@selvajs/server 0.2.0-beta.4 → 0.2.0-beta.5

package/dist/logging/PinoLogger.js

@@ -0,0 +1,189 @@
+/**
+ * Field paths scrubbed before a record is written. Defense-in-depth only — call
+ * sites are required not to log secrets in the first place (see `LogFields`).
+ * This catches the accident where a whole object is spread into fields and
+ * happens to carry a token, which is exactly how credentials reach log indexes.
+ */
+const REDACTED_PATHS = [
+    'token',
+    'sessionToken',
+    'refreshToken',
+    'apiKey',
+    'api_key',
+    'password',
+    'authorization',
+    'cookie',
+    '*.token',
+    '*.sessionToken',
+    '*.refreshToken',
+    '*.apiKey',
+    '*.password'
+];
+/**
+ * Minimal `ILogger` over `console.*`, used when pino isn't installed.
+ *
+ * Renders as `LEVEL message {fields}` — readable in a terminal, greppable, and
+ * honest about not being machine-parseable. `child` fields are merged eagerly
+ * so correlation still works without pino.
+ */
+export class ConsoleLogger {
+    bound;
+    minLevel;
+    constructor(bound = {}, minLevel = 'info') {
+        this.bound = bound;
+        this.minLevel = minLevel;
+    }
+    static ORDER = {
+        debug: 10,
+        info: 20,
+        warn: 30,
+        error: 40
+    };
+    write(level, message, fields) {
+        if (ConsoleLogger.ORDER[level] < ConsoleLogger.ORDER[this.minLevel])
+            return;
+        const merged = { ...this.bound, ...fields };
+        const suffix = Object.keys(merged).length > 0 ? ` ${safeStringify(merged)}` : '';
+        const line = `${level.toUpperCase()} ${message}${suffix}`;
+        // Route to the matching console method so stderr/stdout split as expected.
+        // `info` (not `log`) carries debug too — both go to stdout, and the level
+        // is already spelled out in the line's own prefix.
+        if (level === 'error')
+            console.error(line);
+        else if (level === 'warn')
+            console.warn(line);
+        else
+            console.info(line);
+    }
+    debug(message, fields) {
+        this.write('debug', message, fields);
+    }
+    info(message, fields) {
+        this.write('info', message, fields);
+    }
+    warn(message, fields) {
+        this.write('warn', message, fields);
+    }
+    error(message, fields) {
+        this.write('error', message, fields);
+    }
+    child(fields) {
+        return new ConsoleLogger({ ...this.bound, ...fields }, this.minLevel);
+    }
+}
+/** Fields can hold anything, including cycles. Never let rendering throw. */
+function safeStringify(value) {
+    try {
+        return JSON.stringify(value) ?? String(value);
+    }
+    catch {
+        return '[unserializable]';
+    }
+}
+class PinoLogger {
+    pino;
+    constructor(pino) {
+        this.pino = pino;
+    }
+    // pino takes (fields, message); ILogger takes (message, fields) — the flip is
+    // deliberate, since the message is what a human scans for first.
+    debug(message, fields) {
+        try {
+            this.pino.debug(fields ?? {}, message);
+        }
+        catch {
+            /* logging must never throw */
+        }
+    }
+    info(message, fields) {
+        try {
+            this.pino.info(fields ?? {}, message);
+        }
+        catch {
+            /* logging must never throw */
+        }
+    }
+    warn(message, fields) {
+        try {
+            this.pino.warn(fields ?? {}, message);
+        }
+        catch {
+            /* logging must never throw */
+        }
+    }
+    error(message, fields) {
+        try {
+            this.pino.error(fields ?? {}, message);
+        }
+        catch {
+            /* logging must never throw */
+        }
+    }
+    child(fields) {
+        try {
+            return new PinoLogger(this.pino.child(fields));
+        }
+        catch {
+            return this;
+        }
+    }
+}
+/**
+ * Build the app's root logger. Never throws and never returns `null`: a
+ * deployment with no pino installed gets {@link ConsoleLogger}, because losing
+ * warnings and errors is a worse outcome than losing JSON formatting.
+ */
+export async function createLogger(opts = {}) {
+    const level = opts.level ?? 'info';
+    try {
+        const factory = await loadPinoFactory();
+        if (!factory)
+            return new ConsoleLogger(opts.base ?? {}, level);
+        const pino = factory({
+            level,
+            base: opts.base,
+            redact: { paths: REDACTED_PATHS, censor: '[redacted]' },
+            transport: opts.pretty
+                ? { target: 'pino-pretty', options: { colorize: true, ignore: 'pid,hostname' } }
+                : undefined
+        });
+        return new PinoLogger(pino);
+    }
+    catch (err) {
+        // pino resolved but could not be constructed — a real misconfiguration
+        // (e.g. `pretty: true` with pino-pretty absent). Unlike a plain absent
+        // package, this one is worth complaining about: the operator asked for
+        // something they didn't get. Fall back rather than go quiet.
+        console.warn(`[Logger] pino was found but could not be initialized; falling back to console logging. ${String(err)}`);
+        return new ConsoleLogger(opts.base ?? {}, level);
+    }
+}
+/**
+ * Load pino's factory, or `null` when it isn't installed.
+ *
+ * The indirection through a variable specifier is load-bearing, not stylistic.
+ * A literal `import('pino')` is statically analyzable, so bundlers rewrite it —
+ * and Vite, applying browser-field mapping to this server build, resolved it to
+ * pino's `server_false` browser shim: a stub whose factory throws. That turned
+ * "use pino" into a silent fall back to the console. Computing the specifier
+ * defeats that resolution and leaves the import to Node at runtime, which is
+ * exactly what an optional peer dependency needs.
+ *
+ * `@vite-ignore` alone was NOT sufficient — it suppressed the warning while the
+ * rewrite happened anyway.
+ */
+async function loadPinoFactory() {
+    const specifier = 'pino';
+    try {
+        const mod = await import(/* @vite-ignore */ specifier);
+        const factory = (mod.default ?? mod);
+        return typeof factory === 'function' ? factory : null;
+    }
+    catch {
+        // Not installed — the expected path on a base install, where the console
+        // fallback is the intended behavior. Staying quiet here on purpose: a
+        // boot-time complaint about an optional package nobody asked for is noise.
+        return null;
+    }
+}
+//# sourceMappingURL=PinoLogger.js.map

