YAAA,EACd,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB;gBAC3C,OAAO,SAA4B,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnF;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,gBAAgB;gBAC1C,OAAO,SAA6B,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpF;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB;gBACrC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAMrF;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB;gBACrC,OAAO,SAAsB,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK7E;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAGzC,YAAY,CAAC,EAAE,MAAM;gBAD5B,OAAO,SAAsB,EACtB,YAAY,CAAC,EAAE,MAAM,YAAA,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAMpC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;CAkCpB,CAAC;AAkCX;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAmH7E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,KAAK,CA4WP"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IAGhC,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAHxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAY,EACxB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAgB,SAAQ,KAAK;IAQ/B,KAAK,EAAE,MAAM;IACb,KAAK,CAAC,EAAE,OAAO;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAT1C,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,OAAO;IACtB,iDAAiD;IACjD,QAAQ,CAAC,UAAU,OAAO;gBAGxB,OAAO,EAAE,MAAM,EACR,KAAK,EAAE,MAAM,EACb,KAAK,CAAC,EAAE,OAAO,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IAG7B,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,MAAM;IAClB,MAAM,CAAC,EAAE,MAAM;IACf,UAAU,CAAC,EAAE,MAAM;IACnB,KAAK,CAAC,EAAE,MAAM;IACd,MAAM,CAAC,EAAE,MAAM;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAPxC,OAAO,EAAE,MAAM,EACR,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,MAAY,EACxB,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,UAAU,CAAC,EAAE,MAAM,YAAA,EACnB,KAAK,CAAC,EAAE,MAAM,YAAA,EACd,MAAM,CAAC,EAAE,MAAM,YAAA,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA;CAM3C;AAED;;;GAGG;AACH,qBAAa,mBAAoB,SAAQ,gBAAgB;gBAC3C,OAAO,SAA4B,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKnF;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,gBAAgB;gBAC1C,OAAO,SAA6B,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpF;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB;gBACrC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAMrF;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,gBAAgB;gBACrC,OAAO,SAAsB,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAK7E;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,gBAAgB;IAGzC,YAAY,CAAC,EAAE,MAAM;gBAD5B,OAAO,SAAsB,EACtB,YAAY,CAAC,EAAE,MAAM,YAAA,EAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAMpC;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;CAkCpB,CAAC;AAkCX;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAmH7E;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,KAAK,CA4WP"}

package/dist/utils/errors.js

@@ -22,13 +22,25 @@ export class ApplicationError extends Error {
     }
 }
 /**
- * Validation Error
- * Use for input validation failures, schema validation failures
+ * Validation Error (canonical domain / API / field-ingress class)
+ *
+ * Single source for server-side validation failures. Carries HTTP 400 via
+ * `status` / `statusCode` so REST and middleware treat field-ingress and
+ * API validation the same. Distinct from `ClientValidationError` in the
+ * React error-boundary module (client form field map).
+ *
+ * Always branch with `instanceof ValidationError` — never `name ===
+ * 'ValidationError'`, which false-positives against other classes that
+ * historically shared the same name.
  */
 export class ValidationError extends Error {
     field;
     value;
     context;
+    /** HTTP status for transports that read `error.status` (e.g. rest.ts). */
+    status = 400;
+    /** Alias for handlers that read `statusCode`. */
+    statusCode = 400;
     constructor(message, field, value, context) {
         super(message);
         this.field = field;

package/dist/utils/json-parsing.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"json-parsing.d.ts","sourceRoot":"","sources":["../../src/utils/json-parsing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAetD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,SAAS,CAAC,EAAE,MAAM,GACjB,cAAc,CA2DhB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASjE"}
+{"version":3,"file":"json-parsing.d.ts","sourceRoot":"","sources":["../../src/utils/json-parsing.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAetD;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,SAAS,CAAC,EAAE,MAAM,GACjB,cAAc,CA6DhB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAUzB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CASjE"}

package/dist/utils/json-parsing.js

@@ -4,7 +4,7 @@
  * Utilities for serializing and deserializing JSON fields in database operations.
  * Handles the _json column pattern used for storing complex field types.
  */
-import { defaultLogger } from '../instance/logger.js';
+import { logger } from '../observability/logger.js';
 /**
  * Parse a JSON field value safely
  *
@@ -67,7 +67,9 @@ export function deserializeJsonFields(doc, tableName) {
         }
         catch (error) {
             // Invalid JSON - log for debugging but continue
-            defaultLogger.warn(`Failed to parse _json in ${tableName || 'unknown'}:`, error);
+            logger.warn(`Failed to parse _json in ${tableName || 'unknown'}`, {
+                error: error instanceof Error ? { message: error.message, name: error.name } : error,
+            });
         }
     }
     // Remove _json from result (internal column)