package/dist/logging/PinoLogger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"PinoLogger.js","sourceRoot":"","sources":["../../src/logging/PinoLogger.ts"],"names":[],"mappings":"AAkCA;;;;;GAKG;AACH,MAAM,cAAc,GAAG;IACtB,OAAO;IACP,cAAc;IACd,cAAc;IACd,QAAQ;IACR,SAAS;IACT,UAAU;IACV,eAAe;IACf,QAAQ;IACR,SAAS;IACT,gBAAgB;IAChB,gBAAgB;IAChB,UAAU;IACV,YAAY;CACZ,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,OAAO,aAAa;IAEP;IACA;IAFlB,YACkB,QAAmB,EAAE,EACrB,WAAqB,MAAM;QAD3B,UAAK,GAAL,KAAK,CAAgB;QACrB,aAAQ,GAAR,QAAQ,CAAmB;IAC1C,CAAC;IAEI,MAAM,CAAU,KAAK,GAA6B;QACzD,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,EAAE;QACR,KAAK,EAAE,EAAE;KACT,CAAC;IAEM,KAAK,CAAC,KAAe,EAAE,OAAe,EAAE,MAAkB;QACjE,IAAI,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO;QAC5E,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;QAC1D,2EAA2E;QAC3E,0EAA0E;QAC1E,mDAAmD;QACnD,IAAI,KAAK,KAAK,OAAO;YAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aACtC,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;;YACzC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,MAAkB;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,MAAkB;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,MAAkB;QACvC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,MAAkB;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,MAAiB;QACtB,OAAO,IAAI,aAAa,CAAC,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvE,CAAC;;AAGF,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,kBAAkB,CAAC;IAC3B,CAAC;AACF,CAAC;AAED,MAAM,UAAU;IACc;IAA7B,YAA6B,IAAc;QAAd,SAAI,GAAJ,IAAI,CAAU;IAAG,CAAC;IAE/C,8EAA8E;IAC9E,iEAAiE;IACjE,KAAK,CAAC,OAAe,EAAE,MAAkB;QACxC,IAAI,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,MAAkB;QACvC,IAAI,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,IAAI,CAAC,OAAe,EAAE,MAAkB;QACvC,IAAI,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,KAAK,CAAC,OAAe,EAAE,MAAkB;QACxC,IAAI,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,8BAA8B;QAC/B,CAAC;IACF,CAAC;IACD,KAAK,CAAC,MAAiB;QACtB,IAAI,CAAC;YACJ,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;CACD;AAeD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAA4B,EAAE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC;QACJ,MAAM,OAAO,GAAG,MAAM,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,OAAO,CAAC;YACpB,KAAK;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,MAAM,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE;YACvD,SAAS,EAAE,IAAI,CAAC,MAAM;gBACrB,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE;gBAChF,CAAC,CAAC,SAAS;SACZ,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,6DAA6D;QAC7D,OAAO,CAAC,IAAI,CACX,0FAA0F,MAAM,CAAC,GAAG,CAAC,EAAE,CACvG,CAAC;QACF,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,KAAK,UAAU,eAAe;IAC7B,MAAM,SAAS,GAAG,MAAM,CAAC;IACzB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,CAAE,GAA6B,CAAC,OAAO,IAAI,GAAG,CAAgB,CAAC;QAC/E,OAAO,OAAO,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACR,yEAAyE;QACzE,sEAAsE;QACtE,2EAA2E;QAC3E,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC"}

package/dist/logging/index.d.ts

@@ -0,0 +1,3 @@
+export { createLogger, ConsoleLogger, type CreateLoggerOptions } from './PinoLogger.js';
+export { resolveRequestId, sanitizeRequestId, renderThrown, REQUEST_ID_HEADER } from './requestId.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/logging/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/logging/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACxF,OAAO,EACN,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,MAAM,gBAAgB,CAAC"}

package/dist/logging/index.js

@@ -0,0 +1,5 @@
+// Structured logging — pino-backed ILogger (optional `pino` peer, console
+// fallback) plus request-id resolution for correlation.
+export { createLogger, ConsoleLogger } from './PinoLogger.js';
+export { resolveRequestId, sanitizeRequestId, renderThrown, REQUEST_ID_HEADER } from './requestId.js';
+//# sourceMappingURL=index.js.map

package/dist/logging/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/logging/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,wDAAwD;AAExD,OAAO,EAAE,YAAY,EAAE,aAAa,EAA4B,MAAM,iBAAiB,CAAC;AACxF,OAAO,EACN,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,MAAM,gBAAgB,CAAC"}

package/dist/logging/requestId.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Request-id resolution for log correlation.
+ *
+ * Every log record on a request path carries the same `requestId`, so an
+ * operator handed one id can reconstruct that request's whole story — which is
+ * the thing 199 uncorrelated `console.*` calls could never offer.
+ *
+ * Inbound ids are TRUSTED when present. Selva is documented as running behind a
+ * reverse proxy (Caddy/nginx), and those proxies mint a request id for their own
+ * access logs; generating a second one here would split a single request across
+ * two ids and make cross-tier correlation impossible. The trade is that a direct
+ * caller can choose their own id — acceptable, because a request id is a
+ * correlation hint, never an authorization or uniqueness input. It is used only
+ * as a log field and an echoed response header.
+ *
+ * That trust is exactly why {@link sanitizeRequestId} exists: an attacker-chosen
+ * id is untrusted *content*. Unbounded or newline-carrying values would let a
+ * caller forge log lines (log injection) or bloat every record on the request.
+ */
+/** Header carrying a caller/proxy-supplied id. The de-facto standard spelling. */
+export declare const REQUEST_ID_HEADER = "x-request-id";
+/**
+ * Reduce an untrusted inbound id to something safe to stamp on every record.
+ * Returns `null` when nothing usable survives, so the caller generates instead.
+ */
+export declare function sanitizeRequestId(raw: string | null | undefined): string | null;
+/**
+ * Resolve the id for a request: reuse the proxy's when it survives
+ * sanitization, otherwise mint a fresh UUID.
+ *
+ * @param headers the inbound request headers
+ * @param generate id source; injectable so tests get deterministic ids
+ */
+export declare function resolveRequestId(headers: Headers, generate?: () => string): string;
+/**
+ * Render a thrown value into a log field.
+ *
+ * Not every rejection is an `Error` — provider adapters occasionally reject with
+ * a plain `{ message, status }` object, which would otherwise stringify to a
+ * useless `[object Object]` and destroy the only record of the failure. Errors
+ * keep their stack (that's the diagnostic); anything else is JSON-serialized,
+ * with `String()` as the last resort for cycles and exotic values.
+ */
+export declare function renderThrown(error: unknown): string;
+//# sourceMappingURL=requestId.d.ts.map