package/dist/utils/logger-client.d.ts

@@ -1,32 +1,11 @@
 /**
- * Client-Safe Logger
+ * Client-safe logger entry (ADR-008 D4)
  *
- * Production-safe logging utility that works in both client and server contexts.
- * Does not depend on Node.js APIs (no async_hooks, no crypto).
- * Info/warn messages are no-ops in production to avoid console pollution.
+ * Re-exports `@revealui/utils/logger` (no Node async_hooks). Prefer
+ * `@revealui/core/observability/logger` for packages that already depend on core.
  *
- * NOTE: No 'use client' directive here. This is a plain utility module, not a
- * React component. Adding 'use client' causes Next.js to create a reference
- * proxy when imported from server code (API routes), stripping all methods.
+ * Package export: `@revealui/core/utils/logger/client`
  */
-export type LogLevel = 'debug' | 'info' | 'warn' | 'error';
-export interface LogContext {
-    [key: string]: unknown;
-}
-export interface Logger {
-    debug(message: string, context?: LogContext): void;
-    info(message: string, context?: LogContext): void;
-    warn(message: string, context?: LogContext): void;
-    error(message: string, context?: LogContext): void;
-}
-/**
- * Create a client-safe logger instance
- *
- * @returns Logger instance safe for client-side use
- */
-export declare function createLogger(): Logger;
-/**
- * Default client-safe logger instance
- */
-export declare const logger: Logger;
+export type { LogContext, LogEntry, LoggerConfig, LogLevel, } from '@revealui/utils/logger';
+export { createLogger, Logger, logAudit, logError, logger, logQuery, } from '@revealui/utils/logger';
 //# sourceMappingURL=logger-client.d.ts.map

package/dist/utils/logger-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger-client.d.ts","sourceRoot":"","sources":["../../src/utils/logger-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAE3D,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,MAAM;IACrB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IACnD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;IAClD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACpD;AAyCD;;;;GAIG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED;;GAEG;AACH,eAAO,MAAM,MAAM,QAAiB,CAAC"}
+{"version":3,"file":"logger-client.d.ts","sourceRoot":"","sources":["../../src/utils/logger-client.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,YAAY,EACV,UAAU,EACV,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,YAAY,EACZ,MAAM,EACN,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,QAAQ,GACT,MAAM,wBAAwB,CAAC"}

package/dist/utils/logger-client.js

@@ -1,55 +1,9 @@
 /**
- * Client-Safe Logger
+ * Client-safe logger entry (ADR-008 D4)
  *
- * Production-safe logging utility that works in both client and server contexts.
- * Does not depend on Node.js APIs (no async_hooks, no crypto).
- * Info/warn messages are no-ops in production to avoid console pollution.
+ * Re-exports `@revealui/utils/logger` (no Node async_hooks). Prefer
+ * `@revealui/core/observability/logger` for packages that already depend on core.
  *
- * NOTE: No 'use client' directive here. This is a plain utility module, not a
- * React component. Adding 'use client' causes Next.js to create a reference
- * proxy when imported from server code (API routes), stripping all methods.
+ * Package export: `@revealui/core/utils/logger/client`
  */
-/**
- * Client-safe logger implementation
- * Simple console-based logging without Node.js dependencies
- */
-class ClientLogger {
-    formatMessage(level, message, context) {
-        const timestamp = new Date().toISOString();
-        const prefix = `[${timestamp}] [RevealUI] [${level.toUpperCase()}]`;
-        if (context && Object.keys(context).length > 0) {
-            return `${prefix} ${message} ${JSON.stringify(context)}`;
-        }
-        return `${prefix} ${message}`;
-    }
-    debug(message, context) {
-        if (process.env.NODE_ENV !== 'production') {
-            console.debug(this.formatMessage('debug', message, context));
-        }
-    }
-    info(message, context) {
-        if (process.env.NODE_ENV !== 'production') {
-            console.info(this.formatMessage('info', message, context));
-        }
-    }
-    warn(message, context) {
-        if (process.env.NODE_ENV !== 'production') {
-            console.warn(this.formatMessage('warn', message, context));
-        }
-    }
-    error(message, context) {
-        console.error(this.formatMessage('error', message, context));
-    }
-}
-/**
- * Create a client-safe logger instance
- *
- * @returns Logger instance safe for client-side use
- */
-export function createLogger() {
-    return new ClientLogger();
-}
-/**
- * Default client-safe logger instance
- */
-export const logger = createLogger();
+export { createLogger, Logger, logAudit, logError, logger, logQuery, } from '@revealui/utils/logger';