package/dist/logging/requestId.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestId.d.ts","sourceRoot":"","sources":["../../src/logging/requestId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAahD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAI/E;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAE,MAAM,MAAiB,GAAG,MAAM,CAE5F;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOnD"}

package/dist/logging/requestId.js

@@ -0,0 +1,82 @@
+/**
+ * Request-id resolution for log correlation.
+ *
+ * Every log record on a request path carries the same `requestId`, so an
+ * operator handed one id can reconstruct that request's whole story — which is
+ * the thing 199 uncorrelated `console.*` calls could never offer.
+ *
+ * Inbound ids are TRUSTED when present. Selva is documented as running behind a
+ * reverse proxy (Caddy/nginx), and those proxies mint a request id for their own
+ * access logs; generating a second one here would split a single request across
+ * two ids and make cross-tier correlation impossible. The trade is that a direct
+ * caller can choose their own id — acceptable, because a request id is a
+ * correlation hint, never an authorization or uniqueness input. It is used only
+ * as a log field and an echoed response header.
+ *
+ * That trust is exactly why {@link sanitizeRequestId} exists: an attacker-chosen
+ * id is untrusted *content*. Unbounded or newline-carrying values would let a
+ * caller forge log lines (log injection) or bloat every record on the request.
+ */
+/** Header carrying a caller/proxy-supplied id. The de-facto standard spelling. */
+export const REQUEST_ID_HEADER = 'x-request-id';
+/** Max retained length. Long enough for a UUID or a W3C trace-id, short enough to bound a record. */
+const MAX_REQUEST_ID_LENGTH = 128;
+/**
+ * Characters allowed through verbatim. Deliberately strict: UUIDs, ULIDs, hex
+ * trace-ids and nginx's `$request_id` all fit. Anything else (whitespace,
+ * control chars, quotes, CR/LF) is dropped rather than escaped — there is no
+ * legitimate id that needs them, and dropping can't be un-escaped downstream.
+ */
+const UNSAFE_REQUEST_ID_CHARS = /[^A-Za-z0-9._:-]/g;
+/**
+ * Reduce an untrusted inbound id to something safe to stamp on every record.
+ * Returns `null` when nothing usable survives, so the caller generates instead.
+ */
+export function sanitizeRequestId(raw) {
+    if (!raw)
+        return null;
+    const cleaned = raw.replace(UNSAFE_REQUEST_ID_CHARS, '').slice(0, MAX_REQUEST_ID_LENGTH);
+    return cleaned.length > 0 ? cleaned : null;
+}
+/**
+ * Resolve the id for a request: reuse the proxy's when it survives
+ * sanitization, otherwise mint a fresh UUID.
+ *
+ * @param headers the inbound request headers
+ * @param generate id source; injectable so tests get deterministic ids
+ */
+export function resolveRequestId(headers, generate = randomId) {
+    return sanitizeRequestId(headers.get(REQUEST_ID_HEADER)) ?? generate();
+}
+/**
+ * Render a thrown value into a log field.
+ *
+ * Not every rejection is an `Error` — provider adapters occasionally reject with
+ * a plain `{ message, status }` object, which would otherwise stringify to a
+ * useless `[object Object]` and destroy the only record of the failure. Errors
+ * keep their stack (that's the diagnostic); anything else is JSON-serialized,
+ * with `String()` as the last resort for cycles and exotic values.
+ */
+export function renderThrown(error) {
+    if (error instanceof Error)
+        return error.stack ?? error.message;
+    try {
+        return JSON.stringify(error) ?? String(error);
+    }
+    catch {
+        return String(error);
+    }
+}
+/**
+ * `crypto.randomUUID` is available in every runtime Selva targets (Node 22+,
+ * workers, modern browsers). The fallback covers non-secure contexts where
+ * `randomUUID` is missing — ids only need to be collision-free enough to
+ * correlate logs, never unguessable.
+ */
+function randomId() {
+    const c = globalThis.crypto;
+    if (c && typeof c.randomUUID === 'function')
+        return c.randomUUID();
+    return `req-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
+//# sourceMappingURL=requestId.js.map

package/dist/logging/requestId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requestId.js","sourceRoot":"","sources":["../../src/logging/requestId.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC;AAEhD,qGAAqG;AACrG,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC;;;;;GAKG;AACH,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAA8B;IAC/D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACzF,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,WAAyB,QAAQ;IACnF,OAAO,iBAAiB,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,QAAQ,EAAE,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAc;IAC1C,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC;IAChE,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,SAAS,QAAQ;IAChB,MAAM,CAAC,GAAuB,UAAU,CAAC,MAAM,CAAC;IAChD,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACnE,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpF,CAAC"}

package/dist/providers/create-selva-providers.d.ts

@@ -1,4 +1,5 @@
 import type { IAuthProvider, IDataProvider, IStorageProvider, ISolveMetricSink, SelvaBranding, SelvaConfig, SelvaFlags, TenancyMode } from '@selvajs/platform';
+import { type ILogger } from '@selvajs/platform';
 import { type EnvRecord } from '../compute/limits.js';
 export type ProviderFactory<T> = (env: EnvRecord) => T;
 /**
@@ -21,8 +22,17 @@ export interface CreateSelvaProvidersOptions {
      * export (a `SelvaConfig` or factory) replaces the env-driven wiring.
      */
     configPath?: string;
-    /** Boot-summary sink, called once on first `resolve()`. Default: `console.info`. */
+    /**
+     * Boot-summary sink, called once on first `resolve()`. Kept for callers that
+     * want the rendered one-line string. Default: none — the summary goes to
+     * `logger` instead, so this library never writes to stdout unbidden.
+     */
     onBoot?: (summary: string) => void;
+    /**
+     * Structured logger. Receives the boot summary as fields on first `resolve()`
+     * when `onBoot` is not supplied. Defaults to `NoopLogger`.
+     */
+    logger?: ILogger;
 }
 export interface SelvaProviderRuntime {
     /**

package/dist/providers/create-selva-providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-selva-providers.d.ts","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EAEX,UAAU,EACV,WAAW,EACX,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,KAAK,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oFAAoF;IACpF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,OAAO,IAAI,WAAW,CAAC;IACvB,OAAO,IAAI,WAAW,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,2DAA2D;IAC3D,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;IACtC,8EAA8E;IAC9E,eAAe,IAAI,gBAAgB,CAAC;CACpC;AAkGD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CAkD/B"}
+{"version":3,"file":"create-selva-providers.d.ts","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACX,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACb,WAAW,EAEX,UAAU,EACV,WAAW,EACX,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAkD,KAAK,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAY,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEhE,MAAM,MAAM,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,KAAK,CAAC,CAAC;AAEvD;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,GAAG,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;OAGG;IACH,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,OAAO,IAAI,WAAW,CAAC;IACvB,OAAO,IAAI,WAAW,CAAC;IACvB,6EAA6E;IAC7E,QAAQ,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpC,2DAA2D;IAC3D,IAAI,CAAC,IAAI,EAAE,MAAM,UAAU,GAAG,OAAO,CAAC;IACtC,8EAA8E;IAC9E,eAAe,IAAI,gBAAgB,CAAC;CACpC;AAkGD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACzC,GAAG,EAAE,SAAS,EACd,OAAO,EAAE,2BAA2B,GAClC,OAAO,CAAC,oBAAoB,CAAC,CA+D/B"}

package/dist/providers/create-selva-providers.js

@@ -21,7 +21,7 @@
 import { pathToFileURL } from 'node:url';
 import { resolve as resolvePath } from 'node:path';
 import { existsSync } from 'node:fs';
-import { isFlagEnabled, NoopSolveMetricSink } from '@selvajs/platform';
+import { isFlagEnabled, NoopSolveMetricSink, NoopLogger } from '@selvajs/platform';
 import { readBool } from '../compute/limits.js';
 // Every SelvaFlags key, mapped from `SELVA_FLAG_<KEY>`. The `satisfies` +
 // exhaustiveness check below make adding a platform flag without listing it
@@ -107,7 +107,7 @@ async function loadConfigSource(options) {
  */
 export async function createSelvaProviders(env, options) {
     const raw = await loadConfigSource(options);
-    const onBoot = options.onBoot ?? console.info;
+    const logger = options.logger ?? new NoopLogger();
     let config;
     let solveMetricSink;
     function resolve() {
@@ -118,12 +118,25 @@ export async function createSelvaProviders(env, options) {
         // wired without grepping env vars or reading the config file. Provider
         // names come from the IAuthProvider.name field; data/storage adapters
         // don't expose a name, so we infer from the constructor.
-        onBoot(`[selva] providers wired: ` +
-            `auth=${config.auth.name} ` +
-            `data=${config.data.constructor.name} ` +
-            `storage=${config.storage.constructor.name} ` +
-            `tenancy=${config.tenancy ?? 'single'}` +
-            (options.configPath ? ` config=${options.configPath}` : ''));
+        const wiring = {
+            component: 'selva',
+            auth: config.auth.name,
+            data: config.data.constructor.name,
+            storage: config.storage.constructor.name,
+            tenancy: config.tenancy ?? 'single',
+            ...(options.configPath ? { configPath: options.configPath } : {})
+        };
+        if (options.onBoot) {
+            options.onBoot(`[selva] providers wired: ` +
+                `auth=${wiring.auth} ` +
+                `data=${wiring.data} ` +
+                `storage=${wiring.storage} ` +
+                `tenancy=${wiring.tenancy}` +
+                (options.configPath ? ` config=${options.configPath}` : ''));
+        }
+        else {
+            logger.info('Providers wired', wiring);
+        }
         return config;
     }
     return {

package/dist/providers/create-selva-providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-selva-providers.js","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gDAAgD;AAChD,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYrC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACvE,OAAO,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AA8ChE,0EAA0E;AAC1E,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,SAAS,GAAG;IACjB,wBAAwB;IACxB,4BAA4B;IAC5B,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;CACiC,CAAC;AAKnD,MAAM,eAAe,GAAmB,IAAI,CAAC;AAE7C,SAAS,IAAI,CACZ,GAAc,EACd,MAAc,EACd,IAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC5C,MAAM,SAAS,GAAI,IAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,SAAS,IAAI,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,SAA6B,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAChE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACxF,OAAO;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CACxE;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,OAAO,EAAE,GAAG,CAAC,mBAAmB;gBAChC,WAAW,EAAE,GAAG,CAAC,uBAAuB;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC;YAChF,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC;YAC5F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;SACpC,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,OAAO,CAAC,UAAU,gBAAgB,GAAG,wBAAwB,CACrF,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAEpE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAc,EACd,OAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAE9C,IAAI,MAA+B,CAAC;IACpC,IAAI,eAA6C,CAAC;IAElD,SAAS,OAAO;QACf,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEpD,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,CACL,2BAA2B;YAC1B,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG;YAC3B,QAAQ,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,GAAG;YACvC,WAAW,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,GAAG;YAC7C,WAAW,MAAM,CAAC,OAAO,IAAI,QAAQ,EAAE;YACvC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QAEF,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,QAAQ;QAC5C,QAAQ,EAAE,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAC3C,OAAO;gBACN,IAAI;gBACJ,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,yDAAyD;gBAC3F,WAAW,EACV,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;oBACzB,yFAAyF,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;QAC9C,eAAe,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,OAAO,EAAE,CAAC,YAAY,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC"}
+{"version":3,"file":"create-selva-providers.js","sourceRoot":"","sources":["../../src/providers/create-selva-providers.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,2EAA2E;AAC3E,2EAA2E;AAC3E,oCAAoC;AACpC,EAAE;AACF,oEAAoE;AACpE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,gDAAgD;AAChD,EAAE;AACF,6CAA6C;AAC7C,EAAE;AACF,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAYrC,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,UAAU,EAAgB,MAAM,mBAAmB,CAAC;AACjG,OAAO,EAAE,QAAQ,EAAkB,MAAM,sBAAsB,CAAC;AAuDhE,0EAA0E;AAC1E,4EAA4E;AAC5E,wBAAwB;AACxB,MAAM,SAAS,GAAG;IACjB,wBAAwB;IACxB,4BAA4B;IAC5B,oBAAoB;IACpB,0BAA0B;IAC1B,gBAAgB;CACiC,CAAC;AAKnD,MAAM,eAAe,GAAmB,IAAI,CAAC;AAE7C,SAAS,IAAI,CACZ,GAAc,EACd,MAAc,EACd,IAAwC,EACxC,QAAgB;IAEhB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,MAAM,KAAK,MAAM,gBAAgB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,GAAc;IAClC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,8BAA8B,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,IAAmB;IAC5C,MAAM,SAAS,GAAI,IAAmC,CAAC,YAAY,CAAC;IACpE,IAAI,SAAS,IAAI,OAAQ,SAAkC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnF,OAAO,SAA6B,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAoC;IAChE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IACvC,OAAO,CAAC,GAAG,EAAE,EAAE;QACd,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,CAAC;QACxF,OAAO;YACN,OAAO,EAAE,WAAW,CAAC,GAAG,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,WAAW,CACxB,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,cAAc,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CACxE;YACD,QAAQ,EAAE;gBACT,IAAI,EAAE,GAAG,CAAC,gBAAgB;gBAC1B,aAAa,EAAE,GAAG,CAAC,0BAA0B;gBAC7C,OAAO,EAAE,GAAG,CAAC,mBAAmB;gBAChC,WAAW,EAAE,GAAG,CAAC,uBAAuB;aACxC;YACD,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,qBAAqB,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC;YAChF,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,IAAI,OAAO,CAAC;YAC5F,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC;SACpC,CAAC;IACH,CAAC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC9B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QACzB,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACd,wBAAwB,OAAO,CAAC,UAAU,gBAAgB,GAAG,wBAAwB,CACrF,CAAC;IACH,CAAC;IACD,yEAAyE;IACzE,0EAA0E;IAC1E,kBAAkB;IAClB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAEpE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,GAAc,EACd,OAAoC;IAEpC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;IAElD,IAAI,MAA+B,CAAC;IACpC,IAAI,eAA6C,CAAC;IAElD,SAAS,OAAO;QACf,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,GAAG,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAEpD,sEAAsE;QACtE,uEAAuE;QACvE,sEAAsE;QACtE,yDAAyD;QACzD,MAAM,MAAM,GAAG;YACd,SAAS,EAAE,OAAO;YAClB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;YACtB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI;YAClC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI;YACxC,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,QAAQ;YACnC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CACb,2BAA2B;gBAC1B,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,QAAQ,MAAM,CAAC,IAAI,GAAG;gBACtB,WAAW,MAAM,CAAC,OAAO,GAAG;gBAC5B,WAAW,MAAM,CAAC,OAAO,EAAE;gBAC3B,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;QACH,CAAC;aAAM,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAED,OAAO;QACN,OAAO;QACP,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,OAAO,IAAI,QAAQ;QAC5C,QAAQ,EAAE,GAAG,EAAE;YACd,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC;YAC3C,OAAO;gBACN,IAAI;gBACJ,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,IAAI;gBAClD,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,yDAAyD;gBAC3F,WAAW,EACV,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;oBACzB,yFAAyF,IAAI,GAAG;aACjG,CAAC;QACH,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC;QAC9C,eAAe,EAAE,GAAG,EAAE;YACrB,IAAI,CAAC,eAAe,EAAE,CAAC;gBACtB,eAAe,GAAG,OAAO,EAAE,CAAC,YAAY,IAAI,IAAI,mBAAmB,EAAE,CAAC;YACvE,CAAC;YACD,OAAO,eAAe,CAAC;QACxB,CAAC;KACD,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selvajs/server",
-  "version": "0.2.0-beta.4",
+  "version": "0.2.0-beta.5",
   "description": "Transport-agnostic compute/solve/definitions server building blocks for apps built on the Selva engine (limits, rate limiting, SSRF guard, input transform, solve pipeline, definition service + render loader)",
   "license": "MIT",
   "publishConfig": {
@@ -42,6 +42,10 @@
       "types": "./dist/errors/index.d.ts",
       "import": "./dist/errors/index.js"
     },
+    "./logging": {
+      "types": "./dist/logging/index.d.ts",
+      "import": "./dist/logging/index.js"
+    },
     "./http": {
       "types": "./dist/http/index.d.ts",
       "import": "./dist/http/index.js"
@@ -62,16 +66,20 @@
     "!**/*.spec.*"
   ],
   "dependencies": {
-    "@selvajs/compute": "^3.1.0-beta.11",
+    "@selvajs/compute": "^3.1.0-beta.12",
     "@selvajs/platform": "^0.15.0-beta.1",
     "@selvajs/schemas": "^4.7.0-beta.0"
   },
   "peerDependencies": {
-    "@sentry/node": ">=8"
+    "@sentry/node": ">=8",
+    "pino": ">=9"
   },
   "peerDependenciesMeta": {
     "@sentry/node": {
       "optional": true
+    },
+    "pino": {
+      "optional": true
     }
   },
   "devDependencies": {